[Samba] Problems with the Full Audit module

Ricardo Pardim Claus ricardo.claus at yahoo.com.br
Thu Apr 27 20:07:04 UTC 2017


Gentlemen,

I was experiencing problems when I simultaneously enabled shadow_copy2 and full_audit modules. 
When enabled, problems occurred in the sysvol folder.

In the full audit module, I have the same problem as in Samba 4.4.5. 
When you enable the full audit module, the share stops working. 
Here's part of my smb.conf:

vfs objects = recycle, shadow_copy2, full_audit 
# AUDIT 
full_audit:prefix = %u|%I|%S|%g 
full_audit:success = all 
full_audit:failure = all !open 
full_audit:facility = local1 
full_audit:priority = ALERT

I'm getting these errors when I create a new folder:

[2017/04/27 16:58:22.466015,  3] ../source3/smbd/vfs.c:1253(check_reduced_name) 
check_reduced_name: couldn't get realpath for admin/new folder 
[2017/04/27 16:58:22.466037,  5] ../source3/smbd/filename.c:1248(check_name) 
check_name: name admin/new folder failed with NT_STATUS_UNSUCCESSFUL 
[2017/04/27 16:58:22.466047,  3] ../source3/smbd/filename.c:1615(filename_convert_internal) 
filename_convert_internal: check_name failed for name admin/new folder with NT_STATUS_UNSUCCESSFUL 
[2017/04/27 16:58:22.466064,  3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_UNSUCCESSFUL] || at ../source3/smbd/smb2_create.c:293

Could someone give me a hint?



More information about the samba mailing list