Hi All,
I have an interesting thing going on, I am sure it used to work! Haven`t
changed a thing!! Honest 
Basically I have a filter driver denying access to a folder. I do this by
returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is fine
locally but if I share the folder and access it from a remote machine the
create works!
I have checked and my filter is def. completing the irp with
STATUS_ACCESS_DENIED.
If I run filespy from IFS kit I see a flurry of pipe stuff going on though.
Am I missing something really stupid here?
Remote machine is XP, machine denying access (with filter driver on) is W2k
Regards
Ben Curley
Software Engineer
Data Encryption Systems Ltd.
Tel: +44 (0)1823 352357 (Main)
Tel: +44 (0)1823 358320 (Direct Dial)
Web: http://www.deslock.com
Are you denying the right folder, and are you sure you’re not experiencing
some caching problems?
Regards, Dejan.
xxxxx@des.co.uk wrote:
Hi All,
I have an interesting thing going on, I am sure it used to work! Haven`t
changed a thing!! Honest 
Basically I have a filter driver denying access to a folder. I do this by
returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is fine
locally but if I share the folder and access it from a remote machine the
create works!
I have checked and my filter is def. completing the irp with
STATUS_ACCESS_DENIED.
If I run filespy from IFS kit I see a flurry of pipe stuff going on though.
Am I missing something really stupid here?
Remote machine is XP, machine denying access (with filter driver on) is W2k
Regards
Ben Curley
Software Engineer
Data Encryption Systems Ltd.
Tel: +44 (0)1823 352357 (Main)
Tel: +44 (0)1823 358320 (Direct Dial)
Web: http://www.deslock.com
You are currently subscribed to ntfsd as: xxxxx@alfasp.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32 developers.
Alfa File Monitor - File monitoring library for Win32 developers.
Hi Dejan,
It is definitely the correct folder, as to whether I am experiencing caching
problems, how do you mean?
Ben
-----Original Message-----
From: Dejan Maksimovic [mailto:xxxxx@alfasp.com]
Sent: 22 August 2003 18:17
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share
Are you denying the right folder, and are you sure you’re not
experiencing
some caching problems?
Regards, Dejan.
xxxxx@des.co.uk wrote:
Hi All,
I have an interesting thing going on, I am sure it used to work! Haven`t
changed a thing!! Honest 
Basically I have a filter driver denying access to a folder. I do this by
returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
fine
locally but if I share the folder and access it from a remote machine the
create works!
I have checked and my filter is def. completing the irp with
STATUS_ACCESS_DENIED.
If I run filespy from IFS kit I see a flurry of pipe stuff going on
though.
Am I missing something really stupid here?
Remote machine is XP, machine denying access (with filter driver on) is
W2k
Regards
Ben Curley
Software Engineer
Data Encryption Systems Ltd.
Tel: +44 (0)1823 352357 (Main)
Tel: +44 (0)1823 358320 (Direct Dial)
Web: http://www.deslock.com
You are currently subscribed to ntfsd as: xxxxx@alfasp.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa File Monitor - File monitoring library for Win32 developers.
You are currently subscribed to ntfsd as: xxxxx@des.co.uk
To unsubscribe send a blank email to xxxxx@lists.osr.com
Look at FastIO functions, more specifically FastIoQueryOpen.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of Dejan Maksimovic
Sent: sexta-feira, 22 de agosto de 2003 14:17
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share
Are you denying the right folder, and are you sure you’re not
experiencing
some caching problems?
Regards, Dejan.
xxxxx@des.co.uk wrote:
Hi All,
I have an interesting thing going on, I am sure it used to work! Haven`t
changed a thing!! Honest 
Basically I have a filter driver denying access to a folder. I do this by
returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
fine
locally but if I share the folder and access it from a remote machine the
create works!
I have checked and my filter is def. completing the irp with
STATUS_ACCESS_DENIED.
If I run filespy from IFS kit I see a flurry of pipe stuff going on
though.
Am I missing something really stupid here?
Remote machine is XP, machine denying access (with filter driver on) is
W2k
Regards
Ben Curley
Software Engineer
Data Encryption Systems Ltd.
Tel: +44 (0)1823 352357 (Main)
Tel: +44 (0)1823 358320 (Direct Dial)
Web: http://www.deslock.com
You are currently subscribed to ntfsd as: xxxxx@alfasp.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa File Monitor - File monitoring library for Win32 developers.
You are currently subscribed to ntfsd as: xxxxx@scuasecurity.com.br
To unsubscribe send a blank email to xxxxx@lists.osr.com
Probably you don’t recongize that create request is for protected folder
when RelatedFileObject != NULL.
Alexei.
wrote in message news:xxxxx@ntfsd…
>
>
> Hi All,
>
> I have an interesting thing going on, I am sure it used to work! Haven`t
> changed a thing!! Honest 
>
> Basically I have a filter driver denying access to a folder. I do this by
> returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
fine
> locally but if I share the folder and access it from a remote machine the
> create works!
>
> I have checked and my filter is def. completing the irp with
> STATUS_ACCESS_DENIED.
>
> If I run filespy from IFS kit I see a flurry of pipe stuff going on
though.
>
> Am I missing something really stupid here?
>
> Remote machine is XP, machine denying access (with filter driver on) is
W2k
>
> Regards
>
> Ben Curley
> Software Engineer
> Data Encryption Systems Ltd.
>
> Tel: +44 (0)1823 352357 (Main)
> Tel: +44 (0)1823 358320 (Direct Dial)
>
> Web: http://www.deslock.com
>
>
>
To answer the comments on this topic so far, here goes.
-
I Handle relatedfileobject != NULL correctly and I intercept the create
correctly, i even complete the irp with access denied but this is never
reflected back to remote machine.
-
All FastIo paths seem to be correctly handled. In the case of
FastIoQueryOpen i return FALSE if i am attached to the device, this then
makes the system issue a IRP_MJ_CREATE (Which I see)
Ben
-----Original Message-----
From: Alexei Jelvis [mailto:xxxxx@rogers.com]
Sent: Saturday, August 23, 2003 4:16 AM
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share
Probably you don’t recongize that create request is for protected folder
when RelatedFileObject != NULL.
Alexei.
wrote in message news:xxxxx@ntfsd…
>
>
> Hi All,
>
> I have an interesting thing going on, I am sure it used to work! Haven`t
> changed a thing!! Honest 
>
> Basically I have a filter driver denying access to a folder. I do this by
> returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
fine
> locally but if I share the folder and access it from a remote machine the
> create works!
>
> I have checked and my filter is def. completing the irp with
> STATUS_ACCESS_DENIED.
>
> If I run filespy from IFS kit I see a flurry of pipe stuff going on
though.
>
> Am I missing something really stupid here?
>
> Remote machine is XP, machine denying access (with filter driver on) is
W2k
>
> Regards
>
> Ben Curley
> Software Engineer
> Data Encryption Systems Ltd.
>
> Tel: +44 (0)1823 352357 (Main)
> Tel: +44 (0)1823 358320 (Direct Dial)
>
> Web: http://www.deslock.com
>
>
>
—
You are currently subscribed to ntfsd as: xxxxx@des.co.uk
To unsubscribe send a blank email to xxxxx@lists.osr.com
Ben,
I’ve tried my FP in the scenario you mentioned (XP accessing 2K), and
didn’t notice the problem. How is your network configured? Is the folder set as
Offline, maybe?
Regards, Dejan.
xxxxx@des.co.uk wrote:
To answer the comments on this topic so far, here goes.
-
I Handle relatedfileobject != NULL correctly and I intercept the create
correctly, i even complete the irp with access denied but this is never
reflected back to remote machine.
-
All FastIo paths seem to be correctly handled. In the case of
FastIoQueryOpen i return FALSE if i am attached to the device, this then
makes the system issue a IRP_MJ_CREATE (Which I see)
Ben
-----Original Message-----
From: Alexei Jelvis [mailto:xxxxx@rogers.com]
Sent: Saturday, August 23, 2003 4:16 AM
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share
Probably you don’t recongize that create request is for protected folder
when RelatedFileObject != NULL.
Alexei.
wrote in message news:xxxxx@ntfsd…
> >
> >
> > Hi All,
> >
> > I have an interesting thing going on, I am sure it used to work! Haven`t
> > changed a thing!! Honest 
> >
> > Basically I have a filter driver denying access to a folder. I do this by
> > returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
> fine
> > locally but if I share the folder and access it from a remote machine the
> > create works!
> >
> > I have checked and my filter is def. completing the irp with
> > STATUS_ACCESS_DENIED.
> >
> > If I run filespy from IFS kit I see a flurry of pipe stuff going on
> though.
> >
> > Am I missing something really stupid here?
> >
> > Remote machine is XP, machine denying access (with filter driver on) is
> W2k
> >
> > Regards
> >
> > Ben Curley
> > Software Engineer
> > Data Encryption Systems Ltd.
> >
> > Tel: +44 (0)1823 352357 (Main)
> > Tel: +44 (0)1823 358320 (Direct Dial)
> >
> > Web: http://www.deslock.com
> >
> >
> >
>
> —
> You are currently subscribed to ntfsd as: xxxxx@des.co.uk
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
> —
> You are currently subscribed to ntfsd as: xxxxx@alfasp.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32 developers.
Alfa File Monitor - File monitoring library for Win32 developers.
Hi all,
Ignore my brain deadness on this one!
Now fixed the problem, and thanks
Alexei. I was handling related fileobject not correctly!
Ben goes and hides under rock for being so stupid… 
Ben
-----Original Message-----
From: Dejan Maksimovic [mailto:xxxxx@alfasp.com]
Sent: 23 August 2003 13:37
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share
Ben,
I’ve tried my FP in the scenario you mentioned (XP accessing 2K),
and
didn’t notice the problem. How is your network configured? Is the folder set
as
Offline, maybe?
Regards, Dejan.
xxxxx@des.co.uk wrote:
To answer the comments on this topic so far, here goes.
-
I Handle relatedfileobject != NULL correctly and I intercept the create
correctly, i even complete the irp with access denied but this is never
reflected back to remote machine.
-
All FastIo paths seem to be correctly handled. In the case of
FastIoQueryOpen i return FALSE if i am attached to the device, this then
makes the system issue a IRP_MJ_CREATE (Which I see)
Ben
-----Original Message-----
From: Alexei Jelvis [mailto:xxxxx@rogers.com]
Sent: Saturday, August 23, 2003 4:16 AM
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share
Probably you don’t recongize that create request is for protected folder
when RelatedFileObject != NULL.
Alexei.
wrote in message news:xxxxx@ntfsd…
> >
> >
> > Hi All,
> >
> > I have an interesting thing going on, I am sure it used to work! Haven`t
> > changed a thing!! Honest 
> >
> > Basically I have a filter driver denying access to a folder. I do this
by
> > returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
> fine
> > locally but if I share the folder and access it from a remote machine
the
> > create works!
> >
> > I have checked and my filter is def. completing the irp with
> > STATUS_ACCESS_DENIED.
> >
> > If I run filespy from IFS kit I see a flurry of pipe stuff going on
> though.
> >
> > Am I missing something really stupid here?
> >
> > Remote machine is XP, machine denying access (with filter driver on) is
> W2k
> >
> > Regards
> >
> > Ben Curley
> > Software Engineer
> > Data Encryption Systems Ltd.
> >
> > Tel: +44 (0)1823 352357 (Main)
> > Tel: +44 (0)1823 358320 (Direct Dial)
> >
> > Web: http://www.deslock.com
> >
> >
> >
>
> —
> You are currently subscribed to ntfsd as: xxxxx@des.co.uk
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
> —
> You are currently subscribed to ntfsd as: xxxxx@alfasp.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa File Monitor - File monitoring library for Win32 developers.
—
You are currently subscribed to ntfsd as: xxxxx@des.co.uk
To unsubscribe send a blank email to xxxxx@lists.osr.com