similar to: Scripts to extract from Samba logs

I'm running Samba on my Sun ultra 1 with Solaris 2.6 and have noticed that my log.nmb file is growing tremendously. In addition, my log.smb is also growing but not quite as fast. The log.nmb has the following entries repeating every few seconds. Since 3/18/99, my log.nmb file has grown to be 22mb. [1999/06/14 09:13:14, 1] nmbd/nmbd.c:(672) Netbios nameserver version 2.0.0 started.

Hello, I'm Jeff P. Nuebel with Rockwell - Collins in Cedar Rapids, Iowa. We run a large mixed network of Solaris, HP-UX, linux, NT, w2k, and XP. After testing/deploying 2.2.2 to 400+ workstations from 2.0.6 to 2.2.x, in order for W2K and XP to see there home accounts living on departmental UNIX production workstation, we have ran into problems on the HP-UX side of the fence with Windows 2k

http://bugzilla.mindrot.org/show_bug.cgi?id=637 Summary: ssh records that the user has logged out even though an sftp session is active Product: Portable OpenSSH Version: 3.6.1p2 Platform: All OS/Version: All Status: NEW Severity: security Priority: P1 Component: ssh AssignedTo:

Hi, i just want to know if it's possible (i guess it is) to see in a log file the logging (date and hour) of a user. I looked in /var/log/smbd.log, nmbd.log, machine.log but there is no record when the user pat (for example) loged in the network. Does someone knows ? Thanks.

Hi all! wtmp entries are generated when loggin into a system without a command, e.g. "ssh -l user system". When using an additional command executed by ssh on the "other side", no wtmp entry will be generated. So the command "ssh -l user system /bin/csh" will not generate a wtmp entry but the user is logged in ... I have the problem right know. The users are starting

I am using the "UseLogin yes" configuration parameter to call the /usr/bin/login program on SGI Irix, (we are using Irix version 6.5.13). I do this because the SGI login program is AFS awhere and checks out a token for you and I do not want to compile the Kerberos version of sshd, (it is to messy for me to support). Everything seems to work fine accept the wtmp(x) and utmp(x) files do

Joao Carlos Mendes Luis <jonny@coe.ufrj.br> wrote: > I think it would be useful if samba had a utmp log interface. > I know that it's possible to see who is logged with smbstatus, but > sometimes a simple who(1) or w(1) is more efficient and ubiquitous. If you were to search for 'wtmp' in the 1997 archives (via the Samba web pages), you would find one interesting

Hi, I am the Debian GNU/Linux of the Samba package in this distribution. Today I received this bug report but since I don't use the authentication method this user mentions, I can't reproduce the problem. I heard Jeremy Allison said something about a bug in 1.9.18p8 regarding user mappings and posted a patch but since the patch is applied to the version of Samba this user is using, I am

Hello. I am new to R, so my question/problem might be very basic, but I cannot figure out how to solve it. So, I would really appreciate your help. I would like to rename a variable in a very large file (181GB) called "2013.xdf" that is saved on my external hard drive. I tried running the following code to rename variable # 2 in the file and save this change, which produced some

Hi, I''ve been writing a login application to utilize the features of both PAM and libpwdb. Not surprisingly, this has meant looking at some old code.. The following denial of service attack seems to work quite nicely on my ancient Red Hat 3.0.3 system with the standard login application. Perhaps this is not a problem with 4.0? Does anyone know about other distributions? joe$ nvi

I spent some time with 3.0.2p1 to discover why OpenSSH on HP/UX 11.00 64-bit corrupts the /var/adm/wtmp file. The problem is with the utmp structure itself. When building with 32-bit compilation flags, the size of the utmp structure is 60 bytes. When building under 64-bit, the size is 72 bytes. The size difference is due to structure alignment and using basic types whose size changes depending

This is.... odd. We're seeing a *lot* of sshd[8400]: Timeout, client not responding. So I'm trying to find out whose client is having issues. Trying to figure that, after processes are gone, I tried looking in lastlog, which is where it gets odd. lastlog shows root coming in, and it shows a security account coming in... years ago. I see one of our users logging in a goodly number of

Our company recently did a poor job of migrating us to a new EMC system for NAS. We were immediately faced with its inability to translate permissions between UNIX and windows since our company hasn't figured out EMC's secure mode permissions. Since the EMC maintained the proper UNIX permissions, we tried using a samba server on linux to share out an NFS mount of the EMC partition to our

I'm having a perplexing problem with a multiple configuration setup. My setup was working fine until I changed the IP address of my server. Since then, Samba has been misbehaving. All other networking processes are working fine so I don't believe it to be a o/s issue on the system. The system is running Solaris 2.6 using Samba 2.0. My client and the server are on the same TCP/IP class, a

Hi, With reference to my previous mail: 1. I use openssh-2.9p2 on a LynxOS i386 system. The ssh and scp clients work fine. Even sftp from other Linux systems works. But, if I run the sftp client in LynxOS to localhost (LynxOS) or remote sshd in Linux, the authentication succeeds, prints sftp> prompt and then exits. I don't know why this happens. The problem is with the sftp client

Hi, As I mentioned in the following post : http://www.linuxquestions.org/questions/linux-security-4/exclude-a-from-being-logged-in-var-log-wtmp-920865/ Some monitoring softwares like Manage Engine Application Manager use a monitoring user which logins to a servers every 5 minutes via SSH so sometimes we need to be able to exclude this user from being recorded to wtmp,utmp files. Is it possible

Hello, I am writing a routing daemon that is able to assign different gateways to a destination address for different classes of service. Multiple DiffServ Code Point values are mapped into a single class of service. I have accomplished this by using the iptables MARK target to label each packet with a class of service value and then using ''ip rule add fwmark'' to have each

http://bugzilla.mindrot.org/show_bug.cgi?id=980 ------- Additional Comments From senthilkumar_sen at hotpop.com 2005-04-29 00:28 ------- I tried passing SIGTERM to the sshd user process after applying the patch (id=821) and it is not cleaning up the wtmp entries. What would be needed in the patch additionaly so that proper pid is passed at the time of cleaning wtmp entries when SIGTERM is

Hi, For each user connection when privilege separation is enabled, 3 processes are of interest for this topic. 1. sshd:[priv] - privileged user process. 2. sshd:user at pts/0 - user process. 3. shell - shell process. Openssh code writes the #2. sshd:user at pts/0 - user process to the utmp/wtmp file. Is this the correct behaviour.? Or should it write the #3. shell

Hi, I found a bug in all versions of SSH. I'll give you an example when the bug occurs. When I connect to a remote computer using 'ssh user at host.somewhere.in.th.net.com /bin/bash' (or /bin/tcsh) I log into the remote computer and SSHD doesn't log this in wtmp,utmp,secure and lastlog. It's *only* visible in /var/log/messages. That's all I want to tell You. I hope