Environment
Novell Filr 1.0
Novell Open Enterprise Server 2 (OES 2) Linux CIFS share
Microsoft Windows share
Novell Open Enterprise Server 11 (OES 11) Linux CIFS ShareNovell Open Enterprise Server 2 (OES 2) Linux CIFS share
Situation
In the following scenario the possibility is present that all data on a
Net Folder will be deleted.
Please note that this only applies if a Net Folder is being used that points to a Windows share, or a CIFS-only share hosted on Novell Open Enterprise Server, and if a Filr user has access to both this Net Folder and to Personal Storage on the Filr server.
Scenario:
A folder and it's content are being moved from personal storage (My Files) to a Net Folder location that is pointing to a windows share. The folder has been selected, and then being purged with the option "Purge the source contents of any folders or sub-folders that are net folders" enabled.
Once the above conditions are met, all data (files and folders!!) located on this Net Folder will be deleted.
Please be aware that if there are multiple Net Folders using the same Net Folder Server, all data on all these Net Folders will be deleted as well !
Please note that this only applies if a Net Folder is being used that points to a Windows share, or a CIFS-only share hosted on Novell Open Enterprise Server, and if a Filr user has access to both this Net Folder and to Personal Storage on the Filr server.
Scenario:
A folder and it's content are being moved from personal storage (My Files) to a Net Folder location that is pointing to a windows share. The folder has been selected, and then being purged with the option "Purge the source contents of any folders or sub-folders that are net folders" enabled.
Once the above conditions are met, all data (files and folders!!) located on this Net Folder will be deleted.
Please be aware that if there are multiple Net Folders using the same Net Folder Server, all data on all these Net Folders will be deleted as well !
Resolution
A fix for this issue is available in the Filr 1.0 Hot Patch 1, available via the Novell Patch Finder. It is recommended that you apply this patch to your Filr 1.0.0 appliance immediately.
Additional Information
Novell Enterprise Server by default uses NCP. Once the CIFS protocol is added, NSS volumes are automatically exported using both NCP and CIFS.
Novell Filr 1.0 tries to connect over NCP first, then CIFS. OES2 and OES11 are only vulnerable to the described scenario when a NSS share has been configured to be only exported over CIFS or has a unique CIFS name.
Novell Filr 1.0 tries to connect over NCP first, then CIFS. OES2 and OES11 are only vulnerable to the described scenario when a NSS share has been configured to be only exported over CIFS or has a unique CIFS name.