Topic
  • 10 replies
  • Latest Post - ‏2013-01-29T20:52:28Z by Leesa_Hicks
SystemAdmin
SystemAdmin
47293 Posts

Pinned topic Access Denied in a VOB

‏2013-01-15T10:45:56Z |
hi,
we have a interop setup where vob server is on linux and clients on windows.
I see "checkedout but could not copy data to view" error when i checkout any file as any user. But the same works as vob owner.
I have searched many IBM sites and protection is run on VOb's Views etc
1. the view storage directory is having full permission for vob owner, primary group and the user
2. user primary group is same as vob primary group and has full permission on view storage directory.
3. checkout on directory is working as user but not the file elements inside it.
4. issue is only with dynamic view. for Static view i can checkout/checkin as user or vobowner.
5. I have also tested by creating a view on linux and make that view available in windows region. checkout and checkin of same files works from windows location as any user and vob owner

Server OS : Linux 6.2
samba version : 3.5

Any pointers will be helpful.
Updated on 2013-01-29T20:52:28Z at 2013-01-29T20:52:28Z by Leesa_Hicks
  • SystemAdmin
    SystemAdmin
    47293 Posts

    Re: Access Denied in a VOB

    ‏2013-01-15T13:13:04Z  
    Are the protections of these directories in the VOB set to rwx for Group.

    For example:
    > cleartool des .@@
    directory element ".@@"
    created 2008-07-30T15:23:23+02:00
    element type: directory
    Protection:
    User : MSNET\xxxx : rwx
    Group: MSNET\yyyy : rwx
    Other: : rwx

    If not you should change the protection on the vobtag and recursively on all its subdirectories.

    Marc
  • brcowan
    brcowan
    741 Posts

    Re: Access Denied in a VOB

    ‏2013-01-15T17:00:35Z  
    While we're at it, can you tell us if this is a new configuration or if this has ever worked?

    Also, is it limited to specific hosts or users?

    I ask because I've seen some odd checkout problems occur when this directory is locked down:
    ...\Program Files (x86)\IBM\RationalSDLC\ClearCase\var\cache

    If users can't write to that directory, the user-specific credential mapping caches won't get populated (the failure will be silent) and the MVFS may not allow the users to write to places where they are supposed to be able to. If you don't see a "ClearCase_check" directory in there, or a file in that directory whose name matches that of the currently-logged in user, then you probably have this directory locked down too tightly.

    This issue generally happens after a fresh install or in some cases an upgrade.

    =================================================================
    Brian Cowan
    Advisory Software Engineer
    ClearCase Software Advisory Team (SWAT)
    Rational Software
    IBM Software Group
    550 King St
    Littleton, MA 01460

    Phone: 1.978.899.5436
    Web: http://www.ibm.com/software/rational/support/
  • SystemAdmin
    SystemAdmin
    47293 Posts

    Re: Access Denied in a VOB

    ‏2013-01-15T17:25:02Z  
    Are the protections of these directories in the VOB set to rwx for Group.

    For example:
    > cleartool des .@@
    directory element ".@@"
    created 2008-07-30T15:23:23+02:00
    element type: directory
    Protection:
    User : MSNET\xxxx : rwx
    Group: MSNET\yyyy : rwx
    Other: : rwx

    If not you should change the protection on the vobtag and recursively on all its subdirectories.

    Marc
    marcdb wrote:
    > If not you should change the protection on the vobtag and recursively on all its subdirectories.

    Check also the protections of the vob storage directories (pools, and directories to access them).

    Marc
  • SystemAdmin
    SystemAdmin
    47293 Posts

    Re: Access Denied in a VOB

    ‏2013-01-16T04:26:10Z  
    marcdb wrote:
    > If not you should change the protection on the vobtag and recursively on all its subdirectories.

    Check also the protections of the vob storage directories (pools, and directories to access them).

    Marc
    Hi,

    I see the permission perfect for vobtag and all its directories
    #cleartool desc .@@
    User : vobowner : rwx
    Group: primgrp : rwx
    Other: : r-x

    Also i have run checkvob with -fix option on the VOB.
  • SystemAdmin
    SystemAdmin
    47293 Posts

    Re: Access Denied in a VOB

    ‏2013-01-16T04:33:50Z  
    • brcowan
    • ‏2013-01-15T17:00:35Z
    While we're at it, can you tell us if this is a new configuration or if this has ever worked?

    Also, is it limited to specific hosts or users?

    I ask because I've seen some odd checkout problems occur when this directory is locked down:
    ...\Program Files (x86)\IBM\RationalSDLC\ClearCase\var\cache

    If users can't write to that directory, the user-specific credential mapping caches won't get populated (the failure will be silent) and the MVFS may not allow the users to write to places where they are supposed to be able to. If you don't see a "ClearCase_check" directory in there, or a file in that directory whose name matches that of the currently-logged in user, then you probably have this directory locked down too tightly.

    This issue generally happens after a fresh install or in some cases an upgrade.

    =================================================================
    Brian Cowan
    Advisory Software Engineer
    ClearCase Software Advisory Team (SWAT)
    Rational Software
    IBM Software Group
    550 King St
    Littleton, MA 01460

    Phone: 1.978.899.5436
    Web: http://www.ibm.com/software/rational/support/
    hi Brian,

    Thank you so much for your answer.
    i see a file in the check-sum directory whose name matches the currently logged-in user, but the file is of 0 byte.
    Also i am able to create a file in the check-sum directory as the same user.

    1. I have run checkvob on the VOB with -fix option.
    2. The group has full permission on the elements, but still I am unable to checkout the file.
    3. Snapshot views works perfect, but not dynamic view :(
  • SystemAdmin
    SystemAdmin
    47293 Posts

    Re: Access Denied in a VOB

    ‏2013-01-16T16:03:24Z  
    Hi,

    I see the permission perfect for vobtag and all its directories
    #cleartool desc .@@
    User : vobowner : rwx
    Group: primgrp : rwx
    Other: : r-x

    Also i have run checkvob with -fix option on the VOB.
    Sakshi wrote:
    > I see the permission perfect for vobtag and all its directories

    Yes, but what about the storage?
    ct lsvob <vobtag>
    

    Can you cd to the pools and down to all directories as user?
    Go to the root of the storage (as user), and (not ct find!):
    find . -name .identity -prune -o -type d ! -perm -a+rx
    

    This should only print .identity
    Marc
    Updated on 2014-03-26T13:43:44Z at 2014-03-26T13:43:44Z by iron-man
  • SystemAdmin
    SystemAdmin
    47293 Posts

    Re: Access Denied in a VOB

    ‏2013-01-17T05:38:49Z  
    Sakshi wrote:
    > I see the permission perfect for vobtag and all its directories

    Yes, but what about the storage?
    <pre class="java dw" data-editor-lang="java" data-pbcklang="java" dir="ltr">ct lsvob <vobtag> </pre>
    Can you cd to the pools and down to all directories as user?
    Go to the root of the storage (as user), and (not ct find!):
    <pre class="java dw" data-editor-lang="java" data-pbcklang="java" dir="ltr">find . -name .identity -prune -o -type d ! -perm -a+rx </pre>
    This should only print .identity
    Marc
    hi,

    yes i am able to cd to the pool directories as the user on windows as well as linux.

    the output of the command prints .identity folder as you said.
  • Leesa_Hicks
    Leesa_Hicks
    97 Posts

    Re: Access Denied in a VOB

    ‏2013-01-22T23:07:27Z  
    hi,

    yes i am able to cd to the pool directories as the user on windows as well as linux.

    the output of the command prints .identity folder as you said.
    Do the share permissions on the (shared) CC storage folder include the CC albd account with Full Control?

    If you are on Windows 7, the CC albd account must also have Full Control on the CC storage itself, in addition to the Share permissions.

    Leesa Hicks
    Principal Engineer
    Tektronix Instruments
  • SystemAdmin
    SystemAdmin
    47293 Posts

    Re: Access Denied in a VOB

    ‏2013-01-28T10:07:09Z  
    Do the share permissions on the (shared) CC storage folder include the CC albd account with Full Control?

    If you are on Windows 7, the CC albd account must also have Full Control on the CC storage itself, in addition to the Share permissions.

    Leesa Hicks
    Principal Engineer
    Tektronix Instruments
    hi,
    i even tried this.
    as albd account i am able to browse to the root directory of the VOB.
    no luck !
  • Leesa_Hicks
    Leesa_Hicks
    97 Posts

    Re: Access Denied in a VOB

    ‏2013-01-29T20:52:28Z  
    hi,
    i even tried this.
    as albd account i am able to browse to the root directory of the VOB.
    no luck !
    The original error you reported, "checkedout but could not copy data to view", indicates to me that it is the view storage that has the permissions issue.

    What is the name of the CC albd account you are using? For example, clearcase_albd?. Does this account have Full Control to the CC storage shared folder on the machine where the view storage directory exists?

    Leesa Hicks
    Principal Engineer
    Tektronix Instruments