ksmbd: expire SMB sessions when Kerberos tickets expire

Browse source

Store the expiry time from the Kerberos authentication response in
the session and reject requests after that time with
STATUS_NETWORK_SESSION_EXPIRED.

Allow an expired Kerberos session to be reauthenticated. Keep the old SMB
signing key until its SESSION_SETUP response has been signed, then install
the new session key and regenerate the SMB3 keys.

Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>

...

This commit is contained in:

Namjae Jeon 2026-07-26 22:49:45 +09:00

parent 84c41b731b

commit a47634cd72

7 changed files with 236 additions and 80 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

18

fs/smb/server/auth.c

View file

1

fs/smb/server/ksmbd_netlink.h

View file

1

fs/smb/server/ksmbd_work.h

View file

14

fs/smb/server/mgmt/user_session.c

View file

3

fs/smb/server/mgmt/user_session.h

View file

9

fs/smb/server/server.c

View file

270

fs/smb/server/smb2pdu.c

View file