nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Nicht autorisiert - FME Web-Verbindungsfehler

AdamRepsher

Hallo nochmal @BruceHarold,

ich folge deinem Blogbeitrag Erstellen einer FME Web-Verbindung für dein Enterprise Portal und stoße auf mindestens ein Problem:

...und im Übersetzungsprotokoll finde ich Folgendes:

Anfrage zur Aktualisierung des Zugriffstokens fehlgeschlagen. HTTP-Fehler: HTTP/1.1 401 Nicht autorisiert - https://myenterpriseportal.org/portal/sharing/rest/oauth2/token

Nachdem ich meine Anmeldedaten eingegeben habe, erscheint dieses Fenster...

Ich habe meinen Login (admin) verwendet, den Login, den ich verwenden möchte (ein Ressourcenkonto, das für die Enterprise-Admin-Funktionalität genutzt wird). Ich habe versucht, Benutzernamen auf 3 verschiedene Arten einzugeben – und das obige Fenster zeigt den Benutzernamen korrekt so an, wie er im Portal zu sehen ist.

Mein Portal-Setup verwendet nur unser Active Directory zur Authentifizierung und ich habe die Single Sign-On-Erfahrung für unsere Benutzer zum Laufen gebracht. Ich erlaube keinen anonymen Benutzerzugang und lasse keine Erstellung von integrierten Konten zu. Ich weise Benutzerplätze ausschließlich über Active Directory zu.

Mein vollständiges Setup...:

ArcGIS Enterprise (Portal, Server, GeoEvent Server) v10.8.1
ArcGIS Pro v2.6.3
Data Interoperability v2.6.2
FME 2020.0.1.0 (20200407 - Build 20218 - WIN64)

Irgenwelche Ideen, wo ich mit der Fehlersuche beginnen sollte?

Danke,
--Adam

Finde mehr Beiträge mit dem Tag

Accepted answers

AdamRepsher

After spending a few days with Customer Service, we have found that there is a bug (BUG-000136812) in my specific situation. I will explain:

My Portal WebAdaptor within IIS is set up with IWA (Windows Authentication) enabled (using Active Directory for accounts and login) AND Anonymous Authentication DISABLED to utilize Single Sign-On. My customers are not prompted for login. They are authenticated with the credentials they used to log into their machine/domain on our intranet.

Workarounds:

Enabling Anonymous Authentication on the Portal WebAdaptor. This is not a solution for me as I want my customers to have the Single Sign-On experience.
Not use the Tools - FME Options - Web Connections for the Portal Connection. Alternatively:
1. Manually set up the connection in a Writer (or Reader), using Kerbos Authentication. (I have not tried this.)
2. Manually set up the connection in a Writer (or Reader), using NTLM Authentication. This has worked for me.

The BUG has already been given a status of Not in Current Production Plan since it is an, "Authentication limitation from a third party component."

All comments

LachlanWainwright

I am experiencing the same issue where IWA is enabled and anon disabled.

A potential workaround is the bypass the Web Adaptor and shoot straight to the portal server via port 7443

e.g. https://FQDN:7443/arcgis

If the portal server Fully Qualified Domain Name is myserver.domain.com, then

https://myserver.domain.com:7443/arcgis

make sure you swap out the default /portal in the fme dialog for the /arcgis

If you are running a HA portal environment then just hope the server you select is always up......

hope this helps 🙂

GISOfficer

Using NLTM authentication in the writer to create the connection (2b) worked for me. Despite being an admin and signed in via IWA I could not successfully authorise the web service method, likely due to our IIS settings or something in that space. Anyway, thanks Adam for the pointer. I am currently on FME 2022.1.1.0 build 22623 (full application, not interop) and ArcGIS Enterprise 10.8.1.

Jon Emch

Question has been moved to the ArcGIS Enterprise space.

AdamRepsher

After spending a few days with Customer Service, we have found that there is a bug (BUG-000136812) in my specific situation. I will explain:

Workarounds:

Enabling Anonymous Authentication on the Portal WebAdaptor. This is not a solution for me as I want my customers to have the Single Sign-On experience.
Not use the Tools - FME Options - Web Connections for the Portal Connection. Alternatively:
1. Manually set up the connection in a Writer (or Reader), using Kerbos Authentication. (I have not tried this.)
2. Manually set up the connection in a Writer (or Reader), using NTLM Authentication. This has worked for me.

The BUG has already been given a status of Not in Current Production Plan since it is an, "Authentication limitation from a third party component."

bharold

No that's us! If you create a support call with Esri it will be officially handled.

AdamRepsher

I am making a Spatial ETL tool in Pro with the Data Interoperability extension. Sorry for my confusion. Do I still go to their support page?

bharold

The Esri product is Data Interoperability extension which lets you make Spatial ETL tools in Pro, the FME product lives outside Pro. The support channels are separate at the customer level.

AdamRepsher

i'm using FME via Pro....

Same thing?

bharold

Adam if you're using FME the best way to get support is via Safe's support channel.

https://community.safe.com/s/support

Chat is very effective as a first step.

Nimm an der Unterhaltung teil

Angemeldete Mitglieder können Beiträge verfassen, Updates folgen und mehr. Neu hier? Registriere ein kostenloses Konto.

Schnellzugriffe

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.