|
POST
|
I published a zipped file geodatabase, but the publishing process should be analogous for a hosted feature layer through the Portal Home application.
... View more
01-25-2022
07:24 AM
|
0
|
4
|
2856
|
|
POST
|
I gave this a shot just now and was able to use an SSL certificate signed by our internal certifying authority, so wanted to pass along a few thoughts that may (or may not) be applicable in your situation. First, you'll want to make sure the certificate has a subject alternative name matching the DNS alias you specify in the deployment steps (not just a wildcard entry). Second, you'll want to make sure the DNS resolves to your ALB CNAME record prior to kicking-off the deployment. Third, you'll need to import the root CA and any intermediate CA certificates (public keys) into Portal's PortalAdmin and Server's Admin endpoints for both machines. The third step will have to be done following the completion of the deployment, and you'll want to make sure to allow both Portal machines to restart following the certificate import. Hope that helps!
... View more
01-24-2022
05:14 PM
|
0
|
6
|
2861
|
|
POST
|
When you use a PRVC file to authorize ArcGIS Server (or ArcGIS Enterprise on Kubernetes), it has to perform an online authorization with Esri's servers to confirm the validity of the license and create the proper internal license file. By bypassing that process with an ECP file, I believe you'll be in good shape with organization creation. There are other dependencies that require internet-based resources, so I would still recommend configuring the forward proxy settings once the organization creation completes.
... View more
01-14-2022
06:40 AM
|
0
|
2
|
2820
|
|
POST
|
Is this dealing with ArcGIS Enterprise on Kubernetes, by chance? I am thinking so from the mentions of pods and replica sets. If so, the forward proxy settings will be set in the Admin -> Security -> Config API with the appropriate non-proxy hosts defined, but that can only be done after the organization is configured. Another thing to make sure of is that the SSL certificate used for decryption is imported as a trusted certificate prior to setting those values. Configuration (Security)—ArcGIS REST APIs | ArcGIS Developers https://developers.arcgis.com/rest/enterprise-administration/enterprise/security-configuration.htm That leaves us with a few options. You can install ArcGIS Server on a separate machine and go through either the online of offline authorization process, then use the keycodes file to authorize your ArcGIS Enterprise on Kubernetes deployment. This file is typically located in C:\Program Files\Esri\License10.9\sysgen\ and would need to be renamed with a '.ecp' extension before using during the create organization process. An existing keycodes file at the same version (10.9.x) would be adequate as well. Hope that helps!
... View more
01-13-2022
12:16 PM
|
0
|
4
|
2825
|
|
POST
|
It looks like if your domain is hosted through register.com they generate the CSR for you, but otherwise they require a submitted CSR; on principle, the SSL certificate provider shouldn't have (or need) knowledge of the private key of your certificate. I would consider reaching out to their support to see if they can help you gain access to the private key, or walk through the process of rekeying the certificate with a new CSR. Once you have both the private and public key in hand you should be in good shape to convert to a PFX.
... View more
01-11-2022
03:05 PM
|
1
|
1
|
3224
|
|
POST
|
Where/how did you create your certificate signing request (CSR) that you submitted to register.com? Typically the private key is generated when you create the CSR, and the combined signed certificate (public key) and private key can be converted to PFX using a number of different tools. If you used IIS to create the CSR, you can import the signed certificate then export the combined public/private keys as a PFX file directly.
... View more
01-11-2022
01:57 PM
|
0
|
0
|
3228
|
|
POST
|
By default the Application Gateway will use the Standard V2 tier, but admins have the ability to upgrade to the WAF V2 tier in the Azure portal once the deployment is completed.
... View more
01-11-2022
01:51 PM
|
2
|
0
|
2536
|
|
POST
|
This can be caused by a rotation in the certificate(s) used by the IDP to sign the SAML response. I would consider re-exchanging the metadata between your IDP and Portal or more specifically you could compare the 'Certificate' value in your current SAML settings in Portal to what is contained within the SAML assertion using a tool like saml-tracer (browser extension).
... View more
01-10-2022
07:24 AM
|
0
|
1
|
4428
|
|
POST
|
You should be able to run the utility and point the config-store field to a different directory. Since DyanamoDB/S3 are going to use either the access key or IAM role, it won't have the analogous filesystem permissions to reset. I used 'C:\arcgisserver\local' in my test, which proceeded without issue; I would also recommend checking the permissions on the 64-bit Python 2.7 installation (if present, was optional in 10.9.1).
... View more
01-04-2022
08:41 AM
|
0
|
0
|
986
|
|
POST
|
Good point, especially when using Azure-only groups as opposed to groups synchronized from an on-premise Active Directory. Configure group claims for applications with Azure Active Directory | Microsoft Docs https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-fed-group-claims
... View more
12-14-2021
11:49 AM
|
1
|
0
|
3919
|
|
POST
|
With a SAML-based identity store, you'll want to include group membership as part of the SAML assertion for each user. There is a setting in the Portal settings for enabling enterprise group membership as part of the IDP configuration (under advanced settings), which will then allow you to specify the string that matches the value(s) sent in the user's SAML response from the IDP. The group store configuration you've displayed is specific to Windows AD/LDAP group membership, so wouldn't apply in this circumstance. See step 7 here: https://enterprise.arcgis.com/en/portal/latest/administer/windows/configure-azure-active-directory.htm#GUID-6E16C8E9-9FFD-4D89-8FBB-E08828B5369F
... View more
12-14-2021
06:42 AM
|
0
|
0
|
3927
|
|
POST
|
I would try making sure that the installation owner is able to write to the temp directory, another alternative may be to define the IATEMPDIR environment variable to redirect the installer to a known-working directory. Even though it isn't outlined in the docs, it applies to the License Manager installation in the same fashion it does for the other ArcGIS Enterprise components. Monthly Linux Tip: Handling Temp Space in ArcGIS Server https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/monthly-linux-tip-handling-temp-space-in-arcgis-server/
... View more
12-13-2021
07:39 AM
|
1
|
0
|
1758
|
|
POST
|
Typically customers would be using a subdomain of their primary domain, so gis.2nformspatial.com (for example) would be more common although using the primary domain shouldn't cause any issues outside of the validation that you mentioned. Regardless, the A record needs to be configured prior to kicking-off the deployment, so whatever site domain you've input points to the specified elastic IP address. Hopefully the chef-run logs have some more information to crack into this a bit further.
... View more
12-10-2021
10:46 AM
|
0
|
0
|
11005
|
|
POST
|
First, ArcGIS Server requires both DynamoDB and S3 when hosted in AWS cloud storage. DynamoDB is the primary store of config-store information while items that exceed the DynamoDB size limits are stored as pointers in the database to S3 objects. This means that mimicking this deployment style on-prem would require a DynamoDB-compatible database as well. DynamoDB Local is not supported for production deployments by AWS, so that may be a non-starter for ArcGIS Server in this deployment pattern. I did have success with configuring a private S3-compliant object store for Portal for ArcGIS content, but there are a few additional requirements that we will work to incorporate in our documentation. Additionally, the entries in the regionsforcloudstorage.dat are recognized from the .../Portal/framework/etc/ directory as you surmised, but require virtual-hosted style access to be available. This article from AWS goes into the differences in virtual-hosted style and path-style routing and the eventual deprecation of the path-style access. Amazon S3 Path Deprecation Plan – The Rest of the Story | AWS News Blog https://aws.amazon.com/blogs/aws/amazon-s3-path-deprecation-plan-the-rest-of-the-story/ My sample regionsforcloudstorage.dat contained the following information in both the 'regions' and 'Amazon' sections: {
"name": "Custom In-house",
"id": "custom-in-house",
"s3endpoint": "objectstore.domain.com",
"blobStoreEndpoint": "objectstore.domain.com"
} I confirmed my object storage was configured to allow access to portalcontent.objectstore.domain.com and DNS was configured properly for both aliases. Then my Portal for ArcGIS site creation JSON was (using a pre-created bucket named 'portalcontent'): {
"type": "cloudStore",
"provider": "Amazon",
"connectionString": {"accessKeyId":"<accessKey>","secretAccessKey": "<secretKey>","region": "custom-in-house","credentialType": "accessKey"},
"objectStore": "portalcontent"
} FYI: Here is the current latest AWS S3 region file: https://s3.amazonaws.com/esriresources/1091/regionsforcloudstorage.dat
... View more
12-10-2021
10:41 AM
|
1
|
1
|
7391
|
| Title | Kudos | Posted |
|---|---|---|
| 2 | 12-28-2020 09:14 AM | |
| 1 | 09-16-2022 05:19 AM | |
| 1 | 05-01-2023 05:23 AM | |
| 1 | 05-07-2021 06:21 AM | |
| 1 | 09-13-2021 05:44 AM |
| Online Status |
Offline
|
| Date Last Visited |
12-20-2023
11:01 PM
|