[Samba] Samba Audit Logout/logoff
carlos.hollow at gmail.com
Tue Feb 12 11:19:05 UTC 2019
Thanks for answer Andrew.
On 11/02/2019 18:19, Andrew Bartlett wrote:
> On Mon, 2019-02-11 at 18:03 -0200, Carlos via samba wrote:
>> I am working with Applaince Sophos XG, i am used API(Desenvoving in
>> test) with audit log samba to information IP and user in log in DC, but
>> i need information about logout, is possible obtein in Samba Audit ?
>> S.O.: Ubuntu 18.04
>> Samba: 4.9.4
>> Copilated version
> Thanks for your interest. Sadly logout information isn't reliably
> communicated to the DC. Some folk use modules like the vfs_full_audit
> and ensure a share is held open against a server, but the DC protocols
> themselves (which is what is hooked into the JSON audit stuff) only see
> logon traffic.
> But you are surely not the first one to have needed this, so I'm hoping
> other folks here have some tricks that may assist.
> Andrew Bartlett
More information about the samba