[cifs-protocol] [EXTERNAL] DELETE_PENDING behaviour change between Windows 2016 and Windows 2022? - TrackingID#2204070040007396

Jeff McCashland (He/him) jeffm at microsoft.com
Thu Apr 7 18:04:22 UTC 2022

[DocHelp to BCC, support on CC, SR ID on Subject]

Hi Volker,

Thank you for submitting your question. We have created SR 2204070040007396 to track this issue. One of our engineer will respond soon. 

Best regards,
Jeff McCashland (He/him) | Senior Escalation Engineer | Microsoft Protocol Open Specifications Team 
Phone: +1 (425) 703-8300 x38300 | Hours: 9am-5pm | Time zone: (UTC-08:00) Pacific Time (US and Canada)
Local country phone number found here: http://support.microsoft.com/globalenglish | Extension 1138300
We value your feedback.  My manager is Stacy Gray (stacygr), +1 (469) 775-4055

-----Original Message-----
From: Volker Lendecke <Volker.Lendecke at sernet.de> 
Sent: Thursday, April 7, 2022 7:52 AM
To: Interoperability Documentation Help <dochelp at microsoft.com>
Cc: cifs-protocol at lists.samba.org
Subject: [EXTERNAL] DELETE_PENDING behaviour change between Windows 2016 and Windows 2022?

Hello dochelp,

attached find two network traces that show different delete_on_close behaviour between Windows 2016 and Windows 2022.

The Win2016 trace can open a directory "x" that is held open but already deleted. The directory was created with frame 32/33, it was then opened (and held open) in 47/48. It was then "removed" or rather marked for deletoin with frames 56-62. With frame 64/65 you can see that an open with just FILE_READ_ATTRIBUTES access mask success fine.

The Win2022 trace does pretty much the same, however in frames 58/59 we get a DELETE_PENDING.

I'm asking because right now Samba behaves like Win2022 and some customer application fails with this behaviour.

We could not find an explanation for either behaviour in neither [MS-SMB2] nor [MS-FSA].

Can you explain where in the docs we could find which of the two behaviours is the correct one?


Volker Lendecke
-------------- next part --------------
A non-text attachment was scrubbed...
Name: w2016-no-delete-pending.cap
Type: image/cap
Size: 12591 bytes
Desc: w2016-no-delete-pending.cap
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20220407/b1450939/w2016-no-delete-pending.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: w2022-118-dir-stat-open-delete-pending-01.pcap
Type: application/octet-stream
Size: 11593 bytes
Desc: w2022-118-dir-stat-open-delete-pending-01.pcap
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20220407/b1450939/w2022-118-dir-stat-open-delete-pending-01.obj>

More information about the cifs-protocol mailing list