Hiya, I checked all logs currently in /various/log/? looking for the username but nothing has come up. I?d say would be in samba log folder, but I think log level needs to be increased, but unsure how or what log. On 10 Sep 2025 at 14:10 +0200, Sami Hulkko <sahulkko at gmail.com>, wrote:> > To add, check: /var/log/auth.log / kernelog / samba logs in > /var/log/samba [Debian] > > SH
On 2025-09-10 6:18 a.m., Luis Peromarta via samba wrote:> I checked all logs currently in /various/log/? looking for the username but nothing has come up. I?d say would be in samba log folder, but I think log level needs to be increased, but unsure how or what log.Try appending the following to the 'log level' in smb.conf on the DCs: auth_json_audit:5 Example: log level = 1 auth_json_audit:5 My understanding is this should cause login attempts (successes and failures) to be logged. HTH, /SM