similar to: Samba Auditing

Hi, Since Samba-3.0.20 I am unable to compile sa-samba.c vfs module, which I have downloaded from the internet for auditing purpose, prior to this version it was getting compiled cleanly, I am receiving CPLUSPLUS error, Please suggest as what need to be done in order to resolve it. Thanks, Honey -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed

Hi, I have installed Samba 3.0.5 as PDC with 3 samba domain member server using winbind for a big network of windows 98 and windows xp, now I would like to set up auditing of only the files which gets deleted. Please suggest me possible ways of setting the auditing for this purpose, I have already tested VFS/audit modules, but that slows down the server too much. Please suggest me some solution.

Hello, I have installed samba 3.0.2a as PDC and BDC, I am able to add windows xp to domain and have added all the registry patches to windows xp, but when it comes to domain logon on windows xp client, the behaviour is very erratic, sometimes I am able to logon to domain and sometimes the domain logon fails, we need to restart the xp machine and keep trying to the domain logon. The error we

Hi, I am using security=share, and have just upgraded samba server from 3.0.2 to 3.0.4, after upgrading write list option had stopped working. Below is the contents of smb.conf file, which was working with 3.0.2 but not with 3.0.4 [global] workgroup = CSW netbios name = DATA8 security = share server string = Test Samba 3.0 os level = 42 guest account = smbguest log file =

Folks, Given recent discussion on this list I have just updated the master Samba-Docs information regarding the Debug Class (Log Level) settings and the audit information each causes to be logged. This will appear in on-line versions of the Samba-HOWTO-Collection within 24 hours. To obtain an updated version point your browser at: http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

add to each share writeable = yes or read-only = no This Helps! Rauno -----Original Message----- From: werner maes [mailto:werner.maes@cc.kuleuven.ac.be] Sent: 11. mai 2004. a. 16:19 To: samba@samba.org Subject: [Samba] BUG: Vfs audit module & samba 3.0.4 ==> share unaccessible Hello Maybe there's a bug in samba-3.0.4. The following configuration does NO longer work. It did

Hello Maybe there's a bug in samba-3.0.4. The following configuration does NO longer work. It did work fine in samba-3.0.2a. I did not test samba-3.0.3 The share is no longer accessible !!! [BKHI-CC3] path = /home/BKHI-CC3 valid users = @BKHI-CC3-R, @BKHI-CC3-W write list = @BKHI-CC3-W force group = +BKHI-CC3-W create mask = 0664

This problem continues under 3.0.4 on Solaris 8 - attempting to use the "vfs object" parameter in a share prevents access to the share and results in the following in the log files: [2004/05/10 16:04:57, 0] lib/module.c:do_smb_load_module(57) Error trying to resolve symbol 'init_module' in /usr/local/lib/vfs/audit.so: ld.so.1: /usr/local/sbin/smbd: fatal:

I would like to turn on auditing for a particular share and have all auditing go to the username.machinename.log files. If I turn on audit then no matter which way I configure it, it either goes to just syslog, or both. My goal is to just log to the samba files and take the wieght off of syslog. I have searched and searched but can't find but a solution that works. Any help would be

Hi, My apologies if this isn't the right place to ask this question. We have trying to setup auditing in Samba but can't seem to get it to work. The audit log file is empty and we see some entries about file/folders in the /var/log/samba/%m but not the actual audit bits. Can someone please assist or point in the correct direction? syslog = 0 log file = /var/log/samba/%m Log level = 0

> It was just a guess that it was a DC, but it was based on this: > I was experiencing problems when I simultaneously enabled shadow_copy2 and full_audit modules. > When enabled, problems occurred in the sysvol folder. > So how can you be having problems in 'sysvol' if this is a domain > member ? > I think you should post your smb.conf. > Rowland As for the

Is there anyone running Samba 3.0.X on Solaris 8 that has VFS working? I am dying to know if this is a problem with my setup or if there is something else going on. If you do have it working, please let me know which module. Thanks. Bill Knox Lead Operating Systems Programmer/Analyst The MITRE Corporation ---------- Forwarded message ---------- Date: Tue, 25 May 2004 13:54:26 -0400

HI all, So I'd like to log the user's operations on some shares. As I need to know who made what when. I'd read a previous answer from Andrew about auditing, so I can see loggued operations. Modified smb.conf : > [global] > vfs objects = dfs_samba4, acl_xattr, full_audit > full_audit:success =none > full_audit:failure = none share is : > [journal] > path =

######################### kernel auditing project ########################### This is a mission statement for a project under way and ready to get going. The Linux kernel auditing project(LKAP). The purpose of this project is self-explanatory. It's an attempt to audit the linux kernel for any security vulnerabilities and/or holes and/or possible vulnerabilities and/or possible holes, and

Does anyone know of any Linux-based filesystem that does file-level auditing and logs based on username? Does ext2/3 do such auditing (stock or with patches)? I would like a filesystem that can be told to audit and log file deletions and log the username that deleted the file (similar to auditing on NTFS). I know, I should be using file permissions to prevent this type of deletion from

Any ideas why a vfs module loads successfully then can't be found? [2005/01/30 03:52:08, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2005/01/30 03:52:08, 3] smbd/vfs.c:vfs_init_default(203) Initialising default vfs hooks [2005/01/30 03:52:08, 3] smbd/vfs.c:vfs_init_custom(229) Initialising custom vfs hooks from [/usr/lib/samba/vfs/audit.so]

I want to include common auditing functionality in my models. This involves storing the changes made to a model in a seperate table : I have created the functions in an Audit module : module Audit before_update :before_changes after_update :after_changes def before_changes old=self.class.find(id).attributes @changes=[] attributes.each do |key, val| if val != old[key]

hi, i use samba 2.2.8a on a share i wanted to use the audit.so and recycle.so modules. in my smb.conf i added the following share [dir] comment = dir valid users = @edv writeable = yes create mode = 777 path = /data/ directory mode = 777 vfs object = /usr/lib/samba/vfs/audit.so vfs object = /usr/lib/samba/vfs/recycle.so vfs options = /etc/samba/recycle.conf with this config the recycle bin is

Hi, I am using Samba 3.0.4 as PDC and have 3 domain member server, I would like to setup a logging of the files which gets deleted by the user. I have already used Audit Modules but that slows down the samba server very much, please suggest me possible ways of achieving the desired result. Thanks, Honey

I think the issue is permissions related. I changed the log location to /tmp/audit.log and now it is populating. What should be the permissions for /var/log/samba/audit.log? On Mon, May 7, 2018 at 12:29 AM, Robin G <robinghere3 at gmail.com> wrote: > Hi Rowland, > > Thank you. > > I tried both options. The following is using option 2 > [global] > vfs objects =