similar to: Two Qs: support special chars in filenames and auditing

Hi I have setup user auditing with extd_audit and its working fine , i have it logging to log file = /var/log/samba/%U.%m.log and that is great for identifying the users and machines ...But the syslog entries don't have a username or host information and I want to use syslog to ship the logs to a central logging server. Can I configure it to log username and hostname (or ip) to syslog with

Greetings everyone !!! Maybe is a dumb question, but i couldn't find anything about it on samba wiki and no topics on mailing list since i was subscribed, is it possible audit files and folder user operation on active directory mode the same way is done with vfs_full_audit on old pdc style mode ? Regards Dante F. B. Colo

Hello, I'm looking for a way to log the following attributes for all authentication activity (LDAP bind, Kerberos, SMB / CIFS, etc.). I would like to see: * Principle name (user name) * Source IP * Timestamp (including at least seconds if not milliseconds) * Authentication result (success / failure) * Reason for failure: bad password, account lockout, account expired,

Hello, Some mischief happened and I have been asked if I can find out who was logged into their computers within a specific off-hours time frame. My logs for that time frame happened to be running at debug level 3, so I have been looking through them and trying to figure out how to recognize a workstation login. I find lines beginning with auth_check_password_send that seem like reasonably good

Hi, I suppose this question must have been posted a hundred times, but Google brings up nothing useful: Consider "The Wall" from Pink Floyd in an MP3 collection. There's "In The Flesh.mp3" and "In The Flesh?.mp3" as tracks. Or, another example in an MP3 collection: There's a Band called "Stellar", but there's also a band called

HI all, So I'd like to log the user's operations on some shares. As I need to know who made what when. I'd read a previous answer from Andrew about auditing, so I can see loggued operations. Modified smb.conf : > [global] > vfs objects = dfs_samba4, acl_xattr, full_audit > full_audit:success =none > full_audit:failure = none share is : > [journal] > path =

Hi folks! I upgraded a red hat linux fileserver (kernel version 2.4.18-14) from samba 2.x to samba 3.02. After the upgrade, the special chars in windows filenames (German Umlaute) were no more visible to clients but either substituted with a little black rectangle or completely suppressed - depending on the client operating system (W2000/W98). Within the archived list I found a hint that the

Hello, I believe there may be a bug with accounts getting erroneously locked in v4.4.5+. I've checked at all the Internet facing services to find the source of account lockout and I've done packet captures at the DCs, but I cannot find the source of lockout. I've got several accounts locking out for seemingly no reason including some service accounts where the passwords

Hi, I get this error when starting bgdrb using "rake backgroundrb:start" (on a Mac using bgdrb 0.2.0): /Users/gl/Projects/xxxxx/xxxxx/vendor/plugins/backgroundrb/server/lib/ backgroundrb_server.rb:33:in `format_message'': undefined method `strftime'' for "2006-11-22T12:34:18.524572 ":String (NoMethodError) from /usr/lib/ruby/1.8/logger.rb:320:in

Hi! I am working with Applaince Sophos XG, i am used API(Desenvoving  in test) with audit log samba to information IP and user in log in DC, but i need information about logout, is possible obtein in Samba Audit ? S.O.: Ubuntu 18.04 Samba: 4.9.4 Copilated version Thanks Regards;

Hi, it would be nice to be able to specify workers as singletons. By this I mean that every call to the new_worker method returns the same instance of said worker. This can be done transparently either by adding a new argument to new_worker (something like :singleton => true) or adding a new method, like I did in my installation of BackgrounDrb: def get_worker_by_class(klass)

As &qs->qs_lock is also acquired by the timer o2net_idle_timer() which executes under softirq context, code executing under process context should disable irq before acquiring the lock, otherwise deadlock could happen if the process context hold the lock then preempt by the timer. Possible deadlock scenario: o2quo_make_decision (workqueue) -> spin_lock(&qs->qs_lock);

As &qs->qs_lock is also acquired by the timer o2net_idle_timer() which executes under softirq context, code executing under process context should disable irq before acquiring the lock, otherwise deadlock could happen if the process context hold the lock then preempt by the timer. Possible deadlock scenario: o2quo_make_decision (workqueue) -> spin_lock(&qs->qs_lock);

This may have been asked before, but I can't find it. I am getting repeated external attempted to log into our AD/DC (running Samba 4.4.14). In /var/log/samba/log.samba I get entried like: 2017/09/19 05:02:25.562957, 2] ../source4/auth/ntlm/auth.c:430(auth_check_password_recv) auth_check_password_recv: sam_ignoredomain authentication for user [HPRS\333] FAILED with error

On Apr 4, 2015, at 7:19 PM, Richard Flint <richard.flint at gmail.com> wrote: > More extensive debugging by running the driver sudo ./nutdrv_qx -u root -a MY_UPS -DDDDDD indicates the driver works normally then will randomly stop working at stop "send: QS". The debug logs show values successfully retrieved repeatedly until something like: > .... > Quick update... >

Hi, I'm working with version 4.1.6 to create a new VFS module. I've been experimenting by just modifying one of the existing module source files (vfs_full_audit.c) and that rebuilds as expected. I want to step back now and create a unique module name, but I'm having trouble getting it to be included in the build. Using vfs_full_audit.c as my example, I've added entries into

Hi Jan, I am now reading quota support in ocfs2 and have some qs. Wish you can help me clarify it. Thanks. ocfs2_quota_write: In the comment, you said that "we know the transaction is already started", so it should be called within a transaction. But in this function, we call ocfs2_extend_no_holes and ocfs2_simple_size_update which will start another transaction. So we can survive

Hi All, Now that I have winbind running and wins support = yes in my smb.conf, am I missing something? Like setting up WINS, configuring it, populating it, etc.? Can someone point me to documentation on what to do (administrate) WINS? Many thanks, -T

Having some issues with: samba_dnsupdate Specifically: /usr/bin/nsupdate: cannot specify -g or -o, program not linked with GSS API Library I've looked through the script, and cannot find these options called. If anyone can point me to where they're called I'd appreciate it. Cheers, TMS III

On Tue, Jul 12, 2016 at 11:07:04PM -0500, Arthur Ramsey wrote: > Hello, > > I'm looking for a way to log the following attributes for all > authentication activity (LDAP bind, Kerberos, SMB / CIFS, etc.). > > I would like to see: > > * Principle name (user name) > * Source IP > * Timestamp (including at least seconds if not milliseconds) > *