Home/ Questions/Q 270887
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-12T00:04:24+00:00

My question is pretty much summed up in the subject.The context is a problem

  • 0

My question is pretty much summed up in the subject.The context is a problem we are facing with the account getting locked our fairly often.
My setup uses this as the service acccount for clearcase application.

There is another account by the same name (but in a different domain – a trusted domain) that runs a monitoring sofftware under this account. For eg., my setup uses the accoundt DOMAINA/clearcase_albd, while this other trusted domain runs a batch file under TRUSTEDDOMAIN/clearcase_albd.

We are suspecting this account to be causing the locking out of our service account (but at this point have not yet figured out why!)
Have pored over event logs endlessly, to no avail and have now decided to start fresh from ground zero.Am following a thread of thought and the first thing I need confirmation on is this:

Should I be seeing DOMAINA/clearcase_albd account when i run clearlicense at all?
If not, then why would another account by SAME name but from a different domain lock out my domain account?

Would greatly appreciate any help in this regard,

Thanks in advance

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    According to the IBM ClearCase Manual, the Rational® ClearCase® albd_server program runs with the identity of a special user account known as the Rational ClearCase server process user.
    This user is a member of the Rational ClearCase administrators group, which grants privileged user status.

    That account should not directly uses a license, as it is related to the albd (Atria Location Broker) process which will execute operation on behalf other users.

    When a client program needs access to a service (a VOB or view server, for example) on a Rational ClearCase server host, it uses a remote procedure call (RPC) to send a request to the albd_server process on that host.
    The albd_server starts the requested service if it is not already started, and provides the service’s port number to the client. Thereafter, the client communicates directly with the service.

    IBM does suggest two albd accounts, for central VOB/view servers and end-user workstations. This is primarily done to prevent albd account issues (account lockouts, etc) on the albd account from impacting the VOB servers themselves.
    BUT: those accounts should be on the same domain.

    Note: by typing

    creds clearcase_albd

    You will see its SID for the current Windows domain.

    You will then be able to check if that SID pops up in the clearlicense command output.

    • 0