Latest Contributions by AlbertoAloe

‎10-23-2013

Hi everybody. I have a publicly exposed ArcGIS Server 10.2 running on a virtual machine in perimeter network (DMZ). OS is Windos server 2008 R2 with IIS 7.5 and I'm using web adaptor. IIS and ArcGIS server are set for http only. I'd like to add a bit more of security putting SSL into place. My network guys proposed me to use a reverse proxy that is holding the signed certificate and then reroute the traffic to my webserver. The reverse proxy will handle the encripted https traffic forwarding http traffic to port 80 of my web server (flagging http header in order to inform the web werver of encryption-decryption). Is this configuration OK? Somewhere I found an article that says that https should be implemented end to end. Thanks Alberto

‎10-14-2013

I was just rereading my own post.......obviously when I'm saying "proxy server" I mean "reverse proxy server" Alberto

‎10-14-2013

Demin, how about the certificate you are using in your IIS ? Is it the self signed one ? I have an ArcGIS server 10.1 in DMZ (same machine with IIS and web adaptor) and currently is set for http/80 only. I would like to set up SSL but my netowrk guys told me that I have to use a proxy server because I cannot get a valid certificate for my IIS (but still investigating this issue). my question is: if I used a reverse proxy and I cannot have a valid certificate for the server would I run into the issues mentioned here http://support.esri.com/fr/knowledgebase/techarticles/detail/40694 where it is stated that you must have have a valid certificate between proxy server and webserver ? Thanks Alberto

‎10-03-2013

Thanks Ken. At least I can stop pulling my hair !! I was try to follow the guidelines in http://resources.arcgis.com/en/help/...00005q3000000/ without success. Alberto

‎10-02-2013

Hi guys. I'm missing something here.... I can simplify my question using the print web map sample http://developers.arcgis.com/en/javascript/sandbox/sandbox.html?sample=widget_print_webmap If I edit the print url to point to an arcgis server print service (not secured) everything works fine and I get the printout from that server. I if edit also the webmap id in order to point to a secured web map (shared only to organization) I am asked to login as expected and after the webmap shows up but if print I don't get a printout back. (I see that there is a request but no response). So despite the login the arcgis print service does not know how to access the secure webmap ? Thanks Alberto

‎08-09-2013

I'm try to workaround the incompatibility of public/organizational accounts in a group. Maybe I can add a kind of support user into the organization with a public account. This user maybe the owner of the group that eventually would be open to other external public accounts . Correct ? Alberto

‎08-09-2013

Hi guys. I 'd like to share an item with somebody outside my organization (but not everyone). What is the best way ? I could invite him to the organization for the purpose of getting what he needs but I do not like the idea that he would have the possibility to load his stuff, create webmaps and so on.... Alberto

‎08-02-2013

John, it's more than a guess... the self signed certificate on the arcgisserver side is the one creating trouble. Ok. I'll test it with a trial signed certificate. Thanks Alberto

‎08-01-2013

...I'm adding the code in the text as well.. html page.. <!DOCTYPE html> <html> <head> <title>Create a Web Map</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=7, IE=9, IE=10"> <link rel="stylesheet" type="text/css" href="https://serverapi.arcgisonline.com/jsapi/arcgis/3.5/js/esri/css/esri.css"> <style> html,body,#mapDiv,.map.container{ padding:0; margin:0; height:100%; } #legendDiv{ background-color: #fff; position: absolute !important; z-index: 99; top:10px; right:20px; } </style> <script>var dojoConfig = { parseOnLoad:true };</script> <script src="https://serverapi.arcgisonline.com/jsapi/arcgis/3.5compact/"></script> <script> dojo.require("esri.map"); dojo.require("esri.arcgis.utils"); dojo.require("esri.dijit.Legend"); dojo.require("esri.IdentityManager"); var map; function init(){ esri.config.defaults.io.proxyUrl = "https://dmzarcsrv001/proxy/proxy.ashx"; esri.config.defaults.io.alwaysUseProxy = true; map = new esri.Map("mapDiv", { center: [-56.049, 38.485], zoom: 3, basemap: "streets" }); var dynamicMapServiceLayer = new esri.layers.ArcGISDynamicMapServiceLayer("https://dmzarcsrv001/arcgis/rest/services/Test/Scratch/MapServer") map.addLayer(dynamicMapServiceLayer); } dojo.ready(init); </script> </head> <body> <div id="mapDiv"></div> <div id="legendDiv"></div> </body> </html> and proxy.config.... <?xml version="1.0" encoding="utf-8" ?>  <ProxyConfig mustMatch="true"> <serverUrls>  <serverUrl url="https://sampleserver1.arcgisonline.com/arcgis/rest/services/" matchAll="true"></serverUrl> <serverUrl url="https://sampleserver2.arcgisonline.com/arcgis/rest/services/" matchAll="true" token=""></serverUrl> <serverUrl url="https://server.arcgisonline.com/arcgis/rest/services/" matchAll="true"></serverUrl> <serverUrl url="https://orthogonal.esri.com/arcgis/rest/services/" matchAll="true"></serverUrl> <serverUrl url="https://hummer/ArcGIS/rest/services" matchAll="true" dynamicToken="true"></serverUrl> <serverUrl url="https://services.arcgisonline.com/arcgis/rest/services/" matchAll="true"></serverUrl> <serverUrl url="https://dmzarcsrv001/arcgis/rest/services/" matchAll="true"></serverUrl> <serverUrl url="https://www.arcgis.com" matchAll="true"></serverUrl> <serverUrl url="http://www.google.it" matchAll="true"></serverUrl> <serverUrl url="http://hydro-gis.jrc.ec.europa.eu/arcgis/rest/services" matchAll="true"></serverUrl> <serverUrl url="http://dmzarcsrv001/dev" matchAll="true"></serverUrl> </serverUrls> </ProxyConfig> Alberto

‎08-01-2013

Thanks John.. I'm back today and I'm making some testing. I'm experiencing the following Web app pointing to a secured arcgis.com web map works fine. The proxy does the job and identiymanager asks for credentials correctly even in IE 7/9 Web app pointing to a secured service on the same server hosting the app does not work. I get error 500 trust failure when accessing the service The message in firebug is : 500 TrustFailure 323ms /jsapi...ompact/ (line 15) "NetworkError: 500 TrustFailure - https://dmzarcsrv001/proxy/proxy.ashx?https://dmzarcsrv001/arcgis/rest/services/Test/Scratch/MapServer?f=json&dpi=96&transparent=true&format=png8" When testing the proxy it works fine with any url I declare in proxy.config except for arcgis server. Am I missing something ? In attachment simple html example and proxy.config. Thanks Alberto

‎07-26-2013

Sorry guys... I know that this has been asked several times.....but reading all the posts increased my confusion instead of solving the issue My configuration is: ArcGis Server 10.1 with WebAdaptor SSL set on the ArcGIS Server and IIS 7.5 (at the moment with the home made certificate) Token based authentication I'm making some planning about the following scenario. I need to workaround the issue related with Internet Explorer 7-9 when using IdentityManager as explained here http://forums.arcgis.com/threads/72265-IdentityManager-quot-Aborted-Sign-In-process...-quot-with-createMap-in-IE?highlight=IdentityManager+cors+proxy. Basically I'd like to offer IE 7-9 users the possibility to authenticate themselves against the ArcGIS Server in the web application through the use of IdentityManager (exactly like Chrome and Firefox without using the proxy). I do not want to do authentication at the application level. Is it possible or do I have to embed username/password (or token) in proxy.config ? If it is possible where can I download the most updated proxy files ? How can I set proxy.config in order to access my secure services and my ArcGIS Online for Organizations web maps ? Thanks Alberto

‎07-18-2013

Mike, my subscription ID is: 3623150623 I e-mailed ESRI Belux support but I did not get an answer. Thanks Alberto

‎07-17-2013

Mike, I have the same problem (see above). I'm about to open a ticket with support. Alberto

‎07-16-2013

Hy everybody. Is there any drawback if I remove the administrator that started the ArcGIS Online subscription? Basically I don't like the fact that I activated the subscription with my esri global account instead of creating another user. Thanks Alberto

‎07-16-2013

I think so. I'll e-mail ESRI support. Thanks Alberto

Online Status	Offline
Date Last Visited	‎01-21-2026 05:26 AM

My Ideas

Latest Contributions by AlbertoAloe

Reverse Proxy and SSL

Re: Reverse Proxy and ArcGIS Server 10.1

Re: Reverse Proxy and ArcGIS Server 10.1

Re: print service with secured webmap

print service with secured webmap

Re: share outside organization

share outside organization

Re: identitymanager & proxy

Re: identitymanager & proxy

Re: identitymanager & proxy

identitymanager &amp;amp; proxy

Re: Issue with publishing a Feature Service

Re: Issue with publishing a Feature Service

Initial Administrator removal

Re: Issue with publishing a Feature Service

Re: ArcPy Layer updateConnectionProperties not wor...

Feature Cache

Re: ST_Raster Trouble - SQL SERVER

Re: Mosaic dataset operator versus cell statistics...

ArcGIS 10.5.1 & ArcGIS Pro 2 bug connecting to sql...