Question

AD FS端点不可用。我配置了AD FS。但是当我尝试连接到某些端点时，我可以看到＆＃34; HTTP错误503.该服务不可用。＆＃34; AD FS管理中启用了端点。

我尝试连接到 ...... ADFS /服务/信托/ 13 / usernamemixed
和
..... /服务/信任/ 13 / windowsmixed

Answer 1

我经常看到这种情况发生。

运行以下命令，查看是否列出了端点。如果没有，请重新启动服务器并再次检查。

netsh http sh serv | findstr /i /c:"trust/13/usernamemixed"

当你这样做时，如果端点可用，你应该看到类似下面的东西。

C:\Windows\system32>netsh http sh serv | findstr /i /c:"trust/13/usernamemixed"
                HTTPS://+:443/ADFS/SERVICES/TRUST/13/USERNAMEMIXED/

Answer 2

我在使用 ADFS 2019 时遇到了同样的问题。

AD FS 服务端口存在问题，就像 Eugen 一样。重新启动 AD FS 服务后，事件查看器显示错误：

Event 102, AD FS

There was an error in enabling endpoints of Federation Service. Fix configuration errors using PowerShell cmdlets and restart the Federation Service.
Additional Data 
Exception details: 
System.ServiceModel.AddressAlreadyInUseException: There is already a listener on IP endpoint 0.0.0.0:808.
This could happen if there is another application already listening on this endpoint or if you have multiple
service endpoints in your service host with the same IP endpoint but with incompatible binding configurations. ---> System.Net.Sockets.SocketException:
Only one usage of each socket address (protocol/network address/port) is normally permitted
at System.Net.Sockets.Socket.DoBind(EndPoint endPointSnapshot, SocketAddress socketAddress)
at System.Net.Sockets.Socket.Bind(EndPoint localEP)
at System.ServiceModel.Channels.SocketConnectionListener.Listen()
--- End of inner exception stack trace ---
at System.ServiceModel.Channels.SocketConnectionListener.Listen()
at System.ServiceModel.Channels.ExclusiveTcpTransportManager.OnOpen()
at System.ServiceModel.Channels.TransportManager.Open(TransportChannelListener channelListener)
at System.ServiceModel.Channels.TransportManagerContainer.Open(SelectTransportManagersCallback selectTransportManagerCallback)
at System.ServiceModel.Channels.TransportChannelListener.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.ConnectionOrientedTransportChannelListener.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.TcpChannelListener`2.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at Microsoft.IdentityServer.ServiceHost.STSService.StartSTSService(ServiceHostManager serviceHostManager, ServiceState serviceState)

要解决此问题，您可以按照以下步骤更改服务端口：

以管理员身份启动 SharePoint Management Shell

检查当前服务端口

get-adfsproperties | findstr "NetTcpPort"
NetTcpPort                                 : 1501

更改服务端口
```
Set-ADFSProperties -nettcpport 1601
```

确认更改

get-adfsproperties | findstr "NetTcpPort"
NetTcpPort                                 : 1601

通过服务控制台重启 AD FS 服务

说明基于技术文章：https://social.technet.microsoft.com/wiki/contents/articles/2009.ad-fs-2-0-how-to-change-the-net-tcp-ports-for-services-and-administration.aspx

Answer 3

我找到了解决方案。问题出在港口。事情是AD FS忙碌的通常端口。你可以找到它here

AD FS端点不可用

3 个答案: