Re: IDS detected smbpasswd modified

2005-07-19 Thread Albert Dorofeev
Mirco Bauer wrote: > On Mon, 2005-07-18 at 15:29 +0200, Albert Dorofeev wrote: > >>Does anyone have any idea why the ctime would change >>so often for a file that is essentially not changing >>in any way, especially not the attributes? > > it's changing, the computer passwords are updated by the

Re: IDS detected smbpasswd modified

2005-07-19 Thread Mirco Bauer
On Mon, 2005-07-18 at 15:29 +0200, Albert Dorofeev wrote: > Does anyone have any idea why the ctime would change > so often for a file that is essentially not changing > in any way, especially not the attributes? it's changing, the computer passwords are updated by the windows boxes regularly also

IDS detected smbpasswd modified

2005-07-18 Thread Albert Dorofeev
Hello, all! Looking at how samhain was recommended as a pain-free IDS here, I decided to give it a try. I never had enough time to configure a IDS properly in the past. Now samhain seems to work fine and does not appear to be too difficult at the first sight. Thanks for the recommendation. Anyway