sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-01 05:47:28 +03:00
Code

docs: Expand the "log level" docs on audit logging

Browse Source 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14689

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
(cherry picked from commit 38fe888f95f8d22736080ed521939be932e7bca0)
This commit is contained in:
Andrew Bartlett 2021-04-16 10:43:07 +12:00 committed by Karolin Seeger
parent cc4e8ec610
commit 7db0a50a8f
1 changed files with 33 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
docs-xml/smbdotconf/logging/loglevel.xml
View File

@ -84,25 +84,53 @@
<listitem><para>5: Anonymous Authentication and Authorization Success</para></listitem> <listitem><para>5: Anonymous Authentication and Authorization Success</para></listitem>
</itemizedlist> </itemizedlist>
<para>Changes to the <command moreinfo="none">sam.ldb</command> <para>Changes to the AD DC <command moreinfo="none">sam.ldb</command>
database are logged under the <parameter>dsdb_audit</parameter> database are logged under the <parameter>dsdb_audit</parameter>
and a JSON representation is logged under and a JSON representation is logged under
<parameter>dsdb_json_audit</parameter>.</para> <parameter>dsdb_json_audit</parameter>.</para>
<para>Group membership changes to the <command <para>Group membership changes to the AD DC <command
moreinfo="none">sam.ldb</command> database are logged under the moreinfo="none">sam.ldb</command> database are logged under the
<parameter>dsdb_group_audit</parameter> and a JSON representation <parameter>dsdb_group_audit</parameter> and a JSON representation
is logged under is logged under
<parameter>dsdb_group_json_audit</parameter>.</para> <parameter>dsdb_group_json_audit</parameter>.</para>
<para>Password changes and Password resets are logged under <para>Log levels for <parameter>dsdb_audit</parameter>,
<parameter>dsdb_password_audit</parameter> and a JSON representation is logged under the <parameter>dsdb_json_audit</parameter>,
<parameter>dsdb_password_json_audit</parameter>.</para> <parameter>dsdb_group_audit</parameter>,
<parameter>dsdb_group_json_audit</parameter> and
<parameter>dsdb_json_audit</parameter> are:</para>
<itemizedlist>
<listitem><para>5: Database modifications</para></listitem>
<listitem><para>5: Replicated updates from another DC</para></listitem>
</itemizedlist>
<para>Password changes and Password resets in the AD DC are logged
under <parameter>dsdb_password_audit</parameter> and a JSON
representation is logged under the
<parameter>dsdb_password_json_audit</parameter>. Password changes
will also appears as authentication events via
<parameter>auth_audit</parameter> and
<parameter>auth_audit_json</parameter>.</para>
<para>Log levels for <parameter>dsdb_password_audit</parameter> and
<parameter>dsdb_password_json_audit</parameter> are:</para>
<itemizedlist>
<listitem><para>5: Successful password changes and resets</para></listitem>
</itemizedlist>
<para>Transaction rollbacks and prepare commit failures are logged under <para>Transaction rollbacks and prepare commit failures are logged under
the <parameter>dsdb_transaction_audit</parameter> and a JSON representation is logged under the the <parameter>dsdb_transaction_audit</parameter> and a JSON representation is logged under the
<parameter>dsdb_transaction_json_audit</parameter>. </para> <parameter>dsdb_transaction_json_audit</parameter>. </para>
<para>Log levels for <parameter>dsdb_transaction_audit</parameter> and
<parameter>dsdb_transaction_json</parameter> are:</para>
<itemizedlist>
<listitem><para>5: Transaction failure (rollback)</para></listitem>
<listitem><para>10: Transaction success (commit)</para></listitem>
</itemizedlist>
<para>Transaction roll-backs are possible in Samba, and whilst <para>Transaction roll-backs are possible in Samba, and whilst
they rarely reflect anything more than the failure of an they rarely reflect anything more than the failure of an
individual operation (say due to the add of a conflicting record), individual operation (say due to the add of a conflicting record),