Latest Contributions by ZianChoy

‎05-07-2020

This was a slightly foolish question; AGS is already set up the way I want with "Shared: No one" as the default. However, I would still like to know if I can prevent people from sharing something to the entire organization.

‎05-07-2020

When a user in my 10.7.1 Portal publishes content to my company's Portal, I would like them to avoid sharing the content (by default). Out of the box, Portal defaults to sharing everything to the entire company. I found "Members can share content publicly." in the Portal security page but I don't see a way to limit it further. I would like to minimize the damage that can be done if someone's credentials are stolen. How can I do this?

‎05-07-2020

When I removed a feature layer with a heatmap renderer in the latest version of the 3.x JS API, nothing appeared in the map after adding it back. You can reproduce the problem by going to https://developers.arcgis.com/javascript/3/sandbox/sandbox.html?sample=renderer_heatmap_weighted and making a tweak to the valCtrl.addEventListener function. Insert the following as the first line in the function: map.removeLayer(heatmapFeatureLayer); And put this line right above the call to redraw(): map.addLayer(heatmapFeatureLayer); Then, click the refresh button and try moving a slider or unchecking a checkbox in the map. Nothing will appear in the map. In my real application, I have ~6 different groups of layers that get swapped in and out of the map depending on the displayed attribute. For instance, 1 group might show the "Geocoder" string attribute with only 1 layer and another group might show a "Derived Number" attribute with 3 layers. What would be the best way to overcome this bug in the JS API?

‎04-30-2020

Actually, I'm trying to run the GP service on AGS/Portal 10.7.1. It used to run in 10.3.1. I'll hold off on reading too much into your post to give you a chance to revise your thoughts. >built-in authentication I'm not quite sure what you mean. The HTTP POST is being sent to the GP service by a .NET program that's putting together the JSON from scratch. I would not expect an AGS GP service to infer that given the below, the GP service should have unfettered access to all the secured map services mentioned in the webmap JSON. 1. a HTTP POST with a JSON blob 2. a token in the POST body (for accessing the secured GP service) 3. A few other trivial parameters in the post body (f=json, layout...)

‎04-29-2020

>1 Federated with a portal and using the authentication built into Portal for ArcGIS. >2 Yes, I am. >3 The major motivations are: 1. Returning errors as messages in the GP service output. With the built-in service (as of 10.3.1), errors go to the AGS log rather than the GP output so the client (e.g. Web App Builder or a custom JS API web map) has no way to know what went wrong with the GP job. 2. Running asynchronously to maximize the responsiveness of the application calling the service.

‎04-28-2020

I found Print maps that contain secured services—Documentation (10.7) | Documentation for ArcGIS Enterprise but it also requires an existing AGS file (er...connection). What is the best way to allow an AGS print service on a federated AGS server to access secured map services that are published to the same AGS machine (e.g. PrintService on Server A trying to access secured map service B on Server A).

‎04-28-2020

Thanks for the encouragement. It sounds like something to try after my company's moved to 10.7.1. Maybe I'll try doing it during a conference... 1. Mess with PowerShell/Chef scripts 2. Ask for help during the daytime 3. Go to step 1

‎03-20-2020

Thanks for the tip. I imported the certificate (public key only) into a coworker's computer and he was able to publish without getting the pop up.

‎03-11-2020

I have an ArcPy script that calls ConvertWebMapToMapDocument—Help | Documentation and passes it an AGS file. In the old days, the AGS file was linked to a specific instance of AGS (e.g. URL of "https://TerriblePun.datacenter.local:6443/arcgis" + username/password of an AGS user account). Now, my company is going to Portal 10.7.1 and becoming a little more highly available so I want to use a URL that looks more like "https://BoringPublicSubdomain.example.net/fw_arcgisportal" + username/password of a Portal account. That way, I don't have to maintain a different AGS file for each server that is running Server. What is the best way to allow access to secured map services from that function? I tried 3 ways to generate an AGS file and failed all 3 times. First, I tried to force ArcCatalog 10.7.1 to generate an AGS file with the above parameters. That failed. --------------------------- Add ArcGIS Server --------------------------- We were unable to connect to: https://arcgis.firstwatch.net/fw_arcgisportal. Error: Proxy server got bad address from remote server (verify the server is running). (status code 504). --------------------------- OK --------------------------- Next, I tried using the local host file. 1. Add "127.0.0.1 FW_Local_AGS" on the server that will ultimately run the geoprocessing service. 2. Add "127.0.0.1 FW_Local_AGS" to my laptop's host file and fill in the IP address of the AGS server (not 127.0.0.1). 3. In ArcCatalog, use a URL of "https://FW_Local_AGS:6443/arcgis" + username/password of a Portal account That didn't work either. --------------------------- Add ArcGIS Server --------------------------- We were unable to connect to: https://FW_Local_AGS:6443/arcgis. Error: Bad syntax in request. (status code 400). --------------------------- OK --------------------------- Finally, I repeated the host file idea with the Primary Site Administrator's account (I know this is a big security no-no but I also know that some things in AGS don't work right with federated Portal accounts). I got the same error: --------------------------- Add ArcGIS Server --------------------------- We were unable to connect to: https://FW_Local_AGS:6443/arcgis. Error: Bad syntax in request. (status code 400). --------------------------- OK ---------------------------

‎03-11-2020

>automation? I spent some time with Chef back in the days of 10.5 (and maybe 10.6). Unfortunately, I was not able to get it to work (Web Adaptor Installer Quits If Site Already Exists · Issue #116 · Esri/arcgis-cookbook · GitHub ; also, if IIS has more than 1 default binding (e.g. port 80 is bound to HTTP, port 443 is HTTPS, and port 443 is also bound explicitly to "abc.example.net" with a different SSL certificate), then the installer fails). My firm once paid an ESRI tech advisor to walk us through installing 10.7 and it involved a lot of manual workarounds. As an example, my documents include the following steps: After AGS finishes making a new site, change the service's log-on user to datacenter\esri_admin . Then, give that account full control over the c:\program files\ArcGIS,c:\arcgisserver, and c:\python27 folders. ...many steps later... Remove the auto-created arcgis account from Windows. Similarly, for Web Adaptor, we found that after WA is installed and the browser window pops up: If the browser's address bar says localhost , change it to the machine's fully qualified domain name (e.g. stoutweb1.datacenter.local ). >ever supported That's true. My company has never used Portal before. We were hoping to keep the amount of extra Portal-induced work to a minimum. Having to tell people that we can't clone VMs any more seems a bit severe.

‎03-11-2020

When I "Share a layer" in Pro 2.5 to a federated Portal, I get prompted to accept the certificate assigned to the Server computer that is federated with Portal. The pop up indicates that Pro is trying to talk to the fully-qualified domain name of the machine (e.g. ObscureJoke.datacenter.local) running Server. I expected Pro to talk to Portal (not Server) and let Portal deal with the communications to Server because Portal and Server are federated. I also wasn't expecting a certificate prompt because the public Portal URL I gave Pro routes traffic through a connection that has a CA-signed certificate and that certificate works just fine with the right host name (e.g. example.firstwatch.net). How do I convince Pro to stop trying to reach behind Portal's back? I don't want to tell all my Pro users to ignore SSL certificate prompts.

‎03-11-2020

Historically, my company has created cold standby versions of our AGS infrastructure by cloning the virtual machine (thereby creating Machine_2) and then keeping the data/services/configuration of Machine_2 synced. Since Common problems and solutions—Portal for ArcGIS (10.8) | Documentation for ArcGIS Enterprise says that machines cannot be renamed, that approach will no longer work. Migrate to a new machine in ArcGIS Enterprise using the WebGIS DR tool recommends using the WebGIS DR tool instead. Is there any way to avoid having to build an AGS/Portal/Data Store server from scratch prior to running the WebGIS DR tool?

‎10-02-2019

In the 3.* API, I can turn on clustering and by default, "If you set a renderer with a colorInfo visual variable on a layer, for example, and enable clustering, then the clusters will average the numeric value driving the color visualization and shade the clusters based on the average value." Can I customize the symbology of the clusters so that they are more visually distinct from the unclustered features? For example, since clusters tend to be pretty big symbols, it would be nice if I could make the middle of the symbol transparent and let the user see the basemap underneath.

‎06-13-2019

I uploaded a 3.28 JS API application as a ZIP to the JavaScript Optimizer over 1.5 hours ago and the Building screen still says "Waiting for the optimizer to finish." I haven't received an e-mail about the build either. In the past, I was able to get a completed build in under half an hour. What can I do to try to get a build? How can I tell the difference between a failed build and a build that's just really slow?

‎03-13-2019

Does the Portal health check say that all is well if the federated hosting server (AGS) is still halfway through starting up all the ArcGIS Server processes?

Online Status	Offline
Date Last Visited	yesterday

My Ideas

Latest Contributions by ZianChoy

Re: Change default sharing settings in Portal

Change default sharing settings in Portal

Add feature layer back to map after removing it

Re: Make an AGS file for ConvertWebMapToMapDocument with Portal

Re: Make an AGS file for ConvertWebMapToMapDocument with Portal

Re: Make an AGS file for ConvertWebMapToMapDocument with Portal

Re: Is installing ArcGIS Portal on a new server the only way to make a cold standby?

Re: Pro prompts the user to accept the ArcGIS Server server's certificate despite having a Portal connection

Make an AGS file for ConvertWebMapToMapDocument with Portal

Re: Is installing ArcGIS Portal on a new server the only way to make a cold standby?

Pro prompts the user to accept the ArcGIS Server server's certificate despite having a Portal connection

Is installing ArcGIS Portal on a new server the only way to make a cold standby?

Can I customize the symbology used by a cluster?

JavaScript Optimizer hangs at "Waiting for the optimizer to finish."

Portal Health Check vs. AGS Health Check

Manage all ArcGIS Developer users in the same orga...

arcgisportal temp Folder: Many Large Subdirectorie...

Re: ArcGIS and CVE-2021-44228 Apache Log4j 2

Re: arcgisportal temp Folder: Many Large Subdirect...

ArcGIS Server: Default Instance Type: Spontaneousl...