Latest Contributions by JasonTipton

Thanks, I had a similar question SDE DB Tune. All the documentation on DB Tune was using the sde utiltiy. I was surprised to see this in 10.2 documentation. ... View more

You will have to install the external cert at your reverse proxy (or whatever is your outermost point). If your NLB is just passing on traffic and not reading the content, I'm not sure whether an internal cert is required, but your IIS Web Adaptor and ArcServer boxes need internal or self-signed certs to be installed. Make sure you pass this test SSL Checker - SSL Certificate Verify ... View more

I'm on 10.2.2. All the WebcontextURL seemed to do is to mess things up.  So, at 10.3, would that X-Forwarded-Host header honor the httpS (and port number) or just server name? Say my site is: https://myGISServer.com and it goes throughh http:////gis/arcgis locally, would the login url be http://myGISServer.com/arcgis/rest/login   OR httpS://myGISServer.com/arcgis/rest/login ... View more

The feeling I am getting from responses and from the traditional support route, is that SSL offloading is not supported, b/c that is what is causing this issue. Here is an ESRI doc mentioning the benefits of using hardware level SSL offloading.http://resources.arcgis.com/en/communities/enterprise-gis/01n20000002n000000.htm ... View more

Already done.... so.....the WebcontextURL. Is it ignored if you are using a WebAdaptor? ... View more

This question is similar: Reverse Proxy - Web Adaptor - ArcGIS Server configuration . The problem here was changing the url without creating a new webadaptor. It seems that the WebContextURL is ignored if you are using a WebAdaptor. Jeff Smith suggested removing the webadaptor fo the WebcontextURL to work or creating a new WebAdaptor. This issue was logged as an enhancement. What is the status of this? and is my WebContextURL being ignored? ... View more

# 2 You can serve both HTTP and HTTPS from the same ArcServer instance, but you could also serve your public content over https as well. ... View more

Here's a little better example of what's going on. Traffic is coming through a reverse proxy on port 443. It is being forwarded on to a load balancer using port 443. The load balancer is doing SSL offloading so it is forwarding unencrypted traffic on to the Web Adaptor now at port 80 (It was 6080, but now 80). The WebAdaptor then forwards traffic to the ArcServer on 6080. Browser  <= 443 =>  Rev Proxy  <= 443 => F5  <= 80 => Web Adaptor <= 6080 => ArcServer I tried setting the WebContextUrl in the admin to httpS://gisserver.xyz.com/arcgis . It didn't seem to change anything. I'm not sure if it is the X-Forwarded Host Headers either, b/c the url's that it is returning have always been the correct url, just http and wrong ports (http://gisserver.xyz.com/arcgis) instead of http://servername.xyz.com/arcgis. I haven't checked the IIS logs, but shouldn't I be able to find those headers in the log? Again, it seems like most urls are relative and start with "/arcgis/....". It's just the admin/login piece that returns the full url path "http://gisserver.xyz.com/arcgis/....". Not sure why it even needs to return the full url. ... View more

I'm not sure there is one. What I've used in the past on SQL Server is to: Select all within a distance threshold Order them by distance select rownum = 1 I'm not an expert in Oracle, but I'm in the process of migrating in to it. I'm more familiar w/ SQL Server so I don't have as much experience writing fancy queries and I still haven't learned all the functions, but something like: select q.*, rownum from(   select t1.objectid oid1, t2.objectid oid2, sde.ST_Distance(t1.shape, t2.shape)   from table t1, table t2   where t1.objectid <> t2.objectid   order by sde.ST_Distance(t1.shape, t2.shape) ) q where rownum =1 A lot of spatial queries seem MUCH slower in Oracle compared to SQL Server, but I have a lot to learn. ... View more

David Coley Thanks so much. I'm in the middle of pushing a lot of upgrades and will be supporting more services and multi-machine sites. I've had nothing but trouble out of 10.2.2 . I've had to destroy and recreate my dev sites several time b/c they get locked up with no amount of restarting to save the day. I'll try this the next time it gets locked up. ... View more

Is your publishing service running on your server? Look at the manger > System > Publishing tools to make sure it is running. Make sure you can get to http://yourserver:6080/arcgis/rest/services/System/PublishingTools/GPServer . If both of those seem normal, your publishing service should be running. Do you have multiple clusters? If so, is your Publishing Tools set to the default cluster? Are you publishing into a new Folder that you are creating at the same time as this new service? I've had issues with this where it "fails" but it actually seemed to succeed, but you keep trying from ArcMap to publish it, b/c you don't know it actually succeeded. It keeps throwing an error b/c it is trying to publish a new service into a new folder, but both actually exist. If you close ArcMap and start over and choose overwrite existing service, it will work, but I usually remove the service anyway and republish for good measure. ... View more

You won't be able to have 2 web servers (ArcServer and IIS) listening on the same port...or at least you shouldn't... You should have 2 options here: 1) Put your web adaptor on another server (if you want to maintain port 6080) 2) Change the port to 80 and use IIS on the same box. You can configure IIS to listen on 6080, but it should probably be on a different box. The only way it might work on the same box is if you have domain filtering on. So, instead of using http://mybox:6080/arcgis, you would need something like http://gissubdomain.mydomain.com:6080. This would filter only the requests to that subdomain on that port. What is the reason you want to keep 6080? The other alternative is just don't use the webadaptor and point straight at the box. ... View more