POST
|
An Update on this topic. So the CA issued (the real) SSL expired a few days ago and of course the Portal was not loading anymore by going to https://gis.MYDOMAIN.com/portal/home/ Here is how the issue was fixed: 1) Obtained a new SSL from a CA authority (using the IIS route of making a Cert request CSR file). 2) Installed the new SSL on the Reverse Proxy server (completing the certificate request in IIS) 3) Exported the SSL from step #2 to a PFX file (inside IIS) 4) Importing the PFX SSL in the ArcGIS Server machine 5) Binding the IIS site in the ArcGIS Server machine to the newly imported Cert 6) Restarting the ArcGIS Server machine. May not be necessary but still did it. HTH someone!
... View more
02-24-2020
05:24 AM
|
0
|
0
|
857
|
POST
|
No luck. Changing from http to https actually returns an error like Invalid response from the server while acting as Reverse Proxy. It would be nice if your setup is detailed in a documentation: 1) Where to set the Web Context URL (mine was set at the Portal Admin page; just tried at ArcGIS Server admin page but not luck). 2) SSL certificate(s) on be installed on the internal machine's IIS (or elsewhere as well?) 3) URL Re-write Rules, Server Farm setting. Being so close and yet so far for me. Or maybe resetting the environment is needed on my end! Thanks
... View more
02-06-2019
12:34 PM
|
0
|
6
|
3013
|
POST
|
I will check later. Only difference, top of the head, is in my case the 'scheme' is http and not https in the Action Properties. The rest of the settings are default/similar to your's. I will be back. Thanks
... View more
02-06-2019
11:28 AM
|
0
|
0
|
3013
|
POST
|
Also, if I go to the http version of the Portal home page and click on Signin link then the same error happens: ArcGIS Portal insists on redirecting to the httpS page, this is despite me turning off SSL required in the Security page of the Portal (via the Portal's public interface). FYI. Thanks
... View more
02-01-2019
06:44 AM
|
0
|
10
|
2488
|
POST
|
Thank you. My Portal is set to only allow HTTPS and, yes, I reach the portal homepage via https://gis.mydomain.com/portal and then click on the Signin page, upon which I see the redirects. I hope I understood your question correctly.
... View more
01-28-2019
09:26 AM
|
0
|
0
|
2489
|
POST
|
Thank you. Yes,we have the ARR module also installed but no Proxy is set there and so I am not sure if ARR is even doing anything. The URL Rewrite module has a few rules, as in my Question above. I am not sure how to set the X-Forwarded-Headers in IIS? Yes, the https://gis.mydomain.com/signin.html does get directed properly to the internal server's IIS--I can see that in the internal server's IIS logs with a bunch of entries like https://gis.mydomain.com/signin.html with code of 302; I believe the same response is seen in the browser. I think I am close: Except for the signin.html (and the PortalAdmin page) every part of the Portal is accessible which doesn't require a login. Yes, please look into it. It should not be hard to duplicate the environment for ESRI and come up with instructions. We have no other issues setting up other Reverse Proxy rules for ArcGIS Servers using IIS and URL Rewrite. Thanks!
... View more
01-24-2019
10:09 AM
|
0
|
16
|
2489
|
POST
|
If I disable the Rewrite rules then the portal is unreachable from outside to the address like https://gis.mydomain.com/portal I can't believe that there is not step by step directions provided by ESRI or anyone else which would work for Windows and IIS server. ESRI's Windows RP documentation mentions Apache in Windows environment!! Or I must be missing something obvious.
... View more
01-23-2019
05:31 PM
|
0
|
18
|
3779
|
POST
|
Hi, Thank you. There are several dozens of such entries--as in this screen cap below--but none of them are directing to Portal/admin. The screen cap shows what happens, when on the home page, one clicks on the signin.html page. Again, the rest of the SSL functionality works fine. I **think** , as I said above, my URL rules don't work on the HTTPS schema may give some clue--the rules are now part of the original Question above.
... View more
01-23-2019
12:52 PM
|
0
|
20
|
3779
|
POST
|
Added a screen cap of the Reverse Proxy Rules in the original Question.
... View more
01-22-2019
12:37 PM
|
0
|
0
|
3779
|
POST
|
Hi, Yes, that domain does resolve fine on some other machines when the 'host' file is modified to target the internal server--thus bypassing the Reverse Proxy server. Interesting thing about calling the portal admin url is that it tries to find multiple portal end points: Portal (via SSL) /portal/portaladmin/ (not SSL/not secure). Both end points still show 302 error. One clue might be that in my URL Rewrite rules, as in my post above, the 'schema' of http makes it work but having httpS doesn't matter even if I disable those rules. Thanks!
... View more
01-22-2019
12:30 PM
|
0
|
0
|
3779
|
POST
|
Hi Daniel, Unfortunately, the same http redirect error. Of course I am able to see this link when bypassing the Reverse Proxy. https://gis.mydomain.com/portal/portaladmin Thanks.
... View more
01-22-2019
12:21 PM
|
0
|
3
|
3779
|
POST
|
Hello, I have not been able to find step by step directions for ArcGIS for Portal and Reverse Proxy which uses IIS as a server. I have a setup in place which mostly work but fails at one critical point. Here's the setup: 1) Reverse Proxy Server (Windows) with static IP address accessible from the outside (only ports 80/443 allowed in). 2) An internal machine ('GIS') which has ArcGIS for Portal and Server installed along with their respective Web Adaptors ('portal' and 'arcgis' respectively). 3) The Portal also has WebContextURL of like 'https://gis.mydomain.com/portal' 4) The RP server has a couple of URL Rewrite entries--basically, direct to Server Farm which has the 'GIS' machine. 5) A proper SSL certificate is install as gis.mydomain.com in the IIS of both the RP server and the 'GIS' server. So far this setup works great: I am able to access all content from the outside, such as https://gis.mydomain.com/portal/home and Gallery etc. But clicking on the Signup link in the Portal home page generates a browser error: Too Many Redirects (Header of 302). So the header being passed backed from the internal machine is 302 instead of 200. I don't know what's happening. Maybe some extra security comes in picture when the signup.html page is called? Any idea? Thanks! Irfan *** Update: Reverse Proxy Rules Screen Cap Added in this Question***
... View more
01-21-2019
05:21 AM
|
1
|
30
|
13544
|
POST
|
This maybe not be possible but trying anyway. I have a Map Service with geometry features published. Two of the columns are 'Zone1' and 'Zone2' with values like 'ABC' or 'DEF'. The values of 'ABC' or 'DEF' can be present in both columns in the same row. There is also a static 'lookup table' with a column named ZONECLASS and values like 'ABC' or 'DEF'. The static table is also published as layer in the along with the layer with geometry. So far so good. What I am trying to do is that inside ArcGIS Online's Arcade Expression, query the static table's layer and get that data displayed inside ArcGIS Online. The query works in the browser as: http://servicepath/MapServer/1/query?where=ZONECLASS=%ABC27&outFields=DOCNAME But how to bring value of the DOCNAME field inside ArcGIS Online? I have built an expression as above url but that's just a string. I need to get the output. Is that even possible? Any alternate solutions? Thanks.
... View more
05-29-2018
02:01 PM
|
0
|
2
|
1242
|
POST
|
Hi, This is rather a quick write up / instructions-set then a question. It took me quite a while to make IIS to act as reverse proxy to process websocket requests for GeoEvent extension and I am sharing my experience here to help the larger community. I am mentioning a couple of people here who might find this post particularly useful: Marc Graham and RJ Sunderman . Please feel free to modify/improve this write up--this is really a quick job--with at least possibly grammar errors Some background info: 1) For general info on ArcGIS Reverse Proxy setup, please refer to: How To: Set up a reverse proxy with ArcGIS 10.1 for Server on IIS ARR 2) For GeoEvent extension's Reverse Proxy setup, please refer to: https://community.esri.com/community/gis/enterprise-gis/geoevent/blog/2016/02/05/using-iis-application-request-routing-arr-to-proxy-geoevent-stream-services My setup (a development setup!): 1) Windows 10 Pro running IIS 10 with the latest ARR installed (I think via the Web Platform installer--it's important because the standalone ARR/URL Rewrite on Microsoft site **seems** to have some problems). 2) A VM running ArcGIS 10.3.1 Server with the GeoEvent extension and ArcGIS WebAdaptor 2b) Possibly NO network level port forwarding to the VM needed in this case? 3) Setup in IIS: See this screen cap: Pretty much sums up! Although I think the Rewrite rules could be improved? 4) On the ArcGIS Server VM, go to: http://localhost:6080/arcgis/admin/system/properties and enter: {"WebSocketContextURL": "ws://dev.myfqdn.com:6180"} . Note, the because in step #1 above, per the screen cap, there is a Server Farm entry for port 6180 this works. And that's it! In any client/javascript applications, to point to, say a streaming service, put in: http://dev.myfqdn.com/arcgis/rest/services/issmon3/StreamServer and it will work. With this setup, there is no need to instal Nginx on Windows: IIS's newer ARR/Url-rewrite module are able to handle Websocket requests fine. Also, any changes to the Url-ReWrite rules are reflected/processed immediately. Finally, this write up is for a non-secure setup; for a secure setup, you will have to at least use "WebSocketContextURL": "wsS://dev.myfqdn.com:6180" along with SSL install and other changes in the Url Rewrite rules. I hope this helps someone!
... View more
10-11-2016
02:49 AM
|
6
|
0
|
6314
|
Title | Kudos | Posted |
---|---|---|
1 | 11-13-2015 07:32 AM | |
1 | 10-01-2015 11:51 AM | |
1 | 01-21-2019 05:21 AM | |
3 | 09-09-2016 06:15 AM | |
6 | 10-11-2016 02:49 AM |
Online Status |
Offline
|
Date Last Visited |
11-11-2020
02:23 AM
|