The whole bug log is available at http://bugs.debian.org/348419. here's what our user is saying: The vfs module "full_audit" is broken, somehow the parameter bitmap gets freed after the client disconnects from the share (but not the server). In result, the modules logs everything, filling up /var and using lots of cpu for smbd and syslog processes. The patch has been tested and works fine, it's an immediate fix but maybe not the right way to do it. It would be appreciated to have the patch in debian while it is submitted upstream.
Created attachment 1697 [details] Proposed patch
The underlying problem is that the success and failure bitmasks are *statics*. They'll be deleted on every disconnect on any share. They should be attached to the connection struct as a private data pointer. I'll look into fixing this properly. Jeremy.
Created attachment 1701 [details] Patch I've applied.
Should be fixed correctly in current SVN. Target for 3.0.21b. Jeremy.