IBM Support

Primary Group requirements for element creation

Technote (FAQ)


Question

What is the difference in behavior on Microsoft Windows, Linux, and UNIX concerning the IBM Rational ClearCase Primary Group requirements as it relates to element creation?

Answer

The mkelem command has different Primary Group requirements on Windows and UNIX/Linux.

UNIX/Linux:

In order to create an element in a VOB, your Primary Group must match a group in the VOB's group list.


WINDOWS:

As long as you "are a member of" a group in the VOB's group list and the parent directory where the element will be created is owned by the group to which you are a member, you will be able to create elements in the VOB.


If, however, you are a member of more than one of the VOB's groups, the CLEARCASE_PRIMARY_GROUP will need to be set to one of these. See technote 1135509 for more information about the CLEARCASE_PRIMARY_GROUP variable.


Below are examples showing this difference.

UNIX/Linux:

%> cleartool describe vob:/vobs/protect
versioned object base "/vobs/protect"
created 09-Jan-03.16:31:47 by vobadm (vobadm.group1@UNIX-host)
VOB family feature level: 3
VOB storage host:pathname "UNIX-host:/export/home/user1/vobstore/protect.vbs"
VOB storage global pathname "/net/UNIX-host/export/home/user1/vobstore/protect.vbs"
database schema version: 54
VOB ownership:
owner atria.com/vobadm
group atria.com/group2
Attributes:
FeatureLevel = 3

UNIX-host% id -a
uid=22319(user1)
gid=20(group1) groups=20(group1),2(group2)

Note: User1 is a member of both group1 and group2, and the Primary Group of user1 is set to group1. The VOB, however, is owned by group2.


%>/usr/atria/etc/utils/credmap UNIX-host
Identity on local system:
User: atria.com/user1 (UNIX:UID-22319)
Primary group: atria.com/group1 (UNIX:GID-20)
Groups: (1)
atria.com/group2 (UNIX:GID-2)

Identity on host "UNIX-host":
User SID: UNIX:UID-22319
Primary group SID: UNIX:GID-20
Group SID list: (1)
UNIX:GID-2


%> cleartool mkelem -nc test.txt
cleartool: Error: Can't create object with group (group1) that is not in the VOB's group list.
cleartool: Error: Unable to create element "test.txt".


*******************************************************
*******************************************************

WINDOWS:

B:\protect>cleartool describe vob:\protect
versioned object base "\protect"
created 09-Jan-03.16:44:32 by user1.group1@WIN_HOST
VOB family feature level: 3
VOB storage host:pathname "WIN_HOST:C:\ClearCase_Storage\vobs\protect.vbs"
VOB storage global pathname "\\WIN_HOST\ccstg_c\vobs\protect.vbs"
database schema version: 54
VOB ownership:
owner DOMAIN\vobadm
group DOMAIN\clearuser
Attributes:
FeatureLevel = 3



B:\protect>creds
Login name:    DOMAIN\user1
USID:          NT:S-1-5-21-2025429265-1993962763-1957994488-1027
Primary group: DOMAIN\group1 (NT:S-1-5-21-2025429265-1993962763-19579488-1026)
Groups: (8)
DOMAIN\None (NT:S-1-5-21-2025429265-1993962763-1957994488-513)
Everyone (NT:S-1-1-0)
DOMAIN\clearuser (NT:S-1-5-21-2025429265-1993962763-1957994488-1011)
BUILTIN\Administrators (NT:S-1-5-32-544)
BUILTIN\Users (NT:S-1-5-32-545)
LOCAL (NT:S-1-2-0)
NT AUTHORITY\INTERACTIVE (NT:S-1-5-4)
NT AUTHORITY\Authenticated Users (NT:S-1-5-11)


Note: User1 is a member of both group1 and clearuser, and the Primary Group of user1 is set to group1. The VOB, however, is owned by clearuser.

B:\protect>cleartool mkelem -nc test.txt
Created element "test.txt" (type "text_file").
Checked out "test.txt" from version "\main\0".

B:\protect>
cleartool ci -ident -nc test.txt
Checked in "test.txt" version "\main\1".

B:\protect>
cleartool ci -nc .
Default:
Added file element "test.txt".
Checked in "." version "\main\1".

B:\protect>
cleartool describe test.txt
version "test.txt@@\main\1"
created 09-Jan-03.16:48:00 by user1.group1@WIN_HOST
Element Protection:
User : DOMAIN\user1 : r--
Group: DOMAIN\clearuser : r--   
Other:          : r--
element type: text_file
predecessor version: \main\0


Note: The element is owned by the group clearuser.


Related information

About Additional Groups in the VOB's group list
About the CLEARCASE_PRIMARY_GROUP variable
Usernames and primary groups in an Interop environment
Japanese Technote 1409167

Cross reference information
Segment Product Component Platform Version Edition
Software Development Rational ClearCase Permissions

Document information

More support for: Rational ClearCase
Permissions

Software version: 7.0, 7.0.1, 2002.05.00, 2003.06.00

Operating system(s): AIX, HP-UX, Linux, Solaris, Windows

Reference #: 1132158

Modified date: 26 July 2010


Translate this page: