TFS 2013 不适用于 IIS 反向代理 [英] TFS 2013 not working with IIS reverse proxy

问题描述

我正在尝试使用 IIS 反向代理使网络上的不同用户组可以访问我的 TFS 服务器.

I am trying to use an IIS reverse proxy to make my TFS server accessible to a different group of users on the network.

我在反向代理服务器上启用了匿名身份验证(URL 重写和 ARR).每当我尝试连接到 TFS 服务器时，我都会收到 401，并且无法正确输入密码.

I have anonymous authentication turned on on the reverse proxy server (URL Rewrite and ARR). Whenever I try to connect to the TFS server I get a 401, and typing the password correctly in doesn't work.

我已经尝试了这两个重写 URL:

I have tried both of these Rewrite URLs:

http://192.168.1.85:8080/{R:0}
http://192.168.1.85:8080/{R:1}

不过，两者都在生产 401.我曾尝试打开和关闭 Windows 身份验证和基本身份验证.这些都不起作用.TFS 使用默认配置安装.

Both are producing the 401, though. I have tried turning Windows Authentication and Basic Authentication on and off. Neither of those work, either. TFS is installed with a default configuration.

有什么想法吗?我知道人们这样做是为了公开 TFS，所以希望有一种简单的方法可以让它发挥作用.

Any ideas? I know folks are doing this to expose TFS, so hopefully there is an easy way to get it to work.

推荐答案

通常 TFS 将安装在端口 8080 的虚拟目录tfs"中.因此，如果您有一个典型的 IIS 设置，您应该将重写 URL 更改为:

Typically TFS would be installed in a virtual directory "tfs" at port 8080. Therefore if you have a typical IIS setup, you should change your rewrite URL from:

http://192.168.1.85:8080/{R:0}

到

http://192.168.1.85:8080/tfs/

尽管上述内容本身是不够的，因为您的所有相关链接都将被破坏，因此要解决此问题，我建议您使用它来匹配您的匹配 url 模式:

Chances are though the above by itself won't be enough since all of your relative links will be broken therefore to fix this, what I recommend is this for your match url patten:

^(tfs/)?(.*)?

然后这是你的重写模式:

and then this for your rewrite pattern:

http://192.168.1.85:8080/tfs/{R:2}

我希望这会有所帮助.

这篇关于TFS 2013 不适用于 IIS 反向代理的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！