On Fri, 6 Jun 2025 17:56:18 +0200
Andrea Venturoli via samba <samba at lists.samba.org> wrote:
> Hello.
>
> I see in audit logs a lot of the followings:
>
> > IP=x.x.x.x | USER=XXXX\xxxx | MACHINE=x.x.x.x |
> > VOLUME=xxxxxx|fntimes|fail (No such file or
> > directory)|/home/xxxx/xxxxxx|||Fri Jun 6 09:20:45 2025 CEST|
>
> (Of course the file is there, or I woulnd be suprised).
>
> I'd like to debug this, but I need to find a way to reproduce it
> programmatically, ideally with a script, from a client (UNIX if
> possible, or Windows as a second pick).
>
> Any idea how can I achieve this?
> Can smbclient help? Or is there a CMD command I can use?
>
>
> bye & Thanks
> av.
>
I have no idea, mainly because what logs you have posted are
meaningless, your sanitising has removed all context (e.g. Is the
user from 'USER=' the same user as in '/home/xxxx' ?), also if
the
IP is an internal one (e.g. 192.168.1.25 , then there is no point
in sanitising it). There will probably have also been lines that show
what code produced the output, very hard to track down anything without
them.