You would not have to re-install the client, however, at each client you
would have to do the following:
Log in to the station as Administrator or equivalent.
Open the "Control Panel" and access the "Services" icon.
Find the albd service, usually something like "Atria Location Broker" and
double click on the service. This will display the attributes of that
service, one of which is the password that the
service will use to log in to the DOMAIN with. You can change it here.
Our set-up is interesting in that it is international. We have users in
Moline, Illinois, McKinney, Texas, and Hyyvinkkaa, Finland. If we lose our
albd password the consequences become global. We have a ClearCase
administration account (clearAdm) that our ClearCase administrators can use
to update the workstations and servers. This account is in the GLOBAL
clearusers group, and is added to the Administrators group on each station.
This way we do not have to involve regular I.T. personnel in ClearCase
issues.
The albd password in our structure is set to not expire, since we are
dealing with an 8-hour time difference between the U.S. and Europe, we can
not afford to have it expire when the account owner might be home in bed
when the rest of the world is working.
Ron
---------------------------------------------------------------
Ronald Barr Voice: (309) 743-5687
KONE Inc. Fax: (309) 743-5467
One KONE Court E-Mail: ronald.barr@kone.com
<mailto:ronald.barr@kone.com>
Moline, IL USA 61265
---------------------------------------------------------------
-----Original Message-----
From: Marilyn Sander [mailto:marilyn@hal.com
Sent: Monday, February 07, 2000 6:04 PM
To: edward.healey@intel.com
Cc: cciug@Rational.Com
Subject: Re: [cciug] Security!
I'd appreciate it if someone would discuss this at more length.
In our shop, clearcase_albd is a domain account. Changing the password
can be done at the domain level without bothering each individual
workstation.
However, whenever I install ClearCase, and when I run site_prep,
something comes up about the clearcase service account. I don't
remember exactly what dialog comes up for install and what comes
up for sit_prep. But I get the
impression that whatever password I give during these processes
gets squirreled away somewhere. If you changed the clearcase_albd
password, would you then have to reinstall ClearCase?
thanks,
Marilyn Sander
|
| On Mon, 7 Feb 2000, Healey, Edward wrote:
|
| >
| > Trouble in paradise!
| > Is this a true statement for ClearCase 3.2.1 on an NT 4.0 (service
| > pack 5) server?
| >
| > The ClearCase application requires a generic user account for the
| > ALBD service.
| > (1) the ALDB password can not be reset without reconfiguring every
| > client, and no process exists today to do this
| > (2) the service is installed on the server and the clients, so log
| > on can not be restricted to the server (or a small group of systems) as
is
| > required by current policy."
| >
| > because of this...
| > The likelihood that an account has been compromised increases as the
| > time elapses, since the password was last set or changed increases. The
| > problem is compounded if the account owner leaves the group or company
| >
| > My IT group is going to shut me down! They would have me change the
| > ALDB account password every month.
| > Is It possible to change 60+ users ALBD account password on the fly?
| >
| >
| > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
| >
| >
| >
| > http://clearcase.rational.com/cciug/mailing_list.html
| >
|
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
|
|
| http://clearcase.rational.com/cciug/mailing_list.html
-----------------------------------------------------------------------
Marilyn E. Sander, CM Engineer marilyn@hal.com
Fujitsu System Technologies (408)341-5590
Division of HAL Computer Systems, 1315 Dell Avenue, Campbell, CA 95008
-----------------------------------------------------------------------
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
This message has been checked by KONE Corporation for the presence of computer viruses
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
This archive was generated by hypermail 2b29 : Sun May 06 2001 - 00:23:03 EDT