Windchill System Administrator's Guide

code. The secret.text2 property is recommended and designed for use with
Windchill 7.0, while secret.text property is recommended for prior releases.
The instructions in this section specifically reference secret.text2, however, you
can use the same instructions to change the secret.text property.
Setting the secret.text2 property in the ie.properties file provides an arbitrary text
string that is used to sign outgoing requests and validate incoming requests. When
an out-of-process Windchill request is made to execute an adapter webject, the
adapter name specified in the INSTANCE parameter must identify an LDAP
entry that has the secret.text2 property set. Using an LDAP entry created for the
adapter that does not have the property set to the same value as is set in the
ie.property file will not give the request access to the adapter.
The secret.text2 value set as part of the installation process is unique for each
installation. If you want multiple adapters and Windchill installations to work
together, you need to set the secret.text2 property to the same value for all
adapters and installations.
Use the following procedure to change the value of the secret.text2 property in the
ie.properties file:
1. Determine the value to assign the secret.text2 property and the location
(fully-qualified) of the property file.
PTC recommends using a secret.text value between 6 and 18 characters.
The ie.property file is located in the /codebase/WEB-INF
directory.
2. Use the xconfmanager to change the secret.text2 property to a value of your
choice and to update the site.xconf file.
From a windchill shell, execute the following command:
xconfmanager -s secret.text2=
-t /codebase/WEB-INF/ie.properties -p
Where is an arbitrary text string and is the
location where Windchill is installed.
Any change you make to the secret.text2 property value must also be made to the
adapter LDAP entries for all out-of-process adapters that send requests to
Windchill. Use the Info*Engine Property Administrator to modify adapter LDAP
entries.
Administering the Authentication Process
The Windchill architecture is designed to rely on Web server authentication to
provide authenticated user IDs. Therefore, access controls maintained on the Web
server determine access privileges to an authenticated Windchill URL or SysAdm
URL based on a user ID and password obtained by the Web browser.
1-38 Windchill System Administrator’s Guide