Secure Print Service Failed to Execute

Question

I have a web application that calls an ArcGIS 10.2.2 secure print service (accesses secured map services). I am calling the print service using a proxy page. Generally this works, but after roughly 30 minutes the print request fails for no apparent reason, and the ArcGIS Server logs contain the following:-

    Error executing tool.: Layer "internal": Unable to connect to map server at 
    http://myserver:6080/arcgis/rest/services/Internal/Cadastral/MapServer. 
    Layer "jobs": Unable to connect to map server at 
    http://myserver:6080/arcgis/rest/services/Internal/General/MapServer. 
    Layer "wells": Unable to connect to map server at 
    http://myserver:6080/arcgis/rest/services/Internal/Oil_and_Gas/MapServer. 
    Failed to execute (ExportWebMap). Failed to execute (Export Web Map).

The error reported back from the http request is:

Error: Unable to complete operation

The rest of the application works perfectly. If I try printing later (say 20mins), or if I restart the Print Service Tool, it happily prints again for another ~30 mins. It is as if a connection is timing out. Token expiring? Has anyone had this problem before, or can someone suggest where I should direct my attention?

Answer 1

I've just experienced this problem too, in ArcGIS Server 10.3. As @rdeschain suspected, it's to do with the token timeout, so one option is to increase that value. I tested this by reducing it to 2 minutes and restarting the service, and sure enough, it stopped working after 2 minutes.

The other thing you can do is decrease the recycle interval for the geoprocessing service (in the service properties, under Processes). I've set my short-term token timeout to 360 minutes and my recycle interval to 6 hours.

I'll report back if this isn't the answer, but I suspect this might do it.

Answer 2

Recently upgraded from 10.1 to 10.2.2 and ran into the same issue. Talked to ESRI support, but they could not reproduce the problem.

My print service stops working after ~1hr which corresponds to the duration of my short-term token. Try increasing the duration of your short-term token. I increased mine to 24hrs since my services are restarted nightly. I'm still testing but so far so good. Not ideal, but a potential workaround.

Answer 3

I've been trying to do the same thing. Asked an ESRI tech support about this and they said to take a look at this document -

http://resources.arcgis.com/en/help/main/10.2/index.html#/Printing_maps_that_contain_secured_services/0154000005q3000000/

EDIT

The problem for us was that we have have a clustered server environment and we were 1) not using the correct certificates and 2) using the mapServer URL's of the machines in the cluster instead of the URL's of the web adapter.

Answer 4

It appears as though if you can upgrade to 10.3 they have addressed some of the issues of printing a secured service. You can review the ArcGIS 10.3 Issues Addressed List.

Answer 5

well.. I was struggling with this problem almost for a year now. I just came up with a workaround. The only thing you need to do is to generate a Short-lived Token every time your page loads. I did it in my Login Page and put it in Session. I try to explain it step by step:

1-Generating a short-lived Token

• As you may know, Printing Tasks wont work with Long-lived tokens and Short-Lived Tokens will expire after a while ( you can set the lifespan in ArcgisManager/Security ) . So you have to Generate Short-lived token server-side and save it in session.DONT DO IT CLIENT-SIDE(because you will expose the credentials and what's the point of securing the map in the first place!?). Here you can find how to generate tokens server-side C# - Access content from ArcGIS Online

  2-Applying the short-lived token

• To avoid the Arcgis authentication windows dialog you have to setup your proxy.config and apply it to your esriconfig :

     esriConfig.defaults.io.proxyUrl = "proxy/proxy.ashx";
     esriConfig.defaults.io.alwaysUseProxy = true;
  

• Then append the token to the end of your ArcGISDynamicMapServiceLayer address:

      var GeneratedToken = document.getElementById("HiddenTokenTB").value;
      var dynamiclayersURLForPrint = AGS_SERVICE_PREFIX + "/" + MAP_SERVICE_NAME + "/MapServer" + "?token=" + GeneratedToken;
  

  EDIT : I should say that you should make a Map object just for printing( with the token ). Dont add the token to the map you are showing( that will mess up your legend and TOC ). when you are trying to Print the map , just pass the Map object that you made for printing.

Get the extent of the original map first.

printmap.extent = map.extent;

printer = new Print({
              map: printmap,
              templates: [template],
              url: printUrl
          }, dom.byId("printButton"));