topic Re: web site that uses ArcGIS Server Security (users and roles). in ArcGIS Online Questions

web site that uses ArcGIS Server Security (users and roles).

Brendawheatley — Fri, 15 Apr 2016 20:49:03 GMT

this website has been running since August 2015. Users are able to login to the site making chagnes to a feature service as needed.

Recently set up SSL on same ArcGIS Server server as requested for another application. now we recevie a mesage for the site that has been working:

"The existing site using Security no longer works. We receive an error - Aborted the Sign-In process to avoid sending password over insecure connection."

any ideas?

Re: web site that uses ArcGIS Server Security (users and roles).

RandallWilliams — Fri, 15 Apr 2016 21:08:01 GMT

Hi Brenda,

I'm unsure that I understand the question. Would it be possible to post a screen capture of the error you're seeing?

Re: web site that uses ArcGIS Server Security (users and roles).

Brendawheatley — Fri, 15 Apr 2016 21:13:19 GMT

Sorry the problem is not clear. Here is the error message opening the site. As mentioned this site worked perfectly for a few months. Now we are getting this message.

We installed a SSL about 2 months ago. This is one application I failed to test to make sure it still worked after installing the SSL.

Re: web site that uses ArcGIS Server Security (users and roles).

RandallWilliams — Fri, 15 Apr 2016 21:22:02 GMT

Thanks!

A few more questions:

Which browser are you working with? Do you get a different error using Internet Explorer, Firefox, or Chrome?

Was your browser recently updated?

Are you using a self signed certificate or a CA signed certificate?

Does the CN defined in the certificate match the hostname or FQDN of the machine hosting the application?

If your application is public, I'll be happy to check it out. I shouldn't need credentials to help figure out what's up.

Re: web site that uses ArcGIS Server Security (users and roles).

Brendawheatley — Fri, 15 Apr 2016 21:33:43 GMT

The site is public, of course with credentials to use the site.

http://ccgisapps.charlestoncounty.org/TheAddresser/

I get the same error with all 3 browsers, IE 9, Chrome and Firefox

Yes, the hostname is correct in the SSL

The SSL is a GeoTrust SSL

This site is unable to open with our internal network which tells me this is not a firewall issue since I am inside the county network.

I can get more from IT on Monday as they have gone home for the day

Re: web site that uses ArcGIS Server Security (users and roles).

RandallWilliams — Mon, 18 Apr 2016 13:28:51 GMT

OK, I see.

I see that there are two different errors:

a. When accessing http://ccgisapps.charlestoncounty.org/TheAddresser/ - you get the error you reported.

However, you've set up HTTPS, which means that the site should be accessed over the https protocol, like this:

https://ccgisapps.charlestoncounty.org/TheAddresser/

- note the httpS prefix.

I get a different error here - just operation aborted.

At least part of the issue is that your app is not referencing your GIS Server using httpS.

Your app is referencing your ArcGIS Server over http like this:

http://ccgisapps.charlestoncounty.org/arcgis/rest/info?f=json

I believe you've got this referenced in your settings.js file in the app.

Check lines 44 and 160. Also, lines 211 and 221 reference internal facing hostnames and should be updated.

Essentially:

Update the http references in your settings.js file in your app to use httpS, and update the other references mentioned above to use an external facing machine.

Re: web site that uses ArcGIS Server Security (users and roles).

Brendawheatley — Mon, 18 Apr 2016 13:48:17 GMT

I was just looking at all of this – getting back to the problem from Friday.

Here is why I struggle with it all.

· This site was up and running before we installed the SSL certificate.

· As I set up the SSL, thru ArcGIS Server Admin, I defined the SSL to use both http and https.

· The site that required the SSL works perfectly. However this site is now having the problems where it seems it now wants the https:

I guess since the login is required to the site the https change needs to be made. I will make the changes and get right back to you

Thanks so much

Brenda

Re: web site that uses ArcGIS Server Security (users and roles).

RandallWilliams — Wed, 20 Apr 2016 16:49:43 GMT

Looks like you got this fixed. I'm prompted to authenticate when I access your site via HTTPS. I'd now move to require HTTPS only on this site in your web server so that users don't access the HTTP URL and get errors.

Re: web site that uses ArcGIS Server Security (users and roles).

Brendawheatley — Wed, 20 Apr 2016 17:51:28 GMT

Thank you !

Brenda