Forum Discussion

Andrew_Burridge's avatar
Andrew_Burridge
Icon for Nimbostratus rankNimbostratus
Jun 16, 2017

SMB monitor for Windows admin shares

Hi Guys,

 

I'm trying to get an SMB monitor working with Windows administrative shares and having a few issues accessing the share directly.

 

Essentially, I can access subfolders of the share, but what I want to do it test for the presence of the share. The logic being, if this admin share exists, mark the pool as up, if it doesn't, mark it down.

 

If I configure the monitor with:

 

Service Name = c$

 

Path/Filename = Test/test.txt

 

Everything works perfectly. I can see from the monitor logs that the smb request takes the format:

 

smbclient //IP Address/c$ PASSWORD -U DOMAIN/USER -I IP ADDRESS -p 445 -c cd "Test"; cd; get "test.txt" "0.test.txt.27683"

 

If, however, I configure the monitor exactly the same but without a Path/Filename set, i.e.:

 

Service Name = c$

 

(Path/Filename blank)

 

Then it fails. I can see the smb request takes the format

 

/usr/bin/smbclient -N -L IP ADDRESS -I IP ADDRESS -p 445

 

So basically, without the share details, user details etc. Windows rightly responds with:

 

Recvd: 'session setup failed: NT_STATUS_ACCESS_DENIED

 

The only difference between the 2 monitors is essentially the presence of the 'get Test/test.txt' in the first one, but the resulting query command is incredibly different.

 

Is there a way of checking for the presence of an actual windows administration share via SMB on the F5?

 

Thanks!

 

No RepliesBe the first to reply