20.4 Fixing Protection Problems

The following sections describe how to fix the protection problems described in Causes of Protection Problems.

To fix most protection problems:

1. Log on as a member of the Administrators or Backup Operators group.

2. If the groups.sd file exists in the storage directory root, run this command:

ccase-home-dir\etc\utils\lsacl -f stg-pname\groups.sd

Note the supplementary group list. The following is sample output:

===== stg-pname\groups.sd Owner: FOO\bob (User) (non-defaulted) Group: FOO\usersnt (Group) (non-defaulted) ACL (revision 2): 0: allowed SID: FOO\user (Group) rights (00000000) 1: allowed SID: FOO\tester (Group) rights (00000000) ===== stg-pname\groups.sd Owner: FOO\bob (User) (non-defaulted) Group: FOO\usersnt (Group) (non-defaulted) ACL (revision 2): Empty ACL: all access denied

(Owner) (Primary group) (Supplementary group) (Supplementary group) (Owner) (Primary group) (No supplementary group)




3. Issue the following command:

ccase-home-dir\etc\utils\fix_prot -r -root -chown owner -chgrp group stg-pname

fix_prot -root removes the supplementary group list.

If you are fixing view storage, you are finished. There should be no supplementary groups for the view storage directory.

4. If you are fixing VOB storage and your VOB had the supplementary group list, run this command:

ccase-home-dir\bin\cleartool protectvob -add_group group-name[,...] vob-stg-pname

5. Remove the cleartext containers. To do so, log on as the VOB owner and run this command:

ccase-home-dir\bin\scrubber -e -k cltxt vob-stg-pname

This step is necessary because cleartool checkvob cannot fix the cleartext containers.

6. Fix the storage pool's protections. Log on as the VOB owner and run this command:

ccase-home-dir\bin\cleartool checkvob -force -fix -protections -pool vob-stg-pname