kernel.git/net/sunrpc/auth.c, branch linux-2.6.28.y

SUNRPC: Fix potential race in put_rpccred()

2008-10-28T19:21:42Z

We have to be careful when we try to unhash the credential in put_rpccred(), because we're not holding the credcache lock, so the call to rpcauth_unhash_cred() may fail if someone else has looked the cred up, and obtained a reference to it. Signed-off-by: Trond Myklebust

SUNRPC: Fix rpcauth_prune_expired

2008-10-28T19:21:41Z

We need to make sure that we don't remove creds from the cred_unused list if they are still under the moratorium, or else they will never get garbage collected. Signed-off-by: Trond Myklebust

net: Remove CONFIG_KMOD from net/ (towards removing CONFIG_KMOD entirely)

2008-10-16T22:24:51Z

Some code here depends on CONFIG_KMOD to not try to load protocol modules or similar, replace by CONFIG_MODULES where more than just request_module depends on CONFIG_KMOD and and also use try_then_request_module in ebtables. Signed-off-by: Johannes Berg Signed-off-by: Rusty Russell Signed-off-by: David S. Miller

SUNRPC: Protect creds against early garbage collection

2008-04-19T20:55:02Z

Signed-off-by: Trond Myklebust

SUNRPC: Add a helper rpcauth_lookup_generic_cred()

2008-03-14T17:42:49Z

The NFSv4 protocol allows clients to negotiate security protocols on the fly in the case where an administrator on the server changes the export settings and/or in the case where we may have a filesystem migration event. Instead of having the NFS client code cache credentials that are tied to a particular AUTH method it is therefore preferable to have a generic credential that can be converted into whatever AUTH is in use by the RPC client when the read/write/sillyrename/... is put on the wire. We do this by means of the new "generic" credential, which basically just caches the minimal information that is needed to look up an RPCSEC_GSS, AUTH_SYS, or AUTH_NULL credential. Signed-off-by: Trond Myklebust

SUNRPC: Add an rpc_credop callback for binding a credential to an rpc_task

2008-03-14T17:42:41Z

We need the ability to treat 'generic' creds specially, since they want to bind instances of the auth cred instead of binding themselves. Signed-off-by: Trond Myklebust

SUNRPC: Add a generic RPC credential

2008-03-14T17:42:38Z

Add an rpc credential that is not tied to any particular auth mechanism, but that can be cached by NFS, and later used to look up a cred for whichever auth mechanism that turns out to be valid when the RPC call is being made. Signed-off-by: Trond Myklebust

SUNRPC: Clean up rpcauth_bindcred()

2008-03-14T17:42:35Z

Signed-off-by: Trond Myklebust

SUNRPC: Fix RPCAUTH_LOOKUP_ROOTCREDS

2008-03-14T17:42:32Z

The current RPCAUTH_LOOKUP_ROOTCREDS flag only works for AUTH_SYS authentication, and then only as a special case in the code. This patch removes the auth_sys special casing, and replaces it with generic code. Signed-off-by: Trond Myklebust

SUNRPC: Fix a bug in rpcauth_lookup_credcache()

2008-03-14T17:42:29Z

The hash bucket is for some reason always being set to zero. Signed-off-by: Trond Myklebust