IBM Support

About the CLEARCASE_PRIMARY_GROUP variable and CCWeb

Troubleshooting


Problem

This technote explains how the IBM® Rational® ClearCase® variable CLEARCASE_PRIMARY_GROUP can be used with the ClearCase Web interface on web servers running on the Microsoft® Windows® platform.

Cause

The ClearCase Web server uses the client's primary group that is set on the Windows domain controller through the Web client.

The Web server does not look at the environment variable CLEARCASE_PRIMARY_GROUP.

For instance, on the domain controller, user JDOEs' primary group is set to "Domain Users". On JDOEs' machine he has the CLEARCASE_PRIMARY_GROUP variable set to "ccusers".

See technote 1135509 for more information on the CLEARCASE_PRIMARY_GROUP variable and its usage.

When logged on through the ClearCase Web interface, ccweb credentials output (see technote 1123574) tells you that the primary group is "Domain Users".

From a command line on the same machine (with ClearCase installed), creds output tells you that JDOEs' primary group is "ccusers" thus proving that the web interface does not pick up the CLEARCASE_PRIMARY_GROUP variable.

Resolving The Problem

In ClearCase version 4.x, you could not override this group setting. As a result, sites that use domain mapping to allow user accounts in multiple domains to share VOBs could not access those VOBs through the ClearCase Web interface.

To enable a single Windows Web server to support one primary group override, add the -primary_group directive with a group name value to the ccweb.conf file.

  • See technote 1125332 for more information about the ccweb.conf file.
  • See technote 1147273 for more information on why the -primary_group directive does not work on UNIX® or Linux® web servers.


The allowable values for group name are the same as for the CLEARCASE_PRIMARY_GROUP environment variable.


The ccweb.conf file must be located in C:\Program Files\Rational\ClearCase\var\config.

IMPORTANT NOTE: If you need more than one primary group override, you will need to configure additional Web servers.

To make use of CLEARCASE_PRIMARY_GROUP for use with the ClearCase Web interface follow these instructions:

  1. Navigate to the C:\Program Files\Rational\ClearCase\config\ccweb directory.
  2. Look for the ccweb.conf file.
  3. If the file is not there, copy the ccweb.conf file from C:\Program Files\Rational\ClearCase\config\ccweb\ccweb.conf to C:\Program Files\Rational\ClearCase\var\config\ccweb.conf.
  4. Edit the C:\Program Files\Rational\ClearCase\var\config\ccweb.conf version of the file.
  5. Remove the pound sign (#) from the following line and supply the group needed for all the clients to use.

    The line appears as prior to editing:

    # -primary_group groupname

    Change the line to the following:

    -primary_group <your environments group name>

    Example:

    -primary_group MYDOMAIN\ccusers

    This change affects all users using this particular Web server. Again, if you need to set more than one CLEARCASE_PRIMARY_GROUP, you must set up another Web server to accomplish this goal.

  6. If the ClearCase multiple domain support is required, you will need to make a Windows registry change. Typically, when domain mapping is used to allow users from multiple domains to access the same VOB, each user must create the DomainMappingEnabled value and set the value to 1 in the HKEY_CURRENT_USER\Software\Atria\ClearCase\CurrentVersion registry key.
    To enable domain mapping for a Web server, create the DomainMappingEnabled value in the HKEY_LOCAL_MACHINE\Software\Atria\ClearCase\CurrentVersion registry key on the Web server. The value must be of type DWORD and set to 1.

    Note: If users log directly on to the Web server instead of logging on through the Web interface, HKEY_CURRENT_USER values for DomainMappingEnabled override the HKEY_LOCAL_MACHINE value.

Change request (RFE) RATLC00983604 has also been opened requesting for the ability to set client side primary group variable for CCWeb.

A workaround to this issue can be obtained by using the ClearCase Remote Client (CCRC) in place of the CCWeb. Review technote 1205629 for more information.




[{"Product":{"code":"SSSH27","label":"Rational ClearCase"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"ClearCase Web (CCWeb)","Platform":[{"code":"PF033","label":"Windows"}],"Version":"2002.05.00;2003.06.00;7.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSSH27","label":"Rational ClearCase"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"ClearCase Web (CCWeb)","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSSH27","label":"Rational ClearCase"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Environment Variables","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
16 June 2018

UID

swg21125331