1
vote
1answer
35 views

Identifying user triggering ArcGIS Server invalid username or password error

Can anyone tell me if there is a way to identify the culprit of an "Invalid Username or Password" error in ArcGIS Server logs? For source, it just says 'Admin' for source, and nothing for User. Is ...
0
votes
1answer
54 views

Upgrading to ArcGIS 10.2 for Server and security vulnerability?

I have ArcGIS 10.1 Installed on my CentOS server and I have also installed "ArcGIS-101SP1-S-SSEC-Patch-lx" security patch. Do I need to upgrade ArcGIS for Server to 10.2? If I don't install the ...
1
vote
1answer
41 views

HTTPS and working with non-secure services - ESRI jsAPI

Situation: I am currently working with an app that is required to be delivered over HTTPS because of an organizational security requirement. I currently do not have access to this servers ...
3
votes
0answers
66 views

ArcGIS Server 10.1 Integrated Windows Authentication with Token based

In ArcGIS Server 10.1 on Windows 7 and IIS, if wanting to secure services within an Intranet with Active Directory is that Integrated Windows Authentication ...
1
vote
0answers
31 views

Consuming secured ArcGIS for Server services in Google Earth?

I am able to easily consume unsecured ArcGIS for Server (AGS) services in Google Earth (GE), but not secured services. I have created a KML Link in AGS Manager with no luck, and added the service ...
1
vote
2answers
141 views

Active Directory AND integrated user store on ArcGIS Server 10.2

We have one License for ArcGIS Server 10.2. We need to publish Services for internal use with Active Directory authentication and for external use (internet) with username/password authentication. ...
1
vote
2answers
187 views

Does ArcGIS for Server support others using own credentials (Single Sign On) for Federated Services?

I have a number of secured ArcGIS 10.2 for Server (AGS) services which a number of other companies use as well. At the moment we have created domain accounts on our domain which they need to access ...
2
votes
2answers
145 views

How to ensure that only my application has access to ArcGIS Server services

I'm making a web map based on the ArcGIS Server JS API. How can I ensure that users must use my front-end to access the ArcGIS Server layers? That is, I want anyone visiting MyDomain.com/index.html ...
4
votes
1answer
148 views

about token based authentication security

I am reading the authenticated services with token. I understand that a user have to get a token to using arcgis services. Example: https://domain.com/arcgis/rest/services/myMap/MapServer is my ...
2
votes
0answers
63 views

ArcGIS Server Security related justification

We just installed ArcGIS server(JAVA) and the network security has a few policy that requires us to provide justification on our setting. Does anyone have any reference document for the following ...
1
vote
1answer
187 views

problem to Disable the security in server.dat file

I am trying to remove the security from web services.While seaching , I found that we have to set <SecurityEnabled>True</SecurityEnabled> To ...
2
votes
1answer
616 views

ArcGIS Server security and Windows domains - issues for non-IE browsers

I'm looking for some advice / experience in ArcGIS Server security with a Windows domain. Normally in this situation I would do some prototyping but I don't have access to a domain. I'm planning to ...
3
votes
3answers
771 views

Feature-level authorisation in ArcGIS Server REST services

Is feature-level authorisation even remotely possible when accessing ArcGIS (10) via the REST APIs? From what I understand I can secure individual services but at most this gives me control over who ...
2
votes
2answers
254 views

Securing ArcGIS Server 10.x On .NET - User Store Point At LDAP

I have the fun job of securing ArcGIS Server, and one of the requirements is to use LDAP for authentication and authorization for services... For ArcGIS Server installed on Java backend it looks to ...
0
votes
1answer
137 views

Securing AGS output, cache, and jobs folders

ArcGIS Server (for .NET) generates images, etc. in arcgisoutput, arcgiscache, and arcgisjobs folders. Can the AGS security system (specifically, token-based) be used to secure these folders in the ...
6
votes
1answer
3k views

Struggling with ArcGIS REST API and tokens

I'm doing my best to secure my AGS (9.3.1) services, but have struggled with tokens. As you can see, my nw account belongs to the agsadmin and agsusers roles: I have assigned these same roles to my ...
1
vote
2answers
178 views

Where deploy Custom Provider DLL for ArcGIS Server if GAC is not an option

I have a client that has developed a custom Membership Provider for ArcGIS server and cannot deploy the provider to the GAC. Does anyone know where we could put the DLL such that the ArcGIS Security ...