VFS audit module apparently causing smbd panics

Sean Millichamp sean at compu-aid.net
Tue Dec 10 19:25:01 GMT 2002


I was running the audit.so VFS example module in an earlier version of
Samba (2.2.3, I believe) without troubles for a while now.  I just
upgraded to the samba-2.2.7 RPM provided by the Samba Team and noticed
problems on the share that servers a file-sharing based Windows
networked application package.

The smbds were dying with panics when attempting to run the program with
audit.so.  I didn't change the smb.conf between the old and new
version.  The vfs object line reads:
vfs object = /usr/lib/samba/vfs/audit.so

Commenting the line out solved the problem.  I was under a lot of
pressure to get it working again so I removed it from all of the shares
without determining if it was a problem anywhere else or not.

One odd thing I saw was corruption in the smbstatus locked files
output.  Here is a representative sample after the problems started
occurring:

32501  DENY_DOS   0x1         RDONLY     EXCLUSIVE+BATCH /data/bworks/app/bw/bwwoemnu.dll   Tue Dec 10 08:23:45 2002
32501  DENY_NONE  0x3         RDWR       NONE             ?|   Tue Dec 10 08:23:37 2002
32548  DENY_NONE  0x3         RDWR       EXCLUSIVE+BATCH  /data/bworks/app/bw/ellc/lblabel.mif   Tue Dec 10 08:27:21 2002
32516  DENY_NONE  0x3         RDWR       EXCLUSIVE+BATCH  /data/bworks/app/bw/ellc/apvendor.mxf   Tue Dec 10 08:22:37 2002
32516  DENY_NONE  0x3         RDWR       EXCLUSIVE+BATCH  /data/bworks/app/bw/ellc/apdetail.mdf   Tue Dec 10 08:22:37 2002
32548  DENY_NONE  0x3         RDWR       EXCLUSIVE+BATCH  /data/bworks/app/bw/bwwmnhlp.mif   Tue Dec 10 08:27:32 2002
32501  DENY_DOS   0x1         RDONLY     EXCLUSIVE+BATCH  ?~   Tue Dec 10 08:23:46 2002
32501  DENY_DOS   0x1         RDONLY     NONE             ?|   Tue Dec 10 08:23:34 2002
32501  DENY_DOS   0x1         RDONLY     EXCLUSIVE+BATCH  ?~   Tue Dec 10 08:23:46 2002

Note the ?~ and ?| characters where filenames similar to the others
should be.

I don't know if this is a known issue or not, but I figured I should
report it.

Sean





More information about the samba-technical mailing list