Author Topic: smbd_audit fails  (Read 169 times)

dzidek23

  • Zen Apprentice
  • *
  • Posts: 40
  • Karma: +0/-0
    • View Profile
smbd_audit fails
« on: December 15, 2022, 03:14:25 pm »
I created an AD user for and network enabled scanner to use (scan_user) and there is a network share with Read/Write permissions for that user (networkscan)

If I run journalctl -xe I get this:

Code: [Select]
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|getxattr|fail (No data available)|/home/samba/shares/networkscan|security.NTACL
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|getxattr|fail (No data available)|/home/samba/shares/networkscan|security.NTACL
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|getxattr|fail (No data available)|/home/samba/shares/networkscan|user.DOSATTRIB
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|get_dos_attributes|fail (No data available)|/home/samba/shares/networkscan
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|get_shadow_copy_data|fail (Function not implemented)|
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|fsctl|fail (Function not implemented)|

It does NOT affect operation and users can scan to the share but why am I getting the smbd_audit fails?

aetcoadmin

  • Zen Apprentice
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Re: smbd_audit fails
« Reply #1 on: December 19, 2022, 03:17:11 am »
I am seeing the same.  I recently updated 3 servers from Zentyal 6.2 to 7.0 and here is a scrubbed snippet from /var/log/syslog:

Code: [Select]
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|getxattr|fail (No data available)|/home/samba/shares/sharename|user.DOSATTRIB
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|get_dos_attributes|fail (No data available)|/home/samba/shares/sharename
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|create_file|fail (Is a directory)|0x100080|file|open|/home/samba/shares/sharename
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|getxattr|fail (No data available)|/home/samba/shares/sharename|user.DOSATTRIB
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|get_dos_attributes|fail (No data available)|/home/samba/shares/sharename
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|getxattr|fail (No data available)|/home/samba/shares/sharename|user.DOSATTRIB
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|get_dos_attributes|fail (No data available)|/home/samba/shares/sharename
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|getxattr|fail (No data available)|/home/samba/shares/sharename|user.DOSATTRIB
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|get_dos_attributes|fail (No data available)|/home/samba/shares/sharename

The server seems to work correctly, and I've tried a few ideas ( apt install attr and apt install xattr) but nothing I've tried has helped.

Anyone have any ideas on how to fix tihs?
« Last Edit: December 19, 2022, 03:23:00 am by aetcoadmin »