Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have a Team Foundation Server 2010 set up using Kerberos. If we're accessing it via http://tfsserver:8080/tfs, everything's fine and users were never prompted for credentials. However if accessing it via http://tfsserver.domain.com:8080/tfs, then IE prompts for credentials. Has anyone experienced a similar issue? Thanks!

I tried IE, Firefox and Chrome and got the same result (Kerberos when using machine name, NTLM when using FQDN).

share|improve this question

1 Answer 1

up vote 2 down vote accepted

First thing to check on your client that the fqdn is in the Trusted Sites zone, and the Trusted Sites zone is configured to "Automatic logon with current username and password".

I would also be inclined to create an SPN for the url if it does not exist:

http/tfsserver.domain.com:8080

You can show the spn's like this:

setspn.exe -L tfsserver.domain.com
setspn.exe -L tfsserver.domain.com:8080
setspn.exe -L tfsserver
setspn.exe -L tfsserver:8080

share|improve this answer
    
Turned out tfsserver.domain.com was not detected as an Intranet site. After manually adding *.domain.com in the Intranet site list, the problem is gone. Thanks! –  Jim Feb 17 '12 at 4:31

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.