I'm looking for a simple solution to log a single entry for each login to a Samba PDC.


My current attempt(s) of using a root prexec script in either the [netlogon] share definition or the [global] section are working, but not exactly as expected.

In [netlogon] I have an entry:

root preexec = /path/to/script/makelogonscript.pl %g %u %m %I

...where makelogonscript.pl generates a customized logon script for each user/group etc. AND, at the top of this script, a simple section has been added to log to a logonlog.log file the following information:

Date Time Primary_Group IP_Address machinename username

So far so good. The problem I am seeing with this is that every time someone logs into the domain, it appears that the [netlogon] share is opened twice because this script writes two entries for each user, usually about 4 seconds apart, sometimes about 10 seconds apart, but I have seen as high as 30 seconds or more.

ie:

03-16-2005 12:14:00 group xx.xx.xx.xx  machinename username
03-16-2005 12:14:04 group xx.xx.xx.xx  machinename username


Speaking in #samba on freenode we agreed that this might be because some versions of windows temporarily map a Z: drive to the netlogon share and then work off of that during the logon process.


OK, so next up was putting a simple root preexec logging script in the [global] section of smb.conf

Similar, but not exact results were found.

Most domain logins were logged twice, some were only logged once. Also, there are now some entries with "nobody" as the group and username but these "nobody" entries can be easily omitted from reports with sed/grep/awk/perl/whatever so they are inconsequential. :)


So, I guess my basic question is:

Where in the logon process is the correct place to tell Samba to do something (ie: run this script) but do it only once?

Thanks for any help!

-
Bill Arlofski
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to