[Samba] Setting up Audit Logging

[Andrew Bartlett]

On Tue, 2020-01-14 at 09:04 -0200, Marcio Demetrio Bacci via samba
wrote:
> Hi,
> 
> I need enable some logs in my two Samba 4 DC. I want to log the folowws:
> 
> a. user authentications (success and fail) on domain;
> b. who joined a computer in the domain;
> c. who created a new user and group on DC.
> 
> How I do this?
> 
> Do I need only put the follow line in the smb.conf?

You will need more audit categories than this.  The dsdb categories are
needed for the DB operations, the authentication audit is only user
authentications (success and failure).

You should only enable the JSON versoins if you have a way to process
those, the 'human readable' formats will just add noise without any
more information.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba