Jenkins UCM ClearCase 插件因权限失败
我正在使用 Jenkins 和源代码管理插件名称 UCM ClearCase。
它尝试创建视图并失败并显示错误：
[onlysourcecode] $ cleartool mkview -snapshot -stream ROLE_Test_Project_DevSG@\Vobname -tag SYSTEM_master_Test_ROLE_001_hudson view
Selected Server Storage Location "Views".
cleartool: Error: unable to set access control list for \\server\viewstor\NT+AUTHORITY\SYSTEM\view.1.vws: Access is denied.
cleartool: Error: protection on \\server\viewstor\NT+AUTHORITY\SYSTEM\view.1.vws is out-of-synch with identity.sd and groups.sd
cleartool: Error: Failed to set identity on view: Permission denied
cleartool: Error: unable to set access control list for \\server\viewstor\NT+AUTHORITY\SYSTEM\view.1.vws: Access is denied.
cleartool: Error: \\server\viewstor\NT+AUTHORITY\SYSTEM\view.1.vws: Permission denied
cleartool: Error: Unable to create view "\\server\viewstor\NT+AUTHORITY\SYSTEM\view.1.vws".
FATAL: UCM ClearCase failed. exit code=1
这基本上意味着它没有创建视图的权限。现在我的问题是：
对这里的问题到底是什么有什么想法吗？
Jenkins 内部使用的 ID 是什么。这意味着我在 DOMAIN 控制器上有一个用户 ID，我可以在其中登录计算机并运行 Jenkins。如果 Jenkins 使用它，那么为什么会出现此错误，因为我可以创建视图。
如果没有，那么它使用什么 ID，以及如何让 Jenkins 使用我的域 ID，或者可能让内部 ID 成为 ClearCase AD 组的一部分。
I am using Jenkins with the source control plugin name UCM ClearCase.
It tries to create a view and fails with the error:
[onlysourcecode] $ cleartool mkview -snapshot -stream ROLE_Test_Project_DevSG@\Vobname -tag SYSTEM_master_Test_ROLE_001_hudson view
Selected Server Storage Location "Views".
cleartool: Error: unable to set access control list for \\server\viewstor\NT+AUTHORITY\SYSTEM\view.1.vws: Access is denied.
cleartool: Error: protection on \\server\viewstor\NT+AUTHORITY\SYSTEM\view.1.vws is out-of-synch with identity.sd and groups.sd
cleartool: Error: Failed to set identity on view: Permission denied
cleartool: Error: unable to set access control list for \\server\viewstor\NT+AUTHORITY\SYSTEM\view.1.vws: Access is denied.
cleartool: Error: \\server\viewstor\NT+AUTHORITY\SYSTEM\view.1.vws: Permission denied
cleartool: Error: Unable to create view "\\server\viewstor\NT+AUTHORITY\SYSTEM\view.1.vws".
FATAL: UCM ClearCase failed. exit code=1
Which basically means it does not have permissions to create a view. Now my questions:
Any ideas on what exactly is the problem here?
What ID is Jenkins using internally. Meaning I have a user ID on the DOMAIN controller where I log in to the machine and run Jenkins. If Jenkins uses that, then why this error as I can create views.
If not, then what ID does it use and how do I get Jenkins to use my domain ID, or else maybe get the internal ID to be a part of the ClearCase AD group.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
我猜这是在 Windows 机器上作为服务运行的。因此它不作为域用户运行。
詹金斯似乎正在尝试根据系统上的clearcase配置在默认位置创建视图存储（.vws）。
也许您应该选择
UCM Clearcase中的高级...选项，并明确指定视图存储的位置。有我在 Linux 机器上运行 jenkins，其中我在附加 mkview 参数中为 .vws 文件指定了显式位置。
I guess this is run on a Windows box as a service. Thus it is not run as a domain user.
It appears that jenkins is trying to create a view storage (.vws) in the default location, based on the clearcase configuration on the system.
Perhaps you should choose the
Advanced...option inUCM Clearcaseand explicitly specify the location for your view storage. There areI run jenkins on a linux box where I have specified an explicit location for the .vws file in
Additional mkview arguments.添加到 Raghuram 的 答案，使用系统帐户（
NT+AUTHORITY）很棘手，因为即使您指定本地视图存储，：CLEARCASE_PRIMARY_GROUP与其配置文件关联CLEARCASE_PRIMATY_GROUP引用的组的一部分，这意味着它将无法访问 vob 存储需要在视图中访问的 Vob。
无论如何，至少你应该尝试 配置从属服务以域用户身份运行。
To add to Raghuram's answer, using the system account (
NT+AUTHORITY) is tricky, because even if you specify a local view storage,:CLEARCASE_PRIMARY_GROUPassociated with its profileCLEARCASE_PRIMATY_GROUPThat means it won't be able to access the vob storage of the Vob it will need to access within the view.
Anyway, at the very least you should try and configure Slave Service to Run as Domain User.