locked
visual studio, tfs and kerberos RRS feed

  • Question

  • Hello All!

    Does Visual Studio 2013 support Kerberos authentication with Team Foundation Server 2013?

    Thanks


    Hunta

    Friday, August 22, 2014 4:48 PM

Answers

All replies

  • You can configure TFS to support Kerberos tickets.

    http://msdn.microsoft.com/en-us/library/gg475929%28v=vs.100%29.aspx

    ---------------------
    Hope that helps
    Please don't forget to up vote answers you like or which help you and mark one(s) which answer your question.
    • Edited by PrabathSL Friday, August 22, 2014 6:51 PM
    • Marked as answer by Cece Dong Monday, August 25, 2014 7:07 AM
    • Unmarked as answer by Crystobal Hunta Monday, August 25, 2014 7:18 AM
    Friday, August 22, 2014 6:50 PM
  • tfs configured. web access to http://tfs:8080/tfs - ok, with Kerberos (klist show ticket with http/tfs.dom.local:8080)

    but for vs 2013 klist show http/tfs.dom.local

    

    Hunta

    Friday, August 22, 2014 6:58 PM
  • Answer - yes, visual studio support Kerberos, but if site works on non standard (not 80) port - no - error in .net

    http://blog.michelbarneveld.nl/michel/archive/2009/11/14/the-reason-why-kb911149-and-kb908209-are-not-the-soluton.aspx


    Hunta


    • Edited by Crystobal Hunta Saturday, August 23, 2014 4:26 PM
    • Marked as answer by Cece Dong Monday, August 25, 2014 7:07 AM
    Saturday, August 23, 2014 9:07 AM
  • Unfortunately, it does not answer my question - does Visual Studio support Kerberos authentication?


    Hunta

    Monday, August 25, 2014 7:24 AM
  • Hi,

    Please check the blogs below:

    http://blogs.like10.com/2012/05/09/using-friendly-dns-names-in-your-tfs-environment-with-kerberos-authentication-part-1/

    http://blogs.like10.com/2012/06/21/using-friendly-dns-names-in-your-tfs-environment-with-kerberos-authentication-part-2/

    You may follow these two links in your first post to first configure the TFS server with the Kerberos authentication.


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click HERE to participate the survey.

    Monday, August 25, 2014 10:22 AM
  • I read these articles and this approach can be used to do not use non-standard ports. But this approach requires static IP addresses (cname also causes problems).

    Kerberos authentication is configured and working properly on my TFS server. The problem lies in .NET run-time - the port is not added to the spn-name.

    Sorry for my English...


    Hunta

    Monday, August 25, 2014 10:37 AM
  • Hi,

    Thanks for your reply.

    Since Kerberos authentication is configured and working properly on your TFS server. Is your issue still related to TFS?

    >>The problem lies in .NET run-time - the port is not added to the spn-name.

    Could you please specify this?


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click HERE to participate the survey.

    Tuesday, August 26, 2014 9:03 AM
  • Source of the problem is not TFS, but VS, or - rather - .NET runtime

    "The problem lies in .NET run-time..." - a possible source of the problems listed in the article:

    http://blog.michelbarneveld.nl/michel/archive/2009/11/14/the-reason-why-kb911149-and-kb908209-are-not-the-soluton.aspx


    Hunta

    Tuesday, August 26, 2014 9:16 AM
  • Hi Hunta,

    According to description of the blog, it seems that VS can't work with non standard port. Since the issue is more related to VS, maybe you can consider opening a new case on VS General forum, maybe they can help you.


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click HERE to participate the survey.

    Wednesday, August 27, 2014 5:44 AM
  • Hi, Cece.

    You are right. Can you move this thread therе?

    Thanks


    Hunta

    Wednesday, August 27, 2014 6:03 AM
  • Hi Hunta,

    It's recommended to open a new case in VS forum, because this case age is about 5 days, which is old in the forum. And, new opened case may catch more attention in the forum, maybe you can get better response.


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click HERE to participate the survey.

    Wednesday, August 27, 2014 9:36 AM
  • Hi, Cece.

    Ok.


    Hunta

    Wednesday, August 27, 2014 9:40 AM