Question & Answer
Question
How can you change or correct the user and group permissions on a VOB and its objects in a Microsoft® Windows® environment using the IBM® Rational® ClearCase® []fix_prot[] and []vob_sidwalk[] reprotection commands?
Answer
After a hardware migration or domain migration, it is generally necessary to reprotect several objects in the VOB, if not all of them.
The VOB move procedure is documented in IBM Rational ClearCase Administrator's Guide > Moving VOBs and Relocating VOB Data.
The procedures detailed are applicable when changing hardware or joining the server to a new network.
The following article is a supplement to the information provided in the above documentation. If you have not already done so, then it is advised that you review the manual before proceeding; to verify that you understand the material and use the appropriate directions for moving VOBs in your Rational ClearCase configuration.
For more information on:
- fix_prot, refer to IBM Rational ClearCase Administrator's Guide > Troubleshooting > Utilities for Fixing Protection Problems as well as technote 1142606.
- vob_sidwalk, refer to IBM Rational ClearCase Command Reference, or run cleartool man vob_sidwalk from command line as well as technote 1256390.
Scenarios for using fix_prot and vob_sidwalk
These directions will ultimately repair all, but are not limited to, errors produced by the following situations:
- Deletion of a user and group from a Windows domain that owns ClearCase objects
- Creation of a VOB as a user and group identity other than the VOB administrator
- Removing groups from a VOB's group list
- Reprotecting metadata type definitions and instances
- Domain Migrations
- Hardware Migrations
Restrictions
You must have one of the following identities to run vob_sidwalk:
- VOB owner
- root (UNIX or Linux)
- Member of the ClearCase administrators group (ClearCase on Windows)
- Local administrator of the ClearCase LT server (ClearCase LT on Windows)
Command Syntax
The utilities used in this technote are located in the %RATIONALHOME%\etc\utils directory.
Note: \sidwalktest is the VOB tag in the following commands.
First use fix_prot on the VOB storage
1. Stop the ClearCase services from the ClearCase Properties applet in the Windows Control Panel:
2. Go to the %RATIONALHOME%\etc\utils directory in the command prompt.
3. Run the fix_prot utility as follows:
fix_prot -r -root -chown <new_owner> -chgrp <new_primary_group> <path to VOB storage directory>
fix_prot will remove all additional groups from the VOBs group list.
If there were additional groups in the VOBs group list, add those groups back by running protectvob (see step 5 below).
4. Restart the ClearCase services from the ClearCase applet in the control panel.
5. Add the additional groups back to the VOBs group list by running protectvob:
cleartool protectvob -add_group <groupname, groupname2, ...> <vob-storage-pname>
Then use vob_sidwalk on the VOB objects
1. Set the user variable
CLEARCASE_PRIMARY_GROUP=<clearcase_users_group>
2. Determine the user and group information for the account that will own the VOB. Log in as that user and run creds; refer to technote 1221403 for directions.
3. Run vob_sidwalk to create the dumpfile:
vob_sidwalk \sidwalktest c:\sid1
4. Edit the dumpfile, sid1, using notepad to include the new owner user and group information that is from the creds output.
5. Run the vob_sidwalk command to map the objects to the new SIDs:
vob_sidwalk -map c:\sid1 -execute \sidwalktest c:\temp\sid2
6. Run the vob_sidwalk command to remove the historical SIDs:
vob_sidwalk -delete_groups \sidwalktest c:\temp\sid3
7. Run the vob_sidwalk command to update the file system permissions:
vob_sidwalk -recover_filesystem \sidwalktest c:\temp\sid4
8. Run a describe on the VOB to verify the change:
cleartool des -l vob:\sidwalktest
9. Mount the VOB to verify access and that there are no permission related errors
Documentation
On-line documentation can be found:
About the ClearCase Information Center
Note: The on-line ClearCase version 7.x documentation can be found in the IBM Publication Center and has been organized for you in technote 1239261.
2003.06:
HTML
PDF LINKS
Related Information
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21146535