User last login


Could someone give me some direction on where to find the login history for a user? I’ve had a look through the samba logs but can’t see any entries with usernames. Do I need to increase the log verbosity or am I looking in the wrong place?



it appears that the usual AD-attribute lastLogonTimeStamp is not yet implemented in Samba 4.
But it looks like that you can derive some informations from /var/log/auth.log.
I can see entries like these on the DC:

Apr 20 10:11:36 master PAM-univentionsambadomain[6408]: continuing as user username Apr 20 10:11:36 master smbd[6408]: pam_unix(samba:session): session opened for user username by (uid=0) Apr 20 10:11:48 master smbd[6408]: pam_unix(samba:session): session closed for user DOM+username


Thanks Dirk - your info was a great help