[Samba] eventlog functionality
julius_ahenobarbus at yahoo.co.uk
Mon Sep 10 21:26:23 UTC 2018
we have recently purchased a security appliance that wants to poll the DC's for login info (ipaddress:logged-in-user) to give more granular access to internet resources
this seems possible with samba 4.8.4
log level = 1 auth_audit:3
eventlog list = Application System Security SyslogLinux
It doesn't look like audit events are ending up in
which where they might go.
I certainly am seeing lots of login audit info in log.samba, so that's working.
More information about the samba