none
The source control proxy 'TFSProxy01' is not responding, so the request will be sent to the main server. Please verify your settings. Additional information: TF15013: The requested Team Foundation Server is not registered with the proxy server.

    Question

  • Hello,

    We have configured TFS Server 2010 and TFS Proxy server in two different domains which does not have trust relationship and unable to use proxy server. All the requests are being processed through server instead of Proxy server since the authentication is failed for the users in one domain in another domain.

    Topology & Configuration:

    We are in the process of migrating our source control from VSS to TFS 2010. We could successfully migrate the code from VSS to TFS 2010. Following is the topology we need to follow in two domains (xyz.com and xyz.co.in).

     

    1. TFS Server 2010 at Office A(domain is xyz.com), port number is 8080, instance name is TFSServer01
    2. TFS Proxy Server at Office B (domain is xyz.co.in), port number is 8081,  instance name is TFSProxy01
    3. TFS Build Service at Office A (domain is xyz.com)

     

    We do not have a trust relationship between the two domains (xyz.com and xyz.co.in). A service account with same user name and password is created in two domains as follows.

    1. TFSService@xyz.com  (used to run TFS server 2010 and Build Service)
    2. TFSService@xyz.co.in (used to run TFS Proxy server)

     

    The above service accounts have been used to run TFS Server 2010 at office A  and TFS Proxy at office B. As the TFS Server 2010 has been installed at office A in xyz.com domain, we added TFSService@xyz.com account to the valid users group and could not add TFSService@xyz.co.in account to it since its in a separate domain.

     

    At office B, Visual Studio 2010 IDE on all the developers’ machines its configured to use the proxy server for file downloads (Proxy server name as TFSProxy01 and port number as 8081).

     

    Issue:

     

    While performing various source control operations, we are getting the following error in the output window.

                    The source control proxy 'TFSProxy01' is not responding, so the request will be sent to the main server.  Please verify your settings.

    Additional information:

      TF15013: The requested Team Foundation Server is not registered with the proxy server.

     

    We verified the Event Viewer entries with the source as “TFS Services” and following is one of the warning message logged under Application Event.

     

    TF53010: The following error has occurred in a Team Foundation component or extension:

    Date (UTC): 3/19/2012 1:15:36 PM

    Machine: TFSPROXY01

    Application Domain: /LM/W3SVC/8081/ROOT-1-129766365329519146

    Assembly: Microsoft.TeamFoundation.Framework.Server, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a; v2.0.50727

    Service Host:

    Process Details:

      Process Name: w3wp

      Process Id: 3188

      Thread Id: 3580

      Account name: USERA@xyz.co.in

     

    Detailed Message: TF243001: An error occurred initializing the proxy for the team project collection at http://tfsserver01:8080/tfs/. The message returned from the server was: TF30063: You are not authorized to access http://tfsserver01:8080/tfs/.

     

    Web Request Details

        Url: http://tfsproxy01:8081/VersionControlProxy/V1.0/item.ashx?type=rsa&sfid=58509,0,0,0,0,0,0,0,0,0&ts=634678459689849996&s=gCaKn698CuB/7+sVdj6UoLk9TKjUvQk5HN7OBUtP3XTI0PG28KqKecNkaZqLZsNppVb2Ks3BhQbM3l3Z7lFKJyHGcNw1HEYZMiSqmPadiugw1XyHjpR6BJwpHCgHj/qkmvZfHYKDvunPkTjn44PV5e6xEY6KfBwqNewnnWRcNSQ=&fid=58509&iid=79df2d14-b13d-4888-9f67-d6a84f904abd&cp=/tfs/SmartMPM/&rid=c51b7ebe-7ad7-41c0-9a79-25a2d36e74cf [method: GET]

        User Agent: Team Foundation (devenv.exe, 10.0.40219.1)

        Headers: Accept-Language=en-US&Authorization=NTLM+……………..

        Path: /VersionControlProxy/V1.0/item.ashx

        Local Request: False

        Host Address: 192.168.252.118

        User: USERA@xyz.co.in[authentication type: NTLM]

     

    Exception Message: TF30063: You are not authorized to access http://tfsserver01:8080/tfs/. (type TeamFoundationServerUnauthorizedException)

     

    Exception Stack Trace:    at Microsoft.TeamFoundation.Client.TeamFoundationSoapProxy.ThrowIfUnauthorized(HttpWebResponse response)   at Microsoft.TeamFoundation.Client.TeamFoundationSoapProxy.GetWebResponse(WebRequest request)   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)   at Microsoft.TeamFoundation.Proxy.BisRegistrationServiceProxyWsdl.GetRegistrationEntries(String toolId)    at Microsoft.TeamFoundation.Proxy.BisRegistrationProxy.GetRegistrationEntries(String toolId)    at Microsoft.TeamFoundation.Proxy.BisRegistrationService.RefreshMemoryCache()    at Microsoft.TeamFoundation.Proxy.BisRegistrationService.GetRegistrationEntries(String toolId, Boolean direct)    at Microsoft.TeamFoundation.Framework.Client.PreFrameworkServerDataProvider.FindServiceLocation(String serviceType, String toolId)    at Microsoft.TeamFoundation.Framework.Client.PreFrameworkServerDataProvider.LocationForCurrentConnection(String serviceType, Guid  serviceIdentifier)    at Microsoft.TeamFoundation.Client.TfsConnection.EnsureProviderConnected()    at Microsoft.TeamFoundation.VersionControl.Server.Proxy.ProxyConfiguration.RegisterServer(Uri serverUri, Boolean collectionServer) 

    As per the above issue, we can understand that getting the issue at the step of authenticating UserA (user of domain xyz.co.in) with domain xyz.com on which TFSServer01 is installed and configured.

     Can anybody let us follow in a correct direction so that we will be able to use proxy server TFSProxy01 from domain xyz.co.in to connect to TFS server 2010 TFSServer01 which is configured in domain xyz.com without any issues?

     Awaiting your response…

     Thank you,

    Raheem MA


    Thank you, Raheem MA

    Monday, March 19, 2012 2:01 PM

Answers

  • Hello Raheem,

    I personally do not think it is possible for you to install TFS2010 Server and TFS2010 Proxy Server on two different un-trusted domains. And according to Rajesh's reply in this case:

    The following settings are required inorder for proxy to be in a different domain than the Application Tier.

    • Establish a one way trust between Application Tier and Proxy (basically, Application Tier trusts Proxy)
    • Run proxy as an account which resides in the same domain as the proxy. (for example DomainB\userA)
    • For authorization purpose, proxy service account needs to be a member of the  TFS Valid Users group.

    So I think you need to set up the xyz.com andxyz.co.in domain to trust each other.

    Thanks.


    Vicky Song [MSFT]
    MSDN Community Support | Feedback to us

    Wednesday, March 21, 2012 7:59 AM
    Moderator
  • Hi Raheem.

    Can you see if from TFS Proxy machine at other end, you have port 80,8080 open from TFS App server end. Similarly, TFS proxy port 8081 is visible from TFS App server end from Proxy server end. Other than that, I hope you have added Proxy account to the correct proxy group in group memership at server level.


    Arun Sangal Software Configuration Management Denver USA



    Tuesday, March 27, 2012 4:45 PM

All replies

  • Hello Raheem,

    I personally do not think it is possible for you to install TFS2010 Server and TFS2010 Proxy Server on two different un-trusted domains. And according to Rajesh's reply in this case:

    The following settings are required inorder for proxy to be in a different domain than the Application Tier.

    • Establish a one way trust between Application Tier and Proxy (basically, Application Tier trusts Proxy)
    • Run proxy as an account which resides in the same domain as the proxy. (for example DomainB\userA)
    • For authorization purpose, proxy service account needs to be a member of the  TFS Valid Users group.

    So I think you need to set up the xyz.com andxyz.co.in domain to trust each other.

    Thanks.


    Vicky Song [MSFT]
    MSDN Community Support | Feedback to us

    Wednesday, March 21, 2012 7:59 AM
    Moderator
  • Hi Raheem.

    Can you see if from TFS Proxy machine at other end, you have port 80,8080 open from TFS App server end. Similarly, TFS proxy port 8081 is visible from TFS App server end from Proxy server end. Other than that, I hope you have added Proxy account to the correct proxy group in group memership at server level.


    Arun Sangal Software Configuration Management Denver USA



    Tuesday, March 27, 2012 4:45 PM