Bug
Users in a lot of groups cannot authenticate when using HTTPS, ActiveDirectory, and web tier authentication together.
| Bug ID Number | NIM087257 |
|---|---|
| Submitted | December 10, 2012 |
| Last Modified | June 5, 2024 |
| Applies to | No Product Found |
| Version found | 10.1 |
| Version Fixed | 10.2.0 |
| Status | Fixed |
Workaround
1. Open arcgis/server/framework/runtime/tomcat/conf/server.xml in a text editor.2. Look for this text at the end of the file: <Connector SSLEnabled="true" clientAuth="false" keyAlias="SelfSignedCertificate" keystoreFile="/opt/esri/3135_upgrade/arcgis/server/usr/config-store/machines/<a href="http://RHDAILY.ESRI.COM/arcgis.keystore" target="_blank">RHDAILY.ESRI.COM/arcgis.keystore</a>" keystorePass="<blah blah blah>" maxThreads="150" port="6443" protocol="org.apache.coyote.http11.Http11Protocol" scheme="https" secure="true" sslProtocol="TLS"/>3. Insert maxHttpHeaderSize="65535" as an attribute of the XML so that it looks like this:<Connector SSLEnabled="true" clientAuth="false" keyAlias="SelfSignedCertificate" keystoreFile="/opt/esri/3135_upgrade/arcgis/server/usr/config-store/machines/<a href="http://RHDAILY.ESRI.COM/arcgis.keystore" target="_blank">RHDAILY.ESRI.COM/arcgis.keystore</a>" keystorePass="<blah blah blah>" maxThreads="150" port="6443" protocol="org.apache.coyote.http11.Http11Protocol" scheme="https" secure="true" sslProtocol="TLS" maxHttpHeaderSize="65535"/> "Note"Note: If you change the PSA account you will need to re-do the steps mentioned above as workaround because changing the primary site administrator username/password will undo the changes made to the server.xml file.Steps to Reproduce
Bug ID: NIM087257
Software:
- No Product Found
Get notified when the status of a bug changes
Discover more on this topic
Search for related information
Find training related to this topic
Explore ideas and give feedback
Get help from ArcGIS experts
Download the Esri Support App