wt.load.LoadFromFile authencation failure

[gchampoux]

When executing TPI 147439, I am getting this:

Nested exception is: wt.util.WTRemoteException: Unable to invoke remote method
Nested exception is: wt.method.AuthenticationException

I had used LoadFromFile many times during my initial configuration of Windchill Intralink 9.1, and never had this problem.
However, that was before I enabled SSL/https, which I suspect is the problem here.

See https://www.ptc.com/appserver/cs/view/solution.jsp?n=147439
Example: windchill wt.load.LoadFromFile -u wcadmin -p wcadmin -d %WT_HOME%\loadFiles\uwgmcommon\preference.uwgm.xml

Any advice?

Gerry

[achukwuka]

Are you able to authenticate using command line utility with the userid/password you are using to run the loader? Try wt.auth.Authentication, then supply the userid/password you are using for the loader. I know for SSL there is a way to disable "forced authentication" when using command line utilities.

Thanks

Alexius C. Chukwuka
IT Analyst, Global SAP Basis - TCM
Deere & Company World Headquarters
400 19th St, Moline, IL 61265

[ddemay]

Likely apache is not set to listen on 0.0.0.0:80



Seen this locking to a specific address allowing Windchill to run, but
causing command line utilities even without SSL to fail.

[mkraegeloh]

I may be wrong, but I suspect you have to run the java command with a keystore (in which you imported the server's
certificate) to allow access to the https url (wt.properties must be available *without* requiring authentication)

I haven't used it for a while, but whe I did run against a https codebase I used
java -Djavax.net.ssl.trustStore=/path/to/keystore -Djava.protocol.handler.pkgs=HTTPClient ...
adding -Djavax.net.debug=ssl may also help.

cheers, martin

[ddemay]

Alexius pointed to me in a direct email I said in apache's httpd.conf Listen
0.0.0.0:80 (http) instead of Listen 0.0.0.0:443 (https), but the exact
message below you cited (word for word other than host name) I got from the
load file command using http not https. Don't honestly see this as aSSL
issue perse, other then it altered the configuration. I had this problem
for a Windchill system just 3 weeks ago, (wasted a day on it), I configured
in VMWare Server 2.x/OS in VM was XP, but VMWare was on Windows 7.
Certificates might be an issue, but I would definitely take a look at what
IP address is specified in your httpd.conf file for Apache.



In your SSL configuration, did you keep the Apache server installed by PTC,
use your own, or use a second Apache on your DMZ as a reverse proxy to proxy
back to the PTC provided Apache? Useful information to know for
troubleshooting. Tools like Fiddler might also help in addition to running
the command line wt.auth.Authentication suggested by Alexius.



Also, make sure as Martin pointed out indirectly, check that the Apache is
not requiring authentication for wt.properties in the <appname>-Auth.conf
file configured by PTC and tweaked via the solution installer and related
command line scripts. You should be able to fire up a (brand new) browser,
enter https:// <">https://%3chost%3e/%3capp%3e/wt.properties>
<host>/<app>/wt.properties and not have system request authentication in
order to see the contents of the file.





Let us know what you find out.



Dave

[gchampoux]

Thanks to everyone that replied.

The solution was that I needed to use keytool to install my SSL certificate (.crt file) on my master, as was applied to the replicas.
It never ocurred to me that this would be required.

Gerry

In Reply to Gerry Champoux:

When executing TPI 147439, I am getting this:

Nested exception is: wt.util.WTRemoteException: Unable to invoke remote method
Nested exception is: wt.method.AuthenticationException

I had used LoadFromFile many times during my initial configuration of Windchill Intralink 9.1, and never had this problem.
However, that was before I enabled SSL/https, which I suspect is the problem here.

See https://www.ptc.com/appserver/cs/view/solution.jsp?n=147439
Example: windchill wt.load.LoadFromFile -u wcadmin -p wcadmin -d %WT_HOME%\loadFiles\uwgmcommon\preference.uwgm.xml

Any advice?

[ddemay]

Glad you got it working. My problem had me scratching my head for well over
a day. Setting up a new copy of Windchill 9.1 for practice inside VMWare
Server 2 on Windows 7. Lots of network adapter driver problems led me down
many a path to troubleshoot. Was very irritated by the similar error
message. In your case, without certificate, it couldn't open connection.
Even if you are connecting from same physical machine, the SSL config might
treat it as remote, so does make sense needing crt file there too. In my
case, it couldn't resolve host/ip address I used. Good to know for when we
move forward with SSL on our system as we utilize remote mastering and
replicas.