Latest Contributions by ZacharyHart

I didn't see it in 10.1 SP0, try uninstalling SP1 and test. I didn't see it either as i wouldn't have been able to register my GIS server with the web adaptor then either. At the time, the analyst indicated the bug was 15 days old. ... View more

Brad, can you please confirm that your 2 certificates were generated independentantly? One from AGS, and the other from IIS. ... View more

Hi Zachary, thank you very much for the quick reply. Since I do not have a countersigned certificate, I would like to explain the architecture shortly. My question in this context is if it is possible to use the SSL secured communication through the WebAdaptor with a selfsigned certificate. Since this is only a testing maschine the WebAdaptor and the ArcGIS Server run on the same maschine which is a notebook with windows 7. So the idea is that the IIS Webserver uses the default selfsigned certificate from the ArcGIS Server as well. In this scenario would be no need for a second certificate which means the IIS WebServer loopsthrough the selfsigned certificate directly to the ArcGIS Server. Regards, Martin I dont think you can enable SSL on the GIS server without configuring your web server to be SSL enabled. So you're going to have to configure IIS7 to be SSL enabled: http://www.iis.net/learn/manage/configuring-security/how-to-set-up-ssl-on-iis My question in this context is if it is possible to use the SSL secured communication through the WebAdaptor with a selfsigned certificate Yes, you can and the tutorials clearly suggest this. Regardless of the web server and GIS server being on the same device, you need to think about them as separate servers....the web adaptor provides a means for the web server to 'talk' to the GIS server. I do not believe there is anyway to use the certificate generated from AGS as your IIS/web site's certificate, there isn't any means for it to be imported. Did you follow the steps in the tutorial I linked to in my other post? ... View more

Martin, i've been through a near exact scenario you are dealing with at the release of 10.1 some time back (the only difference being that we were having the certificate countersigned by a CA); the documentation is a bit vague at the point of IIS. Regarding your specific situation, did you look at the security tutorial here?:http://resources.arcgis.com/en/help/main/10.1/index.html#/Enabling_SSL_using_the_default_self_signed_certificate/0154000005wq000000/ The order of operations is important. At the end, you will essentially re-register your GIS server with the web adaptor (web adaptor config from start menu) but will supply something like https://(machine name or FQDN):6443    [my apologies if you were already aware of that]. As you correctly point out, there isn't any way for IIS to import any export from the GIS server, at least no way that we found even after importing the CA signed certificate to the windows certificate manager. Our solution was to secure our web-server with a different CA signed certificate. You need to configure your web site for SSL as well; let me know what problems you're running into. Lastly, I presume your question about authentication tier is referring to the configuration on your admin site home>security>config>update  Your authentication tier has to do with how you've configured your security: at your GIS server (Token based/built-in) or at the web-tier (in your case IIS/windows based authentication). The current configuration on your admin site should simply be a reflection of that. Perhaps someone else could shed some light on why  you would want to change it at that level. Brad, my take away from all of the endeavors in getting our site secured is that we need to look at the web server and GIS server independently and therefore each as being capable of only generating and importing certificates which originate from itself. So for your web server it must originate from IIS. Let me know if you find the exact answer regarding sharing the cert from one web-server to another (might be possible if they are exactly the same?) as the answer will likely come from your IT and not ESRI. ... View more

After installing SP1 on both Server and Web Adaptor, I'm unable to register the Web Adaptor with Sever.  I get the error: Application Error Unable to register the GIS server with the Web Adaptor. Please make sure that that the GIS server and WebAdaptor are of the same version. Has anyone seen this issue? Dan, I had the same error but without knowing anything else about your site configuration, you may want to look at the thread i started here: http://forums.arcgis.com/threads/72748-SP1-known-bug-Primary-Site-Admin-account-cannot-contain-special-characters-over-SSL?p=254101#post254101 I sure hope that helps! ... View more

I'm also getting an error when trying to register it, but it's a bit different (see attached image).  I have an open ticket with ESRI, but no useful information yet. The adaptor does appear in the adaptor list in the Manager webapp, but gives me a different (proxy-related) error whenever I try to access the REST directory with it. I'm using Linux and deploying the adaptor to Tomcat.  The web adaptor worked fine at 10.1 final, but can't even be registered properly at SP1. i'm running into the same issue with the same error (except my install is with windows/IIS7)...i also tried the fix supplied at the end of the thread as well as spent about 2 hours on the phone with tech support...no luck. 'Upgrades' never go well. ... View more

Hi Zachary, FYI, the timeframe for the next release of the ArcGIS Viewer for Silverlight is the end of the year/early Jan 2013. Highlights of this release include: - built-in identity manager - support for editor tracking Hope this helps, Derek, from a planning standpoint this helps immensely! I feel much more confident about where I can consolidate my efforts and have a better development plan. Thank-you! ... View more

Is there anyway ESRI could look into a release for the SL Viewer which integrates the identity manager functionality sooner than the next major release? This is the absolute only reason i'm still working with Flex right now. I just struggle to understand why securing via a proxy does you any good if you still need to secure the front end of the web application and then what are you to do if your not using windows based authentication and have 60 or so users in your security store on your arcgis server? ... View more

Sorry for misspelling...no way to edit in mobile forums and Droid won't let me access full site for postings. ... View more

Does anyone know a simple way to create a compass rose with true and magnetic north?  Just inserting a north arrow doesn't really do justice to map users. Are you talking about an actual declination compass rose like you'd see for nautical use? Basically this would like a circle within a circle... If you are talking about an actual north arrow, would something like this work for you? [ATTACH=CONFIG]19442[/ATTACH] also: http://mappingcenter.esri.com/index.cfm?fa=ask.answers&q=550http:// ... View more

Thanks for the link, that describes what I want to do and the problem in a nutshell, however it is referring to ArcGIS vers 10 and under.  I'm using 10.1 which is now completely different. You don't turn MXDs into services anymore.... and a lot of other core changes, like having to use arcGIS to publish a map rather than on your own server. Did you register your nonspatial database with your GIS Server? EDIT: tested and I can get related data to publish (even related data out in a nonspatial SQL table) but no editing. ... View more

Ah, i see what you mean now. What if you created an OLEDB connection to the non-spatial DB, I believe you can publish that way? http://forums.arcgis.com/threads/24893-ArcGIS-Conecction-OLE-DB-Publishing-MapService-Problem Search "ArcGIS Server OLEDB connection publish" ... View more