Highlighted
Absent Member.
Absent Member.
1016 views

File Drop Rights Problem with Windows 10 and OES Client

We have numerous OES shares that give the student container Create and File Scan rights. Students can drop their assignments in these shared directories, but can't read or overwrite or delete other students' work. This has worked fine for us for many years.

However, starting with Client for OES 2 SP4 (IR5) and continuing with IR6, we find that when a student attempts to copy a file to such a share, it only creates a zero-byte file, and immediately prompts to say the file already exists: attempts by the student to overwrite fail. Note that with IR4, this works. Also note that with IR5 and IR6, this work for Windows 7 clients. It is only Windows 10 clients, with IR5 and IR6 that we have the problem.

Has anyone else seen this and/or know of a solution?
Labels (1)
0 Likes
3 Replies
Highlighted
Knowledge Partner Knowledge Partner
Knowledge Partner

kennolson;2466063 wrote:
We have numerous OES shares that give the student container Create and File Scan rights. Students can drop their assignments in these shared directories, but can't read or overwrite or delete other students' work. This has worked fine for us for many years.

However, starting with Client for OES 2 SP4 (IR5) and continuing with IR6, we find that when a student attempts to copy a file to such a share, it only creates a zero-byte file, and immediately prompts to say the file already exists: attempts by the student to overwrite fail. Note that with IR4, this works. Also note that with IR5 and IR6, this work for Windows 7 clients. It is only Windows 10 clients, with IR5 and IR6 that we have the problem.

Has anyone else seen this and/or know of a solution?


Could it be this: https://www.novell.com/support/kb/doc.php?id=7021016 ?

Thomas
0 Likes
Absent Member.
Absent Member.

Bingo! Guess I'll have to open an SR. Pity they couldn't just post the fix.

Thanks so much!
0 Likes
Highlighted
Micro Focus Expert
Micro Focus Expert

kennolson <kennolson@no-mx.forums.microfocus.com> wrote:

> We have numerous OES shares that give the student container Create and
> File Scan rights. Students can drop their assignments in these shared
> directories, but can't read or overwrite or delete other students' work.
> This has worked fine for us for many years.
>
> However, starting with Client for OES 2 SP4 (IR5) and continuing with
> IR6, we find that when a student attempts to copy a file to such a
> share, it only creates a zero-byte file, and immediately prompts to say
> the file already exists: attempts by the student to overwrite fail. Note
> that with IR4, this works. Also note that with IR5 and IR6, this work
> for Windows 7 clients. It is only Windows 10 clients, with IR5 and IR6
> that we have the problem.
>
> Has anyone else seen this and/or know of a solution?


Yes, there was an intentional change in the IR5 and later clients,
which makes a Windows-level CreateFile call that is requesting DELETE
permission to now behave "even more correctly", i.e. more in line with
what Windows applications expect & how the same operation behaves
against NTFS or other non-NCP file systems.

Previously, the absence of NCP-level ERASE permission (as in the
student configuration example you described) would not have caused a
CreateFile requesting DELETE access to fail when performed against an
NCP-based path. But now in IR5 and later, it does cause the
appropriate STATUS_ACCESS_DENIED result.

The exact symptom you're seeing though, "immediately prompts to say
the file already exists", is actually because of a bug that existed in
this otherwise intentional IR5 change.

Even though STATUS_ACCESS_DENIED was now being correctly returned,
Client for Open Enterprise Server was /incorrectly/ allowing the file
to have still become created on the NCP server. When the CreateFile
call is being failed, the file which did not already exist should not
have been allowed to be created.

This is Bug 1030741 and
https://www.novell.com/support/kb/doc.php?id=7021016.

The issue has already been addressed in the code that will be used in
the future Client for Open Enterprise Server 2 SP4 (IR7) release.
Which barring further QA results or other schedule changes, is
currently targeted at October 2017.

As part of the OES 2018 Public Beta, there is also a public beta of
the IR7 client that was made available, if you happened to already
have access or want to test that way. It's not the final version of
the IR7 client, but does already contain this Bug 1030741 fix.

If you need something more suitable for deploying to production
workstations right away, opening a support call and citing the TID
7021016 & Bug 1030741 issue can obtain an NCFSD.SYS fix suitable for
applying to IR6 workstations.

Alan Adams
Client for Open Enterprise Server
Micro Focus
alan.adams@microfocus.com
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.