topic Re: Secure Services over https in ArcGIS JavaScript Maps SDK Questions

Secure Services over https

LaurynasGedminas — Wed, 01 Aug 2012 19:37:58 GMT

Hey,
Having problems accessing secure services thru SSL enabled site https://<arcserver>:6443/arcgis/rest/services
in JavaScript API and arcgis.com, i get the message: "Unable to access the authentication service".
I dint had this problem before SSL was enable.
I am using Identify manager and ArcServer 10.1.

Flex viewer,ArcExplorer,ArcMap has no problem with secure services

Thanks,

Laurynas Gedminas

Re: Secure Services over https

MostafaFouly — Thu, 02 Aug 2012 09:13:11 GMT

well there're 2 ways to secure ArcGIS server services:
token based.
services secured with http, which is your case.

check "Services secured with HTTP/Windows authentication" section:
http://help.arcgis.com/en/webapi/javascript/arcgis/help/jshelp_start.htm#jshelp/ags_secureservices.html

since you're using a client side language, the first option in the section won't work with you, so you've to stick to the first one i guess.

Re: Secure Services over https

MostafaFouly — Thu, 02 Aug 2012 09:24:15 GMT

out of curiosity, do you have SSL Certificate installed?

check "Determining whether a SSL certificate is installed" to see if it's installed or not
http://webhelp.esri.com/arcgisserver/9.3/dotnet/index.htm#securing_internet_conn.htm

Re: Secure Services over https

LaurynasGedminas — Thu, 02 Aug 2012 11:08:06 GMT

out of curiosity, do you have SSL Certificate installed?

check "Determining whether a SSL certificate is installed" to see if it's installed or not
http://webhelp.esri.com/arcgisserver/9.3/dotnet/index.htm#securing_internet_conn.htm

SSL was installed for ArcServer and IIS.
Using JavaScript API Identity manager to communicate with authentication service on ArcServer identity store.
If services are not secure Java client can see the services.

Laurynas

Re: Secure Services over https

MostafaFouly — Mon, 06 Aug 2012 12:04:47 GMT

did you require that users of your application employ HTTPS when accessing it? is the 1st option not working with you?

you can try using the token authentication option as well, i tried it before and it's quite simple to implement, check the following sample:
https://servicesbeta.esri.com/security/index.html

Re: Secure Services over https

p_thibault — Fri, 14 Sep 2012 14:27:57 GMT

Hey,
Having problems accessing secure services thru SSL enabled site https://<arcserver>:6443/arcgis/rest/services
in JavaScript API and arcgis.com, i get the message: "Unable to access the authentication service".
I dint had this problem before SSL was enable.
I am using Identify manager and ArcServer 10.1.

Flex viewer,ArcExplorer,ArcMap has no problem with secure services

Thanks,

Laurynas Gedminas

Have you resolved this yet? I am having the same exact issue. SSL is set, Roles and Users are ok. I can test this through the REST services login page. But the IdentityManager widget gives me a "unable to access the authentication service". when trying to access from a web application.

Re: Secure Services over https

JeffPace — Fri, 14 Sep 2012 15:31:52 GMT

Have you resolved this yet? I am having the same exact issue. SSL is set, Roles and Users are ok. I can test this through the REST services login page. But the IdentityManager widget gives me a "unable to access the authentication service". when trying to access from a web application.

have you registered you server with the identity manager? at 2.6 (i believe) and below it would guess, now you have to explicitly set it

function initSecurity() {

                        var serverInfo = new esri.ServerInfo();
                        serverInfo.server = '<https server>';
                        serverInfo.tokenServiceUrl = '<https server>/arcgis/tokens/generateToken';
                        esri.id.registerServers([serverInfo]);

                };

Re: Secure Services over https

p_thibault — Mon, 17 Sep 2012 18:47:21 GMT

I do not want to hijack this thread,

But...I have read a good deal of documentation on security... but is there a condensed checklist for implementing the identitymanager on IIS7. I seem to be going in circles. I am sure it is something simple.

The variables are: IIS7, Arcgis Server 10.1, Javascript 3.0. (Server Certificate for SSL is on).

For a non-security person, reading the various ways of implementing security seems to all blend....it is not always easy to determine what method someone is trying to use to ascertain if it applies to identitymanager.

Many thanks.

Re: Secure Services over https

LaurynasGedminas — Thu, 08 Nov 2012 19:42:07 GMT

Kinda dropped on this issue since client wants Flex site only.
On other hand if you use original port 6080 with SSL enabled on the Web Server, i was able to connect to the services thru
https://localhost:6080

Thanks,
Laurynas