[Samba] Logging successful log-ins
Gregory Sloop
gregs at sloop.net
Wed Sep 16 20:06:56 UTC 2020
ABvs> Yeah, it's a wiki. Go for your life!
I can do that - I just was not sure I was right and didn't want to put something in the wiki that wasn't factually accurate.
So, just to be extra explicit.
Samba can log both sucessful and failed authentications, but only successful authorizations, not unsuccessful authorizations.
Right?
ABvs> Adding info on the per-log class stuff to log into different files
ABvs> like
ABvs> dsdb_password_json_audit:4@/var/log/samba/password.log
ABvs> would be awesome too.
ABvs> Andrew Bartlett
ABvs> On Wed, 2020-09-16 at 10:53 -0700, Gregory Sloop via samba wrote:
>> There's a note at the top of that document:
>> "Samba only supports logging of succeeded authorization events."
>> Does that mean that it won't log authentication events at all?
>> Because that's implied.
>> I think it would be better, assuming it will log auth events, to say;
>> "Samba only supports logging of *successful* authorization events,
>> not unsuccessful. Samba also supports logging of both successful and
>> unsuccessful auth events."
>> Just my two bits worth.
More information about the samba
mailing list