[Samba] A lot of messages in full_audit log

Sun Jan 4 10:48:22 MST 2015

On Sun, Jan 04, 2015 at 01:30:27PM -0300, Thiago Tenório wrote:
> Hi,
> 
> I'm using full_audit vfs module and I'm seeing a lot of duplicated messages
> in log file. Why does it happens ?
> How can I configure de smb.conf not to log duplicated information ?
> 
> Duplicated log:
> 
> Jan  4 13:27:50 server smbd_audit: [2015/01/04
> 13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt
> Jan  4 13:27:50 server smbd_audit: [2015/01/04
> 13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt
> Jan  4 13:27:50 server smbd_audit: [2015/01/04
> 13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt
> Jan  4 13:27:50 server smbd_audit: [2015/01/04
> 13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt

That's not duplicates. A client is reading the file piece by
piece.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de