Fwd: [REG: 113020410191647] Windows Server 2012 seems to behave differently than Product Note #196 in [MS-SMB2].pdf states

[Richard Sharpe]

Forwarding this because there is important info in here about the
order of certain tests.

---------- Forwarded message ----------
From: Edgar Olougouna <edgaro at microsoft.com>
Date: Fri, Feb 22, 2013 at 1:57 PM
Subject: RE: [REG: 113020410191647] Windows Server 2012 seems to
behave differently than Product Note #196 in [MS-SMB2].pdf states
To: Richard Sharpe <realrichardsharpe at gmail.com>
Cc: MSSolve Case Email <casemail at microsoft.com>


Richard,
We confirm that Windows Server 2012 behavior differs from the current
version of the specification. A future release of the MS-SMB2 will
clarify the behavior notes and reflect the following. I will send you
the text of the behavior notes once available.
In Windows server 2008 r2, a compounded create/read would see CREATE
fail with FILE_NOT_FOUND and then the READ would fail with
INVALID_PARAMETER since there was no FileId for the related READ.
Windows server 2012 changed FileId verification to take the parent
request’s failure error code if there was no FileId on a related
compounded operation. For above chain, both the CREATE and READ would
fail with FILE_NOT_FOUND.  This change was done only for FileID
verification. SessionId or TreeID verification still fail with
INVALID_PARAMETER.
Note that in Windows 2012 and later, the verification order is
SessionId-FileId-TreeId mainly due the multi-channel feature, whereas
prior to 2012 it was FileId-SessionId-TreeId.

Please also take note of our observations on the network traces you provided.

In W2k12 trace:
Frame 107
SMB2: R  - NT Status: System - Error, Code = (13)
STATUS_INVALID_PARAMETER  CREATE (0x5) ,
File=compound_invalid1.dat@#106,  SMB2_FLAGS_RELATED_OPERATIONS Flag
set in the parent request, response is as per <202>.
SMB2: R  - NT Status: System - Error, Code = (13)
STATUS_INVALID_PARAMETER  CLOSE (0x6) , SMB2_FLAGS_RELATED_OPERATIONS
Flag set in the request and parent request failed with
STATUS_INVALID_PARAMETER(fail the compounded request with the same
error code returned by the parent request as in section 3.3.5.2.7.2)
SMB2: R  - NT Status: System - Error, Code = (296) STATUS_FILE_CLOSED
CLOSE (0x6) , SMB2_FLAGS_RELATED_OPERATIONS Flag  not set response is
handled as per section 3.3.5.2.7.1
Frame 129
SMB2: R   CREATE (0x5), FID=0x600000001(compound_invalid2.dat@#128) ,
SMB2: R   CLOSE (0x6) ,
SMB2: R  - NT Status: System - Error, Code = (515)
STATUS_USER_SESSION_DELETED  CLOSE (0x6) ,
SMB2_FLAGS_RELATED_OPERATIONS Flag  not set response is handled as per
section 3.3.5.2.7.1
SMB2: R  - NT Status: System - Error, Code = (515)
STATUS_USER_SESSION_DELETED  CLOSE (0x6) ,
SMB2_FLAGS_RELATED_OPERATIONS Flag  not set response is handled as per
section 3.3.5.2.7.1
SMB2: R  - NT Status: System - Error, Code = (13)
STATUS_INVALID_PARAMETER  CLOSE (0x6) , SMB2_FLAGS_RELATED_OPERATIONS
Flag set in the request with invalid session ID response is as per
section 3.3.5.2.7.2
Frame 173
SMB2: R  - NT Status: System - Error, Code = (52)
STATUS_OBJECT_NAME_NOT_FOUND  CREATE (0x5) ,
File=compound_invalid4.dat@#172, SMB2_FLAGS_RELATED_OPERATIONS Flag
not set response is handled as per section 3.3.5.2.7.1
SMB2: R  - NT Status: System - Error, Code = (52)
STATUS_OBJECT_NAME_NOT_FOUND  CLOSE (0x6) ,
SMB2_FLAGS_RELATED_OPERATIONS Flag set in the request and parent
request failed with STATUS_OBJECT_NAME_NOT_FOUND(fail the compounded
request with the same error code returned by the parent request as in
section 3.3.5.2.7.2)
SMB2: R  - NT Status: System - Error, Code = (296) STATUS_FILE_CLOSED
CLOSE (0x6) , SMB2_FLAGS_RELATED_OPERATIONS Flag  not set response is
handled as per section 3.3.5.2.7.1

Regards,
Edgar

-----Original Message-----
From: Edgar Olougouna
Sent: Friday, February 22, 2013 12:11 PM
To: 'Richard Sharpe'
Subject: RE: [REG: 113020410191647] Windows Server 2012 seems to
behave differently than Product Note #196 in [MS-SMB2].pdf states

Richard,
Thanks for your patience. I will be answering shortly.

Regards,
Edgar

-----Original Message-----
From: Richard Sharpe [mailto:realrichardsharpe at gmail.com]
Sent: Friday, February 22, 2013 11:57 AM
To: Edgar Olougouna
Subject: Re: [REG: 113020410191647] Windows Server 2012 seems to
behave differently than Product Note #196 in [MS-SMB2].pdf states

On Tue, Feb 5, 2013 at 8:04 AM, Edgar Olougouna <edgaro at microsoft.com> wrote:
> Richard,
>
> I have taken ownership of this issue and will follow-up once we have
> the answer.

Hi again Edgar. Has there been any progress on this item?

--
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)


-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)