|
POST
|
Hi everybody. I have a publicly exposed ArcGIS Server 10.2 running on a virtual machine in perimeter network (DMZ). OS is Windos server 2008 R2 with IIS 7.5 and I'm using web adaptor. IIS and ArcGIS server are set for http only. I'd like to add a bit more of security putting SSL into place. My network guys proposed me to use a reverse proxy that is holding the signed certificate and then reroute the traffic to my webserver. The reverse proxy will handle the encripted https traffic forwarding http traffic to port 80 of my web server (flagging http header in order to inform the web werver of encryption-decryption). Is this configuration OK? Somewhere I found an article that says that https should be implemented end to end. Thanks Alberto
... View more
10-23-2013
06:29 AM
|
0
|
5
|
2565
|
|
POST
|
I was just rereading my own post.......obviously when I'm saying "proxy server" I mean "reverse proxy server" Alberto
... View more
10-14-2013
10:28 AM
|
0
|
0
|
1179
|
|
POST
|
Demin, how about the certificate you are using in your IIS ? Is it the self signed one ? I have an ArcGIS server 10.1 in DMZ (same machine with IIS and web adaptor) and currently is set for http/80 only. I would like to set up SSL but my netowrk guys told me that I have to use a proxy server because I cannot get a valid certificate for my IIS (but still investigating this issue). my question is: if I used a reverse proxy and I cannot have a valid certificate for the server would I run into the issues mentioned here http://support.esri.com/fr/knowledgebase/techarticles/detail/40694 where it is stated that you must have have a valid certificate between proxy server and webserver ? Thanks Alberto
... View more
10-14-2013
02:29 AM
|
0
|
0
|
1179
|
|
POST
|
Thanks Ken. At least I can stop pulling my hair !! I was try to follow the guidelines in http://resources.arcgis.com/en/help/...00005q3000000/ without success. Alberto
... View more
10-03-2013
07:06 AM
|
0
|
0
|
624
|
|
POST
|
Hi guys. I'm missing something here.... I can simplify my question using the print web map sample http://developers.arcgis.com/en/javascript/sandbox/sandbox.html?sample=widget_print_webmap If I edit the print url to point to an arcgis server print service (not secured) everything works fine and I get the printout from that server. I if edit also the webmap id in order to point to a secured web map (shared only to organization) I am asked to login as expected and after the webmap shows up but if print I don't get a printout back. (I see that there is a request but no response). So despite the login the arcgis print service does not know how to access the secure webmap ? Thanks Alberto
... View more
10-02-2013
01:53 PM
|
0
|
3
|
873
|
|
POST
|
I'm try to workaround the incompatibility of public/organizational accounts in a group. Maybe I can add a kind of support user into the organization with a public account. This user maybe the owner of the group that eventually would be open to other external public accounts . Correct ? Alberto
... View more
08-09-2013
07:11 AM
|
0
|
0
|
1360
|
|
POST
|
Hi guys. I 'd like to share an item with somebody outside my organization (but not everyone). What is the best way ? I could invite him to the organization for the purpose of getting what he needs but I do not like the idea that he would have the possibility to load his stuff, create webmaps and so on.... Alberto
... View more
08-09-2013
06:49 AM
|
0
|
3
|
3394
|
|
POST
|
John, it's more than a guess... the self signed certificate on the arcgisserver side is the one creating trouble. Ok. I'll test it with a trial signed certificate. Thanks Alberto
... View more
08-02-2013
04:49 AM
|
0
|
0
|
919
|
|
POST
|
...I'm adding the code in the text as well.. html page.. <!DOCTYPE html>
<html>
<head>
<title>Create a Web Map</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=7, IE=9, IE=10">
<link rel="stylesheet" type="text/css" href="https://serverapi.arcgisonline.com/jsapi/arcgis/3.5/js/esri/css/esri.css">
<style>
html,body,#mapDiv,.map.container{
padding:0;
margin:0;
height:100%;
}
#legendDiv{
background-color: #fff;
position: absolute !important;
z-index: 99;
top:10px;
right:20px;
}
</style>
<script>var dojoConfig = { parseOnLoad:true };</script>
<script src="https://serverapi.arcgisonline.com/jsapi/arcgis/3.5compact/"></script>
<script>
dojo.require("esri.map");
dojo.require("esri.arcgis.utils");
dojo.require("esri.dijit.Legend");
dojo.require("esri.IdentityManager");
var map;
function init(){
esri.config.defaults.io.proxyUrl = "https://dmzarcsrv001/proxy/proxy.ashx";
esri.config.defaults.io.alwaysUseProxy = true;
map = new esri.Map("mapDiv", {
center: [-56.049, 38.485],
zoom: 3,
basemap: "streets"
});
var dynamicMapServiceLayer = new esri.layers.ArcGISDynamicMapServiceLayer("https://dmzarcsrv001/arcgis/rest/services/Test/Scratch/MapServer")
map.addLayer(dynamicMapServiceLayer);
}
dojo.ready(init);
</script>
</head>
<body>
<div id="mapDiv"></div>
<div id="legendDiv"></div>
</body>
</html> and proxy.config.... <?xml version="1.0" encoding="utf-8" ?>
<!-- Proxy config is used to set the ArcGIS Server services that the proxy will forward to.
mustMatch: true to only proxy to sites listed, false to proxy to any site -->
<ProxyConfig mustMatch="true">
<serverUrls>
<!-- serverUrl options:
url = location of the ArcGIS Server, either specific URL or stem
matchAll = true to forward any request beginning with the url
token = (optional) token to include for secured service
dynamicToken = if true, gets token dynamically with username and
password stored in web.config file's appSettings section.
-->
<serverUrl url="https://sampleserver1.arcgisonline.com/arcgis/rest/services/"
matchAll="true"></serverUrl>
<serverUrl url="https://sampleserver2.arcgisonline.com/arcgis/rest/services/"
matchAll="true"
token=""></serverUrl>
<serverUrl url="https://server.arcgisonline.com/arcgis/rest/services/"
matchAll="true"></serverUrl>
<serverUrl url="https://orthogonal.esri.com/arcgis/rest/services/"
matchAll="true"></serverUrl>
<serverUrl url="https://hummer/ArcGIS/rest/services"
matchAll="true"
dynamicToken="true"></serverUrl>
<serverUrl url="https://services.arcgisonline.com/arcgis/rest/services/"
matchAll="true"></serverUrl>
<serverUrl url="https://dmzarcsrv001/arcgis/rest/services/"
matchAll="true"></serverUrl>
<serverUrl url="https://www.arcgis.com"
matchAll="true"></serverUrl>
<serverUrl url="http://www.google.it"
matchAll="true"></serverUrl>
<serverUrl url="http://hydro-gis.jrc.ec.europa.eu/arcgis/rest/services"
matchAll="true"></serverUrl>
<serverUrl url="http://dmzarcsrv001/dev"
matchAll="true"></serverUrl>
</serverUrls>
</ProxyConfig>
Alberto
... View more
08-01-2013
09:43 AM
|
0
|
0
|
919
|
|
POST
|
Thanks John.. I'm back today and I'm making some testing. I'm experiencing the following Web app pointing to a secured arcgis.com web map works fine. The proxy does the job and identiymanager asks for credentials correctly even in IE 7/9 Web app pointing to a secured service on the same server hosting the app does not work. I get error 500 trust failure when accessing the service The message in firebug is : 500 TrustFailure
323ms
/jsapi...ompact/ (line 15)
"NetworkError: 500 TrustFailure - https://dmzarcsrv001/proxy/proxy.ashx?https://dmzarcsrv001/arcgis/rest/services/Test/Scratch/MapServer?f=json&dpi=96&transparent=true&format=png8" When testing the proxy it works fine with any url I declare in proxy.config except for arcgis server. Am I missing something ? In attachment simple html example and proxy.config. Thanks Alberto
... View more
08-01-2013
08:56 AM
|
0
|
0
|
919
|
|
POST
|
Sorry guys... I know that this has been asked several times.....but reading all the posts increased my confusion instead of solving the issue My configuration is: ArcGis Server 10.1 with WebAdaptor SSL set on the ArcGIS Server and IIS 7.5 (at the moment with the home made certificate) Token based authentication I'm making some planning about the following scenario. I need to workaround the issue related with Internet Explorer 7-9 when using IdentityManager as explained here http://forums.arcgis.com/threads/72265-IdentityManager-quot-Aborted-Sign-In-process...-quot-with-createMap-in-IE?highlight=IdentityManager+cors+proxy. Basically I'd like to offer IE 7-9 users the possibility to authenticate themselves against the ArcGIS Server in the web application through the use of IdentityManager (exactly like Chrome and Firefox without using the proxy). I do not want to do authentication at the application level. Is it possible or do I have to embed username/password (or token) in proxy.config ? If it is possible where can I download the most updated proxy files ? How can I set proxy.config in order to access my secure services and my ArcGIS Online for Organizations web maps ? Thanks Alberto
... View more
07-26-2013
08:09 AM
|
0
|
6
|
1710
|
|
POST
|
Mike, my subscription ID is: 3623150623 I e-mailed ESRI Belux support but I did not get an answer. Thanks Alberto
... View more
07-18-2013
12:01 AM
|
0
|
0
|
987
|
|
POST
|
Mike, I have the same problem (see above). I'm about to open a ticket with support. Alberto
... View more
07-17-2013
04:47 AM
|
0
|
0
|
1036
|
|
POST
|
Hy everybody. Is there any drawback if I remove the administrator that started the ArcGIS Online subscription? Basically I don't like the fact that I activated the subscription with my esri global account instead of creating another user. Thanks Alberto
... View more
07-16-2013
07:30 AM
|
0
|
1
|
511
|
|
POST
|
I think so. I'll e-mail ESRI support. Thanks Alberto
... View more
07-16-2013
06:36 AM
|
0
|
0
|
2049
|
| Title | Kudos | Posted |
|---|---|---|
| 1 | 08-21-2019 05:51 AM | |
| 4 | 09-06-2017 01:15 AM | |
| 1 | 09-12-2017 01:47 AM | |
| 1 | 05-03-2018 07:33 AM | |
| 3 | 07-14-2017 07:20 AM |
| Online Status |
Offline
|
| Date Last Visited |
07-24-2025
04:49 AM
|