search for: vfs_full_audit

Displaying 20 results from an estimated 127 matches for "vfs_full_audit".

2012 Oct 08
1
samba4 64bit-portability-issue
Hi, I'm trying to build samba-4.0.0rc2.tar.gz on build.opensuse.org and I'm getting this error message: E: samba4 64bit-portability-issue ../source3/modules/vfs_full_audit.c:1837, 1853 Can anyone help me solving this error ? This is what I found on the log: [ 1453s] ../source3/modules/vfs_full_audit.c: In function 'smb_full_audit_sys_acl_blob_get_file': [ 1453s] ../source3/modules/vfs_full_audit.c:1837:9: warning: assignment makes pointer from in...
2018 May 08
2
vfs_full_audit and facility 'auth'...
Mandi! Rowland Penny via samba In chel di` si favelave... > >From 'man vfs_full_audit' > > full_audit:facility = FACILITY > Log messages to the named syslog(3) facility. > > See 'man syslog' for the 'facilities' you can use. [2018/05/08 17:34:42.388486, 0] ../source3/param/loadparm.c:1179(lp_enum) lp_enum(LOG_AUTH,enum): val...
2018 May 10
2
vfs_full_audit and facility 'auth'...
On Thu, 10 May 2018 15:31:23 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > > > >From 'man vfs_full_audit' > > > > > > full_audit:facility = FACILITY > > > Log messages to the named syslog(3) facility. > > > > > > See 'man syslog' for the 'facilities' you can use. > > > [2018/05/08 17:34:42.388486, > >...
2018 May 08
2
vfs_full_audit and facility 'auth'...
I've tried to setup VFS full audit facility in some share, like: vfs objects = [...] full_audit full_audit:prefix = %S|%d|%I|%M|%u full_audit:success = mkdir rmdir read pread write pwrite rename unlink full_audit:failure = none full_audit:facility = auth full_audit:priority = info but samba refuse 'full_audit:facility = auth' as a good
2018 May 11
0
vfs_full_audit and facility 'auth'...
...lp_enum(LOG_AUTH,enum): > > value is not in enum_list! > > > > so seems that 'auth' and also 'LOG_AUTH' is not a valid keyword... > > > > > > (debian jessie, systemd, samba 4.5 from louis repository) > > > > OK, if you look in 'man vfs_full_audit' is says this: > > full_audit:facility = FACILITY > Log messages to the named syslog(3) facility. > > If you then examine 'man syslog', 'LOG_AUTH' is a listed facility, but > I can confirm that using it with vfs_full_audit doesn't work, &...
2023 Mar 22
1
Failure in "man 8 vfs_full_audit"?
...open opendir full_audit:failure = all !open full_audit:facility = LOCAL7 full_audit:priority = ALERT But: - opendir is not shown within complete set of Samba VFS operations. - setting "full_audit:success = open opendir" results in: [2023/03/22 07:54:26.959285, 0] ../../source3/modules/vfs_full_audit.c:566(init_bitmap) init_bitmap: Could not find opname opendir Cheers, Torsten
2018 May 11
4
vfs_full_audit and facility 'auth'...
.../source3/param/loadparm.c:1179(lp_enum) lp_enum(LOG_AUTH,enum): > value is not in enum_list! > > so seems that 'auth' and also 'LOG_AUTH' is not a valid keyword... > > > (debian jessie, systemd, samba 4.5 from louis repository) > OK, if you look in 'man vfs_full_audit' is says this: full_audit:facility = FACILITY Log messages to the named syslog(3) facility. If you then examine 'man syslog', 'LOG_AUTH' is a listed facility, but I can confirm that using it with vfs_full_audit doesn't work, 'LOCAL5' does. Does...
2015 Feb 11
0
Error message when set up samba audit log
....el6.x86_64 samba-common-3.6.23-12.el6.x86_64 samba-winbind-3.6.23-12.el6.x86_64 samba-client-3.6.23-12.el6.x86_64 samba4-libs-4.0.0-64.el6.rc4.x86_64 samba-winbind-clients-3.6.23-12.el6.x86_64 === Error messages messages:Feb 5 18:34:19 ndfss smbd[35932]: [2015/02/05 18:34:19.121890, 0] modules/vfs_full_audit.c:497(init_bitmap) messages:Feb 5 18:34:24 ndfss smbd[35979]: [2015/02/05 18:34:24.197578, 0] modules/vfs_full_audit.c:497(init_bitmap) messages:Feb 5 18:34:44 ndfss smbd[35931]: [2015/02/05 18:34:44.731389, 0] modules/vfs_full_audit.c:497(init_bitmap) messages:Feb 5 18:35:00 ndfss smbd[35985]...
2004 Oct 21
0
compile errors samba 3.0.7 vfs
...ference to `DEBUGLEVEL_CLASS' modules/vfs_extd_audit.po(.text+0xfc0): undefined reference to `DEBUGLEVEL_CLASS_ISSET' modules/vfs_extd_audit.po(.text+0xfe7): undefined reference to `dbghdr' modules/vfs_extd_audit.po(.text+0x1004): undefined reference to `dbgtext' Compiling modules/vfs_full_audit.c with -fPIC Building plugin bin/full_audit.so modules/vfs_full_audit.po: In function `audit_prefix': modules/vfs_full_audit.po(.text+0x63): undefined reference to `lp_parm_const_string' modules/vfs_full_audit.po(.text+0x7c): undefined reference to `safe_strcpy_fn' modules/vfs_full_au...
2018 May 14
0
vfs_full_audit and facility 'auth'...
...t lists.samba.org] Namens > Marco Gaiarin via samba > Verzonden: maandag 14 mei 2018 15:23 > Aan: Timur I. Bakeyev > CC: Stefan Metzmacher; samba-technical at lists.samba.org; > samba at lists.samba.org; Alexander Bokovoy; vl at samba.org; Jeremy Allison > Onderwerp: Re: [Samba] vfs_full_audit and facility 'auth'... > > Mandi! Timur I. Bakeyev via samba > In chel di` si favelave... > > > Originally topic starter wanted to put the AUTH facility > into the config. > > I've fired up: > > https://bugzilla.samba.org/show_bug.cgi?id=13436 &g...
2015 Jan 24
2
how to add new vfs module to build...
Hi, I'm working with version 4.1.6 to create a new VFS module. I've been experimenting by just modifying one of the existing module source files (vfs_full_audit.c) and that rebuilds as expected. I want to step back now and create a unique module name, but I'm having trouble getting it to be included in the build. Using vfs_full_audit.c as my example, I've added entries into source3/wscript and source3/modules/wscript_build. Then I run make at the...
2017 Sep 19
3
How to track attempted breakins, authentication failure logging
This may have been asked before, but I can't find it. I am getting repeated external attempted to log into our AD/DC (running Samba 4.4.14). In /var/log/samba/log.samba I get entried like: 2017/09/19 05:02:25.562957, 2] ../source4/auth/ntlm/auth.c:430(auth_check_password_recv) auth_check_password_recv: sam_ignoredomain authentication for user [HPRS\333] FAILED with error
2018 May 11
3
vfs_full_audit and facility 'auth'...
On 11 May 2018 at 23:53, Jeremy Allison <jra at samba.org> wrote: > On Fri, May 11, 2018 at 09:33:15PM +0100, Rowland Penny via > samba-technical wrote: > > On Fri, 11 May 2018 13:17:52 -0700 > > Jeremy Allison <jra at samba.org> wrote: > > > > > On Fri, May 11, 2018 at 09:56:47PM +0200, Timur I. Bakeyev via samba > > > wrote: > > >
2018 May 11
3
vfs_full_audit and facility 'auth'...
On 11 May 2018 at 18:21, Rowland Penny via samba-technical < samba-technical at lists.samba.org> wrote: > On Fri, 11 May 2018 17:56:44 +0200 > "Timur I. Bakeyev" <timur at com.bat.ru> wrote: > > > On 11 May 2018 at 17:00, Rowland Penny via samba-technical < > > samba-technical at lists.samba.org> wrote: > > > > > On Fri, 11 May 2018
2018 May 11
0
vfs_full_audit and facility 'auth'...
On Fri, 11 May 2018 17:56:44 +0200 "Timur I. Bakeyev" <timur at com.bat.ru> wrote: > On 11 May 2018 at 17:00, Rowland Penny via samba-technical < > samba-technical at lists.samba.org> wrote: > > > On Fri, 11 May 2018 16:46:55 +0200 > > "Timur I. Bakeyev" <timur at freebsd.org> wrote: > > > static const struct enum_list
2012 May 08
0
Samba audit logging not working as expected
...wins support = Yes remote announce = 10.8.0.6/ACUR 10.8.0.10/ACUR 10.8.0.14/ACUR 10.8.0.18/ACUR 10.8.0.22/ACUR 10.8.0.26/ACUR 10.8.0.30/ACUR 10.8.0.34/ACUR 10.8.0.38/ACUR 10.8.0.42/ACUR 10.8.0.46/ACUR 10.8.0.50/ACUR 10.8.0.54/ACUR 10.8.0.60/ACUR 10.8.0.64/ACUR 10.8.0.68/ACUR vfs_full_audit:priority = NOTICE vfs_full_audit:facility = LOCAL7 vfs_full_audit:failure = all vfs_full_audit:success = all vfs_full_audit:prefix = %u|%I|%S guest ok = Yes vfs objects = full_audit ===== smb.conf ends ===== Here is /etc/rsyslog.d/samba-audit.conf (f...
2018 May 11
2
vfs_full_audit and facility 'auth'...
On Fri, 11 May 2018 13:17:52 -0700 Jeremy Allison <jra at samba.org> wrote: > On Fri, May 11, 2018 at 09:56:47PM +0200, Timur I. Bakeyev via samba > wrote: > > > > > Fixing it in both ways is easy, but it would be nice to hear from > > the developers, why did they choose such a limited set of syslog > > facilities. > > I don't know. The limited
2020 Nov 10
2
vfs readahead && windows server 2016/2019?
...-> https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html#AIOREADSIZE - *write cache* -> https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html#WRITECACHESIZE - *vfs_cacheprime * https://www.samba.org/samba/docs/current/man-html/vfs_cacheprime.8.html - *vfs_full_audit* https://www.samba.org/samba/docs/current/man-html/vfs_full_audit.8.html If you were to rank the likelihood of these helping, how would you rank them? Are they still applicable in modern Windows and RHEL? Background... Our top challenge right now is Windows Explorer, specifically when you get...
2015 Jan 26
1
how to add new vfs module to build...
On 1/24/2015 3:03 PM, Volker Lendecke wrote: > On Sat, Jan 24, 2015 at 01:35:40PM -0500, Ed Sutter wrote: >> Hi, >> I'm working with version 4.1.6 to create a new VFS module. >> I've been experimenting by just modifying one of the existing >> module source files (vfs_full_audit.c) and that rebuilds as expected. >> >> I want to step back now and create a unique module name, but >> I'm having trouble getting it to be included in the build. >> Using vfs_full_audit.c as my example, I've added entries into >> source3/wscript and source3/mo...
2013 Oct 17
1
Samba 4 auditing
Greetings everyone !!! Maybe is a dumb question, but i couldn't find anything about it on samba wiki and no topics on mailing list since i was subscribed, is it possible audit files and folder user operation on active directory mode the same way is done with vfs_full_audit on old pdc style mode ? Regards Dante F. B. Colo