[Samba] logging

Pol Hallen samb at fuckaround.org
Sat Oct 15 13:27:45 UTC 2016


Hello all :-)

there is a way to put (or better duplicate) authentication failures of 
users to /var/log/syslog and also add its ip?

ie: in /var/log/samba/ I have:

192.168.32.67.log with:

[2016/10/15 15:20:22.250647,  2] 
../source3/auth/auth.c:305(auth_check_ntlm_password)
   check_ntlm_password:  authentication for user [psycheye] -> [admin] 
-> [admin] succeeded
(END)

I'd like have this line inside /var/log/syslog with also IP of client 
(192.168.32.67)

is it possibile?

thanks all for help!

Pol



More information about the samba mailing list