[gpfsug-discuss] Auditing of SMB file access

Sobey, Richard A r.sobey at imperial.ac.uk
Thu Dec 15 13:13:43 GMT 2016


Ah. I stopped reading when I read that the service account needs Domain Admin rights. I doubt that will fly unfortunately.

Thanks though John.

Richard

From: gpfsug-discuss-bounces at spectrumscale.org [mailto:gpfsug-discuss-bounces at spectrumscale.org] On Behalf Of John T Olson
Sent: 09 December 2016 14:33
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Subject: Re: [gpfsug-discuss] Auditing of SMB file access


Richard,

I recently published a white paper in the Spectrum Scale wiki in developerworks about using Varonis with Spectrum Scale for auditing. This paper includes what type of file events are recognizable with the proposed setup. Here is link to the paper: https://www.ibm.com/developerworks/community/wikis/form/anonymous/api/wiki/fa32927c-e904-49cc-a4cc-870bcc8e307c/page/f0cc9b82-a133-41b4-83fe-3f560e95b35a/attachment/0ab62645-e0ab-4377-81e7-abd11879bb75/media/Spectrum_Scale_Varonis_Audit_Logging.pdf

Note that you have to register with developerworks, but it is a free registration.

Thanks,

John

John T. Olson, Ph.D., MI.C., K.EY.
Master Inventor, Software Defined Storage
957/9032-1 Tucson, AZ, 85744
(520) 799-5185, tie 321-5185 (FAX: 520-799-4237)
Email: jtolson at us.ibm.com<mailto:jtolson at us.ibm.com>
"Do or do not. There is no try." - Yoda

Olson's Razor:
Any situation that we, as humans, can encounter in life
can be modeled by either an episode of The Simpsons
or Seinfeld.

[Inactive hide details for Aaron Knister ---12/09/2016 06:21:40 AM---Hi Richard, Does this help?]Aaron Knister ---12/09/2016 06:21:40 AM---Hi Richard, Does this help?

From: Aaron Knister <aaron.knister at gmail.com<mailto:aaron.knister at gmail.com>>
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org<mailto:gpfsug-discuss at spectrumscale.org>>
Date: 12/09/2016 06:21 AM
Subject: Re: [gpfsug-discuss] Auditing of SMB file access
Sent by: gpfsug-discuss-bounces at spectrumscale.org<mailto:gpfsug-discuss-bounces at spectrumscale.org>

________________________________



Hi Richard,

Does this help?

https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp<https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp/?client=safari>

I've not used CES so I don't know at what level it manages the samba configuration file or how easily these changes could be integrated in light of that.

Sent from my iPhone

On Dec 9, 2016, at 6:52 AM, Sobey, Richard A <r.sobey at imperial.ac.uk<mailto:r.sobey at imperial.ac.uk>> wrote:
Hi all,

Is there any auditing we can enable to track changes and accesses to files/folders on GPFS (via SMB/CES if that matters).

Cheers
Richard

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org<http://spectrumscale.org/>
http://gpfsug.org/mailman/listinfo/gpfsug-discuss_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20161215/f485b360/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 105 bytes
Desc: image001.gif
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20161215/f485b360/attachment.gif>


More information about the gpfsug-discuss mailing list