AD FS 终结点不可用

Question

AD FS 端点不可用。 我配置了 AD FS。但是当我尝试连接到某些端点时，我可以看到“HTTP 错误 503。服务不可用”。端点在 AD FS 管理中启用。

我尝试连接到
......adfs/services/trust/13/usernamemixed
和
...../services/trust/13/windowsmixed

Answer 1

我经常看到这种情况发生。

运行以下命令并查看是否列出了端点。如果没有，请重新启动服务器并再次检查。

netsh http sh serv | findstr /i /c:"trust/13/usernamemixed"

当你这样做时，如果端点可用，你应该会看到类似下面的内容。

C:\Windows\system32>netsh http sh serv | findstr /i /c:"trust/13/usernamemixed"
                HTTPS://+:443/ADFS/SERVICES/TRUST/13/USERNAMEMIXED/

Answer 2

我在 ADFS 2019 上遇到了同样的问题。

与 Eugen 一样，AD FS 服务端口存在问题。重新启动 AD FS 服务后，事件查看器显示错误：

Event 102, AD FS

There was an error in enabling endpoints of Federation Service. Fix configuration errors using PowerShell cmdlets and restart the Federation Service.
Additional Data 
Exception details: 
System.ServiceModel.AddressAlreadyInUseException: There is already a listener on IP endpoint 0.0.0.0:808.
This could happen if there is another application already listening on this endpoint or if you have multiple
service endpoints in your service host with the same IP endpoint but with incompatible binding configurations. ---> System.Net.Sockets.SocketException:
Only one usage of each socket address (protocol/network address/port) is normally permitted
at System.Net.Sockets.Socket.DoBind(EndPoint endPointSnapshot, SocketAddress socketAddress)
at System.Net.Sockets.Socket.Bind(EndPoint localEP)
at System.ServiceModel.Channels.SocketConnectionListener.Listen()
--- End of inner exception stack trace ---
at System.ServiceModel.Channels.SocketConnectionListener.Listen()
at System.ServiceModel.Channels.ExclusiveTcpTransportManager.OnOpen()
at System.ServiceModel.Channels.TransportManager.Open(TransportChannelListener channelListener)
at System.ServiceModel.Channels.TransportManagerContainer.Open(SelectTransportManagersCallback selectTransportManagerCallback)
at System.ServiceModel.Channels.TransportChannelListener.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.ConnectionOrientedTransportChannelListener.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.TcpChannelListener`2.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at Microsoft.IdentityServer.ServiceHost.STSService.StartSTSService(ServiceHostManager serviceHostManager, ServiceState serviceState)

要解决此问题，您可以按照以下步骤更改服务端口：

1. 以管理员身份启动 SharePoint 命令行管理程序

2. 检查当前服务端口

   get-adfsproperties | findstr "NetTcpPort"
   NetTcpPort                                 : 1501
   

3. 更改服务端口

   Set-ADFSProperties -nettcpport 1601
   

4. 确认更改

   get-adfsproperties | findstr "NetTcpPort"
   NetTcpPort                                 : 1601
   

5. 通过服务控制台重启 AD FS 服务

说明基于技术文章：https://social.technet.microsoft.com/wiki/contents/articles/2009.ad-fs-2-0-how-to-change-the-net-tcp-ports-for-services-and-administration.aspx

Answer 3

我找到了解决方案。问题出在端口上。问题是 AD FS 的常用端口很忙。 你可以找到它here