Srimanoj's

Problem description:

1) When you describe the VOB on Windows Native Client, you will 'nobody' as owner, owning group and additional group

2) You may see the below message in credmap_log on the Server:

"2013-09-18T06:23:41-05:00 credmap_server(11403768): Warning: User or group "xxxxxxx" is not in the accepted domain. Rejected."

3) You may see the below message in the cccredmgr LOG:

cccredmgr(PID): Error: NP Service Add connection failed with error, err 1

4) while checkins, you may see the message:

"cleartool: Error: Operation "vobsvr_create_container" failed: Operation not permitted."

This means some permissions issue.


Steps to resolve :

1) Ensure whether all groups on the server, which are in the VOBs group list are also present on the Windows Native Client

2) Optionally you can set the CLEARCASE_PRIMARY_GROUP User Environment Variable to force the primary group


3) killed the process : credmap_server

4) removed/renamed the file : /var/adm/rational/clearcase/config/credmap.conf

5) Rebooted Windows System, where ClearCase Windows Native Client is NOT working

6) Run credmap to see the corresponding groups info on server, to ensure client-server mapping is fine.

C:\Program Files (x86)\IBM\RationalSDLC\clearcase\etc\utils>credmap <server name>
Identity on local system:
  User: VRAIDWR01\vraidbld (NT:S-1-5-21-3527783399-3938958692-3585290353-1006)
  Primary group: VRAIDWR01\ccusers (NT:S-1-5-21-3527783399-3938958692-3585290353
-1019)
  Groups: (23)
    VRAIDWR01\None (NT:S-1-5-21-3527783399-3938958692-3585290353-513)
    Everyone (NT:S-1-1-0)
    VRAIDWR01\bbp (NT:S-1-5-21-3527783399-3938958692-3585290353-1025)
    VRAIDWR01\bbpo (NT:S-1-5-21-3527783399-3938958692-3585290353-1026)
    VRAIDWR01\boinc_admins (NT:S-1-5-21-3527783399-3938958692-3585290353-1003)
    VRAIDWR01\clearcase (NT:S-1-5-21-3527783399-3938958692-3585290353-1029)
    VRAIDWR01\raidpvob (NT:S-1-5-21-3527783399-3938958692-3585290353-1022)
    VRAIDWR01\raidxiop (NT:S-1-5-21-3527783399-3938958692-3585290353-1024)
    VRAIDWR01\smg (NT:S-1-5-21-3527783399-3938958692-3585290353-1027)
    VRAIDWR01\vraiddoc (NT:S-1-5-21-3527783399-3938958692-3585290353-1023)
    VRAIDWR01\vraidprd (NT:S-1-5-21-3527783399-3938958692-3585290353-1021)
    VRAIDWR01\vraidsrc (NT:S-1-5-21-3527783399-3938958692-3585290353-1020)
    BUILTIN\Administrators (NT:S-1-5-32-544)
    BUILTIN\Backup Operators (NT:S-1-5-32-551)
    BUILTIN\Remote Desktop Users (NT:S-1-5-32-555)
    BUILTIN\Users (NT:S-1-5-32-545)
    NT AUTHORITY\REMOTE INTERACTIVE LOGON (NT:S-1-5-14)
    NT AUTHORITY\INTERACTIVE (NT:S-1-5-4)
    NT AUTHORITY\Authenticated Users (NT:S-1-5-11)
    NT AUTHORITY\This Organization (NT:S-1-5-15)
    LOCAL (NT:S-1-2-0)
    NT AUTHORITY\NTLM Authentication (NT:S-1-5-64-10)
    nobody (NT:S-1-16-8192)

Identity on host "server hostname":
  User SID: UNIX:UID-68577
  Primary group SID: UNIX:GID-203
  Group SID list: (23)
    NOBODY
    NOBODY
    UNIX:GID-210
    UNIX:GID-211
    NOBODY
    NOBODY
    UNIX:GID-224
    UNIX:GID-229
    UNIX:GID-246
    UNIX:GID-226
    UNIX:GID-247
    UNIX:GID-225
    NOBODY
    NOBODY
    NOBODY
    NOBODY
    NOBODY
    NOBODY
    NOBODY
    NOBODY
    NOBODY
    NOBODY
    NOBODY


C:\Program Files (x86)\IBM\RationalSDLC\clearcase\etc\utils>

7) Now describe the VOB to see the groups information and owner information properly

8) On server, you can validate by looking at log : /var/adm/rational/clearcase/log/credmap_log

You should see message "2013-09-18T06:27:27-05:00 credmap_server(11403536): Ok: CM_ALLOWALL State"

You should NO longer see messages such as :

2013-09-18T06:23:41-05:00 credmap_server(11403768): Warning: User or group "CONSOLE LOGON" is not in the accepted domain. Rejected.
2013-09-18T06:23:41-05:00 credmap_server(11403768): Warning: User or group "NT AUTHORITY\Authenticated Users" is not in the accepted domain. Rejected.
2013-09-18T06:23:41-05:00 credmap_server(11403768): Warning: User or group "NT AUTHORITY\This Organization" is not in the accepted domain. Rejected.
2013-09-18T06:23:41-05:00 credmap_server(11403768): Warning: User or group "NT AUTHORITY\NTLM Authentication" is not in the accepted domain. Rejected.
2013-09-18T06:23:41-05:00 credmap_server(11403768): Warning: User or group "nobody" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "DTOWNX1-WIN08VM\vriopbld" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "DTOWNX1-WIN08VM\ccusers" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "DTOWNX1-WIN08VM\None" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "Everyone" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "DTOWNX1-WIN08VM\HomeUsers" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "BUILTIN\Administrators" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "BUILTIN\Users" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "BUILTIN\Certificate Service DCOM Access" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "NT AUTHORITY\INTERACTIVE" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "CONSOLE LOGON" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "NT AUTHORITY\Authenticated Users" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "NT AUTHORITY\This Organization" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "NT AUTHORITY\NTLM Authentication" is not in the accepted domain. Rejected.
2013-09-18T06:23:42-05:00 credmap_server(11403768): Warning: User or group "nobody" is not in the accepted domain. Rejected.



Disclaimer :

The postings on this blog are my own opinions and don't necessarily represent IBM's positions, strategies or opinions.