[Samba] Setting up Audit Logging

Andrew Bartlett abartlet at samba.org
Tue Jan 14 19:12:17 UTC 2020

On Tue, 2020-01-14 at 09:04 -0200, Marcio Demetrio Bacci via samba
> Hi,
> I need enable some logs in my two Samba 4 DC. I want to log the folowws:
> a. user authentications (success and fail) on domain;
> b. who joined a computer in the domain;
> c. who created a new user and group on DC.
> How I do this?
> Do I need only put the follow line in the smb.conf?

You will need more audit categories than this.  The dsdb categories are
needed for the DB operations, the authentication audit is only user
authentications (success and failure).

You should only enable the JSON versoins if you have a way to process
those, the 'human readable' formats will just add noise without any
more information.

Andrew Bartlett

Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

More information about the samba mailing list