Below, you will find the pertinent information regarding my installation and configuration regarding my samba install. I am currently trying to move my companies file server off of windows and on to CentOS using Samba. Everything works great, until I enable vfs_full_audit. Once I do that, the server comes to a screaching halt due to the fact that when a user browses to the mapped directory from their windows machine, it stats every single directory. I need to be able to do logging due to industry compliance needs, and it looks like the full_audit is what will get the job done best for me. Any help would be greatly appreciated. Also, I'm noticing a LOT of failures as it stats all the directories, it's looking for desktop.ini. Again, any help would be appreciated. Thank you. Samba version: 3.0.33-3.15.el5_4.1 OS: CentOS 5.3 smb.conf: [global] workgroup = <windows domain> realm = <ad server> server string = %h server (Samba %v, CentOS) password server = <ad server> enable privileges = Yes allow trusted domains = No dns proxy = no use spnego = yes client use spnego = yes name resolve order = host wins bcast disable spoolss = yes smb ports = 139 netbios name = file-server log file = /var/log/samba/%m.log log level = 0 max log size = 50 security = ADS encrypt passwords = yes socket options = TCP_NODELAY time server = Yes map to guest = nobody idmap domains = KMI idmap config KMI:default = yes idmap config KMI:backend = rid idmap config KMI:range = 16777217-33554431 winbind enum users = No winbind enum groups = No template shell = /sbin/nologin winbind use default domain = yes [it] comment = IT Department Share path = /data/file_dept/it read only = No create mask = 0775 directory mask = 0775 browsable = No writeable = Yes force create mode = 0775 force directory mode = 0775 force security mode = 0775 guest ok = no nt acl support = yes inherit acls = yes vfs objects = full_audit full_audit:prefix = %u full_audit:failure = all full_audit:success = all
On Tue, May 18, 2010 at 10:53:11AM -0400, David Sirrine wrote:> Below, you will find the pertinent information regarding my installation and > configuration regarding my samba install. I am currently trying to move my > companies file server off of windows and on to CentOS using Samba. > Everything works great, until I enable vfs_full_audit. Once I do that, the > server comes to a screaching halt due to the fact that when a user browses > to the mapped directory from their windows machine, it stats every single > directory. I need to be able to do logging due to industry compliance needs, > and it looks like the full_audit is what will get the job done best for me. > Any help would be greatly appreciated.Possibly the sync operations triggered by syslogd make it *really* slow. You might want to look up the documentation of your syslog daemon how to turn off syncs for the file Samba is logging to.> Also, I'm noticing a LOT of failures as it stats all the directories, it's > looking for desktop.ini. Again, any help would be appreciated. Thank you.If your compliance requirements are such that you have to log everything, then there is probably not much you can do here. Logging everything is *very* verbose though, sure. You need to decide and configure what to really log to comply. Volker -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: Digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20100520/06b9d02c/attachment.pgp>