[gpfsug-discuss] Auditing of SMB file access

[John T Olson]

Richard,

I recently published a white paper in the Spectrum Scale wiki in
developerworks about using Varonis with Spectrum Scale for auditing.  This
paper includes what type of file events are recognizable with the proposed
setup.  Here is  link to the paper:
https://www.ibm.com/developerworks/community/wikis/form/anonymous/api/wiki/fa32927c-e904-49cc-a4cc-870bcc8e307c/page/f0cc9b82-a133-41b4-83fe-3f560e95b35a/attachment/0ab62645-e0ab-4377-81e7-abd11879bb75/media/Spectrum_Scale_Varonis_Audit_Logging.pdf

Note that you have to register with developerworks, but it is a free
registration.

Thanks,

John

John T. Olson, Ph.D., MI.C., K.EY.
Master Inventor, Software Defined Storage
957/9032-1 Tucson, AZ, 85744
(520) 799-5185, tie 321-5185 (FAX: 520-799-4237)
Email: jtolson at us.ibm.com
"Do or do not.  There is no try." - Yoda

Olson's Razor:
Any situation that we, as humans, can encounter in life
can be modeled by either an episode of The Simpsons
or Seinfeld.



From:	Aaron Knister <aaron.knister at gmail.com>
To:	gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Date:	12/09/2016 06:21 AM
Subject:	Re: [gpfsug-discuss] Auditing of SMB file access
Sent by:	gpfsug-discuss-bounces at spectrumscale.org



Hi Richard,

Does this help?

https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp

I've not used CES so I don't know at what level it manages the samba
configuration file or how easily these changes could be integrated in light
of that.

Sent from my iPhone

On Dec 9, 2016, at 6:52 AM, Sobey, Richard A <r.sobey at imperial.ac.uk>
wrote:

      Hi all,

      Is there any auditing we can enable to track changes and accesses to
      files/folders on GPFS (via SMB/CES if that matters).

      Cheers
      Richard


      _______________________________________________
      gpfsug-discuss mailing list
      gpfsug-discuss at spectrumscale.org
      http://gpfsug.org/mailman/listinfo/gpfsug-discuss
      _______________________________________________
      gpfsug-discuss mailing list
      gpfsug-discuss at spectrumscale.org
      http://gpfsug.org/mailman/listinfo/gpfsug-discuss






-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20161209/d229f978/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graycol.gif
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20161209/d229f978/attachment.gif>