Protectvob Command

protectvob

Changes owner or groups of a VOB

APPLICABILITY

Product	Command type
ClearCase	cleartool subcommand
ClearCase LT	cleartool subcommand

Platform

UNIX

Windows

SYNOPSIS

protectvob [ –f·orce ] [ –cho·wn user ] [ –chg·rp group ]

[ –add·_group group[,...] [ –del·ete_group group[,...] ]
vob-storage-pname ...

DESCRIPTION

protectvob manages the ownership and group membership of the files and directories in a VOB, by changing the OS-level permissions on files and directories within the VOB storage area.

ClearCase on UNIX only. If the VOB has remote storage pools, you may need to execute this command on the remote host also to complete the permissions update.

Replicated VOBs. If you run protectvob -chown or protectvob -chgrp on a VOB replica that preserves identities, you must follow these steps to prevent metadata divergence among replicas in the VOB family:

1. Stop synchronization among identities-preserving replicas in the family. Make sure that all update packets have been imported.
2. Run protectvob -chown or protectvob -chgrp on all identities-preserving replicas in the family. You must use the same options and arguments in each command.
3. Restart synchronization.

RESTRICTIONS

Identities

You must have one of the following identities:

• root (UNIX)
• Local administrator of the VOB server host (Windows)

Note: You cannot use the -add_group option to add the ClearCase administrators group. This group already has rights to all VOB objects.

Locks

An error occurs if one or more of these objects are locked: VOB.

Mastership

(Replicated VOBs only) No mastership restrictions.

OPTIONS AND ARGUMENTS

Confirmation Step

Default

protectvob asks for confirmation before changing the permissions in one or more storage pools.

–for·ce

Suppresses the confirmation step.

Changing VOB Ownership

Default

None. You can use –chown by itself, or in combination with –chgrp.

Note: On Windows, a member of the Backup Operators or Administrators group can change ownership of any VOB with protectvob –chown. If you are the VOB owner, you can change ownership of that VOB by running protectvob –chown user as yourself, and then logging in as user and running protectvob –force vob-storage-pname with no other options.

–cho·wn user

Specifies a new VOB owner, who becomes the owner of all the VOB's storage pools and all of the data containers in them. user can be a login name or one of the following:

On UNIX, a numeric user ID. protectvob rebuilds the .identity subdirectory of the VOB storage directory, reflecting the new VOB owner's user ID, group ID, and additional groups (if any).

On Windows, the numeric user ID displayed by ccase-home-dir\etc\utils\creds username (this is not the same as the Windows NT Security Identifier). protectvob rebuilds the Security Descriptor on the VOB root directory (on NTFS only) and the identity.sd and group.sd files in the VOB storage directory, reflecting the new VOB owner's user ID, group ID, and additional groups (if any).

–ch·grp group

Specifies a new principal group for the VOB. group can be a group name or one of the following:

On UNIX, a numeric group ID.

On Windows, the numeric group ID displayed by ccase-home-dir\etc\utils\creds –g groupname.

Maintaining the Secondary Group List

Default

None. You can use –add_group and –delete_group singly, or together.

–add·_group group[,...]

Adds one or more groups to the VOB's secondary group list. group can be a group name or one of the following:

On UNIX, a numeric group ID.

On Windows, a numeric group ID displayed by ccase-home-dir\etc\utils\creds –g groupname (Windows).

You must enclose group names that contain spaces in double quotes.

–del·ete_group group[,...]

Deletes one or more groups from the VOB's secondary group list. group can be a group name or one of the following:

On UNIX, a numeric group ID.

On Windows, the numeric group ID displayed by ccase-home-dir\etc\utils\creds –g groupname. You must enclose group names that contain spaces in double quotes.

Specifying the VOB

Default

None.

vob-storage-pname

Local pathname of a VOB storage directory.

EXAMPLES

The UNIX examples in this section are written for use in csh. If you use another shell, you may need to use different quoting and escaping conventions.

The Windows examples that include wildcards or quoting are written for use in cleartool interactive mode. If you use cleartool single-command mode, you may need to change the wildcards and quoting to make your command interpreter process the command appropriately.

In cleartool single-command mode, cmd-context represents the UNIX shell or Windows command interpreter prompt, followed by the cleartool command. In cleartool interactive mode, cmd-context represents the interactive cleartool prompt.

• On a UNIX system, make user jackson the owner of the VOB whose storage area is /usr/lib/vob.vb.

  cmd-context  protectvob -chown jackson /usr/lib/vob.vb 
  This command affects the protection on your versioned object base.
  While this command is running, access to the VOB will be limited.
  If you have remote pools, you will have to run this command remotely.
  Pool "sdft" needs to be protected correctly.
  Pool "ddft" needs to be protected correctly.
  Pool "cdft" needs to be protected correctly.
  Protect versioned object base "/usr/lib/vob.vb"? [no] yes 
  Do you wish to protect the pools that appear not to need protection? [no]
   no 
  Protecting "/usr/lib/vob.vb/s/sdft/0"...
  Protecting "/usr/lib/vob.vb/s/sdft/1"...
  Protecting "/usr/lib/vob.vb/s/sdft"...
  
  ...
  
  Protecting "/usr/lib/vob.vb/d/ddft"...
  Protecting "/usr/lib/vob.vb/d/ddft/0"...
  ...
  Protecting "/usr/lib/vob.vb/c/cdft"...
  Protecting "/usr/lib/vob.vb/c/cdft/2d"...
  Protecting "/usr/lib/vob.vb/c/cdft/35"...
  ...
  VOB ownership:
   owner jackson
   group user
  Additional groups:
   group doc
  Change the owner and group of a remote VOB storage pool.
  % rlogin ccsvr01
  Password: 
   
  % /opt/rational/etc/chown_pool jackson.user /vobaux/vega_src/s001

• On a Windows system, make user smg the owner of the VOB whose storage area is c:\vobs\docs.vbs.

  cmd-context protectvob –chown smg c:\vobs\docs.vbs 
  This command affects the protection on your versioned object base.
  While this command is running, access to the VOB will be limited.
  Pool “sdft” appears to be protected correctly.
  Pool “ddft” appears to be protected correctly.
  Pool “cdft” appears to be protected correctly.
  Protect versioned object base “c:\vobs\docs.vbs”?  [no] yes 
  Do you wish to protect the pools that appear not to need protection?  [no] no 
  VOB ownership:
    owner smg
    group user
  Additional groups:
    group Backup Operators

• On a UNIX system, add one group to a VOB's group list, and remove another group.

  cmd-context
   protectvob -add_group devel -delete_group doc /usr/lib/vob.vb 
  This command affects the protection on your versioned object base.
  While this command is running, access to the VOB will be limited.
  If you have remote pools, you will have to run this command remotely.
  Pool "sdft" appears to be protected correctly.
  Pool "ddft" appears to be protected correctly.
  Pool "cdft" appears to be protected correctly.
  Protect versioned object base "/usr/lib/vob.vb"? [no] yes 
  Do you wish to protect the pools that appear not to need protection? [no] no 
  VOB ownership:
   owner jackson
   group user
  Additional groups:
   group devel

• On a Windows system, add the group Doc Group to a VOB's group list.

  cmd-context protectvob –add_group "Doc Group" c:\vobs\docs.vbs 
  This command affects the protection on your versioned object base.
  While this command is running, access to the VOB will be limited.
  Pool “sdft” appears to be protected correctly.
  Pool “ddft” appears to be protected correctly.
  Pool “cdft” appears to be protected correctly.
  Protect versioned object base “c:\vobs\docs.vbs”?  [no] yes 
  Do you wish to protect the pools that appear not to need protection?  [no] no 
  VOB ownership:
    owner smg
    group user
  Additional groups:
    group Backup Operators
    group Doc Group

SEE ALSO

, , , , Administrator's Guide

---

2003 Rational Software. All Rights Reserved.