Latest Contributions by LucasScharenbroich

‎06-02-2017

I have federated Portal 10.5 with a single-machine ArcGIS Server 10.5 site. Portal is configured to use Active Directory for its Identity Store. Portal and ArcGIS Server are on different virtual servers and their respective web adaptors are on a separate Web Server and configured under different IIS sites. I have done ArcGIS Enterprise Basic deployment in the past successfully. This table summarized the configuration URL Description https://ags-web-dev.mydomain.org/server Web Adaptor pointing to the ArcGIS Server https://ags-web.mydomain.org/portal Web Adaptor pointing to the Portal for ArcGIS Site https://ags-dev.mydomain.org:6443/arcgis Direct URL to the ArcGIS Server machine https://ags-portal.mydomain.org:7443/arcgis Direct URL to the Portal for ArcGIS Almost everything appears to work correctly. For example I can log into Portal using the primary site administrator account I can log into Portal using my Domain account After Federating, all of the ArcGIS Server services appeared as Portal items, as expected I can log into the ArcGIS Server Administrative service directory using the ArcGIS Server site administrator credentials, or by manually generating a Portal token. The only issue if that attempting to open ArcGIS Server Manager fail. The interface hangs on the "Please wait..." progress bar and the network traffic shows repeated failures to POST to the portal generateToken page via the ArcGIS Server proxy https://ags-dev.mydomain.org:6443/arcgis/manager/proxy?_proxyUrl=https%3A%2F%2Fags-web.mydomain.org%2Fportal%2Fsharing… The network inspector shows that ArcGIS Server returned a 500 server error caused by a "Connection closed" (see screenshot). Are there any good ways to go about diagnosing the root cause of an issue like this? Update Installing Fiddler and enabling HTTPS traffic snooping shows that request is being sent from the ArcGIS Server machine to the Portal Web Adaptor. This may be a side-effect of enabling Fiddler as a MITM proxy, but the Portal logs show this WARNING: ArcGIS Server services URL 'https://ags-web-dev.mydomain.org/server' cannot be validated against 'https://ags-web-dev.mydomain.org/server/rest/info'. If the service URL is a proxy URL verify it is accessible to clients. The JSON at the /info endpoint is { "currentVersion": 10.5, "fullVersion": "10.5.0", "soapUrl": "https://ags-web-dev.mydomain.org/server/services", "secureSoapUrl": null, "owningSystemUrl": "https://ags-web.mydomain.org/portal", "authInfo": { "isTokenBasedSecurity": true, "tokenServicesUrl": "https://ags-web.mydomain.org/portal/sharing/generateToken" } } What information is being used to attempt this 'validation'?

‎05-03-2017

I'm not trying to decrypt an existing password. I'm using DSC for the deployment (versus chef), and I want to take a known password and hash it into the correct format so that it can be used in the config.xml file during the ArcGIS Server installation. Hopefully that makes things a bit clearer.

‎05-03-2017

I am trying to set up some preconfigured XML configuration files to support an automated deployment of ArcGIS Server (and Portal) that uses the /ACCOUNT=UseConfigFile /CONFIGPATH=my_config.xml installer command line options. I have an XML file that I saved from a previous install and was hoping to use that as a template. However, the password field of the XML file appears to be stored as a base64-encoded hashed value. See examples below. Is there any documentation on exactly how a password in encoded in this file? Also related, the XML configuration file for Portal also encodes the password, but appears to use a different technique. Is there any documentation on the Portal configuration file as well? If there is a different approach to setting up deployment configurations without having to store plain-text credentials, I'm open to suggestions. Example ArcGIS Server XML config file <ServerConfigurationUtility> <ArcGISServerServiceUserName>domain\webgis</ArcGISServerServiceUserName> <ArcGISServerServicePassword>AgAAADAAAAAuaGNuU2Niq1ZpNjY5MmNaWXZOc3ZjRHNSMEhIadpo2G5oWVNkbAgzVkxVN1V9KgA= </ArcGISServerServicePassword> </ServerConfigurationUtility> Example Portal XML config file <ConfigurationUtility> <UserName>domain\webgis</UserName> <Password>00022e684e54686754597261625452584378425171317638616b6f665a696843766541416e7636515659bf6d695a6b3e7a00</Password> <Directories/> </ConfigurationUtility>

‎03-14-2017

I have been trying to add a user to an AGO account with Enterprise Login enabled. The Enterprise Login is configured to automatically add users upon successful login. When I try to add a new user via logging in for the first time, I get an error Unable to assign user 'UserName@DOMAIN_org' to this account 'xxxxxxxxxxxxxxxx' , Username is not available I have verified that this user's email address is not currently in my Organization's users. Also, I am able to successfully log into the IdP endpoint with the target user account. Any suggestions on how to diagnose this issue and try to make this username available to the org?

‎02-22-2017

Be careful with this. According to Section 9.1.1 of the Google Maps ToC, internal-only applications that use the Google Maps API are not allowed, except for testing and development, or unless you have an Enterprise Agreement with Google.

‎02-08-2017

When adding a secured service URL as an Item in ArcGIS Online, the checkUrl.jsp page is called with the service URL passed in as an argument. That part makes sense as AGO needs to interrogate the service endpoint to figure out its capabilities. However, the request also passes along a token. I am wondering where that token comes from, since there is no request to the ArcGIS Server's token endpoint, and what function it plays when validating the target service URL.

‎01-24-2017

Using a Feature Layer as an Event Source is working correctly with the 10.5.1 Simulator. Very nice!

‎01-24-2017

Ah, that is a nice behavior of Save As.. to act as a simple export of the Layer features. Yes. Saving to a file and then running the file through the Simulator works as expected. Many thanks!

‎01-24-2017

Unfortunately the issue remains. The GeoEvent Server log shows the same error and watching the traffic in Wireshark still shows a lack of newline character in each TCP packet's data payload. Sending simulation data from a file works so I will use that as an immediate-term workaround. I did verify that the Wireshark traffic, when the data is sourced from a text file, DOES add the CR LF characters (0x0D 0x0A) as the last two bytes of the packet data.

‎01-24-2017

Just getting started with GeoEvent Server and have run into an issue that seems like a misconfiguration on my part. I have a Hosted ArcGIS Online Feeature Service with point data that I am using as input to the GeoEvent Simulator. I have a GeoEvent Definition that matches my Feature Class schema. My GeoEvent service is very simple and is just using the Receive Text from TCP Socket input adaptor and writing the output to Stream Service. The issue is that the Input Connector does not receive any records when using the GeoEvent Simulator. If I connect to the TCP Port manually and paste in my CSV record, it works as expected. I turned on logging on the com.esri.ges.adapter.text.TextInboundAdaptor and I am seeing a repeated DEBUG error of: While parsing the text event, the end of line character was not found. The left overs .... Which is followed by a long, concatenated list of the previously sent data. Looking at the GeoEvent Simulator traffic in Wireshark, I can see that each event is being sent as a separate TCP packet and that, as the debug message states, there is no terminating newline character after each record. When I am connected manually, I obviously type a newline to send the data and that explains the different behavior I've observed. The core question is how to configure with GeoEvent Simulator or my Input Connector so that they are happy with each other? I've tried setting the Message Separator in the Input Connector to blank, but that had no effect. I've also looked through the help / config documentation for the GeoEvent Simulator, but have not found any place where I can define a message separator for the event stream. My last resort would be to create a new attribute in my source feature class that I can insert a separator character and get it to appear in the event data payload sent by the Simulator, but that seems quite ... hackish. Any pointers?

‎01-04-2017

I have a web map that, when opened in Explorer for iOS, initially loads the map with all of the layers turned ON. If I open the Map Layers menu item and toggle *any* layer, then the map refreshes itself into the proper state. The Web Map uses a Dynamic Map Service (not a Feature Service) and does not override the Map Service's default visibility settings and the Map Service itself has appropriate defaultVisibility properties set on each layer, e.g. { "defaultVisibility": false, "subLayerIds": null, "minScale": 0, "maxScale": 0 } The issue was originally observed on version 10.2.9 of the app. After upgrading to the most recent version (10.2.10), the problem remains. Does anyone have a suggestion on how to work around this issue? Thank you.

‎11-29-2016

Turns out there were two issues in play. Forcing HTTPS Only in the Portal Settings page fixed the issue in Chrome and Firefox. As for IE, there was a Group Policy in place that set it to run in IE 7 mode for intranet applications; switching to a more recent IE version via the Developer Tools make the issue go away in IE as well. So, that looks to be an organizational configuration issue at its root. Thank for the suggestion re "HTTPS Only". I had not realized that other pages would redirect to HTTP if permitted; somewhat unorthodox behavior....

‎11-29-2016

So, a very strange situation ... I've installed Portal for ArcGIS several times and have never seen this behavior. When I click on the top navigation links I am getting redirected from the HTTPS protocol to HTTP. The installation is very standard: Portal installed on a dedicated machine with its Identity store pointed to Active Directory. Portal has not been reinstalled and the underlying machine name has not changed. A Web Adaptor is installed on a separate IIS web server on a separate machine. Anonymous access is enables and a valid certificate is installed that was issued by AD CS. Now, the strange behavior is that, whenever I click on the top navigation links, "My Content", "Groups", etc. I am getting redirected to an HTTP url. This behavior is consistent across browsers. I've included screenshots from IE and Chrome. Firefox behaves the same as Chrome. Anyone know what is causing this problem and how it can be fixed? I have restarted Portal and reviewed the "self" REST endpoint and looked at the page source, and I do not see any place where an explicit HTTP link is being set. All of the navigation anchor tags appear to be relative URLs. Thank you.

‎10-17-2016

This is a bit troubling. We have custom widgets and themes that we help develop for clients that, for one reason or another, remain on a specific version of Web AppBuilder. With the ability to download previous versions removed, we are scrambling to try and find copies of older downloads in order to perform new setups. I understand providing the most recent version by default, but to have totally removed the ability to get an older version is not helpful. The old download page that allowed up to selects a version for download was a really nice feature, IMO.

‎06-23-2016

Hi, We have a hosted feature service that was checked out from ArcGIS Online onto Collector earlier in the month. Data was being collected and synced nightly without an issue. No data was collected from June 11 - June 20 due to staff vacation. Starting this week, we are unable to Sync to the hosted feature service. We get repeated errors of "Username and password invalid. Enter valid credentials for map layer '<hosted map layer URL>'" We have tried changing the Sharing setting on the Hosted layer all the way up to Everyone and increasing the Role of the users from User to Administrator, all with no effect. We have already copied the geodatabase off of our iPad in order preserve edits, but would like to restore the ability to Sync in order to continue data collection. Q: Has there been any changed during the June update that could have caused this issue? Q: How can we resolve the sync issue without data loss? Thank you.

Online Status	Offline
Date Last Visited	‎04-04-2022 10:14 PM

My Ideas

Latest Contributions by LucasScharenbroich

Unable to log into ArcGIS Server Manager after Federating

Re: What is the password hash format used in the exported XML configuration file?

What is the password hash format used in the exported XML configuration file?

'Unable to assign user' using Enterprise Login

Re: Google Street View Widget 2.1 - 08/29/16

How does the checkUrl.jsp acquire its token

Re: How to resolve "While parsing the text event, the end of line character was not found." using GeoEvent Server

Re: How to resolve "While parsing the text event, the end of line character was not found." using GeoEvent Server

Re: How to resolve "While parsing the text event, the end of line character was not found." using GeoEvent Server

How to resolve "While parsing the text event, the end of line character was not found." using GeoEvent Server

Explorer on iOS Opens Map with all Layers On

Re: Top Navigation Links redirect to HTTP

Top Navigation Links redirect to HTTP

Re: Where are the older Web AppBuilder Developer Editions

Unable to Sync from Collector after June Update

Re: Unable to log into ArcGIS Server Manager after...

Explorer on iOS Opens Map with all Layers On

Re: Top Navigation Links redirect to HTTP

ArcGIS REST API Hooks via Jupyter Notebooks

Re: Where are the older Web AppBuilder Developer E...