Samba vfs_full_audit not working as it should
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
samba (Ubuntu) |
Invalid
|
Undecided
|
Unassigned |
Bug Description
SO: Ubuntu 20.04.3 LTS x64
Samba: Version 4.13.14-Ubuntu
BUG: Duplicate IP
Conf:
vfs object = full_audit
full_audit:prefix = %I|%m|%S
full_audit:success = mkdirat read pread write pwrite renameat unlinkat
full_audit:failure = none
full_audit:facility = LOCAL7
full_audit:priority = notice
According to the doc:
%I the IP address of the client machine.
%m the NetBIOS name of the client machine (very useful).
%S the name of the current service, if any
so why show duplicate IP? (%m parameter has been discontinued?)
out:
Dec 2 11:37:13 user smbd_audit: 192.168.
Expected:
Dec 2 11:37:13 user smbd_audit: 192.168.
description: | updated |
description: | updated |
Changed in samba (Ubuntu): | |
status: | New → Invalid |
description: | updated |
TCP/UDP 137,138,139,445 ports are open on the local network. And users' PCs have ports enabled and they all have Windows 10 (updated daily)