Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Cancel
- Home
- :
- About NicolasGIS
NicolasGIS
Honored Contributor
since
03-19-2015
618
Posts created
93
Kudos given
25
Solutions
265
Kudos received
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
My Ideas
(21 Idea Submissions)Latest Contributions by NicolasGIS
|
POST
|
Hi @simoxu , Thanks for your reply. Been tried on WS2019 and WS2022. Requirements are met (if CPU is a different model than the one I listed, it works). The error message seems to be related to CPU: [JDK-8271324] [lworld] java/foreign/* tests fail with "guarantee(sect->end() <= tend) failed: sanity" - Java Bug System (openjdk.org)
... View more
06-03-2024
04:54 AM
|
0
|
3
|
4299
|
|
POST
|
Hello, I am facing an issue with the new 11.3 setups of ArcGIS Server and ArcGIS Datastore: service won't start after a successfull installation. Portal for ArcGIS works. I found out there is an installation log at 11.3 in "C:\Program Files\Arcgis\Server\framework\support", where the following error is logged: # A fatal error has been detected by the Java Runtime Environment:
#
# Internal Error (codeBuffer.cpp:972), pid=7088, tid=3008
# guarantee(sect->end() <= tend) failed: sanity
#
# JRE version: (17.0.10+7) (build )
# Java VM: OpenJDK 64-Bit Server VM (17.0.10+7, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, windows-amd64)
# Core dump will be written. Default location: C:\Windows\system32\hs_err_pid7088.mdmp
#
# An error report file with more information is saved as:
# C:\Windows\system32\hs_err_pid7088.log But as if it was not a systematic issue, I understood it was related to the CPU of the VM which is: Intel(R) Xeon(R) Gold 6326 CPU @ 2.90GHz On some other CPU, it works. With previous versions of the setup (11.1/11.2), it works. Anyone else ? I guess one shall verify the setup works on the same CPU as the VM which is upgraded otherwise it could be a big issue ! Thanks, Nicolas /cc @CedricDespierreCorporon
... View more
05-31-2024
06:58 AM
|
0
|
9
|
4422
|
|
IDEA
|
Hi @AnninaHirschiWyss, Thanks for the support ! I keep pushing every month for this feature without any success so far... We will have to implement it our own unfortunately viewModel I am afraid 😕
... View more
05-30-2024
05:17 AM
|
0
|
0
|
2841
|
|
POST
|
Actually, this BUG is a duplicate. This security vulnerability is known and logged since 2022 and still being analysed as: BUG-000150121: When Portal for ArcGIS participates in an SLO SAML flow, it fails to redirect to the identity provider (IDP) following the session invalidation
... View more
04-25-2024
08:35 AM
|
0
|
0
|
3298
|
|
POST
|
Logged as: BUG-000166664: There is a security issue because of Portal for ArcGIS SAML logout behavior: it does not propagate logout to identity provider and as a consequence, users remains logged in which is a security vulnerability
... View more
04-12-2024
03:06 AM
|
0
|
0
|
3331
|
|
POST
|
It's really weird, the bug does not evolve... Still being analyzed while support was able to reproduce... I am afraid it won't even make it to 11.3 at this speed...
... View more
04-03-2024
09:20 AM
|
0
|
0
|
2145
|
|
POST
|
Hello, Many users in my organization are complaining about a security issue because of Portal for ArcGIS SAML logout behavior: it does not propagate logout to identity provider and as a consequence, users remains logged in which is a security vulnerability. I noticed the following: "Propagate logout to Identity provider" only works if logged in directly on Portal for ArcGIS (ie: OAuth client id ="arcgisonline"). If you are logged in on Portal for ArcGIS through an OAuth application (ie: OAuth client id ="o8WEYheNpQcE2dwwh"), then when signing out from another application, Portal for ArcGIS does not propage the logout and instead displays the following window: Let's illustrate this workflow with the diagram below: source: https://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-tech-overview-2.0-cd-02_html_m50a2ba3e.gif Let's say "sp2.example.edu" is Portal for ArcGIS. 1. Working scenario when logged in directly on Portal for ArcGIS: User is logged in on both Portal for ArcGIS and sp1.example.com and the user request a global logout from sp1.example.com. At step 3, Idp make a POST to sharing/rest/oauth2/saml/signout and the reply is the following: <!DOCTYPE html>
<html>
<head>
<title>Posting request..</title>
<link href="/geoportal/sharing/rest/files/gw.css" rel="stylesheet" type="text/css"/>
<script language="javascript">
window.onload = function(e) {
document.forms[0].submit();
};
</script>
</head>
<body>
<form name="f" action="https://idp.example.org/auth/realms/company/protocol/saml" method="post">
<input type="hidden" name="SAMLRequest" value="foo" />
<input type="hidden" name="RelayState" value="bar" />
</form>
</body>
</html> Note the form that will POST to Idp with "SAMLRequest" and "RelayState" parameters in order to sign out from Idp. It corresponds to step 4 and it works. Now, let's compare it with the broken scenario: 2. Broken scenario when logged in indirectly on Portal for ArcGIS through an OAuth application: User is logged in on Portal for ArcGIS indirectly through an OAuth application and on sp1.example.com and the user request a global logout from sp1.example.com. At step 3, Idp make a POST to sharing/rest/oauth2/saml/signout but this time the reply is the following: <html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<meta name="referrer" content="origin">
<title>Sign In</title>
<script src="/geoportal/sharing/files/scripts/detector.min.js?__ARTIFACTID__"></script>
<link rel="stylesheet" href="/geoportal/sharing/files/css/site.min.css?__ARTIFACTID__">
<script src="/geoportal/sharing/files/scripts/theme.min.js?__ARTIFACTID__"></script>
<script>
var oAuthInfo = {"contextPath":"/geoportal/sharing","originSignin":false}
window.setTheme(oAuthInfo, "/geoportal/sharing");
</script>
<script src="/geoportal/sharing/files/scripts/oauth2.js?__ARTIFACTID__"></script>
</head>
<body>
<div class="content"></div>
</body>
<script>
oAuthInfo.locale = ((oAuthInfo.locale && oAuthInfo.locale === "iw") ? "he" : oAuthInfo.locale);
require.config({
baseUrl: "/geoportal/sharing/files/scripts/",
locale: oAuthInfo.locale && oAuthInfo.locale.toLowerCase() || ""
});
require(["signout-new", "domReady!"], function (signUp) {
signUp.startup(oAuthInfo);
});
</script>
</html> which ends up to the page "You have been successfully signed out". So coming back to our diagram, there is no longer a POST back to IDP and the logout process from IdP is broken in the middle because of Portal for ArcGIS. As a consequence, users are still logged in and as mentionned in the documentation: If the user's web browser cache is not cleared, attempting to immediately sign back in to Portal for ArcGIS using the enterprise login option will result in an immediate login without needing to provide user credentials to the SAML identity provider. This is a security vulnerability that can be exploited when using a computer that is easily accessible to unauthorized users or to the general public. Note that if you disable the "Propagate logout to Indentity Provider" option, you will have the same phenomena as in "Broken scenario when logged in indirectly on Portal for ArcGIS through an OAuth application" when logged in directly to Portal for ArcGIS. As a conclusion, to me, the option "Propagate logout to Indentity Provider" should apply for all oauth client application ("argisonline" and all the others) and not solely to Portal for ArcGIS client. Anybody else observing the same phenomena ? Any comments ? Did I miss anything obvious ? Thanks, Nicolas /cc @CedricDespierreCorporon
... View more
03-21-2024
12:51 AM
|
0
|
7
|
3619
|
|
POST
|
Hello @ChristopherPawlyszyn , It's been 4 months since your last reply and after days/weeks of trials I still can't restore our production ArcGIS Enterprise neither upgrading. Workaround does not work as mentionned several times. Support has given up on me with the workaround. Any progress ? Hints ? Timeline ? Thanks, Nicolas /cc @CedricDespierreCorporon
... View more
03-18-2024
03:24 AM
|
0
|
0
|
3537
|
|
POST
|
Hi @Noah-Sager, Thanks for your reply. Seems like sample is now fixed and using latest 4.29.4, it's now working out of the box. Thanks
... View more
03-04-2024
11:37 PM
|
1
|
0
|
1228
|
|
POST
|
Hello, Upgrading to 4.29, I noticed that search with custom sources is broken: https://developers.arcgis.com/javascript/latest/sample-code/widgets-search-customsource/ After selecting a result from suggestion, it does not zoom to it and the following error is logged: message: "Cannot select without a source." Returning the `sourceIndex` property in the `searchResult` fixes it but is not documented: https://developers.arcgis.com/javascript/latest/api-reference/esri-widgets-Search.html#SearchResult Thanks, Nicolas
... View more
02-29-2024
12:22 AM
|
0
|
3
|
1311
|
|
POST
|
Hi, Faced the same issue. It can be fixed by increasing the Maximum Image Height and Width in pixels at the Map Service level: The fact that it is shifted in the JS API is due to the fact that it asks for an image size that satisfies these limit s though it does not cover the full screen once generated. Phenomena observed using ESRI Maps SDK for javascript 4.27.
... View more
02-09-2024
09:04 AM
|
0
|
0
|
2428
|
|
POST
|
Seems more like a Portal for ArcGIS issue to me than datastores. What is not displayed correctly is the result of the following URL: /sharing/rest/search. Did you maybe try to reindex (portaladmin/system/indexer/Reindex ?). How does your Portal for ArcGIS content folder look like ? Was it successfully restored (ie: can browse your items and find the thumbnails and so on) ? Disclamer: just trying to help by throwing ideas, not working for ESRI !
... View more
02-05-2024
08:41 AM
|
0
|
1
|
3378
|
|
POST
|
TLDR for new readers stumbling upon this long thread and facing the same issue. BUG-000162528 - Upgraded scene layers cannot be restored to a replicated deployment at ArcGIS Enterprise version 11.1. The official workaround is this one: The following changes should be performed on all ArcGIS Data Store machines with the tile cache data store configured:
Modify the 'tilecache_backup_type' property in '<arcgisdatastore>/etc/datastore.properties' to 'REPLICATION_BACKUP'.
Restart the ArcGIS Data Store service.
Once the changes are complete for the machines in the site:
Take a new backup from the primary deployment.
Restore to the secondary deployment.
Verify scene layers are accessible on the secondary deployment. But as you may read in this thread in more details, I was never able to make it work. Also, I do get the get the same issue at 11.2 so I think the BUG title should be updated as well.
... View more
01-30-2024
01:23 AM
|
0
|
0
|
9567
|
|
POST
|
Hi @AndersAh , No info on my side. What I can tell is that the bug is still "in review" on My ESRI (ie: "The issue is being reviewed. The review process ensures that the issue contains all necessary information and is easy to understand, that it is not a duplicate of an existing issue, and that it is a valid bug or enhancement request") which is quite strange for these kind of obvious bug (ie: easy to reproduce). But enabling administrative access of ArcGIS Server's web adaptor should not prevent it from working. I think you must have another issue. On my side, as a temporary workaround, I enabled administrativ access on the webadaptor and disabled external access of admin and manager URL at reverse proxy level to solve this issue and everything is now working fine. What do you mean by ArcGIS Server stop working ?
... View more
01-03-2024
09:23 AM
|
0
|
1
|
2526
|
My kudoed posts
| Title | Kudos | Posted |
|---|---|---|
| 1 | yesterday | |
| 2 | a week ago | |
| 4 | 3 weeks ago | |
| 1 | a month ago | |
| 2 | a month ago |
Activity Feed
- Got a Kudo for Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails. yesterday
- Posted Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails on ArcGIS Enterprise Questions. yesterday
- Kudoed Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails for JonEmch. yesterday
- Posted Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails on ArcGIS Enterprise Questions. Wednesday
- Kudoed Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails for LorenzMeyer1. a week ago
- Got a Kudo for Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails. a week ago
- Got a Kudo for Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails. a week ago
- Posted Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails on ArcGIS Enterprise Questions. a week ago
- Kudoed Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails for DEWright_CA. a week ago
- Posted Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails on ArcGIS Enterprise Questions. 2 weeks ago
- Kudoed Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails for LorenzMeyer1. 2 weeks ago
- Got a Kudo for Re: Portal for ArcGIS upgrade from 11.5 to 12.1 not working - service won't start after installation. 2 weeks ago
- Got a Kudo for Re: Portal for ArcGIS upgrade from 11.5 to 12.1 not working - service won't start after installation. 2 weeks ago
- Posted Re: ArcGIS Data Store upgrade 11.5 to 12.1 fails on ArcGIS Enterprise Questions. 3 weeks ago
- Got a Kudo for Re: Portal for ArcGIS upgrade from 11.5 to 12.1 not working - service won't start after installation. 3 weeks ago
- Got a Kudo for Re: Portal for ArcGIS upgrade from 11.5 to 12.1 not working - service won't start after installation. 3 weeks ago
- Got a Kudo for Re: Portal for ArcGIS upgrade from 11.5 to 12.1 not working - service won't start after installation. 3 weeks ago
- Posted Re: Portal for ArcGIS upgrade from 11.5 to 12.1 not working - service won't start after installation on ArcGIS Enterprise Portal Questions. 3 weeks ago
- Posted Re: Portal for ArcGIS upgrade from 11.5 to 12.1 not working - service won't start after installation on ArcGIS Enterprise Portal Questions. 4 weeks ago
- Posted Re: Portal for ArcGIS upgrade from 11.5 to 12.1 not working - service won't start after installation on ArcGIS Enterprise Portal Questions. 4 weeks ago
Contact Me