[Samba] vfs_full_audit and facility 'auth'...

Rowland Penny rpenny at samba.org
Fri May 11 08:58:58 UTC 2018


On Fri, 11 May 2018 09:14:24 +0200
Marco Gaiarin via samba <samba at lists.samba.org> wrote:

> Mandi! Rowland Penny via samba
>   In chel di` si favelave...
> 
> > You would replace 'FACILITY' with one of the facilities shown in
> > 'man syslog' e.g. full_audit:facility = LOG_AUTH
> 
> OK, done. But samba (as stated in previous email) still reply:
> 
>  [2018/05/08 17:34:42.388486,
> 0] ../source3/param/loadparm.c:1179(lp_enum) lp_enum(LOG_AUTH,enum):
> value is not in enum_list!
> 
> so seems that 'auth' and also 'LOG_AUTH' is not a valid keyword...
> 
> 
> (debian jessie, systemd, samba 4.5 from louis repository)
> 

OK, if you look in 'man vfs_full_audit' is says this:

        full_audit:facility = FACILITY
           Log messages to the named syslog(3) facility.

If you then examine 'man syslog', 'LOG_AUTH' is a listed facility, but
I can confirm that using it with vfs_full_audit doesn't work, 'LOCAL5'
does.

Does anybody know which of the facilities listed in 'man syslog'
actually work ? or do I have try each of them to find out ?

I have copied in samba technical on this.

Rowland




More information about the samba-technical mailing list