[Samba] Confiming Logs are "Normal"

ralph strebbing
Wed, 26 Jan 2022 21:47:41 -0000

Hi All,

So following an article to enable User Identification on our PaloAlto,
I'm noticing some new logs in syslog, notably:
Jan 26 16:43:26 dc2 sh[3158324]: lpcfg_do_global_parameter: WARNING:
The "syslog" option is deprecated
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'gssapi_spnego'
registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'gssapi_krb5' registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'gssapi_krb5_sasl'
registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'spnego' registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'schannel' registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'naclrpc_as_system'
registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'sasl-EXTERNAL'
registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'ntlmssp' registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend
'ntlmssp_resume_ccache' registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'http_basic' registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'http_ntlm' registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'http_negotiate'
registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'krb5' registered
Jan 26 16:43:26 dc2 sh[3158324]: GENSEC backend 'fake_gssapi_krb5'
registered
Jan 26 16:43:26 dc2 sh[3158324]: Using binding ncacn_ip_tcp:dc2[,sign]
Jan 26 16:43:26 dc2 sh[3158324]: resolve_lmhosts: Attempting lmhosts
lookup for name dc2<0x20>
Jan 26 16:43:26 dc2 sh[3158324]: resolve_lmhosts: Attempting lmhosts
lookup for name dc2<0x20>

I understand the syslog option on smb.conf is deprecated, in this
instance, what should I do to still route these to the remote syslog
server?
As for the GENSEC entries and the "resolve_lmhosts" entries, are those
normal? Do they indicate any issues?

Thanks for any clarification,
Ralph