Vscan软件McAfee (Trellix) ENSSP无法解除文件锁定、从而导致CIFS客户端获取访问被拒绝
适用场景
- ONTAP 9
- McAfee Endpoint Security Storage 2.1 (ENSSP)
- McAfee Endpoint Security Storage 2.2 (ENSSP)
- vscan
问题描述
- CIFS客户端在尝试访问文件时被拒绝访问
- 启用sectrace后
vserver sectrace trace-result show、将显示Access is denied because a delete is pending on this object客户端访问被拒绝的文件的原因
::> vserver sectrace trace-result show
Vserver: svm1
Node Index Filter Details Reason
--------------- ----- -------------------------- ------------------------------
NODE-A 1 Security Style: - Access is denied because a
delete is pending on this
object
Protocol: cifs
Volume: -
Share: vol1$
Path: /q03/sftp/request/testfile.Req
Win-User: NASLAB\user1
UNIX-User: root
Session-ID: 3419639492094821024
vserver lock show显示文件已被执行文件扫描的Vscan服务器锁定
::> vserver lock show -vserver svm1 -volume vol1 -path /vol1/q03/sftp/request/testfile.Req
Vserver: svm1
Volume Object Path LIF Protocol Lock Type Client
-------- ------------------------- ----------- --------- ----------- ----------
vol1 /vol1/q03/sftp/request/testfile.Req lif1 cifs op-lock 10.xx.xx.96
Oplock Level: null
share-level 10.xx.xx.96
Sharelock Mode: none-deny_none
注意： 10.xx.xx.96 此处是vscan服务器的IP地址