samba log

[Richard Sharpe]

Hi Jim,

Jim Buckley wrote:

>I need to identify when a user deletes a file on the samba server. I
>plan to grep the logs, but could someone please identify what smb would
>produce when a file is removed?
>
Well, if you increase the log level you will get all sorts of 
information, but the message will depend on how the file is deleted, ie 
with a delete or delete on close.

However, since it all seems to go through vfswrap_unlink in 
smbd/vfswrap.c, you could add a DEBUG message there that identifies the 
user (since you have the connection structure) and the path.

-- 
Richard Sharpe, rsharpe at ns.aus.com, LPIC-1
www.samba.org, www.ethereal.com, SAMS Teach Yourself Samba 
in 24 Hours, Special Edition, Using Samba