My apologies for repsonding to my own message, but I was hoping that
something that seems this simple would elicit some quick responses.
The short version is: I need a method to log each user logon to a Samba
PDC. Logging from a preexec script in the [netlogon] share works, but
users are logged twice. Is there a correct way to do this so that each
network logon is logged only once?
Original long version follows:
Bill Arlofski wrote:
I'm looking for a simple solution to log a single entry for each login
to a Samba PDC.
My current attempt(s) of using a root prexec script in either the
[netlogon] share definition or the [global] section are working, but not
exactly as expected.
In [netlogon] I have an entry:
root preexec = /path/to/script/makelogonscript.pl %g %u %m %I
...where makelogonscript.pl generates a customized logon script for each
user/group etc. AND, at the top of this script, a simple section has
been added to log to a logonlog.log file the following information:
Date Time Primary_Group IP_Address machinename username
So far so good. The problem I am seeing with this is that every time
someone logs into the domain, it appears that the [netlogon] share is
opened twice because this script writes two entries for each user,
usually about 4 seconds apart, sometimes about 10 seconds apart, but I
have seen as high as 30 seconds or more.
ie:
03-16-2005 12:14:00 group xx.xx.xx.xx machinename username
03-16-2005 12:14:04 group xx.xx.xx.xx machinename username
Speaking in #samba on freenode we agreed that this might be because some
versions of windows temporarily map a Z: drive to the netlogon share and
then work off of that during the logon process.
OK, so next up was putting a simple root preexec logging script in the
[global] section of smb.conf
Similar, but not exact results were found.
Most domain logins were logged twice, some were only logged once. Also,
there are now some entries with nobody as the group and username but
these nobody entries can be easily omitted from reports with
sed/grep/awk/perl/whatever so they are inconsequential. :)
So, I guess my basic question is:
Where in the logon process is the correct place to tell Samba to do
something (ie: run this script) but do it only once?
Thanks for any help!
-
Bill Arlofski
Bill Arlofski
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
