WebGISDR: Failed to get the information of the Portal Self. User not allowed for this account

RevZero · ‎11-20-2024

Hi community!

Im trying to make Arcgis enterprise system backup using WebGISDR and receive the following error:

Failed to get the information of the Portal Self. User not allowed for this account

I checked everything I can and everything seems rigth to me:

* I using portal administrator account which is allowed to access both portal and federated hosting server.
* I can curl into portal self endpoint and recieve response with proper data:

C:\Program Files\ArcGIS\Portal\tools\webgisdr>curl -k -u "portaladmin:123qweQWEasd" 
https://gisportal:7443/arcgis/sharing/rest/portals/self?f=json

{"2DStylesGroupQuery":"title:\"Esri 2D Styles\" AND owner:esri_webstyles","3DBasemapGalleryGroupQuery":"title:\"ArcGIS Online 3D Basemaps\" AND owner:esri_en","EsriBoundaryLayersGroupQuery":"title:\"Esri Boundary Layers\" AND owner:esri_boundaries","EsriDemographicLayersGroupQuery":"title:\"Esri Demographic Layers\" AND owner:esri_demographics","access":"public","allSSL":true,"analysisLayersGroupQuery":"","basemapGalleryGroupQuery":"title:\"ArcGIS Online Basemaps\" AND owner:esri_en","colorSetsGroupQuery":"title:\"Esri Colors\" AND owner:esri_en","commentsEnabled":false,"contentCategorySetsGroupQuery":"title:\"ArcGIS Online Content Category Sets\" AND owner:esri_en","culture":"en","customBaseUrl":"portal","defaultBasemap":{"baseMapLayers":[{"layerType":"ArcGISTiledMapServiceLayer","resourceInfo":{"fullExtent":{"ymin":-1.9971868880408604E7,"xmin":-2.0037507067161843E7,"ymax":1.997186888040863E7,"xmax":2.0037507067161843E7,"spatialReference":{"latestWkid":3857,"wkid":102100}},"supportedExtensions":"KmlServer","capabilities":"Map,Tilemap,Query,Data","supportsDynamicLayers":false,"maxScale":70.5310735,"maxImageWidth":4096,"singleFusedMapCache":true,"maxRecordCount":100,"tileInfo":{"lods":[{"level":0,"scale":5.91657527591555E8,"resolution":156543.03392800014},{"level":1,"scale":2.95828763795777E8,"resolution":78271.51696399994},{"level":2,"scale":1.47914381897889E8,"resolution":39135.75848200009},{"level":3,"scale":7.3957190948944E7,"resolution":19567.87924099992},{"level":4,"scale":3.6978595474472E7,"resolution":9783.93962049996},{"level":5,"scale":1.8489297737236E7,"resolution":4891.96981024998},{"level":6,"scale":9244648.868618,"resolution":2445.98490512499},{"level":7,"scale":4622324.434309,"resolution":1222.992452562495},{"level":8,"scale":2311162.217155,"resolution":611.4962262813797},{"level":9,"scale":1155581.108577,"resolution":305.74811314055756},{"level":10,"scale":577790.554289,"resolution":152.87405657041106},{"level":11,"scale":288895.277144,"resolution":76.43702828507324},{"level":12,"scale":144447.638572,"resolution":38.21851414253662},{"level":13,"scale":72223.819286,"resolution":19.10925707126831},{"level":14,"scale":36111.909643,"resolution":9.554628535634155},{"level":15,"scale":18055.954822,"resolution":4.77731426794937},{"level":16,"scale":9027.977411,"resolution":2.388657133974685},{"level":17,"scale":4513.988705,"resolution":1.1943285668550503},{"level":18,"scale":2256.994353,"resolution":0.5971642835598172},{"level":19,"scale":1128.497176,"resolution":0.29858214164761665},{"level":20,"scale":564.248588,"resolution":0.14929107082380833},{"level":21,"scale":282.124294,"resolution":0.07464553541190416},{"level":22,"scale":141.062147,"resolution":0.03732276770595208},{"level":23,"scale":70.5310735,"resolution":0.01866138385297604}],"origin":{"x":-2.0037508342787E7,"y":2.0037508342787E7},"format":"JPEG","compressionQuality":90,"rows":256,"dpi":96,"spatialReference":{"latestWkid":3857,"wkid":102100},"cols":256},"units":"esriMeters","currentVersion":10.3,"supportedImageFormatTypes":"PNG32,PNG24,PNG,JPG,DIB,TIFF,EMF,PS,PDF,GIF,SVG,SVGZ,BMP","exportTilesAllowed":false,"maxImageHeight":4096,"tables":[],"supportedQueryFormats":"JSON, AMF","initialExtent":{"ymin":-2077452.082122866,"xmin":-2.8848255049479112E7,"ymax":1.6430757376790084E7,"xmax":2.8848255049479112E7,"spatialReference":{"latestWkid":3857,"wkid":102100}},"layers":[{"subLayerIds":"Portal for ArcGIS","maxScale":0,"name":"Citations","defaultVisibility":false,"id":0,"minScale":0,"parentLayerId":-1}],"mapName":"Layers","minScale":5.91657527591555E8,"spatialReference":{"latestWkid":3857,"wkid":102100}},"url":"https://services.arcgisonline.com/ArcGIS/rest/services/World_Topo_Map/MapServer"}],"title":"Topographic"},"defaultExtent":{"ymin":-12000000,"xmin":-18000000,"ymax":16000000,"xmax":18000000,"spatialReference":{"wkid":102100}},"defaultVectorBasemap":{"baseMapLayers":[{"layerType":"ArcGISTiledMapServiceLayer","visibility":true,"id":"World_Hillshade_3805","opacity":1,"title":"World Hillshade","url":"https://services.arcgisonline.com/arcgis/rest/services/Elevation/World_Hillshade/MapServer"},{"layerType":"VectorTileLayer","visibility":true,"id":"VectorTile_2333","styleUrl":"https://cdn.arcgis.com/sharing/rest/content/items/7dc6cea0b1764a1f9af2e679f642f0f5/resources/styles/root.json","type":"VectorTileLayer","title":"World Topographic Map","opacity":1}],"title":"Topographic"},"description":"<br/>","eueiEnabled":false,"featuredGroups":[{"owner":"portaladmin","title":"Featured Maps and Apps"}],"featuredGroupsId":"","featuredItemsGroupQuery":"","galleryTemplatesGroupQuery":"title:\"Gallery Templates\" AND owner:esri_en","hasCategorySchema":false,"helpBase":"/arcgis/portalhelp/en/","helperServices":{"analysis":{"url":"https://gisserver/gis/rest/services/System/SpatialAnalysisTools/GPServer"},"asyncGeocode":{"url":"https://gisserver/gis/rest/services/Utilities/GeocodingTools/GPServer"},"defaultElevationLayers":[{"layerType":"ArcGISTiledElevationServiceLayer","id":"globalElevation","url":"https://elevation3d.arcgis.com/arcgis/rest/services/WorldElevation3D/Terrain3D/ImageServer"}],"geocode":[{"westLon":"Xmin","southLat":"Ymin","name":"ArcGIS World Geocoding Service","batch":false,"placefinding":true,"northLat":"Ymax","eastLon":"Xmax","suggest":true,"url":"https://geocode.arcgis.com/arcgis/rest/services/World/GeocodeServer"}],"geometry":{"url":"https://utility.arcgisonline.com/arcgis/rest/services/Geometry/GeometryServer"},"packaging":{"url":"https://gisserver/gis/rest/services/Utilities/OfflinePackaging/GPServer"},"printTask":{"url":"https://gisserver/gis/rest/services/Utilities/PrintingTools/GPServer/Export%20Web%20Map%20Task"},"rasterUtilities":{"url":"https://gisserver/gis/rest/services/Utilities/RasterUtilities/GPServer"},"symbols":{"url":"https://gisserver/gis/rest/services/Utilities/Symbols/SymbolServer"}},"homePageFeaturedContent":"","homePageFeaturedContentCount":12,"id":"0123456789ABCDEF","isPortal":true,"layerTemplatesGroupQuery":"title:\"Esri Layer Templates\" AND owner:esri_en","livingAtlasGroupQuery":"","name":"ArcGIS Enterprise","portalHostname":"gisportal.local/gis","portalMode":"singletenant","portalName":"ArcGIS Enterprise","portalProperties":{"homePage":"modernOnly","mapViewer":"modern","semanticSearchEnabled":true},"portalThumbnail":null,"rasterFunctionTemplatesGroupQuery":"title:\"Raster Function Templates\" AND owner:esri_en","rotatorPanels":"","staticImagesUrl":"/gis/portalimages","stylesGroupQuery":"title:\"Esri Styles\" AND owner:esri_en","supports3DTilesServices":false,"supportsHostedServices":true,"symbolSetsGroupQuery":"title:\"Esri Symbols\" AND owner:esri_en","templatesGroupQuery":"title:\"Web Application Templates\" AND owner:esri_en","thumbnail":null,"units":"english","use3dBasemaps":true,"useVectorBasemaps":true,"vectorBasemapGalleryGroupQuery":"title:\"ArcGIS Online Vector Basemaps\" AND owner:esri_en","hostedServerHostedFolder":"Hosted","supportsHostedNotebooks":false,"supportsSceneServices":false,"hasRelationalArcGISDataStore":true,"hasSpatioTemporalArcGISDataStore":false,"httpPort":7080,"httpsPort":7443,"supportsOAuth":true,"samlEnabled":false,"disableSignup":true,"isReadOnly":false,"currentVersion":"2024.2","enterpriseVersion":"11.4.0","enterpriseBuild":"54309","supportsEmail":false,"portalDeploymentType":"ArcGISEnterprise","isWebTierAuth":false,"hasClassificationSchema":false}

* My backup config file for this test setup is also looks proper:

BACKUP_STORE_PROVIDER = FileSystem
SHARED_LOCATION = C:\\backup\\temp
BACKUP_LOCATION = C:\\backup
BACKUP_RESTORE_MODE = full
PORTAL_ADMIN_URL = https://gisportal.local:7443/arcgis
PORTAL_ADMIN_USERNAME = portaladmin
PORTAL_ADMIN_PASSWORD = k6zhh0xbsMhqETdy7i5m1w==
PORTAL_ADMIN_PASSWORD_ENCRYPTED = true

I using ver 11.4 for this setup. The portal, server and server datastore are deployed to the different VMs within the same network. Connectivity and firewalls are OK too.

Hope you can advise something here because I deeply stuck.

Thank you.

simoxu · ‎11-24-2024

Hi,

The SHARED_LOCATION and BACKUP_LOCATION doesn't seem right.

As you said, you have multi-machine deployment, the SHARED_LOCATION,BACKUP_LOCATION should be a file share which can be accessed by all your enterprise component, portal, server and datastore, which means the account you use to run portal, server and datastore in windows, should be able to access the file share (UNC path)

Hope this helps.

Gaius_Kuttappan · ‎11-27-2024

That's true. These locations should be accessible for Portal, GIS Server/s and Data Store machines to create the backup.

@RevZero Additionally, I would request you to check if all URLs are configured correctly and accessible from every machine in the environment. Have you checked the Portal Index status? If not in sync, try reindex. Please take the a snapshot of the machines before making any changes 🙂

RevZero · ‎12-02-2024

Hi @simoxu and @Gaius_Kuttappan ! Thank you for your reply!

Unfortunatelly this does not help to solve the issue.

Here what I have done:
1. Create shared location for the SHARED_LOCATION and BACKUP_LOCATION and make sure all three server can write to it:

>copy NUL \\gisserver\share\backup\test.txt
        1 file(s) copied.

2. I checked indexer status and reindex all. Seems like it is OK:

3. I checked connectivity between the servers once again:

C:\Program Files\ArcGIS\Portal\tools\webgisdr>curl -k --head https://gisportal.local
HTTP/1.1 200 OK
...

C:\Program Files\ArcGIS\Portal\tools\webgisdr>curl -k --head https://gisserver.local
HTTP/1.1 200 OK
...

C:\Program Files\ArcGIS\Portal\tools\webgisdr>curl -k --head https://gisds.local:2443
HTTP/1.1 302
...

Maybe I missed something once again.
The error message is the same

TimoT · ‎12-02-2024

While what everyone is saying about the SHARED_LOCATION is true, the BACKUP_LOCATION can be a local path and is not related to ArcGIS Enterprise service account permissions; only the account running the webgisdr tool requires write access.

Regardless, your error message would most likely be different if the only issue was a misconfiguration of the shared/backup location in the properties file.

Your error potentially indicates further investigation required on the authentication side of things. Your properties file uses an FQDN in the Portal_Admin_URL parameter, but your initial curl test with portaladmin credentials does not, thus your testing results in this post are inconclusive.

Some other points worth investigating:

Have you tried gisportal.local/gis (based on your initial post, it looks like this is your public Portal URL) as the Portal_Admin_URL?
Are you using IWA or PKI based authentication?
If you must use the 7443 Portal URL, can the account running the webgisdr tool access https://gisportal.local:7443/arcgis (e.g. try https://gisportal.local:7443/arcgis/home, https://gisportal.local:7443/arcgis/sharing/rest, https://gisportal.local:7443/arcgis/portaladmin) and login successfully with portaladmin credentials?

Gaius_Kuttappan · ‎12-02-2024

Thank you for sharing information, however, some additional info will be helpful to understand the issue:

Did you recently upgrade from previous version to 11.4?
Are the federation URLs and URLs in security config file (\arcgisserver\config-store\security\security-config.json) same? privatePortalURL, privateHostingServerURL, portalURL and serverURL.
Have tried to create backup using another built-in account with similar admin privileges? OR tried reset the password for portaladmin and backup again? This would be worth checking.
As @TimoT mentioned, IWA or PKI info will be helpful.

simoxu · ‎12-02-2024

Adding to what @TimoT said in the post, use an FQDN for the Portal_Admin_URL and make sure you have a valid SSL certificate for the FQDN

Check your settings according to ESRI document:

https://enterprise.arcgis.com/en/portal/latest/administer/windows/populate-webgisdr-tool-properties-...

RevZero · ‎12-03-2024

Thank you for your time gyus.

I will try to answer all your questions.

Have you tried gisportal.local/gis (based on your initial post, it looks like this is your public Portal URL) as the Portal_Admin_URL?

I tried all the possible combinations. Through adapter using FQDN and hostname as well as using native portal endpoint (through 7433 port)

If you must use the 7443 Portal URL, can the account running the webgisdr tool access https://gisportal.local:7443/arcgis (e.g. try https://gisportal.local:7443/arcgis/home, https://gisportal.local:7443/arcgis/sharing/rest, https://gisportal.local:7443/arcgis/portaladmin) and login successfully with portaladmin credentials?

Yes I can log in.
Are you using IWA or PKI based authentication?

Not sure what is mean here to be honest. I use portal built-in storage for the user accounts.

Did you recently upgrade from previous version to 11.4?

No it is fresh setup literally to test possibility to make replication using WebGISDR 🙂

Are the federation URLs and URLs in security config file (\arcgisserver\config-store\security\security-config.json) same? privatePortalURL, privateHostingServerURL, portalURL and serverURL.

Yes they are.

I even tried to unfederate the server to make just portal backup. And still have this issue 😞
Have tried to create backup using another built-in account with similar admin privileges? OR tried reset the password for portaladmin and backup again? This would be worth checking.

Yes tried this as well.

Only one thing I do not really understand is IWA or PKI question. As I mentioned earliar account that I use is created in the portal built-in storage. The FQDN domain SSL certificate is the only thing I can connect to the PKI so:
Certificate is self-signed with valid CN

Gaius_Kuttappan · ‎12-03-2024

Thank you @RevZero. I believe this is a workgroup machine. If the we could try a hosts file entry of IP and hostname (gisportal.local) then reboot the machine to record the changes. Run the WebGISDR backup again.