[Samba] Logon logging logs

[Bill Arlofski]

I'm looking for a simple solution to log a single entry for each login 
to a Samba PDC.

My current attempt(s) of using a root prexec script in either the 
[netlogon] share definition or the [global] section are working, but not 
exactly as expected.

In [netlogon] I have an entry:

root preexec = /path/to/script/makelogonscript.pl %g %u %m %I

...where makelogonscript.pl generates a customized logon script for each 
user/group etc. AND, at the top of this script, a simple section has 
been added to log to a logonlog.log file the following information:

Date Time Primary_Group IP_Address machinename username

So far so good. The problem I am seeing with this is that every time 
someone logs into the domain, it appears that the [netlogon] share is 
opened twice because this script writes two entries for each user, 
usually about 4 seconds apart, sometimes about 10 seconds apart,  but I 
have seen as high as 30 seconds or more.

ie:

03-16-2005 12:14:00 group xx.xx.xx.xx  machinename username
03-16-2005 12:14:04 group xx.xx.xx.xx  machinename username


Speaking in #samba on freenode we agreed that this might be because some 
versions of windows temporarily map a Z: drive to the netlogon share and 
then work off of that during the logon process.

OK, so next up was putting a simple root preexec logging script in the 
[global] section of smb.conf

Similar, but not exact results were found.

Most domain logins were logged twice, some were only logged once. Also, 
there are now some entries with "nobody" as the group and username but 
these "nobody"  entries can be easily omitted from reports with 
sed/grep/awk/perl/whatever so they are inconsequential. :)


So, I guess my basic question is:

Where in the logon process is the correct place to tell Samba to do 
something (ie: run this script) but do it only once?

Thanks for any help!

-
Bill Arlofski
waa-samba at revpol.com