similar to: audit.so problem !!

Hi all Is anyone using the audit.so module ? I've compiled it and added the appropriate line to smb.conf but I seem to be having a few issues... Here is an snip from syslog... May 13 18:12:44 netvault.crcert.unsw.edu.au smbd_audit[13474]: opendir ./ May 13 18:12:44 netvault.crcert.unsw.edu.au smbd_audit[13474]: opendir . May 13 18:12:50 netvault.crcert.unsw.edu.au smbd_audit[13474]: opendir .

Hi all, Our users have started to complain that some of the time they're unable to save Word documents to our Samba drive - Word tells them the disk is full. I had a look at the logs, and there are a lot of weird "Function not implemented" errors. These have been there for a while, but the "Operation not permitted" ones seem new. Nothing on the server has changed.

HI all, So I'd like to log the user's operations on some shares. As I need to know who made what when. I'd read a previous answer from Andrew about auditing, so I can see loggued operations. Modified smb.conf : > [global] > vfs objects = dfs_samba4, acl_xattr, full_audit > full_audit:success =none > full_audit:failure = none share is : > [journal] > path =

Hi All! I`ve got a problem with samba-3.0.22 on Debian etch. Here is my setting for shared directory: [global] #[snip] # Auth options security = user encrypt passwords = true passdb backend = tdbsam guest map to guest = Bad User username map = /etc/samba/smbusers guest account = nobody invalid users = root password

Hello alAl, after update of our test server to 4.12.1 from 4.11 it crashes. If the vfs module is removed from the config everthing works as before. Logs from the crash see here: .0.31:445] Apr 16 13:36:47 lx-sv-03 smbd_audit[6263]: [2020/04/16 13:36:47.546559, 0] ../../source3/lib/util.c:830(smb_panic_s3) Apr 16 13:36:47 lx-sv-03 smbd_audit[6263]: PANIC (pid 6263): vfs_full_audit.c: name table

I just got an INTERNAL ERROR: Signal 11 in smbd (4.12.10) in something that sids_to_unixids() in source3/winbindd/idmap_hash/idmap_has.c calls and 3 levels down - unfortunately the stack trace doesn?t say what it is - probably optimised into inline code or something. Recently upgraded from Samba 4.12.5 to 4.12.10 (self-compiled). FreeBSD 12.2 It happened right after 10 hours since that smbd

Hi, I'm using full_audit vfs module and I'm seeing a lot of duplicated messages in log file. Why does it happens ? How can I configure de smb.conf not to log duplicated information ? Duplicated log: Jan 4 13:27:50 server smbd_audit: [2015/01/04 13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt Jan 4 13:27:50 server smbd_audit: [2015/01/04

Running SAMBA 2.2.7a compiled with Audit support, enabled on a share: [global] workgroup = HCAT server string = Samba Server for HCAT hosts allow = xxx.xxx. yyy.yyy.yyy. load printers = no log file = /var/log/log.%m max log size = 50 security = user encrypt passwords =

Package: Logcheck Version: 1.2.54 Distro: Debian Etch (stable) Kernel: 2.6.18-5-686 #1 SMP I'm trying to force logcheck (reportlevel=server) to ignore smbd_audit logs. smbd_audit is a vfs module of samba. It writes logs into /var/log/syslog file. Typical log looks like this: Oct 24 08:36:14 server4 smbd_audit: Documents|Johnson|192.168.50.19|unlink ok|Projects/doc1.pdf I've added the

Greetings. I have samba 2.2.6 installed on FreeBSD 4.7-RC, from ports, compiled with audit/syslog/recycle/winbind. I try to use audit via syslogd. I created the following share: ===Cut=== [price] create mask = 664 security mask = 644 directory security mask = 000 directory mask = 755 comment = Fresh Norma PriceList path = /usr/local/public/ftp/pub/price valid users = emz ramil hunter alex ckv

Greetings ... I saw a question about this go out a little while ago, I was wondering, if they are bad, or if I can just ignore them? I am using a Samba 3.0.2rc1 if that makes a differance ... Thanks Mailed Lee Jan 29 09:58:09 nasrec smbd_audit[19242]: rmdir ./ failed: Invalid argument Jan 29 09:58:09 nasrec smbd_audit[19242]: [2004/01/29 09:58:09, 0]

Folks, Given recent discussion on this list I have just updated the master Samba-Docs information regarding the Debug Class (Log Level) settings and the audit information each causes to be logged. This will appear in on-line versions of the Samba-HOWTO-Collection within 24 hours. To obtain an updated version point your browser at: http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

Hi all, I just upgraded from Samba 3.0 to 3.2 and found that the old smbd_audit module no longer works. This module logs all file accesses (especially deletes and renames) into a MySQL database (with a web frontend) and is extremely useful for us as sometimes our users accidentally move things around when they're trying to double-click on folder, and by reviewing the audit trail we can track

Hi. I got this email-address from BUGS.txt file of the samba distribution. I read it carefully. I got configured and working samba, I work with samba above one year. I still have a problem, and, according to the samba log output, I think it's probably a bug. When I try to use the shares with audit support, I have my Far disconnected and telling me that something is wrong. I have that

no takers regarding this issue ? is anyone experiancing the same problems ? > ipguy <ip.guy@optushome.com.au> wrote: > > Hi all > > I’m currently using the recycle VFS module with samba.2.2.8a and > think I > may have discovered a bug. > > My recycle.conf lists TOUCH as a required option... > > mode = KEEP_DIRECTORIES|VERSIONS|TOUCH > >

hi all I have a stupid newbie question... but some background first. I compiled samba "--with-utmp --with-msdfs --with-winbind" as a domain member server to migrate our file server from NT the samba server was joined to the domain winbind is working as expected, authenticating users via the PDC (NT4) I have created some folders on the Linux filesystem with "chmod 777" access.

hi all. just wondering if anyone has setup a samba cluster for speed/failover/redundency ? i'd love to hear from you... thanks -ipguy

*This message was transferred with a trial version of CommuniGate(r) Pro* Greetings, aLL. There's samba-3.0.23d, running on FreeBSD-5.3 as Win2000 AD domain member. For logging user activity on share VFS module full_audit is used (with help of syslog). Logging works well, but some errors appears in log, especially when changing ACLs on share file objects from win-clients: === Nov 30

Dear Samba team. I have hybrid network with MSDOS / Win9x(ME) / Win2k/XP(NT) computers at home. I'm using Samba as PDC. W9x/me clients works fine as so as with roving profiles, but I'm experiencing problems with w2k, NT4/XP just not test because i'm testing on my box at home and when it'll work fine then I'll go to clients from which smaller part has XPs installed on PC.

When VFS full_audit is activated the server doesn't allow users to write changes in any file. The log vfs:10 shows: Jan 12 22:22:00 loginserver smbd_audit: aaaa.bbbb|192.168.23.10|get_real_filename|fail (Operation not supported)|/Novo Documento de Texto.txt->(null) Jan 12 22:22:00 loginserver smbd_audit: aaaa.bbbb|192.168.23.10|fchmod_acl|fail (No data available)|Novo Documento de