Hoppa till huvudinnehållet

Essentials 4.7.1/HTML5V 2.8.1 Windows Authentication Loop

Permanently deleted user
Hi,

 

Intermittently, our viewers seem to go into an 'authentication loop'. I have been able to break this by clearing Chrome's browsing data> Cookies and other site plugin data. 

 

Before I can push this version to production is there a way to configure this away?

 

The sequence is:

 

https://www.dropbox.com/s/wxkbqggxu1sxc5h/SAMLoginProblem.avi?dl=0
0

Kommentarer

11 kommentarer

Datum Röster
  • Mike Ketler
    Hi Richard,

     

    Can you test this using the REST endpoint instead of the viewer?

     

    https://samtest.launceston.tas.gov.au/Geocortex/Essentials/test/REST/Sites

     

    Click the "Sign In" option at the top right and see if you can reproduce the "loop".

     

    I did notice that there is a warning in your Chrome browser that not all content in the viewer is secured with HTTPS. I'd suggest correcting that and then see if the sign in issue re occurs. 

     

    Thanks,

     

    Mike Ketler
    0
  • Permanently deleted user
    I'm seeing identical behavior - in Chrome and IE 11 (in firefox, map loads but not loading the secured service).  Basically the browser gets caught in a loop - trying the initial load, then the message in the screen shot, then repeat these two phases. What's odd is that this just started happening today on a site that has been up for a few weeks.  Only change I have made that corresponds with this behavior showing up is enabling instant search, but don't believe that is the cause here.

     

    All data is coming in via HTTPS.

     

    Site includes web-tier secured service, and we have single-sign on enabled so that there is no actualy log-in process - it is transparent.

     

    Screen shot of behavior:

     

    User-added image
    0
  • Permanently deleted user
    Should note we're running GE 4.7, and GVH 2.8 - I upgraded to 2.8.2 after the behavior started, but the issue was the same in 2.8.2 as 2.8.0
    0
  • Permanently deleted user
    Hi Mike,

     

    I wasn't able to reproduce the loop via the REST link.

     

    The 2 web requests that are not secure are:

     

    http://themes.googleusercontent.com/static/fonts/rosarivo/v1/OGdIq-p0tOtBN2VMVvO9W_esZW2xOQ-xsNqO47m55DA.woff

     

    http://themes.googleusercontent.com/static/fonts/inconsolata/v5/BjAYBlHtW3CJxDcjzrnZCIbN6UDyHWBl620a-IRfuBk.woff

     

    I'm trying to isolate where these 2 requests are coming from. They aren't intentional by me.

     

    Regards,

     

    Richard
    0
  • Permanently deleted user
    Curious if there's any further word on this issue? Like Richard, we generally experience this behavior on reloading the map.  It's different across browsers, but our dev. installation is pretty much busted currently.  Also not able to re-create at the REST endpoint. 

     

    Will open a support case barring any new discoveries.
    0
  • Permanently deleted user
    Hi Allen,

     

    Authentication issues are really tricky to troubleshoot on the forums.  You could run Fiddler while the login loop is happening, and see if there are any clues there, that might help.  Otherwise, I'd suggest opening a case so we can help you via a screen share.

     

    I hope that helps!

     

    Thanks,

     

    Danny
    0
  • Permanently deleted user
    Thanks Danny - I'm actually filling out the support case creation right now - will run fiddler trace and attach that as part of the case.

     

    Allen
    0
  • Permanently deleted user
    Quick update - in our case this appears to be related to Webadaptor situation in conjunction with new ssl certificates our organization recently implemented. 

     

    We have 2 ways of referencing the needed web-tier secured map services.  We have a webdaptor on the Application server that hosts Essentials and points to the secured services.  When adding the services using this webadaptor, we get the behavior referred to here - the windows auth loop. 

     

    However we are also able to use a different webadaptor that sits on the ArcGIS Server machine itself.  When using this URL, the site/viewer behaves correctly. 

     

    We started seeing this behavior shortly after we switched from GoDaddy ssl certificates to a new model, where the CA is within our organization, so I'm still figuring out the consequences of this but it does not appear to be a Geocortex-related issue. 

     

     
    0
  • Permanently deleted user
    Our Web Adaptor has been on the Geocortex Web Server rather than the ArcGIS Server box for the last 2 years. We have been using a RapidSSL CA for over a year across several Essentials versions without issues. Please add any more findings to this thread if you can. 
    0
  • Permanently deleted user
    After more testing I seem to be suffering from this bug https://support.geocortex.com/essentialsGSCForum?id=90660000000Gu2IAAS

     

    Have raised a support case with our reseller.
    0
  • Permanently deleted user
    Hi Richard - thanks for this link.  I'm fairly certain this is the cause of our issues as well - the authentication loop behavior started after I indexed a service for I.S., and the behavior of I.S. is the same as described in this bug.  If I delete the index and use standard global search w/o and IS index, the behavior does not occur. 

     

     
    0

Du måste logga in om du vill lämna en kommentar.

Hittade du inte vad du sökte?

Nytt inlägg