[Samba] 3.0.21b and eventlogs

[Thomas Bork]

Hi Jerry,

tried to playing around with eventlogs but:

smb.conf global part:
eventlog list = SyslogLinux

In your Samba-EventLog-HOWTO.txt:
When Samba initially starts, it looks to see if the
eventlog directory, and a particular log exists; if not,
the  directory and file are created under LOCK_DIR

This is not the case, no directory and file was created.

In the docs for smb.conf:
eventlog list (G)
This option defines a list of log names that Samba will report to the 
Microsoft EventViewer utility. The listed eventlogs will be associated 
with tdb file on disk in the $(libdir)/eventlog.


Mmmh:
LOCK_DIR or $(libdir)?
Nobody of them :(

Debuglevel 5 shows:

[...]
   doing parameter eventlog list = SyslogLinux
[...]
[2006/02/15 16:24:56, 5] tdb/tdbutil.c:tdb_log(772)
   tdb(unnamed): tdb_open_ex: could not open file 
/var/lock/samba/registry.tdb: No such file or directory
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKLM]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKLM]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKLM/SOFTWARE]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SOFTWARE/Microsoft]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SOFTWARE\Microsoft/Windows NT]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SOFTWARE\Microsoft\Windows NT/CurrentVersion]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion/Print]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print/Printers]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion/Ports]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKLM/SYSTEM]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM/CurrentControlSet]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet/Control]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Control/Print]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet/Services]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Services/LanmanServer]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer/Shares]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Services/Eventlog]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion/Perflib]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib/009]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Control\Print/Monitors]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Control/ProductOptions]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Control/Terminal Server]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Control\Terminal 
Server/DefaultUserConfiguration]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Services/TcpIp]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Services\TcpIp/Parameters]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Services/Netlogon]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Services\Netlogon/Parameters]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKU]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKU]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKCR]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKCR]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKPD]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKPD]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKPT]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key [HKPT]
[...]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog/SyslogLinux]
[2006/02/15 16:24:56, 5] registry/reg_eventlog.c:eventlog_init_keys(59)
   Adding key of [SyslogLinux] to path of 
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog]
[2006/02/15 16:24:56, 5] registry/reg_eventlog.c:eventlog_init_keys(66)
   Adding key of [SyslogLinux] to path of 
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\SyslogLinux]
[2006/02/15 16:24:56, 5] registry/reg_db.c:regdb_fetch_keys(457)
   regdb_fetch_keys: tdb lookup failed to locate key 
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\SyslogLinux/SyslogLinux]
[2006/02/15 16:24:56, 5] registry/reg_eventlog.c:eventlog_init_keys(85)
   Storing values to eventlog path of 
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\SyslogLinux]
[2006/02/15 16:24:56, 5] registry/reg_eventlog.c:eventlog_init_keys(138)
   Storing values to eventlog path of 
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\SyslogLinux\SyslogLinux]


der tom