Latest Contributions by JonathanQuinn

If it only works when Fiddler is running, it's likely a certificate problem. When you run Fiddler and you tell it to decrypt HTTPS traffic, Fiddler will install the Fiddler root certificate as a trusted certificate on the machine. Fiddler is intercepting the request and since the machine trusts the Fiddler certificate, it works. I'd try to reach the URL you're making requests to in a browser on the machine and see if you get an untrusted certificate warning. If so, within the browser, export the certificate and then import it into the trusted root certificate store on the machine. ... View more

I'd try to reinstall. It sounds like the install of the Web Adaptor did not go through correctly. ... View more

The files in the walarchive directory can be deleted manually. They are only used for incremental backups. If you're not creating incremental backups they're of no use to you. The database logs can also be deleted, but I wouldn't delete most active log as the database may complain it can't find it when it wants to write logs. We plan on ensuring that no log files or files in general grow unbounded in Portal. ... View more

It's tough to say whether Fiddler would give you anything as it's not clear whether the script is sending invalid requests, (in which case it would be useful), or Server is simply having trouble generating tokens, (in which case it won't be helpful). To generate a token manually, navigate to this endpoint: https://server.domain.com:6443/arcgis/tokens/  Generate Token—ArcGIS REST API: Services Directory | ArcGIS for Developers  ... View more

Script tool validation requires interactions between the client and the GP task when modifying parameters. ArcMap supports this but web clients don't. If that type of validation is possible directly in the application, that's where it has to be done. ... View more

Is this a full ArcGIS Enterprise deployment, or only Server? Can you generate a token manually through the Rest API? ... View more

Ideally, you should install the web adaptors on your web server in the DMZ and apply the CA signed certificates there. On an internal machine, you'll have Portal, Server, and Data Store. These can use the self-signed certificates that are included with the install of the software. If you split up where the web adaptors are and where the rest of the components are, then you only need ports 443/80 through your firewall instead of 443, 80, and 1433, (as SQL Server uses port 1433). ... View more

This is only specific to if the server is the hosting server: Change the managed database to an ArcGIS Data Store relational data store—Portal for ArcGIS (10.6) | ArcGIS Enterprise  Beginning with ArcGIS Enterprise 10.6.1, your portal's hosting server must use the relational data store provided through ArcGIS Data Store. Not sure if that clarifies my comment. ... View more

I think we'd rely on the vendor of the load balancer to provide necessary documentation on configuring it before we put it in our documentation as they are more familiar with how to configure their own products. If there's something that our software expects, (for example, setting the Web Context URL for Portal and Server or what headers should be included in any request), then we do our best to document those steps or information. In response to your numbered points: 1) I set the WebContextURL in the Portal and Server's Administrator Directory (from the links above):    Portal Server It isn't always necessary to set the privatePortalURL for Portal. You'd only use it if you are setting up an HA Portal or Server can't communicate directly with the Portal over 7443. 2) SSL Certificates likely won't cause a redirect. They have to be installed on any IIS instance which includes the reverse proxy and the IIS instance hosting the web adaptors. They are certificates from our domain signing authority. Even if they were self-signed certificates, they shouldn't cause redirects, only certificate warnings. I'm not sure of the behavior if the reverse proxy machine doesn't trust the certificate that is used for the Web Adaptor machine, so that's definitely something to look into. This can be checked by navigating to the Portal or Server through the Web Adaptor URL. 3) Again, I would refer to the vendors documentation on URL Rewrite rules and Server Farm configurations as it's technically a third party component and not directly supportable. There are a number of blogs on the URL Rewrite module: URL Rewrite : The Official Microsoft IIS Site  Setting HTTP request headers and IIS server variables | Microsoft Docs  Modifying HTTP Response Headers | Microsoft Docs  The documentation on the Windows site will be far more detailed and will likely be kept up to date more accurately than information we transpose to our documentation. If it turns out there was a setting or configuration that was necessary to make things work in your environment, then we can consider adding that as a general note, but not include within a larger step by step guide. In my configuration, I didn't make any changes other than adding the machine to a new Server Farm. I left everything else default. ... View more

Well, I had to rebuild the environment and don't see a redirect anymore. Not sure what's changed. Below are my settings: Rewrite rules:    I disabled the default rule created. Proxy settings:    Note that X-Forwarded-For is equivalent to X-Forwarded-Host: Portal re-write rule: Server re-write rule: The Web Context URL is set to https://pub.acme.com/portal for Portal and https://pub.acme.com/server for Server: Do any of your settings seem different? ... View more

Fiddler is software that can monitor the web requests on your local machine. It's effective when troubleshooting web based software, (like ArcGIS Enterprise): https://community.esri.com/groups/technical-support/blog/2018/06/07/monitoring-web-service-requests-using-fiddler  The dev tools also do that, but record traffic on the page you're using. Press F12 and you'll see the developer tools come up: Select the Network tab and then make your edit and you'll see the request getting sent: Then, inspect the response to see why it failed, (yours will likely have an error): ... View more

Yes, starting at 10.6.1 (I think), you can't use your own enterprise geodatabase as the managed database within an ArcGIS Enterprise deployment. You'll need to unregister that data store and register the ArcGIS Data Store. ... View more

There's no need to unfederate Portal and Server when configuring the Data Store. Just install ArcGIS Data Store on whatever machine you want it running on, configure it with your existing federated Server, and then set the federated Server as the hosting Server via the Portal home page. Data store need to install and reconfigure in existing Portal for ArcGIS is it required to unfederate and refederate   ... View more

There's no need to unfederate Server before registering the Data Store. Once you've installed and configured ArcGIS Data Store with your Server, you can simply set the federated Server as the hosting server through the Portal home page. ... View more