topic Re: secure services and reverse proxy web rest issues in ArcGIS REST APIs and Services Questions

secure services and reverse proxy web rest issues

PeterTimmers — Tue, 30 Aug 2011 22:05:52 GMT

We're having trouble logging into our reverse proxy address.

If I connect to the internal address it works fine. I get the directories a particular user has permission to get to.

If I use the machines reverse proxy external address and I type the login I just go back to the root and no directories have appeared and it's still got a login link up the top right (ie. it hasn't logged in).

I've checked the web.configs in "rest", "Tokens" and "Services" and changed things like the TokenServiceURL.
I'm not using SSL so my TokenServiceURL is something like:
http://<external address>/ArcGIS/tokens/

I've gone into the rest.config and changed <SoarpUrl>, <SoapSslUrl> and <ServicesDirectoryHelpUrl>.

If I go to the external admin login
http://<external address>/ArcGIS/rest/Admin

I get this modification to the url:
http://<external address>/ArcGIS/rest/admin/login?redirect=http%3a%2f%2f<internal address>%2farcgis%2frest%2fadmin

note the internal address in the referer. Is that a hint of what is happening?

Re: secure services and reverse proxy web rest issues

TonyContreras — Wed, 31 Aug 2011 14:40:01 GMT

This can be a complicated situation, depending on the security model implemented. To start, visit the article and pick your Reverse Proxy option, then look over the section for REST and verify that has been configured properly.

Configure Reverse Proxy

Re: secure services and reverse proxy web rest issues

FengLin — Thu, 01 Sep 2011 19:40:59 GMT

Try to disable the "Verify Normalization" on Reverse Proxy Server (ISA 2006):

On ISA web publishing rule, right click > config HTTP policy properties > uncheck "Verify Normalization"

We're having trouble logging into our reverse proxy address.

If I connect to the internal address it works fine. I get the directories a particular user has permission to get to.

If I use the machines reverse proxy external address and I type the login I just go back to the root and no directories have appeared and it's still got a login link up the top right (ie. it hasn't logged in).

I've checked the web.configs in "rest", "Tokens" and "Services" and changed things like the TokenServiceURL.
I'm not using SSL so my TokenServiceURL is something like:
http://<external address>/ArcGIS/tokens/

I've gone into the rest.config and changed <SoarpUrl>, <SoapSslUrl> and <ServicesDirectoryHelpUrl>.

If I go to the external admin login
http://<external address>/ArcGIS/rest/Admin

I get this modification to the url:
http://<external address>/ArcGIS/rest/admin/login?redirect=http%3a%2f%2f<internal address>%2farcgis%2frest%2fadmin

note the internal address in the referer. Is that a hint of what is happening?