Latest Contributions by JonathanQuinn

Hm, I don't see why disabling attribute caching would affect REST calls. Would the request timeout, or return an error? The thing that concerns me about those settings is that while the timeo value is in deciseconds, (which equates to 60 seconds), the actimeo value is in seconds: acregmin=n The minimum time (in seconds) that the NFS client caches attributes of a regular file before it requests fresh attribute information from a server. If this option is not specified, the NFS client uses a 3-second minimum. acregmax=n The maximum time (in seconds) that the NFS client caches attributes of a regular file before it requests fresh attribute information from a server. If this option is not specified, the NFS client uses a 60-second maximum. acdirmin=n The minimum time (in seconds) that the NFS client caches attributes of a directory before it requests fresh attribute information from a server. If this option is not specified, the NFS client uses a 30-second minimum. acdirmax=n The maximum time (in seconds) that the NFS client caches attributes of a directory before it requests fresh attribute information from a server. If this option is not specified, the NFS client uses a 60-second maximum. actimeo=n Using actimeo sets all of acregmin, acregmax, acdirmin, and acdirmax to the same value. If this option is not specified, the NFS client uses the defaults for each of these options listed above. https://linux.die.net/man/5/nfs  This means that the Server machines will cache the directory and attribute information for files and folders for 600 seconds. If the Server is attempting to retrieve information from the config-store and that information has expired by up to 600 seconds yet that's what's returned due to the cache, then you should be seeing considerable problems. If these machines are behind a load balancer, then take one of the machines out of the rotation and make the change on that machine specifically. Then, you don't need to worry about requests hitting a machine that may not respond while still being able to troubleshoot as if it were up and active. ... View more

Unregistering a folder is straightforward, just click the X next to the data store within Manager. Since your webmap is configured separately from your service, it won't be affected by rebublishing. If the schema of your data changes, (field order, field names, layer order, etc), then you'll need to configure the popups again. As long as just data changes, you'll be fine. I'll reiterate that this is probably the most difficult way to keep data updated in a service so hopefully the SQL Express approach or policies change to make this easier. ... View more

Portal requires you to sign in over HTTPS. There's no avoiding that, unfortunately. Configuring Portal to not require SSL only means that most other pages can be accessed via HTTP or HTTPS. I see the redirect you're talking about only in the situation where I reach the home page over HTTP and then click Sign In. I don't see any issues if I reach the home page over HTTPS and then click Sign In. I'm still investigating. ... View more

NFS can cause some issues if caching is not disabled and oplocks are enabled on the share. For example, when I test with NFS shares, I can't use the dynamically mounted share, (/net/machine), or mount the directories using the default caching settings, (mount machine:<share> <mounted path). Since the default for attribute and directory caching is 30 seconds, that causes consistency and synchronization issues with ArcGIS Server in multi-machine sites. To work around this, I mount the directories with the noac or actimeo=0 options: https://linux.die.net/man/5/nfs  I don't think this should be specific to 10.6.1 as it should be a problem at any version of Server, but it's something to consider. ... View more

Are you using multiple clusters, or a single cluster? If you only use one cluster, is the site configured with the Single Cluster Mode (About single cluster mode—ArcGIS Server Administration (Linux) | ArcGIS Enterprise )? Are your directories on an NFS share? Do you mount them on the Server machines or are they dynamically mounted, (/net/share)? I'm not sure how much load the machines are handling, but is it possible to stop one of the machines for a day and see if it's reproducible? Do you see any errors before synchronizing with the site messages? I'd be surprised if that was the only thing you'd see. ... View more

So you have a standalone table that multiple people edit, are they editing their own copies? How are you merging all of the edits? When you mention "can't give ArcGIS server permissions to local drives", do you mean the local drives on the users computers? You could automate republishing the service every night or however often the service needs to be updated, but note that requires a bit of downtime while the service is being overwritten. Another option is to disable schema locking and every so often truncate/append to the data within the arcgisinput folder. You'd need to be able to access the data on the users computer as well as the data on the Server at the same time. You can't connect directly to the ArcGIS Data Store, but if you register one with your ArcGIS Server, you can copy data to it when publishing a feature service. Then, your users can edit the table in the feature service directly. You'd need a web application, (or at least something to interact with the applyEdits API at the REST endpoint). What is a feature service?—Documentation | ArcGIS Enterprise  There are a lot of ways to achieve what you're after, but the restrictions on users editing local data and copying data to the Server when publishing pose significant hurdles to your workflow. ... View more

It's very difficult to develop a system with zero downtime. As a GIS is typically multiple tiers, (web tier, application tier, data tier, etc), all of them have to be HA and fully resilient in order to get zero downtime. On top of that, your IT staff needs to be "HA" as well. If you experience an issue, your staff needs to be immediately available to address the problem. Often times a separate a data center is configured in the event that your original data center has some type of catastrophic failure like a natural disaster. You'd use machine replication or the DR tool to move data and content over to your standby. All URLs within your deployment, admin URL used for federating, privatePortalURL for Server to Portal communication, front-end URLs, need to be through a fault-tolerant load balancer. You need to have monitoring in place to immediately detect and resolve issues. Ultimately, there's a lot to consider when developing a system with high uptime. The software does its best to be highly available, (multi-machine Server sites, Portal and Data Store), but minimizing downtime it goes far beyond software and isn't a short conversation to be had over a forum. It's best to seek some type of professional services engagement who can evaluate your current infrastucture and develop an HA plan that fits your needs. ... View more

What load balancer are you using? ... View more

If you reach the Portal home page over https and then click sign in, does that help at all? I set up ARR with URL Rewrite and I find that if I reach a URL that Portal will redirect to HTTPS, ARR will redirect indefinitely. For example, the sign in page requires HTTPS. If I reach the Portal home page over http and then click Sign In, I'm redirected indefinitely. If i reach the Portal home page over HTTPS, then I don't see a problem. ... View more

When the request goes through Portals proxy, (https://portal.domain.com/arcgis/sharing/proxy), the Portal machine itself is making the request, not your browser. So if your machine trusts the certificate for the URL it's proxying to, then it'll go through. If Portal doesn't trust the certificate, then it'll fail as you're seeing. If you ran the Import Root or Intermediate operation and provided the certificate for the admin URL, then you should be good to go. Portal will restart and then that request should work without a problem. Import Existing Server Certificate is not the same operation as Import Root or Intermediate, so if you used the former to import the cert, you'll still need to run the latter. ... View more

Are you using ARR and the URL Rewrite module? Are you adding the X-Forwarded-For header? What exact URL is it redirecting to? I understand it's not https://gis.mydomain.com/portal, but is it the internal machine name for Portal? I agree that we should update the documentation to cater to the most likely scenario: Apache for Linux and IIS for Windows. We don't provide step by steps instructions for any of the load balancers/reverse proxies as we rely on the load balancer or reverse proxy documentation instead. We provide information on what our software expects, (such as an HTTPS binding and X-Forwarded-For header). In this particular case, if there is a setting that would help resolve the redirect, we'll look into if it's appropriate to add to the documentation. ... View more

Is that entry logged under DEBUG? If so, it can be ignored. We're working on cleaning up those types of messages. ... View more

The certificate for Data Store is only applicable for the 2443 endpoint, which is only used when configuring Data Store via the UI or when the DR tool is backing up and restoring the Data Store. If there's an issue with a certificate, it's the certificate assigned to the admin URL that you used in federation. If that's a wildcard certificate then that's definitely going to be problematic until you configure the Portal to trust the certificate. Monitor the network traffic when loading the Edit Settings page. A request to the Admin API for Server will fail and that's the reason why the drop down is greyed out. The home application can't get a valid response when making a request to determine if there are any registered Data Stores. ... View more

I see, ok. If you disable your URL redirect rule where does portal redirect to? The internal machine name, (https://portal.domain.com:7443/arcgis/home/signin.html)? I use HAProxy and I've noticed if the Host header isn't set, then I see infinite redirects for certain requests. ... View more

When you reach the sign in page via the home page, there will always be a redirect for a request to Portaladmin: The portal/portaladmin page (without a slash) redirects to portal/portaladmin/ (with a trailing slash). If your RP is rewriting that again, then that may be a problem. It's important to know which specific request is being redirected, though. Is the request to signing.html redirecting, or another page the home app is accessing? ... View more