Latest Contributions by RandallWilliams

I doubt it - I also went though my web adaptor (on Tomcat, installed on the same box as my Portal). Is there anything notable in the portal logs? ... View more

Strange. I'm on 10.5.1 on Linux, works for me, the 'create an account' button is gone. Which version are you working with? ... View more

Hmm, are the curly braces set correctly? {"disableSignup": "true"} ... View more

With web tier auth users will get the web tier challenge, like an IWA login. Personally, I'd go with SAML over web tier in this case. ... View more

HI Cassandra, Here's the doc for this: http://server.arcgis.com/en/portal/latest/administer/linux/disabling-users-ability-to-create-builtin-portal-accounts.htm ... View more

Where are you stuck? You stated that you've installed 10.5.1, but you haven't stated an actual problem. ... View more

OK. So that S3 bucket is mounted on both machines? Another question: Is it always the same record(s) that have this problem, or is it random? This almost seems like a concurrency or locking file issue of some sort, but that wouldn't make much sense on a per-record basis.   Have you tested with other data sources, like FGDB or a PGSQL database? ... View more

Weird. A few questions: a. How many GIS Servers are in the site? b. What's the data source (looks like a shape file?) c. Any usual characters in that record? d. Is data copied to your server when you publish, or are you referencing it on a share somewhere? ... View more

Hi Robert, That's assuming the only way into the GIS Server is through a proxy. That said, an admin can certainly use firewalls or similar to prevent requests from anywhere but a specific IP range (ie: the resource hosting the proxy). ... View more

Unless I'm misunderstanding, the problem with this solution is that now any user that can reach your print task will be able to print your secured services, regardless of authorization to the service itself. ... View more

Starting in 10.2, ArcGIS for Server can function in a multiple domain forest.  To support this, if enterprise users and built-in roles are used, the enterprise users are linked to roles based on username and domain name.  For this reason, with GIS-tier authentication, both the Active Directory username and domain are needed when signing in to access secured services. When 'Allow access to all users' is enabled, the username alone will work but the authenticated user will not be assigned to the corresponding role(s). If your installation of ArcGIS Enterprise is internal only, you can add your GIS Server and Portal to your list of trusted sites in IE and achieve a single sign on solution where the browser will pass the current domain credentials to the web adaptor. ... View more

Hi Dave, https://yourgisserver:6443/arcgis/admin/security/tokens, what's the value for shortTimeout set to? ... View more

I think I see the confusion here. Matthew above is correct. You mention the DOC here: http://server.arcgis.com/en/server/latest/administer/windows/disabling-administrative-access-to-arcgis-server-on-port-6080.htm This workflow would only apply if you're leveraging Windows users and roles and Web tier authentication. Assume: a. The Primary Site Admin (PSA) credentials are kept under clock and key, b. Web tier authentication is used When using web tier auth and when the PSA account credentials are not shared amongst users, then only members in the enterprise user and role store who are themselves members of an ArcGIS Server ADMIN role can administer the GIS Server. If admin access via the web adaptor is disabled, only the PSA can admin the server - which we're assuming nobody has these credentials. So...you'd HAVE to allow users to admin the machine through the web adaptor - otherwise users wouldn't be able to authenticate correctly. If my GIS Server is publicly accessible, I don't like using windows users and roles and web tier authentication. I'd disable admin access via the web adaptor and enable internally at the GIS tier. In ANY condition, as is alluded to earlier, administrative access should be via HTTPS - if via the GIS tier that's port 6443. In general and in any web site/application, it's preferable that any information passed through a form use HTTPS. Otherwise, it's very easy for a man in the middle to intercept whatever data is passed - including user credentials. ... View more

With regard to this note: The browser cannot access   when it is prefixed by https://, however, it is accessed when using http://. Correct. The resource should be added to your web map as https://arcgisportal/crts-staff.local:6443/arcgis/rest/whateveryourservicenameis 6080 is the http port 6443 is the https port ... View more