[Samba] vfs_full_audit and facility 'auth'...
Rowland Penny
rpenny at samba.org
Fri May 11 08:58:58 UTC 2018
On Fri, 11 May 2018 09:14:24 +0200
Marco Gaiarin via samba <samba at lists.samba.org> wrote:
> Mandi! Rowland Penny via samba
> In chel di` si favelave...
>
> > You would replace 'FACILITY' with one of the facilities shown in
> > 'man syslog' e.g. full_audit:facility = LOG_AUTH
>
> OK, done. But samba (as stated in previous email) still reply:
>
> [2018/05/08 17:34:42.388486,
> 0] ../source3/param/loadparm.c:1179(lp_enum) lp_enum(LOG_AUTH,enum):
> value is not in enum_list!
>
> so seems that 'auth' and also 'LOG_AUTH' is not a valid keyword...
>
>
> (debian jessie, systemd, samba 4.5 from louis repository)
>
OK, if you look in 'man vfs_full_audit' is says this:
full_audit:facility = FACILITY
Log messages to the named syslog(3) facility.
If you then examine 'man syslog', 'LOG_AUTH' is a listed facility, but
I can confirm that using it with vfs_full_audit doesn't work, 'LOCAL5'
does.
Does anybody know which of the facilities listed in 'man syslog'
actually work ? or do I have try each of them to find out ?
I have copied in samba technical on this.
Rowland
More information about the samba
mailing list