ok i will add this in conf file ...

can you clear my log error which i had posted..

Please explain more about the log error.

iam asking i also dont know ...

1 members found this post helpful.

1) What Linux distro are you running

2) what is the out put of this command = testparm

3) what is the output /etc/init.d/smb restart

centos 5.4

testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[myshare]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]
workgroup = MYGROUP
server string = Samba Server Version %v
security = SHARE
passdb backend = tdbsam
username map = /etc/samba/smbusers
cups options = raw

[homes]
comment = Home Directories
read only = No
printable = Yes
browseable = No

[myshare]
comment = private dir
path = /home/myshare
read only = No
guest ok = Yes
vfs objects = full_audit
full_auditrefix = %u|%I|%m|%S
full_audit:success = mkdir rename unlink rmdir open pwrite
full_audit:failure = none

---------------------------------------------------

while opening samba server gui it gives warning box...
"some line could not be understood while reading the configuration file /etc/samba/smb.conf .These may be unknown configuration directive for samba plugins but could also be configuration error."

297: full_audit:failure = none

298: full_audit:success = mkdir rename unlink rmdir open pwrite

299: full_auditrefix = %u|%I|%m|%S


-------------------------------------------------------

Not much, the PC at 172.16.13.15 has tried to access the "asinghal" service or share in the samba server. Could this be the user name in that PC? Or a share name that Windows might "remember" having accessed/tried to access in the past? Windows keeps that obnoxious list of "network places" you have accessed, and might be trying to refresh it somehow. From the samba server point of view, this message is just saying 172.16.13.15 wanted to access "asinghal", but the samba server doesn't have it.

This might be nothing; you can check the suggestion/explanation on: http://lists.samba.org/archive/samba...st/134625.html

I noticed your log shows accesses both from 172.16.x.x and 192.168.x.x. Do you really have these both networks accessing the samba server (I'm worried that one of them might be the one connected to your ISP).

BR,

Joao S Veiga

Check if you have the full_audit.so module in /usr/lib/samba/vfs or /usr/local/samba/lib/vfs (depends on your distro).

What is your distro and samba version? I use debian squeeze, samba 3.5.6, and these modules came available as default.

BR,

Joao S Veiga

i use centos 5.4. and i didnot find in any of the directory u mention...

in had both network 172.16.x.x and 192.168.x.x ....server is on 192. and most of user connected with samba server had 192. ip's and few has 172. ip's....both are on different location....

& asinghal is both share dir and window user..172.16.13.15 has asinghal account but 2days before i deleted....

hmm, I have zero knowledge on centos, but a quick google seems to indicate that centos 5.4 does not have samba 3.x, and the modular vfs came up in samba 3.

again, what is your samba version? "smbstatus" shows it.

BR,

Joao S Veiga

smbstatus

Samba version 3.0.33-3.14.el5
PID Username Group Machine
-------------------------------------------------------------------

Service pid machine Connected at
-------------------------------------------------------

No locked files

This might help

http://www.linuxquestions.org/questi...ux-smb-808012/

I'm running Centos 6.2 and I have /usr/lib/samba/vfs. Inside this folder are the samba moduals that you need to audit share access. 5.4 might be running an older version of samba.

Here is some good documentation.

http://www.linuxtopia.org/online_boo...30_VFS_08.html

put this entry in "smb.conf".that will make a log file of those users which are connect from any machine to the samba share at you Linux machine you can identify the ip or user.

log level = 0 vfs: 0
log file = / var / log / samba / log.% m
max log size = 0

# & restart or reload the smb service then check.

thanks jsveiga pantdk kyrunner.....every thing whar ever you are posting iam continously following and being with you also.

after adding in conf file iam getting this error
Unable to open new log file / var / log / samba / log.% m: No such file or directory

what this log.%m?