adfs2 | Multi Vagrant environment with Active Directory | Command Line Interface library

by StefanScherer PowerShell Version: Current License: MIT

X-Ray Key Features Code Snippets Community Discussions(1)Vulnerabilities Install Support

kandi X-RAY | adfs2 Summary

adfs2 is a PowerShell library typically used in Utilities, Command Line Interface, Oracle applications. adfs2 has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

Multi Vagrant environment with Active Directory

Support

Quality

Security

License

Reuse

Support

adfs2 has a low active ecosystem.

It has 120 star(s) with 30 fork(s). There are 3 watchers for this library.

It had no major release in the last 6 months.

There are 2 open issues and 3 have been closed. On average issues are closed in 29 days. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of adfs2 is current.

Quality

adfs2 has 0 bugs and 0 code smells.

Security

adfs2 has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

adfs2 code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

adfs2 is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

adfs2 releases are not available. You will need to build from source code and install.

Installation instructions, examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of adfs2

Get all kandi verified functions for this library.

adfs2 Key Features

No Key Features are available at this moment for adfs2.

adfs2 Examples and Code Snippets

No Code Snippets are available at this moment for adfs2.

Community Discussions

Trending Discussions on adfs2

Maintaining Trust in ADFS with Multiple Servers

QUESTION

Maintaining Trust in ADFS with Multiple Servers

Asked 2021-Jan-20 at 08:18

In the case of two ADFS servers using wid (adfs1 and adfs2) load balanced and two ADFS Proxy servers (proxy1 and proxy2) also load balanced. An error message was logged on proxy1 that "the federation proxy server could not renew its trust with the Federation Service" (event id 394).

The fix seems to be to make sure proxy1 is talking to the primary ADFS server adfs1 (instead of the VIP which load balanced adfs1 and adfs2 as adfs.domain.com) and to re-register it. I did this by setting the FQDN adfs.domain.com to point to adfs1 in the hosts file on proxy1. I expect it will keep wanting to renew the trust so I should leave it that way. This would seem to break the full mesh redundancy of having 2x2 since proxy1 will only talk to adfs1. Is there a better way to deal with this issue in this configuration?

I understand moving to SQL server may be an option but is another single point of failure I would like to avoid since this is not a huge deployment. Any other ideas?

Thank you for your help!

Mike

https://social.msdn.microsoft.com/Forums/en-US/f25e9170-b0ad-4894-8622-c2a0493df5eb/adfs-30-wap-connection-to-primary-adfs-servers-maintaining-the-wap-trust?forum=ADFS

https://answers.microsoft.com/en-us/msoffice/forum/msoffice_o365admin-mso_dirservices/adfs-30-proxy-loses-trust-with-internal-adfs/55aaf56f-f093-4620-ae87-9ad777c3a71d

...

ANSWER

Answered 2021-Jan-20 at 08:18

You dont need to point a WAP at a specific AD FS (such as the primary you are doing now). You should use the load balanced address to get WAP reach one of the two AD FS.

The difference is when establishing a trust with a WID based (no SQL in use) AD FS, the trust setup will either complete near instantly or within 6 mins based on whether the load balancer picked the primary or not. This is by design as any setup done via the secondary is redirected to the primary and then has to synchronize back to the secondary which happens every 5 mins by default.

Keep your deployment as simple as possible and dont make it more complex than it needs to be. https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/design/federation-server-farm-using-sql-server explains the WID limits which should influence whether you need SQL.

You should troubleshoot WAP trust issues using guide at https://adfshelp.microsoft.com/TroubleshootingGuides/Workflow/da33a6cd-166b-4fca-863a-73aec904c3fd . If still stuck contact Microsoft support.

Source https://stackoverflow.com/questions/65711687

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install adfs2

This Vagrantfile uses the vagrant-reload plugin to reboot the Windows VM's during provisioning. If you don't have this plugin installed, do it now with. To build the boxes, use vagrant up with the box name. Each box will be reboot twice until all features are up and running.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: