From: Dave Airlie (airlied at domain csn.ul.ie)
Date: Fri 25 May 2001 - 14:43:40 IST
not sure maybe windows also has a similiar parameter, or use something to
give you the Windows eventvwr...
another trick is a script running nmblookup -S <workgroup>#1b and parse
the output .. and see if it changes when someone fecks with samba..
1b is PDC or domain master I think, 1c is BDC I think..also 1e is group
member.. not sure what 1d is ... it's been a long time since I've played
around with samba stuff at this level..
Dave.
On Fri, 25 May 2001, Tor Bendiksen wrote:
> Hi there good people.
>
> I have a problem here, and I can't hink of a solution for it.
>
> We have a segment with about 50 "powerusers" that each have their own little test setup.
> Now the problem is that now and again some gimp decides to try out those nice settings in smb.conf.. What happens next is that
> they will manage to make their box take over as domain admin, and our PDC/BDC (NT urgh!) will be knocked out. Then no one can
> log in as the samba box isn't at all set up as a domain controller, but rather a MP3 server for one user.
>
> What I was looking for is some way of monitoring this with Linux (as I don't really like NT, and I don't like to sit in the
> server room staring at NT logs waiting for someone to do this.).
>
> I want to monitor this segment, and if this happens then do sometihng about it (at the very least just mail me the ip address,
> and I can kick the muppet myself.)
>
> AFAIK samba can't do this, but if someone has any idea on how to get something like this done, please let me know.
> Bear in mind that we have no SNMP, and are running with static ip's.
>
> Regards,
> -Tor
>
>
>
-- David Airlie, Software Engineer http://www.skynet.ie/~airlied / airlied at domain skynet.ie pam_smb / Linux DecStation / Linux VAX / ILUG person
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:10:28 GMT