Topic
IC4NOTICE: developerWorks Community will be offline May 29-30, 2015 while we upgrade to the latest version of IBM Connections. For more information, read our upgrade FAQ.
10 replies Latest Post - ‏2013-01-29T20:52:28Z by Leesa_Hicks
SystemAdmin
SystemAdmin
47293 Posts
ACCEPTED ANSWER

Pinned topic Access Denied in a VOB

‏2013-01-15T10:45:56Z |
hi,
we have a interop setup where vob server is on linux and clients on windows.
I see "checkedout but could not copy data to view" error when i checkout any file as any user. But the same works as vob owner.
I have searched many IBM sites and protection is run on VOb's Views etc
1. the view storage directory is having full permission for vob owner, primary group and the user
2. user primary group is same as vob primary group and has full permission on view storage directory.
3. checkout on directory is working as user but not the file elements inside it.
4. issue is only with dynamic view. for Static view i can checkout/checkin as user or vobowner.
5. I have also tested by creating a view on linux and make that view available in windows region. checkout and checkin of same files works from windows location as any user and vob owner

Server OS : Linux 6.2
samba version : 3.5

Any pointers will be helpful.
Updated on 2013-01-29T20:52:28Z at 2013-01-29T20:52:28Z by Leesa_Hicks
  • SystemAdmin
    SystemAdmin
    47293 Posts
    ACCEPTED ANSWER

    Re: Access Denied in a VOB

    ‏2013-01-15T13:13:04Z  in response to SystemAdmin
    Are the protections of these directories in the VOB set to rwx for Group.

    For example:
    > cleartool des .@@
    directory element ".@@"
    created 2008-07-30T15:23:23+02:00
    element type: directory
    Protection:
    User : MSNET\xxxx : rwx
    Group: MSNET\yyyy : rwx
    Other: : rwx

    If not you should change the protection on the vobtag and recursively on all its subdirectories.

    Marc
    • SystemAdmin
      SystemAdmin
      47293 Posts
      ACCEPTED ANSWER

      Re: Access Denied in a VOB

      ‏2013-01-15T17:25:02Z  in response to SystemAdmin
      marcdb wrote:
      > If not you should change the protection on the vobtag and recursively on all its subdirectories.

      Check also the protections of the vob storage directories (pools, and directories to access them).

      Marc
      • SystemAdmin
        SystemAdmin
        47293 Posts
        ACCEPTED ANSWER

        Re: Access Denied in a VOB

        ‏2013-01-16T04:26:10Z  in response to SystemAdmin
        Hi,

        I see the permission perfect for vobtag and all its directories
        #cleartool desc .@@
        User : vobowner : rwx
        Group: primgrp : rwx
        Other: : r-x

        Also i have run checkvob with -fix option on the VOB.
        • SystemAdmin
          SystemAdmin
          47293 Posts
          ACCEPTED ANSWER

          Re: Access Denied in a VOB

          ‏2013-01-16T16:03:24Z  in response to SystemAdmin
          Sakshi wrote:
          > I see the permission perfect for vobtag and all its directories

          Yes, but what about the storage?
          ct lsvob <vobtag>
          

          Can you cd to the pools and down to all directories as user?
          Go to the root of the storage (as user), and (not ct find!):
          find . -name .identity -prune -o -type d ! -perm -a+rx
          

          This should only print .identity
          Marc
          Updated on 2014-03-26T13:43:44Z at 2014-03-26T13:43:44Z by iron-man
          • SystemAdmin
            SystemAdmin
            47293 Posts
            ACCEPTED ANSWER

            Re: Access Denied in a VOB

            ‏2013-01-17T05:38:49Z  in response to SystemAdmin
            hi,

            yes i am able to cd to the pool directories as the user on windows as well as linux.

            the output of the command prints .identity folder as you said.
            • Leesa_Hicks
              Leesa_Hicks
              97 Posts
              ACCEPTED ANSWER

              Re: Access Denied in a VOB

              ‏2013-01-22T23:07:27Z  in response to SystemAdmin
              Do the share permissions on the (shared) CC storage folder include the CC albd account with Full Control?

              If you are on Windows 7, the CC albd account must also have Full Control on the CC storage itself, in addition to the Share permissions.

              Leesa Hicks
              Principal Engineer
              Tektronix Instruments
              • SystemAdmin
                SystemAdmin
                47293 Posts
                ACCEPTED ANSWER

                Re: Access Denied in a VOB

                ‏2013-01-28T10:07:09Z  in response to Leesa_Hicks
                hi,
                i even tried this.
                as albd account i am able to browse to the root directory of the VOB.
                no luck !
                • Leesa_Hicks
                  Leesa_Hicks
                  97 Posts
                  ACCEPTED ANSWER

                  Re: Access Denied in a VOB

                  ‏2013-01-29T20:52:28Z  in response to SystemAdmin
                  The original error you reported, "checkedout but could not copy data to view", indicates to me that it is the view storage that has the permissions issue.

                  What is the name of the CC albd account you are using? For example, clearcase_albd?. Does this account have Full Control to the CC storage shared folder on the machine where the view storage directory exists?

                  Leesa Hicks
                  Principal Engineer
                  Tektronix Instruments
  • brcowan
    brcowan
    726 Posts
    ACCEPTED ANSWER

    Re: Access Denied in a VOB

    ‏2013-01-15T17:00:35Z  in response to SystemAdmin
    While we're at it, can you tell us if this is a new configuration or if this has ever worked?

    Also, is it limited to specific hosts or users?

    I ask because I've seen some odd checkout problems occur when this directory is locked down:
    ...\Program Files (x86)\IBM\RationalSDLC\ClearCase\var\cache

    If users can't write to that directory, the user-specific credential mapping caches won't get populated (the failure will be silent) and the MVFS may not allow the users to write to places where they are supposed to be able to. If you don't see a "ClearCase_check" directory in there, or a file in that directory whose name matches that of the currently-logged in user, then you probably have this directory locked down too tightly.

    This issue generally happens after a fresh install or in some cases an upgrade.

    =================================================================
    Brian Cowan
    Advisory Software Engineer
    ClearCase Software Advisory Team (SWAT)
    Rational Software
    IBM Software Group
    550 King St
    Littleton, MA 01460

    Phone: 1.978.899.5436
    Web: http://www.ibm.com/software/rational/support/
    • SystemAdmin
      SystemAdmin
      47293 Posts
      ACCEPTED ANSWER

      Re: Access Denied in a VOB

      ‏2013-01-16T04:33:50Z  in response to brcowan
      hi Brian,

      Thank you so much for your answer.
      i see a file in the check-sum directory whose name matches the currently logged-in user, but the file is of 0 byte.
      Also i am able to create a file in the check-sum directory as the same user.

      1. I have run checkvob on the VOB with -fix option.
      2. The group has full permission on the elements, but still I am unable to checkout the file.
      3. Snapshot views works perfect, but not dynamic view :(