Latest Contributions by JonathanQuinn

Does <custom subdomain>/<webadaptor> match either the services URL or the admin URL that's used in federation? When Server is federated with Portal, Portal only knows about those two URLs. When Manager is accessed, it operates as an "app", and the URL must be known to Portal, which means it can only be accessed using either the services URL or the admin URL used to federate. ... View more

The standby will be upgraded during the primary upgrade, if the upgrade was invoked on standby, or during the post-upgrade step if the upgrade was started on the primary. Either way, its handled at some point; just depends on which node you started the upgrade from. ... View more

The Web Adaptor registration page sets the "organization URL" for the portal. For example, if you access the registration page by going to https://enterprise.domain.com/portal/webadaptor, the portal will use https://enterprise.domain.com/portal as its front-end URL. Any request to the portal that isn't made to that URL will redirect to the internal machine name of the portal. Below is a link describing the various ways the organization URL can be defined: https://enterprise.arcgis.com/en/portal/latest/install/windows/determine-your-organization-s-url.htm If you set up something in front of the Web Adaptor, (load balancer or reverse proxy), you'll need to set the Web Context URL and relevant X-Forwarded-Host header to make sure that Portal knows what URL it should use.  https://enterprise.arcgis.com/en/portal/latest/administer/windows/using-a-reverse-proxy-server-with-portal-for-arcgis.htm You'd also need to make sure you re-write the Location header in the event portal redirects, which can happen in certain situations: Along with the X-Forwarded-Host header, your load balancer must be able to direct redirects (HTTP response codes 301 or 302). All Location headers should be rewritten on the load balancer to ensure that the fully qualified domain name (FQDN) and context of the response match the portal's WebContextURL value. In your case, you'd use the proxypassreverse directive with Apache: https://httpd.apache.org/docs/2.4/mod/mod_proxy.html#proxypassreverse This directive lets Apache httpd adjust the URL in the Location, Content-Location and URI headers on HTTP redirect responses. This is essential when Apache httpd is used as a reverse proxy (or gateway) to avoid bypassing the reverse proxy because of HTTP redirects on the backend servers which stay behind the reverse proxy. ... View more

The DR needs to read from the SHARED_LOCATION path, while each component needs write access to the SHARED_LOCATION path. The DR tool needs to write to the BACKUP_LOCATION path. Have you verified that the account running the DR tool can read/write to \\MAP01\Backup\backups? ... View more

No, this is a one time issue that occurred after installing the patch. The problem won't occur when the new patch is issued and failover won't be impacted. ... View more

Absolutely, that's a problem to address, not workaround. Did you recently patch the portals? There's a bug with patching an HA portal, specifically impacting the standby. The latest 11.1 patch is going to be re-issued to address the problem. ... View more

This is an issue with the Portal for ArcGIS 11.1 Enterprise Sites Security Patch in HA environments and BUG-000160830 - The 11.1 version of the Portal for ArcGIS Enterprise Sites Security Patch causes issues in highly available environments is logged to address it. We are going to re-issue the patch after correcting for the problem. For those who already installed the Portal for ArcGIS 11.1 Enterprise Sites Security Patch and encountered this problem, there will be a tech article with the manual steps to restore the correct values to the arcgis#sharing.xml in order to resolve the problem. ... View more

Why not just add both portal machines to the target group? Even though portal has a primary and standby concept, both machines can accept and respond to requests. There's no need for administrators to know which is primary and only send traffic to the primary. ... View more

I'd expect the error to explicitly state that something was attempted against a read-only database: org.postgresql.util.PSQLException: ERROR: cannot execute INSERT in a read-only transaction You can: Check nodes.properties for which is the primary/standby nodes and validate that against the Machines API. Check for the presence of the postgres.auto.conf file under "C:\arcgisportal\db\postgresql.auto.conf", for example, and check the contents to make sure that it knows the primary is the primary Check the config-store-connection.json file under framework\etc to make sure it lists both machine names and not localhost in the JDBC URL property Check the arcgis#sharing.xml file under "C:\Program Files\ArcGIS\Portal\framework\runtime\tomcat\conf\Catalina\localhost" and make sure it also lists both machines and not localhost in the JDBC URL property ... View more

It is possible to set up an HA deployment without a load balancer. The Web Adaptor acts as a load balancer; actively checking the health of the machines in the site its registered to, using simple a round-robin method to send requests to backend machines, and only sending requests to healthy machines. However, its a single point of failure which is generally why we suggest a load balancer in front of two web adaptors. The Web Adaptor is really only necessary if you're using Integrated Windows Authentication, so if that's the case, you'd want to minimize single points of failure by setting up two. Whether they're behind a load balancer, or in a failover cluster where one Web Adaptor instance is active and the other standby in the event the active one goes down, is up to the organization and the resources available to it. We can look into updating the documentation related to Windows Failover Cluster and similar approaches in place of a load balancer. ... View more

Bit of clarification; the Web Adaptor is aware of the machines in the site as it polls for them every minute. Once it knows which machines are part of the site, it uses round-robin requests to send traffic to each node; it doesn't prioritize sending traffic to the primary. In terms of the documentation, a single web adaptor, on a single IIS instance, is a single point of failure, which is why that pattern is not described in the high availability documentation. Load balancers are typically fault tolerant, and if you want IWA, you'd put two web adaptors behind the load balancer. ... View more

So the user running the DR tool is not the same as the service account running ArcGIS Server? The DR tool creates a parent directory, and then asks the components to create their backups under the parent directory. Then, the DR tool packages the backup into the webgissite file. I'd set up ProcMon to monitor file traffic, filtering for the E:\TempBackups directory, and you'll probably find an Access Denied error somewhere in the requests, indicating something either can't write, or can't read, from a directory. ... View more

Connection refused would indicate that the the index service is not running. Have you verified whether you see a java.exe process running on the machine? If not, the logs under <install directory>\framework\runtime\ds\usr\logs may help identify why it can't start. You can post some logs here, but these types of problems are a bit challenging to troubleshoot so it may be best to contact Support. ... View more