[Samba] Logging successful log-ins

[Andrew Bartlett]

On Wed, 2020-09-16 at 17:46 +0100, Piers Kittel via samba wrote:
> Hi all,
> 
> Due to a security breach at my office recently, we need to log 
> successful / failed log-ins.  I've put in "log level = 3" in smb.conf
> on 
> our active directory domain controller which seems to log what we
> need, 
> however this is generating massive log files, due to it logging
> every 
> file opening/closing by all users.  How do I log successful/failed 
> log-ins without having to generate massive files?  Would it be
> possible 
> to output just the successful/failed log-ins into its own log file?
> 
> Many thanks for help in advance!

See

https://wiki.samba.org/index.php/Setting_up_Audit_Logging
-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba