[Samba] A lot of messages in full_audit log

Thiago Tenório thiago.aths at gmail.com
Sun Jan 4 09:30:27 MST 2015


Hi,

I'm using full_audit vfs module and I'm seeing a lot of duplicated messages
in log file. Why does it happens ?
How can I configure de smb.conf not to log duplicated information ?

Duplicated log:

Jan  4 13:27:50 server smbd_audit: [2015/01/04
13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt
Jan  4 13:27:50 server smbd_audit: [2015/01/04
13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt
Jan  4 13:27:50 server smbd_audit: [2015/01/04
13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt
Jan  4 13:27:50 server smbd_audit: [2015/01/04
13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt

My smb.conf:

# Global parameters
[global]
        workgroup = BASE
        realm = BASE.LOCAL
        netbios name = SERVER
        server role = active directory domain controller
        dns forwarder = 192.168.0.3

        smb ports = 139

        vfs objects = acl_xattr full_audit
        full_audit:prefix = [%T|%U|%m|%I|%S]
        full_audit:success = connect mkdir rmdir rename unlink fset_nt_acl
fsetxattr pread pwrite
        full_audit:failure = none
        full_audit:facility = local1
        full_audit:priority = debug

[...]


-- 
Att,

Thol


More information about the samba mailing list