Samba Audit

File Release Notes and Changelog

Release Name: smb_audit-0.2-rc1

Notes:

* This is RC(release candidate) version. There maybe still some errors and typo.
  Also testing is appriciated as i have no much time to test every action myself.

* Extended message is implemented for the all functions, but there actions 
  excepted from logging: READDIR, SEEKDIR, TELLDIR, REWINDDIR(as these operations 
  has no reasonable error condition (end of dir is also failure), STAT, LSTAT, 
  FSTAT, LSEEK(as these operations are not informative). However you can uncomment
  logging in corresponding audit_*() functions and rebuild module.

* Header files bundled from Samba 3.0.21 might not work on other version.
  If you want to recompile your VFS module with older interface you need
  to install samba-devel package, remove header directories in src(include,
  nsswitch, smbwrapper, tdb, ubiqx) and edit SAMBA_SOURCE in Makefile to
  point to the directory with these include files from the version you want

* Binary VFS module bundled in this package depends on:
        linux-gate.so.1 =>  (0xffffe000)
        libmysqlclient.so.14 => /usr/lib/libmysqlclient.so.14 (0xb7dde000)
        libc.so.6 => /lib/tls/libc.so.6 (0xb7cc2000)
        libcrypt.so.1 => /lib/tls/libcrypt.so.1 (0xb7c94000)
        libnsl.so.1 => /lib/tls/libnsl.so.1 (0xb7c7e000)
        libm.so.6 => /lib/tls/libm.so.6 (0xb7c5b000)
        libssl.so.0 => /usr/lib/libssl.so.0 (0xb7c2a000)
        libcrypto.so.0 => /usr/lib/libcrypto.so.0 (0xb7b28000)
        libz.so.1 => /usr/lib/libz.so.1 (0xb7b16000)
        /lib/ld-linux.so.2 (0x80000000)
        libdl.so.2 => /lib/tls/libdl.so.2 (0xb7b12000)



Changes:

CHANGELOG

	This file contains a summary of the changes in each release.  The
	details may sometimes be technical, and are usually vague for the sake
	of brevity.


WHAT'S NEW?

	0.2.3-rc1
	---------
	Actions excepted from logging:
	- READDIR, SEEKDIR, TELLDIR, REWINDDIR as these operations has no reasonable error 
	  condition (end of dir is also failure), so always succeed and no valueable info,
	  only log fill up. You can enable it in corresponding audit_*() functions so.
	- STAT, LSTAT, FSTAT, LSEEK - do you need this load of crap? you can uncomment it 
	  in corresponding audit_*() functions. 
	Major code clean-up. All actions first performed and then logged. All logged actions
	now have extended message. If you see warning icon and no extended message in the GUI
	it means some internal error.
	Changed default actions to show to "Visible" only.

	0.2.3b
	------
	Web front end changes only. Added color/warning icon for empty extended message.
	On click record shows status: SUCCESS/ERROR/WARNING, type of action and 
	extended message if any.

	0.2.2b
	------
	Changed web front end. Added icons. Added 'Manage Logs' fuctionality.
	For major functions extended message is implemented - see NOTES.
	Close MySQL connection on disconnect.

	0.2.2a
	------
	Added section [smb_audit] to my.cnf for connection parameters. Connections settings
	are no longer hardcoded in logger.h. See INSTALL on how to configure connection.

	0.2.1a
	------
	Major module rewrite to be used with Samba 3. Put hooks on all actions.
	Allmost all actions are writen in the log directly to MySQL with libmysqlclient.
	Web-based filter to show only needed log entries. Web manager of "visible"
	log entries. Extended message is not yet implemented.

	0.1.1
	-----
	Changed audit.c module to easier parse its logs to MySQL database.
	Support of MySQL was removed from the module thus audit.pl script was
	created to maintain logging to MySQL. PHP part was complited with advanced
	capabilities of searching logs.