Latest Contributions by SzymonPiskula1

Hello When generating a token it is possible to set client='requestip' when making calls to the REST endpoint. Question: is it possible to tell what IP address had been detected by AGServer for which the token is valild? I have a scenario where our multi machine site is accessed via a loadbalancer. The ELB (this is in AWS) comprises of two redundant LBs for availability reason. Then in Python I request for a token for 'request' IP, then perform a number of operations via REST. I get the token OK, i can even submit gp jobs OK and check for theirs status fine, but occasionally out of sudden my token becomes invalid for a while (its requested for 60mins, but i get the issue sometimes in couple of minutes). For a while all my request signed with the token result in: {u'status': u'error', u'code': 498, u'messages': [u'Invalid token, ClientID does not match.']} Then all goes back to normal, then randomly comes back, and again goes back to normal. After capturing some network traffic i could see how requests going into AGS actually go through different LBs. Requests that come from the LB that was used to obtain the token are fine. Those that come through the other LB fail. Is there a way to tell / get insight into what exactly arcgis server sees when request for a token comes in? Can i tell each time what is the ip address of request that is detected by the server? We suspect this has something to do with some  X-Forwarded header setting - perhaps at LB or somewhere else? Regards, Szymon ... View more

Hello Portal Experts, I am wondering what is the difference when it comes to Federating a Highly Available AGS Site through their load balancers. For HA Server -https://<ags-lb-host>:6443/arcgis OR -https://<ags-lb-host>/<webadaptor> with Admin access enabled on the web adaptor Is there any advantage of one over the other (apart from the need to expose admin access?) For HA Portal Likewise, when specifying privatePortalURL on one hand it could be  -https://<ptl-lb-host>:7443/arcgis OR -https://<ptl-lb-host>/<webadaptor> with Admin access enabled on the web adaptor Considering this post: Portal privatePortalUrl and Federation Admin Url from Cloud Builder deployment  And the remark around setting of X-Forwarded-Host ,it seems its in some cases to easier to set  privatePortalUrl to be the same as WebContextURL ?   If I am in a scenario where i expose Admin access on my webadaptors would it still be better to federate over 7443/6443? ... View more

Hello Im working on a recovery plan with use of webgisdr. In case of some major corruption, would it be possible to recreate a big-ish complex GIS Site once the basic environment nodes are rebuilt/reconfigured? I am thinking about a scenario where all machines are lost  (for example we delete/lose whole AWS account with all that was in it). Then they all are rebuild with Chef to the point that all URLs/DNS names are restored. But in  case of rebuild individual machine names do change. Does it matter for the webgisdr? The site has: -HA Portal -Federated Server Site(2boxes) -Hosting Federated Server Site(2boxes) -Relational DataStore(primary+standby) -TileCache DataStore(primary+standby) In case of such disaster recovery im wondering how 'far' does the rebuild have to go before i run webgisdr to restore. Will it be enough just to regenerate 'skeleton' of the GIS Platform? How does the webgisdr interact with SAML providers ? Does the backup contain SAML info? Or do i need to configure it? In that case when - before or after the restore? Regards, Szymon ... View more

Hello Is there a way to overwrite an existing service using arcpy.UploadServiceDefinition_server method having just the SD file, regardless how the SD file has been generated? I can see a sample Upload Service Definition—Help | ArcGIS for Desktop  which requires operating on the SDDRAFT, but what if I dont have access to it and all i have is the SD file which i know i want to use to overwrite (or create a new if not existing) service? It seems that currently it is the SD file setting that dominates the process and i dont have control over this. Regards, Szymon ... View more