[Samba] Samba Kerberos Logs

[June Chong | TechnologyWise]

Sorry. I forgot to mention this is on Samba 4.18.6, Ubuntu 23.10

Kind regards,

-- 
*June Chong*
*Technician | TechnologyWise*

Basestation
148 Durham St
Tauranga, NZ

email: june at tw.co.nz
office: +64 (0)7 571 1060
web: technologywise.co.nz

On 27/02/2024 4:46 pm, June Chong | TechnologyWise via samba wrote:
>
> CAUTION: This email originated from outside of the organization. Do 
> not click links or open attachments unless you recognize the sender 
> samba-bounces at lists.samba.org and know the content is safe.
>
>
>
> Hi team,
>
> Is there a way to grab Kerberos specific log entries?
>
> Example:
>
> /Auth: [Kerberos KDC,ENC-TS Pre-authentication] user.../
>
> I have tried using the kerberos class but nothing was logged when I 
> specified a path.
>
> This is what I have on my smb.conf.
>
> /[global]
>         log level = 1 kerberos:2@/var/log/samba/kerberos.log 
> auth_audit:3@/var/log/samba/audit.log 
> winbind:2@/var/log/samba/winbind.log/
>
> I have also noticed that the log.samba file has a limit of /4.9 MB/ 
> before log rotation happens. Putting /max log size = 512002/ does not 
> seem to help.
>
> I tried using the full_audit class for logging but the system returned 
> with an error that it is an unknown class.
>
> //[2024/01/31 13:08:14.699574,  0] 
> ../../lib/util/util_runcmd.c:355(samba_runcmd_io_handler)
>   /usr/sbin/samba_kcc: debug_lookup_classname: Unknown 
> classname[full_audit] -> adding it.../
> /
>
> Any help is appreciated.
>
> Kind regards,
>