[Samba] Setting up Audit Logging
abartlet at samba.org
Tue Jan 14 19:12:17 UTC 2020
On Tue, 2020-01-14 at 09:04 -0200, Marcio Demetrio Bacci via samba
> I need enable some logs in my two Samba 4 DC. I want to log the folowws:
> a. user authentications (success and fail) on domain;
> b. who joined a computer in the domain;
> c. who created a new user and group on DC.
> How I do this?
> Do I need only put the follow line in the smb.conf?
You will need more audit categories than this. The dsdb categories are
needed for the DB operations, the authentication audit is only user
authentications (success and failure).
You should only enable the JSON versoins if you have a way to process
those, the 'human readable' formats will just add noise without any
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
More information about the samba