Question on ArcGIS Server Security

Question

Hello,

I have enabled Windows domain users in my manager settings, but when I did this my localhost:6080/arcgis/rest was returning a 403 error, but the localhost:6080/arcgis/admin was functioning properly.

I have a web adaptor on port 8080, and the /arcgis/admin and arcgis/rest locations work fine with Windows authentication enabled. As soon as I switched back to the ArcGIS built in tokens, I was able to log in to localhost:6080/arcgis/admin with the siteadmin account.

Also I wasn't able to see a site on port 6080 in IIS, just the web adaptor site I created on port 8080 and claimsweb running on port 80.

Any way to get rid of the 403 error with windows authentication enabled accessing localhost:6080/arcgis/rest?

I am using the Web authentication tier and mode.

Thanks,
Igor

MarcoBoeringa · Answer

As far as I understood it from reading the Help pages (I haven't a setup running now), the whole point of the Web Adaptor was integration with your web server security model and hiding the GIS Servers from direct access.

Maybe some others with real experience can give better directions.

IgorBalotsky1 · Answer

In IIS have you disabled Anonymous Authentication and enabled Windows Authentication for the web adaptor?

http://resources.arcgis.com/en/help/main/10.1/index.html#//015400000517000000

Yes I have. The web adaptor running on port 8080 is not the issue. I want to see the rest/services folder on the default 6080 site but can't due to a 403 error. Where is the 6080 site hiding...nothing in IIS is using that port.

Thanks,
Igor

RobertJones2 · Answer

In IIS have you disabled Anonymous Authentication and enabled Windows Authentication for the web adaptor?

http://resources.arcgis.com/en/help/main/10.1/index.html#//015400000517000000