similar to: Need help for eventlogadm

On Tue, 2018-09-11 at 15:14 +0000, ray klassen via samba wrote: >   > Yes, after further research the solution could possibly be to create > a python script to monitor the json output in log.samba and push out > eventlog formatted events to 'Security' with eventlogadm. Seems a lot > of work. That still assumes the appliance is reading the same type of event log (because the

Yes, after further research the solution could possibly be to create a python script to monitor the json output in log.samba and push out eventlog formatted events to 'Security' with eventlogadm. Seems a lot of work. The appliance in question also supports getting the necessary info via the netapi call "netsessionenum" I have tried that and a wireshark dump shows samba replying

I'd like to make the data in the logs from Samba4 available to view in MsWindows Eventlog Viewer. The most information I can find on this subject is this link: https://wiki.samba.org/index.php/Event_Logging Here's what I think I understand from that article: 1) Tell samba which event log 'names' to create (and somehow report to the Ms. EventViewer); 2) Find/develop a program

so I sent you the dump separately. and i tried a persistent drive mapping to \\DC\netlogon which I figured should create a more permanent session as you described. That worked the same. On Tuesday, 11 September 2018, 08:21:50 GMT-7, Andrew Bartlett via samba <samba at lists.samba.org> wrote: On Tue, 2018-09-11 at 15:14 +0000, ray klassen via samba wrote: >   > Yes, after

Hi, I have configured samba 4 as a Domain Controller and its working fine. But there is one problem with event logs in samba4. I found this samba wiki page that explain how to setup event logs in samba. Following is the link of that page. "http://wiki.samba.org/index.php/Event_Logging" The problem I came up is when I add "eventlog list" line to smb.conf and restart, it

we have recently purchased a security appliance that wants to poll the DC's for login info (ipaddress:logged-in-user) to give more granular access to internet resources this seems possible with samba 4.8.4 my smb.conf     log level = 1 auth_audit:3     eventlog list = Application System Security SyslogLinux It doesn't look like audit events are ending up in

Hi, I have samba 4.4.5 configured as AD wortking correctly, now I need to configure Mcafee Logon Collector to receive security event about user login, this application requires to read security event log about domain controller I have tried to connecto to doamin controller form windows server with connect as and view event log but any event viewer is showed... I have tried to configure

On Mon, 2018-09-10 at 21:26 +0000, ray klassen via samba wrote: > we have recently purchased a security appliance that wants to poll > the DC's for login info (ipaddress:logged-in-user) to give more > granular access to internet resources > this seems possible with samba 4.8.4 > > my smb.conf > >     log level = 1 auth_audit:3 >     eventlog list = Application

Hi, I have installed the Samba AD DC Version 4.6.3 and we are trying to enable Event Logging. We have followed the procedure given in https://wiki.samba.org/index.php/Event_Logging. But I am unable to get the Samba AD DC to write the events into Log. Also I am not able to figure out where the directory and files are created. We need to generate audit logs of Users and AD DC administrator

Hi all, I have a RHEL5-update 3 x86_64 system, and I installed Samba 3.2.14-40 (from http://ftp.sernet.com/pub/samba/tested/rhel/5/x86_64/ ). I'm using OpenLDAP ( 2.3.43-3.el5 ,comes with RHEL5u3) as backend for winbind+samba in my PDC. With samba-3.0.33 that comes with RHEL5u3, i dont get that "eventlogadm" works how explain in http://wiki.samba.org/index.php/Event_Logging: For

clients on the domain. But I can not mount shares from the other Samba server; I always get "Permission denied". $ sudo mount -t cifs //workhorse/OldHome /mnt/OldHome -o username=DACRIB+turgon --verbose Password: mount.cifs kernel mount options: unc=//workhorse\OldHome,ver=1,rw,username=DACRIB+turgon,ip=10.0.0.20,pass=******** mount error(13): Permission denied Refer to the

I've configured a domain member server using version 4.4.7 on FreeBSD. I'm able to manage groups and shares from the Computer Management tool on a Windows 2008 server, but when I connect to the samba member server the following error occurs: Event Viewer cannot connect to computer 'XXXXXX'. The error reported is : The RPC server is unavailable. Clicking OK allows me to proceed.

On Tue, 2018-09-11 at 15:52 +0000, ray klassen via samba wrote: >  so I sent you the dump separately. and i tried a persistent drive > mapping to \\DC\netlogon which I figured should create a more > permanent session as you described. That worked the same. > >     On Tuesday, 11 September 2018, 08:21:50 GMT-7, Andrew Bartlett > via samba <samba at lists.samba.org> wrote:  

Hello, after an update from Samba 2.2.12 to 3.0.22 and running the daemons 2-3 days my Samba Server freeze the whole Server. First the clients get connection problems, timing out to access the shares and then some minutes later the whole Server freeze, i can't even logon on the console. Only a cold reset is possible. I convert all files from latin-1 to a UTF-8 and then from UTF-8 to ISO-8859-1

Are you saying that it could be as simple as adding a case like this one headed up by a 'case 10:' ?                 case 1:                        werr = init_srv_sess_info_1(p,                                                     r->in.info_ctr->ctr.ctr1,                                                     r->in.resume_handle,                                                    

Hi, Continuing on the same subject, the VARIABLE SUBSTITUTIONS are not working. for example, I want to have the date & time attached to the samba log file. Hence I modified the smb.conf log file = /var/log/samba/samba.%T.log The file with name "samba.%T.log" gets created in /var/log/samba folder and %T will not get substituted with current date & time. I request for your

Hi, We recently migrated the samba-ad-dc from 4.6.5 to 4.7.1. Over a period of last 15 days or so we have been observing that although the samba log rotates, upon rotation, samba will start writing the logs to both the main log file and the <main log>.old file simultaneously. While, the main log file rotates properly, instead of deleting old file and create a new one on rotation, samba

Some may remember all my issues trying to get one Samba server to mount shares from another Samba server. Well, I decided to completely reformat my laptop with Ubuntu 10.04, and start over (leaving the other Samba server at Ubuntu 9.10) (to recap - I have a Win2003 AD (not R2), with SFU installed) I took the smb.conf from the 9.10 server (running 3.4.0) and loaded it on the Ubuntu 10.04 laptop,

I've been at this for days, and making no headway. It's very discouraging. I have a Win2003 domain, that has the Services for Unix extensions installed. I am trying to have multiple Samba servers as domain members. (in my case, one desktop sharing files, and one laptop, accessing the shares). And at the moment, it doesn't (fully) work. Each Samba server can see shares from the other.

On Wed, 2016-09-14 at 11:38 +0200, Trenta sis via samba wrote: > Hi, > > > I have samba 4.4.5 configured as AD wortking correctly, now I need to > configure Mcafee Logon Collector to receive security event about user > login, this application requires to read security event log about > domain > controller > I have tried to connecto to doamin controller form windows