[Samba] how to configure vfs object = audit

[Felipe Augusto van de Wiel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Indracyd wrote, On 05-08-2007 22:38:
> Felipe Augusto van de Wiel wrote:
>> Indracyd wrote, On 01-08-2007 02:50:
>>> Dear all, someone can help i have samba and i won to
>>> see activied user, open, closed, delete, rename files
>>> can samba do it?and i know to configured the vfs
>>> object = audit
>>> this is my sample script :
>>> [AnCtest]
>>>    comment = Audit and Controlling Tester
>>>    vfs object = audit
>>>    veto files = /*.exe/*.mp3/*.msi/*.mpeg/*.mov/*.scr/*.dat/*.wav/*.3gp

	I'm not sure, I just saw this now, your veto files should
end with a slash: /*.exe/*.mp3/


>>>    delete veto files = yes
>>>    nt acl support = yes
>>>    path = /data/AnCtest
>>>    public = no
>>>    browseable = no
>>>    valid users = @audit
>>>    read only = no
>>>    writeable = yes
>>>    create mask = 0760
>>>    force create mode = 0760
>>>    directory mask = 2760
>>>    force directory mode = 2760
>>>    inherit permissions = yes
>> 
>>> but how to see the log vfs object = audit?
>> 
>> 	For more info use 'vfs object = full_audit' (or
>> extd_audit, depending on your Samba version), your log 
>> messages should appear in syslog, usually under the
>> 'smbd_audit' module name and, at least on my Debian
>> system, in messages, auth.log and user.log.
>> 
>> 	syslog-ng can change this and you might also be
>> interested in http://sourceforge.net/projects/smbdaudit

> i have follow your configuration but still not work,
> can somebody help me configuration vfs object for
> audit?i'm using samba version :
>
> [radmin at pdcsmdm ~]$ rpm -qa | grep samba
> samba-swat-3.0.20-3mdk
> samba-common-3.0.20-3mdk
> samba-server-3.0.20-3mdk
> samba-client-3.0.20-3mdk
> samba-winbind-3.0.20-3mdk

	Hmmm... you should configure your 'log level' and check
your syslog (or syslog-ng) rules to be sure where your logs are
ending.


	Kind regards,
- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGtw2uCj65ZxU4gPQRCAnzAKCYCE4QDa74f+W7ufrJZOi0Fz2djACdEvgT
sS1TCKpxVpt18PfjVFCSTIo=
=cajd
-----END PGP SIGNATURE-----