æ¤ç›‘视器指示è”åˆèº«ä»½éªŒè¯æœåŠ¡å°è¯•ä¾¦å¬ç”¨äºŽè¯»å–å…¶å‘布的è”åˆèº«ä»½éªŒè¯å…ƒæ•°æ®çš„请求时å‘生æ„外错误。
如果在 15 分钟之内没有å†æ¬¡å‘生åŒæ ·çš„问题,æ¤ç›‘视器的è¿è¡ŒçŠ¶å†µçŠ¶æ€å°†å˜å›žç»¿è‰²çŠ¶æ€ã€‚æ¤ç›‘视器所生æˆçš„è¦æŠ¥å¿…须手动解除。
AD FS Windows æœåŠ¡å¯èƒ½æ— æƒè®¿é—®è”åˆèº«ä»½éªŒè¯å…ƒæ•°æ®ç«¯ç‚¹ URL,或者å¯èƒ½è¢«é™åˆ¶æ€§æ›´å¼ºã€è¦†ç›–å…¶ URL æƒé™çš„访问控制列表 (ACL) æƒé™é˜»æ¢ã€‚
使用适用于 HTTP çš„ netsh å‘½ä»¤æ£€æŸ¥ä½ çš„è”åˆèº«ä»½éªŒè¯å…ƒæ•°æ®ç«¯ç‚¹ URL 是å¦æœ‰ URL ACL æƒé™ï¼Œæˆ–者对其他å¯èƒ½è¦†ç›–è”åˆæœåŠ¡å™¨ä½¿ç”¨çš„端点所需的æƒé™çš„ URL 进行æ¤é¡¹æ£€æŸ¥ã€‚ For more information, see the examples for netsh http show urlacl syntax in é€‚ç”¨äºŽè¶…æ–‡æœ¬ä¼ è¾“åè®®(HTTP)çš„ Netsh 命令
ä»¥ä¸‹ç¤ºä¾‹æ˜¾ç¤ºäº†å½“ä½ æ£€æŸ¥è”åˆèº«ä»½éªŒè¯å…ƒæ•°æ®ç«¯ç‚¹æƒé™(å…¶ä¸ï¼Œç”¨æˆ·å®šä¹‰çš„æœåŠ¡ç”¨æˆ·å¸æˆ·("adfssrv")å·²é…置并用于 AD FS æœåŠ¡æ ‡è¯†)æ—¶ netsh http show urlacl 命令的典型输出。
C:\>netsh http show urlacl url=https://+:443/FederationMetadata/2007-06/
ä¿ç•™çš„ URL :https://+:443/FederationMetadata/2007-06/
用户:NT SERVICE\adfssrv
侦å¬:是
委托:是
SDDL:D:(A;;GA;;;S-1-5-80-2246541699-21809830-3603976364-117610243-975697593)
Target | Microsoft.ActiveDirectoryFederationServices.2016.TrustManagement | ||
Parent Monitor | System.Health.ConfigurationState | ||
Category | ConfigurationHealth | ||
Enabled | True | ||
Alert Generate | True | ||
Alert Severity | Warning | ||
Alert Priority | Normal | ||
Alert Auto Resolve | True | ||
Monitor Type | Microsoft.Windows.SingleEventLogTimer2StateMonitorType | ||
Remotable | True | ||
Accessibility | Public | ||
Alert Message |
| ||
RunAs | Default |
<UnitMonitor ID="Microsoft.ActiveDirectoryFederationServices.2016.TrustManagementMetadataListenerErrorMonitor" Accessibility="Public" Enabled="true" Target="Microsoft.ActiveDirectoryFederationServices.2016.TrustManagement" ParentMonitorID="Health!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.SingleEventLogTimer2StateMonitorType" ConfirmDelivery="true">
<Category>ConfigurationHealth</Category>
<AlertSettings AlertMessage="Microsoft.ActiveDirectoryFederationServices.2016.TrustManagementMetadataListenerErrorMonitor_AlertMessageResourceID">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>Warning</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/Params/Param[1]$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="EventRaised" MonitorTypeStateID="EventRaised" HealthState="Warning"/>
<OperationalState ID="TimerEventRaised" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>$Target/Host/Property[Type="Microsoft.ActiveDirectoryFederationServices.2016.FederationServer"]/ADFSEventLog$</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">155</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>MatchesMOM2005RegularExpression</Operator>
<Pattern>(^AD FS$)</Pattern>
</RegExExpression>
</Expression>
</And>
</Expression>
<TimerWaitInSeconds>900</TimerWaitInSeconds>
</Configuration>
</UnitMonitor>