Samba

klorko · 11-02-2011, 03:07 AM

I have a question about Samba log files. Is there any easy way to check who and when modified a file in a specified directory? I can't find any sensible solution. Please help!

chrism01 · 11-02-2011, 07:50 PM

Are you asking about who modified a log file, or who modified a normal file ?

Generally, Unix files have perms options

Code:

user(owner) group other(world)
rwx         rwx      rwx

and ownerships of user & group.
You can lock them down pretty tight using ownerships & perms. See also ACLs if you want to get really picky...

klorko · 11-03-2011, 04:43 AM

I know there are permisions and ownerships, but I don't want to forbid writing. I just want to know who modified a file and when. Is it possible?

jschiwal · 11-03-2011, 05:04 AM

You will need to use auditing. Either a VFS module in samba, or using the general auditd kernel daemon.

See the Samba 3 HOWTO guide in Chapter 23. It covers stackable VFS modules.

You may have a "samba-doc" package available that supplies this book in pdf and/or html form, or you can download it from the samba.org website.