topic Re: Problem on Adding Windows User to Portal in ArcGIS Enterprise Questions

Problem on Adding Windows User to Portal

MatsHardy — Mon, 27 Nov 2017 17:30:15 GMT

I have configured Portal to secure access using Windows Active Directory. I have tried to add Windows users manually to Portal by Add Members in Portal. When I chooses Add members based on existing enterprise users, Portal does not show any domain users. Anyone has ideas?

Thanks in advance.

Re: Problem on Adding Windows User to Portal

RandallWilliams — Mon, 27 Nov 2017 21:07:11 GMT

The logs in Portaladmin should indicate if there's an issue connecting to the directory server. That's the first place I'd check.

Re: Problem on Adding Windows User to Portal

MatsHardy — Thu, 30 Nov 2017 08:51:53 GMT

The following are the portal logs:

<Msg time="2017-11-22T16:36:01,609" type="WARNING" code="219999" source="Sharing" process="4068" thread="14" methodName="" machine="xxxx" user="" elapsed=""> 在身份儲存提供者中找不到使用者 'yyyy\zzzz'。[LDAP: error code 1 - 000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1 ]</Msg>
<Msg time="2017-11-22T16:36:02,4" type="WARNING" code="219999" source="Sharing" process="4068" thread="14" methodName="" machine="xxxx" user="" elapsed=""> 在身份儲存提供者中找不到使用者 'yyyy\zzzz'。[LDAP: error code 1 - 000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1 ]</Msg>
<Msg time="2017-11-23T12:38:39,295" type="WARNING" code="219999" source="Sharing" process="4068" thread="14" methodName="" machine="xxxx" user="" elapsed=""> 在身份儲存提供者中找不到使用者 'yyyy\zzzz'。[LDAP: error code 1 - 000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1 ]</Msg>
<Msg time="2017-11-23T12:38:39,592" type="WARNING" code="219999" source="Sharing" process="4068" thread="14" methodName="" machine="xxxx" user="" elapsed=""> 在身份儲存提供者中找不到使用者 'yyyy\zzzz'。[LDAP: error code 1 - 000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1 ]</Msg>
<Msg time="2017-11-23T12:38:40,253" type="WARNING" code="219999" source="Sharing" process="4068" thread="14" methodName="" machine="xxxx" user="" elapsed=""> 在身份儲存提供者中找不到使用者 'yyyy\zzzz'。[LDAP: error code 1 - 000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1 ]</Msg>
<Msg time="2017-11-23T12:38:45,972" type="WARNING" code="219999" source="Sharing" process="4068" thread="14" methodName="" machine="xxxx" user="" elapsed=""> 在身份儲存提供者中找不到使用者 'yyyy\zzzz'。[LDAP: error code 1 - 000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1 ]</Msg>

It seems that the Portal cannot retrieve users from AD server.

The following are the user store and group config in portal :

{
"type": "WINDOWS",
"properties": {
    "user": "yyyy\\zzzz",
    "userPassword": "",
    "isPasswordEncrypted": "false",
    "userFullnameAttribute": "cn",
    "userEmailAttribute": "mail",
    "caseSensitive": "false"
}
}

{
"type": "WINDOWS",
"properties": {
    "user": "yyyy\\zzzz",
    "userPassword": "",
    "isPasswordEncrypted": "false"
}
}

Re: Problem on Adding Windows User to Portal

RandallWilliams — Thu, 30 Nov 2017 19:38:59 GMT

Is the password actually encrypted or no? When you save the JSON for this setting, Portal should encrypt the password and set the "isPasswordEncrypted": "false" value to "true".

Re: Problem on Adding Windows User to Portal

Cesar_AugustoRodriguez — Thu, 30 Nov 2017 20:12:47 GMT

Hi Mats Hardy

You can look the next link where describe what you should to do to configure your ArcGIS Enterprise security

Use your portal with LDAP and web-tier authentication—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise

Regards

Re: Problem on Adding Windows User to Portal

MatsHardy — Fri, 08 Dec 2017 06:33:45 GMT

I have figured out what happened. The original domain user account used in user store configuration is without password. Then I tried another domain user account with password. Then the Portal can show domain users this time.