How to check if SSA is active?

[fandersen]

Hi together,

I want to check that the customers configuration of WinCC OA 3.17 is not allowing client-side authentication.

In "SSA-111512: Client-side Authentication in SIMATIC WinCC OA" it states that WinCC OA 3.17 is allowing client-side authentication in a non-standard configuration. https://cert-portal.siemens.com/product ... 11512.html

However, the WinCC OA 3.17 manual states that client-side authentication is allowed by default:

[general]
serverSideAuthentication = 0 (default)

How can I determine that SSA is active?

Can I e.g. somehow check the current state of the "serverSideAuthentication" config at runtime?


BR/Florian

[kilianvp]

You can use

Code: Select all

 (0 == paCfgReadValueDflt(getPath(CONFIG_REL_PATH) + "config", "webClient", "clientSideAuth", 1));

its from scripts/libs/classes/auth/OaAuthMethod.ctl isServerSideAuthEnabled()

[fandersen]

Hi killian,

thanks for your answer but I meant the regular UI.

Sure, I could just check the config file if a certain option is present.

To the normal user, the authentication mechanism is transparent.

But how could I check at runtime that the SSA is actually active?

Is there any evidence that the option is active or deactivated? Maybe a log entry, global variable etc.?

BR
Florian

[gschijndel]

The following DPEs are written:
_Ui_<X>.SessionToken
_System.Auth.SessionTokenInterface

I guess it could be used to determine if SSA is active.

[fandersen]

Hi gschnijndel,

yeah, as a quick check this might be useful.