Latest Contributions by RandallWilliams

One thing stuck out to me: "Currently, IIS has been configured with bindings for ports 80, 6080 and 6443." The only IIS bindings you need are ports 80 and 443.  ArcGIS Server is Java based and contains it's own web server - this web server runs on 6080/6443.  If IIS is bound to 6080 and 6443, then that's going to cause problems. On Windows, two different processes cannot be bound to the same ports. My guess is that ArcGIS Server can't start properly because the ports it's attempting to bind to have already been claimed by IIS.  Remove the 6080/6443 bindings from IIS, add 443. Curious if that helps. ... View more

Are you literally just buffering points? ArcGIS Server's default geometry service will do that and more. What is the geometry service?—Documentation | ArcGIS Enterprise  GeometryService | API Reference | ArcGIS API for JavaScript 4.6  ... View more

I'd install a tool like fiddler, configure it to capture and decrypt https traffic (tools>options>https), and attempt to make your connection with Desktop. Fiddler will record your traffic. When the connection fails, find the attempt to connect to the admin endpoint and click the 'web view' tab. Typically if the issue is related to a firewall of some sort, you'll see the firewalls response in the webview tab, which will at least give you a better idea. ... View more

Because your internal CA is not a 'well known' CA, it's not in your certificate store on your client machines. Like Ryan mentions above, you need to import your cert into the store for it to be trusted. ... View more

Personally, I'd upgrade the GIS Server to 10.6, then install Portal/Web adaptor/Data Store 10.6 and then Federate. ... View more

I have an issue open with Esri Support. From where I'm sitting, the issue is actually a little more severe. If I attempt to stage a GP service, using the option to copy data into the service definition, Desktop looks for that invalid .sde connection file and fails to stage the .SD. I'll follow up with the bug # once they've logged it. ... View more

Note that the above doc is dated - likely for 10.3. At 10.4+, HTTP and HTTPS are enabled by default. ... View more

From: FAQ: How does ArcGIS Server token authentication work? https://support.esri.com/en/technical-article/000011851 All Esri clients and APIs send usernames and passwords over https (encrypted) if it is enabled. If it's not enabled, then usernames/passwords may be sent as clear text over the network. To prevent this, it is strongly recommended that https be enabled in ArcGIS Server when using GIS-tier authentication. It is not enabled by default. Tokens can be acquired through either an HTTP GET or an HTTP POST. Using a POST is always more secure. GET requests may leave usernames/passwords in network equipment history and in the browser history. Esri APIs and products use POST when acquiring tokens. However for the convenience of people writing scripts, tokens can be acquired via GET requests. Esri recommends against obtaining tokens via GET requests in secure environments. ... View more

I see the same thing publishing from Desktop 10.6 to Server 10.6. This looks like a bug to me. If instead of publishing you stage the service (copying data), the service analyzer throws an error like: SEVERITY STATUS CODE DESCRIPTION NAME TYPE High Unresolved 00068 Script Script contains broken project data source: C:\Users\xxx\AppData\Local\ESRI\Desktop10.6\Staging\server on mymachine.esri.com (admin)\0\v101\connectionfile1.sde Script Tool I don't have a connectionfile1.sde. I just have a connectionfile.sde ... View more

To second what Jonathan said, why would you want tokens over http? Plain-text defeats the purpose of securing the service at all. ... View more

I just dropped an icon into the root of my web server (not the web adaptor root), and it worked for me. I had to navigate to the site root (for me the IIS Start page) for the browser to 'see' it. After that, it was cached and just works. ... View more

Please upgrade to 10.2.1 or 10.2.2 (or upgrade to a higher supported version of ArcGIS Enterprise), and apply the applicable existing patches for those versions. There are more important security fixes to be gained in an upgrade to a newer version (at least 10.2.1 or 10.2.2) than the issue resolved in this patch. There are other security patches that may be applied at 10.2.2. ... View more

If you press f12 when this issue happens, what errors do you see in the browser console? ... View more

Yes, this request is under consideration. ... View more

Hi Gianni, This is a question that I've been asked more than once recently. ArcGIS Enterprise does not at this point support MFA in the same way that AGO does. With that said, this may be achieved by using a SAML provider (like OKTA or similar) that itself supports MFA.  Configure Okta—Portal for ArcGIS (10.6) | ArcGIS Enterprise  ... View more