[Samba] tracking user actions

[John H Terpstra]

On Tue, 18 Nov 2003, Greg Whynott wrote:

> Adam Williams wrote:
>
>
> Thanks Adam,
>
> The module actually does not work as I had expected.
>
>
> Nov 18 16:20:00 mercury smbd_audit[15738]: opendir .
> Nov 18 16:20:00 mercury smbd_audit[15738]: rename ./New Folder -> ./two
> Nov 18 16:20:00 mercury smbd_audit[15738]: opendir ./
>
>
> Perhaps I need a flag to turn on host name logging?  I don't see this
> covered in the PDF.

I think you might want the extd_audit module. It logs to the normal debug
file.

- John T.

>
> I could tail the log and grep the PID from the output of smbstatus upon
> seeing a "rename", but this seems a bit clunky.
>
> thanks again,
> greg
>
>
>
>
> > Perhaps the Audit VFS modules as documented in the Samba HOWTO
> > Collection PDF.
>
>

-- 
John H Terpstra
Email: jht at samba.org