s3/vfs: add SMB_VFS_OFFLOAD_READ_SEND/RECV
[samba.git] / source3 / modules / vfs_fruit.c
index bd71ff1ec5497597c702219889921c45a06c3763..20d15b39af7eacea4f65de60f566d0af5f1107b4 100644 (file)
@@ -31,6 +31,8 @@
 #include "../libcli/smb/smb2_create_ctx.h"
 #include "lib/util/sys_rw.h"
 #include "lib/util/tevent_ntstatus.h"
+#include "lib/util/tevent_unix.h"
+#include "offload_token.h"
 
 /*
  * Enhanced OS X and Netatalk compatibility
@@ -68,7 +70,7 @@
  *
  * The AFP_Resource stream is stored in an AppleDouble file prepending
  * "._" to the filename. On Solaris with ZFS the stream is optionally
- * stored in an EA "org.netatalk.ressource".
+ * stored in an EA "org.netatalk.resource".
  *
  *
  * Extended Attributes
 
 static int vfs_fruit_debug_level = DBGC_VFS;
 
+static struct global_fruit_config {
+       bool nego_aapl; /* client negotiated AAPL */
+
+} global_fruit_config;
+
 #undef DBGC_CLASS
 #define DBGC_CLASS vfs_fruit_debug_level
 
 #define FRUIT_PARAM_TYPE_NAME "fruit"
 #define ADOUBLE_NAME_PREFIX "._"
 
-/*
- * REVIEW:
- * This is hokey, but what else can we do?
- */
 #define NETATALK_META_XATTR "org.netatalk.Metadata"
-#if defined(HAVE_ATTROPEN) || defined(FREEBSD)
+#define NETATALK_RSRC_XATTR "org.netatalk.ResourceFork"
+
+#if defined(HAVE_ATTROPEN)
 #define AFPINFO_EA_NETATALK NETATALK_META_XATTR
-#define AFPRESOURCE_EA_NETATALK "org.netatalk.ResourceFork"
+#define AFPRESOURCE_EA_NETATALK NETATALK_RSRC_XATTR
 #else
 #define AFPINFO_EA_NETATALK "user." NETATALK_META_XATTR
-#define AFPRESOURCE_EA_NETATALK "user.org.netatalk.ResourceFork"
+#define AFPRESOURCE_EA_NETATALK "user." NETATALK_RSRC_XATTR
 #endif
 
 enum apple_fork {APPLE_FORK_DATA, APPLE_FORK_RSRC};
@@ -125,12 +130,14 @@ struct fruit_config_data {
        enum fruit_meta meta;
        enum fruit_locking locking;
        enum fruit_encoding encoding;
-       bool use_aapl;
+       bool use_aapl;          /* config from smb.conf */
        bool use_copyfile;
        bool readdir_attr_enabled;
        bool unix_info_enabled;
        bool copyfile_enabled;
        bool veto_appledouble;
+       bool posix_rename;
+       bool aapl_zero_file_id;
 
        /*
         * Additional options, all enabled by default,
@@ -341,7 +348,6 @@ typedef enum {ADOUBLE_META, ADOUBLE_RSRC} adouble_type_t;
 #define ad_getentryoff(ad,eid)     ((ad)->ad_eid[(eid)].ade_off)
 #define ad_setentrylen(ad,eid,len) ((ad)->ad_eid[(eid)].ade_len = (len))
 #define ad_setentryoff(ad,eid,off) ((ad)->ad_eid[(eid)].ade_off = (off))
-#define ad_entry(ad,eid)           ((ad)->ad_data + ad_getentryoff((ad),(eid)))
 
 struct ad_entry {
        size_t ade_off;
@@ -350,7 +356,8 @@ struct ad_entry {
 
 struct adouble {
        vfs_handle_struct        *ad_handle;
-       files_struct             *ad_fsp;
+       int                       ad_fd;
+       bool                      ad_opened;
        adouble_type_t            ad_type;
        uint32_t                  ad_magic;
        uint32_t                  ad_version;
@@ -376,7 +383,7 @@ struct ad_entry_order entry_order_meta_xattr[ADEID_NUM_XATTR + 1] = {
        {0, 0, 0}
 };
 
-/* AppleDouble ressource fork file (the ones prefixed by "._") */
+/* AppleDouble resource fork file (the ones prefixed by "._") */
 static const
 struct ad_entry_order entry_order_dot_und[ADEID_NUM_DOT_UND + 1] = {
        {ADEID_FINDERI,    ADEDOFF_FINDERI_DOT_UND,  ADEDLEN_FINDERI},
@@ -385,8 +392,8 @@ struct ad_entry_order entry_order_dot_und[ADEID_NUM_DOT_UND + 1] = {
 };
 
 /*
- * Fake AppleDouble entry oder for ressource fork xattr.  The xattr
- * isn't an AppleDouble file, it simply contains the ressource data,
+ * Fake AppleDouble entry oder for resource fork xattr.  The xattr
+ * isn't an AppleDouble file, it simply contains the resource data,
  * but in order to be able to use some API calls like ad_getentryoff()
  * we build a fake/helper struct adouble with this entry order struct.
  */
@@ -403,13 +410,41 @@ static const uint32_t set_eid[] = {
        AD_DEV, AD_INO, AD_SYN, AD_ID
 };
 
+struct fio {
+       /* tcon config handle */
+       struct fruit_config_data *config;
+
+       /* Denote stream type, meta or rsrc */
+       adouble_type_t type;
+};
+
 /*
  * Forward declarations
  */
 static struct adouble *ad_init(TALLOC_CTX *ctx, vfs_handle_struct *handle,
-                              adouble_type_t type, files_struct *fsp);
-static int ad_write(struct adouble *ad, const char *path);
-static int adouble_path(TALLOC_CTX *ctx, const char *path_in, char **path_out);
+                              adouble_type_t type);
+static int ad_set(struct adouble *ad, const struct smb_filename *smb_fname);
+static int ad_fset(struct adouble *ad, files_struct *fsp);
+static int adouble_path(TALLOC_CTX *ctx,
+                       const struct smb_filename *smb_fname__in,
+                       struct smb_filename **ppsmb_fname_out);
+
+/**
+ * Return a pointer to an AppleDouble entry
+ *
+ * Returns NULL if the entry is not present
+ **/
+static char *ad_get_entry(const struct adouble *ad, int eid)
+{
+       off_t off = ad_getentryoff(ad, eid);
+       size_t len = ad_getentrylen(ad, eid);
+
+       if (off == 0 || len == 0) {
+               return NULL;
+       }
+
+       return ad->ad_data + off;
+}
 
 /**
  * Get a date
@@ -419,18 +454,19 @@ static int ad_getdate(const struct adouble *ad,
                      uint32_t *date)
 {
        bool xlate = (dateoff & AD_DATE_UNIX);
+       char *p = NULL;
 
        dateoff &= AD_DATE_MASK;
-       if (!ad_getentryoff(ad, ADEID_FILEDATESI)) {
+       p = ad_get_entry(ad, ADEID_FILEDATESI);
+       if (p == NULL) {
                return -1;
        }
 
        if (dateoff > AD_DATE_ACCESS) {
            return -1;
        }
-       memcpy(date,
-              ad_entry(ad, ADEID_FILEDATESI) + dateoff,
-              sizeof(uint32_t));
+
+       memcpy(date, p + dateoff, sizeof(uint32_t));
 
        if (xlate) {
                *date = AD_DATE_TO_UNIX(*date);
@@ -444,9 +480,11 @@ static int ad_getdate(const struct adouble *ad,
 static int ad_setdate(struct adouble *ad, unsigned int dateoff, uint32_t date)
 {
        bool xlate = (dateoff & AD_DATE_UNIX);
+       char *p = NULL;
 
-       if (!ad_getentryoff(ad, ADEID_FILEDATESI)) {
-               return 0;
+       p = ad_get_entry(ad, ADEID_FILEDATESI);
+       if (p == NULL) {
+               return -1;
        }
 
        dateoff &= AD_DATE_MASK;
@@ -458,7 +496,7 @@ static int ad_setdate(struct adouble *ad, unsigned int dateoff, uint32_t date)
                return -1;
        }
 
-       memcpy(ad_entry(ad, ADEID_FILEDATESI) + dateoff, &date, sizeof(date));
+       memcpy(p + dateoff, &date, sizeof(date));
 
        return 0;
 }
@@ -574,10 +612,11 @@ static bool ad_pack(struct adouble *ad)
 /**
  * Unpack an AppleDouble blob into a struct adoble
  **/
-static bool ad_unpack(struct adouble *ad, const int nentries, size_t filesize)
+static bool ad_unpack(struct adouble *ad, const size_t nentries,
+                     size_t filesize)
 {
        size_t bufsize = talloc_get_size(ad->ad_data);
-       int adentries, i;
+       size_t adentries, i;
        uint32_t eid, len, off;
 
        /*
@@ -601,7 +640,8 @@ static bool ad_unpack(struct adouble *ad, const int nentries, size_t filesize)
 
        adentries = RSVAL(ad->ad_data, ADEDOFF_NENTRIES);
        if (adentries != nentries) {
-               DEBUG(1, ("invalid number of entries: %d\n", adentries));
+               DEBUG(1, ("invalid number of entries: %zu\n",
+                         adentries));
                return false;
        }
 
@@ -701,7 +741,7 @@ static bool ad_unpack(struct adouble *ad, const int nentries, size_t filesize)
  * bytes containing packed xattrs. Netatalk can't deal with that, so
  * we simply discard the packed xattrs.
  *
- * @return -1 in case an error occured, 0 if no conversion was done, 1
+ * @return -1 in case an error occurred, 0 if no conversion was done, 1
  * otherwise
  **/
 static int ad_convert(struct adouble *ad, int fd)
@@ -748,15 +788,16 @@ exit:
 /**
  * Read and parse Netatalk AppleDouble metadata xattr
  **/
-static ssize_t ad_header_read_meta(struct adouble *ad, const char *path)
+static ssize_t ad_read_meta(struct adouble *ad,
+                               const struct smb_filename *smb_fname)
 {
        int      rc = 0;
        ssize_t  ealen;
        bool     ok;
 
-       DEBUG(10, ("reading meta xattr for %s\n", path));
+       DEBUG(10, ("reading meta xattr for %s\n", smb_fname->base_name));
 
-       ealen = SMB_VFS_GETXATTR(ad->ad_handle->conn, path,
+       ealen = SMB_VFS_GETXATTR(ad->ad_handle->conn, smb_fname,
                                 AFPINFO_EA_NETATALK, ad->ad_data,
                                 AD_DATASZ_XATTR);
        if (ealen == -1) {
@@ -806,13 +847,14 @@ static ssize_t ad_header_read_meta(struct adouble *ad, const char *path)
        }
 
 exit:
-       DEBUG(10, ("reading meta xattr for %s, rc: %d\n", path, rc));
+       DEBUG(10, ("reading meta xattr for %s, rc: %d\n",
+               smb_fname->base_name, rc));
 
        if (rc != 0) {
                ealen = -1;
                if (errno == EINVAL) {
                        become_root();
-                       removexattr(path, AFPINFO_EA_NETATALK);
+                       removexattr(smb_fname->base_name, AFPINFO_EA_NETATALK);
                        unbecome_root();
                        errno = ENOENT;
                }
@@ -820,202 +862,256 @@ exit:
        return ealen;
 }
 
-/**
- * Read and parse resource fork, either ._ AppleDouble file or xattr
- **/
-static ssize_t ad_header_read_rsrc(struct adouble *ad, const char *path)
+static int ad_open_meta(const struct smb_filename *smb_fname,
+                       int flags,
+                       mode_t mode)
+{
+       return open(smb_fname->base_name, flags, mode);
+}
+
+static int ad_open_rsrc_xattr(const struct smb_filename *smb_fname,
+                               int flags,
+                               mode_t mode)
+{
+#ifdef HAVE_ATTROPEN
+       /* FIXME: direct Solaris xattr syscall */
+       return attropen(smb_fname->base_name,
+                       AFPRESOURCE_EA_NETATALK, flags, mode);
+#else
+       errno = ENOSYS;
+       return -1;
+#endif
+}
+
+static int ad_open_rsrc_adouble(const struct smb_filename *smb_fname,
+                               int flags,
+                               mode_t mode)
+{
+       int ret;
+       int fd;
+       struct smb_filename *adp_smb_fname = NULL;
+
+       ret = adouble_path(talloc_tos(), smb_fname, &adp_smb_fname);
+       if (ret != 0) {
+               return -1;
+       }
+
+       fd = open(adp_smb_fname->base_name, flags, mode);
+       TALLOC_FREE(adp_smb_fname);
+
+       return fd;
+}
+
+static int ad_open_rsrc(vfs_handle_struct *handle,
+                       const struct smb_filename *smb_fname,
+                       int flags,
+                       mode_t mode)
 {
        struct fruit_config_data *config = NULL;
-       int fd = -1;
-       int rc = 0;
-       ssize_t len;
-       char *adpath = NULL;
-       bool opened = false;
-       int mode;
-       struct adouble *meta_ad = NULL;
-       SMB_STRUCT_STAT sbuf;
-       bool ok;
-       int saved_errno = 0;
+       int fd;
 
-       SMB_VFS_HANDLE_GET_DATA(ad->ad_handle, config,
+       SMB_VFS_HANDLE_GET_DATA(handle, config,
                                struct fruit_config_data, return -1);
 
-       /* Try rw first so we can use the fd in ad_convert() */
-       mode = O_RDWR;
-
-       if (ad->ad_fsp && ad->ad_fsp->fh && (ad->ad_fsp->fh->fd != -1)) {
-               fd = ad->ad_fsp->fh->fd;
+       if (config->rsrc == FRUIT_RSRC_XATTR) {
+               fd = ad_open_rsrc_xattr(smb_fname, flags, mode);
        } else {
-               if (config->rsrc == FRUIT_RSRC_XATTR) {
-                       adpath = talloc_strdup(talloc_tos(), path);
-               } else {
-                       rc = adouble_path(talloc_tos(), path, &adpath);
-                       if (rc != 0) {
-                               goto exit;
-                       }
-               }
+               fd = ad_open_rsrc_adouble(smb_fname, flags, mode);
+       }
 
-       retry:
-               if (config->rsrc == FRUIT_RSRC_XATTR) {
-#ifndef HAVE_ATTROPEN
-                       errno = ENOSYS;
-                       rc = -1;
-                       goto exit;
-#else
-                       /* FIXME: direct Solaris xattr syscall */
-                       fd = attropen(adpath, AFPRESOURCE_EA_NETATALK,
-                                     mode, 0);
-#endif
-               } else {
-                       /* FIXME: direct open(), don't have an fsp */
-                       fd = open(adpath, mode);
-               }
+       return fd;
+}
 
-               if (fd == -1) {
-                       switch (errno) {
-                       case EROFS:
-                       case EACCES:
-                               if (mode == O_RDWR) {
-                                       mode = O_RDONLY;
-                                       goto retry;
-                               }
-                               /* fall through ... */
-                       default:
-                               DEBUG(2, ("open AppleDouble: %s, %s\n",
-                                         adpath, strerror(errno)));
-                               rc = -1;
-                               goto exit;
-                       }
-               }
-               opened = true;
+static int ad_open(vfs_handle_struct *handle,
+                  struct adouble *ad,
+                  const struct smb_filename *smb_fname,
+                  adouble_type_t t,
+                  int flags,
+                  mode_t mode)
+{
+       int fd;
+
+       DBG_DEBUG("Path [%s] type [%s]\n",
+                 smb_fname->base_name, t == ADOUBLE_META ? "meta" : "rsrc");
+
+       if (t == ADOUBLE_META) {
+               fd = ad_open_meta(smb_fname, flags, mode);
+       } else {
+               fd = ad_open_rsrc(handle, smb_fname, flags, mode);
        }
 
-       if (config->rsrc == FRUIT_RSRC_XATTR) {
-               /* FIXME: direct sys_fstat(), don't have an fsp */
-               rc = sys_fstat(
-                       fd, &sbuf,
+       if (fd != -1) {
+               ad->ad_opened = true;
+               ad->ad_fd = fd;
+       }
+
+       DBG_DEBUG("Path [%s] type [%s] fd [%d]\n",
+                 smb_fname->base_name,
+                 t == ADOUBLE_META ? "meta" : "rsrc", fd);
+
+       return fd;
+}
+
+static ssize_t ad_read_rsrc_xattr(struct adouble *ad)
+{
+       int ret;
+       SMB_STRUCT_STAT st;
+
+       /* FIXME: direct sys_fstat(), don't have an fsp */
+       ret = sys_fstat(ad->ad_fd, &st,
                        lp_fake_directory_create_times(
                                SNUM(ad->ad_handle->conn)));
-               if (rc != 0) {
-                       goto exit;
-               }
-               len = sbuf.st_ex_size;
-               ad_setentrylen(ad, ADEID_RFORK, len);
-       } else {
-               /* FIXME: direct sys_pread(), don't have an fsp */
-               len = sys_pread(fd, ad->ad_data, AD_DATASZ_DOT_UND, 0);
-               if (len != AD_DATASZ_DOT_UND) {
-                       DEBUG(2, ("%s: bad size: %zd\n",
-                                 strerror(errno), len));
-                       rc = -1;
-                       goto exit;
-               }
+       if (ret != 0) {
+               return -1;
+       }
 
-               /* FIXME: direct sys_fstat(), we don't have an fsp */
-               rc = sys_fstat(fd, &sbuf,
-                              lp_fake_directory_create_times(
-                                      SNUM(ad->ad_handle->conn)));
-               if (rc != 0) {
-                       goto exit;
-               }
+       ad_setentrylen(ad, ADEID_RFORK, st.st_ex_size);
+       return st.st_ex_size;
+}
 
-               /* Now parse entries */
-               ok = ad_unpack(ad, ADEID_NUM_DOT_UND, sbuf.st_ex_size);
-               if (!ok) {
-                       DEBUG(1, ("invalid AppleDouble ressource %s\n", path));
-                       errno = EINVAL;
-                       rc = -1;
-                       goto exit;
-               }
+static ssize_t ad_read_rsrc_adouble(struct adouble *ad,
+                               const struct smb_filename *smb_fname)
+{
+       struct adouble *meta_ad = NULL;
+       SMB_STRUCT_STAT sbuf;
+       char *p_ad = NULL;
+       char *p_meta_ad = NULL;
+       ssize_t len;
+       int ret;
+       bool ok;
 
-               if ((ad_getentryoff(ad, ADEID_FINDERI)
-                    != ADEDOFF_FINDERI_DOT_UND)
-                   || (ad_getentrylen(ad, ADEID_FINDERI)
-                       < ADEDLEN_FINDERI)
-                   || (ad_getentryoff(ad, ADEID_RFORK)
-                       < ADEDOFF_RFORK_DOT_UND)) {
-                       DEBUG(2, ("invalid AppleDouble ressource %s\n", path));
-                       errno = EINVAL;
-                       rc = -1;
-                       goto exit;
-               }
+       len = sys_pread(ad->ad_fd, ad->ad_data, AD_DATASZ_DOT_UND, 0);
+       if (len != AD_DATASZ_DOT_UND) {
+               DBG_NOTICE("%s %s: bad size: %zd\n",
+                          smb_fname->base_name, strerror(errno), len);
+               return -1;
+       }
 
-               if ((mode == O_RDWR)
-                   && (ad_getentrylen(ad, ADEID_FINDERI) > ADEDLEN_FINDERI)) {
-                       rc = ad_convert(ad, fd);
-                       if (rc != 0) {
-                               rc = -1;
-                               goto exit;
-                       }
-                       /*
-                        * Can't use ad_write() because we might not have a fsp
-                        */
-                       ok = ad_pack(ad);
-                       if (!ok) {
-                               rc = -1;
-                               goto exit;
-                       }
-                       /* FIXME: direct sys_pwrite(), don't have an fsp */
-                       len = sys_pwrite(fd, ad->ad_data,
-                                        AD_DATASZ_DOT_UND, 0);
-                       if (len != AD_DATASZ_DOT_UND) {
-                               DEBUG(2, ("%s: bad size: %zd\n", adpath, len));
-                               rc = -1;
-                               goto exit;
-                       }
+       ret = sys_fstat(ad->ad_fd, &sbuf, lp_fake_directory_create_times(
+                               SNUM(ad->ad_handle->conn)));
+       if (ret != 0) {
+               return -1;
+       }
 
-                       meta_ad = ad_init(talloc_tos(), ad->ad_handle,
-                                         ADOUBLE_META, NULL);
-                       if (meta_ad == NULL) {
-                               rc = -1;
-                               goto exit;
-                       }
+       /* Now parse entries */
+       ok = ad_unpack(ad, ADEID_NUM_DOT_UND, sbuf.st_ex_size);
+       if (!ok) {
+               DBG_ERR("invalid AppleDouble resource %s\n",
+                       smb_fname->base_name);
+               errno = EINVAL;
+               return -1;
+       }
 
-                       memcpy(ad_entry(meta_ad, ADEID_FINDERI),
-                              ad_entry(ad, ADEID_FINDERI),
-                              ADEDLEN_FINDERI);
+       if ((ad_getentryoff(ad, ADEID_FINDERI) != ADEDOFF_FINDERI_DOT_UND)
+           || (ad_getentrylen(ad, ADEID_FINDERI) < ADEDLEN_FINDERI)
+           || (ad_getentryoff(ad, ADEID_RFORK) < ADEDOFF_RFORK_DOT_UND)) {
+               DBG_ERR("invalid AppleDouble resource %s\n",
+                       smb_fname->base_name);
+               errno = EINVAL;
+               return -1;
+       }
 
-                       rc = ad_write(meta_ad, path);
-                       if (rc != 0) {
-                               rc = -1;
-                               goto exit;
-                       }
-               }
+       if (ad_getentrylen(ad, ADEID_FINDERI) == ADEDLEN_FINDERI) {
+               return len;
        }
 
-       DEBUG(10, ("opened AppleDouble: %s\n", path));
+       /*
+        * Try to fixup AppleDouble files created by OS X with xattrs
+        * appended to the ADEID_FINDERI entry. We simply remove the
+        * xattrs blob, this means any fancy xattr that was stored
+        * there is lost.
+        */
 
-exit:
-       if (rc != 0) {
-               saved_errno = errno;
-               len = -1;
+       ret = ad_convert(ad, ad->ad_fd);
+       if (ret != 0) {
+               DBG_WARNING("Failed to convert [%s]\n", smb_fname->base_name);
+               return len;
        }
-       if (opened && fd != -1) {
-               close(fd);
+
+       ok = ad_pack(ad);
+       if (!ok) {
+               DBG_WARNING("ad_pack [%s] failed\n", smb_fname->base_name);
+               return -1;
+       }
+
+       len = sys_pwrite(ad->ad_fd, ad->ad_data, AD_DATASZ_DOT_UND, 0);
+       if (len != AD_DATASZ_DOT_UND) {
+               DBG_ERR("%s: bad size: %zd\n", smb_fname->base_name, len);
+               return -1;
+       }
+
+       meta_ad = ad_init(talloc_tos(), ad->ad_handle, ADOUBLE_META);
+       if (meta_ad == NULL) {
+               return -1;
+       }
+
+       p_ad = ad_get_entry(ad, ADEID_FINDERI);
+       if (p_ad == NULL) {
+               TALLOC_FREE(meta_ad);
+               return -1;
+       }
+       p_meta_ad = ad_get_entry(meta_ad, ADEID_FINDERI);
+       if (p_meta_ad == NULL) {
+               TALLOC_FREE(meta_ad);
+               return -1;
        }
-       TALLOC_FREE(adpath);
+
+       memcpy(p_meta_ad, p_ad, ADEDLEN_FINDERI);
+
+       ret = ad_set(meta_ad, smb_fname);
        TALLOC_FREE(meta_ad);
-       if (rc != 0) {
-               errno = saved_errno;
+       if (ret != 0) {
+               return -1;
+       }
+
+       return len;
+}
+
+/**
+ * Read and parse resource fork, either ._ AppleDouble file or xattr
+ **/
+static ssize_t ad_read_rsrc(struct adouble *ad,
+                       const struct smb_filename *smb_fname)
+{
+       struct fruit_config_data *config = NULL;
+       ssize_t len;
+
+       SMB_VFS_HANDLE_GET_DATA(ad->ad_handle, config,
+                               struct fruit_config_data, return -1);
+
+       if (config->rsrc == FRUIT_RSRC_XATTR) {
+               len = ad_read_rsrc_xattr(ad);
+       } else {
+               len = ad_read_rsrc_adouble(ad, smb_fname);
        }
+
        return len;
 }
 
 /**
  * Read and unpack an AppleDouble metadata xattr or resource
  **/
-static ssize_t ad_read(struct adouble *ad, const char *path)
+static ssize_t ad_read(struct adouble *ad, const struct smb_filename *smb_fname)
 {
        switch (ad->ad_type) {
        case ADOUBLE_META:
-               return ad_header_read_meta(ad, path);
+               return ad_read_meta(ad, smb_fname);
        case ADOUBLE_RSRC:
-               return ad_header_read_rsrc(ad, path);
+               return ad_read_rsrc(ad, smb_fname);
        default:
                return -1;
        }
 }
 
+static int adouble_destructor(struct adouble *ad)
+{
+       if ((ad->ad_fd != -1) && ad->ad_opened) {
+               close(ad->ad_fd);
+               ad->ad_fd = -1;
+       }
+       return 0;
+}
+
 /**
  * Allocate a struct adouble without initialiing it
  *
@@ -1025,14 +1121,11 @@ static ssize_t ad_read(struct adouble *ad, const char *path)
  * @param[in] ctx        talloc context
  * @param[in] handle     vfs handle
  * @param[in] type       type of AppleDouble, ADOUBLE_META or ADOUBLE_RSRC
-
- * @param[in] fsp        if not NULL (for stream IO), the adouble handle is
- *                       added as an fsp extension
  *
  * @return               adouble handle
  **/
 static struct adouble *ad_alloc(TALLOC_CTX *ctx, vfs_handle_struct *handle,
-                               adouble_type_t type, files_struct *fsp)
+                               adouble_type_t type)
 {
        int rc = 0;
        size_t adsize = 0;
@@ -1055,39 +1148,27 @@ static struct adouble *ad_alloc(TALLOC_CTX *ctx, vfs_handle_struct *handle,
                return NULL;
        }
 
-       if (!fsp) {
-               ad = talloc_zero(ctx, struct adouble);
-               if (ad == NULL) {
-                       rc = -1;
-                       goto exit;
-               }
-               if (adsize) {
-                       ad->ad_data = talloc_zero_array(ad, char, adsize);
-               }
-       } else {
-               ad = (struct adouble *)VFS_ADD_FSP_EXTENSION(handle, fsp,
-                                                            struct adouble,
-                                                            NULL);
-               if (ad == NULL) {
+       ad = talloc_zero(ctx, struct adouble);
+       if (ad == NULL) {
+               rc = -1;
+               goto exit;
+       }
+
+       if (adsize) {
+               ad->ad_data = talloc_zero_array(ad, char, adsize);
+               if (ad->ad_data == NULL) {
                        rc = -1;
                        goto exit;
                }
-               if (adsize) {
-                       ad->ad_data = talloc_zero_array(
-                               VFS_MEMCTX_FSP_EXTENSION(handle, fsp),
-                               char, adsize);
-               }
-               ad->ad_fsp = fsp;
        }
 
-       if (adsize && ad->ad_data == NULL) {
-               rc = -1;
-               goto exit;
-       }
        ad->ad_handle = handle;
        ad->ad_type = type;
        ad->ad_magic = AD_MAGIC;
        ad->ad_version = AD_VERSION;
+       ad->ad_fd = -1;
+
+       talloc_set_destructor(ad, adouble_destructor);
 
 exit:
        if (rc != 0) {
@@ -1102,12 +1183,11 @@ exit:
  * @param[in] ctx        talloc context
  * @param[in] handle     vfs handle
  * @param[in] type       type of AppleDouble, ADOUBLE_META or ADOUBLE_RSRC
- * @param[in] fsp        file handle, may be NULL for a type of e_ad_meta
  *
  * @return               adouble handle, initialized
  **/
 static struct adouble *ad_init(TALLOC_CTX *ctx, vfs_handle_struct *handle,
-                              adouble_type_t type, files_struct *fsp)
+                              adouble_type_t type)
 {
        int rc = 0;
        const struct ad_entry_order  *eid;
@@ -1133,7 +1213,7 @@ static struct adouble *ad_init(TALLOC_CTX *ctx, vfs_handle_struct *handle,
                return NULL;
        }
 
-       ad = ad_alloc(ctx, handle, type, fsp);
+       ad = ad_alloc(ctx, handle, type);
        if (ad == NULL) {
                return NULL;
        }
@@ -1161,37 +1241,68 @@ static struct adouble *ad_init(TALLOC_CTX *ctx, vfs_handle_struct *handle,
  *
  * @param[in] ctx      talloc context
  * @param[in] handle   vfs handle
- * @param[in] path     pathname to file or directory
+ * @param[in] smb_fname     pathname to file or directory
  * @param[in] type     type of AppleDouble, ADOUBLE_META or ADOUBLE_RSRC
  *
  * @return             talloced struct adouble or NULL on error
  **/
 static struct adouble *ad_get(TALLOC_CTX *ctx, vfs_handle_struct *handle,
-                             const char *path, adouble_type_t type)
+                       const struct smb_filename *smb_fname,
+                       adouble_type_t type)
 {
        int rc = 0;
        ssize_t len;
        struct adouble *ad = NULL;
+       int fd;
+       int mode;
 
        DEBUG(10, ("ad_get(%s) called for %s\n",
-                  type == ADOUBLE_META ? "meta" : "rsrc", path));
+                  type == ADOUBLE_META ? "meta" : "rsrc",
+                  smb_fname->base_name));
 
-       ad = ad_alloc(ctx, handle, type, NULL);
+       ad = ad_alloc(ctx, handle, type);
        if (ad == NULL) {
                rc = -1;
                goto exit;
        }
 
-       len = ad_read(ad, path);
+       /*
+        * Here's the deal: for ADOUBLE_META we can do without an fd
+        * as we can issue path based xattr calls. For ADOUBLE_RSRC
+        * however we need a full-fledged fd for file IO on the ._
+        * file.
+        */
+       if (type == ADOUBLE_RSRC) {
+               /* Try rw first so we can use the fd in ad_convert() */
+               mode = O_RDWR;
+
+               fd = ad_open(handle, ad, smb_fname, ADOUBLE_RSRC, mode, 0);
+               if (fd == -1 && ((errno == EROFS) || (errno == EACCES))) {
+                       mode = O_RDONLY;
+                       fd = ad_open(handle, ad, smb_fname,
+                                       ADOUBLE_RSRC, mode, 0);
+               }
+
+               if (fd == -1) {
+                       DBG_DEBUG("ad_open [%s] error [%s]\n",
+                                 smb_fname->base_name, strerror(errno));
+                       rc = -1;
+                       goto exit;
+               }
+       }
+
+       len = ad_read(ad, smb_fname);
        if (len == -1) {
-               DEBUG(10, ("error reading AppleDouble for %s\n", path));
+               DEBUG(10, ("error reading AppleDouble for %s\n",
+                       smb_fname->base_name));
                rc = -1;
                goto exit;
        }
 
 exit:
        DEBUG(10, ("ad_get(%s) for %s returning %d\n",
-                 type == ADOUBLE_META ? "meta" : "rsrc", path, rc));
+                 type == ADOUBLE_META ? "meta" : "rsrc",
+                 smb_fname->base_name, rc));
 
        if (rc != 0) {
                TALLOC_FREE(ad);
@@ -1200,58 +1311,186 @@ exit:
 }
 
 /**
- * Set AppleDouble metadata on a file or directory
+ * Return AppleDouble data for a file
  *
- * @param[in] ad      adouble handle
-
- * @param[in] path    pathname to file or directory, may be NULL for a
- *                    resource fork
+ * @param[in] ctx      talloc context
+ * @param[in] handle   vfs handle
+ * @param[in] fsp      fsp to use for IO
+ * @param[in] type     type of AppleDouble, ADOUBLE_META or ADOUBLE_RSRC
  *
- * @return            status code, 0 means success
+ * @return             talloced struct adouble or NULL on error
  **/
-static int ad_write(struct adouble *ad, const char *path)
+static struct adouble *ad_fget(TALLOC_CTX *ctx, vfs_handle_struct *handle,
+                              files_struct *fsp, adouble_type_t type)
 {
        int rc = 0;
        ssize_t len;
-       bool ok;
+       struct adouble *ad = NULL;
 
-       ok = ad_pack(ad);
-       if (!ok) {
-               return -1;
-       }
+       DBG_DEBUG("ad_get(%s) path [%s]\n",
+                 type == ADOUBLE_META ? "meta" : "rsrc",
+                 fsp_str_dbg(fsp));
 
-       switch (ad->ad_type) {
-       case ADOUBLE_META:
-               rc = SMB_VFS_SETXATTR(ad->ad_handle->conn, path,
-                                     AFPINFO_EA_NETATALK, ad->ad_data,
-                                     AD_DATASZ_XATTR, 0);
-               break;
-       case ADOUBLE_RSRC:
-               if ((ad->ad_fsp == NULL)
-                   || (ad->ad_fsp->fh == NULL)
-                   || (ad->ad_fsp->fh->fd == -1)) {
-                       rc = -1;
-                       goto exit;
-               }
-               /* FIXME: direct sys_pwrite(), don't have an fsp */
-               len = sys_pwrite(ad->ad_fsp->fh->fd, ad->ad_data,
-                                talloc_get_size(ad->ad_data), 0);
-               if (len != talloc_get_size(ad->ad_data)) {
-                       DEBUG(1, ("short write on %s: %zd",
-                                 fsp_str_dbg(ad->ad_fsp), len));
-                       rc = -1;
-                       goto exit;
-               }
-               break;
-       default:
-               return -1;
+       ad = ad_alloc(ctx, handle, type);
+       if (ad == NULL) {
+               rc = -1;
+               goto exit;
        }
-exit:
-       return rc;
-}
 
-/*****************************************************************************
- * Helper functions
+       if ((fsp->fh != NULL) && (fsp->fh->fd != -1)) {
+               ad->ad_fd = fsp->fh->fd;
+       } else {
+               /*
+                * Here's the deal: for ADOUBLE_META we can do without an fd
+                * as we can issue path based xattr calls. For ADOUBLE_RSRC
+                * however we need a full-fledged fd for file IO on the ._
+                * file.
+                */
+               int fd;
+               int mode;
+
+               if (type == ADOUBLE_RSRC) {
+                       /* Try rw first so we can use the fd in ad_convert() */
+                       mode = O_RDWR;
+
+                       fd = ad_open(handle, ad, fsp->base_fsp->fsp_name,
+                                       ADOUBLE_RSRC, mode, 0);
+                       if (fd == -1 &&
+                           ((errno == EROFS) || (errno == EACCES)))
+                       {
+                               mode = O_RDONLY;
+                               fd = ad_open(handle, ad,
+                                       fsp->base_fsp->fsp_name, ADOUBLE_RSRC,
+                                       mode, 0);
+                       }
+
+                       if (fd == -1) {
+                               DBG_DEBUG("error opening AppleDouble for %s\n",
+                                       fsp_str_dbg(fsp));
+                               rc = -1;
+                               goto exit;
+                       }
+               }
+       }
+
+       len = ad_read(ad, fsp->base_fsp->fsp_name);
+       if (len == -1) {
+               DBG_DEBUG("error reading AppleDouble for %s\n",
+                       fsp_str_dbg(fsp));
+               rc = -1;
+               goto exit;
+       }
+
+exit:
+       DBG_DEBUG("ad_get(%s) path [%s] rc [%d]\n",
+                 type == ADOUBLE_META ? "meta" : "rsrc",
+                 fsp_str_dbg(fsp), rc);
+
+       if (rc != 0) {
+               TALLOC_FREE(ad);
+       }
+       return ad;
+}
+
+/**
+ * Set AppleDouble metadata on a file or directory
+ *
+ * @param[in] ad      adouble handle
+ *
+ * @param[in] smb_fname    pathname to file or directory
+ *
+ * @return            status code, 0 means success
+ **/
+static int ad_set(struct adouble *ad, const struct smb_filename *smb_fname)
+{
+       bool ok;
+       int ret;
+
+       DBG_DEBUG("Path [%s]\n", smb_fname->base_name);
+
+       if (ad->ad_type != ADOUBLE_META) {
+               DBG_ERR("ad_set on [%s] used with ADOUBLE_RSRC\n",
+                       smb_fname->base_name);
+               return -1;
+       }
+
+       ok = ad_pack(ad);
+       if (!ok) {
+               return -1;
+       }
+
+       ret = SMB_VFS_SETXATTR(ad->ad_handle->conn,
+                              smb_fname,
+                              AFPINFO_EA_NETATALK,
+                              ad->ad_data,
+                              AD_DATASZ_XATTR, 0);
+
+       DBG_DEBUG("Path [%s] ret [%d]\n", smb_fname->base_name, ret);
+
+       return ret;
+}
+
+/**
+ * Set AppleDouble metadata on a file or directory
+ *
+ * @param[in] ad      adouble handle
+ * @param[in] fsp     file handle
+ *
+ * @return            status code, 0 means success
+ **/
+static int ad_fset(struct adouble *ad, files_struct *fsp)
+{
+       int rc = -1;
+       ssize_t len;
+       bool ok;
+
+       DBG_DEBUG("Path [%s]\n", fsp_str_dbg(fsp));
+
+       if ((fsp == NULL)
+           || (fsp->fh == NULL)
+           || (fsp->fh->fd == -1))
+       {
+               smb_panic("bad fsp");
+       }
+
+       ok = ad_pack(ad);
+       if (!ok) {
+               return -1;
+       }
+
+       switch (ad->ad_type) {
+       case ADOUBLE_META:
+               rc = SMB_VFS_NEXT_FSETXATTR(ad->ad_handle,
+                                           fsp,
+                                           AFPINFO_EA_NETATALK,
+                                           ad->ad_data,
+                                           AD_DATASZ_XATTR, 0);
+               break;
+
+       case ADOUBLE_RSRC:
+               len = SMB_VFS_NEXT_PWRITE(ad->ad_handle,
+                                         fsp,
+                                         ad->ad_data,
+                                         talloc_get_size(ad->ad_data),
+                                         0);
+               if (len != (ssize_t)talloc_get_size(ad->ad_data)) {
+                       DBG_ERR("short write on %s: %zd", fsp_str_dbg(fsp), len);
+                       return -1;
+               }
+               rc = 0;
+               break;
+
+       default:
+               return -1;
+       }
+
+       DBG_DEBUG("Path [%s] rc [%d]\n", fsp_str_dbg(fsp), rc);
+
+       return rc;
+}
+
+/*****************************************************************************
+ * Helper functions
  *****************************************************************************/
 
 static bool is_afpinfo_stream(const struct smb_filename *smb_fname)
@@ -1305,10 +1544,27 @@ static int init_fruit_config(vfs_handle_struct *handle)
                return -1;
        }
 
+       /*
+        * Versions up to Samba 4.5.x had a spelling bug in the
+        * fruit:resource option calling lp_parm_enum with
+        * "res*s*ource" (ie two s).
+        *
+        * In Samba 4.6 we accept both the wrong and the correct
+        * spelling, in Samba 4.7 the bad spelling will be removed.
+        */
        enumval = lp_parm_enum(SNUM(handle->conn), FRUIT_PARAM_TYPE_NAME,
                               "ressource", fruit_rsrc, FRUIT_RSRC_ADFILE);
        if (enumval == -1) {
-               DEBUG(1, ("value for %s: ressource type unknown\n",
+               DEBUG(1, ("value for %s: resource type unknown\n",
+                         FRUIT_PARAM_TYPE_NAME));
+               return -1;
+       }
+       config->rsrc = (enum fruit_rsrc)enumval;
+
+       enumval = lp_parm_enum(SNUM(handle->conn), FRUIT_PARAM_TYPE_NAME,
+                              "resource", fruit_rsrc, enumval);
+       if (enumval == -1) {
+               DEBUG(1, ("value for %s: resource type unknown\n",
                          FRUIT_PARAM_TYPE_NAME));
                return -1;
        }
@@ -1341,9 +1597,12 @@ static int init_fruit_config(vfs_handle_struct *handle)
        }
        config->encoding = (enum fruit_encoding)enumval;
 
-       config->veto_appledouble = lp_parm_bool(
-               SNUM(handle->conn), FRUIT_PARAM_TYPE_NAME,
-               "veto_appledouble", true);
+       if (config->rsrc == FRUIT_RSRC_ADFILE) {
+               config->veto_appledouble = lp_parm_bool(SNUM(handle->conn),
+                                                       FRUIT_PARAM_TYPE_NAME,
+                                                       "veto_appledouble",
+                                                       true);
+       }
 
        config->use_aapl = lp_parm_bool(
                -1, FRUIT_PARAM_TYPE_NAME, "aapl", true);
@@ -1354,6 +1613,12 @@ static int init_fruit_config(vfs_handle_struct *handle)
        config->use_copyfile = lp_parm_bool(-1, FRUIT_PARAM_TYPE_NAME,
                                           "copyfile", false);
 
+       config->posix_rename = lp_parm_bool(
+               SNUM(handle->conn), FRUIT_PARAM_TYPE_NAME, "posix_rename", true);
+
+       config->aapl_zero_file_id =
+           lp_parm_bool(-1, FRUIT_PARAM_TYPE_NAME, "zero_file_id", true);
+
        config->readdir_attr_rsize = lp_parm_bool(
                SNUM(handle->conn), "readdir_attr", "aapl_rsize", true);
 
@@ -1372,21 +1637,42 @@ static int init_fruit_config(vfs_handle_struct *handle)
 
 /**
  * Prepend "._" to a basename
+ * Return a new struct smb_filename with stream_name == NULL.
  **/
-static int adouble_path(TALLOC_CTX *ctx, const char *path_in, char **path_out)
+static int adouble_path(TALLOC_CTX *ctx,
+                       const struct smb_filename *smb_fname_in,
+                       struct smb_filename **pp_smb_fname_out)
 {
        char *parent;
        const char *base;
+       struct smb_filename *smb_fname = cp_smb_filename(ctx,
+                                               smb_fname_in);
 
-       if (!parent_dirname(ctx, path_in, &parent, &base)) {
+       if (smb_fname == NULL) {
+               return -1;
+       }
+
+       /* We need streamname to be NULL */
+       TALLOC_FREE(smb_fname->stream_name);
+
+       /* And we're replacing base_name. */
+       TALLOC_FREE(smb_fname->base_name);
+
+       if (!parent_dirname(smb_fname, smb_fname_in->base_name,
+                               &parent, &base)) {
+               TALLOC_FREE(smb_fname);
                return -1;
        }
 
-       *path_out = talloc_asprintf(ctx, "%s/._%s", parent, base);
-       if (*path_out == NULL) {
+       smb_fname->base_name = talloc_asprintf(smb_fname,
+                                       "%s/._%s", parent, base);
+       if (smb_fname->base_name == NULL) {
+               TALLOC_FREE(smb_fname);
                return -1;
        }
 
+       *pp_smb_fname_out = smb_fname;
+
        return 0;
 }
 
@@ -1484,19 +1770,6 @@ static SMB_INO_T fruit_inode(const SMB_STRUCT_STAT *sbuf, const char *sname)
        return result;
 }
 
-/**
- * Ensure ad_fsp is still valid
- **/
-static bool fruit_fsp_recheck(struct adouble *ad, files_struct *fsp)
-{
-       if (ad->ad_fsp == fsp) {
-               return true;
-       }
-       ad->ad_fsp = fsp;
-
-       return true;
-}
-
 static bool add_fruit_stream(TALLOC_CTX *mem_ctx, unsigned int *num_streams,
                             struct stream_struct **streams,
                             const char *name, off_t size,
@@ -1523,12 +1796,46 @@ static bool add_fruit_stream(TALLOC_CTX *mem_ctx, unsigned int *num_streams,
        return true;
 }
 
+static bool filter_empty_rsrc_stream(unsigned int *num_streams,
+                                    struct stream_struct **streams)
+{
+       struct stream_struct *tmp = *streams;
+       unsigned int i;
+
+       if (*num_streams == 0) {
+               return true;
+       }
+
+       for (i = 0; i < *num_streams; i++) {
+               if (strequal_m(tmp[i].name, AFPRESOURCE_STREAM)) {
+                       break;
+               }
+       }
+
+       if (i == *num_streams) {
+               return true;
+       }
+
+       if (tmp[i].size > 0) {
+               return true;
+       }
+
+       TALLOC_FREE(tmp[i].name);
+       if (*num_streams - 1 > i) {
+               memmove(&tmp[i], &tmp[i+1],
+                       (*num_streams - i - 1) * sizeof(struct stream_struct));
+       }
+
+       *num_streams -= 1;
+       return true;
+}
+
 static bool del_fruit_stream(TALLOC_CTX *mem_ctx, unsigned int *num_streams,
                             struct stream_struct **streams,
                             const char *name)
 {
        struct stream_struct *tmp = *streams;
-       int i;
+       unsigned int i;
 
        if (*num_streams == 0) {
                return true;
@@ -1554,16 +1861,29 @@ static bool del_fruit_stream(TALLOC_CTX *mem_ctx, unsigned int *num_streams,
        return true;
 }
 
-static bool empty_finderinfo(const struct adouble *ad)
+static bool ad_empty_finderinfo(const struct adouble *ad)
 {
-
+       int cmp;
        char emptybuf[ADEDLEN_FINDERI] = {0};
-       if (memcmp(emptybuf,
-                  ad_entry(ad, ADEID_FINDERI),
-                  ADEDLEN_FINDERI) == 0) {
-               return true;
+       char *fi = NULL;
+
+       fi = ad_get_entry(ad, ADEID_FINDERI);
+       if (fi == NULL) {
+               DBG_ERR("Missing FinderInfo in struct adouble [%p]\n", ad);
+               return false;
        }
-       return false;
+
+       cmp = memcmp(emptybuf, fi, ADEDLEN_FINDERI);
+       return (cmp == 0);
+}
+
+static bool ai_empty_finderinfo(const AfpInfo *ai)
+{
+       int cmp;
+       char emptybuf[ADEDLEN_FINDERI] = {0};
+
+       cmp = memcmp(emptybuf, &ai->afpi_FinderInfo[0], ADEDLEN_FINDERI);
+       return (cmp == 0);
 }
 
 /**
@@ -1575,8 +1895,23 @@ static void update_btime(vfs_handle_struct *handle,
        uint32_t t;
        struct timespec creation_time = {0};
        struct adouble *ad;
+       struct fruit_config_data *config = NULL;
+
+       SMB_VFS_HANDLE_GET_DATA(handle, config, struct fruit_config_data,
+                               return);
+
+       switch (config->meta) {
+       case FRUIT_META_STREAM:
+               return;
+       case FRUIT_META_NETATALK:
+               /* Handled below */
+               break;
+       default:
+               DBG_ERR("Unexpected meta config [%d]\n", config->meta);
+               return;
+       }
 
-       ad = ad_get(talloc_tos(), handle, smb_fname->base_name, ADOUBLE_META);
+       ad = ad_get(talloc_tos(), handle, smb_fname, ADOUBLE_META);
        if (ad == NULL) {
                return;
        }
@@ -1658,7 +1993,7 @@ static off_t denymode_to_netatalk_brl(enum apple_fork fork_type,
  * Call fcntl() with an exclusive F_GETLK request in order to
  * determine if there's an exisiting shared lock
  *
- * @return true if the requested lock was found or any error occured
+ * @return true if the requested lock was found or any error occurred
  *         false if the lock was not found
  **/
 static bool test_netatalk_lock(files_struct *fsp, off_t in_offset)
@@ -1690,6 +2025,8 @@ static NTSTATUS fruit_check_access(vfs_handle_struct *handle,
        struct byte_range_lock *br_lck = NULL;
        bool open_for_reading, open_for_writing, deny_read, deny_write;
        off_t off;
+       bool have_read = false;
+       int flags;
 
        /* FIXME: hardcoded data fork, add resource fork */
        enum apple_fork fork_type = APPLE_FORK_DATA;
@@ -1701,6 +2038,26 @@ static NTSTATUS fruit_check_access(vfs_handle_struct *handle,
                  deny_mode & DENY_READ ? "DENY_READ" : "-",
                  deny_mode & DENY_WRITE ? "DENY_WRITE" : "-"));
 
+       if (fsp->fh->fd == -1) {
+               return NT_STATUS_OK;
+       }
+
+       flags = fcntl(fsp->fh->fd, F_GETFL);
+       if (flags == -1) {
+               DBG_ERR("fcntl get flags [%s] fd [%d] failed [%s]\n",
+                       fsp_str_dbg(fsp), fsp->fh->fd, strerror(errno));
+               return map_nt_error_from_unix(errno);
+       }
+
+       if (flags & (O_RDONLY|O_RDWR)) {
+               /*
+                * Applying fcntl read locks requires an fd opened for
+                * reading. This means we won't be applying locks for
+                * files openend write-only, but what can we do...
+                */
+               have_read = true;
+       }
+
        /*
         * Check read access and deny read mode
         */
@@ -1722,7 +2079,7 @@ static NTSTATUS fruit_check_access(vfs_handle_struct *handle,
                }
 
                /* Set locks */
-               if (access_mask & FILE_READ_DATA) {
+               if ((access_mask & FILE_READ_DATA) && have_read) {
                        off = access_to_netatalk_brl(fork_type, FILE_READ_DATA);
                        br_lck = do_lock(
                                handle->conn->sconn->msg_ctx, fsp,
@@ -1736,7 +2093,7 @@ static NTSTATUS fruit_check_access(vfs_handle_struct *handle,
                        TALLOC_FREE(br_lck);
                }
 
-               if (deny_mode & DENY_READ) {
+               if ((deny_mode & DENY_READ) && have_read) {
                        off = denymode_to_netatalk_brl(fork_type, DENY_READ);
                        br_lck = do_lock(
                                handle->conn->sconn->msg_ctx, fsp,
@@ -1772,7 +2129,7 @@ static NTSTATUS fruit_check_access(vfs_handle_struct *handle,
                }
 
                /* Set locks */
-               if (access_mask & FILE_WRITE_DATA) {
+               if ((access_mask & FILE_WRITE_DATA) && have_read) {
                        off = access_to_netatalk_brl(fork_type, FILE_WRITE_DATA);
                        br_lck = do_lock(
                                handle->conn->sconn->msg_ctx, fsp,
@@ -1786,7 +2143,7 @@ static NTSTATUS fruit_check_access(vfs_handle_struct *handle,
                        TALLOC_FREE(br_lck);
 
                }
-               if (deny_mode & DENY_WRITE) {
+               if ((deny_mode & DENY_WRITE) && have_read) {
                        off = denymode_to_netatalk_brl(fork_type, DENY_WRITE);
                        br_lck = do_lock(
                                handle->conn->sconn->msg_ctx, fsp,
@@ -1889,9 +2246,23 @@ static NTSTATUS check_aapl(vfs_handle_struct *handle,
        }
 
        if (req_bitmap & SMB2_CRTCTX_AAPL_VOLUME_CAPS) {
-               SBVAL(p, 0,
-                     lp_case_sensitive(SNUM(handle->conn->tcon->compat)) ?
-                     SMB2_CRTCTX_AAPL_CASE_SENSITIVE : 0);
+               int val = lp_case_sensitive(SNUM(handle->conn->tcon->compat));
+               uint64_t caps = 0;
+
+               switch (val) {
+               case Auto:
+                       break;
+
+               case True:
+                       caps |= SMB2_CRTCTX_AAPL_CASE_SENSITIVE;
+                       break;
+
+               default:
+                       break;
+               }
+
+               SBVAL(p, 0, caps);
+
                ok = data_blob_append(req, &blob, p, 8);
                if (!ok) {
                        return NT_STATUS_UNSUCCESSFUL;
@@ -1926,99 +2297,314 @@ static NTSTATUS check_aapl(vfs_handle_struct *handle,
                                      out_context_blobs,
                                      SMB2_CREATE_TAG_AAPL,
                                      blob);
+       if (NT_STATUS_IS_OK(status)) {
+               global_fruit_config.nego_aapl = true;
+               if (config->aapl_zero_file_id) {
+                       aapl_force_zero_file_id(handle->conn->sconn);
+               }
+       }
 
        return status;
 }
 
-static NTSTATUS readdir_attr_macmeta(struct vfs_handle_struct *handle,
-                                    const struct smb_filename *smb_fname,
-                                    struct readdir_attr_data *attr_data)
+static bool readdir_attr_meta_finderi_stream(
+       struct vfs_handle_struct *handle,
+       const struct smb_filename *smb_fname,
+       AfpInfo *ai)
 {
-       NTSTATUS status = NT_STATUS_OK;
-       uint32_t date_added;
-       struct adouble *ad = NULL;
-       struct fruit_config_data *config = NULL;
+       struct smb_filename *stream_name = NULL;
+       files_struct *fsp = NULL;
+       ssize_t nread;
+       NTSTATUS status;
+       int ret;
+       bool ok;
+       uint8_t buf[AFP_INFO_SIZE];
 
-       SMB_VFS_HANDLE_GET_DATA(handle, config,
-                               struct fruit_config_data,
-                               return NT_STATUS_UNSUCCESSFUL);
+       stream_name = synthetic_smb_fname(talloc_tos(),
+                                         smb_fname->base_name,
+                                         AFPINFO_STREAM_NAME,
+                                         NULL, smb_fname->flags);
+       if (stream_name == NULL) {
+               return false;
+       }
 
+       ret = SMB_VFS_STAT(handle->conn, stream_name);
+       if (ret != 0) {
+               return false;
+       }
 
-       /* Ensure we return a default value in the creation_date field */
-       RSIVAL(&attr_data->attr_data.aapl.finder_info, 12, AD_DATE_START);
+       status = SMB_VFS_CREATE_FILE(
+               handle->conn,                           /* conn */
+               NULL,                                   /* req */
+               0,                                      /* root_dir_fid */
+               stream_name,                            /* fname */
+               FILE_READ_DATA,                         /* access_mask */
+               (FILE_SHARE_READ | FILE_SHARE_WRITE |   /* share_access */
+                       FILE_SHARE_DELETE),
+               FILE_OPEN,                              /* create_disposition*/
+               0,                                      /* create_options */
+               0,                                      /* file_attributes */
+               INTERNAL_OPEN_ONLY,                     /* oplock_request */
+               NULL,                                   /* lease */
+                0,                                      /* allocation_size */
+               0,                                      /* private_flags */
+               NULL,                                   /* sd */
+               NULL,                                   /* ea_list */
+               &fsp,                                   /* result */
+               NULL,                                   /* pinfo */
+               NULL, NULL);                            /* create context */
+
+       TALLOC_FREE(stream_name);
 
-       /*
-        * Resource fork length
-        */
+       if (!NT_STATUS_IS_OK(status)) {
+               return false;
+       }
 
-       if (config->readdir_attr_rsize) {
-               ad = ad_get(talloc_tos(), handle, smb_fname->base_name,
-                           ADOUBLE_RSRC);
-               if (ad) {
-                       attr_data->attr_data.aapl.rfork_size = ad_getentrylen(
-                               ad, ADEID_RFORK);
-                       TALLOC_FREE(ad);
-               }
+       nread = SMB_VFS_PREAD(fsp, &buf[0], AFP_INFO_SIZE, 0);
+       if (nread != AFP_INFO_SIZE) {
+               DBG_ERR("short read [%s] [%zd/%d]\n",
+                       smb_fname_str_dbg(stream_name), nread, AFP_INFO_SIZE);
+               ok = false;
+               goto fail;
        }
 
-       /*
-        * FinderInfo
-        */
+       memcpy(&ai->afpi_FinderInfo[0], &buf[AFP_OFF_FinderInfo],
+              AFP_FinderSize);
 
-       if (config->readdir_attr_finder_info) {
-               ad = ad_get(talloc_tos(), handle, smb_fname->base_name,
-                           ADOUBLE_META);
-               if (ad) {
-                       if (S_ISREG(smb_fname->st.st_ex_mode)) {
-                               /* finder_type */
-                               memcpy(&attr_data->attr_data.aapl.finder_info[0],
-                                      ad_entry(ad, ADEID_FINDERI), 4);
-
-                               /* finder_creator */
-                               memcpy(&attr_data->attr_data.aapl.finder_info[0] + 4,
-                                      ad_entry(ad, ADEID_FINDERI) + 4, 4);
-                       }
+       ok = true;
 
-                       /* finder_flags */
-                       memcpy(&attr_data->attr_data.aapl.finder_info[0] + 8,
-                              ad_entry(ad, ADEID_FINDERI) + 8, 2);
+fail:
+       if (fsp != NULL) {
+               close_file(NULL, fsp, NORMAL_CLOSE);
+       }
 
-                       /* finder_ext_flags */
-                       memcpy(&attr_data->attr_data.aapl.finder_info[0] + 10,
-                              ad_entry(ad, ADEID_FINDERI) + 24, 2);
+       return ok;
+}
 
-                       /* creation date */
-                       date_added = convert_time_t_to_uint32_t(
-                               smb_fname->st.st_ex_btime.tv_sec - AD_DATE_DELTA);
-                       RSIVAL(&attr_data->attr_data.aapl.finder_info[0], 12, date_added);
+static bool readdir_attr_meta_finderi_netatalk(
+       struct vfs_handle_struct *handle,
+       const struct smb_filename *smb_fname,
+       AfpInfo *ai)
+{
+       struct adouble *ad = NULL;
+       char *p = NULL;
 
-                       TALLOC_FREE(ad);
-               }
+       ad = ad_get(talloc_tos(), handle, smb_fname, ADOUBLE_META);
+       if (ad == NULL) {
+               return false;
+       }
+
+       p = ad_get_entry(ad, ADEID_FINDERI);
+       if (p == NULL) {
+               DBG_ERR("No ADEID_FINDERI for [%s]\n", smb_fname->base_name);
+               TALLOC_FREE(ad);
+               return false;
        }
 
+       memcpy(&ai->afpi_FinderInfo[0], p, AFP_FinderSize);
        TALLOC_FREE(ad);
-       return status;
+       return true;
 }
 
-/* Search MS NFS style ACE with UNIX mode */
-static NTSTATUS check_ms_nfs(vfs_handle_struct *handle,
-                            files_struct *fsp,
-                            const struct security_descriptor *psd,
-                            mode_t *pmode,
-                            bool *pdo_chmod)
+static bool readdir_attr_meta_finderi(struct vfs_handle_struct *handle,
+                                     const struct smb_filename *smb_fname,
+                                     struct readdir_attr_data *attr_data)
 {
-       int i;
        struct fruit_config_data *config = NULL;
-
-       *pdo_chmod = false;
+       uint32_t date_added;
+       AfpInfo ai = {0};
+       bool ok;
 
        SMB_VFS_HANDLE_GET_DATA(handle, config,
                                struct fruit_config_data,
-                               return NT_STATUS_UNSUCCESSFUL);
+                               return false);
 
-       if (psd->dacl == NULL || !config->unix_info_enabled) {
-               return NT_STATUS_OK;
-       }
+       switch (config->meta) {
+       case FRUIT_META_NETATALK:
+               ok = readdir_attr_meta_finderi_netatalk(
+                       handle, smb_fname, &ai);
+               break;
+
+       case FRUIT_META_STREAM:
+               ok = readdir_attr_meta_finderi_stream(
+                       handle, smb_fname, &ai);
+               break;
+
+       default:
+               DBG_ERR("Unexpected meta config [%d]\n", config->meta);
+               return false;
+       }
+
+       if (!ok) {
+               /* Don't bother with errors, it's likely ENOENT */
+               return true;
+       }
+
+       if (S_ISREG(smb_fname->st.st_ex_mode)) {
+               /* finder_type */
+               memcpy(&attr_data->attr_data.aapl.finder_info[0],
+                      &ai.afpi_FinderInfo[0], 4);
+
+               /* finder_creator */
+               memcpy(&attr_data->attr_data.aapl.finder_info[0] + 4,
+                      &ai.afpi_FinderInfo[4], 4);
+       }
+
+       /* finder_flags */
+       memcpy(&attr_data->attr_data.aapl.finder_info[0] + 8,
+              &ai.afpi_FinderInfo[8], 2);
+
+       /* finder_ext_flags */
+       memcpy(&attr_data->attr_data.aapl.finder_info[0] + 10,
+              &ai.afpi_FinderInfo[24], 2);
+
+       /* creation date */
+       date_added = convert_time_t_to_uint32_t(
+               smb_fname->st.st_ex_btime.tv_sec - AD_DATE_DELTA);
+
+       RSIVAL(&attr_data->attr_data.aapl.finder_info[0], 12, date_added);
+
+       return true;
+}
+
+static uint64_t readdir_attr_rfork_size_adouble(
+       struct vfs_handle_struct *handle,
+       const struct smb_filename *smb_fname)
+{
+       struct adouble *ad = NULL;
+       uint64_t rfork_size;
+
+       ad = ad_get(talloc_tos(), handle, smb_fname,
+                   ADOUBLE_RSRC);
+       if (ad == NULL) {
+               return 0;
+       }
+
+       rfork_size = ad_getentrylen(ad, ADEID_RFORK);
+       TALLOC_FREE(ad);
+
+       return rfork_size;
+}
+
+static uint64_t readdir_attr_rfork_size_stream(
+       struct vfs_handle_struct *handle,
+       const struct smb_filename *smb_fname)
+{
+       struct smb_filename *stream_name = NULL;
+       int ret;
+       uint64_t rfork_size;
+
+       stream_name = synthetic_smb_fname(talloc_tos(),
+                                         smb_fname->base_name,
+                                         AFPRESOURCE_STREAM_NAME,
+                                         NULL, 0);
+       if (stream_name == NULL) {
+               return 0;
+       }
+
+       ret = SMB_VFS_STAT(handle->conn, stream_name);
+       if (ret != 0) {
+               TALLOC_FREE(stream_name);
+               return 0;
+       }
+
+       rfork_size = stream_name->st.st_ex_size;
+       TALLOC_FREE(stream_name);
+
+       return rfork_size;
+}
+
+static uint64_t readdir_attr_rfork_size(struct vfs_handle_struct *handle,
+                                       const struct smb_filename *smb_fname)
+{
+       struct fruit_config_data *config = NULL;
+       uint64_t rfork_size;
+
+       SMB_VFS_HANDLE_GET_DATA(handle, config,
+                               struct fruit_config_data,
+                               return 0);
+
+       switch (config->rsrc) {
+       case FRUIT_RSRC_ADFILE:
+       case FRUIT_RSRC_XATTR:
+               rfork_size = readdir_attr_rfork_size_adouble(handle,
+                                                            smb_fname);
+               break;
+
+       case FRUIT_META_STREAM:
+               rfork_size = readdir_attr_rfork_size_stream(handle,
+                                                           smb_fname);
+               break;
+
+       default:
+               DBG_ERR("Unexpected rsrc config [%d]\n", config->rsrc);
+               rfork_size = 0;
+               break;
+       }
+
+       return rfork_size;
+}
+
+static NTSTATUS readdir_attr_macmeta(struct vfs_handle_struct *handle,
+                                    const struct smb_filename *smb_fname,
+                                    struct readdir_attr_data *attr_data)
+{
+       NTSTATUS status = NT_STATUS_OK;
+       struct fruit_config_data *config = NULL;
+       bool ok;
+
+       SMB_VFS_HANDLE_GET_DATA(handle, config,
+                               struct fruit_config_data,
+                               return NT_STATUS_UNSUCCESSFUL);
+
+
+       /* Ensure we return a default value in the creation_date field */
+       RSIVAL(&attr_data->attr_data.aapl.finder_info, 12, AD_DATE_START);
+
+       /*
+        * Resource fork length
+        */
+
+       if (config->readdir_attr_rsize) {
+               uint64_t rfork_size;
+
+               rfork_size = readdir_attr_rfork_size(handle, smb_fname);
+               attr_data->attr_data.aapl.rfork_size = rfork_size;
+       }
+
+       /*
+        * FinderInfo
+        */
+
+       if (config->readdir_attr_finder_info) {
+               ok = readdir_attr_meta_finderi(handle, smb_fname, attr_data);
+               if (!ok) {
+                       status = NT_STATUS_INTERNAL_ERROR;
+               }
+       }
+
+       return status;
+}
+
+/* Search MS NFS style ACE with UNIX mode */
+static NTSTATUS check_ms_nfs(vfs_handle_struct *handle,
+                            files_struct *fsp,
+                            const struct security_descriptor *psd,
+                            mode_t *pmode,
+                            bool *pdo_chmod)
+{
+       uint32_t i;
+       struct fruit_config_data *config = NULL;
+
+       *pdo_chmod = false;
+
+       SMB_VFS_HANDLE_GET_DATA(handle, config,
+                               struct fruit_config_data,
+                               return NT_STATUS_UNSUCCESSFUL);
+
+       if (psd->dacl == NULL || !config->unix_info_enabled) {
+               return NT_STATUS_OK;
+       }
 
        for (i = 0; i < psd->dacl->num_aces; i++) {
                if (dom_sid_compare_domain(
@@ -2106,29 +2692,88 @@ static int fruit_connect(vfs_handle_struct *handle,
        return rc;
 }
 
-static int fruit_open_meta(vfs_handle_struct *handle,
-                          struct smb_filename *smb_fname,
-                          files_struct *fsp, int flags, mode_t mode)
+static int fruit_open_meta_stream(vfs_handle_struct *handle,
+                                 struct smb_filename *smb_fname,
+                                 files_struct *fsp,
+                                 int flags,
+                                 mode_t mode)
+{
+       AfpInfo *ai = NULL;
+       char afpinfo_buf[AFP_INFO_SIZE];
+       ssize_t len, written;
+       int hostfd = -1;
+       int rc = -1;
+
+       hostfd = SMB_VFS_NEXT_OPEN(handle, smb_fname, fsp, flags, mode);
+       if (hostfd == -1) {
+               return -1;
+       }
+
+       if (!(flags & (O_CREAT | O_TRUNC))) {
+               return hostfd;
+       }
+
+       ai = afpinfo_new(talloc_tos());
+       if (ai == NULL) {
+               rc = -1;
+               goto fail;
+       }
+
+       len = afpinfo_pack(ai, afpinfo_buf);
+       if (len != AFP_INFO_SIZE) {
+               rc = -1;
+               goto fail;
+       }
+
+       /* Set fd, needed in SMB_VFS_NEXT_PWRITE() */
+       fsp->fh->fd = hostfd;
+
+       written = SMB_VFS_NEXT_PWRITE(handle, fsp, afpinfo_buf,
+                                     AFP_INFO_SIZE, 0);
+       fsp->fh->fd = -1;
+       if (written != AFP_INFO_SIZE) {
+               DBG_ERR("bad write [%zd/%d]\n", written, AFP_INFO_SIZE);
+               rc = -1;
+               goto fail;
+       }
+
+       rc = 0;
+
+fail:
+       DBG_DEBUG("rc=%d, fd=%d\n", rc, hostfd);
+
+       if (rc != 0) {
+               int saved_errno = errno;
+               if (hostfd >= 0) {
+                       fsp->fh->fd = hostfd;
+                       SMB_VFS_NEXT_CLOSE(handle, fsp);
+               }
+               hostfd = -1;
+               errno = saved_errno;
+       }
+       return hostfd;
+}
+
+static int fruit_open_meta_netatalk(vfs_handle_struct *handle,
+                                   struct smb_filename *smb_fname,
+                                   files_struct *fsp,
+                                   int flags,
+                                   mode_t mode)
 {
        int rc = 0;
-       struct fruit_config_data *config = NULL;
        struct smb_filename *smb_fname_base = NULL;
        int baseflags;
        int hostfd = -1;
        struct adouble *ad = NULL;
 
-       DEBUG(10, ("fruit_open_meta for %s\n", smb_fname_str_dbg(smb_fname)));
-
-       SMB_VFS_HANDLE_GET_DATA(handle, config,
-                               struct fruit_config_data, return -1);
-
-       if (config->meta == FRUIT_META_STREAM) {
-               return SMB_VFS_NEXT_OPEN(handle, smb_fname, fsp, flags, mode);
-       }
+       DBG_DEBUG("Path [%s]\n", smb_fname_str_dbg(smb_fname));
 
        /* Create an smb_filename with stream_name == NULL. */
        smb_fname_base = synthetic_smb_fname(talloc_tos(),
-                                            smb_fname->base_name, NULL, NULL);
+                                       smb_fname->base_name,
+                                       NULL,
+                                       NULL,
+                                       smb_fname->flags);
 
        if (smb_fname_base == NULL) {
                errno = ENOMEM;
@@ -2145,8 +2790,8 @@ static int fruit_open_meta(vfs_handle_struct *handle,
        baseflags &= ~O_EXCL;
        baseflags &= ~O_CREAT;
 
-       hostfd = SMB_VFS_OPEN(handle->conn, smb_fname_base, fsp,
-                             baseflags, mode);
+       hostfd = SMB_VFS_NEXT_OPEN(handle, smb_fname_base, fsp,
+                                  baseflags, mode);
 
        /*
         * It is legit to open a stream on a directory, but the base
@@ -2155,8 +2800,8 @@ static int fruit_open_meta(vfs_handle_struct *handle,
        if ((hostfd == -1) && (errno == EISDIR)) {
                baseflags &= ~O_ACCMODE;
                baseflags |= O_RDONLY;
-               hostfd = SMB_VFS_OPEN(handle->conn, smb_fname_base, fsp,
-                                     baseflags, mode);
+               hostfd = SMB_VFS_NEXT_OPEN(handle, smb_fname_base, fsp,
+                                          baseflags, mode);
        }
 
        TALLOC_FREE(smb_fname_base);
@@ -2171,29 +2816,22 @@ static int fruit_open_meta(vfs_handle_struct *handle,
                 * The attribute does not exist or needs to be truncated,
                 * create an AppleDouble EA
                 */
-               ad = ad_init(VFS_MEMCTX_FSP_EXTENSION(handle, fsp),
-                            handle, ADOUBLE_META, fsp);
+               ad = ad_init(fsp, handle, ADOUBLE_META);
                if (ad == NULL) {
                        rc = -1;
                        goto exit;
                }
 
-               rc = ad_write(ad, smb_fname->base_name);
+               fsp->fh->fd = hostfd;
+
+               rc = ad_fset(ad, fsp);
+               fsp->fh->fd = -1;
                if (rc != 0) {
                        rc = -1;
                        goto exit;
                }
-       } else {
-               ad = ad_alloc(VFS_MEMCTX_FSP_EXTENSION(handle, fsp),
-                             handle, ADOUBLE_META, fsp);
-               if (ad == NULL) {
-                       rc = -1;
-                       goto exit;
-               }
-               if (ad_read(ad, smb_fname->base_name) == -1) {
-                       rc = -1;
-                       goto exit;
-               }
+
+               TALLOC_FREE(ad);
        }
 
 exit:
@@ -2207,7 +2845,7 @@ exit:
                         * full fsp yet
                         */
                        fsp->fh->fd = hostfd;
-                       SMB_VFS_CLOSE(fsp);
+                       SMB_VFS_NEXT_CLOSE(handle, fsp);
                }
                hostfd = -1;
                errno = saved_errno;
@@ -2215,75 +2853,76 @@ exit:
        return hostfd;
 }
 
-static int fruit_open_rsrc(vfs_handle_struct *handle,
+static int fruit_open_meta(vfs_handle_struct *handle,
                           struct smb_filename *smb_fname,
                           files_struct *fsp, int flags, mode_t mode)
 {
-       int rc = 0;
+       int fd;
        struct fruit_config_data *config = NULL;
-       struct adouble *ad = NULL;
-       struct smb_filename *smb_fname_base = NULL;
-       char *adpath = NULL;
-       int hostfd = -1;
+       struct fio *fio = NULL;
 
-       DEBUG(10, ("fruit_open_rsrc for %s\n", smb_fname_str_dbg(smb_fname)));
+       DBG_DEBUG("path [%s]\n", smb_fname_str_dbg(smb_fname));
 
        SMB_VFS_HANDLE_GET_DATA(handle, config,
                                struct fruit_config_data, return -1);
 
-       switch (config->rsrc) {
-       case FRUIT_RSRC_STREAM:
-               return SMB_VFS_NEXT_OPEN(handle, smb_fname, fsp, flags, mode);
-       case FRUIT_RSRC_XATTR:
-#ifdef HAVE_ATTROPEN
-               hostfd = attropen(smb_fname->base_name,
-                                 AFPRESOURCE_EA_NETATALK, flags, mode);
-               if (hostfd == -1) {
-                       return -1;
-               }
-               ad = ad_init(VFS_MEMCTX_FSP_EXTENSION(handle, fsp),
-                            handle, ADOUBLE_RSRC, fsp);
-               if (ad == NULL) {
-                       rc = -1;
-                       goto exit;
-               }
-               goto exit;
-#else
-               errno = ENOTSUP;
-               return -1;
-#endif
-       default:
+       switch (config->meta) {
+       case FRUIT_META_STREAM:
+               fd = fruit_open_meta_stream(handle, smb_fname,
+                                           fsp, flags, mode);
+               break;
+
+       case FRUIT_META_NETATALK:
+               fd = fruit_open_meta_netatalk(handle, smb_fname,
+                                             fsp, flags, mode);
                break;
+
+       default:
+               DBG_ERR("Unexpected meta config [%d]\n", config->meta);
+               return -1;
        }
 
-       if (!(flags & O_CREAT) && !VALID_STAT(smb_fname->st)) {
-               rc = SMB_VFS_NEXT_STAT(handle, smb_fname);
-               if (rc != 0) {
-                       rc = -1;
-                       goto exit;
-               }
+       DBG_DEBUG("path [%s] fd [%d]\n", smb_fname_str_dbg(smb_fname), fd);
+
+       if (fd == -1) {
+               return -1;
        }
 
-       if (VALID_STAT(smb_fname->st) && S_ISDIR(smb_fname->st.st_ex_mode)) {
+       fio = (struct fio *)VFS_ADD_FSP_EXTENSION(handle, fsp, struct fio, NULL);
+       fio->type = ADOUBLE_META;
+       fio->config = config;
+
+       return fd;
+}
+
+static int fruit_open_rsrc_adouble(vfs_handle_struct *handle,
+                                  struct smb_filename *smb_fname,
+                                  files_struct *fsp,
+                                  int flags,
+                                  mode_t mode)
+{
+       int rc = 0;
+       struct adouble *ad = NULL;
+       struct smb_filename *smb_fname_base = NULL;
+       struct fruit_config_data *config = NULL;
+       int hostfd = -1;
+
+       SMB_VFS_HANDLE_GET_DATA(handle, config,
+                               struct fruit_config_data, return -1);
+
+       if ((!(flags & O_CREAT)) &&
+           S_ISDIR(fsp->base_fsp->fsp_name->st.st_ex_mode))
+       {
                /* sorry, but directories don't habe a resource fork */
                rc = -1;
                goto exit;
        }
 
-       rc = adouble_path(talloc_tos(), smb_fname->base_name, &adpath);
+       rc = adouble_path(talloc_tos(), smb_fname, &smb_fname_base);
        if (rc != 0) {
                goto exit;
        }
 
-       /* Create an smb_filename with stream_name == NULL. */
-       smb_fname_base = synthetic_smb_fname(talloc_tos(),
-                                            adpath, NULL, NULL);
-       if (smb_fname_base == NULL) {
-               errno = ENOMEM;
-               rc = -1;
-               goto exit;
-       }
-
        /* Sanitize flags */
        if (flags & O_WRONLY) {
                /* We always need read access for the metadata header too */
@@ -2291,44 +2930,33 @@ static int fruit_open_rsrc(vfs_handle_struct *handle,
                flags |= O_RDWR;
        }
 
-       hostfd = SMB_VFS_OPEN(handle->conn, smb_fname_base, fsp,
-                             flags, mode);
+       hostfd = SMB_VFS_NEXT_OPEN(handle, smb_fname_base, fsp,
+                                  flags, mode);
        if (hostfd == -1) {
                rc = -1;
                goto exit;
        }
 
-       /* REVIEW: we need this in ad_write() */
-       fsp->fh->fd = hostfd;
-
        if (flags & (O_CREAT | O_TRUNC)) {
-               ad = ad_init(VFS_MEMCTX_FSP_EXTENSION(handle, fsp),
-                            handle, ADOUBLE_RSRC, fsp);
+               ad = ad_init(fsp, handle, ADOUBLE_RSRC);
                if (ad == NULL) {
                        rc = -1;
                        goto exit;
                }
-               rc = ad_write(ad, smb_fname->base_name);
+
+               fsp->fh->fd = hostfd;
+
+               rc = ad_fset(ad, fsp);
+               fsp->fh->fd = -1;
                if (rc != 0) {
                        rc = -1;
                        goto exit;
                }
-       } else {
-               ad = ad_alloc(VFS_MEMCTX_FSP_EXTENSION(handle, fsp),
-                             handle, ADOUBLE_RSRC, fsp);
-               if (ad == NULL) {
-                       rc = -1;
-                       goto exit;
-               }
-               if (ad_read(ad, smb_fname->base_name) == -1) {
-                       rc = -1;
-                       goto exit;
-               }
+               TALLOC_FREE(ad);
        }
 
 exit:
 
-       TALLOC_FREE(adpath);
        TALLOC_FREE(smb_fname_base);
 
        DEBUG(10, ("fruit_open resource fork: rc=%d, fd=%d\n", rc, hostfd));
@@ -2349,24 +2977,114 @@ exit:
        return hostfd;
 }
 
-static int fruit_open(vfs_handle_struct *handle,
-                      struct smb_filename *smb_fname,
-                      files_struct *fsp, int flags, mode_t mode)
+static int fruit_open_rsrc_xattr(vfs_handle_struct *handle,
+                                struct smb_filename *smb_fname,
+                                files_struct *fsp,
+                                int flags,
+                                mode_t mode)
 {
-       DEBUG(10, ("fruit_open called for %s\n",
-                  smb_fname_str_dbg(smb_fname)));
+#ifdef HAVE_ATTROPEN
+       int fd = -1;
 
-       if (!is_ntfs_stream_smb_fname(smb_fname)) {
+       fd = attropen(smb_fname->base_name,
+                     AFPRESOURCE_EA_NETATALK,
+                     flags,
+                     mode);
+       if (fd == -1) {
+               return -1;
+       }
+
+       return fd;
+
+#else
+       errno = ENOSYS;
+       return -1;
+#endif
+}
+
+static int fruit_open_rsrc(vfs_handle_struct *handle,
+                          struct smb_filename *smb_fname,
+                          files_struct *fsp, int flags, mode_t mode)
+{
+       int fd;
+       struct fruit_config_data *config = NULL;
+       struct fio *fio = NULL;
+
+       DBG_DEBUG("Path [%s]\n", smb_fname_str_dbg(smb_fname));
+
+       SMB_VFS_HANDLE_GET_DATA(handle, config,
+                               struct fruit_config_data, return -1);
+
+       if (((flags & O_ACCMODE) == O_RDONLY)
+           && (flags & O_CREAT)
+           && !VALID_STAT(fsp->fsp_name->st))
+       {
+               /*
+                * This means the stream doesn't exist. macOS SMB server fails
+                * this with NT_STATUS_OBJECT_NAME_NOT_FOUND, so must we. Cf bug
+                * 12565 and the test for this combination in
+                * test_rfork_create().
+                */
+               errno = ENOENT;
+               return -1;
+       }
+
+       switch (config->rsrc) {
+       case FRUIT_RSRC_STREAM:
+               fd = SMB_VFS_NEXT_OPEN(handle, smb_fname, fsp, flags, mode);
+               break;
+
+       case FRUIT_RSRC_ADFILE:
+               fd = fruit_open_rsrc_adouble(handle, smb_fname,
+                                            fsp, flags, mode);
+               break;
+
+       case FRUIT_RSRC_XATTR:
+               fd = fruit_open_rsrc_xattr(handle, smb_fname,
+                                          fsp, flags, mode);
+               break;
+
+       default:
+               DBG_ERR("Unexpected rsrc config [%d]\n", config->rsrc);
+               return -1;
+       }
+
+       DBG_DEBUG("Path [%s] fd [%d]\n", smb_fname_str_dbg(smb_fname), fd);
+
+       if (fd == -1) {
+               return -1;
+       }
+
+       fio = (struct fio *)VFS_ADD_FSP_EXTENSION(handle, fsp, struct fio, NULL);
+       fio->type = ADOUBLE_RSRC;
+       fio->config = config;
+
+       return fd;
+}
+
+static int fruit_open(vfs_handle_struct *handle,
+                      struct smb_filename *smb_fname,
+                      files_struct *fsp, int flags, mode_t mode)
+{
+       int fd;
+
+       DBG_DEBUG("Path [%s]\n", smb_fname_str_dbg(smb_fname));
+
+       if (!is_ntfs_stream_smb_fname(smb_fname)) {
                return SMB_VFS_NEXT_OPEN(handle, smb_fname, fsp, flags, mode);
        }
 
        if (is_afpinfo_stream(smb_fname)) {
-               return fruit_open_meta(handle, smb_fname, fsp, flags, mode);
+               fd = fruit_open_meta(handle, smb_fname, fsp, flags, mode);
        } else if (is_afpresource_stream(smb_fname)) {
-               return fruit_open_rsrc(handle, smb_fname, fsp, flags, mode);
+               fd = fruit_open_rsrc(handle, smb_fname, fsp, flags, mode);
+       } else {
+               fd = SMB_VFS_NEXT_OPEN(handle, smb_fname, fsp, flags, mode);
        }
 
-       return SMB_VFS_NEXT_OPEN(handle, smb_fname, fsp, flags, mode);
+       DBG_DEBUG("Path [%s] fd [%d]\n", smb_fname_str_dbg(smb_fname), fd);
+
+       return fd;
 }
 
 static int fruit_rename(struct vfs_handle_struct *handle,
@@ -2374,69 +3092,108 @@ static int fruit_rename(struct vfs_handle_struct *handle,
                        const struct smb_filename *smb_fname_dst)
 {
        int rc = -1;
-       char *src_adouble_path = NULL;
-       char *dst_adouble_path = NULL;
        struct fruit_config_data *config = NULL;
+       struct smb_filename *src_adp_smb_fname = NULL;
+       struct smb_filename *dst_adp_smb_fname = NULL;
 
-       rc = SMB_VFS_NEXT_RENAME(handle, smb_fname_src, smb_fname_dst);
+       SMB_VFS_HANDLE_GET_DATA(handle, config,
+                               struct fruit_config_data, return -1);
 
-       if (!VALID_STAT(smb_fname_src->st)
-           || !S_ISREG(smb_fname_src->st.st_ex_mode)) {
-               return rc;
+       if (!VALID_STAT(smb_fname_src->st)) {
+               DBG_ERR("Need valid stat for [%s]\n",
+                       smb_fname_str_dbg(smb_fname_src));
+               return -1;
        }
 
-       SMB_VFS_HANDLE_GET_DATA(handle, config,
-                               struct fruit_config_data, return -1);
+       rc = SMB_VFS_NEXT_RENAME(handle, smb_fname_src, smb_fname_dst);
+       if (rc != 0) {
+               return -1;
+       }
 
-       if (config->rsrc == FRUIT_RSRC_XATTR) {
-               return rc;
+       if ((config->rsrc != FRUIT_RSRC_ADFILE) ||
+           (!S_ISREG(smb_fname_src->st.st_ex_mode)))
+       {
+               return 0;
        }
 
-       rc = adouble_path(talloc_tos(), smb_fname_src->base_name,
-                         &src_adouble_path);
+       rc = adouble_path(talloc_tos(), smb_fname_src, &src_adp_smb_fname);
        if (rc != 0) {
                goto done;
        }
-       rc = adouble_path(talloc_tos(), smb_fname_dst->base_name,
-                         &dst_adouble_path);
+
+       rc = adouble_path(talloc_tos(), smb_fname_dst, &dst_adp_smb_fname);
        if (rc != 0) {
                goto done;
        }
 
-       DEBUG(10, ("fruit_rename: %s -> %s\n",
-                  src_adouble_path, dst_adouble_path));
+       DBG_DEBUG("%s -> %s\n",
+                 smb_fname_str_dbg(src_adp_smb_fname),
+                 smb_fname_str_dbg(dst_adp_smb_fname));
 
-       rc = rename(src_adouble_path, dst_adouble_path);
+       rc = SMB_VFS_NEXT_RENAME(handle, src_adp_smb_fname, dst_adp_smb_fname);
        if (errno == ENOENT) {
                rc = 0;
        }
 
-       TALLOC_FREE(src_adouble_path);
-       TALLOC_FREE(dst_adouble_path);
-
 done:
+       TALLOC_FREE(src_adp_smb_fname);
+       TALLOC_FREE(dst_adp_smb_fname);
        return rc;
 }
 
-static int fruit_unlink(vfs_handle_struct *handle,
-                       const struct smb_filename *smb_fname)
+static int fruit_unlink_meta_stream(vfs_handle_struct *handle,
+                                   const struct smb_filename *smb_fname)
+{
+       return SMB_VFS_NEXT_UNLINK(handle, smb_fname);
+}
+
+static int fruit_unlink_meta_netatalk(vfs_handle_struct *handle,
+                                     const struct smb_filename *smb_fname)
+{
+       return SMB_VFS_REMOVEXATTR(handle->conn,
+                                  smb_fname,
+                                  AFPINFO_EA_NETATALK);
+}
+
+static int fruit_unlink_meta(vfs_handle_struct *handle,
+                            const struct smb_filename *smb_fname)
 {
-       int rc = -1;
        struct fruit_config_data *config = NULL;
+       int rc;
 
        SMB_VFS_HANDLE_GET_DATA(handle, config,
                                struct fruit_config_data, return -1);
 
-       if (!is_ntfs_stream_smb_fname(smb_fname)) {
-               char *adp = NULL;
+       switch (config->meta) {
+       case FRUIT_META_STREAM:
+               rc = fruit_unlink_meta_stream(handle, smb_fname);
+               break;
 
-               rc = SMB_VFS_NEXT_UNLINK(handle, smb_fname);
-               if (rc != 0) {
-                       return -1;
-               }
+       case FRUIT_META_NETATALK:
+               rc = fruit_unlink_meta_netatalk(handle, smb_fname);
+               break;
 
-               if (config->rsrc != FRUIT_RSRC_ADFILE) {
-                       return 0;
+       default:
+               DBG_ERR("Unsupported meta config [%d]\n", config->meta);
+               return -1;
+       }
+
+       return rc;
+}
+
+static int fruit_unlink_rsrc_stream(vfs_handle_struct *handle,
+                                   const struct smb_filename *smb_fname,
+                                   bool force_unlink)
+{
+       int ret;
+
+       if (!force_unlink) {
+               struct smb_filename *smb_fname_cp = NULL;
+               off_t size;
+
+               smb_fname_cp = cp_smb_filename(talloc_tos(), smb_fname);
+               if (smb_fname_cp == NULL) {
+                       return -1;
                }
 
                /*
@@ -2444,75 +3201,176 @@ static int fruit_unlink(vfs_handle_struct *handle,
                 * vfs_streaminfo, as a result stream cleanup/deletion of file
                 * deletion doesn't remove the resourcefork stream.
                 */
-               rc = adouble_path(talloc_tos(),
-                                 smb_fname->base_name, &adp);
-               if (rc != 0) {
+
+               ret = SMB_VFS_NEXT_STAT(handle, smb_fname_cp);
+               if (ret != 0) {
+                       TALLOC_FREE(smb_fname_cp);
+                       DBG_ERR("stat [%s] failed [%s]\n",
+                               smb_fname_str_dbg(smb_fname_cp), strerror(errno));
                        return -1;
                }
 
-               /* FIXME: direct unlink(), missing smb_fname */
-               DEBUG(1,("fruit_unlink: %s\n", adp));
-               rc = unlink(adp);
-               if ((rc == -1) && (errno == ENOENT)) {
-                       rc = 0;
+               size = smb_fname_cp->st.st_ex_size;
+               TALLOC_FREE(smb_fname_cp);
+
+               if (size > 0) {
+                       /* OS X ignores resource fork stream delete requests */
+                       return 0;
                }
+       }
 
-               TALLOC_FREE(adp);
-               return 0;
+       ret = SMB_VFS_NEXT_UNLINK(handle, smb_fname);
+       if ((ret != 0) && (errno == ENOENT) && force_unlink) {
+               ret = 0;
        }
 
-       if (is_afpinfo_stream(smb_fname)) {
-               if (config->meta == FRUIT_META_STREAM) {
-                       rc = SMB_VFS_NEXT_UNLINK(handle, smb_fname);
-               } else {
-                       rc = SMB_VFS_REMOVEXATTR(handle->conn,
-                                                smb_fname->base_name,
-                                                AFPINFO_EA_NETATALK);
+       return ret;
+}
+
+static int fruit_unlink_rsrc_adouble(vfs_handle_struct *handle,
+                                    const struct smb_filename *smb_fname,
+                                    bool force_unlink)
+{
+       int rc;
+       struct adouble *ad = NULL;
+       struct smb_filename *adp_smb_fname = NULL;
+
+       if (!force_unlink) {
+               ad = ad_get(talloc_tos(), handle, smb_fname,
+                           ADOUBLE_RSRC);
+               if (ad == NULL) {
+                       errno = ENOENT;
+                       return -1;
                }
 
-               return rc;
-       }
 
-       if (is_afpresource_stream(smb_fname)) {
-               if (config->rsrc == FRUIT_RSRC_ADFILE) {
-                       char *adp = NULL;
+               /*
+                * 0 byte resource fork streams are not listed by
+                * vfs_streaminfo, as a result stream cleanup/deletion of file
+                * deletion doesn't remove the resourcefork stream.
+                */
 
-                       rc = adouble_path(talloc_tos(),
-                                         smb_fname->base_name, &adp);
-                       if (rc != 0) {
-                               return -1;
-                       }
-                       /* FIXME: direct unlink(), missing smb_fname */
-                       rc = unlink(adp);
-                       if ((rc == -1) && (errno == ENOENT)) {
-                               rc = 0;
-                       }
-                       TALLOC_FREE(adp);
-               } else {
-                       rc = SMB_VFS_REMOVEXATTR(handle->conn,
-                                                smb_fname->base_name,
-                                                AFPRESOURCE_EA_NETATALK);
+               if (ad_getentrylen(ad, ADEID_RFORK) > 0) {
+                       /* OS X ignores resource fork stream delete requests */
+                       TALLOC_FREE(ad);
+                       return 0;
                }
 
-               return rc;
+               TALLOC_FREE(ad);
        }
 
-       return SMB_VFS_NEXT_UNLINK(handle, smb_fname);
+       rc = adouble_path(talloc_tos(), smb_fname, &adp_smb_fname);
+       if (rc != 0) {
+               return -1;
+       }
+
+       rc = SMB_VFS_NEXT_UNLINK(handle, adp_smb_fname);
+       TALLOC_FREE(adp_smb_fname);
+       if ((rc != 0) && (errno == ENOENT) && force_unlink) {
+               rc = 0;
+       }
 
+       return rc;
+}
 
+static int fruit_unlink_rsrc_xattr(vfs_handle_struct *handle,
+                                  const struct smb_filename *smb_fname,
+                                  bool force_unlink)
+{
+       /*
+        * OS X ignores resource fork stream delete requests, so nothing to do
+        * here. Removing the file will remove the xattr anyway, so we don't
+        * have to take care of removing 0 byte resource forks that could be
+        * left behind.
+        */
        return 0;
 }
 
+static int fruit_unlink_rsrc(vfs_handle_struct *handle,
+                            const struct smb_filename *smb_fname,
+                            bool force_unlink)
+{
+       struct fruit_config_data *config = NULL;
+       int rc;
+
+       SMB_VFS_HANDLE_GET_DATA(handle, config,
+                               struct fruit_config_data, return -1);
+
+       switch (config->rsrc) {
+       case FRUIT_RSRC_STREAM:
+               rc = fruit_unlink_rsrc_stream(handle, smb_fname, force_unlink);
+               break;
+
+       case FRUIT_RSRC_ADFILE:
+               rc = fruit_unlink_rsrc_adouble(handle, smb_fname, force_unlink);
+               break;
+
+       case FRUIT_RSRC_XATTR:
+               rc = fruit_unlink_rsrc_xattr(handle, smb_fname, force_unlink);
+               break;
+
+       default:
+               DBG_ERR("Unsupported rsrc config [%d]\n", config->rsrc);
+               return -1;
+       }
+
+       return rc;
+}
+
+static int fruit_unlink(vfs_handle_struct *handle,
+                       const struct smb_filename *smb_fname)
+{
+       int rc;
+       struct fruit_config_data *config = NULL;
+       struct smb_filename *rsrc_smb_fname = NULL;
+
+       SMB_VFS_HANDLE_GET_DATA(handle, config,
+                               struct fruit_config_data, return -1);
+
+       if (is_afpinfo_stream(smb_fname)) {
+               return fruit_unlink_meta(handle, smb_fname);
+       } else if (is_afpresource_stream(smb_fname)) {
+               return fruit_unlink_rsrc(handle, smb_fname, false);
+       } if (is_ntfs_stream_smb_fname(smb_fname)) {
+               return SMB_VFS_NEXT_UNLINK(handle, smb_fname);
+       }
+
+       /*
+        * A request to delete the base file. Because 0 byte resource
+        * fork streams are not listed by fruit_streaminfo,
+        * delete_all_streams() can't remove 0 byte resource fork
+        * streams, so we have to cleanup this here.
+        */
+       rsrc_smb_fname = synthetic_smb_fname(talloc_tos(),
+                                            smb_fname->base_name,
+                                            AFPRESOURCE_STREAM_NAME,
+                                            NULL,
+                                            smb_fname->flags);
+       if (rsrc_smb_fname == NULL) {
+               return -1;
+       }
+
+       rc = fruit_unlink_rsrc(handle, rsrc_smb_fname, true);
+       if ((rc != 0) && (errno != ENOENT)) {
+               DBG_ERR("Forced unlink of [%s] failed [%s]\n",
+                       smb_fname_str_dbg(rsrc_smb_fname), strerror(errno));
+               TALLOC_FREE(rsrc_smb_fname);
+               return -1;
+       }
+       TALLOC_FREE(rsrc_smb_fname);
+
+       return SMB_VFS_NEXT_UNLINK(handle, smb_fname);
+}
+
 static int fruit_chmod(vfs_handle_struct *handle,
-                      const char *path,
+                      const struct smb_filename *smb_fname,
                       mode_t mode)
 {
        int rc = -1;
-       char *adp = NULL;
        struct fruit_config_data *config = NULL;
-       SMB_STRUCT_STAT sb;
+       struct smb_filename *smb_fname_adp = NULL;
 
-       rc = SMB_VFS_NEXT_CHMOD(handle, path, mode);
+       rc = SMB_VFS_NEXT_CHMOD(handle, smb_fname, mode);
        if (rc != 0) {
                return rc;
        }
@@ -2520,43 +3378,44 @@ static int fruit_chmod(vfs_handle_struct *handle,
        SMB_VFS_HANDLE_GET_DATA(handle, config,
                                struct fruit_config_data, return -1);
 
-       if (config->rsrc == FRUIT_RSRC_XATTR) {
+       if (config->rsrc != FRUIT_RSRC_ADFILE) {
                return 0;
        }
 
-       /* FIXME: direct sys_lstat(), missing smb_fname */
-       rc = sys_lstat(path, &sb, false);
-       if (rc != 0 || !S_ISREG(sb.st_ex_mode)) {
-               return rc;
+       if (!VALID_STAT(smb_fname->st)) {
+               return 0;
        }
 
-       rc = adouble_path(talloc_tos(), path, &adp);
+       if (!S_ISREG(smb_fname->st.st_ex_mode)) {
+               return 0;
+       }
+
+       rc = adouble_path(talloc_tos(), smb_fname, &smb_fname_adp);
        if (rc != 0) {
                return -1;
        }
 
-       DEBUG(10, ("fruit_chmod: %s\n", adp));
+       DEBUG(10, ("fruit_chmod: %s\n", smb_fname_adp->base_name));
 
-       rc = SMB_VFS_NEXT_CHMOD(handle, adp, mode);
+       rc = SMB_VFS_NEXT_CHMOD(handle, smb_fname_adp, mode);
        if (errno == ENOENT) {
                rc = 0;
        }
 
-       TALLOC_FREE(adp);
+       TALLOC_FREE(smb_fname_adp);
        return rc;
 }
 
 static int fruit_chown(vfs_handle_struct *handle,
-                      const char *path,
+                      const struct smb_filename *smb_fname,
                       uid_t uid,
                       gid_t gid)
 {
        int rc = -1;
-       char *adp = NULL;
        struct fruit_config_data *config = NULL;
-       SMB_STRUCT_STAT sb;
+       struct smb_filename *adp_smb_fname = NULL;
 
-       rc = SMB_VFS_NEXT_CHOWN(handle, path, uid, gid);
+       rc = SMB_VFS_NEXT_CHOWN(handle, smb_fname, uid, gid);
        if (rc != 0) {
                return rc;
        }
@@ -2564,34 +3423,37 @@ static int fruit_chown(vfs_handle_struct *handle,
        SMB_VFS_HANDLE_GET_DATA(handle, config,
                                struct fruit_config_data, return -1);
 
-       if (config->rsrc == FRUIT_RSRC_XATTR) {
-               return rc;
+       if (config->rsrc != FRUIT_RSRC_ADFILE) {
+               return 0;
        }
 
-       /* FIXME: direct sys_lstat(), missing smb_fname */
-       rc = sys_lstat(path, &sb, false);
-       if (rc != 0 || !S_ISREG(sb.st_ex_mode)) {
-               return rc;
+       if (!VALID_STAT(smb_fname->st)) {
+               return 0;
        }
 
-       rc = adouble_path(talloc_tos(), path, &adp);
+       if (!S_ISREG(smb_fname->st.st_ex_mode)) {
+               return 0;
+       }
+
+       rc = adouble_path(talloc_tos(), smb_fname, &adp_smb_fname);
        if (rc != 0) {
                goto done;
        }
 
-       DEBUG(10, ("fruit_chown: %s\n", adp));
+       DEBUG(10, ("fruit_chown: %s\n", adp_smb_fname->base_name));
 
-       rc = SMB_VFS_NEXT_CHOWN(handle, adp, uid, gid);
+       rc = SMB_VFS_NEXT_CHOWN(handle, adp_smb_fname, uid, gid);
        if (errno == ENOENT) {
                rc = 0;
        }
 
  done:
-       TALLOC_FREE(adp);
+       TALLOC_FREE(adp_smb_fname);
        return rc;
 }
 
-static int fruit_rmdir(struct vfs_handle_struct *handle, const char *path)
+static int fruit_rmdir(struct vfs_handle_struct *handle,
+                       const struct smb_filename *smb_fname)
 {
        DIR *dh = NULL;
        struct dirent *de;
@@ -2600,7 +3462,7 @@ static int fruit_rmdir(struct vfs_handle_struct *handle, const char *path)
        SMB_VFS_HANDLE_GET_DATA(handle, config,
                                struct fruit_config_data, return -1);
 
-       if (!handle->conn->cwd || !path || (config->rsrc == FRUIT_RSRC_XATTR)) {
+       if (config->rsrc != FRUIT_RSRC_ADFILE) {
                goto exit_rmdir;
        }
 
@@ -2608,24 +3470,59 @@ static int fruit_rmdir(struct vfs_handle_struct *handle, const char *path)
         * Due to there is no way to change bDeleteVetoFiles variable
         * from this module, need to clean up ourselves
         */
-       dh = opendir(path);
+
+       dh = SMB_VFS_OPENDIR(handle->conn, smb_fname, NULL, 0);
        if (dh == NULL) {
                goto exit_rmdir;
        }
 
-       while ((de = readdir(dh)) != NULL) {
-               if ((strncmp(de->d_name,
-                            ADOUBLE_NAME_PREFIX,
-                            strlen(ADOUBLE_NAME_PREFIX))) == 0) {
-                       char *p = talloc_asprintf(talloc_tos(),
-                                                 "%s/%s",
-                                                 path, de->d_name);
-                       if (p == NULL) {
-                               goto exit_rmdir;
-                       }
-                       DEBUG(10, ("fruit_rmdir: delete %s\n", p));
-                       (void)unlink(p);
+       while ((de = SMB_VFS_READDIR(handle->conn, dh, NULL)) != NULL) {
+               int match;
+               struct adouble *ad = NULL;
+               char *p = NULL;
+               struct smb_filename *ad_smb_fname = NULL;
+               int ret;
+
+               match = strncmp(de->d_name,
+                               ADOUBLE_NAME_PREFIX,
+                               strlen(ADOUBLE_NAME_PREFIX));
+               if (match != 0) {
+                       continue;
+               }
+
+               p = talloc_asprintf(talloc_tos(), "%s/%s",
+                                   smb_fname->base_name, de->d_name);
+               if (p == NULL) {
+                       DBG_ERR("talloc_asprintf failed\n");
+                       return -1;
+               }
+
+               ad_smb_fname = synthetic_smb_fname(talloc_tos(), p,
+                                                   NULL, NULL,
+                                                   smb_fname->flags);
+               TALLOC_FREE(p);
+               if (ad_smb_fname == NULL) {
+                       DBG_ERR("synthetic_smb_fname failed\n");
+                       return -1;
+               }
+
+               /*
+                * Check whether it's a valid AppleDouble file, if
+                * yes, delete it, ignore it otherwise.
+                */
+               ad = ad_get(talloc_tos(), handle, ad_smb_fname, ADOUBLE_RSRC);
+               if (ad == NULL) {
+                       TALLOC_FREE(ad_smb_fname);
                        TALLOC_FREE(p);
+                       continue;
+               }
+               TALLOC_FREE(ad);
+
+               ret = SMB_VFS_NEXT_UNLINK(handle, ad_smb_fname);
+               TALLOC_FREE(ad_smb_fname);
+               if (ret != 0) {
+                       DBG_ERR("Deleting [%s] failed\n",
+                               smb_fname_str_dbg(ad_smb_fname));
                }
        }
 
@@ -2633,284 +3530,809 @@ exit_rmdir:
        if (dh) {
                closedir(dh);
        }
-       return SMB_VFS_NEXT_RMDIR(handle, path);
+       return SMB_VFS_NEXT_RMDIR(handle, smb_fname);
 }
 
-static ssize_t fruit_pread(vfs_handle_struct *handle,
-                          files_struct *fsp, void *data,
-                          size_t n, off_t offset)
+static ssize_t fruit_pread_meta_stream(vfs_handle_struct *handle,
+                                      files_struct *fsp, void *data,
+                                      size_t n, off_t offset)
 {
-       int rc = 0;
-        struct adouble *ad = (struct adouble *)VFS_FETCH_FSP_EXTENSION(
-               handle, fsp);
-       struct fruit_config_data *config = NULL;
-       AfpInfo *ai = NULL;
-       ssize_t len;
-       char *name = NULL;
-       char *tmp_base_name = NULL;
-       NTSTATUS status;
+       ssize_t nread;
+       int ret;
 
-       DEBUG(10, ("fruit_pread: offset=%d, size=%d\n", (int)offset, (int)n));
+       nread = SMB_VFS_NEXT_PREAD(handle, fsp, data, n, offset);
 
-       if (!fsp->base_fsp) {
-               return SMB_VFS_NEXT_PREAD(handle, fsp, data, n, offset);
+       if (nread == n) {
+               return nread;
        }
 
-       SMB_VFS_HANDLE_GET_DATA(handle, config,
-                               struct fruit_config_data, return -1);
+       DBG_ERR("Removing [%s] after short read [%zd]\n",
+               fsp_str_dbg(fsp), nread);
 
-       /* fsp_name is not converted with vfs_catia */
-       tmp_base_name = fsp->base_fsp->fsp_name->base_name;
-       status = SMB_VFS_TRANSLATE_NAME(handle->conn,
-                                       fsp->base_fsp->fsp_name->base_name,
-                                       vfs_translate_to_unix,
-                                       talloc_tos(), &name);
-       if (NT_STATUS_EQUAL(status, NT_STATUS_NONE_MAPPED)) {
-               name = talloc_strdup(talloc_tos(), tmp_base_name);
-               if (name == NULL) {
-                       rc = -1;
-                       goto exit;
-               }
-       } else if (!NT_STATUS_IS_OK(status)) {
-               errno = map_errno_from_nt_status(status);
-               rc = -1;
-               goto exit;
+       ret = SMB_VFS_NEXT_UNLINK(handle, fsp->fsp_name);
+       if (ret != 0) {
+               DBG_ERR("Removing [%s] failed\n", fsp_str_dbg(fsp));
+               return -1;
        }
-       fsp->base_fsp->fsp_name->base_name = name;
 
-       if (ad == NULL) {
-               len = SMB_VFS_NEXT_PREAD(handle, fsp, data, n, offset);
-               if (len == -1) {
-                       rc = -1;
-                       goto exit;
-               }
-               goto exit;
-       }
+       errno = EINVAL;
+       return -1;
+}
 
-       if (!fruit_fsp_recheck(ad, fsp)) {
-               rc = -1;
-               goto exit;
+static ssize_t fruit_pread_meta_adouble(vfs_handle_struct *handle,
+                                       files_struct *fsp, void *data,
+                                       size_t n, off_t offset)
+{
+       AfpInfo *ai = NULL;
+       struct adouble *ad = NULL;
+       char afpinfo_buf[AFP_INFO_SIZE];
+       char *p = NULL;
+       ssize_t nread;
+
+       ai = afpinfo_new(talloc_tos());
+       if (ai == NULL) {
+               return -1;
        }
 
-       if (ad->ad_type == ADOUBLE_META) {
-               char afpinfo_buf[AFP_INFO_SIZE];
-               size_t to_return;
+       ad = ad_fget(talloc_tos(), handle, fsp, ADOUBLE_META);
+       if (ad == NULL) {
+               nread = -1;
+               goto fail;
+       }
 
-               if ((offset < 0) || (offset >= AFP_INFO_SIZE)) {
-                       len = 0;
-                       rc = 0;
-                       goto exit;
+       p = ad_get_entry(ad, ADEID_FINDERI);
+       if (p == NULL) {
+               DBG_ERR("No ADEID_FINDERI for [%s]\n", fsp_str_dbg(fsp));
+               nread = -1;
+               goto fail;
+       }
+
+       memcpy(&ai->afpi_FinderInfo[0], p, ADEDLEN_FINDERI);
+
+       nread = afpinfo_pack(ai, afpinfo_buf);
+       if (nread != AFP_INFO_SIZE) {
+               nread = -1;
+               goto fail;
+       }
+
+       memcpy(data, afpinfo_buf, n);
+       nread = n;
+
+fail:
+       TALLOC_FREE(ai);
+       return nread;
+}
+
+static ssize_t fruit_pread_meta(vfs_handle_struct *handle,
+                               files_struct *fsp, void *data,
+                               size_t n, off_t offset)
+{
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+       ssize_t nread;
+       ssize_t to_return;
+
+       /*
+        * OS X has a off-by-1 error in the offset calculation, so we're
+        * bug compatible here. It won't hurt, as any relevant real
+        * world read requests from the AFP_AfpInfo stream will be
+        * offset=0 n=60. offset is ignored anyway, see below.
+        */
+       if ((offset < 0) || (offset >= AFP_INFO_SIZE + 1)) {
+               return 0;
+       }
+
+       /* Yes, macOS always reads from offset 0 */
+       offset = 0;
+       to_return = MIN(n, AFP_INFO_SIZE);
+
+       switch (fio->config->meta) {
+       case FRUIT_META_STREAM:
+               nread = fruit_pread_meta_stream(handle, fsp, data,
+                                               to_return, offset);
+               break;
+
+       case FRUIT_META_NETATALK:
+               nread = fruit_pread_meta_adouble(handle, fsp, data,
+                                                to_return, offset);
+               break;
+
+       default:
+               DBG_ERR("Unexpected meta config [%d]\n", fio->config->meta);
+               return -1;
+       }
+
+       return nread;
+}
+
+static ssize_t fruit_pread_rsrc_stream(vfs_handle_struct *handle,
+                                      files_struct *fsp, void *data,
+                                      size_t n, off_t offset)
+{
+       return SMB_VFS_NEXT_PREAD(handle, fsp, data, n, offset);
+}
+
+static ssize_t fruit_pread_rsrc_xattr(vfs_handle_struct *handle,
+                                     files_struct *fsp, void *data,
+                                     size_t n, off_t offset)
+{
+       return SMB_VFS_NEXT_PREAD(handle, fsp, data, n, offset);
+}
+
+static ssize_t fruit_pread_rsrc_adouble(vfs_handle_struct *handle,
+                                       files_struct *fsp, void *data,
+                                       size_t n, off_t offset)
+{
+       struct adouble *ad = NULL;
+       ssize_t nread;
+
+       ad = ad_fget(talloc_tos(), handle, fsp, ADOUBLE_RSRC);
+       if (ad == NULL) {
+               return -1;
+       }
+
+       nread = SMB_VFS_NEXT_PREAD(handle, fsp, data, n,
+                                  offset + ad_getentryoff(ad, ADEID_RFORK));
+
+       TALLOC_FREE(ad);
+       return nread;
+}
+
+static ssize_t fruit_pread_rsrc(vfs_handle_struct *handle,
+                               files_struct *fsp, void *data,
+                               size_t n, off_t offset)
+{
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+       ssize_t nread;
+
+       switch (fio->config->rsrc) {
+       case FRUIT_RSRC_STREAM:
+               nread = fruit_pread_rsrc_stream(handle, fsp, data, n, offset);
+               break;
+
+       case FRUIT_RSRC_ADFILE:
+               nread = fruit_pread_rsrc_adouble(handle, fsp, data, n, offset);
+               break;
+
+       case FRUIT_RSRC_XATTR:
+               nread = fruit_pread_rsrc_xattr(handle, fsp, data, n, offset);
+               break;
+
+       default:
+               DBG_ERR("Unexpected rsrc config [%d]\n", fio->config->rsrc);
+               return -1;
+       }
+
+       return nread;
+}
+
+static ssize_t fruit_pread(vfs_handle_struct *handle,
+                          files_struct *fsp, void *data,
+                          size_t n, off_t offset)
+{
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+       ssize_t nread;
+
+       DBG_DEBUG("Path [%s] offset=%"PRIdMAX", size=%zd\n",
+                 fsp_str_dbg(fsp), (intmax_t)offset, n);
+
+       if (fio == NULL) {
+               return SMB_VFS_NEXT_PREAD(handle, fsp, data, n, offset);
+       }
+
+       if (fio->type == ADOUBLE_META) {
+               nread = fruit_pread_meta(handle, fsp, data, n, offset);
+       } else {
+               nread = fruit_pread_rsrc(handle, fsp, data, n, offset);
+       }
+
+       DBG_DEBUG("Path [%s] nread [%zd]\n", fsp_str_dbg(fsp), nread);
+       return nread;
+}
+
+static bool fruit_must_handle_aio_stream(struct fio *fio)
+{
+       if (fio == NULL) {
+               return false;
+       };
+
+       if ((fio->type == ADOUBLE_META) &&
+           (fio->config->meta == FRUIT_META_NETATALK))
+       {
+               return true;
+       }
+
+       if ((fio->type == ADOUBLE_RSRC) &&
+           (fio->config->rsrc == FRUIT_RSRC_ADFILE))
+       {
+               return true;
+       }
+
+       return false;
+}
+
+struct fruit_pread_state {
+       ssize_t nread;
+       struct vfs_aio_state vfs_aio_state;
+};
+
+static void fruit_pread_done(struct tevent_req *subreq);
+
+static struct tevent_req *fruit_pread_send(
+       struct vfs_handle_struct *handle,
+       TALLOC_CTX *mem_ctx,
+       struct tevent_context *ev,
+       struct files_struct *fsp,
+       void *data,
+       size_t n, off_t offset)
+{
+       struct tevent_req *req = NULL;
+       struct tevent_req *subreq = NULL;
+       struct fruit_pread_state *state = NULL;
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+
+       req = tevent_req_create(mem_ctx, &state,
+                               struct fruit_pread_state);
+       if (req == NULL) {
+               return NULL;
+       }
+
+       if (fruit_must_handle_aio_stream(fio)) {
+               state->nread = SMB_VFS_PREAD(fsp, data, n, offset);
+               if (state->nread != n) {
+                       if (state->nread != -1) {
+                               errno = EIO;
+                       }
+                       tevent_req_error(req, errno);
+                       return tevent_req_post(req, ev);
                }
+               tevent_req_done(req);
+               return tevent_req_post(req, ev);
+       }
 
-               to_return = AFP_INFO_SIZE - offset;
+       subreq = SMB_VFS_NEXT_PREAD_SEND(state, ev, handle, fsp,
+                                        data, n, offset);
+       if (tevent_req_nomem(req, subreq)) {
+               return tevent_req_post(req, ev);
+       }
+       tevent_req_set_callback(subreq, fruit_pread_done, req);
+       return req;
+}
 
-               ai = afpinfo_new(talloc_tos());
-               if (ai == NULL) {
-                       rc = -1;
-                       goto exit;
+static void fruit_pread_done(struct tevent_req *subreq)
+{
+       struct tevent_req *req = tevent_req_callback_data(
+               subreq, struct tevent_req);
+       struct fruit_pread_state *state = tevent_req_data(
+               req, struct fruit_pread_state);
+
+       state->nread = SMB_VFS_PREAD_RECV(subreq, &state->vfs_aio_state);
+       TALLOC_FREE(subreq);
+
+       if (tevent_req_error(req, state->vfs_aio_state.error)) {
+               return;
+       }
+       tevent_req_done(req);
+}
+
+static ssize_t fruit_pread_recv(struct tevent_req *req,
+                                       struct vfs_aio_state *vfs_aio_state)
+{
+       struct fruit_pread_state *state = tevent_req_data(
+               req, struct fruit_pread_state);
+
+       if (tevent_req_is_unix_error(req, &vfs_aio_state->error)) {
+               return -1;
+       }
+
+       *vfs_aio_state = state->vfs_aio_state;
+       return state->nread;
+}
+
+static ssize_t fruit_pwrite_meta_stream(vfs_handle_struct *handle,
+                                       files_struct *fsp, const void *data,
+                                       size_t n, off_t offset)
+{
+       AfpInfo *ai = NULL;
+       int ret;
+
+       ai = afpinfo_unpack(talloc_tos(), data);
+       if (ai == NULL) {
+               return -1;
+       }
+
+       if (ai_empty_finderinfo(ai)) {
+               ret = SMB_VFS_NEXT_UNLINK(handle, fsp->fsp_name);
+               if (ret != 0 && errno != ENOENT && errno != ENOATTR) {
+                       DBG_ERR("Can't delete metadata for %s: %s\n",
+                               fsp_str_dbg(fsp), strerror(errno));
+                       TALLOC_FREE(ai);
+                       return -1;
                }
 
-               len = ad_read(ad, fsp->base_fsp->fsp_name->base_name);
-               if (len == -1) {
-                       rc = -1;
-                       goto exit;
+               return n;
+       }
+
+       return SMB_VFS_NEXT_PWRITE(handle, fsp, data, n, offset);
+}
+
+static ssize_t fruit_pwrite_meta_netatalk(vfs_handle_struct *handle,
+                                         files_struct *fsp, const void *data,
+                                         size_t n, off_t offset)
+{
+       struct adouble *ad = NULL;
+       AfpInfo *ai = NULL;
+       char *p = NULL;
+       int ret;
+
+       ai = afpinfo_unpack(talloc_tos(), data);
+       if (ai == NULL) {
+               return -1;
+       }
+
+       if (ai_empty_finderinfo(ai)) {
+               ret = SMB_VFS_REMOVEXATTR(handle->conn,
+                                         fsp->fsp_name,
+                                         AFPINFO_EA_NETATALK);
+
+               if (ret != 0 && errno != ENOENT && errno != ENOATTR) {
+                       DBG_ERR("Can't delete metadata for %s: %s\n",
+                               fsp_str_dbg(fsp), strerror(errno));
+                       return -1;
                }
 
-               memcpy(&ai->afpi_FinderInfo[0],
-                      ad_entry(ad, ADEID_FINDERI),
-                      ADEDLEN_FINDERI);
-               len = afpinfo_pack(ai, afpinfo_buf);
-               if (len != AFP_INFO_SIZE) {
-                       rc = -1;
-                       goto exit;
+               return n;
+       }
+
+       ad = ad_fget(talloc_tos(), handle, fsp, ADOUBLE_META);
+       if (ad == NULL) {
+               ad = ad_init(talloc_tos(), handle, ADOUBLE_META);
+               if (ad == NULL) {
+                       return -1;
                }
+       }
+       p = ad_get_entry(ad, ADEID_FINDERI);
+       if (p == NULL) {
+               DBG_ERR("No ADEID_FINDERI for [%s]\n", fsp_str_dbg(fsp));
+               TALLOC_FREE(ad);
+               return -1;
+       }
 
-               memcpy(data, afpinfo_buf + offset, to_return);
-               len = to_return;
-       } else {
-               len = SMB_VFS_NEXT_PREAD(
-                       handle, fsp, data, n,
-                       offset + ad_getentryoff(ad, ADEID_RFORK));
-               if (len == -1) {
-                       rc = -1;
-                       goto exit;
+       memcpy(p, &ai->afpi_FinderInfo[0], ADEDLEN_FINDERI);
+
+       ret = ad_fset(ad, fsp);
+       if (ret != 0) {
+               DBG_ERR("ad_pwrite [%s] failed\n", fsp_str_dbg(fsp));
+               TALLOC_FREE(ad);
+               return -1;
+       }
+
+       TALLOC_FREE(ad);
+       return n;
+}
+
+static ssize_t fruit_pwrite_meta(vfs_handle_struct *handle,
+                                files_struct *fsp, const void *data,
+                                size_t n, off_t offset)
+{
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+       ssize_t nwritten;
+
+       /*
+        * Writing an all 0 blob to the metadata stream
+        * results in the stream being removed on a macOS
+        * server. This ensures we behave the same and it
+        * verified by the "delete AFP_AfpInfo by writing all
+        * 0" test.
+        */
+       if (n != AFP_INFO_SIZE || offset != 0) {
+               DBG_ERR("unexpected offset=%jd or size=%jd\n",
+                       (intmax_t)offset, (intmax_t)n);
+               return -1;
+       }
+
+       switch (fio->config->meta) {
+       case FRUIT_META_STREAM:
+               nwritten = fruit_pwrite_meta_stream(handle, fsp, data,
+                                                   n, offset);
+               break;
+
+       case FRUIT_META_NETATALK:
+               nwritten = fruit_pwrite_meta_netatalk(handle, fsp, data,
+                                                     n, offset);
+               break;
+
+       default:
+               DBG_ERR("Unexpected meta config [%d]\n", fio->config->meta);
+               return -1;
+       }
+
+       return nwritten;
+}
+
+static ssize_t fruit_pwrite_rsrc_stream(vfs_handle_struct *handle,
+                                       files_struct *fsp, const void *data,
+                                       size_t n, off_t offset)
+{
+       return SMB_VFS_NEXT_PWRITE(handle, fsp, data, n, offset);
+}
+
+static ssize_t fruit_pwrite_rsrc_xattr(vfs_handle_struct *handle,
+                                      files_struct *fsp, const void *data,
+                                      size_t n, off_t offset)
+{
+       return SMB_VFS_NEXT_PWRITE(handle, fsp, data, n, offset);
+}
+
+static ssize_t fruit_pwrite_rsrc_adouble(vfs_handle_struct *handle,
+                                        files_struct *fsp, const void *data,
+                                        size_t n, off_t offset)
+{
+       struct adouble *ad = NULL;
+       ssize_t nwritten;
+       int ret;
+
+       ad = ad_fget(talloc_tos(), handle, fsp, ADOUBLE_RSRC);
+       if (ad == NULL) {
+               DBG_ERR("ad_get [%s] failed\n", fsp_str_dbg(fsp));
+               return -1;
+       }
+
+       nwritten = SMB_VFS_NEXT_PWRITE(handle, fsp, data, n,
+                                      offset + ad_getentryoff(ad, ADEID_RFORK));
+       if (nwritten != n) {
+               DBG_ERR("Short write on [%s] [%zd/%zd]\n",
+                       fsp_str_dbg(fsp), nwritten, n);
+               TALLOC_FREE(ad);
+               return -1;
+       }
+
+       if ((n + offset) > ad_getentrylen(ad, ADEID_RFORK)) {
+               ad_setentrylen(ad, ADEID_RFORK, n + offset);
+               ret = ad_fset(ad, fsp);
+               if (ret != 0) {
+                       DBG_ERR("ad_pwrite [%s] failed\n", fsp_str_dbg(fsp));
+                       TALLOC_FREE(ad);
+                       return -1;
                }
        }
-exit:
-       fsp->base_fsp->fsp_name->base_name = tmp_base_name;
-       TALLOC_FREE(name);
-       TALLOC_FREE(ai);
-       if (rc != 0) {
-               len = -1;
+
+       TALLOC_FREE(ad);
+       return n;
+}
+
+static ssize_t fruit_pwrite_rsrc(vfs_handle_struct *handle,
+                                files_struct *fsp, const void *data,
+                                size_t n, off_t offset)
+{
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+       ssize_t nwritten;
+
+       switch (fio->config->rsrc) {
+       case FRUIT_RSRC_STREAM:
+               nwritten = fruit_pwrite_rsrc_stream(handle, fsp, data, n, offset);
+               break;
+
+       case FRUIT_RSRC_ADFILE:
+               nwritten = fruit_pwrite_rsrc_adouble(handle, fsp, data, n, offset);
+               break;
+
+       case FRUIT_RSRC_XATTR:
+               nwritten = fruit_pwrite_rsrc_xattr(handle, fsp, data, n, offset);
+               break;
+
+       default:
+               DBG_ERR("Unexpected rsrc config [%d]\n", fio->config->rsrc);
+               return -1;
        }
-       DEBUG(10, ("fruit_pread: rc=%d, len=%zd\n", rc, len));
-       return len;
+
+       return nwritten;
 }
 
 static ssize_t fruit_pwrite(vfs_handle_struct *handle,
                            files_struct *fsp, const void *data,
                            size_t n, off_t offset)
 {
-       int rc = 0;
-       struct adouble *ad = (struct adouble *)VFS_FETCH_FSP_EXTENSION(
-               handle, fsp);
-       struct fruit_config_data *config = NULL;
-       AfpInfo *ai = NULL;
-       ssize_t len;
-       char *name = NULL;
-       char *tmp_base_name = NULL;
-       NTSTATUS status;
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+       ssize_t nwritten;
 
-       DEBUG(10, ("fruit_pwrite: offset=%d, size=%d\n", (int)offset, (int)n));
+       DBG_DEBUG("Path [%s] offset=%"PRIdMAX", size=%zd\n",
+                 fsp_str_dbg(fsp), (intmax_t)offset, n);
 
-       if (!fsp->base_fsp) {
+       if (fio == NULL) {
                return SMB_VFS_NEXT_PWRITE(handle, fsp, data, n, offset);
        }
 
-       SMB_VFS_HANDLE_GET_DATA(handle, config,
-                               struct fruit_config_data, return -1);
+       if (fio->type == ADOUBLE_META) {
+               nwritten = fruit_pwrite_meta(handle, fsp, data, n, offset);
+       } else {
+               nwritten = fruit_pwrite_rsrc(handle, fsp, data, n, offset);
+       }
 
-       tmp_base_name = fsp->base_fsp->fsp_name->base_name;
-       status = SMB_VFS_TRANSLATE_NAME(handle->conn,
-                                       fsp->base_fsp->fsp_name->base_name,
-                                       vfs_translate_to_unix,
-                                       talloc_tos(), &name);
-       if (NT_STATUS_EQUAL(status, NT_STATUS_NONE_MAPPED)) {
-               name = talloc_strdup(talloc_tos(), tmp_base_name);
-               if (name == NULL) {
-                       rc = -1;
-                       goto exit;
-               }
-       } else if (!NT_STATUS_IS_OK(status)) {
-               errno = map_errno_from_nt_status(status);
-               rc = -1;
-               goto exit;
+       DBG_DEBUG("Path [%s] nwritten=%zd\n", fsp_str_dbg(fsp), nwritten);
+       return nwritten;
+}
+
+struct fruit_pwrite_state {
+       ssize_t nwritten;
+       struct vfs_aio_state vfs_aio_state;
+};
+
+static void fruit_pwrite_done(struct tevent_req *subreq);
+
+static struct tevent_req *fruit_pwrite_send(
+       struct vfs_handle_struct *handle,
+       TALLOC_CTX *mem_ctx,
+       struct tevent_context *ev,
+       struct files_struct *fsp,
+       const void *data,
+       size_t n, off_t offset)
+{
+       struct tevent_req *req = NULL;
+       struct tevent_req *subreq = NULL;
+       struct fruit_pwrite_state *state = NULL;
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+
+       req = tevent_req_create(mem_ctx, &state,
+                               struct fruit_pwrite_state);
+       if (req == NULL) {
+               return NULL;
        }
-       fsp->base_fsp->fsp_name->base_name = name;
 
-       if (ad == NULL) {
-               len = SMB_VFS_NEXT_PWRITE(handle, fsp, data, n, offset);
-               if (len != n) {
-                       rc = -1;
-                       goto exit;
+       if (fruit_must_handle_aio_stream(fio)) {
+               state->nwritten = SMB_VFS_PWRITE(fsp, data, n, offset);
+               if (state->nwritten != n) {
+                       if (state->nwritten != -1) {
+                               errno = EIO;
+                       }
+                       tevent_req_error(req, errno);
+                       return tevent_req_post(req, ev);
                }
-               goto exit;
+               tevent_req_done(req);
+               return tevent_req_post(req, ev);
        }
 
-       if (!fruit_fsp_recheck(ad, fsp)) {
-               rc = -1;
-               goto exit;
+       subreq = SMB_VFS_NEXT_PWRITE_SEND(state, ev, handle, fsp,
+                                         data, n, offset);
+       if (tevent_req_nomem(req, subreq)) {
+               return tevent_req_post(req, ev);
        }
+       tevent_req_set_callback(subreq, fruit_pwrite_done, req);
+       return req;
+}
 
-       if (ad->ad_type == ADOUBLE_META) {
-               if (n != AFP_INFO_SIZE || offset != 0) {
-                       DEBUG(1, ("unexpected offset=%jd or size=%jd\n",
-                                 (intmax_t)offset, (intmax_t)n));
-                       rc = -1;
-                       goto exit;
-               }
-               ai = afpinfo_unpack(talloc_tos(), data);
-               if (ai == NULL) {
-                       rc = -1;
-                       goto exit;
-               }
-               memcpy(ad_entry(ad, ADEID_FINDERI),
-                      &ai->afpi_FinderInfo[0], ADEDLEN_FINDERI);
-               rc = ad_write(ad, name);
+static void fruit_pwrite_done(struct tevent_req *subreq)
+{
+       struct tevent_req *req = tevent_req_callback_data(
+               subreq, struct tevent_req);
+       struct fruit_pwrite_state *state = tevent_req_data(
+               req, struct fruit_pwrite_state);
+
+       state->nwritten = SMB_VFS_PWRITE_RECV(subreq, &state->vfs_aio_state);
+       TALLOC_FREE(subreq);
+
+       if (tevent_req_error(req, state->vfs_aio_state.error)) {
+               return;
+       }
+       tevent_req_done(req);
+}
+
+static ssize_t fruit_pwrite_recv(struct tevent_req *req,
+                                        struct vfs_aio_state *vfs_aio_state)
+{
+       struct fruit_pwrite_state *state = tevent_req_data(
+               req, struct fruit_pwrite_state);
+
+       if (tevent_req_is_unix_error(req, &vfs_aio_state->error)) {
+               return -1;
+       }
+
+       *vfs_aio_state = state->vfs_aio_state;
+       return state->nwritten;
+}
+
+/**
+ * Helper to stat/lstat the base file of an smb_fname.
+ */
+static int fruit_stat_base(vfs_handle_struct *handle,
+                          struct smb_filename *smb_fname,
+                          bool follow_links)
+{
+       char *tmp_stream_name;
+       int rc;
+
+       tmp_stream_name = smb_fname->stream_name;
+       smb_fname->stream_name = NULL;
+       if (follow_links) {
+               rc = SMB_VFS_NEXT_STAT(handle, smb_fname);
        } else {
-               len = SMB_VFS_NEXT_PWRITE(handle, fsp, data, n,
-                                   offset + ad_getentryoff(ad, ADEID_RFORK));
-               if (len != n) {
-                       rc = -1;
-                       goto exit;
-               }
+               rc = SMB_VFS_NEXT_LSTAT(handle, smb_fname);
+       }
+       smb_fname->stream_name = tmp_stream_name;
+       return rc;
+}
 
-               if (config->rsrc == FRUIT_RSRC_ADFILE) {
-                       rc = ad_read(ad, name);
-                       if (rc == -1) {
-                               goto exit;
-                       }
-                       rc = 0;
+static int fruit_stat_meta_stream(vfs_handle_struct *handle,
+                                 struct smb_filename *smb_fname,
+                                 bool follow_links)
+{
+       int ret;
 
-                       if ((len + offset) > ad_getentrylen(ad, ADEID_RFORK)) {
-                               ad_setentrylen(ad, ADEID_RFORK, len + offset);
-                               rc = ad_write(ad, name);
-                       }
-               }
+       if (follow_links) {
+               ret = SMB_VFS_NEXT_STAT(handle, smb_fname);
+       } else {
+               ret = SMB_VFS_NEXT_LSTAT(handle, smb_fname);
        }
 
-exit:
-       fsp->base_fsp->fsp_name->base_name = tmp_base_name;
-       TALLOC_FREE(name);
-       TALLOC_FREE(ai);
-       if (rc != 0) {
+       return ret;
+}
+
+static int fruit_stat_meta_netatalk(vfs_handle_struct *handle,
+                                   struct smb_filename *smb_fname,
+                                   bool follow_links)
+{
+       struct adouble *ad = NULL;
+
+       ad = ad_get(talloc_tos(), handle, smb_fname, ADOUBLE_META);
+       if (ad == NULL) {
+               DBG_INFO("fruit_stat_meta %s: %s\n",
+                        smb_fname_str_dbg(smb_fname), strerror(errno));
+               errno = ENOENT;
+               return -1;
+       }
+       TALLOC_FREE(ad);
+
+       /* Populate the stat struct with info from the base file. */
+       if (fruit_stat_base(handle, smb_fname, follow_links) == -1) {
+               return -1;
+       }
+       smb_fname->st.st_ex_size = AFP_INFO_SIZE;
+       smb_fname->st.st_ex_ino = fruit_inode(&smb_fname->st,
+                                             smb_fname->stream_name);
+       return 0;
+}
+
+static int fruit_stat_meta(vfs_handle_struct *handle,
+                          struct smb_filename *smb_fname,
+                          bool follow_links)
+{
+       struct fruit_config_data *config = NULL;
+       int ret;
+
+       SMB_VFS_HANDLE_GET_DATA(handle, config,
+                               struct fruit_config_data, return -1);
+
+       switch (config->meta) {
+       case FRUIT_META_STREAM:
+               ret = fruit_stat_meta_stream(handle, smb_fname, follow_links);
+               break;
+
+       case FRUIT_META_NETATALK:
+               ret = fruit_stat_meta_netatalk(handle, smb_fname, follow_links);
+               break;
+
+       default:
+               DBG_ERR("Unexpected meta config [%d]\n", config->meta);
+               return -1;
+       }
+
+       return ret;
+}
+
+static int fruit_stat_rsrc_netatalk(vfs_handle_struct *handle,
+                                   struct smb_filename *smb_fname,
+                                   bool follow_links)
+{
+       struct adouble *ad = NULL;
+       int ret;
+
+       ad = ad_get(talloc_tos(), handle, smb_fname, ADOUBLE_RSRC);
+       if (ad == NULL) {
+               errno = ENOENT;
+               return -1;
+       }
+
+       /* Populate the stat struct with info from the base file. */
+       ret = fruit_stat_base(handle, smb_fname, follow_links);
+       if (ret != 0) {
+               TALLOC_FREE(ad);
                return -1;
        }
-       return n;
+
+       smb_fname->st.st_ex_size = ad_getentrylen(ad, ADEID_RFORK);
+       smb_fname->st.st_ex_ino = fruit_inode(&smb_fname->st,
+                                             smb_fname->stream_name);
+       TALLOC_FREE(ad);
+       return 0;
 }
 
-/**
- * Helper to stat/lstat the base file of an smb_fname.
- */
-static int fruit_stat_base(vfs_handle_struct *handle,
-                          struct smb_filename *smb_fname,
-                          bool follow_links)
+static int fruit_stat_rsrc_stream(vfs_handle_struct *handle,
+                                 struct smb_filename *smb_fname,
+                                 bool follow_links)
 {
-       char *tmp_stream_name;
-       int rc;
+       int ret;
 
-       tmp_stream_name = smb_fname->stream_name;
-       smb_fname->stream_name = NULL;
        if (follow_links) {
-               rc = SMB_VFS_NEXT_STAT(handle, smb_fname);
+               ret = SMB_VFS_NEXT_STAT(handle, smb_fname);
        } else {
-               rc = SMB_VFS_NEXT_LSTAT(handle, smb_fname);
+               ret = SMB_VFS_NEXT_LSTAT(handle, smb_fname);
        }
-       smb_fname->stream_name = tmp_stream_name;
-       return rc;
+
+       return ret;
 }
 
-static int fruit_stat_meta(vfs_handle_struct *handle,
-                          struct smb_filename *smb_fname,
-                          bool follow_links)
+static int fruit_stat_rsrc_xattr(vfs_handle_struct *handle,
+                                struct smb_filename *smb_fname,
+                                bool follow_links)
 {
+#ifdef HAVE_ATTROPEN
+       int ret;
+       int fd = -1;
+
        /* Populate the stat struct with info from the base file. */
-       if (fruit_stat_base(handle, smb_fname, follow_links) == -1) {
+       ret = fruit_stat_base(handle, smb_fname, follow_links);
+       if (ret != 0) {
                return -1;
        }
-       smb_fname->st.st_ex_size = AFP_INFO_SIZE;
+
+       fd = attropen(smb_fname->base_name,
+                     AFPRESOURCE_EA_NETATALK,
+                     O_RDONLY);
+       if (fd == -1) {
+               return 0;
+       }
+
+       ret = sys_fstat(fd, &smb_fname->st, false);
+       if (ret != 0) {
+               close(fd);
+               DBG_ERR("fstat [%s:%s] failed\n", smb_fname->base_name,
+                       AFPRESOURCE_EA_NETATALK);
+               return -1;
+       }
+       close(fd);
+       fd = -1;
+
        smb_fname->st.st_ex_ino = fruit_inode(&smb_fname->st,
                                              smb_fname->stream_name);
-       return 0;
+
+       return ret;
+
+#else
+       errno = ENOSYS;
+       return -1;
+#endif
 }
 
 static int fruit_stat_rsrc(vfs_handle_struct *handle,
                           struct smb_filename *smb_fname,
                           bool follow_links)
-
 {
-       struct adouble *ad = NULL;
+       struct fruit_config_data *config = NULL;
+       int ret;
 
-       DEBUG(10, ("fruit_stat_rsrc called for %s\n",
-                  smb_fname_str_dbg(smb_fname)));
+       DBG_DEBUG("Path [%s]\n", smb_fname_str_dbg(smb_fname));
 
-       ad = ad_get(talloc_tos(), handle, smb_fname->base_name, ADOUBLE_RSRC);
-       if (ad == NULL) {
-               errno = ENOENT;
-               return -1;
-       }
+       SMB_VFS_HANDLE_GET_DATA(handle, config,
+                               struct fruit_config_data, return -1);
 
-       /* Populate the stat struct with info from the base file. */
-       if (fruit_stat_base(handle, smb_fname, follow_links) == -1) {
-               TALLOC_FREE(ad);
+       switch (config->rsrc) {
+       case FRUIT_RSRC_STREAM:
+               ret = fruit_stat_rsrc_stream(handle, smb_fname, follow_links);
+               break;
+
+       case FRUIT_RSRC_XATTR:
+               ret = fruit_stat_rsrc_xattr(handle, smb_fname, follow_links);
+               break;
+
+       case FRUIT_RSRC_ADFILE:
+               ret = fruit_stat_rsrc_netatalk(handle, smb_fname, follow_links);
+               break;
+
+       default:
+               DBG_ERR("Unexpected rsrc config [%d]\n", config->rsrc);
                return -1;
        }
 
-       smb_fname->st.st_ex_size = ad_getentrylen(ad, ADEID_RFORK);
-       smb_fname->st.st_ex_ino = fruit_inode(&smb_fname->st,
-                                             smb_fname->stream_name);
-       TALLOC_FREE(ad);
-       return 0;
+       return ret;
 }
 
 static int fruit_stat(vfs_handle_struct *handle,
@@ -2990,206 +4412,475 @@ static int fruit_lstat(vfs_handle_struct *handle,
        return rc;
 }
 
+static int fruit_fstat_meta_stream(vfs_handle_struct *handle,
+                                  files_struct *fsp,
+                                  SMB_STRUCT_STAT *sbuf)
+{
+       return SMB_VFS_NEXT_FSTAT(handle, fsp, sbuf);
+}
+
+static int fruit_fstat_meta_netatalk(vfs_handle_struct *handle,
+                                    files_struct *fsp,
+                                    SMB_STRUCT_STAT *sbuf)
+{
+       int ret;
+
+       ret = fruit_stat_base(handle, fsp->base_fsp->fsp_name, false);
+       if (ret != 0) {
+               return -1;
+       }
+
+       *sbuf = fsp->base_fsp->fsp_name->st;
+       sbuf->st_ex_size = AFP_INFO_SIZE;
+       sbuf->st_ex_ino = fruit_inode(sbuf, fsp->fsp_name->stream_name);
+
+       return 0;
+}
+
 static int fruit_fstat_meta(vfs_handle_struct *handle,
                            files_struct *fsp,
-                           SMB_STRUCT_STAT *sbuf)
+                           SMB_STRUCT_STAT *sbuf,
+                           struct fio *fio)
+{
+       int ret;
+
+       DBG_DEBUG("Path [%s]\n", fsp_str_dbg(fsp));
+
+       switch (fio->config->meta) {
+       case FRUIT_META_STREAM:
+               ret = fruit_fstat_meta_stream(handle, fsp, sbuf);
+               break;
+
+       case FRUIT_META_NETATALK:
+               ret = fruit_fstat_meta_netatalk(handle, fsp, sbuf);
+               break;
+
+       default:
+               DBG_ERR("Unexpected meta config [%d]\n", fio->config->meta);
+               return -1;
+       }
+
+       DBG_DEBUG("Path [%s] ret [%d]\n", fsp_str_dbg(fsp), ret);
+       return ret;
+}
+
+static int fruit_fstat_rsrc_xattr(vfs_handle_struct *handle,
+                                 files_struct *fsp,
+                                 SMB_STRUCT_STAT *sbuf)
+{
+       return SMB_VFS_NEXT_FSTAT(handle, fsp, sbuf);
+}
+
+static int fruit_fstat_rsrc_stream(vfs_handle_struct *handle,
+                                  files_struct *fsp,
+                                  SMB_STRUCT_STAT *sbuf)
 {
-       DEBUG(10, ("fruit_fstat_meta called for %s\n",
-                  smb_fname_str_dbg(fsp->base_fsp->fsp_name)));
+       return SMB_VFS_NEXT_FSTAT(handle, fsp, sbuf);
+}
+
+static int fruit_fstat_rsrc_adouble(vfs_handle_struct *handle,
+                                   files_struct *fsp,
+                                   SMB_STRUCT_STAT *sbuf)
+{
+       struct adouble *ad = NULL;
+       int ret;
 
        /* Populate the stat struct with info from the base file. */
-       if (fruit_stat_base(handle, fsp->base_fsp->fsp_name, false) == -1) {
+       ret = fruit_stat_base(handle, fsp->base_fsp->fsp_name, false);
+       if (ret == -1) {
+               return -1;
+       }
+
+       ad = ad_get(talloc_tos(), handle,
+                   fsp->base_fsp->fsp_name,
+                   ADOUBLE_RSRC);
+       if (ad == NULL) {
+               DBG_ERR("ad_get [%s] failed [%s]\n",
+                       fsp_str_dbg(fsp), strerror(errno));
                return -1;
        }
+
        *sbuf = fsp->base_fsp->fsp_name->st;
-       sbuf->st_ex_size = AFP_INFO_SIZE;
+       sbuf->st_ex_size = ad_getentrylen(ad, ADEID_RFORK);
        sbuf->st_ex_ino = fruit_inode(sbuf, fsp->fsp_name->stream_name);
 
-       return 0;
+       TALLOC_FREE(ad);
+       return 0;
+}
+
+static int fruit_fstat_rsrc(vfs_handle_struct *handle, files_struct *fsp,
+                           SMB_STRUCT_STAT *sbuf, struct fio *fio)
+{
+       int ret;
+
+       switch (fio->config->rsrc) {
+       case FRUIT_RSRC_STREAM:
+               ret = fruit_fstat_rsrc_stream(handle, fsp, sbuf);
+               break;
+
+       case FRUIT_RSRC_ADFILE:
+               ret = fruit_fstat_rsrc_adouble(handle, fsp, sbuf);
+               break;
+
+       case FRUIT_RSRC_XATTR:
+               ret = fruit_fstat_rsrc_xattr(handle, fsp, sbuf);
+               break;
+
+       default:
+               DBG_ERR("Unexpected rsrc config [%d]\n", fio->config->rsrc);
+               return -1;
+       }
+
+       return ret;
+}
+
+static int fruit_fstat(vfs_handle_struct *handle, files_struct *fsp,
+                      SMB_STRUCT_STAT *sbuf)
+{
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+       int rc;
+
+       if (fio == NULL) {
+               return SMB_VFS_NEXT_FSTAT(handle, fsp, sbuf);
+       }
+
+       DBG_DEBUG("Path [%s]\n", fsp_str_dbg(fsp));
+
+       if (fio->type == ADOUBLE_META) {
+               rc = fruit_fstat_meta(handle, fsp, sbuf, fio);
+       } else {
+               rc = fruit_fstat_rsrc(handle, fsp, sbuf, fio);
+       }
+
+       if (rc == 0) {
+               sbuf->st_ex_mode &= ~S_IFMT;
+               sbuf->st_ex_mode |= S_IFREG;
+               sbuf->st_ex_blocks = sbuf->st_ex_size / STAT_ST_BLOCKSIZE + 1;
+       }
+
+       DBG_DEBUG("Path [%s] rc [%d] size [%"PRIdMAX"]\n",
+                 fsp_str_dbg(fsp), rc, (intmax_t)sbuf->st_ex_size);
+       return rc;
+}
+
+static NTSTATUS fruit_streaminfo_meta_stream(
+       vfs_handle_struct *handle,
+       struct files_struct *fsp,
+       const struct smb_filename *smb_fname,
+       TALLOC_CTX *mem_ctx,
+       unsigned int *pnum_streams,
+       struct stream_struct **pstreams)
+{
+       struct stream_struct *stream = *pstreams;
+       unsigned int num_streams = *pnum_streams;
+       struct smb_filename *sname = NULL;
+       int i;
+       int ret;
+       bool ok;
+
+       for (i = 0; i < num_streams; i++) {
+               if (strequal_m(stream[i].name, AFPINFO_STREAM)) {
+                       break;
+               }
+       }
+
+       if (i == num_streams) {
+               return NT_STATUS_OK;
+       }
+
+       if (stream[i].size == AFP_INFO_SIZE) {
+               return NT_STATUS_OK;
+       }
+
+       DBG_ERR("Removing invalid AFPINFO_STREAM size [%"PRIdMAX"] "
+               "from [%s]\n", (intmax_t)stream[i].size,
+               smb_fname_str_dbg(smb_fname));
+
+       ok = del_fruit_stream(mem_ctx, pnum_streams, pstreams, AFPINFO_STREAM);
+       if (!ok) {
+               return NT_STATUS_INTERNAL_ERROR;
+       }
+
+       sname = synthetic_smb_fname(talloc_tos(),
+                                   smb_fname->base_name,
+                                   AFPINFO_STREAM_NAME,
+                                   NULL, 0);
+       if (sname == NULL) {
+               return NT_STATUS_NO_MEMORY;
+       }
+
+       ret = SMB_VFS_NEXT_UNLINK(handle, sname);
+       TALLOC_FREE(sname);
+       if (ret != 0) {
+               DBG_ERR("Removing [%s] failed\n", smb_fname_str_dbg(sname));
+               return map_nt_error_from_unix(errno);
+       }
+
+       return NT_STATUS_OK;
+}
+
+static NTSTATUS fruit_streaminfo_meta_netatalk(
+       vfs_handle_struct *handle,
+       struct files_struct *fsp,
+       const struct smb_filename *smb_fname,
+       TALLOC_CTX *mem_ctx,
+       unsigned int *pnum_streams,
+       struct stream_struct **pstreams)
+{
+       struct stream_struct *stream = *pstreams;
+       unsigned int num_streams = *pnum_streams;
+       struct adouble *ad = NULL;
+       bool is_fi_empty;
+       int i;
+       bool ok;
+
+       /* Remove the Netatalk xattr from the list */
+       ok = del_fruit_stream(mem_ctx, pnum_streams, pstreams,
+                             ":" NETATALK_META_XATTR ":$DATA");
+       if (!ok) {
+               return NT_STATUS_NO_MEMORY;
+       }
+
+       /*
+        * Check if there's a AFPINFO_STREAM from the VFS streams
+        * backend and if yes, remove it from the list
+        */
+       for (i = 0; i < num_streams; i++) {
+               if (strequal_m(stream[i].name, AFPINFO_STREAM)) {
+                       break;
+               }
+       }
+
+       if (i < num_streams) {
+               DBG_WARNING("Unexpected AFPINFO_STREAM on [%s]\n",
+                           smb_fname_str_dbg(smb_fname));
+
+               ok = del_fruit_stream(mem_ctx, pnum_streams, pstreams,
+                                     AFPINFO_STREAM);
+               if (!ok) {
+                       return NT_STATUS_INTERNAL_ERROR;
+               }
+       }
+
+       ad = ad_get(talloc_tos(), handle, smb_fname, ADOUBLE_META);
+       if (ad == NULL) {
+               return NT_STATUS_OK;
+       }
+
+       is_fi_empty = ad_empty_finderinfo(ad);
+       TALLOC_FREE(ad);
+
+       if (is_fi_empty) {
+               return NT_STATUS_OK;
+       }
+
+       ok = add_fruit_stream(mem_ctx, pnum_streams, pstreams,
+                             AFPINFO_STREAM_NAME, AFP_INFO_SIZE,
+                             smb_roundup(handle->conn, AFP_INFO_SIZE));
+       if (!ok) {
+               return NT_STATUS_NO_MEMORY;
+       }
+
+       return NT_STATUS_OK;
+}
+
+static NTSTATUS fruit_streaminfo_meta(vfs_handle_struct *handle,
+                                     struct files_struct *fsp,
+                                     const struct smb_filename *smb_fname,
+                                     TALLOC_CTX *mem_ctx,
+                                     unsigned int *pnum_streams,
+                                     struct stream_struct **pstreams)
+{
+       struct fruit_config_data *config = NULL;
+       NTSTATUS status;
+
+       SMB_VFS_HANDLE_GET_DATA(handle, config, struct fruit_config_data,
+                               return NT_STATUS_INTERNAL_ERROR);
+
+       switch (config->meta) {
+       case FRUIT_META_NETATALK:
+               status = fruit_streaminfo_meta_netatalk(handle, fsp, smb_fname,
+                                                       mem_ctx, pnum_streams,
+                                                       pstreams);
+               break;
+
+       case FRUIT_META_STREAM:
+               status = fruit_streaminfo_meta_stream(handle, fsp, smb_fname,
+                                                     mem_ctx, pnum_streams,
+                                                     pstreams);
+               break;
+
+       default:
+               return NT_STATUS_INTERNAL_ERROR;
+       }
+
+       return status;
+}
+
+static NTSTATUS fruit_streaminfo_rsrc_stream(
+       vfs_handle_struct *handle,
+       struct files_struct *fsp,
+       const struct smb_filename *smb_fname,
+       TALLOC_CTX *mem_ctx,
+       unsigned int *pnum_streams,
+       struct stream_struct **pstreams)
+{
+       bool ok;
+
+       ok = filter_empty_rsrc_stream(pnum_streams, pstreams);
+       if (!ok) {
+               DBG_ERR("Filtering resource stream failed\n");
+               return NT_STATUS_INTERNAL_ERROR;
+       }
+       return NT_STATUS_OK;
+}
+
+static NTSTATUS fruit_streaminfo_rsrc_xattr(
+       vfs_handle_struct *handle,
+       struct files_struct *fsp,
+       const struct smb_filename *smb_fname,
+       TALLOC_CTX *mem_ctx,
+       unsigned int *pnum_streams,
+       struct stream_struct **pstreams)
+{
+       bool ok;
+
+       ok = filter_empty_rsrc_stream(pnum_streams, pstreams);
+       if (!ok) {
+               DBG_ERR("Filtering resource stream failed\n");
+               return NT_STATUS_INTERNAL_ERROR;
+       }
+       return NT_STATUS_OK;
 }
 
-static int fruit_fstat_rsrc(vfs_handle_struct *handle, files_struct *fsp,
-                           SMB_STRUCT_STAT *sbuf)
+static NTSTATUS fruit_streaminfo_rsrc_adouble(
+       vfs_handle_struct *handle,
+       struct files_struct *fsp,
+       const struct smb_filename *smb_fname,
+       TALLOC_CTX *mem_ctx,
+       unsigned int *pnum_streams,
+       struct stream_struct **pstreams)
 {
-       struct fruit_config_data *config;
-       struct adouble *ad = (struct adouble *)VFS_FETCH_FSP_EXTENSION(
-               handle, fsp);
+       struct stream_struct *stream = *pstreams;
+       unsigned int num_streams = *pnum_streams;
+       struct adouble *ad = NULL;
+       bool ok;
+       size_t rlen;
+       int i;
 
-       DEBUG(10, ("fruit_fstat_rsrc called for %s\n",
-                  smb_fname_str_dbg(fsp->base_fsp->fsp_name)));
+       /*
+        * Check if there's a AFPRESOURCE_STREAM from the VFS streams backend
+        * and if yes, remove it from the list
+        */
+       for (i = 0; i < num_streams; i++) {
+               if (strequal_m(stream[i].name, AFPRESOURCE_STREAM)) {
+                       break;
+               }
+       }
 
-       SMB_VFS_HANDLE_GET_DATA(handle, config,
-                               struct fruit_config_data, return -1);
+       if (i < num_streams) {
+               DBG_WARNING("Unexpected AFPRESOURCE_STREAM on [%s]\n",
+                           smb_fname_str_dbg(smb_fname));
 
-       if (config->rsrc == FRUIT_RSRC_STREAM) {
-               return SMB_VFS_NEXT_FSTAT(handle, fsp, sbuf);
+               ok = del_fruit_stream(mem_ctx, pnum_streams, pstreams,
+                                     AFPRESOURCE_STREAM);
+               if (!ok) {
+                       return NT_STATUS_INTERNAL_ERROR;
+               }
        }
 
-       /* Populate the stat struct with info from the base file. */
-       if (fruit_stat_base(handle, fsp->base_fsp->fsp_name, false) == -1) {
-               return -1;
+       ad = ad_get(talloc_tos(), handle, smb_fname, ADOUBLE_RSRC);
+       if (ad == NULL) {
+               return NT_STATUS_OK;
        }
-       *sbuf = fsp->base_fsp->fsp_name->st;
-       sbuf->st_ex_size = ad_getentrylen(ad, ADEID_RFORK);
-       sbuf->st_ex_ino = fruit_inode(sbuf, fsp->fsp_name->stream_name);
 
-       DEBUG(10, ("fruit_fstat_rsrc %s, size: %zd\n",
-                  smb_fname_str_dbg(fsp->fsp_name),
-                  (ssize_t)sbuf->st_ex_size));
+       rlen = ad_getentrylen(ad, ADEID_RFORK);
+       TALLOC_FREE(ad);
 
-       return 0;
+       if (rlen == 0) {
+               return NT_STATUS_OK;
+       }
+
+       ok = add_fruit_stream(mem_ctx, pnum_streams, pstreams,
+                             AFPRESOURCE_STREAM_NAME, rlen,
+                             smb_roundup(handle->conn, rlen));
+       if (!ok) {
+               return NT_STATUS_NO_MEMORY;
+       }
+
+       return NT_STATUS_OK;
 }
 
-static int fruit_fstat(vfs_handle_struct *handle, files_struct *fsp,
-                      SMB_STRUCT_STAT *sbuf)
+static NTSTATUS fruit_streaminfo_rsrc(vfs_handle_struct *handle,
+                                     struct files_struct *fsp,
+                                     const struct smb_filename *smb_fname,
+                                     TALLOC_CTX *mem_ctx,
+                                     unsigned int *pnum_streams,
+                                     struct stream_struct **pstreams)
 {
-       int rc;
-       char *name = NULL;
-       char *tmp_base_name = NULL;
+       struct fruit_config_data *config = NULL;
        NTSTATUS status;
-       struct adouble *ad = (struct adouble *)
-               VFS_FETCH_FSP_EXTENSION(handle, fsp);
-
-       DEBUG(10, ("fruit_fstat called for %s\n",
-                  smb_fname_str_dbg(fsp->fsp_name)));
-
-       if (fsp->base_fsp) {
-               tmp_base_name = fsp->base_fsp->fsp_name->base_name;
-               /* fsp_name is not converted with vfs_catia */
-               status = SMB_VFS_TRANSLATE_NAME(
-                       handle->conn,
-                       fsp->base_fsp->fsp_name->base_name,
-                       vfs_translate_to_unix,
-                       talloc_tos(), &name);
-
-               if (NT_STATUS_EQUAL(status, NT_STATUS_NONE_MAPPED)) {
-                       name = talloc_strdup(talloc_tos(), tmp_base_name);
-                       if (name == NULL) {
-                               rc = -1;
-                               goto exit;
-                       }
-               } else if (!NT_STATUS_IS_OK(status)) {
-                       errno = map_errno_from_nt_status(status);
-                       rc = -1;
-                       goto exit;
-               }
-               fsp->base_fsp->fsp_name->base_name = name;
-       }
 
-       if (ad == NULL || fsp->base_fsp == NULL) {
-               rc = SMB_VFS_NEXT_FSTAT(handle, fsp, sbuf);
-               goto exit;
-       }
+       SMB_VFS_HANDLE_GET_DATA(handle, config, struct fruit_config_data,
+                               return NT_STATUS_INTERNAL_ERROR);
 
-       if (!fruit_fsp_recheck(ad, fsp)) {
-               rc = -1;
-               goto exit;
-       }
+       switch (config->rsrc) {
+       case FRUIT_RSRC_STREAM:
+               status = fruit_streaminfo_rsrc_stream(handle, fsp, smb_fname,
+                                                     mem_ctx, pnum_streams,
+                                                     pstreams);
+               break;
 
-       switch (ad->ad_type) {
-       case ADOUBLE_META:
-               rc = fruit_fstat_meta(handle, fsp, sbuf);
+       case FRUIT_RSRC_XATTR:
+               status = fruit_streaminfo_rsrc_xattr(handle, fsp, smb_fname,
+                                                    mem_ctx, pnum_streams,
+                                                    pstreams);
                break;
-       case ADOUBLE_RSRC:
-               rc = fruit_fstat_rsrc(handle, fsp, sbuf);
+
+       case FRUIT_RSRC_ADFILE:
+               status = fruit_streaminfo_rsrc_adouble(handle, fsp, smb_fname,
+                                                      mem_ctx, pnum_streams,
+                                                      pstreams);
                break;
-       default:
-               DEBUG(10, ("fruit_fstat %s: bad type\n",
-                          smb_fname_str_dbg(fsp->fsp_name)));
-               rc = -1;
-               goto exit;
-       }
 
-       if (rc == 0) {
-               sbuf->st_ex_mode &= ~S_IFMT;
-               sbuf->st_ex_mode |= S_IFREG;
-               sbuf->st_ex_blocks = sbuf->st_ex_size / STAT_ST_BLOCKSIZE + 1;
+       default:
+               return NT_STATUS_INTERNAL_ERROR;
        }
 
-exit:
-       DEBUG(10, ("fruit_fstat %s, size: %zd\n",
-                  smb_fname_str_dbg(fsp->fsp_name),
-                  (ssize_t)sbuf->st_ex_size));
-       if (tmp_base_name) {
-               fsp->base_fsp->fsp_name->base_name = tmp_base_name;
-       }
-       TALLOC_FREE(name);
-       return rc;
+       return status;
 }
 
 static NTSTATUS fruit_streaminfo(vfs_handle_struct *handle,
                                 struct files_struct *fsp,
-                                const char *fname,
+                                const struct smb_filename *smb_fname,
                                 TALLOC_CTX *mem_ctx,
                                 unsigned int *pnum_streams,
                                 struct stream_struct **pstreams)
 {
        struct fruit_config_data *config = NULL;
-       struct smb_filename *smb_fname = NULL;
-       struct adouble *ad = NULL;
        NTSTATUS status;
 
        SMB_VFS_HANDLE_GET_DATA(handle, config, struct fruit_config_data,
                                return NT_STATUS_UNSUCCESSFUL);
-       DEBUG(10, ("fruit_streaminfo called for %s\n", fname));
-
-       smb_fname = synthetic_smb_fname(talloc_tos(), fname, NULL, NULL);
-       if (smb_fname == NULL) {
-               return NT_STATUS_NO_MEMORY;
-       }
 
-       if (config->meta == FRUIT_META_NETATALK) {
-               ad = ad_get(talloc_tos(), handle,
-                           smb_fname->base_name, ADOUBLE_META);
-               if (ad && !empty_finderinfo(ad)) {
-                       if (!add_fruit_stream(
-                                   mem_ctx, pnum_streams, pstreams,
-                                   AFPINFO_STREAM_NAME, AFP_INFO_SIZE,
-                                   smb_roundup(handle->conn,
-                                               AFP_INFO_SIZE))) {
-                               TALLOC_FREE(ad);
-                               TALLOC_FREE(smb_fname);
-                               return NT_STATUS_NO_MEMORY;
-                       }
-               }
-               TALLOC_FREE(ad);
-       }
+       DBG_DEBUG("Path [%s]\n", smb_fname_str_dbg(smb_fname));
 
-       if (config->rsrc != FRUIT_RSRC_STREAM) {
-               ad = ad_get(talloc_tos(), handle, smb_fname->base_name,
-                           ADOUBLE_RSRC);
-               if (ad && (ad_getentrylen(ad, ADEID_RFORK) > 0)) {
-                       if (!add_fruit_stream(
-                                   mem_ctx, pnum_streams, pstreams,
-                                   AFPRESOURCE_STREAM_NAME,
-                                   ad_getentrylen(ad, ADEID_RFORK),
-                                   smb_roundup(handle->conn,
-                                               ad_getentrylen(
-                                                       ad, ADEID_RFORK)))) {
-                               TALLOC_FREE(ad);
-                               TALLOC_FREE(smb_fname);
-                               return NT_STATUS_NO_MEMORY;
-                       }
-               }
-               TALLOC_FREE(ad);
+       status = SMB_VFS_NEXT_STREAMINFO(handle, fsp, smb_fname, mem_ctx,
+                                        pnum_streams, pstreams);
+       if (!NT_STATUS_IS_OK(status)) {
+               return status;
        }
 
-       TALLOC_FREE(smb_fname);
-
-       status = SMB_VFS_NEXT_STREAMINFO(handle, fsp, fname, mem_ctx,
-                                        pnum_streams, pstreams);
+       status = fruit_streaminfo_meta(handle, fsp, smb_fname,
+                                      mem_ctx, pnum_streams, pstreams);
        if (!NT_STATUS_IS_OK(status)) {
                return status;
        }
 
-       if (config->meta == FRUIT_META_NETATALK) {
-               /* Remove the Netatalk xattr from the list */
-               if (!del_fruit_stream(mem_ctx, pnum_streams, pstreams,
-                                     ":" NETATALK_META_XATTR ":$DATA")) {
-                               TALLOC_FREE(ad);
-                               TALLOC_FREE(smb_fname);
-                               return NT_STATUS_NO_MEMORY;
-               }
+       status = fruit_streaminfo_rsrc(handle, fsp, smb_fname,
+                                      mem_ctx, pnum_streams, pstreams);
+       if (!NT_STATUS_IS_OK(status)) {
+               return status;
        }
 
        return NT_STATUS_OK;
@@ -3201,15 +4892,21 @@ static int fruit_ntimes(vfs_handle_struct *handle,
 {
        int rc = 0;
        struct adouble *ad = NULL;
+       struct fruit_config_data *config = NULL;
 
-       if (null_timespec(ft->create_time)) {
-               goto exit;
+       SMB_VFS_HANDLE_GET_DATA(handle, config, struct fruit_config_data,
+                               return -1);
+
+       if ((config->meta != FRUIT_META_NETATALK) ||
+           null_timespec(ft->create_time))
+       {
+               return SMB_VFS_NEXT_NTIMES(handle, smb_fname, ft);
        }
 
        DEBUG(10,("set btime for %s to %s\n", smb_fname_str_dbg(smb_fname),
                 time_to_asc(convert_timespec_to_time_t(ft->create_time))));
 
-       ad = ad_get(talloc_tos(), handle, smb_fname->base_name, ADOUBLE_META);
+       ad = ad_get(talloc_tos(), handle, smb_fname, ADOUBLE_META);
        if (ad == NULL) {
                goto exit;
        }
@@ -3217,7 +4914,7 @@ static int fruit_ntimes(vfs_handle_struct *handle,
        ad_setdate(ad, AD_DATE_CREATE | AD_DATE_UNIX,
                   convert_time_t_to_uint32_t(ft->create_time.tv_sec));
 
-       rc = ad_write(ad, smb_fname->base_name);
+       rc = ad_set(ad, smb_fname);
 
 exit:
 
@@ -3235,111 +4932,148 @@ static int fruit_fallocate(struct vfs_handle_struct *handle,
                           off_t offset,
                           off_t len)
 {
-        struct adouble *ad =
-               (struct adouble *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
 
-       if (ad == NULL) {
+       if (fio == NULL) {
                return SMB_VFS_NEXT_FALLOCATE(handle, fsp, mode, offset, len);
        }
 
-       if (!fruit_fsp_recheck(ad, fsp)) {
-               return -1;
-       }
-
        /* Let the pwrite code path handle it. */
        errno = ENOSYS;
        return -1;
 }
 
-static int fruit_ftruncate_meta(struct vfs_handle_struct *handle,
-                               struct files_struct *fsp,
-                               off_t offset,
-                               struct adouble *ad)
+static int fruit_ftruncate_rsrc_xattr(struct vfs_handle_struct *handle,
+                                     struct files_struct *fsp,
+                                     off_t offset)
 {
-       /*
-        * As this request hasn't been seen in the wild,
-        * the only sensible use I can imagine is the client
-        * truncating the stream to 0 bytes size.
-        * We simply remove the metadata on such a request.
-        */
-       if (offset != 0) {
-               DBG_WARNING("ftruncate %s to %jd",
-                           fsp_str_dbg(fsp), (intmax_t)offset);
-               return -1;
+       if (offset == 0) {
+               return SMB_VFS_FREMOVEXATTR(fsp, AFPRESOURCE_EA_NETATALK);
        }
 
-       return SMB_VFS_FREMOVEXATTR(fsp, AFPRESOURCE_EA_NETATALK);
+#ifdef HAVE_ATTROPEN
+       return SMB_VFS_NEXT_FTRUNCATE(handle, fsp, offset);
+#endif
+       return 0;
 }
 
-static int fruit_ftruncate_rsrc(struct vfs_handle_struct *handle,
-                               struct files_struct *fsp,
-                               off_t offset,
-                               struct adouble *ad)
+static int fruit_ftruncate_rsrc_adouble(struct vfs_handle_struct *handle,
+                                       struct files_struct *fsp,
+                                       off_t offset)
 {
        int rc;
-       struct fruit_config_data *config;
-
-       SMB_VFS_HANDLE_GET_DATA(handle, config,
-                               struct fruit_config_data, return -1);
+       struct adouble *ad = NULL;
+       off_t ad_off;
 
-       if (config->rsrc == FRUIT_RSRC_XATTR && offset == 0) {
-               return SMB_VFS_FREMOVEXATTR(fsp,
-                                           AFPRESOURCE_EA_NETATALK);
+       ad = ad_fget(talloc_tos(), handle, fsp, ADOUBLE_RSRC);
+       if (ad == NULL) {
+               DBG_DEBUG("ad_get [%s] failed [%s]\n",
+                         fsp_str_dbg(fsp), strerror(errno));
+               return -1;
        }
 
-       rc = SMB_VFS_NEXT_FTRUNCATE(
-               handle, fsp,
-               offset + ad_getentryoff(ad, ADEID_RFORK));
+       ad_off = ad_getentryoff(ad, ADEID_RFORK);
+
+       rc = SMB_VFS_NEXT_FTRUNCATE(handle, fsp, offset + ad_off);
        if (rc != 0) {
+               TALLOC_FREE(ad);
                return -1;
        }
 
-       if (config->rsrc == FRUIT_RSRC_ADFILE) {
-               ad_setentrylen(ad, ADEID_RFORK, offset);
-               rc = ad_write(ad, NULL);
-               if (rc != 0) {
-                       return -1;
-               }
-               DEBUG(10, ("fruit_ftruncate_rsrc file %s offset %jd\n",
-                          fsp_str_dbg(fsp), (intmax_t)offset));
+       ad_setentrylen(ad, ADEID_RFORK, offset);
+
+       rc = ad_fset(ad, fsp);
+       if (rc != 0) {
+               DBG_ERR("ad_fset [%s] failed [%s]\n",
+                       fsp_str_dbg(fsp), strerror(errno));
+               TALLOC_FREE(ad);
+               return -1;
        }
 
+       TALLOC_FREE(ad);
        return 0;
 }
 
-static int fruit_ftruncate(struct vfs_handle_struct *handle,
-                          struct files_struct *fsp,
-                          off_t offset)
+static int fruit_ftruncate_rsrc_stream(struct vfs_handle_struct *handle,
+                                      struct files_struct *fsp,
+                                      off_t offset)
 {
-       int rc = 0;
-        struct adouble *ad =
-               (struct adouble *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+       if (offset == 0) {
+               return SMB_VFS_NEXT_UNLINK(handle, fsp->fsp_name);
+       }
 
-       DEBUG(10, ("streams_xattr_ftruncate called for file %s offset %.0f\n",
-                  fsp_str_dbg(fsp), (double)offset));
+       return SMB_VFS_NEXT_FTRUNCATE(handle, fsp, offset);
+}
 
-       if (ad == NULL) {
-               return SMB_VFS_NEXT_FTRUNCATE(handle, fsp, offset);
-       }
+static int fruit_ftruncate_rsrc(struct vfs_handle_struct *handle,
+                               struct files_struct *fsp,
+                               off_t offset)
+{
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+       int ret;
 
-       if (!fruit_fsp_recheck(ad, fsp)) {
-               return -1;
-       }
+       switch (fio->config->rsrc) {
+       case FRUIT_RSRC_XATTR:
+               ret = fruit_ftruncate_rsrc_xattr(handle, fsp, offset);
+               break;
 
-       switch (ad->ad_type) {
-       case ADOUBLE_META:
-               rc = fruit_ftruncate_meta(handle, fsp, offset, ad);
+       case FRUIT_RSRC_ADFILE:
+               ret = fruit_ftruncate_rsrc_adouble(handle, fsp, offset);
                break;
 
-       case ADOUBLE_RSRC:
-               rc = fruit_ftruncate_rsrc(handle, fsp, offset, ad);
+       case FRUIT_RSRC_STREAM:
+               ret = fruit_ftruncate_rsrc_stream(handle, fsp, offset);
                break;
 
        default:
+               DBG_ERR("Unexpected rsrc config [%d]\n", fio->config->rsrc);
                return -1;
        }
 
-       return rc;
+
+       return ret;
+}
+
+static int fruit_ftruncate_meta(struct vfs_handle_struct *handle,
+                               struct files_struct *fsp,
+                               off_t offset)
+{
+       if (offset > 60) {
+               DBG_WARNING("ftruncate %s to %jd",
+                           fsp_str_dbg(fsp), (intmax_t)offset);
+               /* OS X returns NT_STATUS_ALLOTTED_SPACE_EXCEEDED  */
+               errno = EOVERFLOW;
+               return -1;
+       }
+
+       /* OS X returns success but does nothing  */
+       DBG_INFO("ignoring ftruncate %s to %jd\n",
+                fsp_str_dbg(fsp), (intmax_t)offset);
+       return 0;
+}
+
+static int fruit_ftruncate(struct vfs_handle_struct *handle,
+                          struct files_struct *fsp,
+                          off_t offset)
+{
+       struct fio *fio = (struct fio *)VFS_FETCH_FSP_EXTENSION(handle, fsp);
+       int ret;
+
+       DBG_DEBUG("Path [%s] offset [%"PRIdMAX"]\n", fsp_str_dbg(fsp),
+                 (intmax_t)offset);
+
+       if (fio == NULL) {
+               return SMB_VFS_NEXT_FTRUNCATE(handle, fsp, offset);
+       }
+
+       if (fio->type == ADOUBLE_META) {
+               ret = fruit_ftruncate_meta(handle, fsp, offset);
+       } else {
+               ret = fruit_ftruncate_rsrc(handle, fsp, offset);
+       }
+
+       DBG_DEBUG("Path [%s] result [%d]\n", fsp_str_dbg(fsp), ret);
+       return ret;
 }
 
 static NTSTATUS fruit_create_file(vfs_handle_struct *handle,
@@ -3386,16 +5120,27 @@ static NTSTATUS fruit_create_file(vfs_handle_struct *handle,
        if (!NT_STATUS_IS_OK(status)) {
                return status;
        }
+
        fsp = *result;
 
-       if (config->copyfile_enabled) {
-               /*
-                * Set a flag in the fsp. Gets used in copychunk to
-                * check whether the special Apple copyfile semantics
-                * for copychunk should be allowed in a copychunk
-                * request with a count of 0.
-                */
-               fsp->aapl_copyfile_supported = true;
+       if (global_fruit_config.nego_aapl) {
+               if (config->copyfile_enabled) {
+                       /*
+                        * Set a flag in the fsp. Gets used in
+                        * copychunk to check whether the special
+                        * Apple copyfile semantics for copychunk
+                        * should be allowed in a copychunk request
+                        * with a count of 0.
+                        */
+                       fsp->aapl_copyfile_supported = true;
+               }
+
+               if (config->posix_rename && fsp->is_directory) {
+                       /*
+                        * Enable POSIX directory rename behaviour
+                        */
+                       fsp->posix_flags |= FSP_POSIX_FLAGS_RENAME;
+               }
        }
 
        /*
@@ -3455,7 +5200,7 @@ static NTSTATUS fruit_readdir_attr(struct vfs_handle_struct *handle,
                                struct fruit_config_data,
                                return NT_STATUS_UNSUCCESSFUL);
 
-       if (!config->use_aapl) {
+       if (!global_fruit_config.nego_aapl) {
                return SMB_VFS_NEXT_READDIR_ATTR(handle, fname, mem_ctx, pattr_data);
        }
 
@@ -3583,10 +5328,10 @@ static NTSTATUS fruit_fset_nt_acl(vfs_handle_struct *handle,
 {
        NTSTATUS status;
        bool do_chmod;
-       mode_t ms_nfs_mode;
+       mode_t ms_nfs_mode = 0;
        int result;
 
-       DEBUG(1, ("fruit_fset_nt_acl: %s\n", fsp_str_dbg(fsp)));
+       DBG_DEBUG("fruit_fset_nt_acl: %s\n", fsp_str_dbg(fsp));
 
        status = check_ms_nfs(handle, fsp, psd, &ms_nfs_mode, &do_chmod);
        if (!NT_STATUS_IS_OK(status)) {
@@ -3602,12 +5347,10 @@ static NTSTATUS fruit_fset_nt_acl(vfs_handle_struct *handle,
 
        if (do_chmod) {
                if (fsp->fh->fd != -1) {
-                       DEBUG(1, ("fchmod: %s\n", fsp_str_dbg(fsp)));
                        result = SMB_VFS_FCHMOD(fsp, ms_nfs_mode);
                } else {
-                       DEBUG(1, ("chmod: %s\n", fsp_str_dbg(fsp)));
                        result = SMB_VFS_CHMOD(fsp->conn,
-                                              fsp->fsp_name->base_name,
+                                              fsp->fsp_name,
                                               ms_nfs_mode);
                }
 
@@ -3623,6 +5366,113 @@ static NTSTATUS fruit_fset_nt_acl(vfs_handle_struct *handle,
        return NT_STATUS_OK;
 }
 
+static struct vfs_offload_ctx *fruit_offload_ctx;
+
+struct fruit_offload_read_state {
+       struct vfs_handle_struct *handle;
+       struct tevent_context *ev;
+       files_struct *fsp;
+       uint32_t fsctl;
+       DATA_BLOB token;
+};
+
+static void fruit_offload_read_done(struct tevent_req *subreq);
+
+static struct tevent_req *fruit_offload_read_send(
+       TALLOC_CTX *mem_ctx,
+       struct tevent_context *ev,
+       struct vfs_handle_struct *handle,
+       files_struct *fsp,
+       uint32_t fsctl,
+       uint32_t ttl,
+       off_t offset,
+       size_t to_copy)
+{
+       struct tevent_req *req = NULL;
+       struct tevent_req *subreq = NULL;
+       struct fruit_offload_read_state *state = NULL;
+
+       req = tevent_req_create(mem_ctx, &state,
+                               struct fruit_offload_read_state);
+       if (req == NULL) {
+               return NULL;
+       }
+       *state = (struct fruit_offload_read_state) {
+               .handle = handle,
+               .ev = ev,
+               .fsp = fsp,
+               .fsctl = fsctl,
+       };
+
+       subreq = SMB_VFS_NEXT_OFFLOAD_READ_SEND(mem_ctx, ev, handle, fsp,
+                                               fsctl, ttl, offset, to_copy);
+       if (tevent_req_nomem(subreq, req)) {
+               return tevent_req_post(req, ev);
+       }
+       tevent_req_set_callback(subreq, fruit_offload_read_done, req);
+       return req;
+}
+
+static void fruit_offload_read_done(struct tevent_req *subreq)
+{
+       struct tevent_req *req = tevent_req_callback_data(
+               subreq, struct tevent_req);
+       struct fruit_offload_read_state *state = tevent_req_data(
+               req, struct fruit_offload_read_state);
+       NTSTATUS status;
+
+       status = SMB_VFS_NEXT_OFFLOAD_READ_RECV(subreq,
+                                               state->handle,
+                                               state,
+                                               &state->token);
+       TALLOC_FREE(subreq);
+       if (tevent_req_nterror(req, status)) {
+               return;
+       }
+
+       if (state->fsctl != FSCTL_SRV_REQUEST_RESUME_KEY) {
+               tevent_req_done(req);
+               return;
+       }
+
+       status = vfs_offload_token_ctx_init(state->fsp->conn->sconn->client,
+                                           &fruit_offload_ctx);
+       if (tevent_req_nterror(req, status)) {
+               return;
+       }
+
+       status = vfs_offload_token_db_store_fsp(fruit_offload_ctx,
+                                               state->fsp,
+                                               &state->token);
+       if (tevent_req_nterror(req, status)) {
+               return;
+       }
+
+       tevent_req_done(req);
+       return;
+}
+
+static NTSTATUS fruit_offload_read_recv(struct tevent_req *req,
+                                       struct vfs_handle_struct *handle,
+                                       TALLOC_CTX *mem_ctx,
+                                       DATA_BLOB *token)
+{
+       struct fruit_offload_read_state *state = tevent_req_data(
+               req, struct fruit_offload_read_state);
+       NTSTATUS status;
+
+       if (tevent_req_is_nterror(req, &status)) {
+               tevent_req_received(req);
+               return status;
+       }
+
+       token->length = state->token.length;
+       token->data = talloc_move(mem_ctx, &state->token.data);
+
+       tevent_req_received(req);
+       return NT_STATUS_OK;
+}
+
 struct fruit_copy_chunk_state {
        struct vfs_handle_struct *handle;
        off_t copied;
@@ -3639,7 +5489,8 @@ static struct tevent_req *fruit_copy_chunk_send(struct vfs_handle_struct *handle
                                                off_t src_off,
                                                struct files_struct *dest_fsp,
                                                off_t dest_off,
-                                               off_t num)
+                                               off_t num,
+                                               uint32_t flags)
 {
        struct tevent_req *req, *subreq;
        struct fruit_copy_chunk_state *fruit_copy_chunk_state;
@@ -3689,7 +5540,8 @@ static struct tevent_req *fruit_copy_chunk_send(struct vfs_handle_struct *handle
                                              src_off,
                                              dest_fsp,
                                              dest_off,
-                                             to_copy);
+                                             to_copy,
+                                             flags);
        if (tevent_req_nomem(subreq, req)) {
                return tevent_req_post(req, ev);
        }
@@ -3707,7 +5559,7 @@ static void fruit_copy_chunk_done(struct tevent_req *subreq)
        NTSTATUS status;
        unsigned int num_streams = 0;
        struct stream_struct *streams = NULL;
-       int i;
+       unsigned int i;
        struct smb_filename *src_fname_tmp = NULL;
        struct smb_filename *dst_fname_tmp = NULL;
 
@@ -3725,12 +5577,12 @@ static void fruit_copy_chunk_done(struct tevent_req *subreq)
        }
 
        /*
-        * Now copy all reamining streams. We know the share supports
+        * Now copy all remaining streams. We know the share supports
         * streams, because we're in vfs_fruit. We don't do this async
         * because streams are few and small.
         */
-       status = vfs_streaminfo(state->handle->conn, NULL,
-                               state->src_fsp->fsp_name->base_name,
+       status = vfs_streaminfo(state->handle->conn, state->src_fsp,
+                               state->src_fsp->fsp_name,
                                req, &num_streams, &streams);
        if (tevent_req_nterror(req, status)) {
                return;
@@ -3743,15 +5595,15 @@ static void fruit_copy_chunk_done(struct tevent_req *subreq)
        }
 
        for (i = 0; i < num_streams; i++) {
-               DEBUG(10, ("%s: stream: '%s'/%ju\n",
-                          __func__, streams[i].name,
-                          (uintmax_t)streams[i].size));
+               DEBUG(10, ("%s: stream: '%s'/%zu\n",
+                         __func__, streams[i].name, (size_t)streams[i].size));
 
                src_fname_tmp = synthetic_smb_fname(
                        req,
                        state->src_fsp->fsp_name->base_name,
                        streams[i].name,
-                       NULL);
+                       NULL,
+                       state->src_fsp->fsp_name->flags);
                if (tevent_req_nomem(src_fname_tmp, req)) {
                        return;
                }
@@ -3765,7 +5617,8 @@ static void fruit_copy_chunk_done(struct tevent_req *subreq)
                        req,
                        state->dst_fsp->fsp_name->base_name,
                        streams[i].name,
-                       NULL);
+                       NULL,
+                       state->dst_fsp->fsp_name->flags);
                if (tevent_req_nomem(dst_fname_tmp, req)) {
                        TALLOC_FREE(src_fname_tmp);
                        return;
@@ -3832,6 +5685,10 @@ static struct vfs_fn_pointers vfs_fruit_fns = {
        .open_fn = fruit_open,
        .pread_fn = fruit_pread,
        .pwrite_fn = fruit_pwrite,
+       .pread_send_fn = fruit_pread_send,
+       .pread_recv_fn = fruit_pread_recv,
+       .pwrite_send_fn = fruit_pwrite_send,
+       .pwrite_recv_fn = fruit_pwrite_recv,
        .stat_fn = fruit_stat,
        .lstat_fn = fruit_lstat,
        .fstat_fn = fruit_fstat,
@@ -3841,6 +5698,8 @@ static struct vfs_fn_pointers vfs_fruit_fns = {
        .fallocate_fn = fruit_fallocate,
        .create_file_fn = fruit_create_file,
        .readdir_attr_fn = fruit_readdir_attr,
+       .offload_read_send_fn = fruit_offload_read_send,
+       .offload_read_recv_fn = fruit_offload_read_recv,
        .copy_chunk_send_fn = fruit_copy_chunk_send,
        .copy_chunk_recv_fn = fruit_copy_chunk_recv,
 
@@ -3849,8 +5708,8 @@ static struct vfs_fn_pointers vfs_fruit_fns = {
        .fset_nt_acl_fn = fruit_fset_nt_acl,
 };
 
-NTSTATUS vfs_fruit_init(void);
-NTSTATUS vfs_fruit_init(void)
+NTSTATUS vfs_fruit_init(TALLOC_CTX *);
+NTSTATUS vfs_fruit_init(TALLOC_CTX *ctx)
 {
        NTSTATUS ret = smb_register_vfs(SMB_VFS_INTERFACE_VERSION, "fruit",
                                        &vfs_fruit_fns);