search for: vfs_audit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 samba 4.7.1 on centos 7 vfs_audit log used to show the full path name. I am not sure when that changed, but now open only logs the last component (like basename). Rename still logs both old and new full pathnames. Is there some config entry that needs to be set to get the full pathnames logged? [global] full_audit:priority =...

Hello All, now that the BUG 14343: (s3: vfs_full_audit: Add missing fcntl entry in vfs_op_names[] array.) was fixed I wanted to try 4.12 again. This is the relevant config which has been running for years: vfs objects = acl_xattr full_audit shadow_copy2 full_audit:failure = none full_audit:success = pwrite write rename unlink full_audit:prefix = IP=%I|USER=%u|MACHINE=%m|VOLUME=%S

Hi! I'm sorry but I need a *fast* reply, I've absolutely no time to search on docs. :-( I have a small network: about 8-10 XP client connected to a Samba PDC. I need to log who and when log in the PDC, because the national law requires to record these infos and preserve them for a certain time. Any tip will be apreciated!! Thanks Giovanni -------------- next part -------------- No

Is the ?important" vfs objects parameter documented in a man page anywhere? It appears in the man pages of several vfs modules, but never fully documented that I could find. Apparently it once was from a now dead link https://www.samba.org/samba/docs/old/Samba3-HOWTO/smb.conf.5.html#VFSOBJECTS <https://www.samba.org/samba/docs/old/Samba3-HOWTO/smb.conf.5.html#VFSOBJECTS> . Todd

...y and needs at least to be upgraded to 0.6.5.6. We should upgrade samba as well at least to 4.2.X. This will be done hopefully in may. It's possible we hit a bug in the application itself. Meanwhile I'm trying to make sense of samba log files and basically fail of spaminess. I configured vfs_audit to get behind these issues to see who is responsible. I'm seeing a lot of errors and want to know what to make out of it. In one day audit.log increased to 35mb. Here a some snippets: deadlinerepo|is_offline|fail (Operation not supported)|scripts/Submission/HServerSubmission.py deadlinerep...

Hi All, I extended my AD schema (SFU 3.5) and migrated the users and groups from my NIS domain. The groups migrated from the NIS have the same GID like on the NIS. I added linux machines to my AD domain using windbind, and define on the smb.conf "idmap gid = 10000-20000". I logged in using my AD user account, and when I'm doing "id", I see that all the AD groups

....5.6. >> We should upgrade samba as well at least to 4.2.X. This will be done >> hopefully in may. It's possible >> we hit a bug in the application itself. Meanwhile I'm trying to make >> sense of samba log files and >> basically fail of spaminess. I configured vfs_audit to get behind >> these issues to see who is >> responsible. I'm seeing a lot of errors and want to know what to >> make out of it. In one day >> audit.log increased to 35mb. >> >> Here a some snippets: >> >> deadlinerepo|is_offline|fail (Operation...

Am 28.08.18 um 19:00 schrieb Rowland Penny via samba: > I have never tried it, but you could probably do it, if you use Windows > ACL's, where there is 'delete subfolders & files' and you can deny this. > You would probably have to ignore the Unix attrs with 'acl_xattr:ignore > system acls = yes' We will test that with a separate testing share asap. Thanks.

...Default: vfs objects = ??? Example: vfs objects = extd_audit recycle There are quite a few 'vfs-*' man pages, but they do not seem to listed anywhere, but, from git, this is a full list: vfs_acl_xattr?????? vfs_prealloc vfs_aio_fork??????? vfs_preopen vfs_aio_pthread???? vfs_readahead vfs_audit?????????? vfs_readonly vfs_btrfs?????????? vfs_recycle vfs_cacheprime????? vfs_shadow_copy2 vfs_cap???????????? vfs_shadow_copy vfs_catia?????????? vfs_shell_snap vfs_ceph??????????? vfs_snapper vfs_ceph_snapshots? vfs_streams_depot vfs_commit????????? vfs_streams_xattr vfs_crossrename???? vfs_sync...

...ple: vfs objects = extd_audit recycle > > There are quite a few 'vfs-*' man pages, but they do not seem to listed anywhere, but, from git, this is a full list: > > vfs_acl_xattr vfs_prealloc > vfs_aio_fork vfs_preopen > vfs_aio_pthread vfs_readahead > vfs_audit vfs_readonly > vfs_btrfs vfs_recycle > vfs_cacheprime vfs_shadow_copy2 > vfs_cap vfs_shadow_copy > vfs_catia vfs_shell_snap > vfs_ceph vfs_snapper > vfs_ceph_snapshots vfs_streams_depot > vfs_commit vfs_streams...

Hi all, I am new to this list and have a particular problem, which I cannot get info on: We have several departments and those have rw access to their respective shares. Every once in a while, users inadvertently delete a directory and somebody will eventually contact me to restore this directory from the backup. I would really like to find out who is deleting such directories or files as to

Can I set up anonymous (unauthenticated) printing on a samba server that is also hosting user-level security? I have looked through FAQs and sample setups and don't see it, but I figured I would ask. Thanks in advance, - Pete pmkofodSHIFT2datasages.com

...; be upgraded to 0.6.5.6. > We should upgrade samba as well at least to 4.2.X. This will be done > hopefully in may. It's possible > we hit a bug in the application itself. Meanwhile I'm trying to make > sense of samba log files and > basically fail of spaminess. I configured vfs_audit to get behind > these issues to see who is > responsible. I'm seeing a lot of errors and want to know what to > make out of it. In one day > audit.log increased to 35mb. > > Here a some snippets: > > deadlinerepo|is_offline|fail (Operation not > supported)|scripts/S...

On 11 May 2018 at 18:21, Rowland Penny via samba-technical < samba-technical at lists.samba.org> wrote: > On Fri, 11 May 2018 17:56:44 +0200 > "Timur I. Bakeyev" <timur at com.bat.ru> wrote: > > > On 11 May 2018 at 17:00, Rowland Penny via samba-technical < > > samba-technical at lists.samba.org> wrote: > > > > > On Fri, 11 May 2018

On Thu, 2017-02-09 at 10:53 +1100, Tom Robinson via samba wrote: > On 07/02/17 21:45, Tom Robinson via samba wrote: > > On 07/02/17 17:01, Andrew Bartlett via samba wrote: > > > On Tue, 2017-02-07 at 15:58 +1100, Tom Robinson via samba wrote: > > > > Hi, > > > > \ > > > > Next rid = 13001 > > > > krb5_init_context failed (Invalid

...enable-cups --enable-gnutls --with-acl-support --with-aio-support --with-automount --with-pam --with-pam_smbpass --without-profiling-data --with-quotas --with-syslog --with-utmp --with-winbind --with-ads --with-dnsupdate --with-cluster-support --with-libarchive --without-dmapi --with-shared-modules=vfs_audit,vfs_cap,vfs_catia,vfs_cacheprime,vfs_expand_msdfs,vfs_extd_audit,vfs_fake_perms,vfs_netatalk,vfs_recycle,vfs_streams_depot,vfs_aio_fork,vfs_snapper,vfs_gpfs,idmap_rid,idmap_autorid,idmap_rfc2307,idmap_ad,idmap_tdb2,idmap_hash waf [command] [options] Main commands (example: ./waf build -j4) build...

...and thank you all! >>> >> Pierre >>> >> >>> >> P.S.: Here is the end of the compilation process: >>> >> Compiling modules/vfs_recycle.c with -fPIC >>> >> Building plugin bin/recycle.so >>> >> Compiling modules/vfs_audit.c with -fPIC >>> >> Building plugin bin/audit.so >>> >> Compiling modules/vfs_extd_audit.c with -fPIC >>> >> Building plugin bin/extd_audit.so >>> >> Compiling modules/vfs_full_audit.c with -fPIC >>> >> Building plugin bin/f...

...ined reference to `DEBUGLEVEL_CLASS' modules/vfs_recycle.po(.text+0x1ba0): undefined reference to `DEBUGLEVEL_CLASS_ISSET' modules/vfs_recycle.po(.text+0x1bc7): undefined reference to `dbghdr' modules/vfs_recycle.po(.text+0x1be4): undefined reference to `dbgtext' Compiling modules/vfs_audit.c with -fPIC Building plugin bin/audit.so modules/vfs_audit.po: In function `init_module': modules/vfs_audit.po(.text+0x81c): undefined reference to `smb_register_vfs' Compiling modules/vfs_extd_audit.c with -fPIC Building plugin bin/extd_audit.so modules/vfs_extd_audit.po: In function `aud...

First i would like to say hello to everybody here, because i am new to this ML. So here is the description of my problem: I began with a clean samba installation from the stable branch few monthes ago, everything was just fine, i have a linux box which was sharing files for another linux workstation and two WinXP laptops. The sharing linux box is a debian stable branch O/S, which is my choice

...modules ----------------- The vfs_full_audit module has changed it's default set of monitored successful and failed operations from "all" to "none". That helps to prevent potential denial of service caused by simple addition of the module to the VFS objects. Also, modules vfs_audit, vfs_ext_audit and vfs_full_audit now accept any valid syslog(3) facility, in accordance with the manual page. Database audit support ---------------------- Changes to the Samba AD's sam.ldb database are now logged to Samba's debug log under the "dsdb_audit" debug class and &quo...