Skip to main content
T
ThreeBlindMice13-Aquamarine
13-Aquamarine
November 20, 2024
Solved

Switch wcadmin role to user account with Windchill Shell

  • November 20, 2024
  • 1 reply
  • 1303 views

Version: Windchill 12.1

 

Use Case: We recently configured our Windchill to use SSO on our development server. One thing I overlooked was giving my user ID admin privileges, because we were so used to just logging in as the wcadmin in the browser to do our admin stuff. Now we don't have a way to login as wcadmin, I am looking for a way to give my user ID admin privileges, possibly through the windchill shell?


Description:

I tried just disabling Shibboleth, our SAML service provider, but the configuration runs too deep in our windchill install to get the web page up and running.

Best answer by ThreeBlindMice

Appreciate the video Fede, but I still had errors when performing the windchill shell commands. 

 

I found Article - CS349937 - How to enable basic authentication for rest endpoints while Windchill is configured with SSO depending on the client which is accessing Windchill which ended up being an easy way to disable SSO for a specific browser, logging in as wcadmin, and adding myself to the admin list.

1 reply

Fadel
Fadel23-Emerald I
23-Emerald I
November 20, 2024

Hi , 

 

If I undestood correctly you wan to assign your user ID to the Site Administrators groups via Shell ? 

If this is the case we can load XML file to assign a user to a group ,the hook is that commands needs a Site Admin credentials.

windchill wt.load.LoadFromFile -d <path to xml> -u <username> -p <password> 

 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE NmLoader SYSTEM "standardX20.dtd">
<NmLoader>
 <csvUserGroup handler="wt.load.LoadUser.createUserGroup">
 <csvuser></csvuser>
 <csvgroupName>Administrators</csvgroupName>
 <csvuserName>test_user</csvuserName>
 </csvUserGroup>
</NmLoader>

 

 

Buiꓘa
T
ThreeBlindMice13-AquamarineAuthor
13-Aquamarine
November 21, 2024

Thanks for the reply Fede.  I am getting the following error in the shell when I try to load that xml:

 

The operation: "getPrincipal" failed.
Nested exception is: wt.util.WTRemoteException: Unable to invoke remote method
Nested exception is: wt.method.AuthenticationException

 

Is my user ID that I want added to the wcadmin group supposed to go where "test_user" is?

What about the csvuser variable?

 

I did find article Article - CS355355 - We want some generic users (for example wcadmin) to login to Windchill from Creo Parametric with Basic Authentication (instead of SSO)  so I will try this later today

Fadel
Fadel23-Emerald I
23-Emerald I
November 21, 2024

Hi ,

 

yes you are right it is user name , see demo video attached 

(view in My Videos)

 

The error you are having is due to SSO , the command should be changed like : 

windchill --javaargs="-Dwt.auth.trustedAuth.username=wcadmin"  wt.load.....

 

same logic as in https://www.ptc.com/en/support/article/CS393224 

 

BR,

Fadel

Buiꓘa
    Terms & ConditionsCookie settingsAccessibility statement