Log into ArcGIS Server Manager fails after Portal for ArcGIS federation

aleborlo — Mon, 24 Mar 2014 16:38:58 GMT

Hi,
after federating ArcGIS Server with Portal for ArcGIS I can no longer access the ArcGIS Server Manager (I know that I need to use a Portal User - in my case Active Directory user).

From Fiddler, using the web adaptor manager URL, I see that a generateToken request to Portal fail:

This is the request URL: https://arcg-s03.gesp-it.priv:444/arcgis/manager/proxy?https://arcg-s03.gesp-it.priv/portal/sharing/generateToken

This is the response:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Bad Request</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
<BODY><h2>Bad Request - Invalid Verb</h2>
<hr><p>HTTP Error 400. The request verb is invalid.</p>
</BODY></HTML>

In fiddler Auth pannel I read:
No Proxy-Authenticate Header is present.
No WWW-Authenticate Header is present.

This is the response on the web page:
[ATTACH=CONFIG]32444[/ATTACH]

Using the admin manager URL (deployed on Geronimo) the generateToken request return a blank response (HTTP 200) but I can not log in.
This is the request URL: https://arcg-s03.gesp-it.priv:6443/arcgis/manager/proxy?https://arcg-s03.gesp-it.priv/portal/sharing/generateToken

In fiddler Auth pannel I read:
No Proxy-Authenticate Header is present.
No WWW-Authenticate Header is present.

[ATTACH=CONFIG]32446[/ATTACH]

This is the response on the web page:
[ATTACH=CONFIG]32445[/ATTACH]

Inside portal log the requests seems to generate these errors (C:\arcgisportal\logs\webserver\catalina.2014-03-24.log):

mar 24, 2014 5:59:19 PM com.esri.gw.filters.ErrorFilter doFilter
SEVERE: Code: 498|Message:Invalid token.|Details:null
mar 24, 2014 5:59:19 PM com.esri.gw.filters.ErrorFilter doFilter
SEVERE: Code: 498|Message:Invalid token.|Details:null
mar 24, 2014 5:59:19 PM com.esri.gw.filters.ErrorFilter doFilter
SEVERE: Code: 498|Message:Invalid token.|Details:null
mar 24, 2014 5:59:19 PM com.esri.gw.filters.ErrorFilter doFilter
SEVERE: Code: 498|Message:Invalid token.|Details:null
mar 24, 2014 5:59:19 PM com.esri.gw.filters.ErrorFilter doFilter
SEVERE: Code: 498|Message:Invalid token.|Details:null
mar 24, 2014 5:59:19 PM com.esri.gw.filters.ErrorFilter doFilter
SEVERE: Code: 498|Message:Invalid token.|Details:null

The token generation works fine if executed directly from https://arcg-s03.gesp-it.priv/portal/sharing/generateToken

Portal side seems to be ok: I can log in with AD users and I was able to import all the map services from the federated ArcGIS Server.

This is my configuration:
Windows Server 2008 R2 Enterprise
Anonymous Authentication to AGS website is enabed from IIS
Windows Authentication is enabled to Portal website from IIS
ArcGis Server is configured to serve only https
Portal is configured to read AD from our domain server

[ATTACH=CONFIG]32447[/ATTACH]

Thanks in advance for you support
Alessandro

Re: Log into ArcGIS Server Manager fails after Portal for ArcGIS federation

mohammedmegahed — Tue, 13 May 2014 08:06:54 GMT

Dear,

facing the exact same issue, still struggling in it, if you found the solution, please update .

Best regards,

Re: Log into ArcGIS Server Manager fails after Portal for ArcGIS federation

Anonymous User — Wed, 14 May 2014 15:27:24 GMT

Original User: jhboyle

Maybe Mr. Law can chime in here, but the first thing I notice is that you're not using 6443 as your port. ArcGIS Server and Portal are pretty picky that you use the default ports.

topic Log into ArcGIS Server Manager fails after Portal for ArcGIS federation in Python Questions

Log into ArcGIS Server Manager fails after Portal for ArcGIS federation

Re: Log into ArcGIS Server Manager fails after Portal for ArcGIS federation

Re: Log into ArcGIS Server Manager fails after Portal for ArcGIS federation