How to log samba events

logssamba

How can I log samba events?

I have samba-shared directories and I want to know what exactly someone have download from it.
Actually, I can watch iftop to figured out WHO have downloaded, but not WHAT.

Any ideas?

Best Answer

According to Chapter 9 of Using Samba - Troubleshooting Samba:

To turn logging on and off, set the appropriate level in the [global] section of smb.conf.

and

By default, logs are placed in samba_directory /var/smbd.log and samba_directory /var/nmbd.log, where samba_directory is the location where Samba was installed (typically, /usr/local/samba).

You can increase the logging level to show more detailed information. So just keep increasing the level until you have information that is detailed enough for your needs.

Related Solutions

Linux – How to log all the events performed on directory

If using Linux, you should try inotifywait command, it's designed to listen events on files or directories.

inotifywait -m -r /dir

You can use a while loop over that to filter the output.

Moreover, it's very light : no need to poll() every N seconds, that's all the magic.

See http://inotify-tools.sourceforge.net/

Centos – Mount issues with Samba under non-root user

Unlike NFS (which, BTW, should have been your choice for Linux to Linux mounting), SMB doesn't automatically share user authorizations across the protocol - at least not without a complicated "Active Directory" setup.

What you probably want to do (other than change to a protocol that does share some user details, such as NFS), is to mount the directory using the required user permissions, using the uid and gid options of the mount command or fstab file.

Use man fstab, man mount (the smbfs section) and man smbmount for more details.

You might also be interested in investigating the fmask and dmask options.

Best Answer

Related Solutions

Linux – How to log all the events performed on directory

Centos – Mount issues with Samba under non-root user

Related Question