samba - Nov 2007 - Limit connections on per file basis

I host a server where the files on the server are licensed such that only one
user can access each file at any one time.

To clarify: There could be 100 files on the server, and each file can only
ever be read by one user.

I'm trying to find a way of either allowing only 1 TCP connection per file,
or perhaps forcing a read-lock on every file opened such that no other users
can access a file when another user opens it.

So far the only way I've found of doing this is putting each file in
it's
own share and setting the "max connections" param to 1.  It's fair
to say
that this is impractical, and not scalable.

The server is a GNU/Linux system running Ubuntu 6.06 and Samba 3.0.22.

It might be something I can solve outside of the samba software, using OS
software instead.  Any suggestions on how to solve this problem would be
great.  

Thanks

-Ben
-- 
View this message in context:
http://www.nabble.com/Limit-connections-on-per-file-basis-tf4902149.html#a14042424
Sent from the Samba - General mailing list archive at Nabble.com.

dear all 

we are using samba at serveral locations over years successfully. as we 
have 
some problems with acl's we tried to upgrade from 3.0.24 to 3.0.27a 
as fare as we can see, all is working fine, except users cannot change the 
password.
after some seconds a window appears:
"You do not have permission to change your password"

looking in the log seeing the following infos:

[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chgpasswd(462)
  chgpasswd: Password change (as_root=Yes) for user: mtest
[2007/11/30 11:23:55, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2007/11/30 11:23:55, 3] smbd/uid.c:push_conn_ctx(358)
  push_conn_ctx(113) : conn_ctx_stack_ndx = 1
[2007/11/30 11:23:55, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chat_with_program(430)
  chat_with_program: Dochild for user mtest (uid=0,gid=0) (as_root = Yes)
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:dochild(200)
  could not read default terminal attributes on pty
[2007/11/30 11:23:55, 3] smbd/sec_ctx.c:pop_sec_ctx(356)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/11/30 11:23:55, 0] smbd/chgpasswd.c:chat_with_program(440)
  chat_with_program: Error: dochild() returned 0
[2007/11/30 11:23:55, 2] smbd/chgpasswd.c:expect(285)
  expect: Error 0
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:talktochild(316)
  Response 1 incorrect
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chat_with_program(372)
  chat_with_program: Child failed to change password: mtest
[2007/11/30 11:23:55, 3] smbd/chgpasswd.c:chat_with_program(404)
  chat_with_program: The process exited with status 1 while we were 
waiting


here are the relevant configs in smb.conf 

[global]
        workgroup = TZB
        netbios name = EG1
        keepalive = 600
        update encrypted = Yes
        idmap backend = ldap:ldap://localhost:389
        passdb backend = ldapsam:ldap://localhost:389
        passwd program = /uni/bin/ldapsync.pl -o %u
        passwd chat = New %n\n new %n\n *changed* \n
        passwd chat timeout = 20
        passwd chat debug = Yes
        unix password sync = yes
        hostname lookups = yes
        log level = 3
        log file = /var/adm/samba/%m.log
        logon script = logon.cmd
        logon path         logon drive = F:
        domain logons = Yes
        allow trusted domains = yes
        ldapsam:trusted = yes
        oplock break wait time = 30
        os level = 34
        preferred master = Yes
        domain master = Yes
        local master = Yes
        wins support = Yes
        #wins server = 172.18.60.72
        name resolve order = wins bcast
        host msdfs = No
        guest account = nobody
        ldap suffix = dc=ages,dc=at
        ldap machine suffix = ou=maschinen
        ldap user suffix = ou=people
        ldap group suffix = ou=group
        ldap admin dn = "cn=manager,dc=ages,dc=at"
        ldap ssl = no
        deadtime = 20
        enable privileges = Yes
        admin users = root edvtest installpc barainst
        vscan-clamav:config-file = 
/usr/local/samba3024/lib/vscan-clamav.conf
        printing = bsd
        #Wert in Millisekunden-bei Bedarf bitte anpassen
        ldap replication sleep = 1000
        unix charset = CP850
        display charset = ASCII
        dos charset = CP850
        socket options = 
        time server = yes
        vfs objects = recycle vscan-clamav extd_audit
        acl map full control = Yes
        recycle:keeptree = Yes
        recycle:touch = Yes
        recycle:versions = yes
        recycle:maxsize = 50000000
        recycle:exclude = ~*,*TMP,*tmp,*temp,*.o,*.obj,~$*,*.~??
        recycle:excludedir = /tmp,/temp,/cache
        recycle:repository = 


doing the same with 3.0.24 all is fine.

your help is welcome. 

best regards 
hans 

--
 


Firma & Rechtsform: Österreichische Agentur für Gesundheit und
Ernährungssicherheit GmbH  Sitz: Spargelfeldstraße 191, 1226 Wien 
Firmenbuchnummer: FN 223056z   Firmenbuchgericht: Handelsgericht Wien