It seems the server running the rsh script was not in the Filer's host.equiv. After host.equiv updated, the script worked. Should of double check :-)
Thanks for the response.
Marcus
-----Original Message----- From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Jon Michael Gimpel Sent: Tuesday, January 13, 2004 1:47 AM To: toasters@mathworks.com Subject: Re: cifs audit
What are you attempting to audit? Is it the CIFS file system .. such as read's, delete's, permission changes etc? If so, CIFS still needs to be set to audit like that of the native NTFS structure. You will need to do this via explorer by:
- right clicking the directory or file - security tab - advanced - auditing - adding a common group or suspected user - selecting what you are attempting to audit
-Jon
"Bui, Marcus" <Marcus.Bui@aiminvestments.com mailto:Marcus.Bui@aiminvestments.com > wrote in message news:0D1B378426DB3B4DB200AF4738F3E9E7090FD101@USHOUXML04 news:0D1B378426DB3B4DB200AF4738F3E9E7090FD101@USHOUXML04 ...
I have F820 running DOT 6.4.2P6 with CIFS only. I noticed the cifs audit log does not log all events. The audit log is dump and saved every night at midnight via a rsh script. Looking through several log file, there are only a few entries in each of the file. All of the entries are within 16 minutes after midnight when the audit file is dump. These are the settings. I compare it with two other Filers, F880c DOT 6.4.2P12, with the same settings the audit log worked fine.
cifs.audit.enable on cifs.audit.file_access_events.enable on cifs.audit.logon_events.enable on cifs.audit.logsize 204800000 cifs.audit.saveas /etc/log/adtlog.evt
Any ideas?
thanks,
Marcus Bui
_____
Confidentiality Note: The information contained in this message, and any attachments, may contain confidential and/or privileged material. It is intended solely for the person or entity to which it is addressed. Any review, retransmission, dissemination, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.
----------------------------------------- Confidentiality Note: The information contained in this message, and any attachments, may contain confidential and/or privileged material. It is intended solely for the person or entity to which it is addressed. Any review, retransmission, dissemination, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.
Hi,
I have an older f840 no longer on support that's getting a low battery warning. Although nv says it's ok, I'd like to replace the battery: filer3*> nv NVRAM3 size: 134217728 (board max = 256MB) Battery status: OK EEPROM Signed: YES Battery voltage: 6720mV LM81 Multiplier: 56 EEPROM Version: 2
Is there someone that sells these batteries or knows specifically what battery to get? (I can't open the filer because it's in a remote location)
Thanks,
Deanan
#-----Original Message----- #From: owner-toasters@mathworks.com #[mailto:owner-toasters@mathworks.com] On Behalf Of Bui, Marcus #Sent: Tuesday, January 13, 2004 7:23 AM #To: 'Jon Michael Gimpel'; 'toasters@mathworks.com' #Subject: RE: cifs audit # #It seems the server running the rsh script was not in the #Filer's host.equiv. After host.equiv updated, the script #worked. Should of double check :-) # #Thanks for the response. # #Marcus # # -----Original Message----- # From: owner-toasters@mathworks.com #[mailto:owner-toasters@mathworks.com] On Behalf Of Jon Michael Gimpel # Sent: Tuesday, January 13, 2004 1:47 AM # To: toasters@mathworks.com # Subject: Re: cifs audit # # # What are you attempting to audit? Is it the CIFS file #system .. such as read's, delete's, permission changes etc? #If so, CIFS still needs to be set to audit like that of the #native NTFS structure. You will need to do this via explorer by: # # - right clicking the directory or file # - security tab # - advanced # - auditing # - adding a common group or suspected user # - selecting what you are attempting to audit # # -Jon # # # # "Bui, Marcus" Marcus.Bui@aiminvestments.com wrote in #message news:0D1B378426DB3B4DB200AF4738F3E9E7090FD101@USHOUXML04... # # I have F820 running DOT 6.4.2P6 with CIFS only. # I noticed the cifs audit log does not log all events. The #audit log is dump and saved every night at midnight via a rsh #script. Looking through several log file, there are only a #few entries in each of the file. All of the entries are #within 16 minutes after midnight when the audit file is dump. # These are the settings. I compare it with two other Filers, #F880c DOT 6.4.2P12, with the same settings the audit log worked fine. # # # cifs.audit.enable on # cifs.audit.file_access_events.enable on # cifs.audit.logon_events.enable on # cifs.audit.logsize 204800000 # cifs.audit.saveas /etc/log/adtlog.evt # # Any ideas? # # # thanks, # # Marcus Bui # # # #________________________________ # # # # # Confidentiality Note: The information contained #in this message, and any attachments, may contain #confidential and/or privileged material. It is intended #solely for the person or entity to which it is addressed. Any #review, retransmission, dissemination, or taking of any #action in reliance upon this information by persons or #entities other than the intended recipient is prohibited. If #you received this in error, please contact the sender and #delete the material from any computer. # #________________________________ # #Confidentiality Note: The information contained in this #message, and any attachments, may contain confidential and/or #privileged material. It is intended solely for the person or #entity to which it is addressed. Any review, retransmission, #dissemination, or taking of any action in reliance upon this #information by persons or entities other than the intended #recipient is prohibited. If you received this in error, #please contact the sender and delete the material from any computer. # #
I'm not sure it's related to your situation, but there is a bug report (Bug ID 47389) concerning false low battery warnings.
On Tue, 13 Jan 2004, deanan wrote:
Hi,
I have an older f840 no longer on support that's getting a low battery warning. Although nv says it's ok, I'd like to replace the battery: filer3*> nv NVRAM3 size: 134217728 (board max = 256MB) Battery status: OK EEPROM Signed: YES Battery voltage: 6720mV LM81 Multiplier: 56 EEPROM Version: 2
Is there someone that sells these batteries or knows specifically what battery to get? (I can't open the filer because it's in a remote location)
Thanks,
Deanan
#-----Original Message----- #From: owner-toasters@mathworks.com #[mailto:owner-toasters@mathworks.com] On Behalf Of Bui, Marcus #Sent: Tuesday, January 13, 2004 7:23 AM #To: 'Jon Michael Gimpel'; 'toasters@mathworks.com' #Subject: RE: cifs audit # #It seems the server running the rsh script was not in the #Filer's host.equiv. After host.equiv updated, the script #worked. Should of double check :-) # #Thanks for the response. # #Marcus # # -----Original Message----- # From: owner-toasters@mathworks.com #[mailto:owner-toasters@mathworks.com] On Behalf Of Jon Michael Gimpel # Sent: Tuesday, January 13, 2004 1:47 AM # To: toasters@mathworks.com # Subject: Re: cifs audit # # # What are you attempting to audit? Is it the CIFS file #system .. such as read's, delete's, permission changes etc? #If so, CIFS still needs to be set to audit like that of the #native NTFS structure. You will need to do this via explorer by: # # - right clicking the directory or file # - security tab # - advanced # - auditing # - adding a common group or suspected user # - selecting what you are attempting to audit # # -Jon # # # # "Bui, Marcus" Marcus.Bui@aiminvestments.com wrote in #message news:0D1B378426DB3B4DB200AF4738F3E9E7090FD101@USHOUXML04... # # I have F820 running DOT 6.4.2P6 with CIFS only. # I noticed the cifs audit log does not log all events. The #audit log is dump and saved every night at midnight via a rsh #script. Looking through several log file, there are only a #few entries in each of the file. All of the entries are #within 16 minutes after midnight when the audit file is dump. # These are the settings. I compare it with two other Filers, #F880c DOT 6.4.2P12, with the same settings the audit log worked fine. # # # cifs.audit.enable on # cifs.audit.file_access_events.enable on # cifs.audit.logon_events.enable on # cifs.audit.logsize 204800000 # cifs.audit.saveas /etc/log/adtlog.evt # # Any ideas? # # # thanks, # # Marcus Bui # # # #________________________________ # # # # # Confidentiality Note: The information contained #in this message, and any attachments, may contain #confidential and/or privileged material. It is intended #solely for the person or entity to which it is addressed. Any #review, retransmission, dissemination, or taking of any #action in reliance upon this information by persons or #entities other than the intended recipient is prohibited. If #you received this in error, please contact the sender and #delete the material from any computer. # #________________________________ # #Confidentiality Note: The information contained in this #message, and any attachments, may contain confidential and/or #privileged material. It is intended solely for the person or #entity to which it is addressed. Any review, retransmission, #dissemination, or taking of any action in reliance upon this #information by persons or entities other than the intended #recipient is prohibited. If you received this in error, #please contact the sender and delete the material from any computer. # #
Don't forget that when you get a new battery it does need to charge inside the system before you use it in production.
July ----- Original Message ----- From: "David Fent" dave@pdi.com To: "deanan" list@delusion.com Cc: toasters@mathworks.com Sent: Tuesday, January 13, 2004 3:22 PM Subject: Re: f800 batteries
I'm not sure it's related to your situation, but there is a bug report (Bug ID 47389) concerning false low battery warnings.
On Tue, 13 Jan 2004, deanan wrote:
Hi,
I have an older f840 no longer on support that's getting a low battery
warning.
Although nv says it's ok, I'd like to replace the battery: filer3*> nv NVRAM3 size: 134217728 (board max = 256MB) Battery status: OK EEPROM Signed: YES Battery voltage: 6720mV LM81 Multiplier: 56 EEPROM Version: 2
Is there someone that sells these batteries or knows specifically what battery to get? (I can't open the filer because it's in a remote
location)
Thanks,
Deanan
#-----Original Message----- #From: owner-toasters@mathworks.com #[mailto:owner-toasters@mathworks.com] On Behalf Of Bui, Marcus #Sent: Tuesday, January 13, 2004 7:23 AM #To: 'Jon Michael Gimpel'; 'toasters@mathworks.com' #Subject: RE: cifs audit # #It seems the server running the rsh script was not in the #Filer's host.equiv. After host.equiv updated, the script #worked. Should of double check :-) # #Thanks for the response. # #Marcus # # -----Original Message----- # From: owner-toasters@mathworks.com #[mailto:owner-toasters@mathworks.com] On Behalf Of Jon Michael Gimpel # Sent: Tuesday, January 13, 2004 1:47 AM # To: toasters@mathworks.com # Subject: Re: cifs audit # # # What are you attempting to audit? Is it the CIFS file #system .. such as read's, delete's, permission changes etc? #If so, CIFS still needs to be set to audit like that of the #native NTFS structure. You will need to do this via explorer by: # # - right clicking the directory or file # - security tab # - advanced # - auditing # - adding a common group or suspected user # - selecting what you are attempting to audit # # -Jon # # # # "Bui, Marcus" Marcus.Bui@aiminvestments.com wrote in #message news:0D1B378426DB3B4DB200AF4738F3E9E7090FD101@USHOUXML04... # # I have F820 running DOT 6.4.2P6 with CIFS only. # I noticed the cifs audit log does not log all events. The #audit log is dump and saved every night at midnight via a rsh #script. Looking through several log file, there are only a #few entries in each of the file. All of the entries are #within 16 minutes after midnight when the audit file is dump. # These are the settings. I compare it with two other Filers, #F880c DOT 6.4.2P12, with the same settings the audit log worked fine. # # # cifs.audit.enable on # cifs.audit.file_access_events.enable on # cifs.audit.logon_events.enable on # cifs.audit.logsize 204800000 # cifs.audit.saveas /etc/log/adtlog.evt # # Any ideas? # # # thanks, # # Marcus Bui # # # #________________________________ # # # # # Confidentiality Note: The information contained #in this message, and any attachments, may contain #confidential and/or privileged material. It is intended #solely for the person or entity to which it is addressed. Any #review, retransmission, dissemination, or taking of any #action in reliance upon this information by persons or #entities other than the intended recipient is prohibited. If #you received this in error, please contact the sender and #delete the material from any computer. # #________________________________ # #Confidentiality Note: The information contained in this #message, and any attachments, may contain confidential and/or #privileged material. It is intended solely for the person or #entity to which it is addressed. Any review, retransmission, #dissemination, or taking of any action in reliance upon this #information by persons or entities other than the intended #recipient is prohibited. If you received this in error, #please contact the sender and delete the material from any computer. # #
-- David Fent - Systems Administrator - PDI/Dreamworks