Export Web Map using Windows Authentication

[JoshuaYoung]

Hello everyone,

I have published an Export Web Map tool as a geoprocessing service for printing some of our secure services. The problem is when I use Windows Integrated Authentication (WIA) the tool fails every time with "Unable to connect to map server at....." for each secure service in the web map and ends the error message with "Client tried to access password-protected page without proper authorization.". What's crazy (at least to me) is changing the authentication of ArcGIS Server to HTTP Basic or HTTP Digest fixes the problem it runs just fine.

I have run the custom Export Web Map tool on my computer and the copy that it put on the server after I published it, and both copies run just fine and I used multiple accounts that have sufficient permissions. It is only when I try to run the geoprocessing service using WIA that I get an error.

To test the geoprocessing service I did not use my app. Instead I simply ran it through the Services Directory. I provided the exact same parameters as I did when I ran the tool (not the service) in ArcMap. Like I said earlier the only thing that I have to change to get it working is switching from WIA to HTTP Basic or HTTP Digest. I am using the same credentials when I change the authentication method as well.

So is this a bug or is there some magical setting that is not documented to get WIA to work? Also, everything else works when using WIA, such as dynamic map services, tiled map services, feature services, geocoding services, heck even a geodata service.

I am using:
Windows Server 2008 R2
ArcGIS for Server Enterprise Advanced 10.2 with all the available patches
Windows Domain user store
ArcGIS Server Built-in role store
Web Tier authentication
Web Tier authentication mode

[TanuHoque]

try one of the following 2 options:
a) use a domain account as 'ArcGIS Server Account'
b) publish a ExportWebMap Tool with secured ags-server-connection (with user/pwd save) embedded in the tool
http://resources.arcgis.com/en/help/main/10.2/index.html#/Printing_maps_that_contain_secured_service...

[JoshuaYoung]

Thank you for the reply but unfortunately we are already doing both of those things.  Our ArcGIS Server account is a domain account and the link you provided is the same help document that I used to created our Export Web Map service for printing secure services.

What I cannot figure out is why Windows Authentication causes it to fail but HTTP Basic and HTTP Digest work just fine. Obviously, it is not using the credentials that I supplied when publishing the Export Web Map tool and it is not using the user's credentials that requested the print. I had figured that one of those credentials would have been used to run the print service but it seems like another credential is being used instead. But why would ArcGIS Server do that when it uses the correct credentials for any other kind of service that it is running?

[TanuHoque]

Joshua,
at this point, I'd recommend you to contact Esri Tech Support.