nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Fix (or manage) redirects in Web Adaptor

BrianWilson

I have a Web Adaptor behind an nginx proxy. When I am outside here on the Big Bad Internet, I want it behind the proxy. My proxy apparently does the right thing, because when I hit https://bellman.wildsong.biz/arcgis/home it sends the request along to my hidden https://web-adaptor.arcgis.net/arcgis/home and I get the correct front door of ArcGIS Enterprise.

Then when I click through to log in, it redirects to https://web-adaptor.arcgis.net/arcgis/home/signin.html and thus it fails. How do I keep Web Adaptor from rewriting the URL to one that is unreachable? Is there a place to configure it to send back redirects that work?

I am thinking the response comes directly back from Web Adaptor and it knows nothing of the proxy, so it's doing what it feels is the right thing. Maybe I have to teach nginx to tell W.A. something in its headers?

Thanks -- Brian

Najděte více příspěvků označených jako

Accepted answers

RandallWilliams

You'll want to set the web context URL as per this doc:

http://server.arcgis.com/en/portal/latest/administer/linux/using-a-reverse-proxy-server-with-portal-for-arcgis.htm

All comments

HaraldLund

Hi, I have a customer that uses nginx as a proxy server in DMZ, and acessing upstream IIS server in the internal network running webadaptor for ArcGIS Portal. When we use curl with following call:

curl -k https://<ip>/agsportal

it returns

<html><head><title>Object moved</title></head><body>
<h2>Object moved to <a href="https://community.esri.com/agsportal/home">here</a>.</h2>
</body></html>

adding -L

curl -k -L https://<ip>/agsportal

works, Then we are prompt for login

So using the external URL (DNS) https://www.acme.com/agsportal end up with 502 Bad gateway.
Is this because of the Object Moved to?

Should

location /agsportal/ {
       proxy_pass https://<ip>/agsportal/;
       proxy_set_header X-Forwarded-Host $host:$server_port;
       proxy_set_header X-Forwarded-Server $host;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

Should I add handling redirect from the webadaptor server?

<SPAN>location&nbsp;</SPAN><SPAN>/agsportal/</SPAN><SPAN>&nbsp;{</SPAN>
<SPAN style="border: 0px; font-weight: inherit; font-size: 15px;">&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; proxy_pass<SPAN>&nbsp;</SPAN></SPAN><A href="https://community.esri.com/external-link.jspa?url=https%3A%2F%2Flaysan.wildsong.biz%2Farcgis%2F%3B" style="color: #287433; border: 0px; font-weight: inherit; text-decoration: none; font-size: 15px; padding: 0px calc(12px + 0.35ex) 0px 0px;" target="_blank">https://<ip>/agsportal/;</A>
<SPAN>&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; proxy_set_header X-Forwarded-Host $host:$server_port;</SPAN>
<SPAN>&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; proxy_set_header X-Forwarded-Server $host;</SPAN>
<SPAN>&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;</SPAN>  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_intercept_errors on;        error_page 301 302 307 = @handle_redirects;     }      location @handle_redirects {         set $saved_redirect_location '$upstream_http_location';         proxy_pass $saved_redirect_location;     }

BrianWilson

THANKS I knew there was a doc I was not finding. It seems to work now. I set nginx as a reverse proxy with a few additional lines as suggested in the nginx documentation. The config added to nginx now looks like this:

   location /arcgis/ {
       proxy_pass https://laysan.wildsong.biz/arcgis/;
       proxy_set_header X-Forwarded-Host $host:$server_port;
       proxy_set_header X-Forwarded-Server $host;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

See https://www.nginx.com/resources/wiki/start/topics/examples/likeapache/

Then I set properties on Portal to look like this:

{"WebContextURL":"https://bellman.wildsong.biz/arcgis"}

It's no longer sending me off to the internal address. On the first load it gave an error which I have seen a couple times before where the contents of the screen where the login/password form comes up instead contains and error message about a redirect uri. I reloaded the page and it has worked since.

RandallWilliams

You'll want to set the web context URL as per this doc:

http://server.arcgis.com/en/portal/latest/administer/linux/using-a-reverse-proxy-server-with-portal-for-arcgis.htm

Připojte se k diskusi

Přihlášení členové mohou přispívat, sledovat aktualizace a další. Jste tu noví? Zaregistrujte si bezplatný účet.

Rychlé odkazy

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.