MONITORING user's file activity in SAMBA (2.0.7)

[Andrew Bartlett]

Joel Hammer wrote:
> 
> > > My goal is to figure out which client computer
> > > issued a specific file/dir deletion on the
> > > samba-server. The problem is: every client
> > > machine uses the same user name to logon to
> > > the shares (as I wrote: screwed-up-architecture).
> >
> > Fix the architecture.  Once you have done that, and users using their
> > own logins, then look into the audit vfs example module (may require
> > coding for your particular situation).
> >
> One surprising thing about logging shares.
> Even though I use a guest (ftp) for all my shares, with logging set to 3,
> the log shows the original user name opening the file but the guest user closing
> the file.

I've looked at that peice of code, and was intending to fix it at some
stage, but doing it properly required following too much of this code
around...

Care to prepare a patch?

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Samba Team member, Build Farm maintainer        abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net