On Thu, 10 May 2018 15:31:23 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote:> > > > >From 'man vfs_full_audit' > > > > > > full_audit:facility = FACILITY > > > Log messages to the named syslog(3) facility. > > > > > > See 'man syslog' for the 'facilities' you can use. > > > [2018/05/08 17:34:42.388486, > > 0] ../source3/param/loadparm.c:1179(lp_enum) > > lp_enum(LOG_AUTH,enum): value is not in enum_list! > > > ;-) > > > Some hint on how to use 'auth' as facility?! Thanks.You would replace 'FACILITY' with one of the facilities shown in 'man syslog' e.g. full_audit:facility = LOG_AUTH Rowland
Mandi! Rowland Penny via samba In chel di` si favelave...> You would replace 'FACILITY' with one of the facilities shown in 'man > syslog' e.g. full_audit:facility = LOG_AUTHOK, done. But samba (as stated in previous email) still reply: [2018/05/08 17:34:42.388486, 0] ../source3/param/loadparm.c:1179(lp_enum) lp_enum(LOG_AUTH,enum): value is not in enum_list! so seems that 'auth' and also 'LOG_AUTH' is not a valid keyword... (debian jessie, systemd, samba 4.5 from louis repository) -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà , 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
On Fri, 11 May 2018 09:14:24 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote:> Mandi! Rowland Penny via samba > In chel di` si favelave... > > > You would replace 'FACILITY' with one of the facilities shown in > > 'man syslog' e.g. full_audit:facility = LOG_AUTH > > OK, done. But samba (as stated in previous email) still reply: > > [2018/05/08 17:34:42.388486, > 0] ../source3/param/loadparm.c:1179(lp_enum) lp_enum(LOG_AUTH,enum): > value is not in enum_list! > > so seems that 'auth' and also 'LOG_AUTH' is not a valid keyword... > > > (debian jessie, systemd, samba 4.5 from louis repository) >OK, if you look in 'man vfs_full_audit' is says this: full_audit:facility = FACILITY Log messages to the named syslog(3) facility. If you then examine 'man syslog', 'LOG_AUTH' is a listed facility, but I can confirm that using it with vfs_full_audit doesn't work, 'LOCAL5' does. Does anybody know which of the facilities listed in 'man syslog' actually work ? or do I have try each of them to find out ? I have copied in samba technical on this. Rowland