The whole bug log is available at http://bugs.debian.org/348419. here's what our user is saying:
The vfs module "full_audit" is broken, somehow the parameter bitmap
gets freed after the client disconnects from the share (but not the
server). In result, the modules logs everything, filling up /var and
using lots of cpu for smbd and syslog processes.
The patch has been tested and works fine, it's an immediate fix but
maybe not the right way to do it.
It would be appreciated to have the patch in debian while it is
Created attachment 1697 [details]
The underlying problem is that the success and failure bitmasks are *statics*. They'll be deleted on every disconnect on any share. They should be attached to the connection struct as a private data pointer. I'll look into fixing this properly.
Created attachment 1701 [details]
Patch I've applied.
Should be fixed correctly in current SVN. Target for 3.0.21b.