I'm assuming you tried fixing the permissions using fix_prot.exe and as far as
I know this should work fine. There are ACLs and ownerships all over the views
that can be quite tricky but fix_prot should be able to handle them.
Incidentally this is another reason why we keep everything on UNIX.
Greg
On 12-Jan-00 Gopalakrishnan.K wrote:
>
> Hi Ken,
> This actually happened in some other group. I was called by them to
correct
> the problem. I did not get the opportunity to see that heaven face who did
> this. That group had no security procedures or well defined SCM rules for
> their vob servers. At least they could have asked me before reinstalling PDC.
> As you said all users accounts had gone. But they can be recreated and
their
> home dir perms can be reassigned. Even for starting albd services, I change
> the password of service startup account to the new one (clearcase_albd).
> What I can do for stg dirs of vobs and views? As you said I know the
problem
> is becoz of security info varies in NT even though you create the same
> account name.
> Please let me know if any correction procedure is known. I am also
trying to
> contact Rational. Worst part was all vobs and views went for a toss.
> Vobs are at least showing the files though not allowing checkouts. But
views
> are not starting at all.
> Thanks,
> GK
>
>
> -----Original Message-----
> From: Ölwing Kenneth - keol [SMTP:K.Olwing@abalon.se
> Sent: Wednesday, January 12, 2000 03:35 PM
> To: 'Gopalakrishnan.K'; cciug@rational.com
> Subject: RE: [cciug] Impact of NT clearcase accts removal.
>
> Well, I assume there was a strong reason for reinstalling the PDC, otherwise
> you should kick Mr Someone in the butt...:-/
>
> Anyway, just be aware that the new accounts/groups are not the same
> security-wise as the old ones just because they're named the same. I can't
> really tell what the problem is but, I guess it's quite reasonable to expect
> that there are more places that needs updated security information. And what
> about you ordinary users??? If the albd account was wiped why wasn't all
> others? And if they we're you have the same problem with those accounts:
> they're named the same but are not equal to the old security info.
> A hint to that something like this is at the bottom is for instance messages
> in the error log to the effect 'vob_server.exe(259): Error: unable to
> determine the owner for .: The security descriptor structure is invalid.',
> ie the SID (security identifier) for '.' is not possible to look up.
>
> HTH
>
> ken1
>
>> -----Original Message-----
>> From: Gopalakrishnan.K [mailto:gopkrish@wipinfo.soft.net
>> Sent: den 12 januari 2000 10:56
>> To: cciug@rational.com
>> Subject: [cciug] Impact of NT clearcase accts removal.
>>
>>
>>
>> Hi,
>> Someone reinstalled PDC. This deleted clearcase_albd user
>> account and clearcase group account. The vob server was a NT
>> client and was having problem in starting clearcase service.
>> These accounts had been recreated and clearcase service is up
>> now. But none of the vobs and views on this client was
>> working as storage directories lost account permissions. I
>> reassigned the permissions to storage dirs. But still not
>> able to start the views and not able to check out from vobs.
>>
>> Errors:
>>
>> 1) While checking out:
>> vobrpc error log:
>> vobrpc_server.exe(221): Error: Operation "vobsvr_get_handle"
>> failed: error detected by ClearCase subsystem.
>> vob error log:
>> vob_server.exe(259): Error: unable to determine the owner for
>> .: The security descriptor structure is invalid.
>> view error log
>> view_server.exe(162): Error: vobrpc server operation
>> "vob_ver_construct_cltxt_prep_suf" failed for VOB
>> "maharathi:E:\vobs\sysmind.vbs": error detected by ClearCase
>> subsystem.
>> Additional information may be available in the
>> vobrpc_server_log on host "maharathi".
>> albd error log:
>> Albd(217): Error: Server vob_server.exe (pid=147) on
>> "E:\vobs\sysmind.vbs" died on startup; marking it as "down".
>>
>> 2) Starting a view:
>> Says unable to open control files. (I checked up the control
>> files in stg dir and were seem to be fine).
>>
>> Thanks in advance,
>> GK
>> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>>
>> can also
>> unsubscribe
>>
>> http://clearcase.rational.com/cciug/mailing_list.html
>>
> << File: ATT00001.html >>
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>
---------------------------------------------------------------------
Greg Dickie
Just A Guy*
*from discreet (the logic is gone)
Montreal
(514) 954-7171
greg@discreet.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
This archive was generated by hypermail 2b29 : Sun May 06 2001 - 00:22:25 EDT