Topic
  • 8 replies
  • Latest Post - ‏2013-05-09T03:27:48Z by raygear
JirongHu
JirongHu
683 Posts

Pinned topic *You do not have ClearCase administrative privileges.

‏2013-03-28T21:28:31Z |
As you can see I am in the ClearCase Admin group called "ClearCase Admin", I checked with other tools as well. Why it tells me don't have administrative privileges?

E:\IBM\RationalSDLC\ClearCase\etc\utils>creds
Login name: CNPPD\XT18851
USID: NT:S-1-5-21-1390067357-1659004503-839522115-1362692
Primary group: CNPPD\Domain Users (NT:S-1-5-21-1390067357-1659004503-839522115-513)
Groups: (31)
Everyone (NT:S-1-1-0)
BUILTIN\Users (NT:S-1-5-32-545)
BUILTIN\Administrators (NT:S-1-5-32-544)
NT AUTHORITY\REMOTE INTERACTIVE LOGON (NT:S-1-5-14)
NT AUTHORITY\INTERACTIVE (NT:S-1-5-4)
NT AUTHORITY\Authenticated Users (NT:S-1-5-11)
NT AUTHORITY\This Organization (NT:S-1-5-15)
LOCAL (NT:S-1-2-0)
CNPPD\Task-MTL-HQ-A23-RestartServices-ClearCase (NT:S-1-5-21-1390067357-1659004503-839522115-243012)
....
CNPPD\ClearCase Admin (NT:S-1-5-21-1390067357-1659004503-839522115-187797)
CNPPD\Rational_CHANGE_TOR-YD-A39_EPGMFILES (NT:S-1-5-21-1390067357-1659004503-839522115-243006)

You do not have ClearCase administrative privileges.
You are logged onto Terminal Server (Client Session).

E:\IBM\RationalSDLC\ClearCase\etc\utils>credmap PPD-HQ-681
Identity on local system:
User: CNPPD\XT18851 (NT:S-1-5-21-1390067357-1659004503-839522115-1362692)
Primary group: CNPPD\Domain Users (NT:S-1-5-21-1390067357-1659004503-839522115-513)
Groups: (32)
Everyone (NT:S-1-1-0)
BUILTIN\Users (NT:S-1-5-32-545)
BUILTIN\Administrators (NT:S-1-5-32-544)
NT AUTHORITY\REMOTE INTERACTIVE LOGON (NT:S-1-5-14)
NT AUTHORITY\INTERACTIVE (NT:S-1-5-4)
NT AUTHORITY\Authenticated Users (NT:S-1-5-11)
NT AUTHORITY\This Organization (NT:S-1-5-15)
LOCAL (NT:S-1-2-0)
CNPPD\Task-MTL-HQ-A23-RestartServices-ClearCase (NT:S-1-5-21-1390067357-1659004503-839522115-243012)
CNPPD\ClearCase Admin (NT:S-1-5-21-1390067357-1659004503-839522115-187797)
.....
CNPPD\TS USERS_MTL-HQ-A23 (NT:S-1-5-21-1390067357-1659004503-839522115-1361951)
CNPPD\Rational_CHANGE_TOR-YD-A39_EPGMFILES (NT:S-1-5-21-1390067357-1659004503-839522115-243006)

Identity on host "PPD-HQ-681":
User SID: NT:S-1-5-21-1390067357-1659004503-839522115-1362692
Primary group SID: NT:S-1-5-21-1390067357-1659004503-839522115-513
Group SID list: (32)
NT:S-1-1-0
NT:S-1-5-32-545
NT:S-1-5-32-544
NT:S-1-5-14
NT:S-1-5-4
NT:S-1-5-11
NT:S-1-5-15
NT:S-1-2-0
NT:S-1-5-21-1390067357-1659004503-839522115-243012
....

And in ClearCase Doctor, I see these error message:

Problem:

Your user name is a member of the "clearcase" group. In most cases, this group is
reserved for use by ClearCase adminstrators and service processes.

My CC Admin Group is called "ClearCase Admin", not "clearcase", and there is no group called "clearcase" in our domain. Why is like that? Is the space in the group name a problem?

Thanks
Jirong
Updated on 2013-04-02T22:00:35Z at 2013-04-02T22:00:35Z by SystemAdmin
  • pdubovitsky
    pdubovitsky
    189 Posts

    Re: *You do not have ClearCase administrative privileges.

    ‏2013-03-29T10:42:43Z  
    What is the value of the following registry key on your machine?
    HKEY_LOCAL_MACHINE\SOFTWARE\Atria\ClearCase\CurrentVersion\ClearCaseGroupName

    Pavel
  • JirongHu
    JirongHu
    683 Posts

    Re: *You do not have ClearCase administrative privileges.

    ‏2013-03-29T12:45:53Z  
    What is the value of the following registry key on your machine?
    HKEY_LOCAL_MACHINE\SOFTWARE\Atria\ClearCase\CurrentVersion\ClearCaseGroupName

    Pavel
    I am installing ClearCase v8.0.0.6, the key is found at:
    HKEY_LOCAL_MACHINE\SOFTWARE\Wos6432Node\Atria\ClearCase\CurrentVersion\ClearCaseGroupName

    The value is set to "ClearCase Admin", same as reported by ClearCase Doctor. Everything looks right to me, but creds continue report that error and I do NOT have the CC admin right, so e.g. can't create a storage location, etc.

    Thanks
    Jirong
  • pdubovitsky
    pdubovitsky
    189 Posts

    Re: *You do not have ClearCase administrative privileges.

    ‏2013-03-29T13:38:47Z  
    • JirongHu
    • ‏2013-03-29T12:45:53Z
    I am installing ClearCase v8.0.0.6, the key is found at:
    HKEY_LOCAL_MACHINE\SOFTWARE\Wos6432Node\Atria\ClearCase\CurrentVersion\ClearCaseGroupName

    The value is set to "ClearCase Admin", same as reported by ClearCase Doctor. Everything looks right to me, but creds continue report that error and I do NOT have the CC admin right, so e.g. can't create a storage location, etc.

    Thanks
    Jirong
    Is your account included in more than 32 groups?
    BTW, you do not need to be in the clearcase group to create storage location.

    Pavel
  • brcowan
    brcowan
    749 Posts

    Re: *You do not have ClearCase administrative privileges.

    ‏2013-03-29T17:39:01Z  
    Is your account included in more than 32 groups?
    BTW, you do not need to be in the clearcase group to create storage location.

    Pavel
    Is the group in the "ClearCaseGroupName" registry value domain qualified? It's supposed to be, otherwise there is no guarantee that it will work as you expect.

    Please also clarify the "can't create a storage location" issue...

    =================================================================
    Brian Cowan
    Advisory Software Engineer
    ClearCase Software Advisory Team (SWAT)
    Rational Software
    IBM Software Group
    550 King St
    Littleton, MA 01460

    Phone: 1.978.899.5436
    Web: http://www.ibm.com/software/rational/support/
  • JirongHu
    JirongHu
    683 Posts

    Re: *You do not have ClearCase administrative privileges.

    ‏2013-04-01T13:08:32Z  
    • brcowan
    • ‏2013-03-29T17:39:01Z
    Is the group in the "ClearCaseGroupName" registry value domain qualified? It's supposed to be, otherwise there is no guarantee that it will work as you expect.

    Please also clarify the "can't create a storage location" issue...

    =================================================================
    Brian Cowan
    Advisory Software Engineer
    ClearCase Software Advisory Team (SWAT)
    Rational Software
    IBM Software Group
    550 King St
    Littleton, MA 01460

    Phone: 1.978.899.5436
    Web: http://www.ibm.com/software/rational/support/
    Yes, you are right, add the domain qualified name fixed the issue.

    Thanks
    Jirong
  • JirongHu
    JirongHu
    683 Posts

    Re: *You do not have ClearCase administrative privileges.

    ‏2013-04-02T15:29:39Z  
    • brcowan
    • ‏2013-03-29T17:39:01Z
    Is the group in the "ClearCaseGroupName" registry value domain qualified? It's supposed to be, otherwise there is no guarantee that it will work as you expect.

    Please also clarify the "can't create a storage location" issue...

    =================================================================
    Brian Cowan
    Advisory Software Engineer
    ClearCase Software Advisory Team (SWAT)
    Rational Software
    IBM Software Group
    550 King St
    Littleton, MA 01460

    Phone: 1.978.899.5436
    Web: http://www.ibm.com/software/rational/support/
    Just an update.

    If I add the domain name (cnppd\clearcase_albd) during the installation (8.0.0.6), it gives an error say doesn't accept character "\". I don't know how other people resolve this issue.

    Thanks
    Jirong
  • SystemAdmin
    SystemAdmin
    47293 Posts

    Re: *You do not have ClearCase administrative privileges.

    ‏2013-04-02T22:00:35Z  
    • JirongHu
    • ‏2013-04-02T15:29:39Z
    Just an update.

    If I add the domain name (cnppd\clearcase_albd) during the installation (8.0.0.6), it gives an error say doesn't accept character "\". I don't know how other people resolve this issue.

    Thanks
    Jirong
    During an install of ClearCase on a Windows host, the ALBD account and ClearCase Administrators group will be the domain user/group in the case that the proper domain is selected from the drop-down menu. This is on the "Service Account" page on the IM install.

    The default "Account domain" is a local install which does confuse people. In general, the domain that the host is in as well as any trusted domains will be in that drop-down list.

    With the domain selected, simply entering the ALBD account name and ClearCase Admin group name will suffice.
  • raygear
    raygear
    17 Posts

    Re: *You do not have ClearCase administrative privileges.

    ‏2013-05-09T03:27:48Z  
    • JirongHu
    • ‏2013-04-01T13:08:32Z
    Yes, you are right, add the domain qualified name fixed the issue.

    Thanks
    Jirong

    I am encountering similar problem. What do you mean by adding domain qualified name?

    Is it adding the domain? e.g. From "ClearCase Admin" to "<DOMAIN>\ClearCase Admin"