I was running the audit.so VFS example module in an earlier version of Samba (2.2.3, I believe) without troubles for a while now. I just upgraded to the samba-2.2.7 RPM provided by the Samba Team and noticed problems on the share that servers a file-sharing based Windows networked application package.
The smbds were dying with panics when attempting to run the program with audit.so. I didn't change the smb.conf between the old and new version. The vfs object line reads: vfs object = /usr/lib/samba/vfs/audit.so Commenting the line out solved the problem. I was under a lot of pressure to get it working again so I removed it from all of the shares without determining if it was a problem anywhere else or not. One odd thing I saw was corruption in the smbstatus locked files output. Here is a representative sample after the problems started occurring: 32501 DENY_DOS 0x1 RDONLY EXCLUSIVE+BATCH /data/bworks/app/bw/bwwoemnu.dll Tue Dec 10 08:23:45 2002 32501 DENY_NONE 0x3 RDWR NONE ?| Tue Dec 10 08:23:37 2002 32548 DENY_NONE 0x3 RDWR EXCLUSIVE+BATCH /data/bworks/app/bw/ellc/lblabel.mif Tue Dec 10 08:27:21 2002 32516 DENY_NONE 0x3 RDWR EXCLUSIVE+BATCH /data/bworks/app/bw/ellc/apvendor.mxf Tue Dec 10 08:22:37 2002 32516 DENY_NONE 0x3 RDWR EXCLUSIVE+BATCH /data/bworks/app/bw/ellc/apdetail.mdf Tue Dec 10 08:22:37 2002 32548 DENY_NONE 0x3 RDWR EXCLUSIVE+BATCH /data/bworks/app/bw/bwwmnhlp.mif Tue Dec 10 08:27:32 2002 32501 DENY_DOS 0x1 RDONLY EXCLUSIVE+BATCH ?~ Tue Dec 10 08:23:46 2002 32501 DENY_DOS 0x1 RDONLY NONE ?| Tue Dec 10 08:23:34 2002 32501 DENY_DOS 0x1 RDONLY EXCLUSIVE+BATCH ?~ Tue Dec 10 08:23:46 2002 Note the ?~ and ?| characters where filenames similar to the others should be. I don't know if this is a known issue or not, but I figured I should report it. Sean
