summaryrefslogtreecommitdiffstats
path: root/docs-xml/smbdotconf/misc/dsdbgroupchangenotification.xml
diff options
context:
space:
mode:
Diffstat (limited to 'docs-xml/smbdotconf/misc/dsdbgroupchangenotification.xml')
-rw-r--r--docs-xml/smbdotconf/misc/dsdbgroupchangenotification.xml29
1 files changed, 29 insertions, 0 deletions
diff --git a/docs-xml/smbdotconf/misc/dsdbgroupchangenotification.xml b/docs-xml/smbdotconf/misc/dsdbgroupchangenotification.xml
new file mode 100644
index 0000000..3972e72
--- /dev/null
+++ b/docs-xml/smbdotconf/misc/dsdbgroupchangenotification.xml
@@ -0,0 +1,29 @@
+<samba:parameter name="dsdb group change notification"
+ context="G"
+ type="boolean"
+ xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
+<description>
+ <para>When enabled, this option causes Samba (acting as an
+ Active Directory Domain Controller) to stream group membership change
+ events across the internal message bus. Scripts built using
+ Samba's python bindings can listen to these events by
+ registering as the service
+ <filename moreinfo="none">dsdb_group_event</filename>.</para>
+
+ <para>This is <emphasis>not</emphasis> needed for the audit
+ logging described in <smbconfoption name="log level"/>.</para>
+
+ <para>Instead, this should instead be considered a developer
+ option (it assists in the Samba testsuite) rather than a
+ facility for external auditing, as message delivery is not
+ guaranteed (a feature that the testsuite works around).</para>
+
+ <para>The Samba database events are also logged via the normal
+ logging methods when the <smbconfoption name="log level"/> is
+ set appropriately, say to
+ <command moreinfo="none">dsdb_group_json_audit:5</command>.</para>
+
+</description>
+
+<value type="default">no</value>
+</samba:parameter>