Topic
8 replies Latest Post - ‏2013-05-09T03:27:48Z by raygear
JirongHu
JirongHu
660 Posts
ACCEPTED ANSWER

Pinned topic *You do not have ClearCase administrative privileges.

‏2013-03-28T21:28:31Z |
As you can see I am in the ClearCase Admin group called "ClearCase Admin", I checked with other tools as well. Why it tells me don't have administrative privileges?

E:\IBM\RationalSDLC\ClearCase\etc\utils>creds
Login name: CNPPD\XT18851
USID: NT:S-1-5-21-1390067357-1659004503-839522115-1362692
Primary group: CNPPD\Domain Users (NT:S-1-5-21-1390067357-1659004503-839522115-513)
Groups: (31)
Everyone (NT:S-1-1-0)
BUILTIN\Users (NT:S-1-5-32-545)
BUILTIN\Administrators (NT:S-1-5-32-544)
NT AUTHORITY\REMOTE INTERACTIVE LOGON (NT:S-1-5-14)
NT AUTHORITY\INTERACTIVE (NT:S-1-5-4)
NT AUTHORITY\Authenticated Users (NT:S-1-5-11)
NT AUTHORITY\This Organization (NT:S-1-5-15)
LOCAL (NT:S-1-2-0)
CNPPD\Task-MTL-HQ-A23-RestartServices-ClearCase (NT:S-1-5-21-1390067357-1659004503-839522115-243012)
....
CNPPD\ClearCase Admin (NT:S-1-5-21-1390067357-1659004503-839522115-187797)
CNPPD\Rational_CHANGE_TOR-YD-A39_EPGMFILES (NT:S-1-5-21-1390067357-1659004503-839522115-243006)

You do not have ClearCase administrative privileges.
You are logged onto Terminal Server (Client Session).

E:\IBM\RationalSDLC\ClearCase\etc\utils>credmap PPD-HQ-681
Identity on local system:
User: CNPPD\XT18851 (NT:S-1-5-21-1390067357-1659004503-839522115-1362692)
Primary group: CNPPD\Domain Users (NT:S-1-5-21-1390067357-1659004503-839522115-513)
Groups: (32)
Everyone (NT:S-1-1-0)
BUILTIN\Users (NT:S-1-5-32-545)
BUILTIN\Administrators (NT:S-1-5-32-544)
NT AUTHORITY\REMOTE INTERACTIVE LOGON (NT:S-1-5-14)
NT AUTHORITY\INTERACTIVE (NT:S-1-5-4)
NT AUTHORITY\Authenticated Users (NT:S-1-5-11)
NT AUTHORITY\This Organization (NT:S-1-5-15)
LOCAL (NT:S-1-2-0)
CNPPD\Task-MTL-HQ-A23-RestartServices-ClearCase (NT:S-1-5-21-1390067357-1659004503-839522115-243012)
CNPPD\ClearCase Admin (NT:S-1-5-21-1390067357-1659004503-839522115-187797)
.....
CNPPD\TS USERS_MTL-HQ-A23 (NT:S-1-5-21-1390067357-1659004503-839522115-1361951)
CNPPD\Rational_CHANGE_TOR-YD-A39_EPGMFILES (NT:S-1-5-21-1390067357-1659004503-839522115-243006)

Identity on host "PPD-HQ-681":
User SID: NT:S-1-5-21-1390067357-1659004503-839522115-1362692
Primary group SID: NT:S-1-5-21-1390067357-1659004503-839522115-513
Group SID list: (32)
NT:S-1-1-0
NT:S-1-5-32-545
NT:S-1-5-32-544
NT:S-1-5-14
NT:S-1-5-4
NT:S-1-5-11
NT:S-1-5-15
NT:S-1-2-0
NT:S-1-5-21-1390067357-1659004503-839522115-243012
....

And in ClearCase Doctor, I see these error message:

Problem:

Your user name is a member of the "clearcase" group. In most cases, this group is
reserved for use by ClearCase adminstrators and service processes.

My CC Admin Group is called "ClearCase Admin", not "clearcase", and there is no group called "clearcase" in our domain. Why is like that? Is the space in the group name a problem?

Thanks
Jirong
Updated on 2013-04-02T22:00:35Z at 2013-04-02T22:00:35Z by SystemAdmin
  • pdubovitsky
    pdubovitsky
    189 Posts
    ACCEPTED ANSWER

    Re: *You do not have ClearCase administrative privileges.

    ‏2013-03-29T10:42:43Z  in response to JirongHu
    What is the value of the following registry key on your machine?
    HKEY_LOCAL_MACHINE\SOFTWARE\Atria\ClearCase\CurrentVersion\ClearCaseGroupName

    Pavel
    • JirongHu
      JirongHu
      660 Posts
      ACCEPTED ANSWER

      Re: *You do not have ClearCase administrative privileges.

      ‏2013-03-29T12:45:53Z  in response to pdubovitsky
      I am installing ClearCase v8.0.0.6, the key is found at:
      HKEY_LOCAL_MACHINE\SOFTWARE\Wos6432Node\Atria\ClearCase\CurrentVersion\ClearCaseGroupName

      The value is set to "ClearCase Admin", same as reported by ClearCase Doctor. Everything looks right to me, but creds continue report that error and I do NOT have the CC admin right, so e.g. can't create a storage location, etc.

      Thanks
      Jirong
      • pdubovitsky
        pdubovitsky
        189 Posts
        ACCEPTED ANSWER

        Re: *You do not have ClearCase administrative privileges.

        ‏2013-03-29T13:38:47Z  in response to JirongHu
        Is your account included in more than 32 groups?
        BTW, you do not need to be in the clearcase group to create storage location.

        Pavel
        • brcowan
          brcowan
          673 Posts
          ACCEPTED ANSWER

          Re: *You do not have ClearCase administrative privileges.

          ‏2013-03-29T17:39:01Z  in response to pdubovitsky
          Is the group in the "ClearCaseGroupName" registry value domain qualified? It's supposed to be, otherwise there is no guarantee that it will work as you expect.

          Please also clarify the "can't create a storage location" issue...

          =================================================================
          Brian Cowan
          Advisory Software Engineer
          ClearCase Software Advisory Team (SWAT)
          Rational Software
          IBM Software Group
          550 King St
          Littleton, MA 01460

          Phone: 1.978.899.5436
          Web: http://www.ibm.com/software/rational/support/
          • JirongHu
            JirongHu
            660 Posts
            ACCEPTED ANSWER

            Re: *You do not have ClearCase administrative privileges.

            ‏2013-04-01T13:08:32Z  in response to brcowan
            Yes, you are right, add the domain qualified name fixed the issue.

            Thanks
            Jirong
            • raygear
              raygear
              17 Posts
              ACCEPTED ANSWER

              Re: *You do not have ClearCase administrative privileges.

              ‏2013-05-09T03:27:48Z  in response to JirongHu

              I am encountering similar problem. What do you mean by adding domain qualified name?

              Is it adding the domain? e.g. From "ClearCase Admin" to "<DOMAIN>\ClearCase Admin"

          • JirongHu
            JirongHu
            660 Posts
            ACCEPTED ANSWER

            Re: *You do not have ClearCase administrative privileges.

            ‏2013-04-02T15:29:39Z  in response to brcowan
            Just an update.

            If I add the domain name (cnppd\clearcase_albd) during the installation (8.0.0.6), it gives an error say doesn't accept character "\". I don't know how other people resolve this issue.

            Thanks
            Jirong
            • SystemAdmin
              SystemAdmin
              47293 Posts
              ACCEPTED ANSWER

              Re: *You do not have ClearCase administrative privileges.

              ‏2013-04-02T22:00:35Z  in response to JirongHu
              During an install of ClearCase on a Windows host, the ALBD account and ClearCase Administrators group will be the domain user/group in the case that the proper domain is selected from the drop-down menu. This is on the "Service Account" page on the IM install.

              The default "Account domain" is a local install which does confuse people. In general, the domain that the host is in as well as any trusted domains will be in that drop-down list.

              With the domain selected, simply entering the ALBD account name and ClearCase Admin group name will suffice.