[gpfsug-discuss] Auditing of SMB file access

[Sobey, Richard A]

Thanks John,


As I said to Aaron I will also take a look at this on Monday.


Regards

Richard

________________________________
From: gpfsug-discuss-bounces at spectrumscale.org <gpfsug-discuss-bounces at spectrumscale.org> on behalf of John T Olson <jtolson at us.ibm.com>
Sent: 09 December 2016 14:32
To: gpfsug main discussion list
Subject: Re: [gpfsug-discuss] Auditing of SMB file access


Richard,

I recently published a white paper in the Spectrum Scale wiki in developerworks about using Varonis with Spectrum Scale for auditing. This paper includes what type of file events are recognizable with the proposed setup. Here is link to the paper: https://www.ibm.com/developerworks/community/wikis/form/anonymous/api/wiki/fa32927c-e904-49cc-a4cc-870bcc8e307c/page/f0cc9b82-a133-41b4-83fe-3f560e95b35a/attachment/0ab62645-e0ab-4377-81e7-abd11879bb75/media/Spectrum_Scale_Varonis_Audit_Logging.pdf

Note that you have to register with developerworks, but it is a free registration.

Thanks,

John

John T. Olson, Ph.D., MI.C., K.EY.
Master Inventor, Software Defined Storage
957/9032-1 Tucson, AZ, 85744
(520) 799-5185, tie 321-5185 (FAX: 520-799-4237)
Email: jtolson at us.ibm.com
"Do or do not. There is no try." - Yoda

Olson's Razor:
Any situation that we, as humans, can encounter in life
can be modeled by either an episode of The Simpsons
or Seinfeld.

[Inactive hide details for Aaron Knister ---12/09/2016 06:21:40 AM---Hi Richard, Does this help?]Aaron Knister ---12/09/2016 06:21:40 AM---Hi Richard, Does this help?

From: Aaron Knister <aaron.knister at gmail.com>
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Date: 12/09/2016 06:21 AM
Subject: Re: [gpfsug-discuss] Auditing of SMB file access
Sent by: gpfsug-discuss-bounces at spectrumscale.org

________________________________



Hi Richard,

Does this help?

https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp<https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp/?client=safari>
[https://s0.wp.com/i/blank.jpg]<https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp/?client=safari>

Samba: Logging User Activity<https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp/?client=safari>
moiristo.wordpress.com
Ever wondered why Samba seems to log so many things, except what you're interested in? So did I, and it took me a while to find out that 1) there actually is a solution and 2) how to configur...



I've not used CES so I don't know at what level it manages the samba configuration file or how easily these changes could be integrated in light of that.

Sent from my iPhone

On Dec 9, 2016, at 6:52 AM, Sobey, Richard A <r.sobey at imperial.ac.uk<mailto:r.sobey at imperial.ac.uk>> wrote:

Hi all,

Is there any auditing we can enable to track changes and accesses to files/folders on GPFS (via SMB/CES if that matters).

Cheers
Richard

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org<http://spectrumscale.org/>
http://gpfsug.org/mailman/listinfo/gpfsug-discuss_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20161209/a49021fd/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graycol.gif
Type: image/gif
Size: 105 bytes
Desc: graycol.gif
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20161209/a49021fd/attachment.gif>