Windchill System Administrator's Guide

The HTTP authentication implementation, described in more detail in the
Windchill Application Developer’s Guide, results in the following Windchill
configuration requirements:
1. Authenticated user names are Web server user names.
2. Windchill's authenticated HTTP gateway (defined by the
wt.httpgw.url.authenticated property in the Windchill wt.properties file) must
be subject to access control by the Web server, allowing only authenticated
users to access it.
3. On the Web server, the Windchill HTTP gateway URLs must be aliased to the
provided Windchill gateway servlet implementations.
Windchill's internal access controls are applied through the Windchill
Administrator, as described in this guide. The Windchill Administrator
application, in turn, associates each Windchill user ID with an authentication ID
maintained by the Web server. The procedures that follow show you how to create
user accounts and implement access controls for data residing on the file system:
Note: In the wt.properties file, the property wt.auth.toLowerCase is set to true by
default, which forces authentication IDs to become lowercase. Therefore, you
should not rely upon case to distinguish user IDs, unless you have changed the
value of this property to false.
See the Windchill Application Developer’s Guide for information about
customizing Windchill's authentication mechanism. See the Windchill Installation
and Configuration Guide for more information about specifying anonymous
access.
Troubleshooting User Authentication
Two tools included in the Windchill base product help identify user authentication
configuration problems by exercising the authentication mechanism to verify that
it is working and then reporting the user identities.
The wt.auth.Authentication class is the focal point for user authentication within
Windchill. This class includes a main method so that it can be run as a stand-alone
application. It exercises the configured login scheme and reports the resulting
authenticated user name as seen by the Windchill method server. The following is
an example of output for a failed HTTP authentication (canceled login), followed
by a successful Null authentication:
401 Authorization Required
Authorization Required
This server could not verify that you
are authorized to access the document
you requested. Either you supplied the wrong
credentials (e.g., bad password), or your
browser doesn't understand how to supply
Administering Runtime Services 1-39