Displaying 20 results from an estimated 48 matches for "dsdb_transaction_audit".
2018 Sep 14
2
kpasswd_samdb_set_password: domain\user (S-...) is changing password of user@domain
...1
rpc_cli:1 passdb:1 sam:1 auth:1 winbind:1 vfs:1 idmap:1 quota:1 acls:1
locking:1 msdfs:1 dmapi:1 registry:1 scavenger:1 dns:1 ldb:1 tevent:1
auth_audit:5 auth_json_audit:5 kerberos:1 drs_repl:1 smb2:1 smb2_credits:1
dsdb_audit:5 dsdb_json_audit:5 dsdb_password_audit:5
dsdb_password_json_audit:5 dsdb_transaction_audit:5
dsdb_transaction_json_audit:5 dsdb_group_audit:5 dsdb_group_json_audit:5
On Fri, Sep 14, 2018 at 1:17 PM Andrew Bartlett <abartlet at samba.org> wrote:
> On Fri, 2018-09-14 at 13:00 -0400, Bill Baird via samba wrote:
> > I have dsdb_password_audit:5 & dsdb_password_json_aud...
2019 Mar 08
1
samba-tool domain provision stuck when using python3
...m: 7 auth: 7 winbind: 7 vfs: 7 idmap: 7 quota: 7 acls: 7 locking: 7 msdfs: 7 dmapi: 7 registry: 7 scavenger: 7 dns: 7 ldb: 7 tevent: 7 auth_audit: 7 auth_json_audit: 7 kerberos: 7 drs_repl: 7 smb2: 7 smb2_credits: 7 dsdb_audit: 7 dsdb_json_audit: 7 dsdb_password_audit: 7 dsdb_password_json_audit: 7 dsdb_transaction_audit: 7 dsdb_transaction_json_audit: 7 dsdb_group_audit: 7 dsdb_group_json_audit: 7
and it didn't go on.
here's my step to complile samba 4.10rc4.
1 install some packages from repos with epel enabled.
yum install attr bind-utils docbook-style-xsl gcc gdb krb5-workstation \
libxslt perl perl-E...
2023 Mar 27
1
clients not connecting to samba shares
...quota: 5
?acls: 5
?locking: 5
?msdfs: 5
?dmapi: 5
?registry: 5
?scavenger: 5
?dns: 5
?ldb: 5
?tevent: 5
?auth_audit: 5
?auth_json_audit: 5
?kerberos: 5
?drs_repl: 5
?smb2: 5
?smb2_credits: 5
?dsdb_audit: 5
?dsdb_json_audit: 5
?dsdb_password_audit: 5
?dsdb_password_json_audit: 5
?dsdb_transaction_audit: 5
?dsdb_transaction_json_audit: 5
?dsdb_group_audit: 5
?dsdb_group_json_audit: 5
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
?all: 5
?tdb: 5
?printdrivers: 5
?lanman: 5...
2018 Dec 01
2
Setup a Samba AD DC as an additional DC
...quota: 8
acls: 8
locking: 8
msdfs: 8
dmapi: 8
registry: 8
scavenger: 8
dns: 8
ldb: 8
tevent: 8
auth_audit: 8
auth_json_audit: 8
kerberos: 8
drs_repl: 8
smb2: 8
smb2_credits: 8
dsdb_audit: 8
dsdb_json_audit: 8
dsdb_password_audit: 8
dsdb_password_json_audit: 8
dsdb_transaction_audit: 8
dsdb_transaction_json_audit: 8
dsdb_group_audit: 8
dsdb_group_json_audit: 8
Processing section "[netlogon]"
Processing section "[sysvol]"
pm_process() returned Yes
ldb_wrap open of secrets.ldb
Could not find machine account in secrets database: Failed to fetch machine a...
2020 May 20
4
smbclient oddness
Are there any logs on the client or server at a higher log level?
Andrew Bartlett
On Wed, 2020-05-20 at 12:39 +1200, Grant Petersen via samba wrote:
> I forgot to mention that using the smbclient option
>
> -A /etc/cred/authfile
>
> behaves the same way as attempting to manually enter the password on
> the command line; failing in 4.12.2 and working in 4.11.0
>
>
2019 Dec 11
0
security = ads parameter not working in samba 4.9.5
...quota: 6
acls: 6
locking: 6
msdfs: 6
dmapi: 6
registry: 6
scavenger: 6
dns: 6
ldb: 6
tevent: 6
auth_audit: 6
auth_json_audit: 6
kerberos: 6
drs_repl: 6
smb2: 6
smb2_credits: 6
dsdb_audit: 6
dsdb_json_audit: 6
dsdb_password_audit: 6
dsdb_password_json_audit: 6
dsdb_transaction_audit: 6
dsdb_transaction_json_audit: 6
dsdb_group_audit: 6
dsdb_group_json_audit: 6
lp_load_ex: refreshing parameters
Initialising global parameters
INFO: Current debug levels:
all: 6
tdb: 6
printdrivers: 6
lanman: 6
smb: 6
rpc_parse: 6
rpc_srv: 6
rpc_cli: 6
passdb: 6
sam: 6...
2023 Mar 28
1
clients not connecting to samba shares
...gt;>> ??auth_json_audit: 5
>>> ??kerberos: 5
>>> ??drs_repl: 5
>>> ??smb2: 5
>>> ??smb2_credits: 5
>>> ??dsdb_audit: 5
>>> ??dsdb_json_audit: 5
>>> ??dsdb_password_audit: 5
>>> ??dsdb_password_json_audit: 5
>>> ??dsdb_transaction_audit: 5
>>> ??dsdb_transaction_json_audit: 5
>>> ??dsdb_group_audit: 5
>>> ??dsdb_group_json_audit: 5
>>> lp_load_ex: refreshing parameters
>>> Initialising global parameters
>>> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit
>...
2020 Jul 13
10
Problem with network browsing
...locking: 10
msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
dsdb_transaction_json_audit: 10
dsdb_group_audit: 10
dsdb_group_json_audit: 10
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
la...
2019 Dec 10
6
security = ads parameter not working in samba 4.9.5
I've re-read this thread but its a bit confusing due to 2 persons with the same probem in one thread.
Im thinking here, how is samba started, since winbind is not running.
Im suspecting samba-addc or samba is starting. Not smbd nmbd winbind.
I suggest to run this:
Disable that all again.
systemctl disable samba-addc samba smbd nmbd winbind
systemctl mask samba-addc samba smbd nmbd
2020 Jul 13
0
Problem with network browsing
...0
> ldb: 10
> tevent: 10
> auth_audit: 10
> auth_json_audit: 10
> kerberos: 10
> drs_repl: 10
> smb2: 10
> smb2_credits: 10
> dsdb_audit: 10
> dsdb_json_audit: 10
> dsdb_password_audit: 10
> dsdb_password_json_audit: 10
> dsdb_transaction_audit: 10
> dsdb_transaction_json_audit: 10
> dsdb_group_audit: 10
> dsdb_group_json_audit: 10
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> INFO: Current debug levels:
>...
2020 Jul 13
0
Problem with network browsing
...> dns: 10
> ldb: 10
> tevent: 10
> auth_audit: 10
> auth_json_audit: 10
> kerberos: 10
> drs_repl: 10
> smb2: 10
> smb2_credits: 10
> dsdb_audit: 10
> dsdb_json_audit: 10
> dsdb_password_audit: 10
> dsdb_password_json_audit: 10
> dsdb_transaction_audit: 10
> dsdb_transaction_json_audit: 10
> dsdb_group_audit: 10
> dsdb_group_json_audit: 10
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows
> limit (16384)
> INFO: Current debug levels:
&g...
2018 Sep 14
0
kpasswd_samdb_set_password: domain\user (S-...) is changing password of user@domain
...1 auth:1 winbind:1 vfs:1 idmap:1
> quota:1 acls:1 locking:1 msdfs:1 dmapi:1 registry:1 scavenger:1
> dns:1 ldb:1 tevent:1 auth_audit:5 auth_json_audit:5 kerberos:1
> drs_repl:1 smb2:1 smb2_credits:1 dsdb_audit:5 dsdb_json_audit:5
> dsdb_password_audit:5 dsdb_password_json_audit:5
> dsdb_transaction_audit:5 dsdb_transaction_json_audit:5
> dsdb_group_audit:5 dsdb_group_json_audit:5
The message you were looking at won't show all password resets, only
some that are via kerberos. That is why we added the new logs.
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~aba...
2019 May 20
0
Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages
...> [global]
> netbios name = DC3
> realm = XX.DOMAIN.DE
> server services = s3fs, rpc, wrepl, ldap, cldap, kdc, drepl,
> winbindd, ntp_signd, kcc, dnsupdate
> workgroup = DOMAIN-02
> log level = auth_audit:2 dsdb_password_audit:5
> dsdb_transaction_audit:5 dsdb_group_audit:5
> #log level = 4 auth_audit:3
> logging =syslog only
Why do you have a parameter with another parameter as its value ?
both 'logging' and 'syslog only' are both parameters, did you mean
'logging = syslog' ?
> serve...
2020 Jul 13
1
Problem with network browsing
...audit: 10
> > auth_json_audit: 10
> > kerberos: 10
> > drs_repl: 10
> > smb2: 10
> > smb2_credits: 10
> > dsdb_audit: 10
> > dsdb_json_audit: 10
> > dsdb_password_audit: 10
> > dsdb_password_json_audit: 10
> > dsdb_transaction_audit: 10
> > dsdb_transaction_json_audit: 10
> > dsdb_group_audit: 10
> > dsdb_group_json_audit: 10
> > lp_load_ex: refreshing parameters
> > Initialising global parameters
> > rlimit_max: increasing rlimit_max (1024) to minimum Windows limit
> > (16384...
2020 Jun 29
4
DNS Updates after upgrade
...are the relevant configs:
---smb.conf---
[global]
netbios name = DC1
realm = AD.DOMAIN.DE
server services = s3fs, rpc, wrepl, ldap, cldap, kdc, drepl,
winbindd, ntp_signd, kcc, dnsupdate
workgroup = DOMAIN-02
log level = 1 auth_audit:4 dsdb_password_audit:5
dsdb_transaction_audit:5 dsdb_group_audit:5
#log level = 10
logging =syslog
server role = active directory domain controller
dns zone scavenging = yes
prefork children = 8
idmap_ldb:use rfc2307 = yes
template shell = /bin/bash
template homedir = /home/%U...
2019 Nov 07
1
net ads join explication ?
...? locking: 5
? msdfs: 5
? dmapi: 5
? registry: 5
? scavenger: 5
? dns: 5
? ldb: 5
? tevent: 5
? auth_audit: 5
? auth_json_audit: 5
? kerberos: 5
? drs_repl: 5
? smb2: 5
? smb2_credits: 5
? dsdb_audit: 5
? dsdb_json_audit: 5
? dsdb_password_audit: 5
? dsdb_password_json_audit: 5
? dsdb_transaction_audit: 5
? dsdb_transaction_json_audit: 5
? dsdb_group_audit: 5
? dsdb_group_json_audit: 5
Processing section "[global]"
doing parameter security = ADS
doing parameter realm = SAMBADOM.CALAIS.FR
doing parameter workgroup = SAMBADOM
doing parameter netbios name = clientblues2
doing parameter...
2019 May 20
5
Upgrade from 4.9.8 to 4.10.3 on Centos using Sernet Packages
...g this?
Regards
Christian
smb.conf
[global]
netbios name = DC3
realm = XX.DOMAIN.DE
server services = s3fs, rpc, wrepl, ldap, cldap, kdc, drepl,
winbindd, ntp_signd, kcc, dnsupdate
workgroup = DOMAIN-02
log level = auth_audit:2 dsdb_password_audit:5
dsdb_transaction_audit:5 dsdb_group_audit:5
#log level = 4 auth_audit:3
logging =syslog only
server role = active directory domain controller
prefork children = 8
idmap_ldb:use rfc2307 = yes
username map = /etc/samba/smbusers
template shell = /bin/bash
templ...
2019 Jul 04
3
Error samba backup 4.10.5
...quota: 5
acls: 5
locking: 5
msdfs: 5
dmapi: 5
registry: 5
scavenger: 5
dns: 5
ldb: 5
tevent: 5
auth_audit: 5
auth_json_audit: 5
kerberos: 5
drs_repl: 5
smb2: 5
smb2_credits: 5
dsdb_audit: 5
dsdb_json_audit: 5
dsdb_password_audit: 5
dsdb_password_json_audit: 5
dsdb_transaction_audit: 5
dsdb_transaction_json_audit: 5
dsdb_group_audit: 5
dsdb_group_json_audit: 5
Processing section "[netlogon]"
Processing section "[sysvol]"
pm_process() returned Yes
schema_fsmo_init: we are master[yes] updates allowed[no]
schema_fsmo_init: we are master[yes] updates allo...
2019 May 31
0
Inconsistency with LANMAN1 and Samba 4.9
...msdfs: 10
dmapi: 10
registry: 10
scavenger: 10
dns: 10
ldb: 10
tevent: 10
auth_audit: 10
auth_json_audit: 10
kerberos: 10
drs_repl: 10
smb2: 10
smb2_credits: 10
dsdb_audit: 10
dsdb_json_audit: 10
dsdb_password_audit: 10
dsdb_password_json_audit: 10
dsdb_transaction_audit: 10
dsdb_transaction_json_audit: 10
dsdb_group_audit: 10
dsdb_group_json_audit: 10
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 1...
2018 Sep 14
2
kpasswd_samdb_set_password: domain\user (S-...) is changing password of user@domain
I have dsdb_password_audit:5 & dsdb_password_json_audit:5 enabled, but I
don't get the message I included.
I instead get an audit log that a password was changed...but not by who.
Was hoping to get more info in a single log entry, so I can track who on my
staff is doing password resets and setup email alerts via my logging system.
On Fri, Sep 14, 2018 at 12:49 PM Andrew Bartlett