samba - Jun 2018 - Audit CRUD from objects in Active Directory

Hi,



I am testing a samba 4.7.6 as a domain controller. I use RSAT to manage all
users/groups, policies.. I am wondering if it is possible to log all these
events, like: when was a user created, when got one user membership to one
group, etc. I read some wiki pages but still don’t see what I am looking
for in my logs. Do you have any link how is the correct way to achieve this?



Thanks for your time.

Raul

On Fri, 2018-06-22 at 15:46 +0200, raul . via samba
wrote:
> Hi,
> 
> 
> 
> I am testing a samba 4.7.6 as a domain controller. I use RSAT to manage all
> users/groups, policies.. I am wondering if it is possible to log all these
> events, like: when was a user created, when got one user membership to one
> group, etc. I read some wiki pages but still don’t see what I am looking
> for in my logs. Do you have any link how is the correct way to achieve
this?
> 
Samba 4.9 will include this feature for all modifications made over
LDAP, RPC etc (just not local access with samba-tool against the DB).

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba