[Samba] Printserver after latest MS updates
rpenny at samba.org
Mon Oct 25 09:04:24 UTC 2021
On Mon, 2021-10-25 at 10:40 +0200, cn--- via samba wrote:
> I have set "auth_audit"
> log level = 1 auth_audit:3@/var/log/samba/print.log
> And I have tons of these:
> [2021/10/25 10:38:44.484840, 3]
> Auth: [DCE/RPC,(null)] user [DOMAIN-02]\[user] at [Mon, 25 Oct
> 10:38:44.484815 CEST] with [NTLMv2] status [NT_STATUS_OK]
> [BR-HOST] remote host [ipv4:X.X.X.X:59409] became [DOMAIN-02]\[user]
> [S-1-5-21-xxx-xxx-xxx-xxx]. local host [ipv4:X.X.X.X:445]
Try changing the 3 in 'auth_audit' to 2, what you are receiving in the
logs is just Samba telling you that authentication was successful.
More information about the samba