Apparently we have a configuration issue with TFS 2017 11.0.60315.1
The team project collection(s) are online, but I get TF31002 error when I try to connect from my client AND the server. e.g. click "Change URLs" and "Test"
I also get HTTP code 404: Not Found when I click "Group Membership" or "Administer Security" from the Application Tier.
I cannot add a picture so... here is a transcript:
Error Encountered
TF31002: Unable to connect to this Team Foundation Server:
http://myserver:8080/tfs
Team Foundation Server Url: http://myserver:8080/tfs.
Possible reasons for failure include:
- The name, port number, or protocol for the Team Foundation Server is incorrect.
- The Team Foundation Server is offline
- The password has expired or is incorrect
Technical information (for administrator):
The remote server returned an error: (404) Not Found.
I have tried changing the Service Account & password
I have clicked Reapply Account
I have tried changing the Authentication Settings
When I click Group Membership or Administer Security, I get the 404 error
I have tried changing the URL
a. http://myserver:8080/tfs/defaultcollection
b. http://myserver:80//
c. http://myserver:8080
d. http://(ipaddress):8080/tfs
e. http://localhost:8080/tfs
The remote server returned an error: (404) Not Found.
If you are using http://localhost:8080/tfs url and still get (404) Not Found. Then this kind of issue may related to IIS side.
First check IIS logs, if there are some useful information.
Go to IIS manager to check the TFS bindings should be such as below:
If you look into IIS manager, application pools, under TFS app pool, what identity TFS appPool is using? If you see it is set as “ApplicationPoolIdentity” instead of networkService or a domain account for TFSservice,
Try below cause and resolution and see if that could solve the issue:
Cause:
The ApplicationPoolIdentity account did not have permissions on the content folder.
Resolution:
Set the permission for the Application Pool Identity (which is a virtual account) on the folder where the content is located.
The steps to do so are:
Right click on your Site/Application in IIS Manager and select Edit
Permissions.
Under Security tab click Edit, then Add. Enter "IIS AppPool\", ensure that location is set to the local computer, and
select Check Names.
Allow this user to have modify permissions.
http://learn.iis.net/page.aspx/624/application-pool-identities/
Besides, you could also take a look at this similar issue here: TFS 2010 RC, getting 404 on http://localhost:8080/tfs
Check if it's also UrlScan installed and that blocked your tfs site.
Related
I am running Azure DevOps Server 2019 cu7. When I click on the Access Levels link at the Project Collection level, I get a page not found error for ../_admin/_licenses. I then upgraded my development farm to ADO Server 2020, and still have the same issue.
The app pool accounts are both System and I have added the System account to the iis_iusrs group.
Also, i get a page not found error when trying to hit the/_api/licenses/export api to try to get around the page not found error when using a browser.
It seems that you do not have the permission Edit Instance-level information
Steps:
Open Azure DevOps Server Administration Console->click the option Application Tier->click the button Administer Security->select [Team Foundation]\Team Foundation Valid Users and ensure the permission Edit instance-level information is set the allow. Then we could check the Access Levels page.
Result:
The permission is set to Deny
The permission is set to Allow
I am configuring the Sharepoint for the first time, using the SharePoint Products & Technologies Configuration Wizard. While configuring, i have selected below options:
I am creating a new server farm.
Entered the my machine name as database server name, and specified
the credentials of domain user. This domain user is added to the
login user on my database server with Windows Authentication.
Specified the port number 10100 and selected NTLM authentication
provider.
After clicking Next i am getting below error:
An error has occurred while validating the configuration settings. An exception of type System.FormatException was thrown. Additional exception information: *Input string was not in a correct format.*
In the event viewer no error has been logged. But few Information level logs are logged stating 'Login failed for user ''. Reason: Failed to open the explicitly specified database. [CLIENT: *..*.]'. But i can login to database with the same user with Windows Authentication.
Please suggest few things to resolve this issue.
Thanks.
I came across with same issue. I Did rein-stallion of SQL 2008 R2 with SP1 and reinstalled IIS on SharePoint server. Then issue got fixed.
I copied an MVC project from another development pc to my laptop and tried to deploy it on the laptop which gave this error. The user account password was changed recently prior to this error. I tried tinkering around with the app pool permissions for the root folders with no effect. Any ideas? I am stuck.
HTTP Error 500.19 - Internal Server Error
The requested page cannot be accessed because the related configuration data for the page is invalid.
Detailed Error Information
Module IIS Web Core
Notification Unknown
Handler Not yet determined
Error Code 0x8007052e
Config Error Can not log on locally to C:\inetpub\wwwroot as user {MY ACCOUNT} with virtual directory password
Config File \?\C:\inetpub\temp\apppools\ASP.NET v4.0\ASP.NET v4.0.config
Requested URL http://localhost:80/hts
Physical Path
Logon Method Not yet determined
Logon User Not yet determined
Config Source
145: <application path="/" applicationPool="ASP.NET v4.0">
146: <virtualDirectory path="/" physicalPath="%SystemDrive%\inetpub\wwwroot" userName="{MY ACCOUNT}" password="[enc:AesProvider:{etc etc etc}:enc]" />
147: </application>
Open the Internet Information Services (IIS) Manager (Start > Run > type "inetmgr").
Using the navigation pane on the left, browse to Sites > Default Web Site.
Right-click on Default Web Site and select Manage Web Site > Advanced Settings.
Set the Physical Path Credentials field to Application user (you must enter user and password).
Click OK and then OK again.
Right-click on Default Web Site and select Manage Web Site > Restart to refresh the changes that were just made.
At this point you should be able to reload the page in your browser.
Open IIS Manager
Select the site. Default Web site in my case and click "Basic Settings..."
This opens the Edit Site dialog.Click "Connect as".
In the Connect As dialog, click Set and provide the new password in the Set Credentials dialog.
Come back to Edit Site dialog and click "Test Settings..."
Once the connections succeeds, you should be able to successfully open the site in your browser.
I ended up reinstalling visual studio and eventually got everything working.
at my company we have a number of clients and partners accessing our TFS 2010 SharePoint project portal and Team Web Access site over the Internet (https mostly but in this case http). For most of them everything works fine. For one client though, the following happens:
Authentication prompt appears when accessing either the project portal or Team Web Access
User types in username and password
The page loads half-way with text, but without CSS or images loaded.
Prompt appears again, even if "Remember password" is checked in the browser dialogue (IE8)
User tries the same procedure 10-20 times but gives up, resulting in an incomplete page load with no CSS or images.
In our attempts to remedy this we have opened ports 80, 8080, 443, 1443, 8000 but the errors still occurs for this specific client.
We thought it might be related to port 8080 causing firewall problems, so we moved Team Web Access to port 80, but the problem is still there.
Why could this be happening? The client certainly wants to know but I'm afraid I have no good answer yet.
Try change Internet Options > Advanced > Under the security section > uncheck "Enabled integrated Windows Authentication".
Try adding your Team Web Access URL to the Intranet Zone sites list. Internet Options > Security > Local Intranet > Sites > Advanced. There is a security setting that says 'Automatic logon only in Intranet zone'.
Also, take a look in Control Panel > User Accounts > Manage Windows Credentials and make sure that an incorrect password is not saved for the site.
Experienced a very strange problem today on our TFS2010 build server. Suddenly the build service failed for no apparent reason. We´re been trouble shooting it all day, but still haven´t found the reason yet.
One of the problems is that the build service is (or should!) running under an AD user called tfs2010build. However when I try to start the service, i get the following error
Service cannot be started. Microsoft.TeamFoundation.TeamFoundationServerUnauthorizedException: TF30063: You are not authorized to access http://tfs2010:8080/tfs/default. ---> System.Net.WebException: The remote server returned an error: (401) Unauthorized.
When I look in the event log on the TFS2010 server, I see that the failed authentication is registered for a user called TFS2010Install, which was used to install everything. I´ve tripple checked and the service is specified as to be running under TFS2010Build.
Log from TFS2010 server:
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: TFS2010INSTALL
Account Domain: LC
So my question is how is this possible. COuld the user TFS2010Build some how be impersonated by TFS2010Install? I
ve tried to install an additional build server and here there´s no problem starting the service under the user TFS2010Build - hence it is not a problem with AD or TFS user rights.
Hope you guys can help out!
/Jasper
!! Updated with some screen shots. Build server is TFS2010BIULD and the TFS server is TFS2010
Link to full size
Screen shot of non working build server TFS2010Build
Screen shot of working build server TFS2010Build1
!!New Update
I've managed to get the Build service to run under the TFS2010Build user account (which was actually the initial state, when the problem started). When I queue builds to this controller and agent, i get the follwing in the build log:
TF215097: An error occurred while initializing a build for build definition \PlanteIT_MarkOnline_Scrum\CI_Main_FieldOnlineClient: TF215106: Access denied. LC\TFS2010INSTALL needs Update build information permissions for build definition CI_Main_FieldOnlineClient in team project PlanteIT_MarkOnline_Scrum to perform the action. For more information, contact the Team Foundation Server administrator.
It still insist that TFS2010Install user account is running the service, despite that TFS2010Build is used for the build service. Any ideas?
This is a stab in the dark, can you try clear the TFS client cache and your internet cache on your troubled build machine under the Tfs2010Build account? I've never seen this issue before but maybe some stale cached TfsProjectCollection object with TFS2010Install authentication stayed around and caused problems.
Have you also tried reconfigure your build machine?
To unconfigure:
tfsconfig.exe setup /uninstall:TeamBuild
and reconfigure through the wizard.
I will try once more ..., step by step :-)
FACT: When you register your build controller to a TFS project collection, being logged-in as TFS2010Build, an authentication dialog pops-up. This means that the TFS server does not accept TFS2010Build as an account that can be used to connect to your default collection on the TFS server.
FACT: When you register your build controller to a TFS project collection, being logged-in as TFS2010Install, no authentication dialog pops-up. This means that the TFS server does accept TFS2010Install as an account that can be used to connect to your default collection on the TFS server.
Apparently, because in both 1 and 2 your build controller is registered using the TFS2010Install account to the TFS server, either the controller or the server remembers these credentials and uses them to connect to the TFS server collection when the build controller is started, despite the fact that the service itself is running under the TFS2010Build account. This is a plausible situation and impersonation happens often this way for services. Maybe some TFS techie can either confirm or deny this behavior.
The question that remains for me: Why does the the default collection on the TFS server not accept the TFS2010Build account as a valid administrator?
Potential causes:
Read Jim Lamb's answer.
Something is wrong with the domain registration of the system or user used to connect the controller to the collection on the TFS server.
Fastest way to rid of the problem: Continue to install the secondary server that does not seem to have the problem, potentially experiment with using the TFS2010Build from this secondary server to see if the problem also occurs there.
A long aswer, but hopefully it gives you a big push in the right direction.
Sorry to hear that you're having problems getting this to work. Here are a couple of things you can check/try:
Make sure that the TFS2010Build user account is a member of the "Build Services" group in the TFS project collection you've associated it with.
If you install and configure the build service while logged in as a user who is a member of the Project Collection Administrators group on the associated project collection and is also a member of the local Administrators group on the build machine, all of the requisite permissions and other configuration will generally be set for you.
So, to summarize, the user configuring the build machine should be a member of the project collection administrators group and a member of the local administrators group. And, the user account the build machine is running as should be a member of the project collection's "build services" group.