Configuration URL has to be accessed from the same machine as WebAdaptor

[SuryaKant]

Hi,

I have installed the ArcGIS for Server 10.3.1, ArcGIS Web Adaptor (Java Platform) 10.3.1, Portal for ArcGIS 10.3.1 and Oracle WebLogic 12c. All installations are on same machine. IIS is disabled on this machine and I have assigned the port 80 to http and 443 to SSL as the pre-requisite for Web Adaptor​. ​

Also, I have deployed Web Adaptor on WebLogic.

If I try to access the Web Adaptor via https://localhost/arcgis/webadaptor or http://localhost/arcgis/webadaptor​, I can able to see the configuration page (pasted the screen shot).

But, when I select Portal for ArcGIS option and click next it redirects to https://system_name_domain/arcgis/webadaptor/portal and shows a message "Configuration URL has to be accessed from the same machine as WebAdaptor" ( message screen shot is given below).

Again, if I try to access the same via system IP then too I get the same message ("Configuration URL has to be accessed from the same machine as WebAdaptor"). This is strange as I am trying to access the Web Adaptor from the same machine where all the software are installed (listed in first line) and it is happening on both http:// and https://

Here is the Web Adaptor deployment screen shot. If I click on the URLs, that also gives the same message

To remove suspicion on IP mapping, I have deployed a sample application and this can be accessible from localhost/application, system_name/application and IP/application. Checked on both http and https.

Please help me in setup of Portal for ArcGIS.

UPDATE: After a while, I tried the ArcGIS Web Adaptor 10.4 and this time I haven't faced any problem as version 10.3.1.

Thanks

[PaulDavidson1]

I can't help with the Java Web Adaptor install but I wasn't quite clear about one thing in your post.

You do know that you have to install two separate web adaptors right?

One for ArcGIS Server and one for Portal?  Each configured independently of the other.

Both can be on the same machine.

Just in case you missed it:

Installing ArcGIS Web Adaptor—Installation Guides (10.3 and 10.3.1) | ArcGIS for Server

[SuryaKant]

Yes Paul, I know that I need two separate web adaptors. But I am using web adaptor only for Portal and add ArcGIS Server in the Portal as federated server. Before posting this question on forum, I went through the esri documents on web adaptor.

My main problem is I am not able to access web adaptor via system domain name (like: https://system_name.domain.com/arcgis/webadaptor). If I get this, then I think I can be able to configure Portal with web adaptor.

[PanagiotisPapadopoulos]

If you try to configure the ArcGIS Server the same message arise?

[SuryaKant]

No, it allows me to configure ArcGIS Server10.3.1 with it. But I don't configure it as I want this web adaptor 10.3.1 works with Portal for ArcGIS 10.3.1 only.

[FelixWiemann]

I have the same problem and i've been sitting on it for hours.

I am using ArcGIS Server and Portal v10.2.2 on Windows Server 2012 R2.

The Web adapter is running on a Tomcat 7.0.77.

I have installed everything on a single Virtual Machine (Hyper-V).

The SSL configuration for the adaptor in my tomcat server.xml is as follows (webadaptor.ks is a self-signed SSL certificate):

<Connector port="80" protocol="HTTP/1.1"                connectionTimeout="20000"                redirectPort="443" />  <Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol"            maxThreads="150" SSLEnabled="true" scheme="https" secure="true"            clientAuth="false" sslProtocol="TLS"             keystoreFile="C:\Program Files\Tomcat 7.0\webadaptor.ks"            keystorePass="passwort"/>

Using the adaptor with ArcgGIS server also works fine.

Does anyone know a proper solution for this?

[PaulDavidson1]

Self signed SSLs are problematic in the Portal world. 

I've had problems that went away as soon as I installed our enterprise cert.

Don't know if that's your issue or not and Esri only talks about security being an issue but if you browse Geonet, you'll see a lot of WA issues where folks mention self-signed and the typical response is: get rid of it.

We run our WA under IIS so can't help with the Tomcat version.

From: Portal and SSL Certs

" HTTPS is always enabled in the portal. It’s strongly recommended that the certificate used be signed by a corporate (internal) or commercial Certificate Authority (CA). The portal itself comes with a self-signed certificate. A self-signed certificate means that a client can’t verify the identity of the server. Replacing the self-signed certificate with a CA-signed certificate greatly improves the security of your deployment."

Good luck... 

PS - this is where I always point folks towards the Chef cookbooks for installing a system, especially a single box solution.  I can stand up a full all in one box in about an hour or two these days, including publishing 10-20 map services, etc...   Most of that time is non-interactive and just letting things run. It took some effort to get to this stage but know I can update our Dev/Test/Prod portals with little effort as well as stand up new AGS VMs with little effort (e.g GeoProcessor, an Imagery server and now Insight (haven't done Insight yet, on the list.) 

Get-Started-With-ArcGIS-Cookbook