Displaying 20 results from an estimated 53 matches for "dsdb_group_audit".
2018 Sep 14
2
kpasswd_samdb_set_password: domain\user (S-...) is changing password of user@domain
...:1 quota:1 acls:1
locking:1 msdfs:1 dmapi:1 registry:1 scavenger:1 dns:1 ldb:1 tevent:1
auth_audit:5 auth_json_audit:5 kerberos:1 drs_repl:1 smb2:1 smb2_credits:1
dsdb_audit:5 dsdb_json_audit:5 dsdb_password_audit:5
dsdb_password_json_audit:5 dsdb_transaction_audit:5
dsdb_transaction_json_audit:5 dsdb_group_audit:5 dsdb_group_json_audit:5
On Fri, Sep 14, 2018 at 1:17 PM Andrew Bartlett <abartlet at samba.org> wrote:
> On Fri, 2018-09-14 at 13:00 -0400, Bill Baird via samba wrote:
> > I have dsdb_password_audit:5 & dsdb_password_json_audit:5 enabled,
> > but I
> > don't...
2019 Mar 08
1
samba-tool domain provision stuck when using python3
...locking: 7 msdfs: 7 dmapi: 7 registry: 7 scavenger: 7 dns: 7 ldb: 7 tevent: 7 auth_audit: 7 auth_json_audit: 7 kerberos: 7 drs_repl: 7 smb2: 7 smb2_credits: 7 dsdb_audit: 7 dsdb_json_audit: 7 dsdb_password_audit: 7 dsdb_password_json_audit: 7 dsdb_transaction_audit: 7 dsdb_transaction_json_audit: 7 dsdb_group_audit: 7 dsdb_group_json_audit: 7
and it didn't go on.
here's my step to complile samba 4.10rc4.
1 install some packages from repos with epel enabled.
yum install attr bind-utils docbook-style-xsl gcc gdb krb5-workstation \
libxslt perl perl-ExtUtils-MakeMaker lmdb-devel libarchive-devel \
per...
2023 Mar 27
1
clients not connecting to samba shares
...try: 5
?scavenger: 5
?dns: 5
?ldb: 5
?tevent: 5
?auth_audit: 5
?auth_json_audit: 5
?kerberos: 5
?drs_repl: 5
?smb2: 5
?smb2_credits: 5
?dsdb_audit: 5
?dsdb_json_audit: 5
?dsdb_password_audit: 5
?dsdb_password_json_audit: 5
?dsdb_transaction_audit: 5
?dsdb_transaction_json_audit: 5
?dsdb_group_audit: 5
?dsdb_group_json_audit: 5
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
?all: 5
?tdb: 5
?printdrivers: 5
?lanman: 5
?smb: 5
?rpc_parse: 5
?rpc_srv: 5
?rpc_cli: 5
?pa...
2018 Dec 01
2
Setup a Samba AD DC as an additional DC
...try: 8
scavenger: 8
dns: 8
ldb: 8
tevent: 8
auth_audit: 8
auth_json_audit: 8
kerberos: 8
drs_repl: 8
smb2: 8
smb2_credits: 8
dsdb_audit: 8
dsdb_json_audit: 8
dsdb_password_audit: 8
dsdb_password_json_audit: 8
dsdb_transaction_audit: 8
dsdb_transaction_json_audit: 8
dsdb_group_audit: 8
dsdb_group_json_audit: 8
Processing section "[netlogon]"
Processing section "[sysvol]"
pm_process() returned Yes
ldb_wrap open of secrets.ldb
Could not find machine account in secrets database: Failed to fetch machine account password for DOMAIN from both secrets.ldb (Could...
2020 May 20
4
smbclient oddness
Are there any logs on the client or server at a higher log level?
Andrew Bartlett
On Wed, 2020-05-20 at 12:39 +1200, Grant Petersen via samba wrote:
> I forgot to mention that using the smbclient option
>
> -A /etc/cred/authfile
>
> behaves the same way as attempting to manually enter the password on
> the command line; failing in 4.12.2 and working in 4.11.0
>
>
2019 Dec 11
0
security = ads parameter not working in samba 4.9.5
...try: 6
scavenger: 6
dns: 6
ldb: 6
tevent: 6
auth_audit: 6
auth_json_audit: 6
kerberos: 6
drs_repl: 6
smb2: 6
smb2_credits: 6
dsdb_audit: 6
dsdb_json_audit: 6
dsdb_password_audit: 6
dsdb_password_json_audit: 6
dsdb_transaction_audit: 6
dsdb_transaction_json_audit: 6
dsdb_group_audit: 6
dsdb_group_json_audit: 6
lp_load_ex: refreshing parameters
Initialising global parameters
INFO: Current debug levels:
all: 6
tdb: 6
printdrivers: 6
lanman: 6
smb: 6
rpc_parse: 6
rpc_srv: 6
rpc_cli: 6
passdb: 6
sam: 6
auth: 6
winbind: 6
vfs: 6
idmap: 6
quota: 6
a...
2023 Mar 28
1
clients not connecting to samba shares
...>>> ??smb2: 5
>>> ??smb2_credits: 5
>>> ??dsdb_audit: 5
>>> ??dsdb_json_audit: 5
>>> ??dsdb_password_audit: 5
>>> ??dsdb_password_json_audit: 5
>>> ??dsdb_transaction_audit: 5
>>> ??dsdb_transaction_json_audit: 5
>>> ??dsdb_group_audit: 5
>>> ??dsdb_group_json_audit: 5
>>> lp_load_ex: refreshing parameters
>>> Initialising global parameters
>>> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit
>>> (16384)
>>> INFO: Current debug levels:
>>> ??all: 5
&...
2020 Jul 13
10
Problem with network browsing
...er: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
dsdb_transaction_json_audit: 10
dsdb_group_audit: 10
dsdb_group_json_audit: 10
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cl...
2019 Dec 10
6
security = ads parameter not working in samba 4.9.5
I've re-read this thread but its a bit confusing due to 2 persons with the same probem in one thread.
Im thinking here, how is samba started, since winbind is not running.
Im suspecting samba-addc or samba is starting. Not smbd nmbd winbind.
I suggest to run this:
Disable that all again.
systemctl disable samba-addc samba smbd nmbd winbind
systemctl mask samba-addc samba smbd nmbd
2020 Jul 13
0
Problem with network browsing
...on_audit: 10
> kerberos: 10
> drs_repl: 10
> smb2: 10
> smb2_credits: 10
> dsdb_audit: 10
> dsdb_json_audit: 10
> dsdb_password_audit: 10
> dsdb_password_json_audit: 10
> dsdb_transaction_audit: 10
> dsdb_transaction_json_audit: 10
> dsdb_group_audit: 10
> dsdb_group_json_audit: 10
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> INFO: Current debug levels:
> all: 10
> tdb: 10
> printdrivers: 10
> lanman: 1...
2020 Jul 13
0
Problem with network browsing
...; auth_json_audit: 10
> kerberos: 10
> drs_repl: 10
> smb2: 10
> smb2_credits: 10
> dsdb_audit: 10
> dsdb_json_audit: 10
> dsdb_password_audit: 10
> dsdb_password_json_audit: 10
> dsdb_transaction_audit: 10
> dsdb_transaction_json_audit: 10
> dsdb_group_audit: 10
> dsdb_group_json_audit: 10
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows
> limit (16384)
> INFO: Current debug levels:
> all: 10
> tdb: 10
> printdrivers: 10
> lanman:...
2018 Sep 14
0
kpasswd_samdb_set_password: domain\user (S-...) is changing password of user@domain
...:1 msdfs:1 dmapi:1 registry:1 scavenger:1
> dns:1 ldb:1 tevent:1 auth_audit:5 auth_json_audit:5 kerberos:1
> drs_repl:1 smb2:1 smb2_credits:1 dsdb_audit:5 dsdb_json_audit:5
> dsdb_password_audit:5 dsdb_password_json_audit:5
> dsdb_transaction_audit:5 dsdb_transaction_json_audit:5
> dsdb_group_audit:5 dsdb_group_json_audit:5
The message you were looking at won't show all password resets, only
some that are via kerberos. That is why we added the new logs.
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://sa...
2018 Oct 14
0
new audit support in 4.9
...ver services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
drepl, winbindd, ntp_signd, kcc, dnsupdate
workgroup = EXAMPLE
interfaces = 192.168.56.152
bind interfaces only = yes
log level = 1 auth_audit:3 auth_json_audit:3
dsdb_password_audit:4 dsdb_password_json_audit:4 dsdb_group_audit:4
dsdb_group_json_audit:4
[netlogon]
path = /var/lib/samba/sysvol/example.net/scripts
read only = yes
[sysvol]
path = /var/lib/samba/sysvol
read only = yes
------------------
As you can see, I activated the log level. I tried it with log level 1,
2, 3, 4 and 5. Bu...
2019 May 20
0
Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages
...netbios name = DC3
> realm = XX.DOMAIN.DE
> server services = s3fs, rpc, wrepl, ldap, cldap, kdc, drepl,
> winbindd, ntp_signd, kcc, dnsupdate
> workgroup = DOMAIN-02
> log level = auth_audit:2 dsdb_password_audit:5
> dsdb_transaction_audit:5 dsdb_group_audit:5
> #log level = 4 auth_audit:3
> logging =syslog only
Why do you have a parameter with another parameter as its value ?
both 'logging' and 'syslog only' are both parameters, did you mean
'logging = syslog' ?
> server role = active dir...
2021 May 11
0
[Announce] Samba 4.13.9 Available for Download
...lease of the Samba 4.13 release series.
Changes since 4.13.8
--------------------
o Jeremy Allison <jra at samba.org>
* BUG 14696: s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success.
o Andrew Bartlett <abartlet at samba.org>
* BUG 14689: Add documentation for dsdb_group_audit and dsdb_group_json_audit
to "log level", synchronise "log level" in smb.conf with the code.
o Ralph Boehme <slow at samba.org>
* BUG 14672: Fix smbd panic when two clients open same file.
* BUG 14675: Fix memory leak in the RPC server.
* BUG 14679: s3: sm...
2021 May 11
0
[Announce] Samba 4.13.9 Available for Download
...lease of the Samba 4.13 release series.
Changes since 4.13.8
--------------------
o Jeremy Allison <jra at samba.org>
* BUG 14696: s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success.
o Andrew Bartlett <abartlet at samba.org>
* BUG 14689: Add documentation for dsdb_group_audit and dsdb_group_json_audit
to "log level", synchronise "log level" in smb.conf with the code.
o Ralph Boehme <slow at samba.org>
* BUG 14672: Fix smbd panic when two clients open same file.
* BUG 14675: Fix memory leak in the RPC server.
* BUG 14679: s3: sm...
2023 Jul 14
1
dsdb audit in JSON to journald
Hi,
I want see all dsdb events write to systemd (json format).
My global section
...
logging = systemd
log level = 1 passdb:5 auth:5 winbind:1 auth_json_audit:3 dsdb_json_audit:5 dsdb_password_json_audit:5 dsdb_group_audit:5 dsdb_group_json_audit:5 dsdb_transaction_json_audit:5
...
systemctl restart samba
journalctl -f
Then,
[root at dc ~]# samba-tool group add testgroup1
{"timestamp": "2023-07-14T09:53:30.595295+0500", "type": "dsdbChange", "dsdbChange": {"v...
2020 Jul 13
1
Problem with network browsing
..._repl: 10
> > smb2: 10
> > smb2_credits: 10
> > dsdb_audit: 10
> > dsdb_json_audit: 10
> > dsdb_password_audit: 10
> > dsdb_password_json_audit: 10
> > dsdb_transaction_audit: 10
> > dsdb_transaction_json_audit: 10
> > dsdb_group_audit: 10
> > dsdb_group_json_audit: 10
> > lp_load_ex: refreshing parameters
> > Initialising global parameters
> > rlimit_max: increasing rlimit_max (1024) to minimum Windows limit
> > (16384)
> > INFO: Current debug levels:
> > all: 10
> > tdb:...
2020 Jun 29
4
DNS Updates after upgrade
...---smb.conf---
[global]
netbios name = DC1
realm = AD.DOMAIN.DE
server services = s3fs, rpc, wrepl, ldap, cldap, kdc, drepl,
winbindd, ntp_signd, kcc, dnsupdate
workgroup = DOMAIN-02
log level = 1 auth_audit:4 dsdb_password_audit:5
dsdb_transaction_audit:5 dsdb_group_audit:5
#log level = 10
logging =syslog
server role = active directory domain controller
dns zone scavenging = yes
prefork children = 8
idmap_ldb:use rfc2307 = yes
template shell = /bin/bash
template homedir = /home/%U
#ntlm auth = y...
2019 Nov 07
1
net ads join explication ?
...er: 5
? dns: 5
? ldb: 5
? tevent: 5
? auth_audit: 5
? auth_json_audit: 5
? kerberos: 5
? drs_repl: 5
? smb2: 5
? smb2_credits: 5
? dsdb_audit: 5
? dsdb_json_audit: 5
? dsdb_password_audit: 5
? dsdb_password_json_audit: 5
? dsdb_transaction_audit: 5
? dsdb_transaction_json_audit: 5
? dsdb_group_audit: 5
? dsdb_group_json_audit: 5
Processing section "[global]"
doing parameter security = ADS
doing parameter realm = SAMBADOM.CALAIS.FR
doing parameter workgroup = SAMBADOM
doing parameter netbios name = clientblues2
doing parameter winbind separator = /
doing parameter winbind enum users...