[Samba] Logging

Fabrizio Rompani fabrizio.rompani at yetopen.com
Thu Mar 13 11:22:39 UTC 2025


hi all . 
in a samba fileserver ( joined to a samba domain ) , I'd like to log in to a specific file , some operation with username and ip address. 
my conf file are below. 
I don't have the expected result : log is full of ( it seems to me ) debug info , and not all my requested info (eg ip address ) 
Any suggestion on how to properly setup logging? 
also : in the bolded line below : it seems to me it is impossible a user has opened and closed the file in the same exacly time : what that would mean? 

thank s 
fabrizio 



/var/log/samba/log.yosmb 

[2025/03/13 12:15:24.163070, 3, traceid=75387] source3/winbindd/winbindd_misc.c:355(winbindd_interface_version) 
winbindd_interface_version: [nss_winbind (554)]: request interface version (version = 32) 
[2025/03/13 12:15:24.163252, 3, traceid=75388] source3/winbindd/winbindd.c:497(process_request_send) 
process_request_send: [nss_winbind (554)] Handling async request: GETGROUPS 
[2025/03/13 12:15:24.163299, 3, traceid=75388, depth=1] source3/winbindd/winbindd_getgroups.c:63(winbindd_getgroups_send) 
[nss_winbind (554)] Winbind external command GETGROUPS start. 
Searching groups for username 'root'. 
[2025/03/13 12:15:24.165219, 3, traceid=75388] source3/winbindd/winbindd.c:564(process_request_done) 
process_request_done: [nss_winbind(554):GETGROUPS]: NT_STATUS_NONE_MAPPED 
[2025/03/13 12:15:24.489389, 2] source3/smbd/dosmode.c:144(unix_mode) 
unix_mode(home/diego/302 /xxxxxxxxxxxxxxxxxxxxxxxxxx /18.03.2025/ASL _IMC_8_MICELI_18.03.2025_19.03.2025.pdf) inherit mode 40775 
[2025/03/13 12:15:24.489483, 3] source3/smbd/smb2_server.c:4052(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_OBJECT_NAME_NOT_FOUND] || at source3/smbd/smb2_create.c:362 
[2025/03/13 12:15:24.491288, 2] source3/smbd/dosmode.c:144(unix_mode) 
unix_mode(home/diego/302 / xxxxxxxxxxxxxxxxxxxxxx/18.03.2025/art.15 _ Giuseppe_18.03.2025_19.03.2025pdf.pdf) inherit mode 40775 
[2025/03/13 12:15:24.491336, 3] source3/smbd/smb2_server.c:4052(smbd_smb2_request_error_ex) 
smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_OBJECT_NAME_NOT_FOUND] || at source3/smbd/smb2_create.c:362 
[2025/03/13 12:15:26.453405, 2] source3/smbd/dosmode.c:144(unix_mode) 
unix_mode(gestionale-cl/dischi/pdf/DA0364_DICH.RESPONS._02.2025_13.03.2025_12.10.28.pdf) inherit mode 40777 
[2025/03/13 12:15:26.453501, 2] source3/smbd/open.c:1614(open_file) 
LAMPA+monica.xxxxxx opened file gestionale-cl/dischi/pdf/DA0364_DICH.RESPONS._02.2025_13.03.2025_12.10.28.pdf read=No write=No (numopen=33) 
[2025/03/13 12:15:26.455202, 2] source3/smbd/close.c:924(close_normal_file) 
LAMPA+monica.xxxxxxx closed file gestionale-cl/dischi/pdf/DA0364_DICH.RESPONS._02.2025_13.03.2025_12.10.28.pdf (numopen=31) NT_STATUS_OK 



Samba versions: 
fileserver 
version 4.21.4-Debian-4.21.4+dfsg-1~~mjt+deb12 started. 
DC: 
4.18.5-Ubuntu 



Config. files : 
[global] 
netbios name = FILESERVER 
workgroup = LAMPA 
security = ADS 
realm = WDC.[domain].IT 
winbind separator = + 
idmap config *:backend = tdb 
idmap config *:range = 700001-800000 
idmap config LAMPA:backend = rid 
idmap config LAMPA:range = 10000-700000 
winbind use default domain = yes 
winbind enum users = yes 
winbind enum groups = yes 
vfs objects = acl_xattr 
map acl inherit = yes 
# template homedir = /home/%U 
inherit acls = yes 
inherit permissions = yes 
nt acl support = yes 

# Disable print server 
printcap name = /dev/null 
load printers = no 
disable spoolss = yes 
printing = bsd 

max log size = 500000 
log level = 3 
log file = /var/log/samba/log.yosmb 

vfs objects = full_audit 
full_audit:prefix = %u|%I 
full_audit:success = write 
#full_audit:success = open read write unlink 
full_audit:failure = none 
full_audit:facility = LOCAL7 
full_audit:priority = NOTICE 

[condivisioni] 
path = /dati/condivisioni 
read only = no 
include = /etc/samba/cestino.conf 



cestino.conf: ( probably not relevant ) 

vfs objects = recycle acl_xattr 
#vfs objects = recycle 
recycle:keeptree = yes 
recycle:versions = yes 
recycle:exclude = *.rws *.pat *.dat *.tmp *.temp ~$* *.~?? ~*.tmp 
recycle:excludedir = 
recycle:noversions = *.doc *.xlsi *.ppt 
recycle:directory_mode = 770 
recycle:touch = yes 
recycle:touch_mtime = yes 
recycle:repository = .recycle/%U 
recycle:directory mask = 2770 


YetOpen SB
Corso Martiri della Liberazione 114 - 23900 Lecco - ITALY - | 4801 Glenwood Avenue - Suite 200 - Raleigh, NC 27612 - USA -
Tel +39 0341 220 205 - info.it at yetopen.com  | Phone +1 919-817-8106 - info.us at yetopen.com

Think green - Non stampare questa e-mail se non necessario / Don't print this email unless necessary

-------- Riservatezza ��� D.Lgs. 196/2003 e GDPR 679/2016 --------
Questo messaggio e'� riservato ai destinatari indicati e contiene informazioni confidenziali, ivi compresi gli allegati. �� vietata la diffusione, copia o utilizzo non autorizzato. Se lo ha ricevuto per errore, La invitiamo a eliminarlo immediatamente  e a informarci tempestivamente. Grazie.

-------- Confidentiality ��� Legislative Decree 196/2003 & GDPR 679/2016 --------
This message is intended for the recipient only and may contain confidential information, including attachments. Unauthorized disclosure, copy or use is prohibited.  If received in error, please delete immediately and notify us. Thank you.


More information about the samba mailing list