clearcase

cleartool protectvob 2 different results


I am trying to perform a build of some software that exists on an air gapped network. And I having issues with clearcase, denying me access to files that I need to perform the build.

When I check the protection settings for the VOB on the clearcase server I get:

Pool "sdft" appears to be protected correctly
Pool "ddft" appears to be protected correctly
Pool "cdft" appears to be protected correctly

looking at that same vob from the windows side I see:

Pool "sdft" needs to be protected correctly
Pool "ddft" needs to be protected correctly
Pool "cdft" needs to be protected correctly

Before seeing this issue there was a problem with VOB caused because active directory had been modified so I recently changed the ownership of all of the files in the VOB to me. and according to a sidwalk/looking at the files from the linux side. It looks like I have the correct permisions set."

What can I do to fix this issue?

EDIT learned old information was relevant: This was not included because I didn't think this was related.

Before trying to get things working on this system, there had been a software update which had broken the active directory configuration. Which was fixed and gave me access again to ClearCase and the ClearCase Server


Solution

  • I feel bad, that due to some missing information on my part.

    The missing information

    This network uses active directory to keep the users synchronized between devices... But a software update broke it. So we had to create a new configuration. This ended up creating a 2nd identically named group to the group that owned the clearcase VOBs. Looking at the files on the ClearCase server side, protectvob saw that the username was what it was supposed to be, the group name was what it was supposed to be, no problem! It didn't realize that clear_case_group(gid=1) is not clear_case_group(gid=2).

    The windows side however had no idea who clear_case_group(gid=1) is and so realized that there was a problem.

    My attempts to us fix_prot to fix that access errors failed, because fix_prot was applying the gid from clear_case_group(gid=1) to the files and not the second, newer group.

    How i found out that this was the actual problem

    1. id questor soon after looking at a sidwalk dump and noticed thatclear_case_group had a different GID for questor then inside of the dump file.

    2. getent group clear_case_group, questor was not a part of the group... But

    3. getent group <gid=2> -> clear_case_group that questor was a part of...

    4. getent group <gid=1> -> clear_case_group that questor was not a part of.

    There are 2 clear_case_groups on the ClearCase server for some reason (terrible practice, I know).

    The Fix:

    vob_sidwalk used to replace clear_case_group(gid=1) with clear_case_group(gid=2), or fix_protect using GID instead of group_name...

    Lessons learned

    Group names do not have to be unique on Linux. Linux allows for duplicate group names with different GIDs. This is my first (and hopefully only) time encountering identically named groups. SO before making a claim that the user/groups are correct.... Look at the GIDs which are unique not the names.