topic Re: Simple security settings in Server 10.1 in ArcGIS Enterprise Questions

Simple security settings in Server 10.1

JudyTroutwine — Mon, 19 Nov 2012 05:53:55 GMT

I am using ArcGIS Server 10.1 on Windows Server 2008 R2 with the Web Adaptor for IIS. I want to start with a simple Anonymous Authentication. Are there any examples of how to do this? Can this be done with the default ArcGIS Server security configuration shown below? Are tokens necessary? The Configuration Settings edit wizard does not seem to allow not using them.

User Store: ArcGIS Server Built-in
Role Store: ArcGIS Server Built-in
Authentication Tier: GIS Server
Authentication Mode: ArcGIS Tokens

Re: Simple security settings in Server 10.1

KevinGooss — Mon, 19 Nov 2012 13:05:50 GMT

I would think that anonymous is the default. therefore you should just be able to access the service without doing anything special.
At 10.0 ags security was off by default. You had to turn it on then open permissions to services you wanted to be accessed anonymously.
At 10.1, ags security is on by default but all services are created with anon access allowed by default. so you have to specifically lock down the ones you want security.

something of a paradigm shift.

Re: Simple security settings in Server 10.1

JeffSmith — Mon, 19 Nov 2012 13:11:15 GMT

You shouldn't need to make any changes. The Anonymous Authentication is enabled by default when you install the Web Adaptor for IIS. The ArcGIS Server built-in users and roles will work fine with this. Just make sure you have the security settings for your services set to 'Public, available to everyone' and you should be good to go. An easy way to verify this is with the opened padlock icon next to your services and folders in Server Manager.

Re: Simple security settings in Server 10.1

DerekLaw — Mon, 19 Nov 2012 15:52:45 GMT

Hi Judy,

I am using ArcGIS Server 10.1 on Windows Server 2008 R2 with the Web Adaptor for IIS. I want to start with a simple Anonymous Authentication. Are there any examples of how to do this? Can this be done with the default ArcGIS Server security configuration shown below? Are tokens necessary?

Just to add onto what Kevin and Jeff posted, below are some help docs on the topic:

Restricting access to GIS web services
Editing permissions in Manager

Hope this helps,

Re: Simple security settings in Server 10.1

JudyTroutwine — Wed, 21 Nov 2012 04:50:10 GMT

I am glad to know that Anonymous is enabled by default. However, I can see my test application from outside the machine but still not from outside the network. The individual services have been set to public. I did also set folder permissions for the Server Account for data folders, the argisserver folders, and the wwwroot application folder.

I had a similar problem in 10.0 which was resolved by specifying the arcgis server connection URL in ArcCatalog to include the domain path as well as the machine name. I did the same in 10.1 but no resolution yet.

The rest services directory is also not visible from outside the network.

I must still be missing something.

Re: Simple security settings in Server 10.1

KevinGooss — Wed, 21 Nov 2012 14:36:38 GMT

Have you tried it using the ip instead of the machine name? Sounds more like a DNS/networking issue rather than ags.
are you able to ping through to the machines you are trying to access?
did you install the web adapter or are you working over port 6080?
if you did install the adapter did you register your ags server with it using the machine name, ip or both?

Re: Simple security settings in Server 10.1

MathewCoyle — Wed, 21 Nov 2012 14:40:36 GMT

Can you access the default IIS splash screen of the server from outside your domain?

Re: Simple security settings in Server 10.1

JudyTroutwine — Sat, 24 Nov 2012 03:41:13 GMT

I have installed the web adaptor and can see the services in the associated server connection in ArcCatalog.

I can ping the machine with the IP address, and can also see the IIS splash screen. However, the rest services directory is not accessible. Using the machine path URL, the IIS splash screen does not appear.

Do I have one or two problems here?