Koozali.org: home of the SME Server

smbd/fake_file.c:open_fake_file(116)

Offline jumba

  • *****
  • 291
  • +0/-0
  • Donations: July 2007 - $ 20.00
    • Smeserver på svenska!
smbd/fake_file.c:open_fake_file(116)
« on: April 21, 2009, 10:07:11 PM »
I've seen things like this at some (Sme) servers in the smb log a couple of times, and wonder if anyone could tell me what's going on...

A sample log extract:

Code: [Select]
smbd/fake_file.c:open_fake_file(116)  open_fake_file_shared: access_denied to service[user1] file[$Extend/$Quota:$Q:$INDEX_ALLOCATION] user[user1] : 1 Time(s)

(where "user1" is an existing user on that particular server)

The users don't feel that anything would be wrong, but I'm just curious....

(SME Server 7.4 with all updates)


Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: smbd/fake_file.c:open_fake_file(116)
« Reply #1 on: April 22, 2009, 06:39:10 PM »
http://en.wikipedia.org/wiki/NTFS

file[$Extend/$Quota:$Q:$INDEX_ALLOCATION] is an NTFS 'metafile' holding disk quota information. samba responds to requests for such metafiles via fake_file.c:

http://samba.org/~tridge/3_0-ctdb/source/smbd/fake_file.c

"FAKE FILE suppport, for faking up special files windows want access to"

samba responds with "access denied".

http://lists.samba.org/archive/samba/2007-August/134809.html

"open_fake_file fails with this error if the "current_user.ut.uid" is not
root, so either the user is trying to fetch information he is not entiteld
to or smbd under some circumstances fails to gain appropriate
privileges for this kind of access."

Remember that google is your friend.