[PATCH] samba3 auditing server-side
Jeremy Allison
jra at samba.org
Tue Apr 11 22:24:29 GMT 2006
On Tue, Apr 11, 2006 at 09:06:16PM +0200, Guenther Deschner wrote:
> Hi,
>
> Jeremy, Lars and me recently discussed how we could have exact tracking of
> auditable events in the samba3 code. As we now understand better how to
> remotely manage auditing policies, here is draft patch of how we could do
> the server-side of auditing.
>
> The patch just works for ldapsam (the auditing settings are replicated
> between DCs). That way, we could add the matching audit events with the
> correct event IDs (which are mostly well known and documented) using
> AUDIT_SUCCESS/AUDIT_FAILURE calls where appropriate in a very similar
> manner as windows does.
>
> It would be then rather easy to have a kind of "audit backend" parameter
> to send the audit events not only to the DEBUG macro but also to syslog or
> any other kind of auditing framework.
>
> Makes sense?
I really like this code. Very nice work ! Let's get this into the
tree and polish it up.
Jeremy.
More information about the samba-technical
mailing list