similar to: Logging file creation with full_audit

On Sat, 5 May 2018 11:11:21 -0300 "Ethy H. Brito via samba" <samba at lists.samba.org> wrote: > On Sat, 5 May 2018 23:40:47 +1000 > Robin G via samba <samba at lists.samba.org> wrote: > > ... > > > > full_audit:prefix = %u|%I|%S > > full_audit:failure = none > > full_audit:success = mkdir rmdir read pread write pwrite

Hi, My apologies if this isn't the right place to ask this question. We have trying to setup auditing in Samba but can't seem to get it to work. The audit log file is empty and we see some entries about file/folders in the /var/log/samba/%m but not the actual audit bits. Can someone please assist or point in the correct direction? syslog = 0 log file = /var/log/samba/%m Log level = 0

On Sun, 6 May 2018 20:05:20 +1000 Robin G <robinghere3 at gmail.com> wrote: > Hi Rowland, > here is the smb.conf. All shares have the full_audit > > [global] > workgroup = RESOLVS > netbios name = DC1 > security = USER > obey pam restrictions = yes > local master = yes > domain master = yes > preferred

On 06. aug. 2018 16:37, Oleg Cherkasov via samba wrote: > On 06. aug. 2018 15:15, Oleg Cherkasov via samba wrote: >> >> This morning three of our FreeBSD-11.1-p11 servers with Samba 4.7.7 >> installations started to ignore ACL settings and reject user access to >> shares.  All three servers are members of DC running on Windows Server >> 2008R2.  Everything has

Hai Stefan, Yes, its always better to ask the list, that way everybody can learn from it. ;-) > Do you think I will have to rejoin it to the domain? No i dont think so. Please note, o dont know anything about gentoo except that they have a good wiki/info pages. If this was debian, then in this case, what i would extra do here, run : samba -b and backup all folders of samba and any thing

On Wed, 30 May 2018 16:03:30 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > We see that it is old ("SWAT", date) and ugly ... > > > # cat /etc/samba/smb.conf > # Samba config file created using SWAT > # from UNKNOWN (192.168.100.66) > # Date: 2012/07/23 14:38:02 It isn't that old;-) You wont be using swat again, it

Hi Rowland, Thank you. I tried both options. The following is using option 2 [global] vfs objects = full_audit [homes] create mask = 0700 directory mask = 0700 browseable = No read only = No path = %H full_audit:prefix = %u|%I|%S full_audit:failure = none full_audit:success = mkdir rmdir read pread write pwrite rename unlink

Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 19:09:37 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> But >> >> # net rpc rights grant "Domänen-Admins" SeDiskOperatorPrivilege -U >> "mydomain\administrator" >> >> fails >> >> also for

I think the issue is permissions related. I changed the log location to /tmp/audit.log and now it is populating. What should be the permissions for /var/log/samba/audit.log? On Mon, May 7, 2018 at 12:29 AM, Robin G <robinghere3 at gmail.com> wrote: > Hi Rowland, > > Thank you. > > I tried both options. The following is using option 2 > [global] > vfs objects =

Samba 4.17.3 on Debian 11.6 [global] unix charset = iso8859-15 security = ads realm = COMP.INTRA workgroup = COMP dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind cache time = 10 winbind use default domain = yes winbind refresh tickets = Yes template homedir = /mnt/MSA2040/smb/Homes/%D/%U domain master = no local master = no preferred master = no idmap

Hi Rowland here is it: [global] netbios name = ID-175 security = ADS workgroup = HQKONTRAST realm = HQ.KONTRAST dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind trusted domains only = no winbind use default domain = yes winbind enum users = yes winbind enum groups = yes winbind

here it is ---- [global] workgroup = all server string = Samba Server load printers = no security = user max log size = 200 time server = yes local master = no os level = 10 log file = /var/log/samba/log.%I printcap name = /dev/null netbios name = new07server-fst # log level = 2 acls:10

Hi, This morning three of our FreeBSD-11.1-p11 servers with Samba 4.7.7 installations started to ignore ACL settings and reject user access to shares.  All three servers are members of DC running on Windows Server 2008R2.  Everything has been running ok for last few year.  I have been upgrading Samba and FreeBSD installations and on last Friday upgraded to the latest packages from

Hello, We have a problem with our Samba server (we tested with two versions 3.6.6 and 4.1.11). When a User edit an Excel file and saves, another user can not save this edited later. The temporary file named like 885E9010 will be created and Excel reports that this file can not be accessed. I have test it with Windows and Mac. Both have the same Problem. This is our samba configuration:

Hi Rowland, here is the smb.conf. All shares have the full_audit [global] workgroup = RESOLVS netbios name = DC1 security = USER obey pam restrictions = yes local master = yes domain master = yes preferred master = yes domain logons = yes os level = 50 #### LDAP definitions #### ### Logging syslog = 0 log file =

Greetings, I am running audits on a restricted file share for smbd 4.9.5-Debian. Messages go to syslog via local5. I am mostly interested in file access and modification, plus the occasional failed connect. The only operations that yield any results appear to be 'opendir' and 'open'. Unfortunately, 'open' is chatty to an extend as to render logging useless. I am getting

Hi, I'm using full_audit vfs module and I'm seeing a lot of duplicated messages in log file. Why does it happens ? How can I configure de smb.conf not to log duplicated information ? Duplicated log: Jan 4 13:27:50 server smbd_audit: [2015/01/04 13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt Jan 4 13:27:50 server smbd_audit: [2015/01/04

Hello, the last two days i have problems with my AD group which is defined in share setting valid users Winbind looks to lost mapping of this group and so no user can connect to this share anymore. When restart winbind service mapping works again until mapping lost again. ls -lsa shows me in issue this: 2 4 drwxr-x--- 63 root 12001

Hi, I use the Van Bell repo, I've upgraded from samba 4.7 to samba 4.9 but now it fails, these are the errors: dic 12 09:14:49 samba4 samba[4881]: task[dnsupdate][4881]: [2018/12/12 09:14:49.372290, 0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) dic 12 09:14:49 samba4 samba[4881]: task[dnsupdate][4881]: /usr/sbin/samba_dnsupdate: Failed to bind to uuid

Hello list! For some reason ACL inheritance is not working on my FS. Anytime anyone creates a folder/file under a share, the permissions are not inherited. My system is a 2DC + a FS running samba 4.10.10. Everything self compiled running on Debian Buster. Several shares were created according to https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs By adding the following lines