I'm using samba in Ubuntu 12.04 with audit log enabled.
the thing is that i'm getting audit.log entry in /var/log/message samba doesn't showing me audit entry in /var/log/samba/audit.log.
In my smb.conf i have the following entry in global section,
Quote:
# Audit settings
full_audit refix = %I|%S
full_audit:failure = connect
full_audit:success = mkdir rmdir write pwrite rename unlink
full_audit:facility = local5
full_auditriority = notice
|
This is my individual share setting in smb.conf
Quote:
[Admin]
writeable = yes
invalid users =
path = /Admin
config-file = /etc/samba/recycle.conf
vfs object = recycle full_audit
force user = nobody
force group = nogroup
create mode = 777
recycle:versions = Yes
recycle:keeptree = Yes
recycle:repository = .recycle
directory mode = 777
|
& finally my recycle.conf file is
Quote:
##Recycle Bin Configuration File##
name = Recycle Bin
mode = KEEP_DIRECTORIES|VERSIONS|TOUCH
maxsize = 0
exclude = *.tmp|*.temp|*.o|*.obj|~$*|*.~??|*.log|*.trace|
excludedir = /tmp|/temp|/cache
exclude =
excludedir =
noversions = *.doc|*.ppt|*.dat|*.ini
|
