[PATCH] samba3 auditing server-side

Jeremy Allison jra at samba.org
Tue Apr 11 22:24:29 GMT 2006


On Tue, Apr 11, 2006 at 09:06:16PM +0200, Guenther Deschner wrote:
> Hi,
> 
> Jeremy, Lars and me recently discussed how we could have exact tracking of
> auditable events in the samba3 code. As we now understand better how to
> remotely manage auditing policies, here is draft patch of how we could do
> the server-side of auditing.
> 
> The patch just works for ldapsam (the auditing settings are replicated
> between DCs). That way, we could add the matching audit events with the
> correct event IDs (which are mostly well known and documented) using
> AUDIT_SUCCESS/AUDIT_FAILURE calls where appropriate in a very similar
> manner as windows does. 
> 
> It would be then rather easy to have a kind of "audit backend" parameter
> to send the audit events not only to the DEBUG macro but also to syslog or
> any other kind of auditing framework. 
> 
> Makes sense?

I really like this code. Very nice work ! Let's get this into the
tree and polish it up.

Jeremy.


More information about the samba-technical mailing list