Problem adfs farm

Alan Ferreira Maia 26 Reputation points

They could help me, I have a problem in farm adfs, I have a primary and a secondary adfs and they are in a Microsoft NLB, when I restart my primary adfs the entire authentication environment falls, I validated all certificates in the adfs and WAPs , would this compartment be normal?
Would any procedure work around this problem?


Alan F Maia

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,222 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee

    Microsoft NLB doesn't provide a full proof fault tolerance. A node will be considered up as soon as the TCP-IP stack of the machine is up and running whereas the ADFS service might not be running yet.

    That said, if you turn off complete one node, you should expect the authentication to work on the second node... I would start by creating an entry in your HOSTS file to make your ADFS FQDN point to the secondary node in a normal operation mode (2 nodes are up). And see if authentication works. If it does work, you have a NLB issue. If it doesn't work, you have an ADFS issue and we'll need to check if the database sync works properly and what not. For that second part, you can use these tool: Diagnostics Analyzer.

    0 comments No comments

  2. Alan Ferreira Maia 26 Reputation points

    I will perform updates on the server, since it is out of date, I should do it in a few weeks.
    I will follow this line before I continue troubleshooting


    Alan Ferreira Maia

    0 comments No comments