Security error

Permanently deleted user

6. Februar 2012 20:07

Hi everyon.

I´m currently setting up a GeoCortex site, which works perfectly until I try to add security to the site (just one user). Once security is enabled (I´m using the built-in security) the site crashes with an error.

Has anyone tried something similiar?

 

/customer/servlet/servlet.FileDownload?file=00P6000000e8875EAA

The log contains the following:

<Event Timestamp="2012-02-06T16:00:12.395914+04:00" Level="WARN" Identity="Guest"><Message>Authorization failure: Geocortex.ApplicationServices.Security.Enforcement.AuthorizationException: The current user cannot access the desired resource.

 

   at Geocortex.Essentials.Site.Authorize()

 

   at Geocortex.Essentials.Rest.EssentialsRestController.GetSite(String siteId, Boolean clone)

 

   at Geocortex.Essentials.Rest.EssentialsRestController.GetSite(String siteId)

 

   at Geocortex.Essentials.Rest.Resources.SiteResource.Init()

 

   at Geocortex.Rest.Handling.RestController.InitResource(RequestContext context, RestContext restContext)

 

   at Geocortex.Essentials.Rest.EssentialsRestController.InitResource(RequestContext context, RestContext restContext)

 

   at Geocortex.Rest.Handling.RestRequestDispatcher.InitResource()

 

   at Geocortex.Essentials.Rest.EssentialsRestRequestDispatcher.DispatchRequestUsingEssentialsSecurity()

 

   at Geocortex.Essentials.Rest.EssentialsRestRequestDispatcher.ProcessRequestUnderContext()

 

The Zone of the assembly that failed was:

 

MyComputer</Message></Event>

 

0

• 

  Permanently deleted user

  14. Februar 2012 07:26

  I too am getting a similar (using the Geocortex Global Security) error both when creating a new site in 3.7, or using a site made in a previous version. As a note, I do not have SSL enabled either. If I turn security off completely, the map will load up just fine.

   

  0
• 

  Permanently deleted user

  10. März 2012 03:57

  Have you been able to solve the problem yet?

  I too have encountered a similar problem loading a security-enabled site. This is the error that pops up after having a user log in:

  Initialization Error:

  [Arg_NullReferenceException]

   

  Arguments:

   

  Debugging resource strings are unavailable. Often the key and arguments provide sufficient information to diagnose the problem. See http://go.microsoft.com/fwlink/?linkid=106663&Version=4.1.10111.0&File=mscorlib.dll&Key=Arg_NullReferenceException

   

  0
• 

  Permanently deleted user

  14. März 2012 01:15

  Hi folks,

  When you try to access a secured site with a login that is valid but not permitted to see the site, you'll see errors like those described here.  Furthermore, if your site has a startup workflow and is secured, then the startup workflow will error out before you see an "access denied" style error, which can be more misleading.

  We have a feature request in place to improve the "access denied" handlers so that you can configure what will be shown (in case you want to send the user to a sign-me-up page).

  Regards,

  -Malcolm

  0
• 

  Permanently deleted user

  20. März 2012 01:03

  I was able to fix this problem for our site. The problem was that tokens weren't being generated.

  We previously had a different domain name for our site and we switched to a new one. However, that switch was not reflected in the configuration files for ArcGIS Server. I had to fix the TokenServiceURL key in three files:

  C:\inetpub\wwwroot\ArcGIS\Tokens\web.config

  C:\inetpub\wwwroot\ArcGIS\Services\web.config

  C:\inetpub\wwwroot\ArcGIS\rest\web.config

  0
• 

  Permanently deleted user

  30. März 2012 02:04

  I am having the same issue. I attempted the web.config solution but it didnt work for me. We just installed a new instance of Geocortex Essentials, and now security doesn't work. Has anyone else had any success in solving this issue?

  Stephanie

  0
• 

  Permanently deleted user

  18. September 2012 21:33

  We are having the same issue. Did anyone solve this?

  0
• 

  Jostein Svegården

  4. Oktober 2012 18:33

  Stephanie and Micah: Did you install an instance of Essentials 3.10.0 beside 3.5.1 or older? In that case, if you followed the installation guide chapter 4.2.6 (which contain errors), the security no longer works on your old REST sites. To make it work again, follow the instructions from the same chapter in the 3.10.1 installation guide. Then run the post install on the old instance to perform the registration with application services.

  0
• 

  Permanently deleted user

  18. Oktober 2012 03:35

  I am having this issue on new site created with 3.10.1 and the latest SL viewer.

  0
• 

  Permanently deleted user

  4. Dezember 2012 19:52

  Make sure you have valid crossdomain.xml and clientaccesspolicy.xml files located in the c:\inetpub\wwwroot folder of the machine hosting the ArcGIS Server Map Services you are trying to access.

  We had a similar problem trying to access services that were hosted on an older 9.3.1 instance of ArcGIS Server from a new machine hosting GE 3.10.1 and ArcGIS Server 10.1.

  We have security enabled and use SSL for accessing our site externally.

  Creating a crossdomain.xml with the following content fixed the access issues for us:

  <?xml version="1.0" ?>

   

  <cross-domain-policy>

   

    <allow-access-from domain="*"/>

   

    <site-control permitted-cross-domain-policies="all"/>

   

    <allow-http-request-headers-from domain="*" headers="*"/>

   

  </cross-domain-policy>

   

  0

Bitte melden Sie sich an, um einen Kommentar zu hinterlassen.