[Samba] A lot of messages in full_audit log
Thiago Tenório
thiago.aths at gmail.com
Sun Jan 4 09:30:27 MST 2015
Hi,
I'm using full_audit vfs module and I'm seeing a lot of duplicated messages
in log file. Why does it happens ?
How can I configure de smb.conf not to log duplicated information ?
Duplicated log:
Jan 4 13:27:50 server smbd_audit: [2015/01/04
13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt
Jan 4 13:27:50 server smbd_audit: [2015/01/04
13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt
Jan 4 13:27:50 server smbd_audit: [2015/01/04
13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt
Jan 4 13:27:50 server smbd_audit: [2015/01/04
13:27:50|semirames|samba-admin|192.168.0.3|setores]|pread|ok|Atendimento/James.txt
My smb.conf:
# Global parameters
[global]
workgroup = BASE
realm = BASE.LOCAL
netbios name = SERVER
server role = active directory domain controller
dns forwarder = 192.168.0.3
smb ports = 139
vfs objects = acl_xattr full_audit
full_audit:prefix = [%T|%U|%m|%I|%S]
full_audit:success = connect mkdir rmdir rename unlink fset_nt_acl
fsetxattr pread pwrite
full_audit:failure = none
full_audit:facility = local1
full_audit:priority = debug
[...]
--
Att,
Thol
More information about the samba
mailing list