Problems in Windows Authentication with Portal 10.7

Question

Hi all,

I'm having trouble configuring windows users with the portal for arcgis.

I´m using the JSON below, from documentation:

{   "type": "WINDOWS",   "properties": {     "userPassword": "xyz",     "isPasswordEncrypted": "false",     "user": "xyz\xyz",     "userFullnameAttribute": "cn",     "userEmailAttribute": "mail",     "caseSensitive": "false"   } }

All user from my AD appear in list correctly. I can setup the role and user type for them.

The connection work properly, but in portal, in the last window,  the user can´t add. A red message appear in top of portal.

the following member cannot be added: user @ DOMAIN.

Why this happens?

Thank´s

ArchitSrivastava · Answer

Sorato Marques‌,

Thanks for sharing the logs. There are several points, I think we can look at. I did some digging on the ports shown in the logs in regards to when these would be used, kindly find the doc URL below:

https://support.microsoft.com/en-in/help/179442/how-to-configure-a-firewall-for-domains-and-trusts

As asked by Jonathan Quinn‌, I think, running a check for firewall and the ports could help.

Additionally, searching ESRI docs, I found only one mention of "Connectivity issue" which actually does not have the same error message, kindly find the doc below:

Common problems and solutions—Portal for ArcGIS (10.8) | Documentation for ArcGIS Enterprise

The reason I think that the issue could be associated to this is "As mentioned in the initial post The connection work properly, but in portal, in the last window,  the user can´t add. A red message appear in top of portal. "

This makes me think that ArcGIS Enterprise Portal is able to connect to AD but that seems to be breaking (not sure of the reason). Hence, if possible you can try adding the parameter "domainControllerAddress" and "domainControllerMapping" and check if this helps

Configure the domain controller used by Portal for ArcGIS—Portal for ArcGIS (10.7 and 10.7.1) | Documentation for ArcG…

Hope it helps!

SoratoSouza_e_Silva · Answer

No, there is no firewall between the portal machine and domain controller.

JonathanQuinn · Answer

Any firewall between the portal machine and your domain controller?