afp access log

[elgato2024]

running osx server5.2 on osx10.11

afp access log seems incomplete.
i get no entries at all for some logins/logouts/data access, while some get logged fine.

do smb-connections not get logged here?
and if not, where?

 

[chrfr]

running osx server5.2 on osx10.11

afp access log seems incomplete.
i get no entries at all for some logins/logouts/data access, while some get logged fine.

do smb-connections not get logged here?
and if not, where?

SMB sharing and AFP sharing are completely independent; no SMB access will get logged in the AFP log. Take a look at this document to get a brief overview of what to do to raise the SMB logging, but from what I recall, there's not much that actually does get logged. https://krypted.com/mac-os-x-server/accessing-macos-server-5-2-logs/

 

[elgato2024]

thank you for clarifying.

my plist file mentioned in ur link,
/Library/Preferences/SystemConfiguration/com.apple.smb.server.plist,
says:

<key>LoggingLevel</key>
<integer>2</integer>

I'd guess 0 is off, 1 on... whats 2?
neither the link nor the plist point to a smb logfile location

 

[mick2]

thank you for clarifying.

my plist file mentioned in ur link,
/Library/Preferences/SystemConfiguration/com.apple.smb.server.plist,
says:

<key>LoggingLevel</key>
<integer>2</integer>

I'd guess 0 is off, 1 on... whats 2?
neither the link nor the plist point to a smb logfile location

If Apple's implementation follows the smb standard (and it might not) then LoggingLevel 2 can be the most basic, depending on what class its applied to. Eg, level 2 in the audit log will log authentication errors only.

Most of the logs go up to a logging level of 5 max, so you could try that.

All of this is spelled out in the man pages for smb.conf https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html
Look at the 'Log Level' section in particular.

hth

 

[chrfr]

If Apple's implementation follows the smb standard (and it might not) then LoggingLevel 2 can be the most basic, depending on what class its applied to. Eg, level 2 in the audit log will log authentication errors only.

Most of the logs go up to a logging level of 5 max, so you could try that.

All of this is spelled out in the man pages for smb.conf https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html
Look at the 'Log Level' section in particular.

hth

Keep in mind that Apple switched from Samba to their own SMB implementation as of OS X 10.7 and Apple's SMB is missing a lot of functionality and configuration options present in Samba. From what I recall, regardless of log level set in the configuration, Apple's SMB doesn't log much of anything.