Credentials mapping allows Rational® ClearCase® to
authenticate users in mixed networks.
When a process running on one operating system type (Windows, for example)
requests access to an object in a VOB or view hosted on a different operating
system type (Linux, for example), the process’s credentials (user and group
name) must be mapped to credentials that are valid on the host where the VOB
or view resides.
The names in the credentials are compared and, if they can be matched,
the combined
user.group credentials are evaluated
on the other operating system to determine whether the requested access is
allowed. If no matching user or group name can be found, the requested access
fails unless the object has access permissions for user
nobody or group
nobody.
Note: If a mixed-case or uppercase Windows® user or group name fails a case-sensitive
comparison on Linux® or the UNIX® system, the name is converted to lowercase
and the comparison is made again.
Credentials mapping is handled by each client process with the help of
a credmap_server process that runs on each Rational ClearCase server
host.