topic Re: installing Web Adaptor IIS SP1 in ArcGIS Enterprise Questions

installing Web Adaptor IIS SP1

TimHayes — Sat, 27 Jul 2013 01:47:33 GMT

We already are running ArcGIS Server 10.1. Just installed SP1. I have map services running in a virtual directory in inetpub wwwroot on our machine's c drive.

However, after I upgraded to IIS SP1 I get the following error after I complete the Config:

Application Error

Failed to get administrator token from the GIS server. Please verify that the GIS Server URL specified can be accessed successfully

I can no longer access ArcGIS Server Manager. I am the ArcGIS Server Administrator and Machine Administrator. All was good before I installed IIS SP1.

Any ideas on what could be wrong?

Re: installing Web Adaptor IIS SP1

BubbaHey — Mon, 29 Jul 2013 12:00:44 GMT

Make sure World Wide Web service is started.

Also,if using a firewall, make sure ports are open.

See:

http://resources.arcgis.com/en/help/main/10.1/index.html#//015400000537000000

Re: installing Web Adaptor IIS SP1

TimHayes — Mon, 29 Jul 2013 12:13:16 GMT

Make sure World Wide Web service is started.

Also,if using a firewall, make sure ports are open.

See:

http://resources.arcgis.com/en/help/main/10.1/index.html#//015400000537000000

I see in Server Manager that the World Wide Wed Publishing is Started and set to Automatic. I restarted it.

The Windows Firewall Service is Started and set to Automatic. I restarted it.

Still the same results.

In Services Manager, I checked Windows Firewall with Advanced Security, says Firewall is off.

Re: installing Web Adaptor IIS SP1

ThomasMontefusco — Mon, 29 Jul 2013 12:29:26 GMT

Check to see if one of these bugs applies:

Bug NIM-087508
Cannot configure ArcGIS Server to use Active Directory as the identity store if the user account provided is restricted from logging onto the Active Directory host.
http://support.esri.com/en/bugs/nimbus/TklNMDg3NTA4

Fixed in 10.2

Bug NIM-087257

Users in a lot of groups cannot authenticate when using HTTPS, ActiveDirectory, and web tier authentication together.

Workaround:

1. Open arcgis/server/framework/runtime/tomcat/conf/server.xml in a text editor.
2. Look for this text at the end of the file:

<Connector SSLEnabled="true" clientAuth="false" keyAlias="SelfSignedCertificate" keystoreFile="/opt/esri/3135_upgrade/arcgis/server/usr/config-store/machines/RHDAILY.ESRI.COM/arcgis.keystore" keystorePass="<blah blah blah>" maxThreads="150" port="6443" protocol="org.apache.coyote.http11.Http11Protocol" scheme="https" secure="true" sslProtocol="TLS"/>

3. Insert maxHttpHeaderSize="65535" as an attribute of the XML so that it looks like this:

<Connector SSLEnabled="true" clientAuth="false" keyAlias="SelfSignedCertificate" keystoreFile="/opt/esri/3135_upgrade/arcgis/server/usr/config-store/machines/RHDAILY.ESRI.COM/arcgis.keystore" keystorePass="<blah blah blah>" maxThreads="150" port="6443" protocol="org.apache.coyote.http11.Http11Protocol" scheme="https" secure="true" sslProtocol="TLS" maxHttpHeaderSize="65535"/>

Re: installing Web Adaptor IIS SP1

BubbaHey — Mon, 29 Jul 2013 12:33:27 GMT

Even if the Firewall is disabled, make sure port 6080 is open. Also what path are you using to access Web Adaptor. For example:

http://localhost/arcgis/webadaptor

Did you enable SSL? If so, make sure you followed this procedure:

http://resources.arcgis.com/en/help/main/10.1/index.html#/Enabling_SSL_on_ArcGIS_Server_when_accessed_through_the_ArcGIS_Web_Adaptor/015400000600000000/

Re: installing Web Adaptor IIS SP1

TimHayes — Mon, 29 Jul 2013 12:38:43 GMT

Even if the Firewall is disabled, make sure port 6080 is open. Also what path are you using to access Web Adaptor. For example:

http://localhost/arcgis/webadaptor

Did you enable SSL? If so, make sure you followed this procedure:

http://resources.arcgis.com/en/help/main/10.1/index.html#/Enabling_SSL_on_ArcGIS_Server_when_accessed_through_the_ArcGIS_Web_Adaptor/015400000600000000/

Yes, I am using http://localhost/arcgis/webadaptor

I cannot enablke SSL because I cannot gain access to:
http://gisserver:6080/arcgis/admin

Re: installing Web Adaptor IIS SP1

TimHayes — Mon, 29 Jul 2013 12:39:52 GMT

Even if the Firewall is disabled, make sure port 6080 is open. Also what path are you using to access Web Adaptor. For example:

http://localhost/arcgis/webadaptor

Did you enable SSL? If so, make sure you followed this procedure:

http://resources.arcgis.com/en/help/main/10.1/index.html#/Enabling_SSL_on_ArcGIS_Server_when_accessed_through_the_ArcGIS_Web_Adaptor/015400000600000000/

How do I check if port 6080 is open?

Re: installing Web Adaptor IIS SP1

TimHayes — Mon, 29 Jul 2013 12:44:32 GMT

Check to see if one of these bugs applies:

Bug NIM-087508
Cannot configure ArcGIS Server to use Active Directory as the identity store if the user account provided is restricted from logging onto the Active Directory host.
http://support.esri.com/en/bugs/nimbus/TklNMDg3NTA4

Fixed in 10.2

Bug NIM-087257

Users in a lot of groups cannot authenticate when using HTTPS, ActiveDirectory, and web tier authentication together.

Workaround:

1. Open arcgis/server/framework/runtime/tomcat/conf/server.xml in a text editor.
2. Look for this text at the end of the file:

<Connector SSLEnabled="true" clientAuth="false" keyAlias="SelfSignedCertificate" keystoreFile="/opt/esri/3135_upgrade/arcgis/server/usr/config-store/machines/RHDAILY.ESRI.COM/arcgis.keystore" keystorePass="<blah blah blah>" maxThreads="150" port="6443" protocol="org.apache.coyote.http11.Http11Protocol" scheme="https" secure="true" sslProtocol="TLS"/>

3. Insert maxHttpHeaderSize="65535" as an attribute of the XML so that it looks like this:

<Connector SSLEnabled="true" clientAuth="false" keyAlias="SelfSignedCertificate" keystoreFile="/opt/esri/3135_upgrade/arcgis/server/usr/config-store/machines/RHDAILY.ESRI.COM/arcgis.keystore" keystorePass="<blah blah blah>" maxThreads="150" port="6443" protocol="org.apache.coyote.http11.Http11Protocol" scheme="https" secure="true" sslProtocol="TLS" maxHttpHeaderSize="65535"/>

I did this, and I do not even see this code in the xml file. Should I just copy and paste it? if so, where?

Re: installing Web Adaptor IIS SP1

TimHayes — Mon, 29 Jul 2013 12:46:35 GMT

I did this, and I do not even see this code in the xml file. Should I just copy and paste it? if so, where?

Here is my server.xml file:

<?xml version="1.0" encoding="utf-8" standalone="no"?>


<Server port="6006" shutdown="SHUTDOWN">


<Listener SSLEngine="on" className="org.apache.catalina.core.AprLifecycleListener"/>

<Listener className="org.apache.catalina.core.JasperListener"/>

<Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener"/>

<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener"/>
<Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener"/>


<GlobalNamingResources>
    
    <Resource auth="Container" description="User database that can be updated and saved" factory="org.apache.catalina.users.MemoryUserDatabaseFactory" name="UserDatabase" pathname="conf/tomcat-users.xml" type="org.apache.catalina.UserDatabase"/>
</GlobalNamingResources>


<Service name="Catalina">

    
    


    
    <Connector connectionTimeout="20000" maxHttpHeaderSize="65535" maxPostSize="10485760" port="6080" protocol="HTTP/1.1" redirectPort="6443" server=" "/>
    
    
    
    

    
    

    

    
    <Engine defaultHost="localhost" name="Catalina">

      
      

      
      

      
      <Realm className="org.apache.catalina.realm.LockOutRealm">
        
        <Realm className="org.apache.catalina.realm.UserDatabaseRealm" resourceName="UserDatabase"/>
      </Realm>
      
      <Realm className="com.esri.arcgis.discovery.security.tomcat.realm.ArcGISRealm"/>

      <Host appBase="webapps" autoDeploy="true" name="localhost" unpackWARs="true" xmlNamespaceAware="false" xmlValidation="false">

        
        

        

<Context docBase="../../../../help/server_help" path="/arcgis/help"/>
<Context docBase="../../../../help/SDK" path="/arcgis/sdk"/>
<Context docBase="../../../../help/SDK/REST" path="/arcgis/sdk/rest"/>
<Context docBase="../../../../help/SDK/SOAP" path="/arcgis/sdk/soap"/>

   
      </Host>
    </Engine>
</Service>
</Server>

Re: installing Web Adaptor IIS SP1

BubbaHey — Mon, 29 Jul 2013 13:10:57 GMT

If using http://localhost/arcgis/webadaptor try the FQDN instead. For example: http://bubba.bubba.com/arcgis/webadaptor

There are different ways, try netstat -an | find "6080" or telnet

telnet [domainname or ip] [port]

Re: installing Web Adaptor IIS SP1

TimHayes — Mon, 29 Jul 2013 13:14:20 GMT

If using http://localhost/arcgis/webadaptor try the FQDN instead. For example: http://bubba.bubba.com/arcgis/webadaptor

There are different ways, try netstat -an | find "6080" or telnet

telnet [domainname or ip] [port]

I tried FQDN and got this message:

Application Error

Could not find any recognizable digits.

Re: installing Web Adaptor IIS SP1

BubbaHey — Mon, 29 Jul 2013 13:18:04 GMT

You didn't say if using SSL. IF so, look at that article I sent.

Also there are issues after upgrading to SP1

Try the following:

Stop ArcGIS Server service

Go to C:\Program Files\ArcGIS\Server\framework\etc\upgrade.txt
Delete this file (upgrade.txt) if it exists.

Start ArcGIS Server service

Re: installing Web Adaptor IIS SP1

BubbaHey — Mon, 29 Jul 2013 13:22:04 GMT

For the "Could not find any recognizable digits." error what has worked for me before is a repair of web adaptor. go to control panel, programs, uninstall, uninstall web adaptor SP1, then choose Repair option. If that doesn't help, try an uninstall. Check that the arcgis (or whatever folder you called it) is removed, if not, delete, then re-install SP1 for Web Adaptor

Re: installing Web Adaptor IIS SP1

TimHayes — Mon, 29 Jul 2013 13:22:51 GMT

You didn't say if using SSL. IF so, look at that article I sent.

Also there are issues after upgrading to SP1

Try the following:

Stop ArcGIS Server service

Go to C:\Program Files\ArcGIS\Server\framework\etc\upgrade.txt
Delete this file (upgrade.txt) if it exists.

Start ArcGIS Server service

upgrade.txt does not exist.

I cannot enable SSL because I cannot gain access to:
http://gisserver:6080/arcgis/admin

After I type this, using my GIS Server's Machine name for gisserver I get the message: Internet Explorer cannot display the webpage, Diagnose Connection Problems.

Re: installing Web Adaptor IIS SP1

TimHayes — Mon, 29 Jul 2013 13:31:59 GMT

For the "Could not find any recognizable digits." error what has worked for me before is a repair of web adaptor. go to control panel, programs, uninstall, uninstall web adaptor SP1, then choose Repair option. If that doesn't help, try an uninstall. Check that the arcgis (or whatever folder you called it) is removed, if not, delete, then re-install SP1 for Web Adaptor

Tried all that, same results. No change.

I never had any problems until I installed SP1.

Re: installing Web Adaptor IIS SP1

BubbaHey — Mon, 29 Jul 2013 15:27:13 GMT

Using SSL? If not using SSL, go to IIS Manager, click Default Web Site, under Actions, click Bindings. If https on port 443 is present, remove it.

Also check that the IIS Admin Service is started Are you able to get to the web adaptor configuration page at all?

If so, select " Enable administrative access to your site through the Web Adaptor"

Re: installing Web Adaptor IIS SP1

BubbaHey — Mon, 29 Jul 2013 15:29:00 GMT

Also, go to Start, Programs, ArcGIS, ArcGIS 10.1 for Server, run Configure ArcGIS Server Account. Don't laugh, like the old Post Installs this little wizard can solve a lot of problems, because it re-writes permissions.

Re: installing Web Adaptor IIS SP1

TimHayes — Mon, 29 Jul 2013 15:29:33 GMT

Using SSL? If not using SSL, go to IIS Manager, click Default Web Site, under Actions, click Bindings. If https on port 443 is present, remove it.

Also check that the IIS Admin Service is started Are you able to get to the web adaptor configuration page at all?

If so, select " Enable administrative access to your site through the Web Adaptor"

The problem is fixed. I called ESRI Tech Support, they had me rename my arcgisserver folder and create a new arcgisserver folder and copy the services from the old folder to the new. Plus some other stuff they did. I cannot remember exactly. If I do I will post it here. All is good now.

thanks for the help, bubba. It actually did help some.

Re: installing Web Adaptor IIS SP1

BubbaHey — Mon, 29 Jul 2013 15:30:09 GMT

One more thing, I've seen this after SP1 - clear the browser cache and try a different browser. Trust me, I've been in the battlefield on these issues. 🙂

Re: installing Web Adaptor IIS SP1

BubbaHey — Mon, 29 Jul 2013 15:30:47 GMT

Cool! That was going to be my next suggestion. 🙂 Nice.