POST
|
I have federated Portal 10.5 with a single-machine ArcGIS Server 10.5 site. Portal is configured to use Active Directory for its Identity Store. Portal and ArcGIS Server are on different virtual servers and their respective web adaptors are on a separate Web Server and configured under different IIS sites. I have done ArcGIS Enterprise Basic deployment in the past successfully. This table summarized the configuration URL Description https://ags-web-dev.mydomain.org/server Web Adaptor pointing to the ArcGIS Server https://ags-web.mydomain.org/portal Web Adaptor pointing to the Portal for ArcGIS Site https://ags-dev.mydomain.org:6443/arcgis Direct URL to the ArcGIS Server machine https://ags-portal.mydomain.org:7443/arcgis Direct URL to the Portal for ArcGIS Almost everything appears to work correctly. For example I can log into Portal using the primary site administrator account I can log into Portal using my Domain account After Federating, all of the ArcGIS Server services appeared as Portal items, as expected I can log into the ArcGIS Server Administrative service directory using the ArcGIS Server site administrator credentials, or by manually generating a Portal token. The only issue if that attempting to open ArcGIS Server Manager fail. The interface hangs on the "Please wait..." progress bar and the network traffic shows repeated failures to POST to the portal generateToken page via the ArcGIS Server proxy https://ags-dev.mydomain.org:6443/arcgis/manager/proxy?_proxyUrl=https%3A%2F%2Fags-web.mydomain.org%2Fportal%2Fsharing… The network inspector shows that ArcGIS Server returned a 500 server error caused by a "Connection closed" (see screenshot). Are there any good ways to go about diagnosing the root cause of an issue like this? Update Installing Fiddler and enabling HTTPS traffic snooping shows that request is being sent from the ArcGIS Server machine to the Portal Web Adaptor. This may be a side-effect of enabling Fiddler as a MITM proxy, but the Portal logs show this WARNING: ArcGIS Server services URL 'https://ags-web-dev.mydomain.org/server' cannot be validated against 'https://ags-web-dev.mydomain.org/server/rest/info'. If the service URL is a proxy URL verify it is accessible to clients. The JSON at the /info endpoint is { "currentVersion": 10.5, "fullVersion": "10.5.0", "soapUrl": "https://ags-web-dev.mydomain.org/server/services", "secureSoapUrl": null, "owningSystemUrl": "https://ags-web.mydomain.org/portal", "authInfo": { "isTokenBasedSecurity": true, "tokenServicesUrl": "https://ags-web.mydomain.org/portal/sharing/generateToken" } } What information is being used to attempt this 'validation'?
... View more
06-02-2017
01:40 PM
|
2
|
20
|
18209
|
POST
|
I'm not trying to decrypt an existing password. I'm using DSC for the deployment (versus chef), and I want to take a known password and hash it into the correct format so that it can be used in the config.xml file during the ArcGIS Server installation. Hopefully that makes things a bit clearer.
... View more
05-03-2017
10:38 AM
|
0
|
0
|
892
|
POST
|
I am trying to set up some preconfigured XML configuration files to support an automated deployment of ArcGIS Server (and Portal) that uses the /ACCOUNT=UseConfigFile /CONFIGPATH=my_config.xml installer command line options. I have an XML file that I saved from a previous install and was hoping to use that as a template. However, the password field of the XML file appears to be stored as a base64-encoded hashed value. See examples below. Is there any documentation on exactly how a password in encoded in this file? Also related, the XML configuration file for Portal also encodes the password, but appears to use a different technique. Is there any documentation on the Portal configuration file as well? If there is a different approach to setting up deployment configurations without having to store plain-text credentials, I'm open to suggestions. Example ArcGIS Server XML config file <ServerConfigurationUtility> <ArcGISServerServiceUserName>domain\webgis</ArcGISServerServiceUserName> <ArcGISServerServicePassword>AgAAADAAAAAuaGNuU2Niq1ZpNjY5MmNaWXZOc3ZjRHNSMEhIadpo2G5oWVNkbAgzVkxVN1V9KgA= </ArcGISServerServicePassword> </ServerConfigurationUtility> Example Portal XML config file <ConfigurationUtility> <UserName>domain\webgis</UserName> <Password>00022e684e54686754597261625452584378425171317638616b6f665a696843766541416e7636515659bf6d695a6b3e7a00</Password> <Directories/> </ConfigurationUtility>
... View more
05-03-2017
07:28 AM
|
0
|
2
|
1732
|
POST
|
I have been trying to add a user to an AGO account with Enterprise Login enabled. The Enterprise Login is configured to automatically add users upon successful login. When I try to add a new user via logging in for the first time, I get an error Unable to assign user 'UserName@DOMAIN_org' to this account 'xxxxxxxxxxxxxxxx' , Username is not available I have verified that this user's email address is not currently in my Organization's users. Also, I am able to successfully log into the IdP endpoint with the target user account. Any suggestions on how to diagnose this issue and try to make this username available to the org?
... View more
03-14-2017
12:52 PM
|
0
|
4
|
2100
|
DOC
|
Be careful with this. According to Section 9.1.1 of the Google Maps ToC, internal-only applications that use the Google Maps API are not allowed, except for testing and development, or unless you have an Enterprise Agreement with Google.
... View more
02-22-2017
12:39 PM
|
1
|
0
|
6362
|
POST
|
When adding a secured service URL as an Item in ArcGIS Online, the checkUrl.jsp page is called with the service URL passed in as an argument. That part makes sense as AGO needs to interrogate the service endpoint to figure out its capabilities. However, the request also passes along a token. I am wondering where that token comes from, since there is no request to the ArcGIS Server's token endpoint, and what function it plays when validating the target service URL.
... View more
02-08-2017
08:44 PM
|
0
|
0
|
1419
|
POST
|
Using a Feature Layer as an Event Source is working correctly with the 10.5.1 Simulator. Very nice!
... View more
01-24-2017
02:19 PM
|
0
|
0
|
1171
|
POST
|
Ah, that is a nice behavior of Save As.. to act as a simple export of the Layer features. Yes. Saving to a file and then running the file through the Simulator works as expected. Many thanks!
... View more
01-24-2017
01:02 PM
|
0
|
0
|
1171
|
POST
|
Unfortunately the issue remains. The GeoEvent Server log shows the same error and watching the traffic in Wireshark still shows a lack of newline character in each TCP packet's data payload. Sending simulation data from a file works so I will use that as an immediate-term workaround. I did verify that the Wireshark traffic, when the data is sourced from a text file, DOES add the CR LF characters (0x0D 0x0A) as the last two bytes of the packet data.
... View more
01-24-2017
11:28 AM
|
0
|
0
|
1171
|
POST
|
Just getting started with GeoEvent Server and have run into an issue that seems like a misconfiguration on my part. I have a Hosted ArcGIS Online Feeature Service with point data that I am using as input to the GeoEvent Simulator. I have a GeoEvent Definition that matches my Feature Class schema. My GeoEvent service is very simple and is just using the Receive Text from TCP Socket input adaptor and writing the output to Stream Service. The issue is that the Input Connector does not receive any records when using the GeoEvent Simulator. If I connect to the TCP Port manually and paste in my CSV record, it works as expected. I turned on logging on the com.esri.ges.adapter.text.TextInboundAdaptor and I am seeing a repeated DEBUG error of: While parsing the text event, the end of line character was not found. The left overs .... Which is followed by a long, concatenated list of the previously sent data. Looking at the GeoEvent Simulator traffic in Wireshark, I can see that each event is being sent as a separate TCP packet and that, as the debug message states, there is no terminating newline character after each record. When I am connected manually, I obviously type a newline to send the data and that explains the different behavior I've observed. The core question is how to configure with GeoEvent Simulator or my Input Connector so that they are happy with each other? I've tried setting the Message Separator in the Input Connector to blank, but that had no effect. I've also looked through the help / config documentation for the GeoEvent Simulator, but have not found any place where I can define a message separator for the event stream. My last resort would be to create a new attribute in my source feature class that I can insert a separator character and get it to appear in the event data payload sent by the Simulator, but that seems quite ... hackish. Any pointers?
... View more
01-24-2017
09:45 AM
|
0
|
6
|
2383
|
POST
|
I have a web map that, when opened in Explorer for iOS, initially loads the map with all of the layers turned ON. If I open the Map Layers menu item and toggle *any* layer, then the map refreshes itself into the proper state. The Web Map uses a Dynamic Map Service (not a Feature Service) and does not override the Map Service's default visibility settings and the Map Service itself has appropriate defaultVisibility properties set on each layer, e.g. {
"defaultVisibility": false, "subLayerIds": null, "minScale": 0, "maxScale": 0
} The issue was originally observed on version 10.2.9 of the app. After upgrading to the most recent version (10.2.10), the problem remains. Does anyone have a suggestion on how to work around this issue? Thank you.
... View more
01-04-2017
07:28 AM
|
1
|
0
|
571
|
POST
|
Turns out there were two issues in play. Forcing HTTPS Only in the Portal Settings page fixed the issue in Chrome and Firefox. As for IE, there was a Group Policy in place that set it to run in IE 7 mode for intranet applications; switching to a more recent IE version via the Developer Tools make the issue go away in IE as well. So, that looks to be an organizational configuration issue at its root. Thank for the suggestion re "HTTPS Only". I had not realized that other pages would redirect to HTTP if permitted; somewhat unorthodox behavior....
... View more
11-29-2016
02:29 PM
|
1
|
0
|
1735
|
POST
|
So, a very strange situation ... I've installed Portal for ArcGIS several times and have never seen this behavior. When I click on the top navigation links I am getting redirected from the HTTPS protocol to HTTP. The installation is very standard: Portal installed on a dedicated machine with its Identity store pointed to Active Directory. Portal has not been reinstalled and the underlying machine name has not changed. A Web Adaptor is installed on a separate IIS web server on a separate machine. Anonymous access is enables and a valid certificate is installed that was issued by AD CS. Now, the strange behavior is that, whenever I click on the top navigation links, "My Content", "Groups", etc. I am getting redirected to an HTTP url. This behavior is consistent across browsers. I've included screenshots from IE and Chrome. Firefox behaves the same as Chrome. Anyone know what is causing this problem and how it can be fixed? I have restarted Portal and reviewed the "self" REST endpoint and looked at the page source, and I do not see any place where an explicit HTTP link is being set. All of the navigation anchor tags appear to be relative URLs. Thank you.
... View more
11-29-2016
01:42 PM
|
0
|
4
|
2619
|
POST
|
This is a bit troubling. We have custom widgets and themes that we help develop for clients that, for one reason or another, remain on a specific version of Web AppBuilder. With the ability to download previous versions removed, we are scrambling to try and find copies of older downloads in order to perform new setups. I understand providing the most recent version by default, but to have totally removed the ability to get an older version is not helpful. The old download page that allowed up to selects a version for download was a really nice feature, IMO.
... View more
10-17-2016
12:45 PM
|
5
|
2
|
1192
|
POST
|
Hi, We have a hosted feature service that was checked out from ArcGIS Online onto Collector earlier in the month. Data was being collected and synced nightly without an issue. No data was collected from June 11 - June 20 due to staff vacation. Starting this week, we are unable to Sync to the hosted feature service. We get repeated errors of "Username and password invalid. Enter valid credentials for map layer '<hosted map layer URL>'" We have tried changing the Sharing setting on the Hosted layer all the way up to Everyone and increasing the Role of the users from User to Administrator, all with no effect. We have already copied the geodatabase off of our iPad in order preserve edits, but would like to restore the ability to Sync in order to continue data collection. Q: Has there been any changed during the June update that could have caused this issue? Q: How can we resolve the sync issue without data loss? Thank you.
... View more
06-23-2016
12:14 PM
|
0
|
3
|
2816
|
Title | Kudos | Posted |
---|---|---|
1 | 06-13-2017 10:02 AM | |
1 | 01-04-2017 07:28 AM | |
1 | 11-29-2016 02:29 PM | |
2 | 04-13-2018 12:23 PM | |
5 | 10-17-2016 12:45 PM |
Online Status |
Offline
|
Date Last Visited |
04-04-2022
10:14 PM
|