Samba vfs_full_audit not working as it should

Bug #1953231 reported by mrvst
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
samba (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

SO: Ubuntu 20.04.3 LTS x64
Samba: Version 4.13.14-Ubuntu
BUG: Duplicate IP

Conf:

vfs object = full_audit
full_audit:prefix = %I|%m|%S
full_audit:success = mkdirat read pread write pwrite renameat unlinkat
full_audit:failure = none
full_audit:facility = LOCAL7
full_audit:priority = notice

According to the doc:

%I the IP address of the client machine.
%m the NetBIOS name of the client machine (very useful).
%S the name of the current service, if any

so why show duplicate IP? (%m parameter has been discontinued?)

out:

Dec 2 11:37:13 user smbd_audit: 192.168.1.164|192.168.1.164|shared|renameat|ok| /home/user/shared/folder/file

Expected:

Dec 2 11:37:13 user smbd_audit: 192.168.1.164|foouser|shared|renameat|ok|/home/user/shared/folder/file

Revision history for this message
mrvst (maravento) wrote :

TCP/UDP 137,138,139,445 ports are open on the local network. And users' PCs have ports enabled and they all have Windows 10 (updated daily)

mrvst (maravento)
description: updated
description: updated
Revision history for this message
mrvst (maravento) wrote :

solved. missing open port 139 in smb.conf

closed ticket. thanks

Changed in samba (Ubuntu):
status: New → Invalid
mrvst (maravento)
description: updated
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.