Join Log in
Score:0
Shunmusiva avatar Server

ADFS Web Application proxy 2016 errors

la flag
Shunmusiva

I have a Domain Controller(Windows server 2016) and installed ADFS on another machine(Windows Server 2016) on the same domain. I can access the IDP signon page in the domain machines internally. Now, I am trying to provide a reverse proxy to the adfs server by using a web application proxy which is a standalone server(2016). I tried whether this machine is able to connect to ADFS machine by pinging the IP and using hostname and I got response bytes successfully to WAP server. I have used the same SSL certificate I created using Certificate Authority based on this site. But on trying to establish the connection between the WAP server and the ADFS server I am getting errors like

The underlying Connection was closed: Could not establish a trust relationship for the SSL/TLS secure channel.

So, I have reinstalled the web application again and this time I have binded the certificate to port 443 using IIS manager in WAP and to ports 443 and 49443 on the ADFS server. But this time I got error like this

An error occurred when attempting to establish a trust relationship with the federation service. Error: Service unavailable

I have checked whether the proxy endpoint('/adfs/Proxy/EstablishTrust/') is disabled in ADFS but it is enabled though. I have a doubt this may be due to certificate-based issues. Need help on this issue and steps to followed while creating ADFS service externally accessible.

Edit: I have checked the packets through wireshark for the 'service unavailable' message, it occurs because the DNS entry for the federation server was not found in Proxy server. But I have created a entry in Hosts file of proxy server and I am able to ping the ADFS server with FQDN name.

417
0 + 4
cn flag
Greg Askew
`I have a doubt this may be due to certificate-based issues.` Why is that? Certificate issues are common in ADFS.
0
Reply
Shunmusiva avatar
la flag
Shunmusiva
@GregAskew I am not sure of this. I am asking as doubt whether it is due to certificate's issue or any other?
0
Reply
cn flag
Greg Askew
There is zero information to use as a basis, but I would venture a guess that the certificate probably isn't real and the CAPI2 logs haven't been checked.
0
Reply
Shunmusiva avatar
la flag
Shunmusiva
@GregAskew Can you please address any basic information to be checked for this ? and I can also try to provide here for better debugging. About the certificate being fake/not real, I have created the certificate from Windows Certificate Authority and straight away used it as SSL, is this the one you are stating as not real certificate?
0
Reply
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.