similar to: eventlog functionality

Yes, after further research the solution could possibly be to create a python script to monitor the json output in log.samba and push out eventlog formatted events to 'Security' with eventlogadm. Seems a lot of work. The appliance in question also supports getting the necessary info via the netapi call "netsessionenum" I have tried that and a wireshark dump shows samba replying

so I sent you the dump separately. and i tried a persistent drive mapping to \\DC\netlogon which I figured should create a more permanent session as you described. That worked the same. On Tuesday, 11 September 2018, 08:21:50 GMT-7, Andrew Bartlett via samba <samba at lists.samba.org> wrote: On Tue, 2018-09-11 at 15:14 +0000, ray klassen via samba wrote: >   > Yes, after

On Tue, 2018-09-11 at 15:14 +0000, ray klassen via samba wrote: >   > Yes, after further research the solution could possibly be to create > a python script to monitor the json output in log.samba and push out > eventlog formatted events to 'Security' with eventlogadm. Seems a lot > of work. That still assumes the appliance is reading the same type of event log (because the

Are you saying that it could be as simple as adding a case like this one headed up by a 'case 10:' ?                 case 1:                        werr = init_srv_sess_info_1(p,                                                     r->in.info_ctr->ctr.ctr1,                                                     r->in.resume_handle,                                                    

On Mon, 2018-09-10 at 21:26 +0000, ray klassen via samba wrote: > we have recently purchased a security appliance that wants to poll > the DC's for login info (ipaddress:logged-in-user) to give more > granular access to internet resources > this seems possible with samba 4.8.4 > > my smb.conf > >     log level = 1 auth_audit:3 >     eventlog list = Application

'right structure' is a bit above my level of knowledge.  microsoft documentation on NetSessionEnum level 10 has some sample code but I'm not sure how to implement it... On Wednesday, 12 September 2018, 07:59:50 GMT-7, Andrew Bartlett via samba <samba at lists.samba.org> wrote: On Wed, 2018-09-12 at 14:33 +0000, ray klassen via samba wrote: >  Are you saying that

On Wed, 2018-09-12 at 16:23 -0700, Ray Klassen via samba wrote: > On 2018-09-12 09:44 AM, Jeremy Allison via samba wrote: > > > > On Wed, Sep 12, 2018 at 09:30:19AM -0700, Ray Klassen via samba > > wrote: > > > > > > > > > and from the what the hell department. I did it. Comparing > > > > > >

Hi, I have samba 4.4.5 configured as AD wortking correctly, now I need to configure Mcafee Logon Collector to receive security event about user login, this application requires to read security event log about domain controller I have tried to connecto to doamin controller form windows server with connect as and view event log but any event viewer is showed... I have tried to configure

Hi, I have configured samba 4 as a Domain Controller and its working fine. But there is one problem with event logs in samba4. I found this samba wiki page that explain how to setup event logs in samba. Following is the link of that page. "http://wiki.samba.org/index.php/Event_Logging" The problem I came up is when I add "eventlog list" line to smb.conf and restart, it

On Tue, 2018-09-11 at 15:52 +0000, ray klassen via samba wrote: >  so I sent you the dump separately. and i tried a persistent drive > mapping to \\DC\netlogon which I figured should create a more > permanent session as you described. That worked the same. > >     On Tuesday, 11 September 2018, 08:21:50 GMT-7, Andrew Bartlett > via samba <samba at lists.samba.org> wrote:  

On Wed, Sep 12, 2018 at 09:30:19AM -0700, Ray Klassen via samba wrote: > > and from the what the hell department. I did it. Comparing > > https://docs.microsoft.com/en-us/windows/desktop/api/lmshare/ns-lmshare-_session_info_1 > > > and > > https://docs.microsoft.com/en-us/windows/desktop/api/lmshare/ns-lmshare-_session_info_10 > > and > >

On Wed, 2018-09-12 at 15:34 +0000, ray klassen wrote: > Farther down the rabbit hole, I would have to create a > init_srv_sess_info_10 to go with it? Yes. Andrew Bartlett --  Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Farther down the rabbit hole, I would have to create a init_srv_sess_info_10 to go with it? On Wednesday, 12 September 2018, 08:26:11 GMT-7, ray klassen <julius_ahenobarbus at yahoo.co.uk> wrote: 'right structure' is a bit above my level of knowledge.  microsoft documentation on NetSessionEnum level 10 has some sample code but I'm not sure how to implement it...

Hi, We recently migrated the samba-ad-dc from 4.6.5 to 4.7.1. Over a period of last 15 days or so we have been observing that although the samba log rotates, upon rotation, samba will start writing the logs to both the main log file and the <main log>.old file simultaneously. While, the main log file rotates properly, instead of deleting old file and create a new one on rotation, samba

Hi, I have installed the Samba AD DC Version 4.6.3 and we are trying to enable Event Logging. We have followed the procedure given in https://wiki.samba.org/index.php/Event_Logging. But I am unable to get the Samba AD DC to write the events into Log. Also I am not able to figure out where the directory and files are created. We need to generate audit logs of Users and AD DC administrator

Hi, Can we export the samba audit logs (Authentication & Authorisation Logs) to Windows Event Viewer? I am trying to export the authentication & authorisation logs to a Windows Server to be shown in Windows Event Viewer. I read the link - https://wiki.samba.org/index.php/Event_Logging. But couldn't follow much. Can someone throw more light on the procedure, if it is possible? --

On 2018-09-12 09:44 AM, Jeremy Allison via samba wrote: > On Wed, Sep 12, 2018 at 09:30:19AM -0700, Ray Klassen via samba wrote: >> >> and from the what the hell department. I did it. Comparing >> >> https://docs.microsoft.com/en-us/windows/desktop/api/lmshare/ns-lmshare-_session_info_1 >> >> >> and >> >>

Bugs item #28904, was opened at 2011-02-02 10:41 You can respond by visiting: http://rubyforge.org/tracker/?func=detail&atid=411&aid=28904&group_id=85 Category: win32-eventlog Group: Code Status: Open Resolution: None Priority: 3 Submitted By: Jason Bourne (jbourne) Assigned to: Nobody (None) Summary: Gem win32-eventlog v0.5.2 on Ruby 1.9.1 and 1.9.2 Initial Comment: 1.Requirement:

Pe?a wrote: > Hi Dan, > i get a segfault on windows-pr if i run mulitple tails by threading, one thread for each host i''m tailing. > > C:\family\ruby\win-eventlog>dtail.rb > thread/tail-ing Security on host1 > thread/tail-ing Security on host2 > thread/tail-ing Security on host3 > thread/tail-ing Security on host4 > thread/tail-ing Security on host5 >

Hi, Hm, the string inserts are different, too. Any encoding issues? Your user name uses extended ASCII, too, right? Not sure if that''s significant or not. I''ve cc''d the win32utils-devel list to see if anyone has any ideas. Thanks, Dan botp wrote: > On 12/4/07, Daniel Berger <djberg96 at gmail.com> wrote: >> Can you tell us which record numbers in