ubuntu - 非常奇怪的文件 check out 权限被拒绝

Question

我不是 ClearCase 新手，我已经在 LDAP 管理的组织良好的网络中设置了一些 CC-Server。但是这次在非 LDAP 管理的网络中有点不同......我面临一个真正奇怪的结帐问题并且我被卡住了......在开头直接提到它，这不是标准权限问题(据我所知) .

当我尝试以 vobowner(ccadm - 到目前为止我还没有任何其他用户)的身份在我的客户端(clearcase-client)上 checkout 文件时，我收到以下错误:

cleartool: Error: Checked out version, but could not copy data to "testfile.txt" in view: Keine Berechtigung.
Correct the condition, then uncheckout and re-checkout the element.
cleartool: Error: Unable to check out "testfile.txt".

但我可以创建 Vob、 View 和查看私有(private)文件。我什至可以 checkout 文件夹，但无法 checkout 简单的文本文件。

ccadm@clearcase-client:~$ ct mkvob -tag /vobs/test -nc -stgloc vobstore
Created versioned object base.
Host-local path: clearcase-vm:/cc_storage/vobstore/test.vbs
Global path:     /net/clearcase-vm/cc_storage/vobstore/test.vbs
VOB schema:        80
VOB feature level: 8
VOB ownership:
  owner ccadm
  group ccusers

VOBs have special data backup considerations.  For more information on how to
back up your VOB properly, see the documentation for administering ClearCase.
If the backups aren't done properly, you are putting your data at risk!
ccadm@clearcase-client:~$ ct mkview -tag ccadm.dv -stgloc viewstore
Created view.
Host-local path: clearcase-vm:/cc_storage/viewstore/ccadm/ccadm.dv.vws
Global path:     /net/clearcase-vm/cc_storage/viewstore/ccadm/ccadm.dv.vws
It has the following rights:
User : ccadm    : rwx
Group: ccusers  : rwx
Other:          : r-x
ccadm@clearcase-client:~$ ct mount /vobs/test
ccadm@clearcase-client:~$ ct setview ccadm.dv
ccadm@clearcase-client:~$ cd /vobs/test
ccadm@clearcase-client:/vobs/test$ ct co -nc .
Checked out "." from version "/main/0".
ccadm@clearcase-client:/vobs/test$ touch testfile.txt
ccadm@clearcase-client:/vobs/test$ ct mkelem -nc -ci testfile.txt
Created element "testfile.txt" (type "text_file").
Checked in "testfile.txt" version "/main/1".
ccadm@clearcase-client:/vobs/test$ ct ci -nc .
Checked in "." version "/main/1".
ccadm@clearcase-client:/vobs/test$ ct co -nc testfile.txt
cleartool: Error: Checked out version, but could not copy data to "testfile.txt" in view: Keine Berechtigung.
Correct the condition, then uncheckout and re-checkout the element.
cleartool: Error: Unable to check out "testfile.txt".

这是我在 mvfs_log 中看到的:

56fe658a mvfs: Error: cleartext open failed view=ccadm.dv vob=/vobs/test dbid=0x80000003 - Permission denied
56fe658a mvfs: Error: cleartext pname= /net/clearcase-vm/cc_storage/viewstore/ccadm/ccadm.dv.vws/.s/00048/8000000356fe6566testfile.txt
56fe658a mvfs: Error: cleartext create view=ccadm.dv vob=/vobs/test dbid=0x80000003 - Permission denied
56fe658a mvfs: Error: cleartext pname= /net/clearcase-vm/cc_storage/viewstore/ccadm/ccadm.dv.vws/.s/00048/8000000356fe6567testfile.txt.checkedout

当然我可以看到“权限被拒绝”，但权限应该没问题(见下文)......

环境描述:网络目前是一个没有 LDAP 的私有(private)测试网络。所以 UID 和 GID 在服务器和客户端上设置相同。我不知道在非 LDAP 网络中使用 CC 的任何其他先决条件。两者都使用/net 为 autofs 配置。两台机器目前都是用于测试的虚拟机(我在非 VM 上遇到了完全相同的问题......这就是我设置 VM 进行测试的原因)

CC 服务器:clearcase-vm

操作系统:Ubuntu 14.04

Linux clearcase-vm 3.13.0-79-generic #123-Ubuntu SMP Fri Feb 19 14:27:58 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

用途:View-, Vob-, Registryserver

本地用户:ccadm

ccadm@clearcase-vm:~$ id -a
uid=2000(ccadm) gid=2000(ccusers) Gruppen=2000(ccusers)

本地存储权限:

ccadm@clearcase-vm:~$ ls -la /cc_storage/vobstore/test.vbs/
insgesamt 52
drwxr-xr-x 8 ccadm ccusers 4096 Apr  1 14:09 .
drwxrwxrwx 4 root  root    4096 Apr  1 14:09 ..
drwxr-xr-x 2 ccadm ccusers 4096 Apr  1 14:09 admin
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 c
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 d
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 db
-r--r--r-- 1 ccadm ccusers   13 Apr  1 14:09 .hostname
drwx------ 2 ccadm ccusers 4096 Apr  1 14:09 .identity
-rw-r--r-- 1 ccadm ccusers    7 Apr  1 14:09 .pid
-r--r--r-- 1 ccadm ccusers   41 Apr  1 14:09 replica_uuid
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 s
-r--r--r-- 1 ccadm ccusers   41 Apr  1 14:09 vob_oid
-rw-r--r-- 1 ccadm ccusers  625 Apr  1 14:09 vob_server.conf

本地 View 存储权限:

ccadm@clearcase-vm:~$ ls -la /cc_storage/viewstore/ccadm/
insgesamt 16
drwxr-xr-x 4 ccadm ccusers 4096 Apr  1 14:10 .
drwxrwxrwx 3 root  root    4096 Mär 30 16:43 ..
drwxrwxr-x 5 ccadm ccusers 4096 Apr  4 11:39 ccadm.dv.vws

ClearCase 版本:

ccadm@clearcase-vm:~$ ct -ver
ClearCase version 8.0.1.1 (Fri Sep 20 16:09:14 EDT 2013) (8.0.1.01.00_2013C.FCS)
ClearCase version 8.0.1.2 (Wed Dec 11 16:09:14 EDT 2013) (8.0.1.02.00_2013D.FCS)
ClearCase version 8.0.1.3 (Wed Mar 19 00:31:17 EST 2014) (8.0.1.03.00_2014A.FCS)
ClearCase version 8.0.1.3-iFix01 (Tue Apr 22 18:14:02 EDT 2014) (8.0.1.03.01_2014A.1.FCS)
ClearCase version 8.0.1.04 (Thu Jun 24 22:31:13 EDT 2014) (8.0.1.04.00_2014B.FCS)
ClearCase version 8.0.1.05 (Wed Sep 17 15:09:27 EDT 2014) (8.0.1.05.00_2014C.FCS)
ClearCase version 8.0.1.06 (Tue Dec 11 22:31:02 EST 2014) (8.0.1.06.00_2014D.FCS)
ClearCase version 8.0.1.07 (Wed Mar 18 00:31:02 EST 2015) (8.0.1.07.00_2015A.FCS)
ClearCase version 8.0.1.08 (Tue Jun 24 22:30:54 EDT 2015) (8.0.1.08.00_2015B.FCS)
ClearCase version 8.0.1.09 (Wed Aug 26 22:16:02 EDT 2015) (8.0.1.09.00_2015C.D150826)
@(#) MVFS version 8.0.1.9 (Fri Aug 21 22:52:34 2015) built at $Date: 2016-03-30.13:14:43 (UTC) $
cleartool                         8.0.1.9 (Thu Aug 20 22:50:12 2015)
db_server                         8.0.1.9 (Mon Aug 17 11:37:37 2015)
VOB database schema versions: 54, 80

CC 客户端:clearcase 客户端

操作系统:Ubuntu 14.04

Linux clearcase-client 3.13.0-79-generic #123-Ubuntu SMP Fri Feb 19 14:27:58 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

用途:ClearCase 客户端

本地用户:ccadm

ccadm@clearcase-client:~$ id -a
uid=2000(ccadm) gid=2000(ccusers) Gruppen=2000(ccusers)

clearcase-vm 上的远程 vobstorage 权限:

ccadm@clearcase-client:~$ ls -la /net/clearcase-vm/cc_storage/vobstore/test.vbs/
insgesamt 52
drwxr-xr-x 8 ccadm ccusers 4096 Apr  1 14:09 .
drwxrwxrwx 4 root  root    4096 Apr  1 14:09 ..
drwxr-xr-x 3 ccadm ccusers 4096 Apr  3 00:30 admin
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 c
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 d
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 db
-r--r--r-- 1 ccadm ccusers   13 Apr  1 14:09 .hostname
drwx------ 2 ccadm ccusers 4096 Apr  1 14:09 .identity
-rw-r--r-- 1 ccadm ccusers    7 Apr  1 14:09 .pid
-r--r--r-- 1 ccadm ccusers   41 Apr  1 14:09 replica_uuid
drwxr-xr-x 3 ccadm ccusers 4096 Apr  1 14:09 s
-r--r--r-- 1 ccadm ccusers   41 Apr  1 14:09 vob_oid
-rw-r--r-- 1 ccadm ccusers  625 Apr  1 14:09 vob_server.conf

clearcase-vm 上的远程 View 存储权限:

ccadm@clearcase-client:~$ ls -la /net/clearcase-vm/cc_storage/viewstore/ccadm/
insgesamt 16
drwxr-xr-x 4 ccadm ccusers 4096 Apr  1 14:10 .
drwxrwxrwx 3 root  root    4096 Mär 30 16:43 ..
drwxrwxr-x 5 ccadm ccusers 4096 Apr  4 11:39 ccadm.dv.vws

ClearCase 版本:

ccadm@clearcase-client:~$ ct -ver
ClearCase version 8.0.1.1 (Fri Sep 20 16:09:14 EDT 2013) (8.0.1.01.00_2013C.FCS)
ClearCase version 8.0.1.2 (Wed Dec 11 16:09:14 EDT 2013) (8.0.1.02.00_2013D.FCS)
ClearCase version 8.0.1.3 (Wed Mar 19 00:31:17 EST 2014) (8.0.1.03.00_2014A.FCS)
ClearCase version 8.0.1.3-iFix01 (Tue Apr 22 18:14:02 EDT 2014) (8.0.1.03.01_2014A.1.FCS)
ClearCase version 8.0.1.04 (Thu Jun 24 22:31:13 EDT 2014) (8.0.1.04.00_2014B.FCS)
ClearCase version 8.0.1.05 (Wed Sep 17 15:09:27 EDT 2014) (8.0.1.05.00_2014C.FCS)
ClearCase version 8.0.1.06 (Tue Dec 11 22:31:02 EST 2014) (8.0.1.06.00_2014D.FCS)
ClearCase version 8.0.1.07 (Wed Mar 18 00:31:02 EST 2015) (8.0.1.07.00_2015A.FCS)
ClearCase version 8.0.1.08 (Tue Jun 24 22:30:54 EDT 2015) (8.0.1.08.00_2015B.FCS)
ClearCase version 8.0.1.09 (Wed Aug 26 22:16:02 EDT 2015) (8.0.1.09.00_2015C.D150826)
@(#) MVFS version 8.0.1.9 (Fri Aug 21 22:52:34 2015) built at $Date: 2016-04-01.11:18:08 (UTC) $
cleartool                         8.0.1.9 (Thu Aug 20 22:50:12 2015)
db_server                         8.0.1.9 (Mon Aug 17 11:37:37 2015)
VOB database schema versions: 54, 80

如果有人想知道当我使用相同的 vob 和 View 直接在 CC-Server (clearcase-vm) 上作为 ccadm checkout 一个文件时会发生什么，它会正常工作......所以文件 checkout 是可能的.

有没有人知道是什么导致了权限问题，或者可以提示我该怎么做？也许我在设置和配置服务器/客户端时确实错过了一些东西，但我不这么认为……

Answer 1

首先撤消 checkout ，然后尝试 cat 文件。如果失败，并且您在查看日志中没有看到明文构造错误，请检查您是否可以从客户端捕获明文。

如果失败，请检查网络跟踪。我有一种偷偷摸摸的感觉，好像有什么东西搞砸了 NFS。您可能默认使用 nfsv4，并且它可能正在尝试执行 AUTH_SYS 以外的操作。

这将是一个有趣的 PMR。