Hi, Gurus,
I got 7.3.1 simulator and FPolicy 7.3 SDK. I am writing some sample to check what notifications I could obtain through fpolicy. The FServer succesfully registers itself with filer weather I pass optional parameters as last argument to FP_Registration or not.
Sorry, tapped enter, before fullfiled the question. So:
I got 7.3.1 simulator and FPolicy 7.3 SDK. I am writing some sample to check what notifications I could obtain through fpolicy. The FServer succesfully registers itself with filer weather I pass optional parameters as last argument to FP_Registration or not.
Now if I pass no additional parameters to FP_Registration (ie use ver1 notifications through FP_ScreenRequest), reqest to screen FS_OP_RENAME and FS_OP_RENAME_DIR will pass to my FServer ok and will be logged by my fserver correctly (see ouputs below). But if I pass some additional parameters to FP_Registration like "\\computer\domain\version2=true,size_and_owner=true" (is use ver2 notifications through FP_ScreenRequest2) screen requests would fail with RPC exception 0xc002001b (RPC_NT_CALL_FAILED) before riching my fserver (wich is up and running). All other requests (file-create, file-delete & etc) are processed normally.
What may be wrong?
outputs:
1. file-rename and directory-rename with FP_ScreenRequest:
======================================================================
filer simlulator
============================
Tue Jun 30 19:20:23 MSD [fpolicy.enable:info]: FPOLICY: The file policy feature has been enabled.
Tue Jun 30 19:20:25 MSD [fpolicy.fscreen.enable:info]: FPOLICY: File policy quest_itfa_netapp_policy (file screening) is enabled.
Tue Jun 30 19:20:25 MSD [fpolicy.fscreen.server.connecting.successful:info]: FPOLICY: File policy server \\NETAPP-CL registered with the filer as a server for policy quest_itfa_netapp_policy successfully.
fpolicy
CIFS file policy is enabled.
File policy quest_itfa_netapp_policy (file screening) is enabled.
File screen servers P/S Connect time (dd:hh:mm) Reqs Fails
------------------------------------------------------------------------------
10.30.37.102 \\NETAPP-CL Pri 00:00:01 0 0
ServerID: 4 IDL Version: 1 SMB Request Pipe Name: \ntapfprq
Options enabled: None
Operations monitored:
File rename
Directory rename
Above operations are monitored for CIFS only
List of extensions to screen:
???
List of extensions not to screen:
Extensions-not-to-screen list is empty.
Number of requests screened : 0
Number of screen failures : 0
Number of requests blocked locally : 0
netapp-sim>
fserver output
============================
====================================================================
2009-06-30 07:22::13.583
ver: '1'
filer: 'netapp-sim'
requestid: '2'
clientip: '10.30.42.75'
usersid: 'S-1-5-21-2019878313-792318229-2130781727-500'
clientop: '16777220'
displaypath: '\\NETAPP-SIM\home\1.txt'
accesspath: 'ONTAP_ADMIN$\vol\vol0\home\1.txt'
renamedisplaypath: '\\NETAPP-SIM\home\12.txt'
renamepath: '\\NETAPP-SIM\home\12.txt'
====================================================================
2009-06-30 07:22::16.979
ver: '1'
filer: 'netapp-sim'
requestid: '3'
clientip: '10.30.42.75'
usersid: 'S-1-5-21-2019878313-792318229-2130781727-500'
clientop: '16777280'
displaypath: '\\NETAPP-SIM\home\2'
accesspath: 'ONTAP_ADMIN$\vol\vol0\home\2'
renamedisplaypath: '\\NETAPP-SIM\home\21'
renamepath: '\\NETAPP-SIM\home\21'
2. file-rename with FP_ScreenRequest2:
======================================================================
filer simlulator
============================
Tue Jun 30 19:24:33 MSD [fpolicy.enable:info]: FPOLICY: The file policy feature has been enabled.
Tue Jun 30 19:24:34 MSD [fpolicy.fscreen.enable:info]: FPOLICY: File policy quest_itfa_netapp_policy (file screening) is enabled.
Tue Jun 30 19:24:35 MSD [fpolicy.fscreen.server.connecting.successful:info]: FPOLICY: File policy server \\NETAPP-CL registered with the filer as a server for policy quest_itfa_netapp_policy successfully.
fpolicy
CIFS file policy is enabled.
File policy quest_itfa_netapp_policy (file screening) is enabled.
File screen servers P/S Connect time (dd:hh:mm) Reqs Fails
------------------------------------------------------------------------------
10.30.37.102 \\NETAPP-CL Pri 00:00:01 0 0
ServerID: 5 IDL Version: 1 SMB Request Pipe Name: \ntapfprq
Options enabled: version2, size-and-owner
Operations monitored:
File rename
Directory rename
Above operations are monitored for CIFS only
List of extensions to screen:
???
List of extensions not to screen:
Extensions-not-to-screen list is empty.
Number of requests screened : 0
Number of screen failures : 0
Number of requests blocked locally : 0
netapp-sim> Tue Jun 30 19:24:46 MSD [smbrpc.exceptionCaught:error]: CIFSRPC: An RPC exception with a server of type file policy server occurred.
Tue Jun 30 19:24:46 MSD [fpolicy.fscreen.server.requestError:error]: FPOLICY: An attempt to make a file screen request to server \\NETAPP-CL for policy quest_itfa_netapp_policy failed with error [0xc002001b].
Tue Jun 30 19:24:46 MSD [cifs.server.infoMsg:info]: CIFS: Warning for server \\NETAPP-CL: Connection terminated.
Tue Jun 30 19:24:46 MSD [fpolicy.fscreen.server.droppedConn:warning]: FPOLICY: File policy server 10.30.37.102 for fscreen policy quest_itfa_netapp_policy has disconnected from the filer.
Tue Jun 30 19:24:46 MSD [fpolicy.fscreen.server.connectedNone:warning]: FPOLICY: File policy quest_itfa_netapp_policy (file screening) is enabled but no servers are connected to perform file screening for this policy.
3. directory-rename with FP_ScreenRequest2:
======================================================================
filer simlulator
============================
Tue Jun 30 19:26:06 MSD [fpolicy.enable:info]: FPOLICY: The file policy feature has been enabled.
Tue Jun 30 19:26:08 MSD [fpolicy.fscreen.enable:info]: FPOLICY: File policy quest_itfa_netapp_policy (file screening) is enabled.
Tue Jun 30 19:26:08 MSD [fpolicy.fscreen.server.connecting.successful:info]: FPOLICY: File policy server \\NETAPP-CL registered with the filer as a server for policy quest_itfa_netapp_policy successfully.
fpolicy
CIFS file policy is enabled.
File policy quest_itfa_netapp_policy (file screening) is enabled.
File screen servers P/S Connect time (dd:hh:mm) Reqs Fails
------------------------------------------------------------------------------
10.30.37.102 \\NETAPP-CL Pri 00:00:01 0 0
ServerID: 6 IDL Version: 1 SMB Request Pipe Name: \ntapfprq
Options enabled: version2, size-and-owner
Operations monitored:
File rename
Directory rename
Above operations are monitored for CIFS only
List of extensions to screen:
???
List of extensions not to screen:
Extensions-not-to-screen list is empty.
Number of requests screened : 0
Number of screen failures : 0
Number of requests blocked locally : 0
netapp-sim> Tue Jun 30 19:26:22 MSD [smbrpc.exceptionCaught:error]: CIFSRPC: An RPC exception with a server of type file policy server occurred.
Tue Jun 30 19:26:22 MSD [fpolicy.fscreen.server.requestError:error]: FPOLICY: An attempt to make a file screen request to server \\NETAPP-CL for policy quest_itfa_netapp_policy failed with error [0xc002001b].
Tue Jun 30 19:26:22 MSD [cifs.server.infoMsg:info]: CIFS: Warning for server \\NETAPP-CL: Connection terminated.
Tue Jun 30 19:26:22 MSD [fpolicy.fscreen.server.droppedConn:warning]: FPOLICY: File policy server 10.30.37.102 for fscreen policy quest_itfa_netapp_policy has disconnected from the filer.
Tue Jun 30 19:26:22 MSD [fpolicy.fscreen.server.connectedNone:warning]: FPOLICY: File policy quest_itfa_netapp_policy (file screening) is enabled but no servers are connected to perform file screening for this policy.
Ok, I've managed to fix the issue.
Looks like I've got broken (incomplete) fpreqest.idl. For those who are interested there was another issue with this here http://communities.netapp.com/message/12681.