Samba: suspicious folder besides shares
- Update to latest (=current) Version of FreeNAS 11 Stable Train. ZFS hasn't been updated.
- Network drive (on Windows PC) is connected to SMB service, with currently 3 active shares.
- All shares have several top-folders.
where P: is connected to a Windows-share that is connected to the ZFS dataset /mnt/Vol1/shared/Eltern.
top-folder1...3 are just plain folders within the ZFS dataset.
- A suspicious folder occurs besides the (valid) top-folders. e.g.
- Action: Moved that folder back to the original location. This was possible, but now another suspicious folder occurred at the same place within the top level
- Double-check on the command line shows, that the suspicious folder really exists at this location. So it is not only a visualization bug, it seems to be a bug that corrupts existing data.
#9 Updated by Timur Bakeyev over 2 years ago
- Status changed from Not Started to Closed
- Target version deleted (
- Reason for Closing set to Behaves as Intended
I went through your debug log and couldn't find anything unusual. It doesn't help that your SMB service configured with minimal logging, so almost nothing is written to the log.
In general, from your description it sounds like there is a machine or service in your network, that was previously writing that suspicious folder to the disk P:, which was mounting different dataset/folder.
I can recommend you to run
zpool scrub Vol1 just in case to make sure that there is no pool corruption.
Also, it could be useful to run
smbstatus if you'd see that suspicious folder(s) again, that may reveal which user from which machine creates them.
If you really up to resolve that mystery for yourself - you can enable one of the Samba audit modules and that, eventually, may show you when and how suspicious folder(s) get created. Keep in mind that audit modules may significantly slow down your SMB service.