SSO が有効な Windchill で、Windchill コマンドが HTTP 応答コード 403 で失敗する

• Windchill はプロキシ Web サーバーで構成されており、SSO を有効にすると Windchill コマンドが失敗する

• 実行中に画面に次のエラーが表示される windchill --javaargs="-Dwt.auth.trustedAuth.username=<username>" wt.auth.Authenticationで診断:

DEBUG wt.httpgw.HTTPLogin - Opening URL connection to https://<hostname>/Windchill/trustedAuth/servlet/WindchillAuthGW/wt.httpgw.HTTPAuthentication/login?wt.effectiveUid=<username>
DEBUG wt.httpgw.HTTPLogin - Unexpected content type: text/html;charset=UTF-8
DEBUG wt.httpgw.HTTPLogin - Failed to get input stream from connection
  java.io.IOException: Server returned HTTP response code: 403 for URL: https://<hostname>/Windchill/trustedAuth/servlet/WindchillAuthGW/wt.httpgw.HTTPAuthentication/login?wt.effectiveUid=<username>
        at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?]
        at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?]
        at jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?]
        at java.lang.reflect.Constructor.newInstance(Constructor.java:490) ~[?:?]
        at sun.net.www.protocol.http.HttpURLConnection$10.run(HttpURLConnection.java:1974) ~[?:?]
        at sun.net.www.protocol.http.HttpURLConnection$10.run(HttpURLConnection.java:1969) ~[?:?]
        at java.security.AccessController.doPrivileged(Native Method) ~[?:?]
        at sun.net.www.protocol.http.HttpURLConnection.getChainedException(HttpURLConnection.java:1968) ~[?:?]
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1536) ~[?:?]
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1520) ~[?:?]
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:250) ~[?:?]
        at wt.httpgw.HTTPLogin.init(HTTPLogin.java:334) [codebase/:?]
        at wt.method.RemoteMethodServer.initAuthenticator(RemoteMethodServer.java:1064) [codebase/:?]
        at wt.method.RemoteMethodServer.handleAuthenticationException(RemoteMethodServer.java:1043) [codebase/:?]
        at wt.method.RemoteMethodServer.invoke(RemoteMethodServer.java:907) [codebase/:?]
        at wt.auth.Authentication.getUserName(Authentication.java:68) [codebase/:?]
        at wt.auth.Authentication.main(Authentication.java:235) [codebase/:?]
  Caused by: java.io.IOException: Server returned HTTP response code: 403 for URL: https://<hostname>/Windchill/trustedAuth/servlet/WindchillAuthGW/wt.httpgw.HTTPAuthentication/login?wt.effectiveUid=<username>
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1924) ~[?:?]
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1520) ~[?:?]
        at sun.net.www.protocol.http.HttpURLConnection.getHeaderField(HttpURLConnection.java:3114) ~[?:?]
        at java.net.URLConnection.getContentType(URLConnection.java:519) ~[?:?]
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getContentType(HttpsURLConnectionImpl.java:402) ~[?:?]
        at wt.httpgw.HTTPLogin.init(HTTPLogin.java:330) ~[codebase/:?]
        ... 5 more
DEBUG wt.httpgw.HTTPLogin - HTTP login failed: java.io.IOException: https://<hostname>/Windchill/trustedAuth/servlet/WindchillAuthGW/wt.httpgw.HTTPAuthentication/login?wt.effectiveUid=<username>: HTTP response 403, 403
java.io.IOException: https://<hostname>/Windchill/trustedAuth/servlet/WindchillAuthGW/wt.httpgw.HTTPAuthentication/login?wt.effectiveUid=<username>: HTTP response 403, 403
        at wt.httpgw.HTTPLogin.init(HTTPLogin.java:349) [codebase/:?]
        at wt.method.RemoteMethodServer.initAuthenticator(RemoteMethodServer.java:1064) [codebase/:?]
        at wt.method.RemoteMethodServer.handleAuthenticationException(RemoteMethodServer.java:1043) [codebase/:?]
        at wt.method.RemoteMethodServer.invoke(RemoteMethodServer.java:907) [codebase/:?]
        at wt.auth.Authentication.getUserName(Authentication.java:68) [codebase/:?]
        at wt.auth.Authentication.main(Authentication.java:235) [codebase/:?]
wt.util.WTRemoteException: Unable to invoke remote method; nested exception is:
        wt.method.AuthenticationException
        at wt.method.RemoteMethodServer.invoke(RemoteMethodServer.java:918)
        at wt.auth.Authentication.getUserName(Authentication.java:68)
        at wt.auth.Authentication.main(Authentication.java:235)

• methodserver.log に次のエラー メッセージが表示されます。

ERROR [ajp-nio-127.0.0.1-8010-exec-1] wt.httpgw.filter.TrustedAuthFilter  - TrustedAuthFilter: Attempt to set effective user to ' <username>' from untrusted host '<ip address>'