[Samba] Re: Login and logout auditing

[Michal Kurowski]

Fabiano Caixeta Duarte [fabiano at fearp.usp.br] wrote:
> 
> Is there a way of logging date/time/workstation/username for every logon 
> and logoff in a samba domain?
> 
> I realized that it isn't possible to use log level auth for this purpose.
> 
> I tried to use connections to netlogon service written on the logs. But I 
> realized that those connections are closed before the user logs out.
> 
> The main idea behind this is to have information enought to generate 
> reports about user profiling and machine usage.
> 
> Could anyone help me?

Use the "utmp" option in your smb.conf.
And then - "last" for your recording purposes.

Cheers,

-- 
Michal Kurowski
<mkur at poczta.gazeta.pl>