Well, it's an intranet on a private lan, and the logged in users have already authenticated with their database password (which by the magic of LDAP is the same as their unix password).

The main problem is that there is no way (I can find) to coerce Rational ClearCase to log an action as any user other than the euid.

I'm not exposing any security problems I can see, because the username and password they supplied on login actually allows them to login to th unix box in question via ssh if they really wanted to.