s3: Plumb smb_filename through SMB_VFS_STAT and SMB_VFS_LSTAT
[metze/samba/wip.git] / source3 / smbd / reply.c
index c15ebbe35e34b903346d89cc0283f51f2991591d..8cc865edebf6d1f1ed421f753281043fd8aadaec 100644 (file)
@@ -506,6 +506,7 @@ void reply_special(char *inbuf)
        int msg_flags = CVAL(inbuf,1);
        fstring name1,name2;
        char name_type1, name_type2;
+       struct smbd_server_connection *sconn = smbd_server_conn;
 
        /*
         * We only really use 4 bytes of the outbuf, but for the smb_setlen
@@ -523,7 +524,7 @@ void reply_special(char *inbuf)
        switch (msg_type) {
        case 0x81: /* session request */
 
-               if (already_got_session) {
+               if (sconn->nbt.got_session) {
                        exit_server_cleanly("multiple session request not permitted");
                }
 
@@ -561,13 +562,13 @@ void reply_special(char *inbuf)
                   of possibly valid usernames if we are operating
                   in share mode security */
                if (lp_security() == SEC_SHARE) {
-                       add_session_user(get_remote_machine_name());
+                       add_session_user(sconn, get_remote_machine_name());
                }
 
                reload_services(True);
                reopen_logs();
 
-               already_got_session = True;
+               sconn->nbt.got_session = true;
                break;
 
        case 0x89: /* session keepalive request 
@@ -611,6 +612,7 @@ void reply_tcon(struct smb_request *req)
        const char *p;
        DATA_BLOB password_blob;
        TALLOC_CTX *ctx = talloc_tos();
+       struct smbd_server_connection *sconn = smbd_server_conn;
 
        START_PROFILE(SMBtcon);
 
@@ -642,7 +644,8 @@ void reply_tcon(struct smb_request *req)
 
        password_blob = data_blob(password, pwlen+1);
 
-       conn = make_connection(service,password_blob,dev,req->vuid,&nt_status);
+       conn = make_connection(sconn,service,password_blob,dev,
+                              req->vuid,&nt_status);
        req->conn = conn;
 
        data_blob_clear_free(&password_blob);
@@ -654,7 +657,7 @@ void reply_tcon(struct smb_request *req)
        }
 
        reply_outbuf(req, 2, 0);
-       SSVAL(req->outbuf,smb_vwv0,max_recv);
+       SSVAL(req->outbuf,smb_vwv0,sconn->smb1.negprot.max_recv);
        SSVAL(req->outbuf,smb_vwv1,conn->cnum);
        SSVAL(req->outbuf,smb_tid,conn->cnum);
 
@@ -685,6 +688,7 @@ void reply_tcon_and_X(struct smb_request *req)
        char *path = NULL;
        const char *p, *q;
        uint16 tcon_flags;
+       struct smbd_server_connection *sconn = smbd_server_conn;
 
        START_PROFILE(SMBtconX);
 
@@ -699,7 +703,7 @@ void reply_tcon_and_X(struct smb_request *req)
 
        /* we might have to close an old one */
        if ((tcon_flags & 0x1) && conn) {
-               close_cnum(conn,req->vuid);
+               close_cnum(sconn, conn,req->vuid);
                req->conn = NULL;
                conn = NULL;
        }
@@ -710,7 +714,7 @@ void reply_tcon_and_X(struct smb_request *req)
                return;
        }
 
-       if (global_encrypted_passwords_negotiated) {
+       if (sconn->smb1.negprot.encrypted_passwords) {
                password = data_blob_talloc(talloc_tos(), req->buf, passlen);
                if (lp_security() == SEC_SHARE) {
                        /*
@@ -767,7 +771,7 @@ void reply_tcon_and_X(struct smb_request *req)
 
        DEBUG(4,("Client requested device type [%s] for share [%s]\n", client_devicetype, service));
 
-       conn = make_connection(service, password, client_devicetype,
+       conn = make_connection(sconn, service, password, client_devicetype,
                               req->vuid, &nt_status);
        req->conn =conn;
 
@@ -983,10 +987,15 @@ void reply_checkpath(struct smb_request *req)
                return;
        }
 
-       status = resolve_dfspath(ctx, conn,
-                       req->flags2 & FLAGS2_DFS_PATHNAMES,
-                       name,
-                       &name);
+       DEBUG(3,("reply_checkpath %s mode=%d\n", name, (int)SVAL(req->vwv+0, 0)));
+
+       status = filename_convert(ctx,
+                               conn,
+                               req->flags2 & FLAGS2_DFS_PATHNAMES,
+                               name,
+                               &smb_fname,
+                               &name);
+
        if (!NT_STATUS_IS_OK(status)) {
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
                        reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
@@ -997,53 +1006,23 @@ void reply_checkpath(struct smb_request *req)
                goto path_err;
        }
 
-       DEBUG(3,("reply_checkpath %s mode=%d\n", name, (int)SVAL(req->vwv+0, 0)));
-
-       status = unix_convert(ctx, conn, name, &smb_fname, 0);
-       if (!NT_STATUS_IS_OK(status)) {
-               goto path_err;
-       }
-
-       status = get_full_smb_filename(ctx, smb_fname, &name);
-       if (!NT_STATUS_IS_OK(status)) {
-               goto path_err;
-       }
-
-       status = check_name(conn, name);
-       if (!NT_STATUS_IS_OK(status)) {
-               DEBUG(3,("reply_checkpath: check_name of %s failed (%s)\n",name,nt_errstr(status)));
-               goto path_err;
-       }
-
        if (!VALID_STAT(smb_fname->st) &&
-           (SMB_VFS_STAT(conn, name, &smb_fname->st) != 0)) {
-               DEBUG(3,("reply_checkpath: stat of %s failed (%s)\n",name,strerror(errno)));
+           (SMB_VFS_STAT(conn, smb_fname) != 0)) {
+               DEBUG(3,("reply_checkpath: stat of %s failed (%s)\n",
+                       smb_fname_str_dbg(smb_fname), strerror(errno)));
                status = map_nt_error_from_unix(errno);
                goto path_err;
        }
 
-       if (!S_ISDIR(smb_fname->st.st_mode)) {
+       if (!S_ISDIR(smb_fname->st.st_ex_mode)) {
                reply_botherror(req, NT_STATUS_NOT_A_DIRECTORY,
                                ERRDOS, ERRbadpath);
                goto out;
        }
 
        reply_outbuf(req, 0, 0);
- out:
-       if (smb_fname) {
-               TALLOC_FREE(smb_fname);
-       }
-       END_PROFILE(SMBcheckpath);
-       return;
 
  path_err:
-
-       if (smb_fname) {
-               TALLOC_FREE(smb_fname);
-       }
-
-       END_PROFILE(SMBcheckpath);
-
        /* We special case this - as when a Windows machine
                is parsing a path is steps through the components
                one at a time - if a component fails it expects
@@ -1060,10 +1039,15 @@ void reply_checkpath(struct smb_request *req)
                 */
                reply_botherror(req, NT_STATUS_OBJECT_NAME_NOT_FOUND,
                                ERRDOS, ERRbadpath);
-               return;
+               goto out;
        }
 
        reply_nterror(req, status);
+
+ out:
+       TALLOC_FREE(smb_fname);
+       END_PROFILE(SMBcheckpath);
+       return;
 }
 
 /****************************************************************************
@@ -1091,20 +1075,6 @@ void reply_getatr(struct smb_request *req)
                goto out;
        }
 
-       status = resolve_dfspath(ctx, conn,
-                               req->flags2 & FLAGS2_DFS_PATHNAMES,
-                               fname,
-                               &fname);
-       if (!NT_STATUS_IS_OK(status)) {
-               if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
-                       reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
-                                       ERRSRV, ERRbadpath);
-                       goto out;
-               }
-               reply_nterror(req, status);
-               goto out;
-       }
-
        /* dos smetimes asks for a stat of "" - it returns a "hidden directory"
                under WfWg - weird! */
        if (*fname == '\0') {
@@ -1115,32 +1085,33 @@ void reply_getatr(struct smb_request *req)
                size = 0;
                mtime = 0;
        } else {
-               status = unix_convert(ctx, conn, fname, &smb_fname, 0);
-               if (!NT_STATUS_IS_OK(status)) {
-                       reply_nterror(req, status);
-                       goto out;
-               }
-               status = get_full_smb_filename(ctx, smb_fname, &fname);
-               if (!NT_STATUS_IS_OK(status)) {
-                       reply_nterror(req, status);
-                       goto out;
-               }
-               status = check_name(conn, fname);
+               status = filename_convert(ctx,
+                               conn,
+                               req->flags2 & FLAGS2_DFS_PATHNAMES,
+                               fname,
+                               &smb_fname,
+                               &fname);
                if (!NT_STATUS_IS_OK(status)) {
-                       DEBUG(3,("reply_getatr: check_name of %s failed (%s)\n",fname,nt_errstr(status)));
+                       if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
+                               reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
+                                               ERRSRV, ERRbadpath);
+                               goto out;
+                       }
                        reply_nterror(req, status);
                        goto out;
                }
                if (!VALID_STAT(smb_fname->st) &&
-                   (SMB_VFS_STAT(conn, fname, &smb_fname->st) != 0)) {
-                       DEBUG(3,("reply_getatr: stat of %s failed (%s)\n",fname,strerror(errno)));
+                   (SMB_VFS_STAT(conn, smb_fname) != 0)) {
+                       DEBUG(3,("reply_getatr: stat of %s failed (%s)\n",
+                                smb_fname_str_dbg(smb_fname),
+                                strerror(errno)));
                        reply_unixerror(req, ERRDOS,ERRbadfile);
                        goto out;
                }
 
                mode = dos_mode(conn, fname, &smb_fname->st);
-               size = smb_fname->st.st_size;
-               mtime = smb_fname->st.st_mtime;
+               size = smb_fname->st.st_ex_size;
+               mtime = convert_timespec_to_time_t(smb_fname->st.st_ex_mtime);
                if (mode & aDIR) {
                        size = 0;
                }
@@ -1161,12 +1132,12 @@ void reply_getatr(struct smb_request *req)
                      SVAL(req->outbuf, smb_flg2) | FLAGS2_IS_LONG_NAME);
        }
 
-       DEBUG(3,("reply_getatr: name=%s mode=%d size=%u\n", fname, mode, (unsigned int)size ) );
+       DEBUG(3,("reply_getatr: name=%s mode=%d size=%u\n",
+                smb_fname_str_dbg(smb_fname), mode, (unsigned int)size));
 
  out:
-       if (smb_fname) {
-               TALLOC_FREE(smb_fname);
-       }
+       TALLOC_FREE(smb_fname);
+       TALLOC_FREE(fname);
        END_PROFILE(SMBgetatr);
        return;
 }
@@ -1203,9 +1174,11 @@ void reply_setatr(struct smb_request *req)
                goto out;
        }
 
-       status = resolve_dfspath(ctx, conn,
+       status = filename_convert(ctx,
+                               conn,
                                req->flags2 & FLAGS2_DFS_PATHNAMES,
                                fname,
+                               &smb_fname,
                                &fname);
        if (!NT_STATUS_IS_OK(status)) {
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
@@ -1217,24 +1190,6 @@ void reply_setatr(struct smb_request *req)
                goto out;
        }
 
-       status = unix_convert(ctx, conn, fname, &smb_fname, 0);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       status = get_full_smb_filename(ctx, smb_fname, &fname);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       status = check_name(conn, fname);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
        if (fname[0] == '.' && fname[1] == '\0') {
                /*
                 * Not sure here is the right place to catch this
@@ -1272,9 +1227,7 @@ void reply_setatr(struct smb_request *req)
 
        DEBUG( 3, ( "setatr name=%s mode=%d\n", fname, mode ) );
  out:
-       if (smb_fname) {
-               TALLOC_FREE(smb_fname);
-       }
+       TALLOC_FREE(smb_fname);
        END_PROFILE(SMBsetatr);
        return;
 }
@@ -1331,6 +1284,38 @@ void reply_dskattr(struct smb_request *req)
        return;
 }
 
+/*
+ * Utility function to split the filename from the directory.
+ */
+static NTSTATUS split_fname_dir_mask(TALLOC_CTX *ctx, const char *fname_in,
+                                    char **fname_dir_out,
+                                    char **fname_mask_out)
+{
+       const char *p = NULL;
+       char *fname_dir = NULL;
+       char *fname_mask = NULL;
+
+       p = strrchr_m(fname_in, '/');
+       if (!p) {
+               fname_dir = talloc_strdup(ctx, ".");
+               fname_mask = talloc_strdup(ctx, fname_in);
+       } else {
+               fname_dir = talloc_strndup(ctx, fname_in,
+                   PTR_DIFF(p, fname_in));
+               fname_mask = talloc_strdup(ctx, p+1);
+       }
+
+       if (!fname_dir || !fname_mask) {
+               TALLOC_FREE(fname_dir);
+               TALLOC_FREE(fname_mask);
+               return NT_STATUS_NO_MEMORY;
+       }
+
+       *fname_dir_out = fname_dir;
+       *fname_mask_out = fname_mask;
+       return NT_STATUS_OK;
+}
+
 /****************************************************************************
  Reply to a search.
  Can be called from SMBsearch, SMBffirst or SMBfunique.
@@ -1339,19 +1324,19 @@ void reply_dskattr(struct smb_request *req)
 void reply_search(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
+       char *path = NULL;
        const char *mask = NULL;
        char *directory = NULL;
        char *fname = NULL;
        SMB_OFF_T size;
        uint32 mode;
-       time_t date;
+       struct timespec date;
        uint32 dirtype;
        unsigned int numentries = 0;
        unsigned int maxentries = 0;
        bool finished = False;
        const char *p;
        int status_len;
-       char *path = NULL;
        char status[21];
        int dptr_num= -1;
        bool check_descend = False;
@@ -1393,23 +1378,6 @@ void reply_search(struct smb_request *req)
                return;
        }
 
-       nt_status = resolve_dfspath_wcard(ctx, conn,
-                                         req->flags2 & FLAGS2_DFS_PATHNAMES,
-                                         path,
-                                         &path,
-                                         &mask_contains_wcard);
-       if (!NT_STATUS_IS_OK(nt_status)) {
-               if (NT_STATUS_EQUAL(nt_status,NT_STATUS_PATH_NOT_COVERED)) {
-                       reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
-                                       ERRSRV, ERRbadpath);
-                       END_PROFILE(SMBsearch);
-                       return;
-               }
-               reply_nterror(req, nt_status);
-               END_PROFILE(SMBsearch);
-               return;
-       }
-
        p++;
        status_len = SVAL(p, 0);
        p += 2;
@@ -1419,6 +1387,23 @@ void reply_search(struct smb_request *req)
        if (status_len == 0) {
                struct smb_filename *smb_fname = NULL;
 
+               nt_status = resolve_dfspath_wcard(ctx, conn,
+                                         req->flags2 & FLAGS2_DFS_PATHNAMES,
+                                         path,
+                                         &path,
+                                         &mask_contains_wcard);
+               if (!NT_STATUS_IS_OK(nt_status)) {
+                       if (NT_STATUS_EQUAL(nt_status,NT_STATUS_PATH_NOT_COVERED)) {
+                               reply_botherror(req, NT_STATUS_PATH_NOT_COVERED,
+                                               ERRSRV, ERRbadpath);
+                               END_PROFILE(SMBsearch);
+                               return;
+                       }
+                       reply_nterror(req, nt_status);
+                       END_PROFILE(SMBsearch);
+                       return;
+               }
+
                nt_status = unix_convert(ctx, conn, path, &smb_fname,
                                         UCF_ALLOW_WCARD_LCOMP);
                if (!NT_STATUS_IS_OK(nt_status)) {
@@ -1563,7 +1548,7 @@ void reply_search(struct smb_request *req)
                                                fname,
                                                size,
                                                mode,
-                                               date,
+                                               convert_timespec_to_time_t(date),
                                                !allow_long_path_components)) {
                                        reply_nterror(req, NT_STATUS_NO_MEMORY);
                                        END_PROFILE(SMBsearch);
@@ -1706,12 +1691,12 @@ void reply_fclose(struct smb_request *req)
 void reply_open(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
+       struct smb_filename *smb_fname = NULL;
        char *fname = NULL;
        uint32 fattr=0;
        SMB_OFF_T size = 0;
        time_t mtime=0;
        int info;
-       SMB_STRUCT_STAT sbuf;
        files_struct *fsp;
        int oplock_request;
        int deny_mode;
@@ -1725,12 +1710,9 @@ void reply_open(struct smb_request *req)
 
        START_PROFILE(SMBopen);
 
-       SET_STAT_INVALID(sbuf);
-
        if (req->wct < 2) {
                reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
-               END_PROFILE(SMBopen);
-               return;
+               goto out;
        }
 
        oplock_request = CORE_OPLOCK_REQUEST(req->inbuf);
@@ -1741,24 +1723,38 @@ void reply_open(struct smb_request *req)
                            STR_TERMINATE, &status);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBopen);
-               return;
+               goto out;
+       }
+
+       status = filename_convert(ctx,
+                               conn,
+                               req->flags2 & FLAGS2_DFS_PATHNAMES,
+                               fname,
+                               &smb_fname,
+                               &fname);
+       if (!NT_STATUS_IS_OK(status)) {
+               if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
+                       reply_botherror(req,
+                                       NT_STATUS_PATH_NOT_COVERED,
+                                       ERRSRV, ERRbadpath);
+                       goto out;
+               }
+               reply_nterror(req, status);
+               goto out;
        }
 
        if (!map_open_params_to_ntcreate(
                    fname, deny_mode, OPENX_FILE_EXISTS_OPEN, &access_mask,
                    &share_mode, &create_disposition, &create_options)) {
                reply_nterror(req, NT_STATUS_DOS(ERRDOS, ERRbadaccess));
-               END_PROFILE(SMBopen);
-               return;
+               goto out;
        }
 
        status = SMB_VFS_CREATE_FILE(
                conn,                                   /* conn */
                req,                                    /* req */
                0,                                      /* root_dir_fid */
-               fname,                                  /* fname */
-               CFF_DOS_PATH,                           /* create_file_flags */
+               smb_fname,                              /* fname */
                access_mask,                            /* access_mask */
                share_mode,                             /* share_access */
                create_disposition,                     /* create_disposition*/
@@ -1769,30 +1765,26 @@ void reply_open(struct smb_request *req)
                NULL,                                   /* sd */
                NULL,                                   /* ea_list */
                &fsp,                                   /* result */
-               &info,                                  /* pinfo */
-               &sbuf);                                 /* psbuf */
+               &info);                                 /* pinfo */
 
        if (!NT_STATUS_IS_OK(status)) {
                if (open_was_deferred(req->mid)) {
                        /* We have re-scheduled this call. */
-                       END_PROFILE(SMBopen);
-                       return;
+                       goto out;
                }
                reply_openerror(req, status);
-               END_PROFILE(SMBopen);
-               return;
+               goto out;
        }
 
-       size = sbuf.st_size;
-       fattr = dos_mode(conn,fsp->fsp_name,&sbuf);
-       mtime = sbuf.st_mtime;
+       size = smb_fname->st.st_ex_size;
+       fattr = dos_mode(conn,fsp->fsp_name,&smb_fname->st);
+       mtime = convert_timespec_to_time_t(smb_fname->st.st_ex_mtime);
 
        if (fattr & aDIR) {
                DEBUG(3,("attempt to open a directory %s\n",fsp->fsp_name));
                close_file(req, fsp, ERROR_CLOSE);
                reply_doserror(req, ERRDOS,ERRnoaccess);
-               END_PROFILE(SMBopen);
-               return;
+               goto out;
        }
 
        reply_outbuf(req, 7, 0);
@@ -1815,6 +1807,8 @@ void reply_open(struct smb_request *req)
                SCVAL(req->outbuf,smb_flg,
                      CVAL(req->outbuf,smb_flg)|CORE_OPLOCK_GRANTED);
        }
+ out:
+       TALLOC_FREE(smb_fname);
        END_PROFILE(SMBopen);
        return;
 }
@@ -1826,6 +1820,7 @@ void reply_open(struct smb_request *req)
 void reply_open_and_X(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
+       struct smb_filename *smb_fname = NULL;
        char *fname = NULL;
        uint16 open_flags;
        int deny_mode;
@@ -1842,7 +1837,6 @@ void reply_open_and_X(struct smb_request *req)
        int smb_ofun;
        uint32 fattr=0;
        int mtime=0;
-       SMB_STRUCT_STAT sbuf;
        int smb_action = 0;
        files_struct *fsp;
        NTSTATUS status;
@@ -1858,12 +1852,9 @@ void reply_open_and_X(struct smb_request *req)
 
        if (req->wct < 15) {
                reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
-               END_PROFILE(SMBopenX);
-               return;
+               goto out;
        }
 
-       SET_STAT_INVALID(sbuf);
-
        open_flags = SVAL(req->vwv+2, 0);
        deny_mode = SVAL(req->vwv+3, 0);
        smb_attr = SVAL(req->vwv+5, 0);
@@ -1880,8 +1871,7 @@ void reply_open_and_X(struct smb_request *req)
                } else {
                        reply_doserror(req, ERRSRV, ERRaccess);
                }
-               END_PROFILE(SMBopenX);
-               return;
+               goto out;
        }
 
        /* XXXX we need to handle passed times, sattr and flags */
@@ -1889,24 +1879,38 @@ void reply_open_and_X(struct smb_request *req)
                        STR_TERMINATE, &status);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBopenX);
-               return;
+               goto out;
+       }
+
+       status = filename_convert(ctx,
+                               conn,
+                               req->flags2 & FLAGS2_DFS_PATHNAMES,
+                               fname,
+                               &smb_fname,
+                               &fname);
+       if (!NT_STATUS_IS_OK(status)) {
+               if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
+                       reply_botherror(req,
+                                       NT_STATUS_PATH_NOT_COVERED,
+                                       ERRSRV, ERRbadpath);
+                       goto out;
+               }
+               reply_nterror(req, status);
+               goto out;
        }
 
        if (!map_open_params_to_ntcreate(
                    fname, deny_mode, smb_ofun, &access_mask,
                    &share_mode, &create_disposition, &create_options)) {
                reply_nterror(req, NT_STATUS_DOS(ERRDOS, ERRbadaccess));
-               END_PROFILE(SMBopenX);
-               return;
+               goto out;
        }
 
        status = SMB_VFS_CREATE_FILE(
                conn,                                   /* conn */
                req,                                    /* req */
                0,                                      /* root_dir_fid */
-               fname,                                  /* fname */
-               CFF_DOS_PATH,                           /* create_file_flags */
+               smb_fname,                              /* fname */
                access_mask,                            /* access_mask */
                share_mode,                             /* share_access */
                create_disposition,                     /* create_disposition*/
@@ -1917,17 +1921,15 @@ void reply_open_and_X(struct smb_request *req)
                NULL,                                   /* sd */
                NULL,                                   /* ea_list */
                &fsp,                                   /* result */
-               &smb_action,                            /* pinfo */
-               &sbuf);                                 /* psbuf */
+               &smb_action);                           /* pinfo */
 
        if (!NT_STATUS_IS_OK(status)) {
-               END_PROFILE(SMBopenX);
                if (open_was_deferred(req->mid)) {
                        /* We have re-scheduled this call. */
-                       return;
+                       goto out;
                }
                reply_openerror(req, status);
-               return;
+               goto out;
        }
 
        /* Setting the "size" field in vwv9 and vwv10 causes the file to be set to this size,
@@ -1937,26 +1939,24 @@ void reply_open_and_X(struct smb_request *req)
                if (vfs_allocate_file_space(fsp, fsp->initial_allocation_size) == -1) {
                        close_file(req, fsp, ERROR_CLOSE);
                        reply_nterror(req, NT_STATUS_DISK_FULL);
-                       END_PROFILE(SMBopenX);
-                       return;
+                       goto out;
                }
                retval = vfs_set_filelen(fsp, (SMB_OFF_T)allocation_size);
                if (retval < 0) {
                        close_file(req, fsp, ERROR_CLOSE);
                        reply_nterror(req, NT_STATUS_DISK_FULL);
-                       END_PROFILE(SMBopenX);
-                       return;
+                       goto out;
                }
-               sbuf.st_size = SMB_VFS_GET_ALLOC_SIZE(conn,fsp,&sbuf);
+               smb_fname->st.st_ex_size =
+                   SMB_VFS_GET_ALLOC_SIZE(conn, fsp, &smb_fname->st);
        }
 
-       fattr = dos_mode(conn,fsp->fsp_name,&sbuf);
-       mtime = sbuf.st_mtime;
+       fattr = dos_mode(conn,fsp->fsp_name,&smb_fname->st);
+       mtime = convert_timespec_to_time_t(smb_fname->st.st_ex_mtime);
        if (fattr & aDIR) {
                close_file(req, fsp, ERROR_CLOSE);
                reply_doserror(req, ERRDOS, ERRnoaccess);
-               END_PROFILE(SMBopenX);
-               return;
+               goto out;
        }
 
        /* If the caller set the extended oplock request bit
@@ -2000,7 +2000,7 @@ void reply_open_and_X(struct smb_request *req)
        } else {
                srv_put_dos_date3((char *)req->outbuf,smb_vwv4,mtime);
        }
-       SIVAL(req->outbuf,smb_vwv6,(uint32)sbuf.st_size);
+       SIVAL(req->outbuf,smb_vwv6,(uint32)smb_fname->st.st_ex_size);
        SSVAL(req->outbuf,smb_vwv8,GET_OPENX_MODE(deny_mode));
        SSVAL(req->outbuf,smb_vwv11,smb_action);
 
@@ -2008,8 +2008,10 @@ void reply_open_and_X(struct smb_request *req)
                SIVAL(req->outbuf, smb_vwv15, STD_RIGHT_ALL_ACCESS);
        }
 
-       END_PROFILE(SMBopenX);
        chain_reply(req);
+ out:
+       TALLOC_FREE(smb_fname);
+       END_PROFILE(SMBopenX);
        return;
 }
 
@@ -2019,11 +2021,12 @@ void reply_open_and_X(struct smb_request *req)
 
 void reply_ulogoffX(struct smb_request *req)
 {
+       struct smbd_server_connection *sconn = smbd_server_conn;
        user_struct *vuser;
 
        START_PROFILE(SMBulogoffX);
 
-       vuser = get_valid_user_struct(req->vuid);
+       vuser = get_valid_user_struct(sconn, req->vuid);
 
        if(vuser == NULL) {
                DEBUG(3,("ulogoff, vuser id %d does not map to user.\n",
@@ -2036,7 +2039,7 @@ void reply_ulogoffX(struct smb_request *req)
                file_close_user(req->vuid);
        }
 
-       invalidate_vuid(req->vuid);
+       invalidate_vuid(sconn, req->vuid);
 
        reply_outbuf(req, 2, 0);
 
@@ -2053,12 +2056,12 @@ void reply_ulogoffX(struct smb_request *req)
 void reply_mknew(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
+       struct smb_filename *smb_fname = NULL;
        char *fname = NULL;
        uint32 fattr = 0;
        struct smb_file_time ft;
        files_struct *fsp;
        int oplock_request = 0;
-       SMB_STRUCT_STAT sbuf;
        NTSTATUS status;
        uint32 access_mask = FILE_GENERIC_READ | FILE_GENERIC_WRITE;
        uint32 share_mode = FILE_SHARE_READ|FILE_SHARE_WRITE;
@@ -2068,12 +2071,10 @@ void reply_mknew(struct smb_request *req)
 
        START_PROFILE(SMBcreate);
        ZERO_STRUCT(ft);
-       SET_STAT_INVALID(sbuf);
 
         if (req->wct < 3) {
                reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
-               END_PROFILE(SMBcreate);
-               return;
+               goto out;
        }
 
        fattr = SVAL(req->vwv+0, 0);
@@ -2086,8 +2087,24 @@ void reply_mknew(struct smb_request *req)
                            STR_TERMINATE, &status);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
-               END_PROFILE(SMBcreate);
-               return;
+               goto out;
+       }
+
+       status = filename_convert(ctx,
+                               conn,
+                               req->flags2 & FLAGS2_DFS_PATHNAMES,
+                               fname,
+                               &smb_fname,
+                               &fname);
+       if (!NT_STATUS_IS_OK(status)) {
+               if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
+                       reply_botherror(req,
+                                       NT_STATUS_PATH_NOT_COVERED,
+                                       ERRSRV, ERRbadpath);
+                       goto out;
+               }
+               reply_nterror(req, status);
+               goto out;
        }
 
        if (fattr & aVOLID) {
@@ -2107,8 +2124,7 @@ void reply_mknew(struct smb_request *req)
                conn,                                   /* conn */
                req,                                    /* req */
                0,                                      /* root_dir_fid */
-               fname,                                  /* fname */
-               CFF_DOS_PATH,                           /* create_file_flags */
+               smb_fname,                              /* fname */
                access_mask,                            /* access_mask */
                share_mode,                             /* share_access */
                create_disposition,                     /* create_disposition*/
@@ -2119,25 +2135,23 @@ void reply_mknew(struct smb_request *req)
                NULL,                                   /* sd */
                NULL,                                   /* ea_list */
                &fsp,                                   /* result */
-               NULL,                                   /* pinfo */
-               &sbuf);                                 /* psbuf */
+               NULL);                                  /* pinfo */
 
        if (!NT_STATUS_IS_OK(status)) {
-               END_PROFILE(SMBcreate);
                if (open_was_deferred(req->mid)) {
                        /* We have re-scheduled this call. */
-                       return;
+                       goto out;
                }
                reply_openerror(req, status);
-               return;
+               goto out;
        }
 
-       ft.atime = get_atimespec(&sbuf); /* atime. */
-       status = smb_set_file_time(conn, fsp, fsp->fsp_name, &sbuf, &ft, true);
+       ft.atime = smb_fname->st.st_ex_atime; /* atime. */
+       status = smb_set_file_time(conn, fsp, fsp->fsp_name, &smb_fname->st,
+                                  &ft, true);
        if (!NT_STATUS_IS_OK(status)) {
                END_PROFILE(SMBcreate);
-               reply_openerror(req, status);
-               return;
+               goto out;
        }
 
        reply_outbuf(req, 1, 0);
@@ -2157,6 +2171,8 @@ void reply_mknew(struct smb_request *req)
        DEBUG( 3, ( "reply_mknew %s fd=%d dmode=0x%x\n",
                    fsp->fsp_name, fsp->fh->fd, (unsigned int)fattr ) );
 
+ out:
+       TALLOC_FREE(smb_fname);
        END_PROFILE(SMBcreate);
        return;
 }
@@ -2207,9 +2223,10 @@ void reply_ctemp(struct smb_request *req)
                goto out;
        }
 
-       status = resolve_dfspath(ctx, conn,
+       status = filename_convert(ctx, conn,
                                req->flags2 & FLAGS2_DFS_PATHNAMES,
                                fname,
+                               &smb_fname,
                                &fname);
        if (!NT_STATUS_IS_OK(status)) {
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
@@ -2221,40 +2238,20 @@ void reply_ctemp(struct smb_request *req)
                goto out;
        }
 
-       status = unix_convert(ctx, conn, fname, &smb_fname, 0);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       status = get_full_smb_filename(ctx, smb_fname, &fname);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       status = check_name(conn, fname);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       tmpfd = mkstemp(fname);
+       tmpfd = mkstemp(smb_fname->base_name);
        if (tmpfd == -1) {
                reply_unixerror(req, ERRDOS, ERRnoaccess);
                goto out;
        }
 
-       SET_STAT_INVALID(smb_fname->st);
-       SMB_VFS_STAT(conn, fname, &smb_fname->st);
+       SMB_VFS_STAT(conn, smb_fname);
 
        /* We should fail if file does not exist. */
        status = SMB_VFS_CREATE_FILE(
                conn,                                   /* conn */
                req,                                    /* req */
                0,                                      /* root_dir_fid */
-               fname,                                  /* fname */
-               0,                                      /* create_file_flags */
+               smb_fname,                              /* fname */
                FILE_GENERIC_READ | FILE_GENERIC_WRITE, /* access_mask */
                FILE_SHARE_READ | FILE_SHARE_WRITE,     /* share_access */
                FILE_OPEN,                              /* create_disposition*/
@@ -2265,8 +2262,7 @@ void reply_ctemp(struct smb_request *req)
                NULL,                                   /* sd */
                NULL,                                   /* ea_list */
                &fsp,                                   /* result */
-               NULL,                                   /* pinfo */
-               &smb_fname->st);                        /* psbuf */
+               NULL);                                  /* pinfo */
 
        /* close fd from mkstemp() */
        close(tmpfd);
@@ -2314,11 +2310,9 @@ void reply_ctemp(struct smb_request *req)
 
        DEBUG( 2, ( "reply_ctemp: created temp file %s\n", fsp->fsp_name ) );
        DEBUG( 3, ( "reply_ctemp %s fd=%d umode=0%o\n", fsp->fsp_name,
-                   fsp->fh->fd, (unsigned int)smb_fname->st.st_mode));
+                   fsp->fh->fd, (unsigned int)smb_fname->st.st_ex_mode));
  out:
-       if (smb_fname) {
-               TALLOC_FREE(smb_fname);
-       }
+       TALLOC_FREE(smb_fname);
        END_PROFILE(SMBctemp);
        return;
 }
@@ -2341,7 +2335,7 @@ static NTSTATUS can_rename(connection_struct *conn, files_struct *fsp,
                return NT_STATUS_NO_SUCH_FILE;
        }
 
-       if (S_ISDIR(pst->st_mode)) {
+       if (S_ISDIR(pst->st_ex_mode)) {
                if (fsp->posix_open) {
                        return NT_STATUS_OK;
                }
@@ -2368,10 +2362,10 @@ static NTSTATUS can_rename(connection_struct *conn, files_struct *fsp,
 
 static NTSTATUS do_unlink(connection_struct *conn,
                        struct smb_request *req,
-                       const char *fname,
+                       struct smb_filename *smb_fname,
                        uint32 dirtype)
 {
-       SMB_STRUCT_STAT sbuf;
+       char *fname = NULL;
        uint32 fattr;
        files_struct *fsp;
        uint32 dirtype_orig = dirtype;
@@ -2383,11 +2377,16 @@ static NTSTATUS do_unlink(connection_struct *conn,
                return NT_STATUS_MEDIA_WRITE_PROTECTED;
        }
 
-       if (SMB_VFS_LSTAT(conn,fname,&sbuf) != 0) {
+       if (SMB_VFS_LSTAT(conn, smb_fname) != 0) {
                return map_nt_error_from_unix(errno);
        }
 
-       fattr = dos_mode(conn,fname,&sbuf);
+       status = get_full_smb_filename(smb_fname, smb_fname, &fname);
+       if (!NT_STATUS_IS_OK(status)) {
+               return status;
+       }
+       fattr = dos_mode(conn, fname, &smb_fname->st);
+       TALLOC_FREE(fname);
 
        if (dirtype & FILE_ATTRIBUTE_NORMAL) {
                dirtype = aDIR|aARCH|aRONLY;
@@ -2465,8 +2464,7 @@ static NTSTATUS do_unlink(connection_struct *conn,
                (conn,                  /* conn */
                 req,                   /* req */
                 0,                     /* root_dir_fid */
-                fname,                 /* fname */
-                0,                     /* create_file_flags */
+                smb_fname,             /* fname */
                 DELETE_ACCESS,         /* access_mask */
                 FILE_SHARE_NONE,       /* share_access */
                 FILE_OPEN,             /* create_disposition*/
@@ -2477,8 +2475,7 @@ static NTSTATUS do_unlink(connection_struct *conn,
                 NULL,                  /* sd */
                 NULL,                  /* ea_list */
                 &fsp,                  /* result */
-                NULL,                  /* pinfo */
-                &sbuf);                /* psbuf */
+                NULL);                 /* pinfo */
 
        if (!NT_STATUS_IS_OK(status)) {
                DEBUG(10, ("SMB_VFS_CREATEFILE failed: %s\n",
@@ -2504,39 +2501,23 @@ NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
                          uint32 dirtype, const char *name_in, bool has_wild)
 {
        struct smb_filename *smb_fname = NULL;
-       const char *directory = NULL;
-       char *mask = NULL;
-       char *name = NULL;
-       char *p = NULL;
+       char *fname_dir = NULL;
+       char *fname_mask = NULL;
        int count=0;
        NTSTATUS status = NT_STATUS_OK;
-       SMB_STRUCT_STAT st;
        TALLOC_CTX *ctx = talloc_tos();
 
        status = unix_convert(ctx, conn, name_in, &smb_fname,
                              has_wild ? UCF_ALLOW_WCARD_LCOMP : 0);
        if (!NT_STATUS_IS_OK(status)) {
-               return status;
+               goto out;
        }
 
-       status = get_full_smb_filename(ctx, smb_fname, &name);
+       /* Split up the directory from the filename/mask. */
+       status = split_fname_dir_mask(ctx, smb_fname->base_name,
+                                     &fname_dir, &fname_mask);
        if (!NT_STATUS_IS_OK(status)) {
-               TALLOC_FREE(smb_fname);
-               return status;
-       }
-
-       p = strrchr_m(name,'/');
-       if (!p) {
-               directory = talloc_strdup(ctx, ".");
-               if (!directory) {
-                       TALLOC_FREE(smb_fname);
-                       return NT_STATUS_NO_MEMORY;
-               }
-               mask = name;
-       } else {
-               *p = 0;
-               directory = name;
-               mask = p+1;
+               goto out;
        }
 
        /*
@@ -2548,38 +2529,44 @@ NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
         * Tine Smukavec <valentin.smukavec@hermes.si>.
         */
 
-       if (!VALID_STAT(smb_fname->st) && mangle_is_mangled(mask,conn->params)) {
+       if (!VALID_STAT(smb_fname->st) &&
+           mangle_is_mangled(fname_mask, conn->params)) {
                char *new_mask = NULL;
-               mangle_lookup_name_from_8_3(ctx,
-                               mask,
-                               &new_mask,
-                               conn->params );
+               mangle_lookup_name_from_8_3(ctx, fname_mask,
+                                           &new_mask, conn->params);
                if (new_mask) {
-                       mask = new_mask;
+                       TALLOC_FREE(fname_mask);
+                       fname_mask = new_mask;
                }
        }
-       TALLOC_FREE(smb_fname);
 
        if (!has_wild) {
-               directory = talloc_asprintf(ctx,
-                               "%s/%s",
-                               directory,
-                               mask);
-               if (!directory) {
-                       return NT_STATUS_NO_MEMORY;
+
+               /*
+                * Only one file needs to be unlinked. Append the mask back
+                * onto the directory.
+                */
+               TALLOC_FREE(smb_fname->base_name);
+               smb_fname->base_name = talloc_asprintf(smb_fname,
+                                                      "%s/%s",
+                                                      fname_dir,
+                                                      fname_mask);
+               if (!smb_fname->base_name) {
+                       status = NT_STATUS_NO_MEMORY;
+                       goto out;
                }
                if (dirtype == 0) {
                        dirtype = FILE_ATTRIBUTE_NORMAL;
                }
 
-               status = check_name(conn, directory);
+               status = check_name(conn, smb_fname->base_name);
                if (!NT_STATUS_IS_OK(status)) {
-                       return status;
+                       goto out;
                }
 
-               status = do_unlink(conn, req, directory, dirtype);
+               status = do_unlink(conn, req, smb_fname, dirtype);
                if (!NT_STATUS_IS_OK(status)) {
-                       return status;
+                       goto out;
                }
 
                count++;
@@ -2589,23 +2576,29 @@ NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
                const char *dname;
 
                if ((dirtype & SAMBA_ATTRIBUTES_MASK) == aDIR) {
-                       return NT_STATUS_OBJECT_NAME_INVALID;
+                       status = NT_STATUS_OBJECT_NAME_INVALID;
+                       goto out;
                }
 
-               if (strequal(mask,"????????.???")) {
-                       mask[0] = '*';
-                       mask[1] = '\0';
+               if (strequal(fname_mask,"????????.???")) {
+                       TALLOC_FREE(fname_mask);
+                       fname_mask = talloc_strdup(ctx, "*");
+                       if (!fname_mask) {
+                               status = NT_STATUS_NO_MEMORY;
+                               goto out;
+                       }
                }
 
-               status = check_name(conn, directory);
+               status = check_name(conn, fname_dir);
                if (!NT_STATUS_IS_OK(status)) {
-                       return status;
+                       goto out;
                }
 
-               dir_hnd = OpenDir(talloc_tos(), conn, directory, mask,
+               dir_hnd = OpenDir(talloc_tos(), conn, fname_dir, fname_mask,
                                  dirtype);
                if (dir_hnd == NULL) {
-                       return map_nt_error_from_unix(errno);
+                       status = map_nt_error_from_unix(errno);
+                       goto out;
                }
 
                /* XXXX the CIFS spec says that if bit0 of the flags2 field is set then
@@ -2615,12 +2608,10 @@ NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
 
                status = NT_STATUS_NO_SUCH_FILE;
 
-               while ((dname = ReadDirName(dir_hnd, &offset, &st))) {
-                       char *fname = NULL;
-
-                       if (!is_visible_file(conn, directory, dname, &st,
-                           true))
-                       {
+               while ((dname = ReadDirName(dir_hnd, &offset,
+                                           &smb_fname->st))) {
+                       if (!is_visible_file(conn, fname_dir, dname,
+                                            &smb_fname->st, true)) {
                                continue;
                        }
 
@@ -2629,34 +2620,36 @@ NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
                                continue;
                        }
 
-                       if(!mask_match(dname, mask, conn->case_sensitive)) {
+                       if(!mask_match(dname, fname_mask,
+                                      conn->case_sensitive)) {
                                continue;
                        }
 
-                       fname = talloc_asprintf(ctx, "%s/%s",
-                                       directory,
-                                       dname);
-                       if (!fname) {
-                               return NT_STATUS_NO_MEMORY;
+                       TALLOC_FREE(smb_fname->base_name);
+                       smb_fname->base_name =
+                           talloc_asprintf(smb_fname, "%s/%s",
+                                           fname_dir, dname);
+
+                       if (!smb_fname->base_name) {
+                               TALLOC_FREE(dir_hnd);
+                               status = NT_STATUS_NO_MEMORY;
+                               goto out;
                        }
 
-                       status = check_name(conn, fname);
+                       status = check_name(conn, smb_fname->base_name);
                        if (!NT_STATUS_IS_OK(status)) {
                                TALLOC_FREE(dir_hnd);
-                               return status;
+                               goto out;
                        }
 
-                       status = do_unlink(conn, req, fname, dirtype);
+                       status = do_unlink(conn, req, smb_fname, dirtype);
                        if (!NT_STATUS_IS_OK(status)) {
-                               TALLOC_FREE(fname);
                                continue;
                        }
 
                        count++;
                        DEBUG(3,("unlink_internals: successful unlink [%s]\n",
-                                fname));
-
-                       TALLOC_FREE(fname);
+                                smb_fname->base_name));
                }
                TALLOC_FREE(dir_hnd);
        }
@@ -2665,6 +2658,10 @@ NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
                status = map_nt_error_from_unix(errno);
        }
 
+ out:
+       TALLOC_FREE(smb_fname);
+       TALLOC_FREE(fname_dir);
+       TALLOC_FREE(fname_mask);
        return status;
 }
 
@@ -2903,7 +2900,7 @@ static void send_file_readbraw(connection_struct *conn,
 
        if ( !req_is_in_chain(req) && (nread > 0) && (fsp->base_fsp == NULL) &&
            (fsp->wcp == NULL) &&
-           lp_use_sendfile(SNUM(conn), smbd_server_conn->signing_state) ) {
+           lp_use_sendfile(SNUM(conn), smbd_server_conn->smb1.signing_state) ) {
                ssize_t sendfile_read = -1;
                char header[4];
                DATA_BLOB header_blob;
@@ -3114,7 +3111,7 @@ void reply_readbraw(struct smb_request *req)
        }
 
        if (SMB_VFS_FSTAT(fsp, &st) == 0) {
-               size = st.st_size;
+               size = st.st_ex_size;
        }
 
        if (startpos >= size) {
@@ -3163,6 +3160,7 @@ void reply_lockread(struct smb_request *req)
        files_struct *fsp;
        struct byte_range_lock *br_lck = NULL;
        char *p = NULL;
+       struct smbd_server_connection *sconn = smbd_server_conn;
 
        START_PROFILE(SMBlockread);
 
@@ -3225,11 +3223,12 @@ void reply_lockread(struct smb_request *req)
         * However the requested READ size IS affected by max_recv. Insanity.... JRA.
         */
 
-       if (numtoread > max_recv) {
+       if (numtoread > sconn->smb1.negprot.max_recv) {
                DEBUG(0,("reply_lockread: requested read size (%u) is greater than maximum allowed (%u). \
 Returning short read of maximum allowed for compatibility with Windows 2000.\n",
-                       (unsigned int)numtoread, (unsigned int)max_recv ));
-               numtoread = MIN(numtoread,max_recv);
+                       (unsigned int)numtoread,
+                       (unsigned int)sconn->smb1.negprot.max_recv));
+               numtoread = MIN(numtoread, sconn->smb1.negprot.max_recv);
        }
        nread = read_file(fsp,data,startpos,numtoread);
 
@@ -3271,6 +3270,7 @@ void reply_read(struct smb_request *req)
        int outsize = 0;
        files_struct *fsp;
        struct lock_struct lock;
+       struct smbd_server_connection *sconn = smbd_server_conn;
 
        START_PROFILE(SMBread);
 
@@ -3301,11 +3301,12 @@ void reply_read(struct smb_request *req)
        /*
         * The requested read size cannot be greater than max_recv. JRA.
         */
-       if (numtoread > max_recv) {
+       if (numtoread > sconn->smb1.negprot.max_recv) {
                DEBUG(0,("reply_read: requested read size (%u) is greater than maximum allowed (%u). \
 Returning short read of maximum allowed for compatibility with Windows 2000.\n",
-                       (unsigned int)numtoread, (unsigned int)max_recv ));
-               numtoread = MIN(numtoread,max_recv);
+                       (unsigned int)numtoread,
+                       (unsigned int)sconn->smb1.negprot.max_recv));
+               numtoread = MIN(numtoread, sconn->smb1.negprot.max_recv);
        }
 
        reply_outbuf(req, 5, numtoread+3);
@@ -3403,8 +3404,8 @@ static void send_file_readX(connection_struct *conn, struct smb_request *req,
                return;
        }
 
-       if (!S_ISREG(sbuf.st_mode) || (startpos > sbuf.st_size)
-           || (smb_maxcnt > (sbuf.st_size - startpos))) {
+       if (!S_ISREG(sbuf.st_ex_mode) || (startpos > sbuf.st_ex_size)
+           || (smb_maxcnt > (sbuf.st_ex_size - startpos))) {
                /*
                 * We already know that we would do a short read, so don't
                 * try the sendfile() path.
@@ -3422,7 +3423,7 @@ static void send_file_readX(connection_struct *conn, struct smb_request *req,
        if (!req_is_in_chain(req) &&
            !is_encrypted_packet(req->inbuf) && (fsp->base_fsp == NULL) &&
            (fsp->wcp == NULL) &&
-           lp_use_sendfile(SNUM(conn), smbd_server_conn->signing_state) ) {
+           lp_use_sendfile(SNUM(conn), smbd_server_conn->smb1.signing_state) ) {
                uint8 headerbuf[smb_size + 12 * 2];
                DATA_BLOB header;
 
@@ -4141,6 +4142,7 @@ bool is_valid_writeX_buffer(const uint8_t *inbuf)
        connection_struct *conn = NULL;
        unsigned int doff = 0;
        size_t len = smb_len_large(inbuf);
+       struct smbd_server_connection *sconn = smbd_server_conn;
 
        if (is_encrypted_packet(inbuf)) {
                /* Can't do this on encrypted
@@ -4159,7 +4161,7 @@ bool is_valid_writeX_buffer(const uint8_t *inbuf)
                return false;
        }
 
-       conn = conn_find(SVAL(inbuf, smb_tid));
+       conn = conn_find(sconn, SVAL(inbuf, smb_tid));
        if (conn == NULL) {
                DEBUG(10,("is_valid_writeX_buffer: bad tid\n"));
                return false;
@@ -4452,7 +4454,7 @@ void reply_lseek(struct smb_request *req)
                                        return;
                                }
 
-                               current_pos += sbuf.st_size;
+                               current_pos += sbuf.st_ex_size;
                                if(current_pos < 0)
                                        res = SMB_VFS_LSEEK(fsp,0,SEEK_SET);
                        }
@@ -4830,6 +4832,7 @@ void reply_unlock(struct smb_request *req)
 
 void reply_tdis(struct smb_request *req)
 {
+       struct smbd_server_connection *sconn = smbd_server_conn;
        connection_struct *conn = req->conn;
        START_PROFILE(SMBtdis);
 
@@ -4842,7 +4845,7 @@ void reply_tdis(struct smb_request *req)
 
        conn->used = False;
 
-       close_cnum(conn,req->vuid);
+       close_cnum(sconn, conn,req->vuid);
        req->conn = NULL;
 
        reply_outbuf(req, 0, 0);
@@ -4952,6 +4955,7 @@ void reply_printopen(struct smb_request *req)
        status = print_fsp_open(req, conn, NULL, req->vuid, fsp, &sbuf);
 
        if (!NT_STATUS_IS_OK(status)) {
+               file_free(req, fsp);
                reply_nterror(req, status);
                END_PROFILE(SMBsplopen);
                return;
@@ -5189,9 +5193,10 @@ void reply_mkdir(struct smb_request *req)
                goto out;
        }
 
-       status = resolve_dfspath(ctx, conn,
+       status = filename_convert(ctx, conn,
                                 req->flags2 & FLAGS2_DFS_PATHNAMES,
                                 directory,
+                                &smb_dname,
                                 &directory);
        if (!NT_STATUS_IS_OK(status)) {
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
@@ -5203,25 +5208,7 @@ void reply_mkdir(struct smb_request *req)
                goto out;
        }
 
-       status = unix_convert(ctx, conn, directory, &smb_dname, 0);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       status = get_full_smb_filename(ctx, smb_dname, &directory);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       status = check_name(conn, directory);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       status = create_directory(conn, req, directory);
+       status = create_directory(conn, req, smb_dname);
 
        DEBUG(5, ("create_directory returned %s\n", nt_errstr(status)));
 
@@ -5244,11 +5231,9 @@ void reply_mkdir(struct smb_request *req)
 
        reply_outbuf(req, 0, 0);
 
-       DEBUG( 3, ( "mkdir %s\n", directory ) );
+       DEBUG(3, ("mkdir %s\n", smb_dname->base_name));
  out:
-       if (smb_dname) {
-               TALLOC_FREE(smb_dname);
-       }
+       TALLOC_FREE(smb_dname);
        END_PROFILE(SMBmkdir);
        return;
 }
@@ -5274,6 +5259,8 @@ static bool recursive_rmdir(TALLOC_CTX *ctx,
 
        while((dname = ReadDirName(dir_hnd, &offset, &st))) {
                char *fullname = NULL;
+               struct smb_filename *smb_fname = NULL;
+               NTSTATUS status;
 
                if (ISDOT(dname) || ISDOTDOT(dname)) {
                        continue;
@@ -5290,29 +5277,37 @@ static bool recursive_rmdir(TALLOC_CTX *ctx,
                                dname);
                if (!fullname) {
                        errno = ENOMEM;
-                       ret = False;
-                       break;
+                       goto err_break;
                }
 
-               if(SMB_VFS_LSTAT(conn,fullname, &st) != 0) {
-                       ret = False;
-                       break;
+               status = create_synthetic_smb_fname(talloc_tos(), fullname,
+                                                   NULL, NULL, &smb_fname);
+               if (!NT_STATUS_IS_OK(status)) {
+                       goto err_break;
                }
 
-               if(st.st_mode & S_IFDIR) {
+               if(SMB_VFS_LSTAT(conn, smb_fname) != 0) {
+                       goto err_break;
+               }
+
+               if(smb_fname->st.st_ex_mode & S_IFDIR) {
                        if(!recursive_rmdir(ctx, conn, fullname)) {
-                               ret = False;
-                               break;
+                               goto err_break;
                        }
                        if(SMB_VFS_RMDIR(conn,fullname) != 0) {
-                               ret = False;
-                               break;
+                               goto err_break;
                        }
                } else if(SMB_VFS_UNLINK(conn,fullname) != 0) {
-                       ret = False;
-                       break;
+                       goto err_break;
                }
+               TALLOC_FREE(smb_fname);
+               TALLOC_FREE(fullname);
+               continue;
+        err_break:
+               TALLOC_FREE(smb_fname);
                TALLOC_FREE(fullname);
+               ret = false;
+               break;
        }
        TALLOC_FREE(dir_hnd);
        return ret;
@@ -5330,16 +5325,16 @@ NTSTATUS rmdir_internals(TALLOC_CTX *ctx,
        SMB_STRUCT_STAT st;
 
        /* Might be a symlink. */
-       if(SMB_VFS_LSTAT(conn, directory, &st) != 0) {
+       if(vfs_lstat_smb_fname(conn, directory, &st) != 0) {
                return map_nt_error_from_unix(errno);
        }
 
-       if (S_ISLNK(st.st_mode)) {
+       if (S_ISLNK(st.st_ex_mode)) {
                /* Is what it points to a directory ? */
-               if(SMB_VFS_STAT(conn, directory, &st) != 0) {
+               if(vfs_stat_smb_fname(conn, directory, &st) != 0) {
                        return map_nt_error_from_unix(errno);
                }
-               if (!(S_ISDIR(st.st_mode))) {
+               if (!(S_ISDIR(st.st_ex_mode))) {
                        return NT_STATUS_NOT_A_DIRECTORY;
                }
                ret = SMB_VFS_UNLINK(conn,directory);
@@ -5413,10 +5408,10 @@ NTSTATUS rmdir_internals(TALLOC_CTX *ctx,
                                break;
                        }
 
-                       if(SMB_VFS_LSTAT(conn,fullname, &st) != 0) {
+                       if(vfs_lstat_smb_fname(conn,fullname, &st) != 0) {
                                break;
                        }
-                       if(st.st_mode & S_IFDIR) {
+                       if(st.st_ex_mode & S_IFDIR) {
                                if(!recursive_rmdir(ctx, conn, fullname)) {
                                        break;
                                }
@@ -5469,9 +5464,10 @@ void reply_rmdir(struct smb_request *req)
                goto out;
        }
 
-       status = resolve_dfspath(ctx, conn,
+       status = filename_convert(ctx, conn,
                                 req->flags2 & FLAGS2_DFS_PATHNAMES,
                                 directory,
+                                &smb_dname,
                                 &directory);
        if (!NT_STATUS_IS_OK(status)) {
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
@@ -5483,24 +5479,6 @@ void reply_rmdir(struct smb_request *req)
                goto out;
        }
 
-       status = unix_convert(ctx, conn, directory, &smb_dname, 0);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       status = get_full_smb_filename(ctx, smb_dname, &directory);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       status = check_name(conn, directory);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
        dptr_closepath(directory, req->smbpid);
        status = rmdir_internals(ctx, conn, directory);
        if (!NT_STATUS_IS_OK(status)) {
@@ -5512,9 +5490,7 @@ void reply_rmdir(struct smb_request *req)
 
        DEBUG( 3, ( "rmdir %s\n", directory ) );
  out:
-       if (smb_dname) {
-               TALLOC_FREE(smb_dname);
-       }
+       TALLOC_FREE(smb_dname);
        END_PROFILE(SMBrmdir);
        return;
 }
@@ -5851,10 +5827,7 @@ NTSTATUS rename_internals_fsp(connection_struct *conn,
                return NT_STATUS_INVALID_PARAMETER;
        }
 
-       /*
-        * Have vfs_object_exist also fill sbuf1
-        */
-       dst_exists = vfs_object_exist(conn, newname, &sbuf1);
+       dst_exists = vfs_stat_smb_fname(conn, newname, &sbuf1) == 0;
 
        if(!replace_if_exists && dst_exists) {
                DEBUG(3,("rename_internals_fsp: dest exists doing rename %s -> %s\n",
@@ -5880,9 +5853,10 @@ NTSTATUS rename_internals_fsp(connection_struct *conn,
        } else {
                int ret = -1;
                if (fsp->posix_open) {
-                       ret = SMB_VFS_LSTAT(conn,fsp->fsp_name,&sbuf);
+                       ret = vfs_lstat_smb_fname(conn,fsp->fsp_name,&sbuf);
                } else {
-                       ret = SMB_VFS_STAT(conn,fsp->fsp_name,&sbuf);
+
+                       ret = vfs_stat_smb_fname(conn,fsp->fsp_name,&sbuf);
                }
                if (ret == -1) {
                        return map_nt_error_from_unix(errno);
@@ -5975,13 +5949,10 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        bool dest_has_wild,
                        uint32_t access_mask)
 {
-       struct smb_filename *smb_fname = NULL;
-       struct smb_filename *smb_fname_new = NULL;
-       char *directory = NULL;
-       char *mask = NULL;
-       char *name = NULL;
-       char *newname = NULL;
-       char *p;
+       struct smb_filename *smb_fname_src = NULL;
+       struct smb_filename *smb_fname_dst = NULL;
+       char *fname_src_dir = NULL;
+       char *fname_src_mask = NULL;
        int count=0;
        NTSTATUS status = NT_STATUS_OK;
        struct smb_Dir *dir_hnd = NULL;
@@ -5990,29 +5961,19 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
        int create_options = 0;
        bool posix_pathnames = lp_posix_pathnames();
 
-       status = unix_convert(ctx, conn, name_in, &smb_fname,
+       status = unix_convert(ctx, conn, name_in, &smb_fname_src,
                              src_has_wild ? UCF_ALLOW_WCARD_LCOMP : 0);
        if (!NT_STATUS_IS_OK(status)) {
                goto out;
        }
 
-       status = get_full_smb_filename(ctx, smb_fname, &name);
-       if (!NT_STATUS_IS_OK(status)) {
-               goto out;
-       }
-
-       status = unix_convert(ctx, conn, newname_in, &smb_fname_new,
+       status = unix_convert(ctx, conn, newname_in, &smb_fname_dst,
                              (UCF_SAVE_LCOMP |
                               (dest_has_wild ? UCF_ALLOW_WCARD_LCOMP : 0)));
        if (!NT_STATUS_IS_OK(status)) {
                goto out;
        }
 
-       status = get_full_smb_filename(ctx, smb_fname_new, &newname);
-       if (!NT_STATUS_IS_OK(status)) {
-               goto out;
-       }
-
        /*
         * Split the old name into directory and last component
         * strings. Note that unix_convert may have stripped off a
@@ -6022,23 +5983,12 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
         * as this is checked in resolve_wildcards().
         */
 
-       p = strrchr_m(name,'/');
-       if (!p) {
-               directory = talloc_strdup(ctx, ".");
-               if (!directory) {
-                       status = NT_STATUS_NO_MEMORY;
-                       goto out;
-               }
-               mask = name;
-       } else {
-               *p = 0;
-               directory = talloc_strdup(ctx, name);
-               if (!directory) {
-                       status = NT_STATUS_NO_MEMORY;
-                       goto out;
-               }
-               mask = p+1;
-               *p = '/'; /* Replace needed for exceptional test below. */
+       /* Split up the directory from the filename/mask. */
+       status = split_fname_dir_mask(ctx, smb_fname_src->base_name,
+                                     &fname_src_dir, &fname_src_mask);
+       if (!NT_STATUS_IS_OK(status)) {
+               status = NT_STATUS_NO_MEMORY;
+               goto out;
        }
 
        /*
@@ -6050,41 +6000,46 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
         * Tine Smukavec <valentin.smukavec@hermes.si>.
         */
 
-       if (!VALID_STAT(smb_fname->st) && mangle_is_mangled(mask, conn->params)) {
+       if (!VALID_STAT(smb_fname_src->st) &&
+           mangle_is_mangled(fname_src_mask, conn->params)) {
                char *new_mask = NULL;
-               mangle_lookup_name_from_8_3(ctx,
-                                       mask,
-                                       &new_mask,
-                                       conn->params );
+               mangle_lookup_name_from_8_3(ctx, fname_src_mask, &new_mask,
+                                           conn->params);
                if (new_mask) {
-                       mask = new_mask;
+                       TALLOC_FREE(fname_src_mask);
+                       fname_src_mask = new_mask;
                }
        }
 
        if (!src_has_wild) {
                files_struct *fsp;
+               char *fname_dst = NULL;
 
                /*
-                * No wildcards - just process the one file.
+                * Only one file needs to be renamied. Append the mask back
+                * onto the directory.
                 */
-               /* Add a terminating '/' to the directory name. */
-               directory = talloc_asprintf_append(directory,
-                               "/%s",
-                               mask);
-               if (!directory) {
+               TALLOC_FREE(smb_fname_src->base_name);
+               smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
+                                                          "%s/%s",
+                                                          fname_src_dir,
+                                                          fname_src_mask);
+               if (!smb_fname_src->base_name) {
                        status = NT_STATUS_NO_MEMORY;
                        goto out;
                }
 
-               /* Ensure newname contains a '/' also */
-               if(strrchr_m(newname,'/') == 0) {
-                       newname = talloc_asprintf(ctx,
-                                               "./%s",
-                                               newname);
-                       if (!newname) {
+               /* Ensure dst fname contains a '/' also */
+               if(strrchr_m(smb_fname_dst->base_name, '/') == 0) {
+                       char *tmp;
+                       tmp = talloc_asprintf(smb_fname_dst, "./%s",
+                                             smb_fname_dst->base_name);
+                       if (!tmp) {
                                status = NT_STATUS_NO_MEMORY;
                                goto out;
                        }
+                       TALLOC_FREE(smb_fname_dst->base_name);
+                       smb_fname_dst->base_name = tmp;
                }
 
                DEBUG(3, ("rename_internals: case_sensitive = %d, "
@@ -6092,32 +6047,37 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                          "directory = %s, newname = %s, "
                          "last_component_dest = %s\n",
                          conn->case_sensitive, conn->case_preserve,
-                         conn->short_case_preserve, directory,
-                         newname, smb_fname_new->original_lcomp));
+                         conn->short_case_preserve,
+                         smb_fname_str_dbg(smb_fname_src),
+                         smb_fname_str_dbg(smb_fname_dst),
+                         smb_fname_dst->original_lcomp));
 
                /* The dest name still may have wildcards. */
                if (dest_has_wild) {
-                       char *mod_newname = NULL;
-                       if (!resolve_wildcards(ctx,
-                                       directory,newname,&mod_newname)) {
+                       char *fname_dst_mod = NULL;
+                       if (!resolve_wildcards(smb_fname_dst,
+                                              smb_fname_src->base_name,
+                                              smb_fname_dst->base_name,
+                                              &fname_dst_mod)) {
                                DEBUG(6, ("rename_internals: resolve_wildcards "
-                                       "%s %s failed\n",
-                                       directory,
-                                       newname));
+                                         "%s %s failed\n",
+                                         smb_fname_src->base_name,
+                                         smb_fname_dst->base_name));
                                status = NT_STATUS_NO_MEMORY;
                                goto out;
                        }
-                       newname = mod_newname;
+                       TALLOC_FREE(smb_fname_dst->base_name);
+                       smb_fname_dst->base_name = fname_dst_mod;
                }
 
-               ZERO_STRUCT(smb_fname->st);
+               ZERO_STRUCT(smb_fname_src->st);
                if (posix_pathnames) {
-                       SMB_VFS_LSTAT(conn, directory, &smb_fname->st);
+                       SMB_VFS_LSTAT(conn, smb_fname_src);
                } else {
-                       SMB_VFS_STAT(conn, directory, &smb_fname->st);
+                       SMB_VFS_STAT(conn, smb_fname_src);
                }
 
-               if (S_ISDIR(smb_fname->st.st_mode)) {
+               if (S_ISDIR(smb_fname_src->st.st_ex_mode)) {
                        create_options |= FILE_DIRECTORY_FILE;
                }
 
@@ -6125,8 +6085,7 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        conn,                           /* conn */
                        req,                            /* req */
                        0,                              /* root_dir_fid */
-                       directory,                      /* fname */
-                       0,                              /* create_file_flags */
+                       smb_fname_src,                  /* fname */
                        access_mask,                    /* access_mask */
                        (FILE_SHARE_READ |              /* share_access */
                            FILE_SHARE_WRITE),
@@ -6138,23 +6097,31 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        NULL,                           /* sd */
                        NULL,                           /* ea_list */
                        &fsp,                           /* result */
-                       NULL,                           /* pinfo */
-                       &smb_fname->st);                /* psbuf */
+                       NULL);                          /* pinfo */
 
                if (!NT_STATUS_IS_OK(status)) {
                        DEBUG(3, ("Could not open rename source %s: %s\n",
-                                 directory, nt_errstr(status)));
+                                 smb_fname_str_dbg(smb_fname_src),
+                                 nt_errstr(status)));
+                       goto out;
+               }
+
+               status = get_full_smb_filename(ctx, smb_fname_dst, &fname_dst);
+               if (!NT_STATUS_IS_OK(status)) {
                        goto out;
                }
 
-               status = rename_internals_fsp(conn, fsp, newname,
-                                             smb_fname_new->original_lcomp,
+               status = rename_internals_fsp(conn, fsp, fname_dst,
+                                             smb_fname_dst->original_lcomp,
                                              attrs, replace_if_exists);
 
+               TALLOC_FREE(fname_dst);
+
                close_file(req, fsp, NORMAL_CLOSE);
 
                DEBUG(3, ("rename_internals: Error %s rename %s -> %s\n",
-                         nt_errstr(status), directory,newname));
+                         nt_errstr(status), smb_fname_str_dbg(smb_fname_src),
+                         smb_fname_str_dbg(smb_fname_dst)));
 
                goto out;
        }
@@ -6162,17 +6129,22 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
        /*
         * Wildcards - process each file that matches.
         */
-       if (strequal(mask,"????????.???")) {
-               mask[0] = '*';
-               mask[1] = '\0';
+       if (strequal(fname_src_mask, "????????.???")) {
+               TALLOC_FREE(fname_src_mask);
+               fname_src_mask = talloc_strdup(ctx, "*");
+               if (!fname_src_mask) {
+                       status = NT_STATUS_NO_MEMORY;
+                       goto out;
+               }
        }
 
-       status = check_name(conn, directory);
+       status = check_name(conn, fname_src_dir);
        if (!NT_STATUS_IS_OK(status)) {
                goto out;
        }
 
-       dir_hnd = OpenDir(talloc_tos(), conn, directory, mask, attrs);
+       dir_hnd = OpenDir(talloc_tos(), conn, fname_src_dir, fname_src_mask,
+                         attrs);
        if (dir_hnd == NULL) {
                status = map_nt_error_from_unix(errno);
                goto out;
@@ -6184,9 +6156,9 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
         * - gentest fix. JRA
         */
 
-       while ((dname = ReadDirName(dir_hnd, &offset, &smb_fname->st))) {
+       while ((dname = ReadDirName(dir_hnd, &offset, &smb_fname_src->st))) {
                files_struct *fsp = NULL;
-               char *fname = NULL;
+               char *fname_dst = NULL;
                char *destname = NULL;
                bool sysdir_entry = False;
 
@@ -6199,12 +6171,12 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        }
                }
 
-               if (!is_visible_file(conn, directory, dname, &smb_fname->st,
-                                    False)) {
+               if (!is_visible_file(conn, fname_src_dir, dname,
+                                    &smb_fname_src->st, false)) {
                        continue;
                }
 
-               if(!mask_match(dname, mask, conn->case_sensitive)) {
+               if(!mask_match(dname, fname_src_mask, conn->case_sensitive)) {
                        continue;
                }
 
@@ -6213,20 +6185,21 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        break;
                }
 
-               fname = talloc_asprintf(ctx,
-                               "%s/%s",
-                               directory,
-                               dname);
-               if (!fname) {
+               TALLOC_FREE(smb_fname_src->base_name);
+               smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
+                                                          "%s/%s",
+                                                          fname_src_dir,
+                                                          dname);
+               if (!smb_fname_src->base_name) {
                        status = NT_STATUS_NO_MEMORY;
                        goto out;
                }
 
-               if (!resolve_wildcards(ctx,
-                               fname,newname,&destname)) {
+               if (!resolve_wildcards(ctx, smb_fname_src->base_name,
+                                      smb_fname_dst->base_name,
+                                      &destname)) {
                        DEBUG(6, ("resolve_wildcards %s %s failed\n",
-                                 fname, destname));
-                       TALLOC_FREE(fname);
+                                 smb_fname_src->base_name, destname));
                        continue;
                }
                if (!destname) {
@@ -6234,16 +6207,19 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        goto out;
                }
 
-               ZERO_STRUCT(smb_fname->st);
+               TALLOC_FREE(smb_fname_dst->base_name);
+               smb_fname_dst->base_name = destname;
+
+               ZERO_STRUCT(smb_fname_src->st);
                if (posix_pathnames) {
-                       SMB_VFS_LSTAT(conn, fname, &smb_fname->st);
+                       SMB_VFS_LSTAT(conn, smb_fname_src);
                } else {
-                       SMB_VFS_STAT(conn, fname, &smb_fname->st);
+                       SMB_VFS_STAT(conn, smb_fname_src);
                }
 
                create_options = 0;
 
-               if (S_ISDIR(smb_fname->st.st_mode)) {
+               if (S_ISDIR(smb_fname_src->st.st_ex_mode)) {
                        create_options |= FILE_DIRECTORY_FILE;
                }
 
@@ -6251,8 +6227,7 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        conn,                           /* conn */
                        req,                            /* req */
                        0,                              /* root_dir_fid */
-                       fname,                          /* fname */
-                       0,                              /* create_file_flags */
+                       smb_fname_src,                  /* fname */
                        access_mask,                    /* access_mask */
                        (FILE_SHARE_READ |              /* share_access */
                            FILE_SHARE_WRITE),
@@ -6264,35 +6239,43 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                        NULL,                           /* sd */
                        NULL,                           /* ea_list */
                        &fsp,                           /* result */
-                       NULL,                           /* pinfo */
-                       &smb_fname->st);                /* psbuf */
+                       NULL);                          /* pinfo */
 
                if (!NT_STATUS_IS_OK(status)) {
                        DEBUG(3,("rename_internals: SMB_VFS_CREATE_FILE "
                                 "returned %s rename %s -> %s\n",
-                                nt_errstr(status), directory, newname));
+                                nt_errstr(status),
+                                smb_fname_str_dbg(smb_fname_src),
+                                smb_fname_str_dbg(smb_fname_dst)));
                        break;
                }
 
-               status = rename_internals_fsp(conn, fsp, destname, dname,
+               status = get_full_smb_filename(ctx, smb_fname_dst, &fname_dst);
+               if (!NT_STATUS_IS_OK(status)) {
+                       goto out;
+               }
+
+               status = rename_internals_fsp(conn, fsp, fname_dst, dname,
                                              attrs, replace_if_exists);
 
+               TALLOC_FREE(fname_dst);
+
                close_file(req, fsp, NORMAL_CLOSE);
 
                if (!NT_STATUS_IS_OK(status)) {
                        DEBUG(3, ("rename_internals_fsp returned %s for "
                                  "rename %s -> %s\n", nt_errstr(status),
-                                 directory, newname));
+                                 smb_fname_str_dbg(smb_fname_src),
+                                 smb_fname_str_dbg(smb_fname_dst)));
                        break;
                }
 
                count++;
 
                DEBUG(3,("rename_internals: doing rename on %s -> "
-                        "%s\n",fname,destname));
+                        "%s\n", smb_fname_str_dbg(smb_fname_src),
+                        smb_fname_str_dbg(smb_fname_src)));
 
-               TALLOC_FREE(fname);
-               TALLOC_FREE(destname);
        }
        TALLOC_FREE(dir_hnd);
 
@@ -6301,12 +6284,10 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
        }
 
  out:
-       if (smb_fname) {
-               TALLOC_FREE(smb_fname);
-       }
-       if (smb_fname_new) {
-               TALLOC_FREE(smb_fname_new);
-       }
+       TALLOC_FREE(smb_fname_src);
+       TALLOC_FREE(smb_fname_dst);
+       TALLOC_FREE(fname_src_dir);
+       TALLOC_FREE(fname_src_mask);
        return status;
 }
 
@@ -6418,60 +6399,74 @@ void reply_mv(struct smb_request *req)
 
 NTSTATUS copy_file(TALLOC_CTX *ctx,
                        connection_struct *conn,
-                       const char *src,
-                       const char *dest1,
+                       struct smb_filename *smb_fname_src,
+                       struct smb_filename *smb_fname_dst,
                        int ofun,
                        int count,
                        bool target_is_directory)
 {
-       SMB_STRUCT_STAT src_sbuf, sbuf2;
+       struct smb_filename *smb_fname_dst_tmp = NULL;
+       char *fname_src = NULL;
        SMB_OFF_T ret=-1;
        files_struct *fsp1,*fsp2;
-       char *dest = NULL;
        uint32 dosattrs;
        uint32 new_create_disposition;
        NTSTATUS status;
 
-       dest = talloc_strdup(ctx, dest1);
-       if (!dest) {
-               return NT_STATUS_NO_MEMORY;
+
+       status = copy_smb_filename(ctx, smb_fname_dst, &smb_fname_dst_tmp);
+       if (!NT_STATUS_IS_OK(status)) {
+               return status;
        }
+
+       /*
+        * If the target is a directory, extract the last component from the
+        * src filename and append it to the dst filename
+        */
        if (target_is_directory) {
-               const char *p = strrchr_m(src,'/');
+               const char *p;
+
+               /* dest/target can't be a stream if it's a directory. */
+               SMB_ASSERT(smb_fname_dst->stream_name == NULL);
+
+               p = strrchr_m(smb_fname_src->base_name,'/');
                if (p) {
                        p++;
                } else {
-                       p = src;
+                       p = smb_fname_src->base_name;
                }
-               dest = talloc_asprintf_append(dest,
-                               "/%s",
-                               p);
-               if (!dest) {
-                       return NT_STATUS_NO_MEMORY;
+               smb_fname_dst_tmp->base_name =
+                   talloc_asprintf_append(smb_fname_dst_tmp->base_name, "/%s",
+                                          p);
+               if (!smb_fname_dst_tmp->base_name) {
+                       status = NT_STATUS_NO_MEMORY;
+                       goto out;
                }
        }
 
-       if (!vfs_file_exist(conn,src,&src_sbuf)) {
-               TALLOC_FREE(dest);
-               return NT_STATUS_OBJECT_NAME_NOT_FOUND;
+       status = vfs_file_exist(conn, smb_fname_src);
+       if (!NT_STATUS_IS_OK(status)) {
+               goto out;
        }
 
        if (!target_is_directory && count) {
                new_create_disposition = FILE_OPEN;
        } else {
-               if (!map_open_params_to_ntcreate(dest1,0,ofun,
-                               NULL, NULL, &new_create_disposition, NULL)) {
-                       TALLOC_FREE(dest);
-                       return NT_STATUS_INVALID_PARAMETER;
+               if (!map_open_params_to_ntcreate(smb_fname_dst_tmp->base_name,
+                                                0, ofun, NULL, NULL,
+                                                &new_create_disposition,
+                                                NULL)) {
+                       status = NT_STATUS_INVALID_PARAMETER;
+                       goto out;
                }
        }
 
+       /* Open the src file for reading. */
        status = SMB_VFS_CREATE_FILE(
                conn,                                   /* conn */
                NULL,                                   /* req */
                0,                                      /* root_dir_fid */
-               src,                                    /* fname */
-               0,                                      /* create_file_flags */
+               smb_fname_src,                          /* fname */
                FILE_GENERIC_READ,                      /* access_mask */
                FILE_SHARE_READ | FILE_SHARE_WRITE,     /* share_access */
                FILE_OPEN,                              /* create_disposition*/
@@ -6482,25 +6477,31 @@ NTSTATUS copy_file(TALLOC_CTX *ctx,
                NULL,                                   /* sd */
                NULL,                                   /* ea_list */
                &fsp1,                                  /* result */
-               NULL,                                   /* pinfo */
-               &src_sbuf);                             /* psbuf */
+               NULL);                                  /* psbuf */
 
        if (!NT_STATUS_IS_OK(status)) {
-               TALLOC_FREE(dest);
-               return status;
+               goto out;
        }
 
-       dosattrs = dos_mode(conn, src, &src_sbuf);
-       if (SMB_VFS_STAT(conn,dest,&sbuf2) == -1) {
-               ZERO_STRUCTP(&sbuf2);
+       status = get_full_smb_filename(talloc_tos(), smb_fname_src, &fname_src);
+       if (!NT_STATUS_IS_OK(status)) {
+               goto out;
        }
 
+       dosattrs = dos_mode(conn, fname_src, &smb_fname_src->st);
+
+       TALLOC_FREE(fname_src);
+
+       if (SMB_VFS_STAT(conn, smb_fname_dst_tmp) == -1) {
+               ZERO_STRUCTP(&smb_fname_dst_tmp->st);
+       }
+
+       /* Open the dst file for writing. */
        status = SMB_VFS_CREATE_FILE(
                conn,                                   /* conn */
                NULL,                                   /* req */
                0,                                      /* root_dir_fid */
-               dest,                                   /* fname */
-               0,                                      /* create_file_flags */
+               smb_fname_dst,                          /* fname */
                FILE_GENERIC_WRITE,                     /* access_mask */
                FILE_SHARE_READ | FILE_SHARE_WRITE,     /* share_access */
                new_create_disposition,                 /* create_disposition*/
@@ -6511,14 +6512,11 @@ NTSTATUS copy_file(TALLOC_CTX *ctx,
                NULL,                                   /* sd */
                NULL,                                   /* ea_list */
                &fsp2,                                  /* result */
-               NULL,                                   /* pinfo */
-               &sbuf2);                                /* psbuf */
-
-       TALLOC_FREE(dest);
+               NULL);                                  /* psbuf */
 
        if (!NT_STATUS_IS_OK(status)) {
                close_file(NULL, fsp1, ERROR_CLOSE);
-               return status;
+               goto out;
        }
 
        if ((ofun&3) == 1) {
@@ -6528,18 +6526,19 @@ NTSTATUS copy_file(TALLOC_CTX *ctx,
                         * Stop the copy from occurring.
                         */
                        ret = -1;
-                       src_sbuf.st_size = 0;
+                       smb_fname_src->st.st_ex_size = 0;
                }
        }
 
-       if (src_sbuf.st_size) {
-               ret = vfs_transfer_file(fsp1, fsp2, src_sbuf.st_size);
+       /* Do the actual copy. */
+       if (smb_fname_src->st.st_ex_size) {
+               ret = vfs_transfer_file(fsp1, fsp2, smb_fname_src->st.st_ex_size);
        }
 
        close_file(NULL, fsp1, NORMAL_CLOSE);
 
        /* Ensure the modtime is set correctly on the destination file. */
-       set_close_write_time(fsp2, get_mtimespec(&src_sbuf));
+       set_close_write_time(fsp2, smb_fname_src->st.st_ex_mtime);
 
        /*
         * As we are opening fsp1 read-only we only expect
@@ -6550,14 +6549,19 @@ NTSTATUS copy_file(TALLOC_CTX *ctx,
        status = close_file(NULL, fsp2, NORMAL_CLOSE);
 
        if (!NT_STATUS_IS_OK(status)) {
-               return status;
+               goto out;
        }
 
-       if (ret != (SMB_OFF_T)src_sbuf.st_size) {
-               return NT_STATUS_DISK_FULL;
+       if (ret != (SMB_OFF_T)smb_fname_src->st.st_ex_size) {
+               status = NT_STATUS_DISK_FULL;
+               goto out;
        }
 
-       return NT_STATUS_OK;
+       status = NT_STATUS_OK;
+
+ out:
+       TALLOC_FREE(smb_fname_dst_tmp);
+       return status;
 }
 
 /****************************************************************************
@@ -6567,13 +6571,12 @@ NTSTATUS copy_file(TALLOC_CTX *ctx,
 void reply_copy(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
-       struct smb_filename *smb_fname = NULL;
-       struct smb_filename *smb_fname_new = NULL;
-       char *name = NULL;
-       char *newname = NULL;
-       char *directory = NULL;
-       const char *mask = NULL;
-       const char mask_star[] = "*";
+       struct smb_filename *smb_fname_src = NULL;
+       struct smb_filename *smb_fname_dst = NULL;
+       char *fname_src = NULL;
+       char *fname_dst = NULL;
+       char *fname_src_mask = NULL;
+       char *fname_src_dir = NULL;
        const char *p;
        int count=0;
        int error = ERRnoaccess;
@@ -6599,20 +6602,20 @@ void reply_copy(struct smb_request *req)
        flags = SVAL(req->vwv+2, 0);
 
        p = (const char *)req->buf;
-       p += srvstr_get_path_req_wcard(ctx, req, &name, p, STR_TERMINATE,
+       p += srvstr_get_path_req_wcard(ctx, req, &fname_src, p, STR_TERMINATE,
                                       &status, &source_has_wild);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
                goto out;
        }
-       p += srvstr_get_path_req_wcard(ctx, req, &newname, p, STR_TERMINATE,
+       p += srvstr_get_path_req_wcard(ctx, req, &fname_dst, p, STR_TERMINATE,
                                       &status, &dest_has_wild);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
                goto out;
        }
 
-       DEBUG(3,("reply_copy : %s -> %s\n",name,newname));
+       DEBUG(3,("reply_copy : %s -> %s\n", fname_src, fname_dst));
 
        if (tid2 != conn->cnum) {
                /* can't currently handle inter share copies XXXX */
@@ -6623,8 +6626,8 @@ void reply_copy(struct smb_request *req)
 
        status = resolve_dfspath_wcard(ctx, conn,
                                       req->flags2 & FLAGS2_DFS_PATHNAMES,
-                                      name,
-                                      &name,
+                                      fname_src,
+                                      &fname_src,
                                       &source_has_wild);
        if (!NT_STATUS_IS_OK(status)) {
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
@@ -6638,8 +6641,8 @@ void reply_copy(struct smb_request *req)
 
        status = resolve_dfspath_wcard(ctx, conn,
                                       req->flags2 & FLAGS2_DFS_PATHNAMES,
-                                      newname,
-                                      &newname,
+                                      fname_dst,
+                                      &fname_dst,
                                       &dest_has_wild);
        if (!NT_STATUS_IS_OK(status)) {
                if (NT_STATUS_EQUAL(status,NT_STATUS_PATH_NOT_COVERED)) {
@@ -6651,33 +6654,21 @@ void reply_copy(struct smb_request *req)
                goto out;
        }
 
-       status = unix_convert(ctx, conn, name, &smb_fname,
+       status = unix_convert(ctx, conn, fname_src, &smb_fname_src,
                              source_has_wild ? UCF_ALLOW_WCARD_LCOMP : 0);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
                goto out;
        }
 
-       status = get_full_smb_filename(ctx, smb_fname, &name);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       status = unix_convert(ctx, conn, newname, &smb_fname_new,
+       status = unix_convert(ctx, conn, fname_dst, &smb_fname_dst,
                              dest_has_wild ? UCF_ALLOW_WCARD_LCOMP : 0);
        if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, status);
                goto out;
        }
 
-       status = get_full_smb_filename(ctx, smb_fname_new, &newname);
-       if (!NT_STATUS_IS_OK(status)) {
-               reply_nterror(req, status);
-               goto out;
-       }
-
-       target_is_directory = VALID_STAT_OF_DIR(smb_fname_new->st);
+       target_is_directory = VALID_STAT_OF_DIR(smb_fname_dst->st);
 
        if ((flags&1) && target_is_directory) {
                reply_doserror(req, ERRDOS, ERRbadfile);
@@ -6689,23 +6680,17 @@ void reply_copy(struct smb_request *req)
                goto out;
        }
 
-       if ((flags&(1<<5)) && VALID_STAT_OF_DIR(smb_fname->st)) {
+       if ((flags&(1<<5)) && VALID_STAT_OF_DIR(smb_fname_src->st)) {
                /* wants a tree copy! XXXX */
                DEBUG(3,("Rejecting tree copy\n"));
                reply_doserror(req, ERRSRV, ERRerror);
                goto out;
        }
 
-       p = strrchr_m(name,'/');
-       if (p != NULL) {
-               directory = talloc_strndup(ctx, name, PTR_DIFF(p, name));
-               mask = p+1;
-       } else {
-               directory = talloc_strdup(ctx, "./");
-               mask = name;
-       }
-
-       if (!directory) {
+       /* Split up the directory from the filename/mask. */
+       status = split_fname_dir_mask(ctx, smb_fname_src->base_name,
+                                     &fname_src_dir, &fname_src_mask);
+       if (!NT_STATUS_IS_OK(status)) {
                reply_nterror(req, NT_STATUS_NO_MEMORY);
                goto out;
        }
@@ -6718,47 +6703,62 @@ void reply_copy(struct smb_request *req)
         * for a possible mangle. This patch from
         * Tine Smukavec <valentin.smukavec@hermes.si>.
         */
-
-       if (!VALID_STAT(smb_fname->st) &&
-           mangle_is_mangled(mask, conn->params)) {
+       if (!VALID_STAT(smb_fname_src->st) &&
+           mangle_is_mangled(fname_src_mask, conn->params)) {
                char *new_mask = NULL;
-               mangle_lookup_name_from_8_3(ctx,
-                                       mask,
-                                       &new_mask,
-                                       conn->params );
+               mangle_lookup_name_from_8_3(ctx, fname_src_mask,
+                                           &new_mask, conn->params);
+
+               /* Use demangled name if one was successfully found. */
                if (new_mask) {
-                       mask = new_mask;
+                       TALLOC_FREE(fname_src_mask);
+                       fname_src_mask = new_mask;
                }
        }
 
        if (!source_has_wild) {
-               directory = talloc_asprintf_append(directory,
-                               "/%s",
-                               mask);
+
+               /*
+                * Only one file needs to be copied. Append the mask back onto
+                * the directory.
+                */
+               TALLOC_FREE(smb_fname_src->base_name);
+               smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
+                                                          "%s/%s",
+                                                          fname_src_dir,
+                                                          fname_src_mask);
+               if (!smb_fname_src->base_name) {
+                       reply_nterror(req, NT_STATUS_NO_MEMORY);
+                       goto out;
+               }
+
                if (dest_has_wild) {
-                       char *mod_newname = NULL;
-                       if (!resolve_wildcards(ctx,
-                                       directory,newname,&mod_newname)) {
+                       char *fname_dst_mod = NULL;
+                       if (!resolve_wildcards(smb_fname_dst,
+                                              smb_fname_src->base_name,
+                                              smb_fname_dst->base_name,
+                                              &fname_dst_mod)) {
                                reply_nterror(req, NT_STATUS_NO_MEMORY);
                                goto out;
                        }
-                       newname = mod_newname;
+                       TALLOC_FREE(smb_fname_dst->base_name);
+                       smb_fname_dst->base_name = fname_dst_mod;
                }
 
-               status = check_name(conn, directory);
+               status = check_name(conn, smb_fname_src->base_name);
                if (!NT_STATUS_IS_OK(status)) {
                        reply_nterror(req, status);
                        goto out;
                }
 
-               status = check_name(conn, newname);
+               status = check_name(conn, smb_fname_dst->base_name);
                if (!NT_STATUS_IS_OK(status)) {
                        reply_nterror(req, status);
                        goto out;
                }
 
-               status = copy_file(ctx,conn,directory,newname,ofun,
-                               count,target_is_directory);
+               status = copy_file(ctx, conn, smb_fname_src, smb_fname_dst,
+                                  ofun, count, target_is_directory);
 
                if(!NT_STATUS_IS_OK(status)) {
                        reply_nterror(req, status);
@@ -6771,17 +6771,34 @@ void reply_copy(struct smb_request *req)
                const char *dname = NULL;
                long offset = 0;
 
-               if (strequal(mask,"????????.???")) {
-                       mask = mask_star;
+               /*
+                * There is a wildcard that requires us to actually read the
+                * src dir and copy each file matching the mask to the dst.
+                * Right now streams won't be copied, but this could
+                * presumably be added with a nested loop for reach dir entry.
+                */
+               SMB_ASSERT(!smb_fname_src->stream_name);
+               SMB_ASSERT(!smb_fname_dst->stream_name);
+
+               smb_fname_src->stream_name = NULL;
+               smb_fname_dst->stream_name = NULL;
+
+               if (strequal(fname_src_mask,"????????.???")) {
+                       TALLOC_FREE(fname_src_mask);
+                       fname_src_mask = talloc_strdup(ctx, "*");
+                       if (!fname_src_mask) {
+                               reply_nterror(req, NT_STATUS_NO_MEMORY);
+                               goto out;
+                       }
                }
 
-               status = check_name(conn, directory);
+               status = check_name(conn, fname_src_dir);
                if (!NT_STATUS_IS_OK(status)) {
                        reply_nterror(req, status);
                        goto out;
                }
 
-               dir_hnd = OpenDir(talloc_tos(), conn, directory, mask, 0);
+               dir_hnd = OpenDir(ctx, conn, fname_src_dir, fname_src_mask, 0);
                if (dir_hnd == NULL) {
                        status = map_nt_error_from_unix(errno);
                        reply_nterror(req, status);
@@ -6790,37 +6807,42 @@ void reply_copy(struct smb_request *req)
 
                error = ERRbadfile;
 
+               /* Iterate over the src dir copying each entry to the dst. */
                while ((dname = ReadDirName(dir_hnd, &offset,
-                                           &smb_fname->st))) {
+                                           &smb_fname_src->st))) {
                        char *destname = NULL;
-                       char *fname = NULL;
 
                        if (ISDOT(dname) || ISDOTDOT(dname)) {
                                continue;
                        }
 
-                       if (!is_visible_file(conn, directory, dname,
-                                            &smb_fname->st, False)) {
+                       if (!is_visible_file(conn, fname_src_dir, dname,
+                                            &smb_fname_src->st, false)) {
                                continue;
                        }
 
-                       if(!mask_match(dname, mask, conn->case_sensitive)) {
+                       if(!mask_match(dname, fname_src_mask,
+                                      conn->case_sensitive)) {
                                continue;
                        }
 
                        error = ERRnoaccess;
-                       fname = talloc_asprintf(ctx,
-                                       "%s/%s",
-                                       directory,
-                                       dname);
-                       if (!fname) {
+
+                       /* Get the src smb_fname struct setup. */
+                       TALLOC_FREE(smb_fname_src->base_name);
+                       smb_fname_src->base_name =
+                           talloc_asprintf(smb_fname_src, "%s/%s",
+                                           fname_src_dir, dname);
+
+                       if (!smb_fname_src->base_name) {
                                TALLOC_FREE(dir_hnd);
                                reply_nterror(req, NT_STATUS_NO_MEMORY);
                                goto out;
                        }
 
-                       if (!resolve_wildcards(ctx,
-                                       fname,newname,&destname)) {
+                       if (!resolve_wildcards(ctx, smb_fname_src->base_name,
+                                              smb_fname_dst->base_name,
+                                              &destname)) {
                                continue;
                        }
                        if (!destname) {
@@ -6829,29 +6851,33 @@ void reply_copy(struct smb_request *req)
                                goto out;
                        }
 
-                       status = check_name(conn, fname);
+                       TALLOC_FREE(smb_fname_dst->base_name);
+                       smb_fname_dst->base_name = destname;
+
+                       status = check_name(conn, smb_fname_src->base_name);
                        if (!NT_STATUS_IS_OK(status)) {
                                TALLOC_FREE(dir_hnd);
                                reply_nterror(req, status);
                                goto out;
                        }
 
-                       status = check_name(conn, destname);
+                       status = check_name(conn, smb_fname_dst->base_name);
                        if (!NT_STATUS_IS_OK(status)) {
                                TALLOC_FREE(dir_hnd);
                                reply_nterror(req, status);
                                goto out;
                        }
 
-                       DEBUG(3,("reply_copy : doing copy on %s -> %s\n",fname, destname));
+                       DEBUG(3,("reply_copy : doing copy on %s -> %s\n",
+                               smb_fname_src->base_name,
+                               smb_fname_dst->base_name));
 
-                       status = copy_file(ctx,conn,fname,destname,ofun,
-                                       count,target_is_directory);
+                       status = copy_file(ctx, conn, smb_fname_src,
+                                          smb_fname_dst, ofun, count,
+                                          target_is_directory);
                        if (NT_STATUS_IS_OK(status)) {
                                count++;
                        }
-                       TALLOC_FREE(fname);
-                       TALLOC_FREE(destname);
                }
                TALLOC_FREE(dir_hnd);
        }
@@ -6871,12 +6897,13 @@ void reply_copy(struct smb_request *req)
        reply_outbuf(req, 1, 0);
        SSVAL(req->outbuf,smb_vwv0,count);
  out:
-       if (smb_fname) {
-               TALLOC_FREE(smb_fname);
-       }
-       if (smb_fname_new) {
-               TALLOC_FREE(smb_fname_new);
-       }
+       TALLOC_FREE(smb_fname_src);
+       TALLOC_FREE(smb_fname_dst);
+       TALLOC_FREE(fname_src);
+       TALLOC_FREE(fname_dst);
+       TALLOC_FREE(fname_src_mask);
+       TALLOC_FREE(fname_src_dir);
+
        END_PROFILE(SMBcopy);
        return;
 }
@@ -7465,9 +7492,9 @@ void reply_setattrE(struct smb_request *req)
                int ret = -1;
 
                if (fsp->posix_open) {
-                       ret = SMB_VFS_LSTAT(conn, fsp->fsp_name, &sbuf);
+                       ret = vfs_lstat_smb_fname(conn, fsp->fsp_name, &sbuf);
                } else {
-                       ret = SMB_VFS_STAT(conn, fsp->fsp_name, &sbuf);
+                       ret = vfs_stat_smb_fname(conn, fsp->fsp_name, &sbuf);
                }
                if (ret == -1) {
                        status = map_nt_error_from_unix(errno);
@@ -7573,19 +7600,20 @@ void reply_getattrE(struct smb_request *req)
 
        reply_outbuf(req, 11, 0);
 
-       create_ts = get_create_timespec(&sbuf,
-                                 lp_fake_dir_create_times(SNUM(conn)));
+       create_ts = sbuf.st_ex_btime;
        srv_put_dos_date2((char *)req->outbuf, smb_vwv0, create_ts.tv_sec);
-       srv_put_dos_date2((char *)req->outbuf, smb_vwv2, sbuf.st_atime);
+       srv_put_dos_date2((char *)req->outbuf, smb_vwv2,
+                         convert_timespec_to_time_t(sbuf.st_ex_atime));
        /* Should we check pending modtime here ? JRA */
-       srv_put_dos_date2((char *)req->outbuf, smb_vwv4, sbuf.st_mtime);
+       srv_put_dos_date2((char *)req->outbuf, smb_vwv4,
+                         convert_timespec_to_time_t(sbuf.st_ex_mtime));
 
        if (mode & aDIR) {
                SIVAL(req->outbuf, smb_vwv6, 0);
                SIVAL(req->outbuf, smb_vwv8, 0);
        } else {
                uint32 allocation_size = SMB_VFS_GET_ALLOC_SIZE(conn,fsp, &sbuf);
-               SIVAL(req->outbuf, smb_vwv6, (uint32)sbuf.st_size);
+               SIVAL(req->outbuf, smb_vwv6, (uint32)sbuf.st_ex_size);
                SIVAL(req->outbuf, smb_vwv8, allocation_size);
        }
        SSVAL(req->outbuf,smb_vwv10, mode);