I had a major problem to today. The owner of a company I built a network for had a directory in her home directory containing most of her work documents go missing. I looked at the log for her workstation and she did work on them in the morning. By afternoon, she return to her workstation and tried to open the directory but it was gone. The directory and all the directories and files were there in the morning, I confirmed that. There was no sign in the logs that any other user could have deleted them. I endewd up restoring from tape, but the owner is freaked over it, and I am pretty concerned too. The only weird thing I can point to was that she named it "_Rebecca/" so that it would be first on the list. She has about 5GB of files in her home directory. Any one shed any light? System: Workstation is Win2K - up to date with patches Server is Redhat 7.3, 2.4.18-19.7.x kernel RPMS: samba-client-2.2.7-1.7.3 samba-2.2.7-1.7.3 samba-common-2.2.7-1.7.3 Using the server as domain controller for an entirely win2K network of ten workstations. System has been running for six months with no problems. Chris Mason masonc@masonc.com Box 340, The Valley, Anguilla, British West Indies Tel: 264 497 5670 Fax: 264 497 8463 Cell: 264 235 5670 http://www.anguillaguide.com/ The Anguilla Guide Talk to me in real time: Yahoo:netconcepts_anguilla US Fax and Voicemail: (815)301-9759
On Sat, 4 Jan 2003, Chris Mason wrote:> I had a major problem to today. The owner of a company I built a network > for had a directory in her home directory containing most of her work > documents go missing. I looked at the log for her workstation and she > did work on them in the morning. By afternoon, she return to her > workstation and tried to open the directory but it was gone. > > The directory and all the directories and files were there in the > morning, I confirmed that. There was no sign in the logs that any other > user could have deleted them. > I endewd up restoring from tape, but the owner is freaked over it, and I > am pretty concerned too. > > The only weird thing I can point to was that she named it "_Rebecca/" so > that it would be first on the list. She has about 5GB of files in her > home directory. > > Any one shed any light?Please email me the smb.conf file off-list to <jht@samba.org>, I'd like to check your configuration. Meanwhile, it would also help if you could explain what sort of files this user was using and more particularly, what MS Windows applications she was using. Also, are you aware that samba has a recycle bin facility. It has saved by skin more than once! Contact me off list and I will try to help to identify what might have gone astray here. If we can identify anything suspicious our findings must go back to this list. - John T.> > System: > Workstation is Win2K - up to date with patches > Server is Redhat 7.3, 2.4.18-19.7.x kernel > > RPMS: > samba-client-2.2.7-1.7.3 > samba-2.2.7-1.7.3 > samba-common-2.2.7-1.7.3 > > > Using the server as domain controller for an entirely win2K network of > ten workstations. System has been running for six months with no > problems. > > > > Chris Mason > masonc@masonc.com > Box 340, The Valley, Anguilla, British West Indies > Tel: 264 497 5670 Fax: 264 497 8463 Cell: 264 235 5670 > http://www.anguillaguide.com/ The Anguilla Guide > Talk to me in real time: > Yahoo:netconcepts_anguilla > US Fax and Voicemail: (815)301-9759 > >-- John H Terpstra Email: jht@samba.org
Hi Chris,>I had a major problem to today. The owner of a company >I built a network for had a directory in her home >directory containing most of her work documents >[which went/go] missing. >........................... >I endewd up restoring from tape, but the owner is >freaked over it, and I am pretty concerned too.this embarassing problem hit me once too and I posted the problem here: http://lists.samba.org/pipermail/samba/2002-December/086537.html and here http://lists.samba.org/pipermail/samba/2002-December/086574.html The latter reply to a kind soul turned out to be a false lead, you can safely disregard it. The problem reappeared, so I first split the profiles away from the home directory and got the problem resolved for my own user account, but I wouldn't bet that the problem is gone completely until a power user, who seemed to be the only one really affected by this abnormality, has joined his machine to the test domain in which I'm experimenting with this problem. It might be that some weird undocumented registry entry on his workstation is causing the problem and infecting other systems from which he logs hiemself in. I'll come back to you as soon as I know for sure. In the meanwhile I appeal to other kind souls to focus on the problem. Regards Dragan _____________________________________________________________ Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus