Problem authenticating through RWP for use with CCWeb and CCRC

This technote identifies a list of known problems related to the IBM® Rational® Web Platform (RWP) server hosted on UNIX® or Linux® that impacts users who authenticate using the ClearCase® Web (CCWeb) or ClearCase Remote Client (CCRC) interface.

Cause

Attempts to log into Rational ClearCase Remote Client (CCRC) or ClearCase Web (CCWeb) using the correct username and password where the Rational Web Platform (RWP) server is hosted on UNIX or Linux may fail. Note: Attempts to log in to UNIX/Linux directly using the same login information (through a console, telnet or ssh) results in a successful authentication process. The cause of this issue may relate to a specific problem with any user account that has two pound signs (##) in the comment field of /etc/passwd. Note: If there is only one pound sign, the problem does not occur. Cause 2 Another reason users with a valid UNIX account and password cannot login to CCWeb or CCRC is that their password is longer that 8 characters. Cause 3 The following error may occur logging into CCWeb or CCRC: An error occurred while processing this request: Unable to login: username or password is incorrect The ccweb file found in /usr/atria/web/bin or/opt/rational/clearcase/web/bin may have incorrect permissions set. Note: Regarding this particular problem, here is a common explanation on why the ccweb executable loses the sticky bit.  Anytime a new patch is applied to a release area on UNIX or Linux, site_prep MUST be run again, regardless of whether any changes have been made to the configuration.  This is explained in the README file for each patch. Below is an excerpt: The apply_patch utility validates the extracted patch contents, then overwrites files in the release area with newer ones included in the patch. 3.3: Run site_prep to synchronize permissions in the release area, using a series of commands such as these. The value you use for the -setuid option may be different from the one shown here. Check with your ClearCase administrator if you're uncertain.     # cd ../../../../install            - or -     # cd /usr/clearcase_rls/2003.06.00/sun5/clearcase/install # ./site_prep -chmod ; ./site_prep -setuid

Solution

Change the comment line in the user's password entry (the typical operating system command for this is chfn) to remove all the pound signs to a single entry and attempt to login to CCWeb. Note: Restarting the RWP server should not be necessary; however, if the problem occurs after making the change to the /etc/passwd file, restart the RWP server and attempt to log in to CCWeb once more. Solution 2 Change the password length in the /etc/passwd file to 8 characters or less and attempt the login again. Solution 3 The ccweb file should have the following permissions: -r-sr-xr-x 1 root other 579916 Jun 9 20:23 /usr/atria/web/bin/ccweb If the permissions are not -r-sr-xr-x, then run chmod 4555 ccweb If the file is not owned by root the run chown root ccweb Attempt to log in again.