[cifs-protocol] Querying SD of a stream

[Ralph Boehme]

Hello dochelp,

according to MS-FSA 2.1.5.14 "Server Requests a Query of Security 
Information" when querying the SD of a stream the request should be failed:

* If Open.Stream.StreamType is DataStream and Open.Stream.Name
   is not empty, the operation MUST be failed with
   STATUS_INVALID_PARAMETER; security information can be may
   only be queried on a file or directory handle, not on a
   stream handle.

But if I query an SD of a stream via SMB3 against a Windows server 
(Windows Server 2022) I get back the current SD of open.file, network 
trace attached.

MS-FSA 2.1.5.17 "Server Requests Setting of Security Information" has 
the same clause and setting an SD also works.

Is this a doc or product bug? Or am I missing something?

Can you please check and clarify?

Thanks!
-slow
-------------- next part --------------
A non-text attachment was scrubbed...
Name: query-sd-stream.pcapng.gz
Type: application/gzip
Size: 2554 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20240813/03203739/query-sd-stream.pcapng.gz>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: set-sd-stream.pcapng.gz
Type: application/gzip
Size: 4300 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20240813/03203739/set-sd-stream.pcapng.gz>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20240813/03203739/OpenPGP_signature.sig>