enterprise-support team mailing list archive

[maravento <1953231@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

SO: Ubuntu 20.04.3 LTS x64
Samba: Version 4.13.14-Ubuntu
BUG: Duplicate IP

Conf:

vfs object = full_audit
full_audit:prefix = %I|%m|%S
full_audit:success = mkdirat read pread write pwrite renameat unlinkat
full_audit:failure = none
full_audit:facility = LOCAL7
full_audit:priority = notice

According to the doc:

%I the IP address of the client machine.
%m the NetBIOS name of the client machine (very useful).
%S the name of the current service, if any

so why show duplicate IP?

out:

Dec  2 11:37:13 user smbd_audit:
192.168.1.164|192.168.1.164|shared|renameat|ok|
/home/user/shared/folder/file

Expected:

Dec  2 11:37:13 user smbd_audit:
192.168.1.164|foouser|shared|renameat|ok|/home/user/shared/folder/file

PS: what is the equivalent of "rmdir" in the new version (not in the official list)
https://www.samba.org/samba/docs/current/man-html/vfs_full_audit.8.html

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to samba in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/1953231

Title:
  Samba vfs_full_audit not working as it should

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1953231/+subscriptions