[Samba] fntimes failures

[Rowland Penny]

On Fri, 6 Jun 2025 17:56:18 +0200
Andrea Venturoli via samba <samba at lists.samba.org> wrote:

> Hello.
> 
> I see in audit logs a lot of the followings:
> 
> > IP=x.x.x.x | USER=XXXX\xxxx | MACHINE=x.x.x.x |
> > VOLUME=xxxxxx|fntimes|fail (No such file or
> > directory)|/home/xxxx/xxxxxx|||Fri Jun  6 09:20:45 2025 CEST|
> 
> (Of course the file is there, or I woulnd be suprised).
> 
> I'd like to debug this, but I need to find a way to reproduce it 
> programmatically, ideally with a script, from a client (UNIX if 
> possible, or Windows as a second pick).
> 
> Any idea how can I achieve this?
> Can smbclient help? Or is there a CMD command I can use?
> 
> 
>   bye & Thanks
> 	av.
> 

I have no idea, mainly because what logs you have posted are
meaningless, your sanitising has removed all context (e.g. Is the
user from 'USER=' the same user as in '/home/xxxx' ?), also if the
IP is an internal one (e.g. 192.168.1.25 , then there is no point
in sanitising it). There will probably have also been lines that show
what code produced the output, very hard to track down anything without
them.