From dfa341c1eb2d952adccce6b8f65d6d2ab02112aa Mon Sep 17 00:00:00 2001 From: Gary Lockyer Date: Mon, 23 Apr 2018 09:00:54 +1200 Subject: [PATCH] smb.conf: Add dsdb group change notification parameter Signed-off-by: Gary Lockyer Reviewed-by: Andrew Bartlett --- .../misc/dsdbgroupchangenotification.xml | 27 +++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 docs-xml/smbdotconf/misc/dsdbgroupchangenotification.xml diff --git a/docs-xml/smbdotconf/misc/dsdbgroupchangenotification.xml b/docs-xml/smbdotconf/misc/dsdbgroupchangenotification.xml new file mode 100644 index 00000000000..2079f5145b2 --- /dev/null +++ b/docs-xml/smbdotconf/misc/dsdbgroupchangenotification.xml @@ -0,0 +1,27 @@ + + + When enabled, this option causes Samba (acting as an + Active Directory Domain Controller) to stream group membership change + events across the internal message bus. Scripts built using + Samba's python bindings can listen to these events by + registering as the service + dsdb_group_event. + + This should be considered a developer option (it assists + in the Samba testsuite) rather than a facility for external + auditing, as message delivery is not guaranteed (a feature + that the testsuite works around). Additionally Samba must be + not compiled with the --without-json-audit parameter for this + option to be effective. + + The group events are also logged via the normal + logging methods when the is + set appropriately. + + + +no + -- 2.47.2