How to track samba users
At my office we are having a samba sever, staff will access their respective folder from their Windows XP systems. I wish to track all user access activity like file creation, modification, deletion and etc. I tried smbstatus -v, from the output I am not able to guess what the user done. I am giving some of the results I get please help me or you can suggest best way to get access log.
Samba version 3.0.25b-0.el5.4
PID Username Group Machine
-------------------------------------------------------------------
14721 govind govind tsl-019 (10.0.2.64)
4832 chandra chandra trivent-9b92c9c (10.0.2.106)
Service pid machine Connected at
-------------------------------------------------------
IPC$ 9972 tsl-042 Fri Mar 18 16:40:29 2011
MEDMGMT 9852 tsl-0012 Fri Mar 18 16:39:13 2011
Legal Mgmt 9852 tsl-0012 Fri Mar 18 16:39:20 2011
MGMT HEAD 9852 tsl-0012 Fri Mar 18 16:39:12 2011
IPC$ 9858 tsl-0012 Fri Mar 18 16:39:47 2011
Legal 9852 tsl-0012 Fri Mar 18 16:39:23 2011
Sys Admin 14721 tsl-019 Fri Mar 18 21:29:35 2011
Operations 9852 tsl-0012 Fri Mar 18 16:39:09 2011
Locked files:
Pid Uid DenyMode Access R/W Oplock SharePath Name Time
--------------------------------------------------------------------------------------------------
4832 564 DENY_NONE 0x2019f RDWR NONE /home/Datas/ Drafting/Clients/Jeanette/Jeanette.xls Fri Mar 18 19:09:31 2011
Regards
Vivek
|