topic Re: Cannot add any layer from web (map service) in ArcGIS Online Questions

Cannot add any layer from web (map service)

Lu-chiaChuang — Wed, 11 Dec 2013 14:22:18 GMT

Please help. I cannot add any layer from web into a map on my test portal for ArcGIS. I have no problem to add the same layers to an ArcGIS Online map. The error message is "The layer, layer_name, is not responding. Still trying ....". Another problem is that "Search for layers" does not give anything back. I can add a Web Application from other servers, but not map service.

My guess is this is a communication issue between my server and other servers. Any suggestion is greatly appreciated. Thanks in advance.

BTW, here is a list of the software on my test portal:

Windows Server 2008R2
Portal for ArcGIS 10.2
ArcGIS web adapter for IIS
ArcGIS server 10.2
ArcGIS GeoEvent processor 10.2

Luke

Re: Cannot add any layer from web (map service)

RaviNarayanan — Wed, 11 Dec 2013 15:46:01 GMT

Using Fiddler or Firebug, please capture the request that is failing.

If the service is from a standalone server (not federated with portal), then there is a known issue where the service cannot be accessed if the hostname in the services URL is same as portal. Host name can be same if the server and its webadaptor are installed on the same machine as portal. Can you confirm if that is the case here?

Re: Cannot add any layer from web (map service)

Lu-chiaChuang — Wed, 11 Dec 2013 17:26:15 GMT

Ravi,

Thanks for your quick response.

Yes, the services are from other standalone ArcGIS Servers (not federated).
No, the hostname of the server is different from the Portal server.

Here is one of map services :

http://mycity.houstontx.gov/ArcGIS10/rest/services/dd/Boundaries_dd/MapServer --> (this URL is for external use)
http://10.1.4.206/ArcGIS10/rest/services/dd/Boundaries_dd/MapServer --> (this URL is for internal use)

Also, I use Integrated Windows authentication for Portal security.

The followings are error (Firebug):

************

Blocked loading mixed active content "http://10.1.4.206/ArcGIS10/rest/info?f=json"
https://vgisportal01.houtx.lcl/arcgis/home/js/dojo/dojo/dojo.js
Line 15

Blocked loading mixed active content "http://10.1.4.206/ArcGIS10/rest/services/dd/Boundaries_dd/MapServer?f=json"
https://vgisportal01.houtx.lcl/arcgis/home/js/dojo/dojo/dojo.js
Line 15

Error: Permission denied for <https://vgisportal01.houtx.lcl> to create wrapper for object of class UnnamedClass
https://vgisportal01.houtx.lcl/arcgis/home/js/dojo/dojo/dojo.js
Line 15

Re: Cannot add any layer from web (map service)

WilliamCraft — Wed, 11 Dec 2013 19:14:02 GMT

I agree with Ravi; you'll need to run Fiddler to capture some traffic as a first step.

On another note, this sounds like it could be a browser issue, specifically a Javascript or extension problem when loading Portal. Which browser and version are you using? Is it possible for you to start your browser in safe mode or with extensions disabled and try to request the Portal site again?

Re: Cannot add any layer from web (map service)

Lu-chiaChuang — Wed, 11 Dec 2013 19:55:44 GMT

I'm not very familiar with Fiddler. Anyway, when I tried to add a map service, Fiddler does not show anything at all. Look like the request does not even send out. I will take a closer look tomorrow. Thank you all for your responses.

Luke

Re: Cannot add any layer from web (map service)

Lu-chiaChuang — Thu, 12 Dec 2013 12:17:58 GMT

I setup Faddler to Capture HTTPS traffic from Firefox. Still, I received no logs when I tried to add a map service from our ArcGIS servers. Look like the request was stopped at Portal and didn't go out.

I took a look at "C:\arcgisportal\logs\webserver\catalina.2013-12-12.log" file. I found a few error lines, as shown below. Does this mean I made some mistakes on my config file? Thanks.

Dec 12, 2013 7:46:50 AM com.esri.gw.publish.AgsServicePublisher isHostedService
SEVERE: AgsServicePublisher wasn't correctly initialized. AgsServicePublisher.serviceBaseURLWithoutProtocol is empty.

Luke

Re: Cannot add any layer from web (map service)

WilliamCraft — Thu, 12 Dec 2013 12:29:19 GMT

Just out of curiosity, are you using HTTPS or HTTP when configuring everything and making request? From one of your previous posts, I see that you say these are your URLs:

http://mycity.houstontx.gov/ArcGIS10...s_dd/MapServer --> (this URL is for external use)
http://10.1.4.206/ArcGIS10/rest/serv...s_dd/MapServer --> (this URL is for internal use)

However, you also later mentioned that you captured HTTPS traffic. That leads me to ask how you have configured Portal and ArcGIS for Server despite not federating them together. My questions at this point are:

1. Within Portal under My Organization --> Edit Settings, do you have the box checked to only use SSL?

2. Within the Administrator Directory of ArcGIS for Server, under the Security section have you specified HTTP Only, HTTPS Only, or HTTP and HTTPS? Additionally, under the Machines section have you imported the same security certificate and specified it for your AGS machine (if not using self-signed in IIS)?

3. Within IIS, do you have a security certificate bound to the website under which your web adaptor(s) exist? Are you using a web adaptor for ArcGIS for Server whatsoever?

4. If you are using a CA-signed certificate (i.e., not self signed), does the NAME property for the certificate use the Fully-Qualified Name (FQN) of the host?

On another note, are you running the ArcGIS for Server Windows Service as a local account or a domain account? Does that account have full permissions on the 'arcgisserver' directories?

Re: Cannot add any layer from web (map service)

Lu-chiaChuang — Thu, 12 Dec 2013 14:21:23 GMT

> 1. Within Portal under My Organization --> Edit Settings, do you have the box checked to only use SSL?

Yes, SSL only. No Anonymous Access.

> 2. Within the Administrator Directory of ArcGIS for Server, under the Security section
> have you specified HTTP Only, HTTPS Only, or HTTP and HTTPS? Additionally, under
> the Machines section have you imported the same security certificate and specified it for
> your AGS machine (if not using self-signed in IIS)?

Oops. I think this question points to my problem. This server was a test server for ArcGIS Server 10.2 and geoevent processor. ArcGIS server is running on HTTP; geoevent processor is using HTTPS. I also use ArcGIS built-in user store. I installed Portal for ArcGIS and a web adapter on top of them. I enabled SSL on Portal and IIS only.

> 3. Within IIS, do you have a security certificate bound to the website under which your web
> adaptor(s) exist? Are you using a web adaptor for ArcGIS for Server whatsoever?

I did follow Portal help file to setup a web adapter with a security certificate. But that is a web adapter for Portal. I don't have a web adapter for ArcGIS server.

> 4. If you are using a CA-signed certificate (i.e., not self signed), does the NAME property for the
> certificate use the Fully-Qualified Name (FQN) of the host?

No. I don't have a CA-signed certificate.

> On another note, are you running the ArcGIS for Server Windows Service as a local account or
> a domain account? Does that account have full permissions on the 'arcgisserver' directories?

A local account. It does not have the permission on the 'arcgisserver' directories.

Thank you for your advice. I shouldn't put all those components in one server with different security configurations. I plan to purge my test server and rebuild it again.

Thank you for your help.

Luke

Re: Cannot add any layer from web (map service)

WilliamCraft — Thu, 12 Dec 2013 16:34:50 GMT

No problem. If possible, perhaps you could reply to this thread once more to indicate what configuration differences exist on the newly-built server when you're finished. In other words, tell us what you did differently to get it to work (assuming the change from #2 above is the fix). That would be helpful for others who read the post with similar challenges. As always, please also remember to mark the correct answer and/or vote up helpful responses when using the Esri forums. Good luck!

Re: Cannot add any layer from web (map service)

Lu-chiaChuang — Tue, 17 Dec 2013 16:49:39 GMT

Here is a quick update.

Our system admin gave me a new VM. I did a fresh installation of Portal for ArcGIS and Web Adapter for Portal according to ESRI document. No problem so far. I am able to add map services to my map. But.... once I set up security to use Integrated Windows Authentication, I cannot add map services to a map. I receives the same error message as before - "The layer, layer_name, is not responding. Still trying ....".

An ESRI web consultant is visiting my company later this week for a different project. I will try to get some answers from him. Thanks for all your feedback.

Luke

Re: Cannot add any layer from web (map service)

WilliamCraft — Tue, 17 Dec 2013 21:05:00 GMT

Thanks for the update. Are you federating portal with AGS?

For the Portal web adaptor, is anonymous authentication disabled and IWA auth enabled in IIS?

Re: Cannot add any layer from web (map service)

PF1 — Mon, 10 Feb 2014 20:51:00 GMT

Here is a quick update.

Our system admin gave me a new VM. I did a fresh installation of Portal for ArcGIS and Web Adapter for Portal according to ESRI document. No problem so far. I am able to add map services to my map. But.... once I set up security to use Integrated Windows Authentication, I cannot add map services to a map. I receives the same error message as before - "The layer, layer_name, is not responding. Still trying ....".

An ESRI web consultant is visiting my company later this week for a different project. I will try to get some answers from him. Thanks for all your feedback.

Luke

Hi Luke,

What browser are you accessing the portal solution from? We have the same problem with our deployment and it is related to mixed content. If the portal is configured with IWA then it is binded to Port 443 (HTTPS) and access over 80 (HTTP) is disabled (runs in SSL only). When you add a service that is not deployed with HTTPS then the browser blocks the request since its running unsecured scripts (mixed content). As a mitigation, we have enabled HTTPS on all of our arcgis server sites and always register the HTTPS urls. That is fine for ArcGIS Server deployments we manage/maintain, but we still have the issue for 3rd party server deployments that are outside of our control.

In chrome there is a little obscure 'shield' icon that appears on the far right side of the URL. If you click that then there may be an option to say 'load anyways'. Review this link for chrome: https://support.google.com/chrome/answer/1342714?hl=en

IE does a little better with alerting you that mixed content is being blocked. It should ask something like 'are you sure you want to display secure content only'

Does that help?

Re: Cannot add any layer from web (map service)

crisforu — Thu, 08 May 2014 10:05:58 GMT

i am working for an Oil and Gas Company in Middle east.

i have configured portal for arcgis with Integrated Windows Authentication in one server and accessing Arcgis server (not federated and not configured web security) from another server. I am getting the below Error in Portal for arcgis while adding the map service.

[ATTACH=CONFIG]33666[/ATTACH]

Please Refer the below error log file

Portal Log:
esri.gw.publish.AgsServicePublisher isHostedService
SEVERE: AgsServicePublisher wasn't correctly initialized. AgsServicePublisher.serviceBaseURLWithoutProtocol is empty.

I appreciate your quick response on this.

Thanks & Regards,
Prasad

Re: Cannot add any layer from web (map service)

ThomasColson — Sun, 13 Sep 2015 13:33:02 GMT

Have there been any updates from Esri on this? In todays "the sky is falling" security environment, unchecking the "Require SSL" is not an option, yet we have a requirement to load non-SSL map services with our own SSL services. Likewise, telling users how to circumvent the "mixed content" warnings is not a good idea either. Certainly there must be some sort of proxy configuration that can act as a work-around? Can't imagine Esri put Portal 10.3.1 into production knowing this limitation.