topic Re: token based security and 10.1 printing gp service in ArcGIS API for Flex Questions

token based security and 10.1 printing gp service

Drew — Fri, 21 Sep 2012 14:13:46 GMT

Has anyone successfully produced a print when using a secured service?

I am getting the following error..


Error executing tool.: Layer "ArcGISDynamicMapServiceLayer405": Unable to connect to map server at    [...Web map URL with token written here......] Failed to execute (ExportWebMap). Failed to execute (Export Web Map)

Is there something I need to configure?

Drew

Re: token based security and 10.1 printing gp service

Drew — Fri, 10 Dec 2021 21:16:51 GMT

* BUMP *

I am trying to use the print task and am getting the quoted error when using a secured service.
Has anyone successfully printed a secured service?

Drew

Has anyone successfully produced a print when using a secured service?

I am getting the following error..
Error executing tool.: Layer "ArcGISDynamicMapServiceLayer405": Unable to connect to map server at    [...Web map URL with token written here......] Failed to execute (ExportWebMap). Failed to execute (Export Web Map)
Is there something I need to configure?

Drew

Re: token based security and 10.1 printing gp service

DasaPaddock — Thu, 04 Oct 2012 18:39:55 GMT

How is the token being generated? Is it restricted by referer or ip address?

Re: token based security and 10.1 printing gp service

Drew — Fri, 05 Oct 2012 01:58:28 GMT

How is the token being generated? Is it restricted by referer or ip address?

It is restricted by HTTP Referer.

Re: token based security and 10.1 printing gp service

DasaPaddock — Fri, 05 Oct 2012 21:23:56 GMT

When the print service makes its request to the url with the token, it doesn't send a referer header. Can you use a short term token that's not restricted to ip or referer?

That's how the tokens are generated by the IdentityManager.

If this is not an option for you, you could call PrintParameters.toJSON() and then remove the token from the url in the JSON. You'd then need to use a Geoprocessor to call your print service with the modified JSON. You'd also need to follow these instructions to set up your print service with the credentials for the secure service.
http://resources.arcgis.com/en/help/main/10.1/#/Printing_maps_that_contain_secured_services/0154000005q3000000/

Re: token based security and 10.1 printing gp service

weeyeo — Fri, 26 Jul 2013 15:11:01 GMT

Can you show me how do you write a code to perform this task? I had created a new secured print service for my gp service. Thank you.

Re: token based security and 10.1 printing gp service

Drew — Fri, 26 Jul 2013 16:57:09 GMT

Can you show me how do you write a code to perform this task? I had created a new secured print service for my gp service. Thank you.

wyoe -> It's funny your asking this because I am finally just returning to the issue. I tried a few months back but I dropped it because bigger things fell onto my plate.

Just yesterday I came back and started work on it again (due to a urgent need)

Anyways.. its not the most simple process. I am finding It only works when the service references port 6080 and not port 80 and the service has no token..

So my plan is ..... (not yet implemented)

- convert PrintParameters to JSON
- find and replace all ?token= ABC
- find and replace domain.com with domain:6080.com
- send via HTTP and POST using the REST API because there is no PrintParamaters.fromJSON yet 🙂

This is my plan, it might change if i find issues.

Drew

Re: token based security and 10.1 printing gp service

MayJeff — Sat, 27 Jul 2013 18:14:04 GMT

Thanks for replying my thread. At least I am not the only one having this problem now. Would you please keep me update if you able to get it to works. I really appreciated that. Do you think have to do anything on the proxy file too? I run all my secured map services on 10.1 and everything is working find except the printTask. I also run a esri high-quality printing simple code (https://developers.arcgis.com/en/flex/sample-code/printtask.htm) then change url & secure gp sevices to my own services and get the same message. Really spending alot of time on it and didn't find any documents or ways from ESRI team. Just wonder is it a PrintTask bug on 10.1 or not many people using this function at all?

Re: token based security and 10.1 printing gp service

weeyeo — Sat, 27 Jul 2013 18:19:51 GMT

Re: token based security and 10.1 printing gp service

MayJeff — Sat, 27 Jul 2013 18:55:28 GMT

Samething on ArcGIS Flex viewer and Application builder on Print Widget.

Re: token based security and 10.1 printing gp service

DasaPaddock — Tue, 30 Jul 2013 15:32:00 GMT

- send via HTTP and POST using the REST API because there is no PrintParamaters.fromJSON yet 🙂

You can use a Geoprocessor for this step. That's actually what the PrintTask uses:

_gp.execute(printParameters.toJSON(), responder);

Re: token based security and 10.1 printing gp service

DasaPaddock — Tue, 30 Jul 2013 15:37:43 GMT

Thanks for replying my thread. At least I am not the only one having this problem now. Would you please keep me update if you able to get it to works. I really appreciated that. Do you think have to do anything on the proxy file too? I run all my secured map services on 10.1 and everything is working find except the printTask. I also run a esri high-quality printing simple code (https://developers.arcgis.com/en/flex/sample-code/printtask.htm) then change url & secure gp sevices to my own services and get the same message. Really spending alot of time on it and didn't find any documents or ways from ESRI team. Just wonder is it a PrintTask bug on 10.1 or not many people using this function at all?

Are you using long term tokens (tokens that are restricted to an ip or referer)? If not, then you probably need a different solution. You may need to work with Esri Support.

Re: token based security and 10.1 printing gp service

weeyeo — Tue, 30 Jul 2013 16:21:55 GMT

I am not using long term token and just asked ESRI support for this problem.
You mentioned this on your previous post "If this is not an option for you, you could call PrintParameters.toJSON() and then remove the token from the url in the JSON. You'd then need to use a Geoprocessor to call your print service with the modified JSON"

Can you show me how do you get the code to work on print task widget? I would like to give this a try too.

Really appreciate your help.

Thanks.

Re: token based security and 10.1 printing gp service

DasaPaddock — Tue, 30 Jul 2013 16:41:55 GMT

I am not using long term token and just asked ESRI support for this problem.
You mentioned this on your previous post "If this is not an option for you, you could call PrintParameters.toJSON() and then remove the token from the url in the JSON. You'd then need to use a Geoprocessor to call your print service with the modified JSON"

Can you show me how do you get the code to work on print task widget? I would like to give this a try too.

Really appreciate your help.

Thanks.

If you're using short term tokens, like the ones generated by IdentityManager, then you don't need to remove them from the URLs in the print JSON. Short term tokens are not restricted to an IP or referer so they should work when passed through the print service.

Re: token based security and 10.1 printing gp service

HeatherGonzago — Fri, 23 Aug 2013 00:59:16 GMT

Not sure if the problem is only occuring when trying to print the individual feature layer from the print task? If so, than that does appear to be an issue with 10.1. I cannot reproduce it using 10.2. It is not specific to Flex but rather on the server-end itself.

Re: token based security and 10.1 printing gp service

weeyeo — Mon, 26 Aug 2013 12:41:06 GMT

I found out if you try to print Feature Layer on 10.1, it won't print it too. So upgrade to 10.2 will help solve this problem? My temporary solution is removed Feature Layer before send it to print.

Thank you.

Re: token based security and 10.1 printing gp service

HeatherGonzago — Wed, 11 Sep 2013 19:01:01 GMT

After further testing, the problem with printing secure feature layers (NOT the dynamic service itself) from a secured print task appears to also occur in 10.2. This has been logged as NIM094431.

Thanks.

Re: token based security and 10.1 printing gp service

DrewDowling — Mon, 06 Jan 2014 21:56:33 GMT

Adding my experience with this in case it helps anyone or anyone knows of a workaround

running ArcGIS Server 10.1
Flexview app using a secured dynamic service.
Unsecured print service

When a long lived token for the dynamic layer is added to the flex viewer config.xml the print service does not work. Error message is: Error executing tool.: Layer "Map Features": Unable to connect to map server at http://<server>:6080/arcgis/rest/services/Secured/FIRM/MapServer?token=KrGwxThrMRtL-K9O6kCnJggy1qSe3EAdyTCMtIxsPFxto6eSj..........

When no token is added to the config file and a user is forced to log in when the app loads then printing occurs normally.

Re: token based security and 10.1 printing gp service

UldisGitendorfs — Tue, 08 Apr 2014 11:48:48 GMT

Hi!
I know there are some months gone since the last answer, but I would like to give my five cents in this.
ArcGIS 10.2.1 printing secure services everything is just like in Help - http://resources.arcgis.com/en/help/main/10.1/index.html#//0154000005q3000000
but some things to mention is - when creating connection in ArcCatalog you should write ArcGIS Server url to web adaptor not that with the 6080 port. Of course if you are using Web adaptor.
And one other thing - PrintService should run in Synchronous mode and for WebApp the url for print task should be taken from rest directory.

All I mentioned above were those thingies giving errors in my project.

Re: token based security and 10.1 printing gp service

DrewDowling — Thu, 10 Apr 2014 18:43:33 GMT

AM
savaadaisu

Thanks for you input. I eventually went with using a proxy page instead of using a token directly and this solved my problems. Hope this helps others.