summaryrefslogtreecommitdiffstats
path: root/docs-xml/smbdotconf/misc/dsdbpasswordeventnotification.xml
blob: cd2cc98ff42e95ab4468ccf10909e1035d7d0b75 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
<samba:parameter name="dsdb password event notification"
                 context="G"
                 type="boolean"
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
	<para>When enabled, this option causes Samba (acting as an
	Active Directory Domain Controller) to stream password change
	and reset events across the internal message bus.
	Scripts built using Samba's python bindings can listen to these
	events by registering as the service
	<filename moreinfo="none">password_event</filename>.</para>

	<para>This is <emphasis>not</emphasis> needed for the audit
	logging described in <smbconfoption name="log level"/>.</para>

	<para>Instead, this should instead be considered a developer
	option (it assists in the Samba testsuite) rather than a
	facility for external auditing, as message delivery is not
	guaranteed (a feature that the testsuite works around).</para>

	<para>The Samba database events are also logged via the normal
	logging methods when the <smbconfoption name="log level"/> is
	set appropriately, say to
	<command moreinfo="none">dsdb_password_json_audit:5</command>.</para>

</description>

<value type="default">no</value>
</samba:parameter>