Re: FPolicy FP_ScreenRequest2 and file-rename/directory-rename problem

community@netapp.com — Tue, 07 Jul 2009 11:35:48 GMT

Ok, I've managed to fix the issue.

Looks like I've got broken (incomplete) fpreqest.idl. For those who are interested there was another issue with this here http://communities.netapp.com/message/12681.

Re: FPolicy FP_ScreenRequest2 and file-rename/directory-rename problem

community@netapp.com — Tue, 30 Jun 2009 15:22:43 GMT

Sorry, tapped enter, before fullfiled the question. So:

I got 7.3.1 simulator and FPolicy 7.3 SDK. I am writing some sample to check what notifications I could obtain through fpolicy. The FServer succesfully registers itself with filer weather I pass optional parameters as last argument to FP_Registration or not.

Now if I pass no additional parameters to FP_Registration (ie use ver1 notifications through FP_ScreenRequest), reqest to screen FS_OP_RENAME and FS_OP_RENAME_DIR will pass to my FServer ok and will be logged by my fserver correctly (see ouputs below). But if I pass some additional parameters to FP_Registration like "\\computer\domain\version2=true,size_and_owner=true" (is use ver2 notifications through FP_ScreenRequest2) screen requests would fail with RPC exception 0xc002001b (RPC_NT_CALL_FAILED) before riching my fserver (wich is up and running). All other requests (file-create, file-delete & etc) are processed normally.

What may be wrong?

outputs:

1. file-rename and directory-rename with FP_ScreenRequest:

======================================================================

filer simlulator

============================

Tue Jun 30 19:20:23 MSD [fpolicy.enable:info]: FPOLICY: The file policy feature has been enabled.

Tue Jun 30 19:20:25 MSD [fpolicy.fscreen.enable:info]: FPOLICY: File policy quest_itfa_netapp_policy (file screening) is enabled.

Tue Jun 30 19:20:25 MSD [fpolicy.fscreen.server.connecting.successful:info]: FPOLICY: File policy server \\NETAPP-CL registered with the filer as a server for policy quest_itfa_netapp_policy successfully.

fpolicy

CIFS file policy is enabled.

File policy quest_itfa_netapp_policy (file screening) is enabled.

File screen servers P/S Connect time (dd:hh:mm) Reqs Fails

------------------------------------------------------------------------------

10.30.37.102 \\NETAPP-CL Pri 00:00:01 0 0

ServerID: 4 IDL Version: 1 SMB Request Pipe Name: \ntapfprq

Options enabled: None

Operations monitored:

File rename

Directory rename

Above operations are monitored for CIFS only

List of extensions to screen:

???

List of extensions not to screen:

Extensions-not-to-screen list is empty.

Number of requests screened : 0

Number of screen failures : 0

Number of requests blocked locally : 0

netapp-sim>

fserver output

============================

====================================================================

2009-06-30 07:22::13.583

ver: '1'

filer: 'netapp-sim'

requestid: '2'

clientip: '10.30.42.75'

usersid: 'S-1-5-21-2019878313-792318229-2130781727-500'

clientop: '16777220'

displaypath: '\\NETAPP-SIM\home\1.txt'

accesspath: 'ONTAP_ADMIN$\vol\vol0\home\1.txt'

renamedisplaypath: '\\NETAPP-SIM\home\12.txt'

renamepath: '\\NETAPP-SIM\home\12.txt'

====================================================================

2009-06-30 07:22::16.979

ver: '1'

filer: 'netapp-sim'

requestid: '3'

clientip: '10.30.42.75'

usersid: 'S-1-5-21-2019878313-792318229-2130781727-500'

clientop: '16777280'

displaypath: '\\NETAPP-SIM\home\2'

accesspath: 'ONTAP_ADMIN$\vol\vol0\home\2'

renamedisplaypath: '\\NETAPP-SIM\home\21'

renamepath: '\\NETAPP-SIM\home\21'

2. file-rename with FP_ScreenRequest2:

======================================================================

filer simlulator

============================

Tue Jun 30 19:24:33 MSD [fpolicy.enable:info]: FPOLICY: The file policy feature has been enabled.

Tue Jun 30 19:24:34 MSD [fpolicy.fscreen.enable:info]: FPOLICY: File policy quest_itfa_netapp_policy (file screening) is enabled.

Tue Jun 30 19:24:35 MSD [fpolicy.fscreen.server.connecting.successful:info]: FPOLICY: File policy server \\NETAPP-CL registered with the filer as a server for policy quest_itfa_netapp_policy successfully.

fpolicy

CIFS file policy is enabled.

File policy quest_itfa_netapp_policy (file screening) is enabled.

File screen servers P/S Connect time (dd:hh:mm) Reqs Fails

------------------------------------------------------------------------------

10.30.37.102 \\NETAPP-CL Pri 00:00:01 0 0

ServerID: 5 IDL Version: 1 SMB Request Pipe Name: \ntapfprq

Options enabled: version2, size-and-owner

Operations monitored:

File rename

Directory rename

Above operations are monitored for CIFS only

List of extensions to screen:

???

List of extensions not to screen:

Extensions-not-to-screen list is empty.

Number of requests screened : 0

Number of screen failures : 0

Number of requests blocked locally : 0

netapp-sim> Tue Jun 30 19:24:46 MSD [smbrpc.exceptionCaught:error]: CIFSRPC: An RPC exception with a server of type file policy server occurred.

Tue Jun 30 19:24:46 MSD [fpolicy.fscreen.server.requestError:error]: FPOLICY: An attempt to make a file screen request to server \\NETAPP-CL for policy quest_itfa_netapp_policy failed with error [0xc002001b].

Tue Jun 30 19:24:46 MSD [cifs.server.infoMsg:info]: CIFS: Warning for server \\NETAPP-CL: Connection terminated.

Tue Jun 30 19:24:46 MSD [fpolicy.fscreen.server.droppedConn:warning]: FPOLICY: File policy server 10.30.37.102 for fscreen policy quest_itfa_netapp_policy has disconnected from the filer.

Tue Jun 30 19:24:46 MSD [fpolicy.fscreen.server.connectedNone:warning]: FPOLICY: File policy quest_itfa_netapp_policy (file screening) is enabled but no servers are connected to perform file screening for this policy.

3. directory-rename with FP_ScreenRequest2:

======================================================================

filer simlulator

============================

Tue Jun 30 19:26:06 MSD [fpolicy.enable:info]: FPOLICY: The file policy feature has been enabled.

Tue Jun 30 19:26:08 MSD [fpolicy.fscreen.enable:info]: FPOLICY: File policy quest_itfa_netapp_policy (file screening) is enabled.

Tue Jun 30 19:26:08 MSD [fpolicy.fscreen.server.connecting.successful:info]: FPOLICY: File policy server \\NETAPP-CL registered with the filer as a server for policy quest_itfa_netapp_policy successfully.

fpolicy

CIFS file policy is enabled.

File policy quest_itfa_netapp_policy (file screening) is enabled.

File screen servers P/S Connect time (dd:hh:mm) Reqs Fails

------------------------------------------------------------------------------

10.30.37.102 \\NETAPP-CL Pri 00:00:01 0 0

ServerID: 6 IDL Version: 1 SMB Request Pipe Name: \ntapfprq

Options enabled: version2, size-and-owner

Operations monitored:

File rename

Directory rename

Above operations are monitored for CIFS only

List of extensions to screen:

???

List of extensions not to screen:

Extensions-not-to-screen list is empty.

Number of requests screened : 0

Number of screen failures : 0

Number of requests blocked locally : 0

netapp-sim> Tue Jun 30 19:26:22 MSD [smbrpc.exceptionCaught:error]: CIFSRPC: An RPC exception with a server of type file policy server occurred.

Tue Jun 30 19:26:22 MSD [fpolicy.fscreen.server.requestError:error]: FPOLICY: An attempt to make a file screen request to server \\NETAPP-CL for policy quest_itfa_netapp_policy failed with error [0xc002001b].

Tue Jun 30 19:26:22 MSD [cifs.server.infoMsg:info]: CIFS: Warning for server \\NETAPP-CL: Connection terminated.

Tue Jun 30 19:26:22 MSD [fpolicy.fscreen.server.droppedConn:warning]: FPOLICY: File policy server 10.30.37.102 for fscreen policy quest_itfa_netapp_policy has disconnected from the filer.

Tue Jun 30 19:26:22 MSD [fpolicy.fscreen.server.connectedNone:warning]: FPOLICY: File policy quest_itfa_netapp_policy (file screening) is enabled but no servers are connected to perform file screening for this policy.

FPolicy FP_ScreenRequest2 and file-rename/directory-rename problem

community@netapp.com — Tue, 30 Jun 2009 15:13:24 GMT

Hi, Gurus,

NetApp Technology Network: Message List - FPolicy FP_ScreenRequest2 and file-rename/directory-rename problem

Re: FPolicy FP_ScreenRequest2 and file-rename/directory-rename problem

Re: FPolicy FP_ScreenRequest2 and file-rename/directory-rename problem

FPolicy FP_ScreenRequest2 and file-rename/directory-rename problem