Comments (12)
Hi @jbiendara,
your config with-ssl is missing some square-brackets. This part:
"SslRootOrIntermediate" : {
"Alias": "esri-root",
"Path": "C:\\data\\ArcGIS_Configuration\\Certificate\\esri-root.cer"
},
should be:
"SslRootOrIntermediate" : [{
"Alias": "esri-root",
"Path": "C:\\data\\ArcGIS_Configuration\\Certificate\\esri-root.cer"
}],
Maybe this fixes also #90 Q5
Cheers
from arcgis-powershell-dsc.
Hi Rainer,
Unfortunately, adding the extra square brackets didn't change anything.
As soon as I add the “ssl per node” sections to the “AllNodes” part the procedure gets confused. Okay, the node ssl certificates get installed as well as does the root certificate.
But when it comes to federate the server (vsdev2371) with the portal (vsdev2370) the procedure requires a token from the server (vsdev2371), not from the portal (vsdev2370). The federation times out.
Without the “ssl per node” sections in the “AllNodes” part the procedure requires the token for the federation correctly from the portal (vsdev2370), the federation is done in seconds.
Why does the procedure gets mixed up?
Btw: I thought that the square brackets only designate the sections that need to be configured/filled in with the values of the environment or sections that are optional. Now it seems that they also do have a functional significance. Can you help me, what the (functional) difference between the square and the curly brackets is and what they both are used for in the context of the configuration scripts?
Thank you very much, best regards,
Jürgen
from arcgis-powershell-dsc.
Hi,
About the bracketts: The config is written in json-notation. Square-Bracketts are used for Arrays over there. You can see some more Information About Syntax e.g. here: http://www.json.org/
At the example configuration files there are also some square-bracketts inside of Quotation marks. These are meant as optional/filled Information which hast to be changed for use.
As soon as I add the “ssl per node” sections to the “AllNodes” part the procedure gets confused. Okay, the node ssl certificates get installed as well as does the root certificate.
For clarification: Are both certificates now installed in Portal Cert-Store?
Why does the procedure gets mixed up?
This could be a bug. On our Tests we had all WebAdaptors on the same machine and everything worked fine. Could your verify this?
from arcgis-powershell-dsc.
@jbiendara @spitzerr
Call for federation is made on server web adaptor. So when the web adaptors are on different machines the Portal WebAdaptor endpoint is wrongly inferred. This line is the cause of the error.
To get around the error use the following configuation.
WithSSLSections.txt
Ps. in this config, when a portal and portal webadaptor is on the same, the certificate is not installed Portal Cert-Store. It is installed in Machine Cert-Store.
from arcgis-powershell-dsc.
@jbiendara @spitzerr Pull request #95 should solve this bug. You can fork the PR and try it out.
from arcgis-powershell-dsc.
@shailesh91 from my perspective there is an additional timing Problem:
webadaptor waits until ArcGIS_Portal is finished to Register Portal in WA:
arcgis-powershell-dsc/Modules/ArcGIS/Configuration/ArcGISConfigure.ps1
Lines 1474 to 1488 in bfae4eb
After ArcGIS_Portal is finished ArcGIS_Portal_TLS is executed:
arcgis-powershell-dsc/Modules/ArcGIS/Configuration/ArcGISConfigure.ps1
Lines 1006 to 1038 in bfae4eb
As ArcGIS_Portal_TLS installs a new Cert in Portal Cert-Store the Portal-WebServer is restarted. At the same time ArcGIS WebAdaptor tries to get a token and Fails...
I'm not sure how to come around this. Maybe you have an idea.
from arcgis-powershell-dsc.
@spitzerr I will try to repro this issue (Can you send the config file you are using). I have a solution in mind for wmf5 that requires minimal change. But I am not sure how I will get this working in wmf4. Need to brainstorm a little more that.
from arcgis-powershell-dsc.
@shailesh91 please find attached the config which Fails on our site. As it is a racing condition I think it's hard to reproduce anyway.
Hope you can find a fix
from arcgis-powershell-dsc.
adding retries to ArcGIS WebAdaptor when it attempts to get a token and the Portal is restarting might be a good fix.
from arcgis-powershell-dsc.
@spitzerr just an FYI, support for global certs used is going away with the latest PR. You will have to use the node level certs.
@nshampur Will give the retry solution a try.
from arcgis-powershell-dsc.
@spitzerr The new commit (3d9697e) should solve the timing issue. Can you verify this.
from arcgis-powershell-dsc.
Closing the issue. Please open again if you have any further issues.
from arcgis-powershell-dsc.
Related Issues (20)
- Enterprise 11.1 - Error creating site when using Azure Storage accounts. HOT 8
- Enterprise 11.2 - Insights 2023.3 HOT 1
- Web Adaptor fails to install with exit code 1642 HOT 2
- Installing on AWS image with pre-installed server HOT 7
- WebAdaptor fails to install with error SendConfigurationApply function did not succeed HOT 6
- [ArcGISLicense] ArcGIS Pro Single licensing not working. HOT 1
- Multiple WA settings HOT 4
- Server installation error when defining WebAdaptor in role HOT 1
- ArcGIS Enterprise Upgrade From 11.1 to 11.2 Failed to Install Portal HOT 6
- ArcGIS Pro Patches not Downloaded/Installed HOT 5
- WebAdaptors fails to install in a base deployment with error SendConfigurationApply function did not succeed HOT 9
- Upgrade Base Deployment from 11.2 to 11.3 HOT 4
- Invalid MOF definition for node error when installing 11.3 HOT 1
- Enterprise 11.1 Install ODBC Driver 18.1.2.1 fails if already installed HOT 1
- Powershell Error on Install 4.3.0 HOT 9
- Trace-DSCJob Errors HOT 3
- Getting a portal token error while federating a general purpose server HOT 6
- Multi-Install exe files HOT 1
- 11.3 Installation failed: The specified executable is not a valid application for this OS platform HOT 2
- Several issues encountered upgrade 11.1 to 11.3 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from arcgis-powershell-dsc.