Latest Contributions by DavidHoy

Hi Dean -  I presume this keeps the internal user identifier, so content ownership and group membership would remain unaffected. But does the username shown in the Profile and Item ownership say remain unchanged (i.e. is the IDP username effectively an Alias - only used when authenticating?) ... View more

If you just switch to using SAML login, you are correct that new users may appear in your Portal for the <usrname>@domain.net username provided by Azure AD as they start to login (if you have automatic user creation enabled) There is no back-door way to update existing users to have a new username. You will need to transfer any content owned by the existing usernames <usrname>@domain to be owned by the new names. We have handled this by scripting - create the new users and assign the new users the appropriate type and role - assign the new usernames to the Groups to match the old username - transfer ownership of any Portal items to the new user - disable the existing Username (remove in future) Once this is complete, the first time a user logs in via SAML, they will find their new username is in place You cannot have IWA and SAML working at the same time, so User Store Configuration and Group Store configuration cannot be "WINDOWS" ... View more

hi Vijay, your plan is sound - a split-zone dns arrangement would certainly allow the ArcGIS Enterprise to work for external and internal users. There are many forms of DNS, so, it is difficult to provide instructions here unless you can be more specific. A bit of web searching for the doc for your particular DNS provider should get you there. If you cant work it out - it is not a critically bad thing to allow your internal users to have everyone have the FQDN resolve to the Reverse Proxy. ... View more

Hi Ryan as you are about to discover, ArcGIS Enterprise is quite a different beast to Standalone ArcGIS Server. If you are thinking of using webgisdr - I presume you are aware that this backs up all the tiers (Portal, all Federated Servers and ArcGIS Data Stores), you may find you are getting a larger and slower backup than you anticipate. Aside from that - very interesting method to speed up file access by pre-warm-up. You may find this is a good idea for FSx fileshares too. Have you considered using a UNC path and DNS alias for Fileshare used for Server config and directories? This may allow easy change to a newly recreated FSx share without needing to worry about updating any existing service configurations that are linked to data paths.   ... View more

@DMH_Hobart  Dean, the code I provided wasnt quite right - I will test and provide update shortly ... View more

Hi Dean,  you can retrieve the info about publication from from the sharing REST endpoint e.g. https://<portal-fqdn>/portal/sharing/rest/content/items/<item-id> You can search for the item representing your service at  https://<portal-fqdn>/portal/sharing/rest/search programmatically - the reference is here. https://developers.arcgis.com/rest/users-groups-and-items/item.htm items/[itemID]: Item—ArcGIS REST APIs | ArcGIS Developers   ... View more

If you have already used the .prvc file it cannot be te-used - even if the original site has been decommissioned. you would need to deauthorise the license file before being able to create a new .prvc do this on the MyEsri site in case like yours, where you are experimenting and may need to create and tear down your ArcGIS Server(s), you may wish to turn your new .prvc into a pre-authorised .ecp that can be reused. You do this using the “Secure Site Operations” within the licensing section. ... View more

yes - the cloudformation error log is a good place to start with the trouble shooting. All we can see from the screen shot is that there was an error after 2 hours - so that sounds like it was almost there. regarding licenses. If you are building an HA stack with CloudFormation you will only need one ArcGIS Server license file - if this is just a base ArcGIS Enterprise, an ArcGIS Server Standard license would be OK. BUT, this must be a license file that covers 2 AWS Availability Zones - so that will consume 2 of your organization's Server licenses (each up to 4 Cores or 8 vCores in AWS). Speak with you License Administrator to get a license file that covers this. BTW, even if you only have a license file for one AGS license - that wont be the cause of your CF failure. But if you are trying to re-use a .prvc file you have already installed elsewhere, then that may well be the problem. When the Chef script within the CF template tries to authorize the ArcGIS Server site that has been created. it may be that the Esri licensing management is rejecting the file because it has already been used. ... View more

wow - fixed at Pro 2.9 BUG-000109582: When publishing from ArcGIS Pro, the client sets inv.. (esri.com) ... View more

Hi @satyaranga  AWS ALB does not provide URL rewrite which is what you would need to use the same FQDN with different contexts to distribute to separate Target Groups all using :6443/arcgis for the Hosting, GIS, Image Servers The path direction rules work only if the context does not change - to achieve this, you need to have Web Adaptors in front of your Servers. The alternative (less desirable IMHO) is to have multiple ALBs 1 for Portal/Hosting Server as described in this original post, and another with a different FQDN for each federated site. e.g.  Portal:   https://<baseenterprisename>.<yourdomain>/arcgis  (priority rules direct to :7443 on the Portal VM(s) ) Hosting Server:     https://<baseenterprisename>.<yourdomain>/arcgis  (default rule directs to :6443 on the Host Svr VM(s) ) Federated GIS Server:    https://<federatedGISsitename>.<yourdomain>/arcgis  (directs to :6443 on the federated Server VM(s) ) ... View more

Hello Bishwa, I believe the intention is to make the publishing/sharing process as straightforward as possible for the greatest number of users. Creating Hosted Services meets this objective. The user does not need to think about where the data is being sourced and whether the server can "see" it. Using a federated server is available as an option if you know what you are doing and wish to use a User Managed data store. I think changing the default value away from Hosting Server would not be the optimal solution. ... View more

I cant say I know what the issue is here - but I am presuming you are talking about a file geodatabase, not an enterprise geodatabase in SQL Server or Oracle or PostgreSQL the better forum to ask this question within would be the https://community.esri.com/t5/geodatabase-questions/bd-p/geodatabase-questions  ... View more

yes - simple delete in windows explorer of files older than your last full backup is safe ... View more

Hello Paul, I don't have any experience with FSx for OpenZFS but I would have thought if it looks like a SMB mountable file share then it theoretically may work. The question would be does it perform for lots of small writes & reads with read after write consistency to allow the multiple ArcGIS Servers to each see the same changes effectively concurrently? To help you move forward, have you considered deploying initially using the "standard" fileserver and then moving the Server Directories to the location that is actually FSx for OpenZFS ? Or is your problem that even though you can mount the FSx file share and access with a UNC path, the ArcGIS Server installation won't allow you to use that path for Server directories? Have you ensured that the Windows Service account you are using for the ArcGIS Server has permissions to read/write in the FSx share? ... View more