smb3: clarify mount warning

[ Upstream commit a5cc98eba2592d6e3c5a4351319595ddde2a5901 ]

When a user tries to use the "sec=krb5p" mount parameter to encrypt
data on connection to a server (when authenticating with Kerberos), we
indicate that it is not supported, but do not note the equivalent
recommended mount parameter ("sec=krb5,seal") which turns on encryption
for that mount (and uses Kerberos for auth).  Update the warning message.

Reviewed-by: Shyam Prasad N <sprasad@microsoft.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
This commit is contained in:
Steve French
2024-02-06 23:57:18 -06:00
committed by Greg Kroah-Hartman
parent db48acce75
commit 4dd73641d7

View File

@@ -209,7 +209,7 @@ cifs_parse_security_flavors(struct fs_context *fc, char *value, struct smb3_fs_c
switch (match_token(value, cifs_secflavor_tokens, args)) { switch (match_token(value, cifs_secflavor_tokens, args)) {
case Opt_sec_krb5p: case Opt_sec_krb5p:
cifs_errorf(fc, "sec=krb5p is not supported!\n"); cifs_errorf(fc, "sec=krb5p is not supported. Use sec=krb5,seal instead\n");
return 1; return 1;
case Opt_sec_krb5i: case Opt_sec_krb5i:
ctx->sign = true; ctx->sign = true;