One of the tasks of IBM® Rational® ClearCase® administrators when working in Microsoft Windows environments is managing the account required to start the Rational ClearCase Atria Location Broker Daemon (ALBD) service. Most companies' security policies require that all account passwords must change periodically, typically about every 90 days, and the ClearCase password is usually no exception, of course. Changing the password every 90 days is relatively easy, but the fact that this change must now be propagated to tens, hundreds, or even thousands of Windows clients can make it a difficult and time-consuming task. There are numerous ways to automate this task, though, and each has its own pros and cons. This article explains one method (see Resources for an article about alternatives).
The ClearCase context
Rational ClearCase has three services, or processes, that must run in the background on a Windows platform:
- The lock manager (lockmgr)
- The credentials manager (cccredmgr)
- The ALBD service
The last one, the ALBD service, requires a Windows user account with ClearCase privileges to function properly. In the definition of this service, during ClearCase installation, the ClearCase administrator must specify the name of this privileged account, the password, the Windows domain, and the Windows group for this account. In some cases, only the password will ever change for this account. In other installations, there may be a requirement to change another or all of these values.
To change these values, you need administrator's rights on the Windows client machine.
A utility to automate password changes
To make changing multiple ClearCase passwords easier, you can use a utility (ccalbdpw.exe) that can reside on the client or on a network share. This utility reads a sitedefs.dat file on a network release area and simply updates the Windows registry information for the ALBD service. The utility must be run by using an account that has permission to change the registry values.
To use this utility, follow this three-step process:
- Change the Windows ALBD service account password.
- Update the ClearCase network release area in the sitedefs.dat file with the new password.
- Run the password update utility, ccalbdpw.exe, on each client.
The ccalbdpw.exe utility reads the new password value from the sitedefs.dat file and updates the Windows registry value. The new password value takes effect when you reboot the machine or when you stop and restart the ClearCase services.
Advantages of the using this utility
The advantages of this utility are that the password is secure and that the utility works with the existing ClearCase installation information on your workstation. If you prefer, you can modify the script for this utility to run on every reboot of a workstation and automatically pick up any changes.
To make maintenance tasks of the ALBD service account easier, this script also enables you to change this data in the Windows registry:
- ALBD service account name
- ALBD group name
Contents of the updated file included with this article
This password change utility currently supports Rational ClearCase Versions 7 and 8, and it has been tested on Windows 7, Windows 2008, Windows XP and Windows 2003. The .zip file included as a download with this article contains these elements:
- A Windows-executable file for the utility
- A readme.txt file with a detailed instructions and a complete listing of all error codes
This new version, 5.0.0 has new features that different administrators have requested:
Removed the need to execute siteprep.exe to create the sitedefs.dat file
The new version has incorporated this functionality, so now ccalbdpw.exe -c can be used to create the sitedefs.dat file
Added the -f command line option
Compatible only with the creation of the sitedefs.dat file (-c option). This forces the creation of the sitedefs.dat file (or whatever name is specified) rather than prompting to overwrite.
Added a command line option to specify ALBD account
One request was to provide ALBD account information on the command line to allow for overwriting the ALBD account listed in the sitedefs.dat file.
|readme and executable file||ccalbdpw.zip||55 KB|
- Read the IBM Technote titled Methods for changing the ALBD password for albd_server.exe for other methods for changing the ClearCase on Windows ALBD service account and password.
- For more information about Rational ClearCase, check the developerWorks, product overview, and features and benefits pages. You'll find documentation in the ClearCase Information Center. You might also find the Software Change and Confirmation Management offerings page helpful.
- Visit the Rational software area on developerWorks for technical resources and best practices for Rational Software Delivery Platform products.
- Subscribe to the developerWorks weekly email newsletter, and choose the topics to follow.
- Stay current with developerWorks technical events and webcasts focused on a variety of IBM products and IT industry topics.
- Improve your skills. Check the Rational training and certification catalog, which includes many types of courses on a wide range of topics. You can take some of them anywhere, any time, and many of the "Getting Started" ones are free.
Get products and technologies
- Download a free trial version of Rational software.
- Evaluate other IBM software in the way that suits you best: Download it for a trial, try it online, use it in a cloud environment, or spend a few hours in the SOA Sandbox learning how to implement service-oriented architecture efficiently.
- Join the Rational ClearCase forum, where you can ask questions and participate in discussions.
- Rate or review Rational software. It’s quick and easy.
- Share your knowledge and help others who use Rational software by writing a developerWorks article. Find out what makes a good developerWorks article and how to proceed.
- Follow Rational software on Facebook, Twitter (@ibmrational), and YouTube, and add your comments and requests.
- Ask and answer questions and increase your expertise when you get involved in the Rational forums, cafés, and wikis.
- Get connected. Join the Rational community to share your Rational software expertise and get connected with your peers.