[Ilugc] Auditing Samba 3
- From: sambaiah@xxxxxxxxxxxxxx (K.Sambaiah)
- Date: Thu, 11 Mar 2004 09:23:19 +0530 (IST)
I am running Samba 3.0.2a on RedHat Linux 9 (Shrike) as PDC. I would like
to audit the events like file open, read, write, delete, etc. I tried
installing SNARE (System Intrusion Analysis & Reporting Environment) but
it's of no help as the kernel 2.4.19 or above doesnot support installing
SNARE though patch and diff files are available, the Audit Daemon gets
killed on its own whenever I restart Snare Daemon.
Please help if somebody has already tried out. Also kindly suggest if there
are any other tools available for auditing Samba.
It may be helpful to increase log level in the samba configuration. May be
I am too simplistic.
--
thanks and regards,
Sambaiah K
Other related posts: