topic Re: Arcgis Server Unauthorized Access with valid credentials in ArcGIS Enterprise Questions

Arcgis Server Unauthorized Access with valid credentials

MHojati — Mon, 14 Jun 2021 00:12:19 GMT

Hello,

I have used cloud builder to install a single machine arcgis portal and server. I can easily login and modify arcgis portal using my credentials. However I cannot login to the

https://URL/server/manager/

and it will redirect me to the

https://URL/server/manager/unauthorized.html

Is there any way to find the logs or figure out what is wrong with it? I tried to login to the server using ssh but could not find any logs on the server (under arcgis user). I was wondering what options do I have to fix my main problem with logging into the server manager.

CloudPlatform:AWS

EC2 type :Ubuntu

ArcGIS Version: 10.8.1

Deployment Type: Single Machine

Thanks

Re: Arcgis Server Unauthorized Access with valid credentials

Scott_Tansley — Mon, 14 Jun 2021 00:41:40 GMT

the logs are saved on disk, try C:\arcgisserver\logs and see if you can read them with notepad.

Also if you're RDP'd onto the machine you can use https://localhost:6443/arcgis/admin you will be prompted to login, I'm assuming cloud builder uses the Portal credentials here. Assuming you get in there, then you can use the API view of the logs...

Re: Arcgis Server Unauthorized Access with valid credentials

JayantaPoddar — Mon, 14 Jun 2021 04:55:06 GMT

Is your ArcGIS Server site federated with ArcGIS Portal? Then, ensure you login to the Server Manager with a (Portal) role of Publisher or Administrator or equivalent custom role.

Re: Arcgis Server Unauthorized Access with valid credentials

ChristopherPawlyszyn — Mon, 14 Jun 2021 13:42:42 GMT

In line with @JayantaPoddar's comment, for a federated ArcGIS Server site you'll need to access the Server Manager page using the Administrative URL defined during federation. This is due to how the OAuth2.0 authentication mechanism keeps tabs on the approved redirect URIs.

Reference:

"If you are connecting directly to ArcGIS Server, the URL is formatted https://gisserver.domain.com:6443/arcgis/manager. If the site includes multiple GIS servers, this will be the URL of the machine you specified for the Administration URL when federating your site.

If you are connecting through ArcGIS Web Adaptor, you'll need to ensure administrative access is enabled on ArcGIS Web Adaptor. The URL you'll use to connect is formatted https://webadaptorhost.domain.com/webadaptorname/manager."

From https://enterprise.arcgis.com/en/portal/latest/administer/linux/administer-a-federated-server.htm

Re: Arcgis Server Unauthorized Access with valid credentials

MHojati — Mon, 14 Jun 2021 16:51:01 GMT

Thanks for your help. I am on the linux, so I guess I cannot use rdp. I checked this url http://www.domain.com:6443/arcgis/admin and it does not work. Also can you please let me know where is log directory on linux? Is it in var/logs? I checked there but does not seem to be esri related logs

Re: Arcgis Server Unauthorized Access with valid credentials

MHojati — Mon, 14 Jun 2021 16:52:23 GMT

I used single machine build. so It seems to be federated. The login I am using is Administrator (the same login I made during setting up things using cloud builder)

Re: Arcgis Server Unauthorized Access with valid credentials

MHojati — Mon, 14 Jun 2021 17:26:56 GMT

Thanks. Yeah actually https://gisserver.domain.com:6443/arcgis/manager does not work. This url (https://URL/server/manager/ ) is the one that cloud builder gave me to use to login, and it works but it does not recognize my username and passwords (I suppose the error I mentioned in the first post means that)

So you mean the url I am using to login to the server is wrong? I followed the link you gave me and now the admin user in the portal is part of the "Administrators for federated server https://domain.com/server." but it still does not let me login

Re: Arcgis Server Unauthorized Access with valid credentials

Scott_Tansley — Mon, 14 Jun 2021 20:17:18 GMT

I'm not sure where the logs on on Linux, sorry I don't use it, only Windows. The 6443 issue will be because of AWS firewalling. In windows you can RDP, then use localhost. It's a get out of jail methodology. Sorry, I've never used Linux in anger so can't help you.

Re: Arcgis Server Unauthorized Access with valid credentials

Scott_Tansley — Mon, 14 Jun 2021 20:18:56 GMT

Out of interest are you able to sign in to the Enterprise Portal?

Re: Arcgis Server Unauthorized Access with valid credentials

ChristopherPawlyszyn — Mon, 14 Jun 2021 20:55:51 GMT

The log location(s) on a Linux machine will vary based on your installation location. If I remember correctly the Ubuntu AMIs place the installs on /arcgis and create a separate directory for the site configuration files. If you can access Server Admin using the credentials you specified in the stack formation, then you can find the current logging location for ArcGIS Server.

In terms of the correct URL to access the Server Manager page, are you using the site domain that was defined in the stack parameters?

Re: Arcgis Server Unauthorized Access with valid credentials

MHojati — Tue, 15 Jun 2021 04:15:44 GMT

Yes I can easily login to the portal

Re: Arcgis Server Unauthorized Access with valid credentials

MHojati — Tue, 15 Jun 2021 04:25:17 GMT

If you can access Server Admin using the credentials you specified in the stack formation

You mean using SSH? yes I can access it but could not find any log folder there

In terms of the correct URL to access the Server Manager page, are you using the site domain that was defined in the stack parameters?

Yes I am using the domain name I used in the stack parameter. Should I use ip address? (I sent you the actual links that I am using as direct message in case it helps with finding the solution)

thanks

Re: Arcgis Server Unauthorized Access with valid credentials

JonSwoveland — Fri, 18 Jun 2021 17:09:21 GMT

ArcGIS Server's administrative endpoint (:6443/arcgic/admin) presents two ways of authenticating. The first is a username and password, the second is with a token obtained from Portal. The username and password ARE NOT credentials of a Portal Identity. Only an ArcGIS Server user will work here. The problem that I've run into with the builder apps, is they don't create an ArcGIS Server PSA (Primary Server Admin) user account (or they do, but it's secret).
Fret not, there is a solution! The solution is to use ArcGIS Server's command line passwordreset tool to reset the PSA account password. This tool also has an option to display the PSA's username.

This is (just) one of the reason's I've given up using any of the builder apps. In my experience, they've been more trouble than they're worth.

If you're new to deploying Enterprise, I'd encourage you to also read up on Enterprise's default backup mechanisms, as well as how to configure the WebGISDR utility. I don't know if Esri has made any changes in their later releases, but I've seen multiple deployments fail because, by default, ArcGIS Enterprise does automated Data Store backups without regard to available drive space. Ultimately this leads to a full drive and possibly a corrupted Portal and/or database. It's bad.