Samba and MS Shadow Copy

[Ken Cross]

It's data about Shadow Copy volumes, so it could be any of them.  How 'bout
FSCTL_GET_SHADOW_DATA?

Attached is a capture of a Win XP client (10.0.0.189) getting Shadow Copy
data from a Windows 2003 Server (10.0.0.203).  Filter on SMB packets.  Look
at packets 399-402 and 431-440.

Restoring a file (or directory) isn't a special operation.  When your VFS
module converts the name sent from the client from:

 @GMT-2003.03.03-03.04.04/File.txt

to:

 /mnt/snap1234/File.txt

it acts just like a regular file operation.  Renaming the file is the key.
It's made easier by the fact that all Shadow Copies (snapshots) are
read-only.

Ken
________________________________

Ken Cross

Network Storage Solutions
Phone 865.675.4070 ext 31
kcross at nssolutions.com 

> -----Original Message-----
> From: Stefan (metze) Metzmacher [mailto:metze at metzemix.de] 
> Sent: Tuesday, August 05, 2003 1:05 PM
> To: Ken Cross; 'Multiple recipients of list SAMBA-TECHNICAL'
> Subject: RE: Samba and MS Shadow Copy
> 
> 
> At 12:53 05.08.2003 -0400, Ken Cross wrote:
> >No problem -- all sounds very reasonable.
> >
> >I couldn't find any name from MS for this FSCTL function, so I just 
> >made one up.  If anyone know a better one, please feel free 
> to use it.
> 
> Ok, should I use
> FSCTL_GET_SHADOW_DATA,
> FSCTL_GET_SHADOW_VOLUME or
> FSCTL_GET_SHADOW_VOLUMES
> 
> BTW: can you send me a trace of all possible calls and maybe 
> restoring a file
> 
> 
> metze
> --------------------------------------------------------------
> ---------------
> Stefan "metze" Metzmacher <metze at metzemix.de> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: WIN6 3 Snaps.cap
Type: application/octet-stream
Size: 109677 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20030805/ecb0eafc/WIN63Snaps.obj