Samba version - 3.6.22
I couldn't see any audit addon on my smb.conf
This is my smb.conf
>
My smb.conf have this:
### Optimizaciones
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=65536 SO_SNDBUF=65536
strict sync = no
sync always = no
#Logs
log level = 1
syslog = 0
log file = /var/log/samba/%m
max log size = 50
Maybe it help, it have some optimizations and avoid syslog. I'm using a
lot of W7 PCs connected without problem with that options in a Samba 3.6.6.
El 19/11/14 a las 10:28, Jagan Teki escribió:
--
------------------------------------------------------------
Daniel Carrasco Marín
Técnicas Territoriales y Urbanas, S.L.
C/ Zurbano 92, 2º, 28003 Madrid
Tfno.: +34 91 571 93 46 (ext. 148) # Fax: +34 91 571 58 72
------------------------------------------------------------
--
These setting will decrease the write speed from 103 to 78 MBps but no
change in read.
On Fri, Nov 21, 2014 at 5:48 AM, Daniel Carrasco Marín <d.car...@ttu.es>
wrote:
> Hi,
--
David Bear
mobile: (602) 903-6476
> On Fri, Nov 21, 2014 at 5:48 AM, Daniel Carrasco Marín <d.car...@ttu.es>
> wrote:
>
>> Hi,
>>
>> Is there any way to encrypt a file to avoid it usage outside of a domain?.
>> I've a Samba domain, with some Windows computers connected to that domain
>> and i want to know if something like that exist.
>>
>> Greetings!!
I don't see anything like that right now. It sounds like a *lot* of
pain to integrate with a stable, mission critical toolkit that's woven
into system operating systems and is exceptionally unlikely to ever be
excepted into the Windows kernels to work well with Samba.
You can achieve *most* of this by using a Kerberos sensitive file
sharing system, such as NFSv4 on Linux/UNIX hosts and CIFS group
enabled access on the Windows clients. It takes work to integrate
those, but it can certainly work with NetApp based servers.
And there is no defense in this approach to drag'n-drop, David is
quite right. But it's a reasonable place to work from.
Hi, that's truth ;)
I forgot to say that is only curiosity ;)
I was talking about something like windows option (right click
properties -> Advanced -> encrypt content...), but i'm not really sure
if that really works :P
Something like: if a user copy a file from server allow it usage in
every PC where he's logged (or anyone with permissions in that file),
but disallow to user reasd that file without be logged (in home for
exampled). Really it's a lot of work implement something like that and
sure that you need to install 3rd party software on clients to allow
windows to read permissions from file in AD, and get decryption key.
Thanks all!!