Skip to Main Content
Forums

Infrastructure Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

Samba auditing issue

2648698Apr 18 2014 — edited Apr 22 2014

Hello all,

We would like to audit samba file access on our Solaris 10 using vfs module full_audit ( http://www.samba.org/samba/docs/man/manpages-3/vfs_full_audit.8.html)

smbd -D : Version 3.6.8

ls /usr/lib/samba/vfs :

[...]

full_audit.so

[...]

Conf is pretty simple :

In smb.conf, add these lines to [global] :

[global]

# Audit settings

full_audit:prefix = %u|%I|%S

full_audit:failure = connect

full_audit:success = connect disconnect opendir mkdir rmdir closedir open close read pread write pwrite sendfile rename unlink chmod

fchmod chown fchown chdir ftruncate lock symlink readlink link mknod realpath

full_audit:facility = local5

full_audit:priority = notice

Then, add vfs objects = full_audit to each share

[public]

comment = Public Stuff

path = /home/samba/public

public = yes

vfs object = full_audit


In syslog.conf, add local5.notice     /var/adm/log.audit

Then restart samba with

svcadm disable samba wins

svcadm enable samba wins

Then restart syslog with

svcadm restart svc:/system/system-log:default

or

svcadm refresh svc:/system/system-log

But log.audit file is not created. I created it but after have reloaded samba and syslog (and even rebooted)  he is still empty...

I tried to use full_audit module in Ubuntu (which use rsyslog) and it works well ...

Any suggestions ?

Thx for your help :-)

Comments

JohnWatson2

It is all in here,

http://www.oracle.com/us/support/library/lifetime-support-technology-069183.pdf

BPeaslandDBA

From Google Translate: 



What is the end date of the holder 11.2.0.4 ?


Can we keep the standard edition and standard edition licenses one or should we switch to standard edition 2 from 09.16.2016 ?


Finally it is possible to switch to standard edition 2 and stay 11.2.0.4 oracle ?

What is the end date of the holder 11.2.0.4 ?


Answered here: https://blogs.oracle.com/UPGRADE/entry/premier_support_for_oracle_11


Can we keep the standard edition and standard edition licenses one or should we switch to standard edition 2 from 09.16.2016 ?


I can't answer that one. SE2 was recently announced. I know some customers are worried that they won't be able to switch from SE1 to SE2 but I can't say for certain if their fears are valid or not. I don't use SE1 so I don't have first-hand experience.


Finally it is possible to switch to standard edition 2 and stay 11.2.0.4 oracle ?


It won't be. The first SE2 version is 12.1.0.2. There is no 11.2.0.4 SE1.


Hope that helps,

Brian

JohnWatson2

I see I missed one bit of your question: what to do with SE1 licences. Well, nothing! You cannot upgrade your SE1 databases to 12.1.0.2, they must stay at 12.1.0.1 or lower. If you want to go to the current release, you'll have to adjust the licence to SE2 and pay accordingly.

Furthermore, SE1 will no longer be available for purchase after 1 December, so if you want more SE1 licenses, do not hang about.

1 - 3
Locked Post
New comments cannot be posted to this locked post.

Post Details

Locked on May 20 2014
Added on Apr 18 2014
#audit, #log, #oracle-solaris, #solaris-10
1 comment
1,502 views