Unable to access folder with permission error when Share lock exists
Applies to
ONTAP 9
Issue
- Unable to access or delete a folder from Windows Explorer using CIFS even though user has sufficient permission.
- It is not possible to take ownership of the file
- Sectrace collected for Client IP shows, "Access is denied because a delete is pending on this object".
::> vserver security trace trace-result show -vserver SVMNAME
Vserver: SVMNAME
Node Index Filter Details Reason
--------------- ----- -------------------------- ------------------------------
Node1 1 Security Style: - Access is denied because a delete is pending on this object.
Protocol: cifs
Volume: -
Share: test
Path: /test/folder
Win-User: Domain\username
UNIX-User: root
Session-ID: 1664080010000003555
- Lock Status confirmed:
::> vserver locks show -vserver SVMNAME -path /test/folder
Notice: Using this command can impact system performance. It is recommended
that you specify both the vserver and the volume when issuing this command to
minimize the scope of the command's operation. To abort the command, press Ctrl-C.
Vserver: SVMNAME
Volume Object Path LIF Protocol Lock Type Client
-------- ------------------------- ----------- --------- ----------- --------------
VOLNAME
/test/folder test_LIF1 cifs share-level 10.216.41.xx
Sharelock Mode: read-deny_none
- Client IP found in locks show output, run below command to verify if session is established using client IP.
::> vserver cifs session show -vserver SVMNAME -address <Client IP>-instance
- Packet trace shows STATUS_DELETE_PENDING while accessing the folder.
Number Date Source Destination Protocol Info
223727 2020-05-12 10.216.xx.xx 10.216.41.20 SMB2 Create Request File: \folder
223744 2020-05-12 10.216.xx.xx 10.216.41.10 SMB2 Create Response, Error: STATUS_DELETE_PENDING