nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

AdminCacheKey

TedCronin

How is this value calculated? How do we get a new one? Can this go bad where it prevents us from logging in to clear cache?

Find more posts tagged with

Accepted answers

All comments

RickWheeler

There is a way to get around this.

On the ArcGIS Server machine create a local user, add the user to the agsadmin group.

Then login to the rest admin as machine\user.

TedCronin

The error: "Unable to determine if the user is an admin" can happen when logging into REST admin using a domain user when a. the server is off the network or b. when arcgis server is installed on a subdomain and ArcGIS Server SOM process is run as a local user.

A workaround is to login to REST admin as a local user that belongs to the agsadmin group instead of a domain user.

We are addressing this in 10.0 SP1 by changing the way the validation for a user beloging to the agsadmin group is made. (NIM059442: http://resources.arcgis.com/content/nimbus-bug?bugID=TklNMDU5NDQy).

Thanks to everyone (Ted, Trevor, Jacob, Steve and João) who provided feedback on this.

Thank you Ravi for listening. This is fantastic news. Sp1 is looking to be a good sp, hopefully nothing else breaks 😉

RaviNarayanan

The error: "Unable to determine if the user is an admin" can happen when logging into REST admin using a domain user when a. the server is off the network or b. when arcgis server is installed on a subdomain and ArcGIS Server SOM process is run as a local user.

A workaround is to login to REST admin as a local user that belongs to the agsadmin group instead of a domain user.

We are addressing this in 10.0 SP1 by changing the way the validation for a user beloging to the agsadmin group is made. (NIM059442: http://resources.arcgis.com/content/nimbus-bug?bugID=TklNMDU5NDQy).

Thanks to everyone (Ted, Trevor, Jacob, Steve and João) who provided feedback on this.

JoãoMendes

Having the same problem... I get this error on the log:
ERROR:Unable to determine if the user is an admin

RaviNarayanan

Steve,

Are you able to log into the ArcGIS Manager usign the same account?

1. fully type the url to the login page: http://servername/arcgis/rest/admin/login

2. make sure the local user is specified as:

MACHINENAME\localusername
or
localusername

3. password is case sensitive. So verify that it is entered correctly.

StephenLead

Trevor,

Can you check if the ArcGISWebServices user account (or whichever webservices account name that was specified durign the postinstall) is part of the agsadmin group? If not try adding this user to agsadmin and retry login using the domain account?

Ravi

Ravi,

I'm having the same problem using ArcGIS Server 10 on XP SP3. My domain windows login is part of agsadmin but this doesn't allow me to log into the Admin page.

Using a local/ArcGISWebServices doesn't work either, and this user is part of agsadmin.

No error message is shown in either case.

Thanks for any advice,
Steve

TedCronin

I reinstalled the system (keeping .NET 4 installed) just to see if it would help...It did not. I cannot login with my user that is in agsadmin but I can access the rest admin with the arcgiswebservices account....

I tried that a couple of times, I was not successful as well. This is my exact problem. My solution was to go into the rest config and schedule my cache to get cleared automatically because I still cannot log in.

JacobBartruff

I reinstalled the system (keeping .NET 4 installed) just to see if it would help...It did not. I cannot login with my user that is in agsadmin but I can access the rest admin with the arcgiswebservices account....

TedCronin

Yeah, another one.

I have .net 4 on my box as well.

JacobBartruff

I have the same issue also. I cannot login to /ArcGIS/rest/admin/login

I used to be able to. I tried all the options listed above and nothing helped. I am not getting any failure messages in the Event Viewer either. The only thing I can think of that is different from when I first install ArcGIS Server 10 and now, is that I install the .NET Framework 4. Would that cause this issue?

RaviNarayanan

Trevor,

Another simple scenario to check is to make sure the case of the password entered is correct.

Additionally, you can try enabling security access logging on the SOM machine to see if there is any error message logged in the windows event log?

1. Goto start-> control panel -> administrative tools -> local security policy
2. click on local policies - audit policy
3. Right click on "audit object access", select properties.
4. check the box to audit for "failure" attempts
5. Right click on "audit privilege use", select properties.
6. check the box to audit for "failure" attempts
7. click OK and save the settings
8. Attempt to login to REST admin using the domain user. If the login fails, there could be "audit failure" events logged in the windows event view security log.

TrevorWolfe

Ravi,

I set the WebServices user as the identity user for the ArcGIS Services application pool and used DOMAIN\username to log in and I still get nothing. Anymore ideas?

Thanks,

RaviNarayanan

Can you also check if this WebServices user is set as the identity user of the ArcGIS Services application pool?

And something very basic which you might be already doing, make sure the username is specified as DOMAIN\username when logging in.

TrevorWolfe

Ravi,

It's already there. Any other ideas?

RaviNarayanan

Trevor,

Can you check if the ArcGISWebServices user account (or whichever webservices account name that was specified durign the postinstall) is part of the agsadmin group? If not try adding this user to agsadmin and retry login using the domain account?

Ravi

TrevorWolfe

Ravi,

The local Admin account worked. However the server was never offline and how would I go about fixing this so a domain account will work?

Thanks,

RaviNarayanan

Trevor,

In your case was the Server machine on or off the network when you attempted to login to the REST admin? If a domain user was used to login and if the server was off the network, then behavior/error you see is expected. In that case try logging in using a local user that is an agsadmin.

TedCronin

Yeah, someone else has this issue. Sorry:(. I have been working with Support for about a month and nothing so far has been resolved. I have taken a bit of a holiday, but still working with them to determine this issue.

TrevorWolfe

I'm experiencing the same symptoms as Ted. Everything else works except for logging in to the admin page. Looking in the restlog I keep getting "ERROR:Unable to determine if the user is an admin". The account I'm using is a member of the agsadmin group and everything is running on port 80. Any help would very much appreciated.

TedCronin

Its not, but I am willing to try anything at this point. I have been working with support and have tried just about everything over the last couple of weeks. I will try and do this when I get back from the UC.

RaviNarayanan

Ted, Is the REST admin using an https endpoint? If so, can you try fully typing the url to the login page as
https://servername/arcgis/rest/admin/login and see if the login works?

TedCronin

ok, I added those and it did not work, and now I am seeing the same issue with my production box regarding no access to the rest/admin. I will generate token for my production and again for my test to see if that works perhaps tomorrow will be a new day 🙂

I did not have this many issues in any of the beta releases btw, out side of feature access:)

This is my last post to Support for new Production Machine:

For my new server. I am running 2003 Server R2. I have only installed GIS Services. After install, I ran the web services post install. I logged out and back in. This is a brand new machine for 10, meaning I just uninstalled 931 to install 10. I can login with ArcWebServices. I have attempted to login from my remote machine as well as the server itself. The server itself has IE 8 and FF 3.6, and both have failed with rest/admin.

Any Ideas.

Also, So, I should be seeing a login after I type the token, and it is your understanding that this would theoretically clear the cache, or I should not see a login and it should just pass me through???

I have updated the Scheduled as part of the rest.config for this site as well, since that works, but this needs to be resolved.

RaviNarayanan

For the token do, the training . . get added to the text string? .

yes, the whole string including the dots in the end .. is the token.

TedCronin

I can use my login to generate a token, but the clear cache will not work because it wants me to login again. For the token do, the training . . get added to the text string?

Also, note, I can login as the WebServices user, and I already changed in the config file the manual cache to scheduled within the xml last week, and logging in today as the WS user, I can verify that it is truly scheduled. It does bother me however, that I cannot login to this machine as me for admin. Server Manager works as expected, generate Token works as expected.

RaviNarayanan

Ted,

Can you check if you can use the same username/password to generate an admin token
http://<server>/arcgis/rest/admin/generateToken

and use the token generated to clear the cache?
http://<server>/arcgis/rest/admin/cache/clear?token=<generatedtoken>

Make sure that if it is domain user the username is specified as:
DOMAINNAME\username

or if it is a local user, then the username is specified as:
MACHINENAME\username or username

Ravi

TedCronin

Machine name did not work. I have logged this with Support to resolve.

TedCronin

I will try that. I redid the post install 5 times to see if that would clear everything up, deleteing users, post install, again, again, and again.

I have done:

tcronin
\tcronin
ASRCLKREC\tcronin
but
not Machine name\tcronin

I will have to VPN from home to test this out.

On another note, I am stoked I got the feature access going, finally.

RaviNarayanan

Is this a local user or a domain user that is used for login? If it is a local user, can you try specifying the user name as MACHINENAME\username? There was bug in pre-release version which allowed login only when the username was specified as MACHINENAME\username for local users.

TedCronin

I have post out where I cannot manually clear cache in the Server forums. This is Server 10 final.

http://forums.arcgis.com/threads/6984-Issues-with-Rest-Admin

RaviNarayanan

Ted,

The value for admincachekey is set when arcgisserver is installed and it is unique to each installation in ArcGIS Server for .NET. This value is used when generating an admin token. And it is used to validate the token when a token is used to programatically clear the REST cache. If this value changes any tokens that were generated prior to the change in value of admincachekey will be invalid. it does not affect manual login to the REST admin.

more info on admintoken and clearing REST cache using admin token
http://help.arcgis.com/EN/arcgisserver/10.0/apis/rest/generateadmintoken.html
http://help.arcgis.com/EN/arcgisserver/10.0/apis/rest/clearcache.html

Ravi

Join the Conversation

Signed in members can post, follow updates, and more. New here? Register a free account.

Quick Links

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.