STATUS_ACCESS_DENIED On Network Share

Hi All,

I have an interesting thing going on, I am sure it used to work! Haven`t
changed a thing!! Honest :slight_smile:

Basically I have a filter driver denying access to a folder. I do this by
returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is fine
locally but if I share the folder and access it from a remote machine the
create works!

I have checked and my filter is def. completing the irp with
STATUS_ACCESS_DENIED.

If I run filespy from IFS kit I see a flurry of pipe stuff going on though.

Am I missing something really stupid here?

Remote machine is XP, machine denying access (with filter driver on) is W2k

Regards

Ben Curley
Software Engineer
Data Encryption Systems Ltd.

Tel: +44 (0)1823 352357 (Main)
Tel: +44 (0)1823 358320 (Direct Dial)

Web: http://www.deslock.com

Are you denying the right folder, and are you sure you’re not experiencing
some caching problems?

Regards, Dejan.

xxxxx@des.co.uk wrote:

Hi All,

I have an interesting thing going on, I am sure it used to work! Haven`t
changed a thing!! Honest :slight_smile:

Basically I have a filter driver denying access to a folder. I do this by
returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is fine
locally but if I share the folder and access it from a remote machine the
create works!

I have checked and my filter is def. completing the irp with
STATUS_ACCESS_DENIED.

If I run filespy from IFS kit I see a flurry of pipe stuff going on though.

Am I missing something really stupid here?

Remote machine is XP, machine denying access (with filter driver on) is W2k

Regards

Ben Curley
Software Engineer
Data Encryption Systems Ltd.

Tel: +44 (0)1823 352357 (Main)
Tel: +44 (0)1823 358320 (Direct Dial)

Web: http://www.deslock.com


You are currently subscribed to ntfsd as: xxxxx@alfasp.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32 developers.
Alfa File Monitor - File monitoring library for Win32 developers.

Hi Dejan,

It is definitely the correct folder, as to whether I am experiencing caching
problems, how do you mean?

Ben

-----Original Message-----
From: Dejan Maksimovic [mailto:xxxxx@alfasp.com]
Sent: 22 August 2003 18:17
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share

Are you denying the right folder, and are you sure you’re not
experiencing
some caching problems?

Regards, Dejan.

xxxxx@des.co.uk wrote:

Hi All,

I have an interesting thing going on, I am sure it used to work! Haven`t
changed a thing!! Honest :slight_smile:

Basically I have a filter driver denying access to a folder. I do this by
returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
fine
locally but if I share the folder and access it from a remote machine the
create works!

I have checked and my filter is def. completing the irp with
STATUS_ACCESS_DENIED.

If I run filespy from IFS kit I see a flurry of pipe stuff going on
though.

Am I missing something really stupid here?

Remote machine is XP, machine denying access (with filter driver on) is
W2k

Regards

Ben Curley
Software Engineer
Data Encryption Systems Ltd.

Tel: +44 (0)1823 352357 (Main)
Tel: +44 (0)1823 358320 (Direct Dial)

Web: http://www.deslock.com


You are currently subscribed to ntfsd as: xxxxx@alfasp.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa File Monitor - File monitoring library for Win32 developers.


You are currently subscribed to ntfsd as: xxxxx@des.co.uk
To unsubscribe send a blank email to xxxxx@lists.osr.com

Look at FastIO functions, more specifically FastIoQueryOpen.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of Dejan Maksimovic
Sent: sexta-feira, 22 de agosto de 2003 14:17
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share

Are you denying the right folder, and are you sure you’re not
experiencing
some caching problems?

Regards, Dejan.

xxxxx@des.co.uk wrote:

Hi All,

I have an interesting thing going on, I am sure it used to work! Haven`t
changed a thing!! Honest :slight_smile:

Basically I have a filter driver denying access to a folder. I do this by
returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
fine
locally but if I share the folder and access it from a remote machine the
create works!

I have checked and my filter is def. completing the irp with
STATUS_ACCESS_DENIED.

If I run filespy from IFS kit I see a flurry of pipe stuff going on
though.

Am I missing something really stupid here?

Remote machine is XP, machine denying access (with filter driver on) is
W2k

Regards

Ben Curley
Software Engineer
Data Encryption Systems Ltd.

Tel: +44 (0)1823 352357 (Main)
Tel: +44 (0)1823 358320 (Direct Dial)

Web: http://www.deslock.com


You are currently subscribed to ntfsd as: xxxxx@alfasp.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa File Monitor - File monitoring library for Win32 developers.


You are currently subscribed to ntfsd as: xxxxx@scuasecurity.com.br
To unsubscribe send a blank email to xxxxx@lists.osr.com

Probably you don’t recongize that create request is for protected folder
when RelatedFileObject != NULL.

Alexei.

wrote in message news:xxxxx@ntfsd…
>
>
> Hi All,
>
> I have an interesting thing going on, I am sure it used to work! Haven`t
> changed a thing!! Honest :slight_smile:
>
> Basically I have a filter driver denying access to a folder. I do this by
> returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
fine
> locally but if I share the folder and access it from a remote machine the
> create works!
>
> I have checked and my filter is def. completing the irp with
> STATUS_ACCESS_DENIED.
>
> If I run filespy from IFS kit I see a flurry of pipe stuff going on
though.
>
> Am I missing something really stupid here?
>
> Remote machine is XP, machine denying access (with filter driver on) is
W2k
>
> Regards
>
> Ben Curley
> Software Engineer
> Data Encryption Systems Ltd.
>
> Tel: +44 (0)1823 352357 (Main)
> Tel: +44 (0)1823 358320 (Direct Dial)
>
> Web: http://www.deslock.com
>
>
>

To answer the comments on this topic so far, here goes.

  1. I Handle relatedfileobject != NULL correctly and I intercept the create
    correctly, i even complete the irp with access denied but this is never
    reflected back to remote machine.

  2. All FastIo paths seem to be correctly handled. In the case of
    FastIoQueryOpen i return FALSE if i am attached to the device, this then
    makes the system issue a IRP_MJ_CREATE (Which I see)

Ben

-----Original Message-----
From: Alexei Jelvis [mailto:xxxxx@rogers.com]
Sent: Saturday, August 23, 2003 4:16 AM
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share

Probably you don’t recongize that create request is for protected folder
when RelatedFileObject != NULL.

Alexei.

wrote in message news:xxxxx@ntfsd…
>
>
> Hi All,
>
> I have an interesting thing going on, I am sure it used to work! Haven`t
> changed a thing!! Honest :slight_smile:
>
> Basically I have a filter driver denying access to a folder. I do this by
> returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
fine
> locally but if I share the folder and access it from a remote machine the
> create works!
>
> I have checked and my filter is def. completing the irp with
> STATUS_ACCESS_DENIED.
>
> If I run filespy from IFS kit I see a flurry of pipe stuff going on
though.
>
> Am I missing something really stupid here?
>
> Remote machine is XP, machine denying access (with filter driver on) is
W2k
>
> Regards
>
> Ben Curley
> Software Engineer
> Data Encryption Systems Ltd.
>
> Tel: +44 (0)1823 352357 (Main)
> Tel: +44 (0)1823 358320 (Direct Dial)
>
> Web: http://www.deslock.com
>
>
>

—
You are currently subscribed to ntfsd as: xxxxx@des.co.uk
To unsubscribe send a blank email to xxxxx@lists.osr.com

Ben,

I’ve tried my FP in the scenario you mentioned (XP accessing 2K), and
didn’t notice the problem. How is your network configured? Is the folder set as
Offline, maybe?

Regards, Dejan.

xxxxx@des.co.uk wrote:

To answer the comments on this topic so far, here goes.

  1. I Handle relatedfileobject != NULL correctly and I intercept the create
    correctly, i even complete the irp with access denied but this is never
    reflected back to remote machine.

  2. All FastIo paths seem to be correctly handled. In the case of
    FastIoQueryOpen i return FALSE if i am attached to the device, this then
    makes the system issue a IRP_MJ_CREATE (Which I see)

Ben

-----Original Message-----
From: Alexei Jelvis [mailto:xxxxx@rogers.com]
Sent: Saturday, August 23, 2003 4:16 AM
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share

Probably you don’t recongize that create request is for protected folder
when RelatedFileObject != NULL.

Alexei.

wrote in message news:xxxxx@ntfsd…
> >
> >
> > Hi All,
> >
> > I have an interesting thing going on, I am sure it used to work! Haven`t
> > changed a thing!! Honest :slight_smile:
> >
> > Basically I have a filter driver denying access to a folder. I do this by
> > returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
> fine
> > locally but if I share the folder and access it from a remote machine the
> > create works!
> >
> > I have checked and my filter is def. completing the irp with
> > STATUS_ACCESS_DENIED.
> >
> > If I run filespy from IFS kit I see a flurry of pipe stuff going on
> though.
> >
> > Am I missing something really stupid here?
> >
> > Remote machine is XP, machine denying access (with filter driver on) is
> W2k
> >
> > Regards
> >
> > Ben Curley
> > Software Engineer
> > Data Encryption Systems Ltd.
> >
> > Tel: +44 (0)1823 352357 (Main)
> > Tel: +44 (0)1823 358320 (Direct Dial)
> >
> > Web: http://www.deslock.com
> >
> >
> >
>
> —
> You are currently subscribed to ntfsd as: xxxxx@des.co.uk
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
> —
> You are currently subscribed to ntfsd as: xxxxx@alfasp.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com

–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32 developers.
Alfa File Monitor - File monitoring library for Win32 developers.

Hi all,

Ignore my brain deadness on this one! :slight_smile: Now fixed the problem, and thanks
Alexei. I was handling related fileobject not correctly!

Ben goes and hides under rock for being so stupid… :slight_smile:

Ben

-----Original Message-----
From: Dejan Maksimovic [mailto:xxxxx@alfasp.com]
Sent: 23 August 2003 13:37
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share

Ben,

I’ve tried my FP in the scenario you mentioned (XP accessing 2K),
and
didn’t notice the problem. How is your network configured? Is the folder set
as
Offline, maybe?

Regards, Dejan.

xxxxx@des.co.uk wrote:

To answer the comments on this topic so far, here goes.

  1. I Handle relatedfileobject != NULL correctly and I intercept the create
    correctly, i even complete the irp with access denied but this is never
    reflected back to remote machine.

  2. All FastIo paths seem to be correctly handled. In the case of
    FastIoQueryOpen i return FALSE if i am attached to the device, this then
    makes the system issue a IRP_MJ_CREATE (Which I see)

Ben

-----Original Message-----
From: Alexei Jelvis [mailto:xxxxx@rogers.com]
Sent: Saturday, August 23, 2003 4:16 AM
To: File Systems Developers
Subject: [ntfsd] Re: STATUS_ACCESS_DENIED On Network Share

Probably you don’t recongize that create request is for protected folder
when RelatedFileObject != NULL.

Alexei.

wrote in message news:xxxxx@ntfsd…
> >
> >
> > Hi All,
> >
> > I have an interesting thing going on, I am sure it used to work! Haven`t
> > changed a thing!! Honest :slight_smile:
> >
> > Basically I have a filter driver denying access to a folder. I do this
by
> > returning STATUS_ACCESS_DENIED in the IRP_MJ_CREATE dispatch. This is
> fine
> > locally but if I share the folder and access it from a remote machine
the
> > create works!
> >
> > I have checked and my filter is def. completing the irp with
> > STATUS_ACCESS_DENIED.
> >
> > If I run filespy from IFS kit I see a flurry of pipe stuff going on
> though.
> >
> > Am I missing something really stupid here?
> >
> > Remote machine is XP, machine denying access (with filter driver on) is
> W2k
> >
> > Regards
> >
> > Ben Curley
> > Software Engineer
> > Data Encryption Systems Ltd.
> >
> > Tel: +44 (0)1823 352357 (Main)
> > Tel: +44 (0)1823 358320 (Direct Dial)
> >
> > Web: http://www.deslock.com
> >
> >
> >
>
> —
> You are currently subscribed to ntfsd as: xxxxx@des.co.uk
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
> —
> You are currently subscribed to ntfsd as: xxxxx@alfasp.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com

–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa File Monitor - File monitoring library for Win32 developers.

—
You are currently subscribed to ntfsd as: xxxxx@des.co.uk
To unsubscribe send a blank email to xxxxx@lists.osr.com