Windchill OIDC

[jbailey]

Is anyone using /  testing OIDC on Windchill 13.0.2.x yet? Followed the instructions, but Apache fails to load auth_openidc_module.

Kind of stumped here, when manually running httpd.exe, I get: Cannot load modules/mod_auth_openidc.so into server: The specified module could not be found.

Server root is proper, permissions look good, and the license file for auth_openidc_module is in the proper location. (only CS reference on PTC for OIDC/Windchill)

Jim

[Catalina]

Hi @jbailey 

Thank you for your question! 

I’d like to recommend to bring more details and context to your initial inquiry. 

Please consider adding screenshot(s) to better understand what you are trying to do in your process. 

Please refer to this guideline to make your questions more likely to receive a quick and useful answer. 

This will increase your chances to receive meaningful help from other Community members. 

Thank you for your participation and please let me know if you need further assistance! 

Best regards,

[MichaelStertz]

Hi @jbailey ,

the error message is very clear about missing the mod_auth_openidc module.
Which operating system are you using?

Which installation for the mod_auth_openidc module did you use?

Did you copy the mod_auth_openidc module into the modules subdirectory of the PTC supplied Apache?

Michael

[jbailey]

Oh the message is clear, however everything is where it should be. In Windchill 13.0.2.0 mod_auth_openidc is provided by PTC and in the modules folder, with the commercial license in the conf folder. Everything is being setup/deployed as described in the PTC support center for 13.0.2

This is a Windows implementation.

[MichaelStertz]

Sorry, I was not aware of the PTC provided OIDC support in Windchill 13.0.2 as we are still on 12.
I did all the OIDC installations manually and on Linux.

Anyhow, there has to be a reason why the module cannot be loaded. As far as the PTC documentation shows on the Linux platform the module itself is loaded indirect via the LD_LIBRARY_PATH environment variable and not the direct path to the file. So maybe this helps for further investigations.

[jbailey]

Yeah, I was going to maybe poke down that path today. Support from PTC has been limited "are you sure the file is there"  "Please see the case notes where I said as much."

Not much on OIDC on the support site, and less out there for Windows :-).  I almost want to copy the OIDC module in a vanilla Apache and see if it works.

[MichaelStertz]

Another hint for you - I have found the following lines in the internet:

The error is very misleading, since the file is obviously in the folder. The real problem was a missing dll file from openssl (libeay32.dll). The dependencywalker tool really helped me out here.

I am not sure whether this is the exact problem here, but digging around showed some troubles with the dependencies in Windows.

The three dll-files needed directly from the module (cjose.dll, hires.dll and janson.dll) are present in the bin directory, but the openssl dependencies might be a problem. Unfortunately the dependencywalker tool seems not fully functional on Windows 11.

[MichaelStertz]

I have tried on a 2016 Server and a Windows 11 workstation with the result that zlib1.dll is still missing. The other dependencies are resolved by putting the Apache bin-directory in your path.

[Catalina]

Hi @jbailey,

I wanted to see if you got the help you needed.

If so, please mark the appropriate reply as the Accepted Solution or please feel free to detail in a reply what has helped you and mark it as the Accepted Solution. It will help other members who may have the same question.
Please note that industry experts also review the replies and may eventually accept one of them as solution on your behalf.

Of course, if you have more to share on your issue, please pursue the conversation.

Thanks,