Friday, November 26, 2010

Re: ClearCase 7.0.1 Multiple Domains - One Way Trust

Having finally managed to pursuade the higher powers that the ADAM solution was not a good one we have now gone for a two domain setup with a one way trust between domains. I have tried following the instructions for proxy groups but cannot get ClearCase to play ball.

The setup

DOMAIN A
ClearCase Server
Client

DOMAIN B
Client

Domain A trusts Domain B but not the other way.

All groups are setup in domain A and the client in that domain works as expected, however getting the client in domain B to work is a problem.

I can't use the domain A server group or ALBD account as the account is not recognised and the ALBD service will not start. I have created an account (with the same name) in a new group in domain B and added this to the server group in domain A. This allows the albd service to start and the VOBs can be viewed - partial success.

This will not allow the checkout or add to source control operations (I haven't tried anything further yet) as it says "permission denied, must be one of: member of element group, element owner, VOB owner, member of ClearCase group".

I have created a proxy group in domain B, with the correct description, and added that as a member of the domain A ClearCase users group. I have also added the CLEARCASE_PRIMARY_GROUP value, trying with the group from both domains but get the same result.

The owner of the VOB cannot be seen properly from domain B due to the trust being one way but when viewed from domain A is correct (owner: domain A vob admin, group: domain A clearcase users).

Does anyone have any pointers as to where I have gone wrong? I suspect I need a two way trust but need to try all options with a one way trust before going that way.

Thanks

Alastair French


View the original article here

No comments:

Post a Comment