From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from air.basealt.ru (air.basealt.ru [193.43.8.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 6A6211A38F9 for ; Tue, 30 Dec 2025 16:48:53 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=193.43.8.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1767113337; cv=none; b=caUR/bfu7GDtgrVflq27usMwQZ0s1SpMSQNxtHPjxqptZ+kP7+rpzC1xaY0YQ21VdSs5A84+cP8O7BD0q/ZQm7o7J8Y6YGCVE+o1WE+q5XjY67Rnq0pY4d8ioJsP5JCpH7bw35wjGc4mkMLg56s2WgK4koZZ6qQdAGl1SWko7hs= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1767113337; c=relaxed/simple; bh=Eb/ydp10nAC4Z9OugI1M0Rof5+Bt06PSsoXl9leeQwc=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=OhbVSa2jcsOqKebLRUJ6Wxn4gNem8Y/jWnc/649cjqPp7u/OSszq+Kh6r4ZLH6XHpqs77FF56kHt1JXiBz3oD+stMHCwIfTqYui0z3oe9anrxcOiBY9A9eUcxlQz/sPrrSmjimY4CAVhiS9OnEV0RXm+VhRCZIxyWB46+RiPVVc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=altlinux.org; spf=pass smtp.mailfrom=altlinux.org; arc=none smtp.client-ip=193.43.8.18 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=altlinux.org Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=altlinux.org Received: from lenovo-93812.smb.basealt.ru (unknown [193.43.11.202]) (Authenticated sender: alekseevamo) by air.basealt.ru (Postfix) with ESMTPSA id A77B323377; Tue, 30 Dec 2025 19:48:49 +0300 (MSK) From: Maria Alexeeva To: smfrench@gmail.com Cc: pc@manguebit.com, linux-cifs@vger.kernel.org, samba-technical@lists.samba.org, tom@talpey.com, vt@altlinux.org, Maria Alexeeva , Ivan Volchenko Subject: [PATCH v3 1/1] fs/smb/client/fs_context: Add hostname option for CIFS module to work with domain-based dfs resources with Kerberos authentication Date: Tue, 30 Dec 2025 20:47:59 +0400 Message-ID: <20251230164759.259346-2-alxvmr@altlinux.org> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20251230164759.259346-1-alxvmr@altlinux.org> References: <20251230164759.259346-1-alxvmr@altlinux.org> Precedence: bulk X-Mailing-List: linux-cifs@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Paths to domain-based dfs resources are defined using the domain name of the server in the format: \\\\ The CIFS module, when requesting a TGS, uses the server name () it obtained from the UNC for the initial connection. It then composes an SPN that does not match any entities in the domain because it is the domain name itself. To eliminate this behavior, a hostname option is added, which is the name of the server to connect to and is used in composing the SPN. In the future this option will be used in the cifs-utils development. Suggested-by: Ivan Volchenko Signed-off-by: Maria Alexeeva --- fs/smb/client/fs_context.c | 35 +++++++++++++++++++++++++++++------ fs/smb/client/fs_context.h | 3 +++ 2 files changed, 32 insertions(+), 6 deletions(-) diff --git a/fs/smb/client/fs_context.c b/fs/smb/client/fs_context.c index d4291d3a9a48..f0d1895fe4bb 100644 --- a/fs/smb/client/fs_context.c +++ b/fs/smb/client/fs_context.c @@ -177,6 +177,7 @@ const struct fs_parameter_spec smb3_fs_parameters[] = { fsparam_string("password2", Opt_pass2), fsparam_string("ip", Opt_ip), fsparam_string("addr", Opt_ip), + fsparam_string("hostname", Opt_hostname), fsparam_string("domain", Opt_domain), fsparam_string("dom", Opt_domain), fsparam_string("srcaddr", Opt_srcaddr), @@ -866,16 +867,23 @@ static int smb3_fs_context_validate(struct fs_context *fc) return -ENOENT; } + if (ctx->got_opt_hostname) { + kfree(ctx->server_hostname); + ctx->server_hostname = ctx->opt_hostname; + pr_notice("changing server hostname to name provided in hostname= option\n"); + } + if (!ctx->got_ip) { int len; - const char *slash; - /* No ip= option specified? Try to get it from UNC */ - /* Use the address part of the UNC. */ - slash = strchr(&ctx->UNC[2], '\\'); - len = slash - &ctx->UNC[2]; + /* + * No ip= option specified? Try to get it from server_hostname + * Use the address part of the UNC parsed into server_hostname + * or hostname= option if specified. + */ + len = strlen(ctx->server_hostname); if (!cifs_convert_address((struct sockaddr *)&ctx->dstaddr, - &ctx->UNC[2], len)) { + ctx->server_hostname, len)) { pr_err("Unable to determine destination address\n"); return -EHOSTUNREACH; } @@ -1591,6 +1599,21 @@ static int smb3_fs_context_parse_param(struct fs_context *fc, } ctx->got_ip = true; break; + case Opt_hostname: + if (strnlen(param->string, CIFS_NI_MAXHOST) == CIFS_NI_MAXHOST) { + pr_warn("host name too long\n"); + goto cifs_parse_mount_err; + } + + kfree(ctx->opt_hostname); + ctx->opt_hostname = kstrdup(param->string, GFP_KERNEL); + if (ctx->opt_hostname == NULL) { + cifs_errorf(fc, "OOM when copying hostname string\n"); + goto cifs_parse_mount_err; + } + cifs_dbg(FYI, "Host name set\n"); + ctx->got_opt_hostname = true; + break; case Opt_domain: if (strnlen(param->string, CIFS_MAX_DOMAINNAME_LEN) == CIFS_MAX_DOMAINNAME_LEN) { diff --git a/fs/smb/client/fs_context.h b/fs/smb/client/fs_context.h index 7af7cbbe4208..ff1a04661ef5 100644 --- a/fs/smb/client/fs_context.h +++ b/fs/smb/client/fs_context.h @@ -184,6 +184,7 @@ enum cifs_param { Opt_pass, Opt_pass2, Opt_ip, + Opt_hostname, Opt_domain, Opt_srcaddr, Opt_iocharset, @@ -214,6 +215,7 @@ struct smb3_fs_context { bool gid_specified; bool sloppy; bool got_ip; + bool got_opt_hostname; bool got_version; bool got_rsize; bool got_wsize; @@ -226,6 +228,7 @@ struct smb3_fs_context { char *domainname; char *source; char *server_hostname; + char *opt_hostname; char *UNC; char *nodename; char workstation_name[CIFS_MAX_WORKSTATION_LEN]; -- 2.50.1