[Samba] Sarbanes-Oxley headaches

Robert Kelly robert.kelly at ebimed.com
Thu May 12 16:54:34 GMT 2005


Hi there,
With the new scrutinization by auditors on account policies and
auditing, how can Samba be SOX compliant?
Using 3.0.14a-sernet on Suse 9.1 - ldapsam

Specifically, a couple of things seem to be lacking:

1) Logon/Logoff times are not being recorded
	The last logon time recorded in my ldap entries are pre-nt4 migration.

2) Do the Audit Policy values in user manager have any effect?
	Are they implemented?
	Can they be syslogged?

3) How can I get a hook into logons?
	Without turning up the debug values, how can I tell if an account has
had repeated login failures?

Thanks,
Rob



More information about the samba mailing list