| 2020-02-11 23:40:46 |
steveb |
bug |
|
|
added bug |
| 2020-02-12 00:00:08 |
Ubuntu Kernel Bot |
linux (Ubuntu): status |
New |
Incomplete |
|
| 2020-02-12 00:00:09 |
Ubuntu Kernel Bot |
tags |
|
eoan |
|
| 2020-02-12 09:29:03 |
steveb |
tags |
eoan |
apport-collected eoan |
|
| 2020-02-12 09:29:04 |
steveb |
description |
kubuntu 19.10 with kernel 5.3.0-29-generic and64.
This looks like a regression in the kernel CIFS module after the 4.15 & 5.0 kernels.
These earlier kernels follow the DFS referrals without error.
The problem:
- Use mount.cifs with kerberos authentication to mount a samba server hosting a DFS root.
You will get a KRB ticket for the "dfs_root" machine.
- Attempt to access a host a host via a DFS referral (call this "target_host")
- Access will fail with "Permission Denied".
- Use Wireshark to monitor CIFS and KRB traffic.
- The kernel attempts to authenticate to "target_host" using the KRB ticket for "dfs_root".
Note:
- A DFS target running Win2008R2 will reply with STATUS_MORE_PROCESSING_REQUIRED, then the
kernel will get a KRB ticket for "target_host" and use it.
The connection is then successful.
- A DFS target running Samba 4.7.6 will reply with STATUS_LOGON_FAILURE.
The connection fails.
Expected Result:
- Successful connection.
- The kernel should get a KRB ticket for "target_host" and use it.
(This is what kernels 4.15 and 5.0 do [and a Windows client]) |
kubuntu 19.10 with kernel 5.3.0-29-generic and64.
This looks like a regression in the kernel CIFS module after the 4.15 & 5.0 kernels.
These earlier kernels follow the DFS referrals without error.
The problem:
- Use mount.cifs with kerberos authentication to mount a samba server hosting a DFS root.
You will get a KRB ticket for the "dfs_root" machine.
- Attempt to access a host a host via a DFS referral (call this "target_host")
- Access will fail with "Permission Denied".
- Use Wireshark to monitor CIFS and KRB traffic.
- The kernel attempts to authenticate to "target_host" using the KRB ticket for "dfs_root".
Note:
- A DFS target running Win2008R2 will reply with STATUS_MORE_PROCESSING_REQUIRED, then the
kernel will get a KRB ticket for "target_host" and use it.
The connection is then successful.
- A DFS target running Samba 4.7.6 will reply with STATUS_LOGON_FAILURE.
The connection fails.
Expected Result:
- Successful connection.
- The kernel should get a KRB ticket for "target_host" and use it.
(This is what kernels 4.15 and 5.0 do [and a Windows client])
---
ProblemType: Bug
ApportVersion: 2.20.11-0ubuntu8.2
Architecture: amd64
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/controlC3: stephen 1839 F.... pulseaudio
/dev/snd/controlC2: stephen 1839 F.... pulseaudio
/dev/snd/controlC0: stephen 1839 F.... pulseaudio
/dev/snd/controlC1: stephen 1839 F.... pulseaudio
CurrentDesktop: KDE
DistroRelease: Ubuntu 19.10
HibernationDevice: RESUME=UUID=4df5ccea-5eb4-45e3-a0b0-7b1311fdaba5
InstallationDate: Installed on 2018-11-09 (459 days ago)
InstallationMedia: Kubuntu 18.10 "Cosmic Cuttlefish" - Release amd64 (20181017.2)
MachineType: Gigabyte Technology Co., Ltd. GA-MA790X-UD4P
NonfreeKernelModules: nvidia_modeset nvidia
Package: linux (not installed)
ProcFB: 0 VESA VGA
ProcKernelCmdLine: BOOT_IMAGE=/@/boot/vmlinuz-5.3.0-29-generic root=UUID=f009da0b-176e-49e6-a6a0-bb594e6754a8 ro rootflags=subvol=@
ProcVersionSignature: Ubuntu 5.3.0-29.31-generic 5.3.13
RelatedPackageVersions:
linux-restricted-modules-5.3.0-29-generic N/A
linux-backports-modules-5.3.0-29-generic N/A
linux-firmware 1.183.3
RfKill:
Tags: eoan
Uname: Linux 5.3.0-29-generic x86_64
UpgradeStatus: Upgraded to eoan on 2019-10-20 (114 days ago)
UserGroups: adm bacula cdrom kvm libvirt lpadmin plugdev sambashare sudo wireshark
_MarkForUpload: True
dmi.bios.date: 09/08/2010
dmi.bios.vendor: Award Software International, Inc.
dmi.bios.version: F10c
dmi.board.name: GA-MA790X-UD4P
dmi.board.vendor: Gigabyte Technology Co., Ltd.
dmi.board.version: x.x
dmi.chassis.type: 3
dmi.chassis.vendor: Gigabyte Technology Co., Ltd.
dmi.modalias: dmi:bvnAwardSoftwareInternational,Inc.:bvrF10c:bd09/08/2010:svnGigabyteTechnologyCo.,Ltd.:pnGA-MA790X-UD4P:pvr:rvnGigabyteTechnologyCo.,Ltd.:rnGA-MA790X-UD4P:rvrx.x:cvnGigabyteTechnologyCo.,Ltd.:ct3:cvr:
dmi.product.name: GA-MA790X-UD4P
dmi.sys.vendor: Gigabyte Technology Co., Ltd. |
|
| 2020-02-12 09:29:06 |
steveb |
attachment added |
|
AlsaInfo.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327613/+files/AlsaInfo.txt |
|
| 2020-02-12 09:29:08 |
steveb |
attachment added |
|
CRDA.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327614/+files/CRDA.txt |
|
| 2020-02-12 09:29:11 |
steveb |
attachment added |
|
CurrentDmesg.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327615/+files/CurrentDmesg.txt |
|
| 2020-02-12 09:29:13 |
steveb |
attachment added |
|
IwConfig.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327616/+files/IwConfig.txt |
|
| 2020-02-12 09:29:15 |
steveb |
attachment added |
|
Lspci.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327617/+files/Lspci.txt |
|
| 2020-02-12 09:29:17 |
steveb |
attachment added |
|
Lsusb.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327618/+files/Lsusb.txt |
|
| 2020-02-12 09:29:19 |
steveb |
attachment added |
|
ProcCpuinfo.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327619/+files/ProcCpuinfo.txt |
|
| 2020-02-12 09:29:20 |
steveb |
attachment added |
|
ProcCpuinfoMinimal.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327620/+files/ProcCpuinfoMinimal.txt |
|
| 2020-02-12 09:29:22 |
steveb |
attachment added |
|
ProcEnviron.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327621/+files/ProcEnviron.txt |
|
| 2020-02-12 09:29:24 |
steveb |
attachment added |
|
ProcInterrupts.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327622/+files/ProcInterrupts.txt |
|
| 2020-02-12 09:29:25 |
steveb |
attachment added |
|
ProcModules.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327623/+files/ProcModules.txt |
|
| 2020-02-12 09:29:27 |
steveb |
attachment added |
|
PulseList.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327624/+files/PulseList.txt |
|
| 2020-02-12 09:29:29 |
steveb |
attachment added |
|
UdevDb.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327625/+files/UdevDb.txt |
|
| 2020-02-12 09:29:32 |
steveb |
attachment added |
|
WifiSyslog.txt https://bugs.launchpad.net/bugs/1862858/+attachment/5327626/+files/WifiSyslog.txt |
|
| 2020-02-15 04:50:34 |
steveb |
summary |
CIFS acesses DFS referral with wrong Kerberos ticket |
CIFS accesses DFS referral with wrong Kerberos ticket |
|
| 2020-02-16 07:38:52 |
steveb |
linux (Ubuntu): status |
Incomplete |
Confirmed |
|
| 2020-03-31 06:38:03 |
Kai-Heng Feng |
linux (Ubuntu): status |
Confirmed |
Incomplete |
|
| 2020-04-04 09:01:31 |
steveb |
linux (Ubuntu): status |
Incomplete |
Confirmed |
|
