Home / user-409724

FieryRider's questions

Martin Hope
FieryRider
Asked: 2021-03-22 13:02:15 +0800 CST
  • 3

smbd and nmbd services log a lot of things as errors which clutters my journald logs when I filter it with journalctl -p 3. Is there a way to tell samba to not log start/stop/daemon_ready messages as errors (log level 3) but as normal messages instead (log level 5/6/7)? For example:

[2021/03/21 22:43:35.215757,  0] ../../lib/util/become_daemon.c:135(daemon_ready)
  daemon_ready: daemon 'nmbd' finished starting up and ready to serve connections
[2021/03/21 22:43:35.261318,  0] ../../lib/util/become_daemon.c:135(daemon_ready)
  daemon_ready: daemon 'smbd' finished starting up and ready to serve connections
[2021/03/21 22:43:47.678429,  0] ../../source3/nmbd/nmbd.c:60(terminate)
  Got SIGTERM: going down...
[2021/03/21 22:43:47.707379,  0] ../../lib/util/become_daemon.c:135(daemon_ready)
  daemon_ready: daemon 'nmbd' finished starting up and ready to serve connections
[2021/03/21 22:43:47.751871,  0] ../../lib/util/become_daemon.c:135(daemon_ready)
  daemon_ready: daemon 'smbd' finished starting up and ready to serve connections
[2021/03/21 22:44:10.782143,  0] ../../source3/nmbd/nmbd_become_lmb.c:398(become_local_master_stage2)
  *****

  Samba name server IVAILOPC-LIN is now a local master browser for workgroup WORKGROUP on subnet 192.168.0.101

  *****

These are obviously not errors and just clutter my log when I try to look for errors.

This is the relevant part of my config


log file = /var/log/samba/log.%m
samba journald
Martin Hope
FieryRider
Asked: 2017-04-22 11:37:56 +0800 CST
  • 0

I have a daemon.service that starts every time on different port so I need to allow this random port through iptables every time it starts and deny it every time it stops. So I need to run a script that allows every port in iptables before the daemon.service starts then run script that changes 'allow every port' rule to 'allow only the port that daemon.service uses' after the daemon.service starts and when daemon.service stops I need to run a script that removes that rule. NOTE that daemon.service runs as it's own user and to allow/deny ports through iptables i need to do it as root so I can't use ExecStartBefore/ExecStartAfter in daemon.service

Here is a scheme (kinda) of what needs to happen:

systemctl start deamon.service
|-executing as root 'iptables -A OUTPUT -p tcp -m multiport --dports 0:65535 -j ACCEPT'
|-starting daemon.service as it's own user (not as root)
|-finding (as root) what ports daemon.service uses with netstat (I can do that so I don't need explanation on how to do it)
|-executing as root 'iptables -D OUTPUT -p tcp -m multiport --dports 0:65535 -j ACCEPT'
|-executing as root 'iptables -A OUTPUT -p tcp -m multiport --dports 56731,31267 -j ACCEPT' (ports that were found by netstat)
systemctl stop daemon.service
|-stopping daemon.service as it's own user (not as root)
|-executing as root 'iptables -D OUTPUT -p tcp -m multiport --dports 56731,31267 -j ACCEPT'

NOTE: daemon.service can't be made to run as specified port (not random)

I'm running debian btw.

debian