Cannot add any layer from web (map service)

[Lu-chiaChuang]

Please help. I cannot add any layer from web into a map on my test portal for ArcGIS. I have no problem to add the same layers to an ArcGIS Online map. The error message is "The layer, layer_name, is not responding. Still trying ....". Another problem is that "Search for layers" does not give anything back. I can add a Web Application from other servers, but not map service.

My guess is this is a communication issue between my server and other servers. Any suggestion is greatly appreciated. Thanks in advance.

BTW, here is a list of the software on my test portal:

  Windows Server 2008R2
  Portal for ArcGIS 10.2
  ArcGIS web adapter for IIS
  ArcGIS server 10.2
  ArcGIS GeoEvent processor 10.2


Luke

[RaviNarayanan]

Using Fiddler or Firebug, please capture the request that is failing.

If the service is from a standalone server (not federated with portal), then there is a known issue where the service cannot be accessed if the hostname in the services URL is same as portal.  Host name can be same if the server and its webadaptor are installed on the same machine as portal. Can you confirm if that is the case here?

[Lu-chiaChuang]

Ravi,

Thanks for your quick response.

Yes, the services are from other standalone ArcGIS Servers (not federated).
No, the hostname of the server is different from the Portal server.

Here is one of map services :

http://mycity.houstontx.gov/ArcGIS10/rest/services/dd/Boundaries_dd/MapServer   --> (this URL is for external use)
http://10.1.4.206/ArcGIS10/rest/services/dd/Boundaries_dd/MapServer   --> (this URL is for internal use)

Also, I use Integrated Windows authentication for Portal security.

The followings are error (Firebug):

************

Blocked loading mixed active content "http://10.1.4.206/ArcGIS10/rest/info?f=json"
https://vgisportal01.houtx.lcl/arcgis/home/js/dojo/dojo/dojo.js
Line 15

Blocked loading mixed active content "http://10.1.4.206/ArcGIS10/rest/services/dd/Boundaries_dd/MapServer?f=json"
https://vgisportal01.houtx.lcl/arcgis/home/js/dojo/dojo/dojo.js
Line 15

Error: Permission denied for <https://vgisportal01.houtx.lcl> to create wrapper for object of class UnnamedClass
https://vgisportal01.houtx.lcl/arcgis/home/js/dojo/dojo/dojo.js
Line 15

[WilliamCraft]

I agree with Ravi; you'll need to run Fiddler to capture some traffic as a first step. 

On another note, this sounds like it could be a browser issue, specifically a Javascript or extension problem when loading Portal.  Which browser and version are you using?  Is it possible for you to start your browser in safe mode or with extensions disabled and try to request the Portal site again?

[Lu-chiaChuang]

I'm not very familiar with Fiddler. Anyway, when I tried to add a map service, Fiddler does not show anything at all. Look like the request does not even send out. I will take a closer look tomorrow. Thank you all for your responses.

Luke

[Lu-chiaChuang]

I setup Faddler to Capture HTTPS traffic from Firefox. Still, I received no logs when I tried to add a map service from our ArcGIS servers. Look like the request was stopped at Portal and didn't go out.

I took a look at "C:\arcgisportal\logs\webserver\catalina.2013-12-12.log" file. I found a few error lines, as shown below. Does this mean I made some mistakes on my config file? Thanks.

  Dec 12, 2013 7:46:50 AM com.esri.gw.publish.AgsServicePublisher isHostedService
  SEVERE: AgsServicePublisher wasn't correctly initialized. AgsServicePublisher.serviceBaseURLWithoutProtocol is empty.

Luke

[WilliamCraft]

Just out of curiosity, are you using HTTPS or HTTP when configuring everything and making request?  From one of your previous posts, I see that you say these are your URLs:

http://mycity.houstontx.gov/ArcGIS10...s_dd/MapServer --> (this URL is for external use)
http://10.1.4.206/ArcGIS10/rest/serv...s_dd/MapServer --> (this URL is for internal use)

However, you also later mentioned that you captured HTTPS traffic.  That leads me to ask how you have configured Portal and ArcGIS for Server despite not federating them together.  My questions at this point are:

1. Within Portal under My Organization --> Edit Settings, do you have the box checked to only use SSL? 

2. Within the Administrator Directory of ArcGIS for Server, under the Security section have you specified HTTP Only, HTTPS Only, or HTTP and HTTPS?  Additionally, under the Machines section have you imported the same security certificate and specified it for your AGS machine (if not using self-signed in IIS)? 

3. Within IIS, do you have a security certificate bound to the website under which your web adaptor(s) exist?  Are you using a web adaptor for ArcGIS for Server whatsoever? 

4. If you are using a CA-signed certificate (i.e., not self signed), does the NAME property for the certificate use the Fully-Qualified Name (FQN) of the host?

On another note, are you running the ArcGIS for Server Windows Service as a local account or a domain account?  Does that account have full permissions on the 'arcgisserver' directories?

[Lu-chiaChuang]

> 1. Within Portal under My Organization --> Edit Settings, do you have the box checked to only use SSL? 

Yes, SSL only. No Anonymous Access.

> 2. Within the Administrator Directory of ArcGIS for Server, under the Security section
> have you specified HTTP Only, HTTPS Only, or HTTP and HTTPS?  Additionally, under
> the Machines section have you imported the same security certificate and specified it for
> your AGS machine (if not using self-signed in IIS)? 

Oops. I think this question points to my problem. This server was a test server for ArcGIS Server 10.2 and geoevent processor. ArcGIS server is running on HTTP; geoevent processor is using HTTPS. I also use ArcGIS built-in user store. I installed Portal for ArcGIS and a web adapter on top of them. I enabled SSL on Portal and IIS only.

> 3. Within IIS, do you have a security certificate bound to the website under which your web
> adaptor(s) exist?  Are you using a web adaptor for ArcGIS for Server whatsoever? 

I did follow Portal help file to setup a web adapter with a security certificate. But that is a web adapter for Portal. I don't have a web adapter for ArcGIS server.

> 4. If you are using a CA-signed certificate (i.e., not self signed), does the NAME property for the
> certificate use the Fully-Qualified Name (FQN) of the host?

No. I don't have a CA-signed certificate.

> On another note, are you running the ArcGIS for Server Windows Service as a local account or
> a domain account?  Does that account have full permissions on the 'arcgisserver' directories?

A local account. It does not have the permission on the 'arcgisserver' directories.


Thank you for your advice. I shouldn't put all those components in one server with different security configurations. I plan to purge my test server and rebuild it again. 

Thank you for your help.

Luke

[WilliamCraft]

No problem.  If possible, perhaps you could reply to this thread once more to indicate what configuration differences exist on the newly-built server when you're finished.  In other words, tell us what you did differently to get it to work (assuming the change from #2 above is the fix).  That would be helpful for others who read the post with similar challenges.  As always, please also remember to mark the correct answer and/or vote up helpful responses when using the Esri forums.  Good luck!

[Lu-chiaChuang]

Here is a quick update.

Our system admin gave me a new VM. I did a fresh installation of Portal for ArcGIS and Web Adapter for Portal according to ESRI document. No problem so far. I am able to add map services to my map. But.... once I set up security to use Integrated Windows Authentication, I cannot add map services to a map. I receives the same error message as before - "The layer, layer_name, is not responding. Still trying ....".

An ESRI web consultant is visiting my company later this week for a different project. I will try to get some answers from him. Thanks for all your feedback.

Luke