TFS 2015问题TF400324服务无法从服务器获得 - 但在TFS管理控制台中的服务器上 [英] TFS 2015 Problem with TF400324 Services Not Available from Server - but am on Server in TFS Admin Console

问题描述

您好。

我有一个独立的（单一服务器）Team Foundation Server实例，该实例目前处于TFS 2015， 更新3.   此实例设置为使用SSL（端口443）。   Web应用程序实例绑定到证书（在Personal
商店中）。 在TFS 端口22上启用了SSH。   我一直在尝试完成配置， 但是，当点击应用程序层摘要中的某些任务（即            时，我遇到了TF40034错误。我可以打开所有其他任务。   具体错误是：   " TF400324： 服务器https：....无法使用Team Foundation服务。 技术信息（针对管理员）： 
底层连接已关闭： 接收时发生意外错误。   

I have a standalone (single server) Team Foundation Server instance which is currently at TFS 2015,  Update 3.    This instance is set to use SSL (port 443).   The web application instance is bound to a certificate (in the Personal store).  SSH is enabled in TFS on port 22.    I have been trying to complete the configuration,  but am running into a TF40034 error when clicking on some of the tasks in the Application Tier Summary (ie.   Group Membership and Administer Security).    I can open all the other tasks.    The specific error is:   "TF400324:  Team Foundation services are not available from server https:....  Technical information (for administrator):  The underlying connection was closed:  An unexpected error occurred on a receive."   

此外， 当我尝试使用XAML Build Configuration选项注册构建服务时，它不会将自己识别为TFS服务器， 所以我必须尝试将其添加为TFS服务器 - 并获得额外的错误：  " TF31002： 
无法连接到此Team Foundation Server：...基础连接已关闭： 接收时发生意外错误。"  

Also,  when I try to use the XAML Build Configuration option to register a build service, it does not recognize itself as a TFS server,  so I have to try to add it as a TFS server - and get the additional error:  "TF31002:  Unable to connect to this Team Foundation Server: ... The underlying connection was closed:  An unexpected error occurred on a receive."  

我已检查了众多建议的原因（帐户密码，  网址， 端口， 协议）。 我已经清除了客户端和服务器缓存。  已检查服务。  重新启动了网络应用。 重启服务器。 
我可以访问另一个， 成熟， 工作TFS应用程序实例并一直在逐点比较它们之间的信息， 但是就TFS设置而言，还没有找到任何似乎已经关闭的东西，  IIS设置， 安全
政策设置，  防火墙设置等

I have checked all the numerous suggested reasons (account password,  URL,  port,  protocol).  I've cleared both client and server caches.  Checked on services.  Restarted the web app.  Restarted the server.  I have access to another,  mature,  working TFS application instance and have been comparing information between them point by point,  but have not found anything that seems to be off as far as TFS settings,  IIS settings,  Security Policy Settings,   Firewall Settings, etc.

我还在系统下的事件查看器中发现错误：  "创建SSL客户端凭据时发生致命错误。  内部错误状态为10013."   但是再次在论坛上搜索， 
查看建议， 搜索各种设置， 我对此或解决方案无法解释。 

I also found an error in the Event Viewer under System:  "A fatal error occurred while creating an SSL client credential.   The internal error state is 10013."    But again scouring all over the forums,  checking out the suggestions,  searching various settings,  I can find no explanation for this or a solution. 

此外， 奇怪的是，我可以从我的Visual Studio客户端（在不同的机器上）访问这个独立的实例，没有任何明显的问题。  我可以创建一个新的团队项目，  访问该项目， 使用
在443端口上定义的URL打开Web门户，   cert似乎正常工作。  我还可以通过项目设置访问群组成员资格和安全选项。   

Also,  curiously,  I can access this standalone instance from my Visual Studio Client (on different machine) without any apparent problems.   I can create a new team project,   access the project,  open the web portal using the defined URL at the 443 port,  cert seems to be working OK.   I can also access the Group Membership and Security options via Project Settings.   

因此，我可以访问该实例并远程执行多项任务，  实际上在服务器上我不能做的事情， 作为TFS管理员， 在TFS管理控制台中。    所以， 在这一点上， 
我已经用完了要检查的东西， 复位， 或测试。   我很困惑，欢迎任何新想法。

So,  I can access the instance and perform a number of tasks remotely,   which I cannot do when actually on the server,  as a TFS Admin,  in the TFS Admin Console.     So,  at this point,  I have run out of things to check,  reset,  or test.    I'm baffled and will welcome any new ideas.

推荐答案

您好KSRayDN，

Hi KSRayDN,

感谢您发布此处。

听起来关键问题应该是事件查看器中发现的致命错误（10013）。

Sounds the key problem should be the fatal error (10013) found in event viewer.

通过在互联网上搜索，此错误通常是由服务ssl证书不完整引起的受信任或服务帐户尚未获得完全权限。

By searching on the internet this error is often caused by the service ssl certificate is not fully trusted or the service account hasn't full permission.

因此，请验证您的帐户是否在TFS管理控制台上执行了相应的操作权限，您还可以尝试为该帐户重新分配新证书服务器，然后再次检查此问题。

So, please verify your account do actions on TFS Admin Console has the appropriate permission, you can also try to reassign a new certificate for the server, then check this issue again.

似乎致命错误与Schannel有关。你检查过Schannel设置了吗？如果没有，请尝试以下步骤：

Seems the fatal error is related to Schannel. Have you checked the Schannel settings? If not, please try the following steps:

1. 在"控制面板"中，单击"管理工具"，然后双击"本地安全策略"。
2. 在"本地安全设置"中，展开"本地策略"，然后单击"安全选项"。
3. 在右窗格中的"策略"下，双击"系统加密：使用符合FIPS的算法进行加密，散列和签名"，然后单击"已启用"。
4. 运行gpupdate / force

如果不起作用，请转到C：\ProgramData \ Microsoft \ Crypto \ RSA和授予"网络服务"对"MachineKeys"的读取权限夹。然后重启服务器试试。

If it doesn’t work, please go to C:\ProgramData\Microsoft\Crypto\RSA and grant "Network Services" Read permission to "MachineKeys" folder. Then restart server to have a try.

最好的问候。

这篇关于TFS 2015问题TF400324服务无法从服务器获得 - 但在TFS管理控制台中的服务器上的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！