Auditing in linux

Hello everybody,

I need to know whether an option for auditing is available in linux like in windows 2000. I have a linux machine set up as server. I'm sharing some files to windows clients using samba server. somebody is deleting some files in the share. i need to find out who is doing this.

If somebody knows the solution please help.

Thanks

Check out the following

http://www.redhat.com/partners/press...pentasafe.html
http://kernel-audit.sourceforge.net/

Trippwire will tell you what files were removed or edited or added but not the user that did it. I haven't used pentasafe or kernel-audit but it seems to address your concerns.

Hope it helps