topic Re: Question on ArcGIS Server Security in ArcGIS Enterprise Questions

Question on ArcGIS Server Security

IgorBalotsky1 — Fri, 05 Apr 2013 20:29:48 GMT

Hello,

I have enabled Windows domain users in my manager settings, but when I did this my localhost:6080/arcgis/rest was returning a 403 error, but the localhost:6080/arcgis/admin was functioning properly.

I have a web adaptor on port 8080, and the /arcgis/admin and arcgis/rest locations work fine with Windows authentication enabled. As soon as I switched back to the ArcGIS built in tokens, I was able to log in to localhost:6080/arcgis/admin with the siteadmin account.

Also I wasn't able to see a site on port 6080 in IIS, just the web adaptor site I created on port 8080 and claimsweb running on port 80.

Any way to get rid of the 403 error with windows authentication enabled accessing localhost:6080/arcgis/rest?

I am using the Web authentication tier and mode.

Thanks,
Igor

Re: Question on ArcGIS Server Security

RobertJones2 — Mon, 08 Apr 2013 11:43:56 GMT

In IIS have you disabled Anonymous Authentication and enabled Windows Authentication for the web adaptor?

http://resources.arcgis.com/en/help/main/10.1/index.html#//015400000517000000

Re: Question on ArcGIS Server Security

IgorBalotsky1 — Mon, 08 Apr 2013 21:25:45 GMT

In IIS have you disabled Anonymous Authentication and enabled Windows Authentication for the web adaptor?

http://resources.arcgis.com/en/help/main/10.1/index.html#//015400000517000000

Yes I have. The web adaptor running on port 8080 is not the issue. I want to see the rest/services folder on the default 6080 site but can't due to a 403 error. Where is the 6080 site hiding...nothing in IIS is using that port.

Thanks,
Igor

Re: Question on ArcGIS Server Security

MarcoBoeringa — Mon, 08 Apr 2013 22:08:31 GMT

As far as I understood it from reading the Help pages (I haven't a setup running now), the whole point of the Web Adaptor was integration with your web server security model and hiding the GIS Servers from direct access.

Maybe some others with real experience can give better directions.