[gpfsug-discuss] Auditing of SMB file access
Sobey, Richard A
r.sobey at imperial.ac.uk
Thu Dec 15 13:13:43 GMT 2016
Ah. I stopped reading when I read that the service account needs Domain Admin rights. I doubt that will fly unfortunately.
Thanks though John.
Richard
From: gpfsug-discuss-bounces at spectrumscale.org [mailto:gpfsug-discuss-bounces at spectrumscale.org] On Behalf Of John T Olson
Sent: 09 December 2016 14:33
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Subject: Re: [gpfsug-discuss] Auditing of SMB file access
Richard,
I recently published a white paper in the Spectrum Scale wiki in developerworks about using Varonis with Spectrum Scale for auditing. This paper includes what type of file events are recognizable with the proposed setup. Here is link to the paper: https://www.ibm.com/developerworks/community/wikis/form/anonymous/api/wiki/fa32927c-e904-49cc-a4cc-870bcc8e307c/page/f0cc9b82-a133-41b4-83fe-3f560e95b35a/attachment/0ab62645-e0ab-4377-81e7-abd11879bb75/media/Spectrum_Scale_Varonis_Audit_Logging.pdf
Note that you have to register with developerworks, but it is a free registration.
Thanks,
John
John T. Olson, Ph.D., MI.C., K.EY.
Master Inventor, Software Defined Storage
957/9032-1 Tucson, AZ, 85744
(520) 799-5185, tie 321-5185 (FAX: 520-799-4237)
Email: jtolson at us.ibm.com<mailto:jtolson at us.ibm.com>
"Do or do not. There is no try." - Yoda
Olson's Razor:
Any situation that we, as humans, can encounter in life
can be modeled by either an episode of The Simpsons
or Seinfeld.
[Inactive hide details for Aaron Knister ---12/09/2016 06:21:40 AM---Hi Richard, Does this help?]Aaron Knister ---12/09/2016 06:21:40 AM---Hi Richard, Does this help?
From: Aaron Knister <aaron.knister at gmail.com<mailto:aaron.knister at gmail.com>>
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org<mailto:gpfsug-discuss at spectrumscale.org>>
Date: 12/09/2016 06:21 AM
Subject: Re: [gpfsug-discuss] Auditing of SMB file access
Sent by: gpfsug-discuss-bounces at spectrumscale.org<mailto:gpfsug-discuss-bounces at spectrumscale.org>
________________________________
Hi Richard,
Does this help?
https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp<https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp/?client=safari>
I've not used CES so I don't know at what level it manages the samba configuration file or how easily these changes could be integrated in light of that.
Sent from my iPhone
On Dec 9, 2016, at 6:52 AM, Sobey, Richard A <r.sobey at imperial.ac.uk<mailto:r.sobey at imperial.ac.uk>> wrote:
Hi all,
Is there any auditing we can enable to track changes and accesses to files/folders on GPFS (via SMB/CES if that matters).
Cheers
Richard
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org<http://spectrumscale.org/>
http://gpfsug.org/mailman/listinfo/gpfsug-discuss_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20161215/f485b360/attachment-0002.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 105 bytes
Desc: image001.gif
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20161215/f485b360/attachment-0002.gif>
More information about the gpfsug-discuss
mailing list