Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

elgato2024

macrumors member
Original poster
Dec 4, 2019
56
0
running osx server5.2 on osx10.11

afp access log seems incomplete.
i get no entries at all for some logins/logouts/data access, while some get logged fine.

do smb-connections not get logged here?
and if not, where?
 

chrfr

macrumors G5
Jul 11, 2009
13,587
7,131
running osx server5.2 on osx10.11

afp access log seems incomplete.
i get no entries at all for some logins/logouts/data access, while some get logged fine.

do smb-connections not get logged here?
and if not, where?
SMB sharing and AFP sharing are completely independent; no SMB access will get logged in the AFP log. Take a look at this document to get a brief overview of what to do to raise the SMB logging, but from what I recall, there's not much that actually does get logged. https://krypted.com/mac-os-x-server/accessing-macos-server-5-2-logs/
 

elgato2024

macrumors member
Original poster
Dec 4, 2019
56
0
thank you for clarifying.

my plist file mentioned in ur link,
/Library/Preferences/SystemConfiguration/com.apple.smb.server.plist,
says:

<key>LoggingLevel</key>
<integer>2</integer>

I'd guess 0 is off, 1 on... whats 2?
neither the link nor the plist point to a smb logfile location
 

mick2

macrumors 6502
Oct 5, 2017
251
237
UK
thank you for clarifying.

my plist file mentioned in ur link,
/Library/Preferences/SystemConfiguration/com.apple.smb.server.plist,
says:

<key>LoggingLevel</key>
<integer>2</integer>

I'd guess 0 is off, 1 on... whats 2?
neither the link nor the plist point to a smb logfile location
If Apple's implementation follows the smb standard (and it might not) then LoggingLevel 2 can be the most basic, depending on what class its applied to. Eg, level 2 in the audit log will log authentication errors only.

Most of the logs go up to a logging level of 5 max, so you could try that.

All of this is spelled out in the man pages for smb.conf https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html
Look at the 'Log Level' section in particular.

hth
 

chrfr

macrumors G5
Jul 11, 2009
13,587
7,131
If Apple's implementation follows the smb standard (and it might not) then LoggingLevel 2 can be the most basic, depending on what class its applied to. Eg, level 2 in the audit log will log authentication errors only.

Most of the logs go up to a logging level of 5 max, so you could try that.

All of this is spelled out in the man pages for smb.conf https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html
Look at the 'Log Level' section in particular.

hth
Keep in mind that Apple switched from Samba to their own SMB implementation as of OS X 10.7 and Apple's SMB is missing a lot of functionality and configuration options present in Samba. From what I recall, regardless of log level set in the configuration, Apple's SMB doesn't log much of anything.
 
  • Like
Reactions: mick2
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.