|
POST
|
Hello When generating a token it is possible to set client='requestip' when making calls to the REST endpoint. Question: is it possible to tell what IP address had been detected by AGServer for which the token is valild? I have a scenario where our multi machine site is accessed via a loadbalancer. The ELB (this is in AWS) comprises of two redundant LBs for availability reason. Then in Python I request for a token for 'request' IP, then perform a number of operations via REST. I get the token OK, i can even submit gp jobs OK and check for theirs status fine, but occasionally out of sudden my token becomes invalid for a while (its requested for 60mins, but i get the issue sometimes in couple of minutes). For a while all my request signed with the token result in: {u'status': u'error', u'code': 498, u'messages': [u'Invalid token, ClientID does not match.']} Then all goes back to normal, then randomly comes back, and again goes back to normal. After capturing some network traffic i could see how requests going into AGS actually go through different LBs. Requests that come from the LB that was used to obtain the token are fine. Those that come through the other LB fail. Is there a way to tell / get insight into what exactly arcgis server sees when request for a token comes in? Can i tell each time what is the ip address of request that is detected by the server? We suspect this has something to do with some X-Forwarded header setting - perhaps at LB or somewhere else? Regards, Szymon
... View more
05-21-2018
10:39 AM
|
0
|
0
|
1268
|
|
POST
|
Hello According to this FAQ - ArcGIS Monitor Installation & Configuration Q: What databases are supported for the ArcGIS Monitor data repository? A: Only MongoDB version 3.4.x or 3.6.x community server version for Windows Server 2008 R2 64-bit and later, with SSL support x64. Does it mean I need to set up a new Windows Box, install one of the above or is there support for MongoDB hosted on AWS infrastructure? Regards, Szymon
... View more
05-21-2018
06:52 AM
|
0
|
2
|
1000
|
|
POST
|
Perhaps you got the syntax of /addToDefinition wrong and the field should be somehow differently nested in your JSON payload? Different array/attribute name. Deeper in the payload tree etc?
... View more
05-20-2018
04:04 AM
|
0
|
0
|
973
|
|
POST
|
Looking more i think you got your LBs mixed up: Once your write that LB1 is for Portal:"https://LB1.domain.com/portal and https://LB1.domain.com/portal/portaladmin" Then i can see this:"Both of them resolves in a browser, but federation just returns an error stating that https://LB1.domain.com:6443/arcgis is not accessible" <-- 6443 is Server!!!! Then for LB2: Once you state its for Portal: " A second loadbalancer (LB2) was setup, using Microsoft LB. (is practically setup just the same as LB1)" Then you mention it in context of Server (port 6443 is Server !) "Second with <https://LB2.domain.com/arcgis> https://LB2.domain.com/arcgis and <https://LB2.domain.com:6443/arcgis> https://LB2.domain.com:6443/arcgis " You must make sure that LBs are used in right order and purpose. Make sure LB1 is pointing at your S1 and S2 Make sure LB2 is pointing at P1 and P2 Then privatePortalUrl is https://LB2.domain.com:7443/arcgis And for federation use Service URL => https://LB1.domain.com/arcgis Service Admin URL => https://LB1.domain.com:6443/arcgis Remember: when you see 7443 think Portal, 6443 think Server Also if you see a port (7443 or 6443) in a URL then context is always /arcgis , ignore whatever webadaptor name as going via port ALWAYS SKIPS webadadptor and takes you directly to the service
... View more
05-18-2018
10:30 AM
|
0
|
4
|
6179
|
|
POST
|
Are your SSL certificates OK? Do you get errors/warnings in browser when you examine the URLs? Try IE/FF/Chrome, perhaps one of them will compain?
... View more
05-18-2018
08:42 AM
|
0
|
0
|
6179
|
|
POST
|
Hi Michelle, When I look at this quote from your post: "In portaladmin the PrivatePortalURL was set to point to the second loadbalancer (https://LB2.domain.com:7443/portal" I actually think it should be https://LB2.domain.com:7443/arcgis If you load balace traffic over port 7443 then your context is arcgis, not your webadaptor's "portal"
... View more
05-18-2018
07:35 AM
|
1
|
3
|
6179
|
|
POST
|
Thank you for your answer Jonathan. Let me clarify on what i am after. In this box where Administrator URL is to be entered: when federating a server site with a load balancer <ags-lb-host> in front of it, which is preferred: -https://<ags-lb-host>:6443/arcgis OR -https://<ags-lb-host>/<webadaptor> with Admin access enabled on the web adaptor Is there any advantage of one over the other (apart from the need to expose admin access)?
... View more
05-17-2018
03:27 PM
|
0
|
1
|
1721
|
|
IDEA
|
What if you registered some of Server services in AGOL storing the credentials? They would then only have to log in to AGOL. Credentials would be stored in the item once registered: ArcGIS Server web services—ArcGIS Online Help | ArcGIS
... View more
05-17-2018
11:11 AM
|
1
|
1
|
3531
|
|
IDEA
|
What if you registered some of Server services in AGOL storing the credentials? They would then only have to log in to AGOL. Credentials would be stored in the item once registered: ArcGIS Server web services—ArcGIS Online Help | ArcGIS
... View more
05-17-2018
11:11 AM
|
1
|
1
|
1550
|
|
POST
|
Hello Portal Experts, I am wondering what is the difference when it comes to Federating a Highly Available AGS Site through their load balancers. For HA Server -https://<ags-lb-host>:6443/arcgis OR -https://<ags-lb-host>/<webadaptor> with Admin access enabled on the web adaptor Is there any advantage of one over the other (apart from the need to expose admin access?) For HA Portal Likewise, when specifying privatePortalURL on one hand it could be -https://<ptl-lb-host>:7443/arcgis OR -https://<ptl-lb-host>/<webadaptor> with Admin access enabled on the web adaptor Considering this post: Portal privatePortalUrl and Federation Admin Url from Cloud Builder deployment And the remark around setting of X-Forwarded-Host ,it seems its in some cases to easier to set privatePortalUrl to be the same as WebContextURL ? If I am in a scenario where i expose Admin access on my webadaptors would it still be better to federate over 7443/6443?
... View more
05-17-2018
10:54 AM
|
0
|
5
|
1974
|
|
POST
|
This worked for me https://community.esri.com/thread/122100
... View more
05-16-2018
06:49 AM
|
0
|
0
|
1947
|
|
POST
|
Hello Im working on a recovery plan with use of webgisdr. In case of some major corruption, would it be possible to recreate a big-ish complex GIS Site once the basic environment nodes are rebuilt/reconfigured? I am thinking about a scenario where all machines are lost (for example we delete/lose whole AWS account with all that was in it). Then they all are rebuild with Chef to the point that all URLs/DNS names are restored. But in case of rebuild individual machine names do change. Does it matter for the webgisdr? The site has: -HA Portal -Federated Server Site(2boxes) -Hosting Federated Server Site(2boxes) -Relational DataStore(primary+standby) -TileCache DataStore(primary+standby) In case of such disaster recovery im wondering how 'far' does the rebuild have to go before i run webgisdr to restore. Will it be enough just to regenerate 'skeleton' of the GIS Platform? How does the webgisdr interact with SAML providers ? Does the backup contain SAML info? Or do i need to configure it? In that case when - before or after the restore? Regards, Szymon
... View more
05-16-2018
06:44 AM
|
0
|
1
|
1353
|
|
POST
|
Pat, have you fixed that? Is your serve federated? How did you create the .ags connection file in first place? In 10.6 ArcMap if i create a connection to my federated server using Portal BuildIn account and try to publish using it (from ArcMap 10.6) using the standard UI driven publishing process this can be seen: If I create an .ags connection just as described here (therefore passing my SSO/SAML): https://community.esri.com/thread/122100 Then the 'Sharing' tab is active. But this only works for publishing from ArcMap. I cannot get an automated publishing workflow being 'signed in' though.
... View more
05-15-2018
06:42 AM
|
0
|
0
|
1249
|
|
POST
|
Thanks Jonathan. So you are saying I should use CreateGISServerConnectionFile and pass into it my Federated server URL, build-in Portal account Login+Password and use such obtained .ags file to call UploadServiceDefinition_server ?
... View more
05-15-2018
06:32 AM
|
0
|
1
|
1160
|
|
POST
|
Hello Is there a way to overwrite an existing service using arcpy.UploadServiceDefinition_server method having just the SD file, regardless how the SD file has been generated? I can see a sample Upload Service Definition—Help | ArcGIS for Desktop which requires operating on the SDDRAFT, but what if I dont have access to it and all i have is the SD file which i know i want to use to overwrite (or create a new if not existing) service? It seems that currently it is the SD file setting that dominates the process and i dont have control over this. Regards, Szymon
... View more
04-30-2018
08:41 AM
|
0
|
1
|
1641
|
| Title | Kudos | Posted |
|---|---|---|
| 1 | 05-18-2018 07:35 AM | |
| 1 | 03-13-2018 02:19 AM | |
| 1 | 05-17-2018 11:11 AM | |
| 1 | 05-17-2018 11:11 AM | |
| 1 | 06-11-2018 12:17 AM |
| Online Status |
Offline
|
| Date Last Visited |
11-11-2020
02:24 AM
|