Accessing Team Foundation Server Remotely

Heads up! Integrated Authentication only in V1

Etienne's VSTS World — Thu, 23 Feb 2006 17:47:08 GMT

re: Accessing Team Foundation Server Remotely

Dave — Fri, 24 Feb 2006 05:05:38 GMT

Dev'garten's (http://www.devgarten.com) TFS instance is sitting behind an ISA 2004 Reverse Proxy with Integrated Auth doing the howdoyoudo stuff.

I connect to it via VSTS and I enter my creds that run against the server. It will be moved over to SSL when my certificate arrives, which will secure the comms, although there isn't anything critical on that infrastructure yet.

The age old issue of publishing services via the web have always had this issue; however, the strengths in having high-value services managed in a carrier-grade DC always outweigh trying to maintain your own home garden.

I'm a big believer in put your money into redundant, high-speed connectivity infrastructure and relocate your apps to DC's, where someone else is worrying about perimeter security, DR, backup. That's why I think hosted and leased TFS services will be huge ;)

VSTS Links - 02/27/2006

Team System News — Mon, 27 Feb 2006 18:06:08 GMT

Rob Caron blogs about the Team System Friday Morning Briefings. He also talks about Project Server and...

re: Accessing Team Foundation Server Remotely

Marc — Mon, 27 Feb 2006 19:45:13 GMT

This is the worst news I've head in a while.

I'm truly speechless and befuddled...

re: Accessing Team Foundation Server Remotely

Jamie — Tue, 07 Mar 2006 17:07:45 GMT

Rob-

We're setting up TFS in our office in the states, and are going to be working with some developers in India. They have their own domain, and are likely not going to trust our domain.

During our testing of TFS, it seems that we are ok for connecting via the Team Explorer, as it simply prompts for your credentials, and they can enter a username/password that we've created for them in our domain.

However, a bigger issue is the Proxy server for TFS. I can't seem to get it working. I know the documentation states that you must have the exact same domain account running the TFS Proxy as the main TFS service account, but I REALY REALLY need a way around that - as they are reluctanct to trust our domain.

Any suggestins?

re: Accessing Team Foundation Server Remotely

Gary — Wed, 08 Mar 2006 12:45:46 GMT

Dave,

How did you configure your ISA 2004 server? We're trying to configure our ISA 2004 server to provide an https/ssl link to our TFS but are having little joy at the moment.

re: Accessing Team Foundation Server Remotely

Steve Smith — Thu, 09 Mar 2006 20:50:01 GMT

Working over the Internet is extremely important. Being able to add consultants, contractors, and even FTEs who are working remotely is extremely common today, both for large enterprises and for smaller organizations. Not supporting basic "over-the-internet" scenarios is a huge shortfall for VSTS in my opinion. Basically the product only works using client-server architecture, not Internet and web services architecture. Very, very disappointing, to me, at least.

Installing TFS RC

Steven Smith — Thu, 09 Mar 2006 20:52:55 GMT

I had to buy a new box to install Team Foundation Server -- apparently it just won't work on my old Dell...

re: Accessing Team Foundation Server Remotely

Rob Caron — Thu, 09 Mar 2006 22:38:48 GMT

Jamie -

I asked some people to look into this. One suggestion is to move Team Foundation Server to its own domain. That new domain could be given a one-way trust to the domains in the US and India. That would not impact what the India domain trusts, or what the US domain trusts.

re: Accessing Team Foundation Server Remotely

Jerry Nixon — Fri, 10 Mar 2006 00:08:10 GMT

I just read this blog to our development team. Shoulders sunk and we all muttered how horrible this is. Thank you for making this clearly known, however.

re: Accessing Team Foundation Server Remotely

Jamie — Tue, 14 Mar 2006 16:13:21 GMT

Thanks, Rob. I will look into your idea. I was also thinking of joining their (India's) TFS Proxy server to our domain, even though it is located in India. That may or may not be simpler???

Please let me know what you find regarding the TFS Proxy account. It seems that since we require the India team to use VPN into our office servers, getting the Proxy to work is the last step!

Thanks for your help!

re: Accessing Team Foundation Server Remotely

Rob Caron — Tue, 28 Mar 2006 23:47:55 GMT

Jamie -

In your comment you said, "I know the documentation states that you must have the exact same domain account running the TFS Proxy as the main TFS service account, but I REALY REALLY need a way around that - as they are reluctanct to trust our domain."

However, this isn't a requirement. The only requirement is that the "TFSProxy" account must be a member of the Team Foundation Server Valid Users group on each Team Foundation Server for which it proxies.

re: Accessing Team Foundation Server Remotely

David — Wed, 29 Mar 2006 17:06:09 GMT

I hate to beat this issue into the ground, but being able to connect to TFS over the internet is essential for our development team. When you think this issue will be resolved or a patch/SP will be issued?

re: Accessing Team Foundation Server Remotely

Mike — Sun, 02 Apr 2006 21:47:56 GMT

Access over the Internet is absolutely necessary. This is a huge disappointment! We have been readying ourselves for the rolling out of TFS as we are shifting from Delphi to VSTS at the start of a big new project. We have a distributed development team with members spread across 2 states. We have worked this way for 7 years and I would imagine having a distributed development team is now the rule not the exception. Limiting TFS to only be accessible via a local LAN, or going through the huge expense of setting up a VPN or HTTPS, is ridiculous. I guess we’ll have to use our existing source control and bug tracking tools, that we’ve been able to access via the Internet for the last 7 years, until a real version of TFS comes out.

This should be priority one for the next release. It’s a showstopper problem.

re: Accessing Team Foundation Server Remotely

Emilio — Sun, 16 Apr 2006 22:19:07 GMT

I agree with Mike, we were expecting more of TFS. Specifically an easy way to make it accesible from internet.

re: Accessing Team Foundation Server Remotely

RBeaubien — Mon, 17 Apr 2006 13:09:13 GMT

Distributed access should be a cornerstone feature of TFS. Very poor planning on Microsoft's part.

re: Accessing Team Foundation Server Remotely

kfrost — Tue, 18 Apr 2006 04:36:50 GMT

Wow, that's one of the biggest reasons I was looking to get TFS installed and have spent the better part of the day reading up on it. Glad I didn't dive in and install it.

Extremely disappointed.

February 15th, 2006 Chat Summary - Visual Studio Team Editio for Software Developer and Software Tester Tools

Team System News — Wed, 19 Apr 2006 21:15:35 GMT

DavidKean_MS (Moderator): We'll be starting our chat about Visual Studio Team Edition for Software Developer...

re: Accessing Team Foundation Server Remotely

Ben — Sun, 30 Apr 2006 16:34:31 GMT

I have a scenario where I have developers working on the same project from multiple sites. My team is entirely distributed and none of us work in the same location. Due to my developers setups, VNP isn't a viable option either.

This is basically going to force us to adopt VSS 2005 but we will be loosing out on the work item tracking etc which is one of the most important features of TFS for us.

Until TFS supports remote connectivity there's absolutely no point in adopting it, from our point of view anyway.

Accessing VSTS over the Internet

Brendan Mcloughlin's Blog — Fri, 12 May 2006 17:09:59 GMT

We are currently migrating to Team system from the Visual SourceSafe.&nbsp; We have developers in offices...

re: Accessing Team Foundation Server Remotely

Jamie — Sun, 21 May 2006 04:53:49 GMT

Rob/all - I finally have a TFS environment set up that involves two different non-trusting domains, where the TFS server is in our "main" domain and the clients are in a different domain. There is no trust between them. Then I configured the Proxy server on a machine that is not a member of either domain, but is located at the remote location (over in India along with the TFS client workstations). Everything is working great - although I know this is not supported by MS:)

The trick was getting the right combination of local versus domain accounts. The local accounts had to be configured properly to allow pass-through authentication. The local accounts included the proxy service account.

I created a Visio diagram of how I got it to work. If you would like to see it, let me know on this blog.

re: Accessing Team Foundation Server Remotely

Faysal — Wed, 24 May 2006 16:48:52 GMT

Hi Jamie,

We have a very similar scenario with yours'. Would you please share your visio diagram with me. my e-mail is faysalbasci(-&at&-)yahoo.com Thanks in advance

re: Accessing Team Foundation Server Remotely

Kevin — Thu, 01 Jun 2006 17:56:37 GMT

Jamie -

I would also very much like to see your visio diagram on how you set this up.

kevinw -AT- software-logistics.com

Thank you!

re: Accessing Team Foundation Server Remotely

PJ — Sat, 03 Jun 2006 05:35:49 GMT

This is a huge problem, not being able to operate VSTS across the internet without a VPN. It eliminates a lot of use scenarios for us. I'm glad to hear you plan to add this in this functionality in the near future.

re: Accessing Team Foundation Server Remotely

DusanMihajlovic — Wed, 07 Jun 2006 16:10:07 GMT

Jamie,

could you please forward the visio diagram of the solution to this dreadfull problem - my e-mail is "dusan at finsoft dot com".

I am following Team System forums, and there are a lot of answers to people that can't be bothered to read the documentation, but whenever a fundamental question like this is asked it stays unanswered.

This is more of Microsoft behaviour from early nineties than what we were used to in .NET era. Really disappointing.

re: Accessing Team Foundation Server Remotely

mcaljamj — Tue, 27 Jun 2006 03:04:56 GMT

I have a similar scenario with yours. Could you please share your visio diagram with me. My email is James.McAllister@BakerHughes.com

Team Foundation Server SP1 Beta Coming Soon

Rob Caron — Wed, 28 Jun 2006 03:18:51 GMT

In Brian Harry&rsquo;s recent&nbsp;Tech Ed 2006&nbsp;and Stuff in the pipe for Team Foundation Server...

re: Accessing Team Foundation Server Remotely

Alan Buck — Thu, 13 Jul 2006 22:11:00 GMT

Is this still true? You can't access TFS using basic or digest authentication. I found some information that you could set up this if you moved the TFS into a workgroup. If this is all still true then when will you be able to have basic or digest authentication within a domain?

re: Accessing Team Foundation Server Remotely

Rob Caron — Thu, 13 Jul 2006 23:45:05 GMT

Alan - See: http://blogs.msdn.com/649133.aspx

re: Accessing Team Foundation Server Remotely

Joshua — Wed, 19 Jul 2006 21:53:34 GMT

Jamie could you send me a copy of your Visio as I am facing a similar problem. joshua DOT allanson AT gmail DOT com. Thanks

re: Accessing Team Foundation Server Remotely

Deepak — Thu, 27 Jul 2006 12:33:25 GMT

Hi Jimmi,

Can u please send that Visio diagram to me at khare_deepak@hotmail.com, since i have to make setup of TFS in the same way.

Appreciate your help.

Regards
Deepak

re: Accessing Team Foundation Server Remotely

Stephane — Thu, 10 Aug 2006 13:14:55 GMT

Hi All,

We are facing the same problem. Can this visio diagram be downloaded somewhere ?

Best-

re: Accessing Team Foundation Server Remotely

SteveM — Fri, 18 Aug 2006 15:34:09 GMT

Hi,

Jamie's solution above to the problem of working with Team Server across different domains is very elegant and I hope that someone can post the diagram. A possible problem is that the TFS proxy server works to make the source code control very efficient, but still does not address the fundamental problem of authorization across two non-trusting domains which immediately happens with reports and the project portal.

I have a similar situation to Jaime but have a serious issue with the handling of local accounts. The entire purpose of domains and AD is to handle the administration of accounts and access. If we have to set up local accounts for all users in both domains then we have defeated the purpose of the AD administration.

I need to implement a solution whereby development groups in domains X and Y have equal access to a Team Foundation Server located in either domain.

- Steve

re: Accessing Team Foundation Server Remotely

SaloS — Tue, 22 Aug 2006 15:42:48 GMT

Send me this visio dialgram too
salos at mail dot ru

Thanks

re: Accessing Team Foundation Server Remotely

Pancham — Tue, 22 Aug 2006 16:21:57 GMT

Jammie
We are also in the same situation. Can you please share your visio? My email address is pancham_singh@yahoo.com.

Steve,
Have you found any solution?

Thanks.

James Manning's blog : The TFS "extranet" ISAPI filter mechanics

James Manning's blog : The TFS "extranet" ISAPI filter mechanics — Fri, 27 Oct 2006 19:57:31 GMT

PingBack from http://blogs.msdn.com/jmanning/archive/2006/10/27/the-tfs-quot-extranet-quot-isapi-filter-mechanics.aspx

TFS는 Basic Authentication을 지원하지 않는다.

필라넷 개발팀 블로그 — Tue, 26 Dec 2006 08:56:12 GMT

TFS를 이전하면서 새로운 사실들을 알게 되는 것들이 꽤 있다. 그 중에서도 Basic 인증을 지원하지 않는 다는 사실은 충격적이었다. Beta 3까지도 정식 버전에서는 지원하겠다는

How To install Team Foundation Server

Deep Dive In .NET — Fri, 26 Jan 2007 14:23:10 GMT

Deep Dive In .NET - How To install Team Foundation Server

Deep Dive In .NET - How To install Team Foundation Server — Fri, 26 Jan 2007 14:23:12 GMT

PingBack from http://blog.deepdivein.net/PermaLink,guid,ea1fef1b-0282-49f5-a203-4d774f0e0928.aspx

Accessing Team Foundation Server Remotely

Heads up! Integrated Authentication only in V1

re: Accessing Team Foundation Server Remotely

VSTS Links - 02/27/2006

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

Installing TFS RC

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

February 15th, 2006 Chat Summary - Visual Studio Team Editio for Software Developer and Software Tester Tools

re: Accessing Team Foundation Server Remotely

Accessing VSTS over the Internet

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

Team Foundation Server SP1 Beta Coming Soon

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

re: Accessing Team Foundation Server Remotely

James Manning's blog : The TFS &quot;extranet&quot; ISAPI filter mechanics

TFS는 Basic Authentication을 지원하지 않는다.

How To install Team Foundation Server

Deep Dive In .NET - How To install Team Foundation Server

James Manning's blog : The TFS "extranet" ISAPI filter mechanics