LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   How to track samba users (https://www.linuxquestions.org/questions/linux-newbie-8/how-to-track-samba-users-869437/)

vivekanandan 03-18-2011 11:34 AM

How to track samba users
 
At my office we are having a samba sever, staff will access their respective folder from their Windows XP systems. I wish to track all user access activity like file creation, modification, deletion and etc. I tried smbstatus -v, from the output I am not able to guess what the user done. I am giving some of the results I get please help me or you can suggest best way to get access log.

Samba version 3.0.25b-0.el5.4
PID Username Group Machine
-------------------------------------------------------------------
14721 govind govind tsl-019 (10.0.2.64)
4832 chandra chandra trivent-9b92c9c (10.0.2.106)

Service pid machine Connected at
-------------------------------------------------------
IPC$ 9972 tsl-042 Fri Mar 18 16:40:29 2011
MEDMGMT 9852 tsl-0012 Fri Mar 18 16:39:13 2011
Legal Mgmt 9852 tsl-0012 Fri Mar 18 16:39:20 2011
MGMT HEAD 9852 tsl-0012 Fri Mar 18 16:39:12 2011
IPC$ 9858 tsl-0012 Fri Mar 18 16:39:47 2011
Legal 9852 tsl-0012 Fri Mar 18 16:39:23 2011
Sys Admin 14721 tsl-019 Fri Mar 18 21:29:35 2011
Operations 9852 tsl-0012 Fri Mar 18 16:39:09 2011

Locked files:
Pid Uid DenyMode Access R/W Oplock SharePath Name Time
--------------------------------------------------------------------------------------------------
4832 564 DENY_NONE 0x2019f RDWR NONE /home/Datas/ Drafting/Clients/Jeanette/Jeanette.xls Fri Mar 18 19:09:31 2011

Regards
Vivek

timetraveler 03-18-2011 02:01 PM

Might be a place to start: http://search.cpan.org/~affc/Parse-Log-Smbd-0.02/

marozsas 03-18-2011 02:16 PM

check this: http://www.linuxquestions.org/questi...ght=smbd_audit


All times are GMT -5. The time now is 03:56 AM.