Configure ArcGIS Server to use Active Directory #60
Conversation
|
@mu88, this is very helpful. I hope ESRI accepts this commit and merges it to the base as a lot of organizations could benefit from this. |
|
@pbobov that's good to hear. Any rough estimate on when the next release would be? Also, I am assuming you are referring to 10.5.1?? |
|
@kirankc Yes. The plan is to release ArcGIS Chef Cookbooks 3.1.0 with release of ArcGIS 10.5.1. |
|
@kirankc Great to hear that it would help you. Just keep in mind that my enhancement only supports ArcGIS Server's basic Active Directory support, so no nested Active Directory groups are supported. For this, I've also implemented Esri's ASP.NET Provider within Chef. |
|
Good morning everybody,
I hope you find it useful! |
|
Thank you @mu88 for sharing your hard work with the community. This is good stuff and something we all could benefit from. |
This commit enables the Cookbook to set the ArcGIS Server's identity store to an Active Directory. For the authentication against the Active Directory, the following parameters out of
webgis-windows.jsonare used:node['arcgis']['run_as_user']node['arcgis']['run_as_password']To enable the coupling, the parameter
node['arcgis']['server']['configure_active_directory']withinwebgis-windows.jsonhas to be set totrue.Furthermore, the ArcGIS Server's administrators and publishers can be bound to Active Directory groups. For this, the parameters
node['arcgis']['server']['active_directory_groups_administer']andnode['arcgis']['server']['active_directory_groups_publisher']have to be set withinwebgis-windows.json. These parameters are arrays, so several Active Directory groups can be set as administrators or publishers.The new functionality is encapsulated within the recipe
server_active_directorywhich is not enabled by default within 'webgis-windows.json' - this can be done on demand.