漏洞
When the ArcGIS Enterprise portal is configured with Security Assertion Markup Language (SAML) (Microsoft Azure Active Directory) and the logout URL is set in Microsoft Azure, upon logging out, users receive a server error, "404 – File or directory not found." instead of the portal logout page.
| 漏洞 ID 编号 | BUG-000165238 |
|---|---|
| 已提交 | February 20, 2024 |
| 上次修改时间 | October 8, 2024 |
| 适用范围 | Portal for ArcGIS |
| 找到的版本 | 11.1 |
| 操作系统 | Windows Server |
| 操作系统版本 | 2022 |
| 状态 | Non-Reproducible |
附加信息
This issue is non-reproducible. Check the Microsoft Internet Information Services (IIS) web.config file within the C:\inetpub\wwwroot\ folder for the ArcGIS Web Adaptor and verify that the maxQueryStringLength and maxQueryString properties are set to 2097151 and 2147483648 respectively. https://learn.microsoft.com/en-us/iis/configuration/system.webserver/security/requestfiltering/requestlimits/ https://support.esri.com/en-us/knowledge-base/get-requests-fail-when-passing-through-arcgis-web-adapt-000015245 Below is the sample web.config file for the ArcGIS Web Adaptor C:\inetpub\wwwroot\[web adaptor context]\web.config: <configuration> <system.web> <httpRuntime maxUrlLength="2097151" maxQueryStringLength="2097151" maxRequestLength="2097151" executionTimeout="100000"/> </system.web> <system.webServer> <security> <requestFiltering> <requestLimits maxAllowedContentLength="2147483648" maxQueryString="2147483648"/> .... .... .... </system.webServer> </configuration>解决办法
Leave the 'Logout Url (Optional)' parameter blank in Microsoft Azure Active Directory (AD).
重现步骤
漏洞 ID: BUG-000165238
软件:
- Portal for ArcGIS
当漏洞状态发生变化时获得通知
发现关于本主题的更多内容
搜索相关信息
查找与此主题相关的培训
探索想法并提供反馈
获取来自 ArcGIS 专家的帮助
下载 Esri 支持应用程序