Topic: Accounting Logging

[John Davey]

Hello all!

I've deployed SME to 10 locations functioning as a basic Domain Controller / File Printer Server. Typically location serves 2 - 6 employees and the functionality is great.

I need to determine a way to track account activity, similar to using the event viewer in MS NT / 2000. I need to be able to track a user login / logout activities, and include the machine that they are using. Currently if I View Logs and select Samba "Machine Name" I can see the activity for a machine, but I need to be able to see the activity for an account.

I've looked at the contents of the /var/log files, and cannot find any detailed activities there. Can anyone provide some hints?

John.

[John Davey]

Hello,

Bad form to reply to your own messages I know but...

Does anyone have any insight to logging user account activities? I need to document logon and logout times, etc...

As soon as I have this issue resolved, I can get rid of MS products on the server side for good!

Thanks!
John.

[Michiel Blotwijk]

> Does anyone have any insight to logging user account
> activities? I need to document logon and logout times, etc...

I'm struggling with the same thing. The best I've come up with so far is to set "log level =1" in smb.conf, which gives me some log-in reporting. An other option would be to put some lines in netlogon.bat and to create a log-out script. However, both otions are far from bullet-proof.

Does anyone have a better suggestion?

Michiel

[Charlie Brady]

Michiel Blotwijk wrote:

> I'm struggling with the same thing. The best I've come up
> with so far is to set "log level =1" in smb.conf, which gives
> me some log-in reporting. An other option would be to put
> some lines in netlogon.bat and to create a log-out script.
> However, both otions are far from bullet-proof.
>
> Does anyone have a better suggestion?

Try "utmp = yes" in smb.conf. The use the "last" and "who" commands to check login activity.

Charlie

[Michiel Blotwijk]

> Try "utmp = yes" in smb.conf. The use the "last" and "who"
> commands to check login activity.
>
> Charlie

That's the difference between tinkerers and pros. Thanks Charlie!

[Franco]

which of the files should I modify to make this work?
 I'm assuming I need to add the line utmp=yes to one of the configuration files under /etc/e-smith/templates/etc/smb.conf/