Very strange permission denied for file checkout

Question

Very strange permission denied for file checkout

I am not a ClearCase newbie, I already did setup some CC-Servers in very well organized networks managed by LDAP. But this time it is a bit different in a non-LDAP managed network… I am facing a real strange checkout issue and I am stuck… To mention it directly at the beginning, this is not a standard permission issue (according to my knowledge).

When I try to checkout a file on my client (clearcase-client) as vobowner (ccadm - I haven't got any other user so far) I get following error:

cleartool: Error: Checked out version, but could not copy data to "testfile.txt" in view: Keine Berechtigung.
Correct the condition, then uncheckout and re-checkout the element.
cleartool: Error: Unable to check out "testfile.txt".

But I am able create Vobs, Views AND view private files. I am even able to checkout folders, but I am not able to checkout a simple text file.

ccadm@clearcase-client:~$ ct mkvob -tag /vobs/test -nc -stgloc vobstore
Created versioned object base.
Host-local path: clearcase-vm:/cc_storage/vobstore/test.vbs
Global path:     /net/clearcase-vm/cc_storage/vobstore/test.vbs
VOB schema:        80
VOB feature level: 8
VOB ownership:
  owner ccadm
  group ccusers

VOBs have special data backup considerations.  For more information on how to
back up your VOB properly, see the documentation for administering ClearCase.
If the backups aren't done properly, you are putting your data at risk!
ccadm@clearcase-client:~$ ct mkview -tag ccadm.dv -stgloc viewstore
Created view.
Host-local path: clearcase-vm:/cc_storage/viewstore/ccadm/ccadm.dv.vws
Global path:     /net/clearcase-vm/cc_storage/viewstore/ccadm/ccadm.dv.vws
It has the following rights:
User : ccadm    : rwx
Group: ccusers  : rwx
Other:          : r-x
ccadm@clearcase-client:~$ ct mount /vobs/test
ccadm@clearcase-client:~$ ct setview ccadm.dv
ccadm@clearcase-client:~$ cd /vobs/test
ccadm@clearcase-client:/vobs/test$ ct co -nc .
Checked out "." from version "/main/0".
ccadm@clearcase-client:/vobs/test$ touch testfile.txt
ccadm@clearcase-client:/vobs/test$ ct mkelem -nc -ci testfile.txt
Created element "testfile.txt" (type "text_file").
Checked in "testfile.txt" version "/main/1".
ccadm@clearcase-client:/vobs/test$ ct ci -nc .
Checked in "." version "/main/1".
ccadm@clearcase-client:/vobs/test$ ct co -nc testfile.txt
cleartool: Error: Checked out version, but could not copy data to "testfile.txt" in view: Keine Berechtigung.
Correct the condition, then uncheckout and re-checkout the element.
cleartool: Error: Unable to check out "testfile.txt".

This is what I do see in mvfs_log:

56fe658a mvfs: Error: cleartext open failed view=ccadm.dv vob=/vobs/test dbid=0x80000003 - Permission denied
56fe658a mvfs: Error: cleartext pname= /net/clearcase-vm/cc_storage/viewstore/ccadm/ccadm.dv.vws/.s/00048/8000000356fe6566testfile.txt
56fe658a mvfs: Error: cleartext create view=ccadm.dv vob=/vobs/test dbid=0x80000003 - Permission denied
56fe658a mvfs: Error: cleartext pname= /net/clearcase-vm/cc_storage/viewstore/ccadm/ccadm.dv.vws/.s/00048/8000000356fe6567testfile.txt.checkedout

Of course I can see “Permission denied” but permissions should be fine (see below)…

Environment description: Network is currently a private test network without LDAP. So UIDs and GIDs are set the same on server and client. I don't know any other prerequisites for using CC in a non-LDAP network. Both are configured for autofs using /net. Both machines are currently virtual machines for testing (I had exactly the same issue on non-VMs… That's why I did setup the VMs for testing)

CC-Server: clearcase-vm

OS: Ubuntu 14.04

Linux clearcase-vm 3.13.0-79-generic #123-Ubuntu SMP Fri Feb 19 14:27:58 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

Purpose: View-, Vob-, Registryserver

Local user: ccadm

ccadm@clearcase-vm:~$ id -a
uid=2000(ccadm) gid=2000(ccusers) Gruppen=2000(ccusers)

Local vobstorage permissions:

ccadm@clearcase-vm:~$ ls -la /cc_storage/vobstore/test.vbs/
insgesamt 52
drwxr-xr-x 8 ccadm ccusers 4096 Apr  1 14:09 .
drwxrwxrwx 4 root  root    4096 Apr  1 14:09 ..
drwxr-xr-x 2 ccadm ccusers 4096 Apr  1 14:09 admin
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 c
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 d
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 db
-r--r--r-- 1 ccadm ccusers   13 Apr  1 14:09 .hostname
drwx------ 2 ccadm ccusers 4096 Apr  1 14:09 .identity
-rw-r--r-- 1 ccadm ccusers    7 Apr  1 14:09 .pid
-r--r--r-- 1 ccadm ccusers   41 Apr  1 14:09 replica_uuid
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 s
-r--r--r-- 1 ccadm ccusers   41 Apr  1 14:09 vob_oid
-rw-r--r-- 1 ccadm ccusers  625 Apr  1 14:09 vob_server.conf

Local viewstorage permissions:

ccadm@clearcase-vm:~$ ls -la /cc_storage/viewstore/ccadm/
insgesamt 16
drwxr-xr-x 4 ccadm ccusers 4096 Apr  1 14:10 .
drwxrwxrwx 3 root  root    4096 Mär 30 16:43 ..
drwxrwxr-x 5 ccadm ccusers 4096 Apr  4 11:39 ccadm.dv.vws

ClearCase version:

ccadm@clearcase-vm:~$ ct -ver
ClearCase version 8.0.1.1 (Fri Sep 20 16:09:14 EDT 2013) (8.0.1.01.00_2013C.FCS)
ClearCase version 8.0.1.2 (Wed Dec 11 16:09:14 EDT 2013) (8.0.1.02.00_2013D.FCS)
ClearCase version 8.0.1.3 (Wed Mar 19 00:31:17 EST 2014) (8.0.1.03.00_2014A.FCS)
ClearCase version 8.0.1.3-iFix01 (Tue Apr 22 18:14:02 EDT 2014) (8.0.1.03.01_2014A.1.FCS)
ClearCase version 8.0.1.04 (Thu Jun 24 22:31:13 EDT 2014) (8.0.1.04.00_2014B.FCS)
ClearCase version 8.0.1.05 (Wed Sep 17 15:09:27 EDT 2014) (8.0.1.05.00_2014C.FCS)
ClearCase version 8.0.1.06 (Tue Dec 11 22:31:02 EST 2014) (8.0.1.06.00_2014D.FCS)
ClearCase version 8.0.1.07 (Wed Mar 18 00:31:02 EST 2015) (8.0.1.07.00_2015A.FCS)
ClearCase version 8.0.1.08 (Tue Jun 24 22:30:54 EDT 2015) (8.0.1.08.00_2015B.FCS)
ClearCase version 8.0.1.09 (Wed Aug 26 22:16:02 EDT 2015) (8.0.1.09.00_2015C.D150826)
@(#) MVFS version 8.0.1.9 (Fri Aug 21 22:52:34 2015) built at $Date: 2016-03-30.13:14:43 (UTC) $
cleartool                         8.0.1.9 (Thu Aug 20 22:50:12 2015)
db_server                         8.0.1.9 (Mon Aug 17 11:37:37 2015)
VOB database schema versions: 54, 80

CC-Client: clearcase-client

OS: Ubuntu 14.04

Linux clearcase-client 3.13.0-79-generic #123-Ubuntu SMP Fri Feb 19 14:27:58 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

Purpose: ClearCase client

Local user: ccadm

ccadm@clearcase-client:~$ id -a
uid=2000(ccadm) gid=2000(ccusers) Gruppen=2000(ccusers)

Remote vobstorage permissions on clearcase-vm:

ccadm@clearcase-client:~$ ls -la /net/clearcase-vm/cc_storage/vobstore/test.vbs/
insgesamt 52
drwxr-xr-x 8 ccadm ccusers 4096 Apr  1 14:09 .
drwxrwxrwx 4 root  root    4096 Apr  1 14:09 ..
drwxr-xr-x 3 ccadm ccusers 4096 Apr  3 00:30 admin
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 c
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 d
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 db
-r--r--r-- 1 ccadm ccusers   13 Apr  1 14:09 .hostname
drwx------ 2 ccadm ccusers 4096 Apr  1 14:09 .identity
-rw-r--r-- 1 ccadm ccusers    7 Apr  1 14:09 .pid
-r--r--r-- 1 ccadm ccusers   41 Apr  1 14:09 replica_uuid
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 s
-r--r--r-- 1 ccadm ccusers   41 Apr  1 14:09 vob_oid
-rw-r--r-- 1 ccadm ccusers  625 Apr  1 14:09 vob_server.conf

Remote viewstorage permissions on clearcase-vm:

ccadm@clearcase-client:~$ ls -la /net/clearcase-vm/cc_storage/viewstore/ccadm/
insgesamt 16
drwxr-xr-x 4 ccadm ccusers 4096 Apr  1 14:10 .
drwxrwxrwx 3 root  root    4096 Mär 30 16:43 ..
drwxrwxr-x 5 ccadm ccusers 4096 Apr  4 11:39 ccadm.dv.vws

ClearCase version:

ccadm@clearcase-client:~$ ct -ver
ClearCase version 8.0.1.1 (Fri Sep 20 16:09:14 EDT 2013) (8.0.1.01.00_2013C.FCS)
ClearCase version 8.0.1.2 (Wed Dec 11 16:09:14 EDT 2013) (8.0.1.02.00_2013D.FCS)
ClearCase version 8.0.1.3 (Wed Mar 19 00:31:17 EST 2014) (8.0.1.03.00_2014A.FCS)
ClearCase version 8.0.1.3-iFix01 (Tue Apr 22 18:14:02 EDT 2014) (8.0.1.03.01_2014A.1.FCS)
ClearCase version 8.0.1.04 (Thu Jun 24 22:31:13 EDT 2014) (8.0.1.04.00_2014B.FCS)
ClearCase version 8.0.1.05 (Wed Sep 17 15:09:27 EDT 2014) (8.0.1.05.00_2014C.FCS)
ClearCase version 8.0.1.06 (Tue Dec 11 22:31:02 EST 2014) (8.0.1.06.00_2014D.FCS)
ClearCase version 8.0.1.07 (Wed Mar 18 00:31:02 EST 2015) (8.0.1.07.00_2015A.FCS)
ClearCase version 8.0.1.08 (Tue Jun 24 22:30:54 EDT 2015) (8.0.1.08.00_2015B.FCS)
ClearCase version 8.0.1.09 (Wed Aug 26 22:16:02 EDT 2015) (8.0.1.09.00_2015C.D150826)
@(#) MVFS version 8.0.1.9 (Fri Aug 21 22:52:34 2015) built at $Date: 2016-04-01.11:18:08 (UTC) $
cleartool                         8.0.1.9 (Thu Aug 20 22:50:12 2015)
db_server                         8.0.1.9 (Mon Aug 17 11:37:37 2015)
VOB database schema versions: 54, 80

If anybody is wondering what happens when I do checkout a file as ccadm directly working on the CC-Server (clearcase-vm) using the same vob and view, it works as it should... So checkout of files is possible.

Has anybody got an idea what could cause that permission issue or could give me a hint what to do? Maybe I did miss something when setting up and configuring the server/client, but I don't think so…

ubuntu

view

permissions

clearcase

vcs-checkout

asked on Stack Overflow Apr 5, 2016 by

Jonas • edited May 21, 2018 by

Zoe

2 Answers

Start with undoing the checkout, and then try to cat the file. If it fails, and you dont see cleartext construction errors in the view log, check to see if you can cat the cleartext from the client.

If it fails, check a network trace. I have a sneaking feeling that something is screwing up NFS. You may be defaulting to nfsv4 and it may be trying to do something other than AUTH_SYS.

This would be an interesting PMR.

answered on Stack Overflow Apr 6, 2016 by

Brian Cowan

As an FYI, I built a pair of Ubuntu 14.04.0 VM's and updated them. They are running this kernel release:

Linux test-ub-vbox 3.13.0-85-generic #129-Ubuntu SMP Thu Mar 17 20:50:15 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

I executed this script to ensure that the UIDs were the same on both sides of the link:

 sudo useradd -u 50126 -g users -m -s /bin/bash -d /home/vobadm vobadm
 sudo useradd -u 50128 -g users -m -s /bin/bash -d /home/user1 user1
 sudo passwd user1
 sudo passwd vobadm

I set /net automount map to execute the provided /etc/auto.net file (the default is to have no /net @ all).

I exported the server's storage as *(rw,no_root_squash).

I created the VOB on the server as "vobadm" and mounted it on the client as vobadm. (appropriate directories created)

I'm not able to make the issue occur. My ubuntu 14.04 setup seems to work fine.

You do need to use ubuntu 14.04.0 from archive.ubuntu.com and not anything later. The rest can take you down the primrose path as some of them started using Ubuntu 15.10 kernels...

And I'm using 8.0.1.10...

If you hit something. Please open a PMR, mention my name, share the link to this thread, and get the network traces. We can then compare notes/traces.

answered on Stack Overflow Apr 7, 2016 by

Brian Cowan

User contributions licensed under CC BY-SA 3.0