| [596] | 1 | '\" t
|
|---|
| [429] | 2 | .\" Title: cifs.upcall
|
|---|
| 3 | .\" Author: [see the "AUTHOR" section]
|
|---|
| [596] | 4 | .\" Generator: DocBook XSL Stylesheets v1.75.2 <http://docbook.sf.net/>
|
|---|
| [773] | 5 | .\" Date: 12/14/2012
|
|---|
| [429] | 6 | .\" Manual: System Administration tools
|
|---|
| 7 | .\" Source: Samba 3.5
|
|---|
| 8 | .\" Language: English
|
|---|
| 9 | .\"
|
|---|
| [773] | 10 | .TH "CIFS\&.UPCALL" "8" "12/14/2012" "Samba 3\&.5" "System Administration tools"
|
|---|
| [429] | 11 | .\" -----------------------------------------------------------------
|
|---|
| 12 | .\" * set default formatting
|
|---|
| 13 | .\" -----------------------------------------------------------------
|
|---|
| 14 | .\" disable hyphenation
|
|---|
| 15 | .nh
|
|---|
| 16 | .\" disable justification (adjust text to left margin only)
|
|---|
| 17 | .ad l
|
|---|
| 18 | .\" -----------------------------------------------------------------
|
|---|
| 19 | .\" * MAIN CONTENT STARTS HERE *
|
|---|
| 20 | .\" -----------------------------------------------------------------
|
|---|
| [596] | 21 | .SH "NAME"
|
|---|
| [429] | 22 | cifs.upcall \- Userspace upcall helper for Common Internet File System (CIFS)
|
|---|
| [596] | 23 | .SH "SYNOPSIS"
|
|---|
| [429] | 24 | .HP \w'\ 'u
|
|---|
| [596] | 25 | cifs\&.upcall [\-\-trust\-dns|\-t] [\-\-version|\-v] {keyid}
|
|---|
| [429] | 26 | .SH "DESCRIPTION"
|
|---|
| 27 | .PP
|
|---|
| 28 | This tool is part of the
|
|---|
| 29 | \fBsamba\fR(7)
|
|---|
| 30 | suite\&.
|
|---|
| 31 | .PP
|
|---|
| 32 | cifs\&.upcall is a userspace helper program for the linux CIFS client filesystem\&. There are a number of activities that the kernel cannot easily do itself\&. This program is a callout program that does these things for the kernel and then returns the result\&.
|
|---|
| 33 | .PP
|
|---|
| 34 | cifs\&.upcall is generally intended to be run when the kernel calls request\-key(8)
|
|---|
| 35 | for a particular key type\&. While it can be run directly from the command\-line, it\'s not generally intended to be run that way\&.
|
|---|
| 36 | .SH "OPTIONS"
|
|---|
| 37 | .PP
|
|---|
| 38 | \-c
|
|---|
| 39 | .RS 4
|
|---|
| 40 | This option is deprecated and is currently ignored\&.
|
|---|
| 41 | .RE
|
|---|
| 42 | .PP
|
|---|
| 43 | \-\-trust\-dns|\-t
|
|---|
| 44 | .RS 4
|
|---|
| 45 | With krb5 upcalls, the name used as the host portion of the service principal defaults to the hostname portion of the UNC\&. This option allows the upcall program to reverse resolve the network address of the server in order to get the hostname\&.
|
|---|
| 46 | .sp
|
|---|
| 47 | This is less secure than not trusting DNS\&. When using this option, it\'s possible that an attacker could get control of DNS and trick the client into mounting a different server altogether\&. It\'s preferable to instead add server principals to the KDC for every possible hostname, but this option exists for cases where that isn\'t possible\&. The default is to not trust reverse hostname lookups in this fashion\&.
|
|---|
| 48 | .RE
|
|---|
| 49 | .PP
|
|---|
| 50 | \-\-version|\-v
|
|---|
| 51 | .RS 4
|
|---|
| 52 | Print version number and exit\&.
|
|---|
| 53 | .RE
|
|---|
| 54 | .SH "CONFIGURATION FOR KEYCTL"
|
|---|
| 55 | .PP
|
|---|
| 56 | cifs\&.upcall is designed to be called from the kernel via the request\-key callout program\&. This requires that request\-key be told where and how to call this program\&. The current cifs\&.upcall program handles two different key types:
|
|---|
| 57 | .PP
|
|---|
| 58 | cifs\&.spnego
|
|---|
| 59 | .RS 4
|
|---|
| 60 | This keytype is for retrieving kerberos session keys
|
|---|
| 61 | .RE
|
|---|
| 62 | .PP
|
|---|
| 63 | dns_resolver
|
|---|
| 64 | .RS 4
|
|---|
| 65 | This key type is for resolving hostnames into IP addresses
|
|---|
| 66 | .RE
|
|---|
| 67 | .PP
|
|---|
| 68 | To make this program useful for CIFS, you\'ll need to set up entries for them in request\-key\&.conf(5)\&. Here\'s an example of an entry for each key type:
|
|---|
| 69 | .sp
|
|---|
| 70 | .if n \{\
|
|---|
| 71 | .RS 4
|
|---|
| 72 | .\}
|
|---|
| 73 | .nf
|
|---|
| 74 | #OPERATION TYPE D C PROGRAM ARG1 ARG2\&.\&.\&.
|
|---|
| 75 | #========= ============= = = ================================
|
|---|
| 76 | create cifs\&.spnego * * /usr/local/sbin/cifs\&.upcall %k
|
|---|
| 77 | create dns_resolver * * /usr/local/sbin/cifs\&.upcall %k
|
|---|
| 78 | .fi
|
|---|
| 79 | .if n \{\
|
|---|
| 80 | .RE
|
|---|
| 81 | .\}
|
|---|
| 82 | .PP
|
|---|
| 83 | See
|
|---|
| 84 | \fBrequest-key.conf5\fR()
|
|---|
| 85 | for more info on each field\&.
|
|---|
| 86 | .SH "SEE ALSO"
|
|---|
| 87 | .PP
|
|---|
| 88 |
|
|---|
| 89 | \fBrequest-key.conf\fR(5),
|
|---|
| 90 | \fBmount.cifs\fR(8)
|
|---|
| 91 | .SH "AUTHOR"
|
|---|
| 92 | .PP
|
|---|
| 93 | Igor Mammedov wrote the cifs\&.upcall program\&.
|
|---|
| 94 | .PP
|
|---|
| 95 | Jeff Layton authored this manpage\&.
|
|---|
| 96 | .PP
|
|---|
| 97 | The maintainer of the Linux CIFS VFS is Steve French\&.
|
|---|
| 98 | .PP
|
|---|
| 99 | The
|
|---|
| 100 | Linux CIFS Mailing list
|
|---|
| 101 | is the preferred place to ask questions regarding these programs\&.
|
|---|
