dsdb: audit samdb and password changes
authorGary Lockyer <gary@catalyst.net.nz>
Tue, 3 Apr 2018 23:59:41 +0000 (11:59 +1200)
committerAndrew Bartlett <abartlet@samba.org>
Sat, 9 Jun 2018 13:02:11 +0000 (15:02 +0200)
commit1c0f743c2d51c74b146d5ceea3252683450f639f
treeb54991f4dbc6e0fcbf3079e4736c70f15a85e6bb
parent7ddbf6035dfec6806536f99d0257245f70661363
dsdb: audit samdb and password changes

Add audit logging of DSDB operations and password changes, log messages
are logged in human readable format and if samba is commpile with
JANSSON support in JSON format.

Log:
  * Details all DSDB add, modify and delete operations. Logs
    attributes, values, session details, transaction id.
  * Transaction roll backs.
  * Prepare commit and commit failures.
  * Summary details of replicated updates.

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
12 files changed:
python/samba/tests/audit_log_base.py [new file with mode: 0644]
python/samba/tests/audit_log_dsdb.py [new file with mode: 0644]
python/samba/tests/audit_log_pass_change.py [new file with mode: 0644]
selftest/target/Samba4.pm
source4/dsdb/samdb/ldb_modules/audit_log.c [new file with mode: 0644]
source4/dsdb/samdb/ldb_modules/audit_util.c [new file with mode: 0644]
source4/dsdb/samdb/ldb_modules/samba_dsdb.c
source4/dsdb/samdb/ldb_modules/tests/test_audit_log.c [new file with mode: 0644]
source4/dsdb/samdb/ldb_modules/tests/test_audit_util.c [new file with mode: 0644]
source4/dsdb/samdb/ldb_modules/wscript_build
source4/dsdb/samdb/ldb_modules/wscript_build_server
source4/selftest/tests.py