Reputation
784
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
6 19
Impact
~34k people reached

  • 0 posts edited
  • 2 helpful flags
  • 36 votes cast
Jun
29
accepted Do I really need an account in domain\administrators for the Web Application Proxy with ADFS 3.0 on a domain controller?
Jun
26
answered Do I really need an account in domain\administrators for the Web Application Proxy with ADFS 3.0 on a domain controller?
Jun
26
comment Do I really need an account in domain\administrators for the Web Application Proxy with ADFS 3.0 on a domain controller?
Yes, it's a requirement to proceed through with the WAP configuration.
Jun
25
comment Do I really need an account in domain\administrators for the Web Application Proxy with ADFS 3.0 on a domain controller?
Actually I think you are talking about a different account, the ADFS service account. I'm talking about the account you use to connect to the ADFS server when configuring WAP. Did you use the same account for both? I.e., did you put the Domain Admins account on the WAP that isn't joined to the domain, in your DMZ?
Jun
25
comment Do I really need an account in domain\administrators for the Web Application Proxy with ADFS 3.0 on a domain controller?
Okay, thanks. But to be clear there is no requirement that it be in the Domain Admins account, only that it be in the Domain\Administrators account, slightly different permissions in AD. I'm probably a bit paranoid as this is going on "the cloud" and it's my first such server that is domain joined.
Jun
25
asked Do I really need an account in domain\administrators for the Web Application Proxy with ADFS 3.0 on a domain controller?
Jun
18
asked Error using SHA256 certificate for RADIUS server for use with Ubuntu Unifi/Wireless 802.1x 802.11 network
Feb
10
awarded  Notable Question
Sep
30
awarded  Popular Question
Aug
28
comment Race conditions in account creation script with email account and Office 365 sync--any good way besides time delay to resolve?
That is a good suggestion, thank you. I will give that a try. Any suggestion on where to start with tying an action to an event, or is a Google going to get me good results?
Aug
28
asked Race conditions in account creation script with email account and Office 365 sync--any good way besides time delay to resolve?
Jul
2
accepted ADFS 3.0 / Web Application Proxy Server 2012 R2 error
Jul
2
answered ADFS 3.0 / Web Application Proxy Server 2012 R2 error
Jul
2
awarded  Curious
Jul
2
comment ADFS 3.0 / Web Application Proxy Server 2012 R2 error
It does not matter what credentials I use--it fails prior to testing the credentials. However, I tried using a domain administrator account and an account that I explicitly assigned permissions to read the private key with.
Jul
1
comment ADFS 3.0 / Web Application Proxy Server 2012 R2 error
Just tried building a new WAP server, no change, same error message about creating the proxy trust certificate. I saw one other reference to similar error with someone who wasn't running ADFS 3.0 on both ends of the equation, but in my case it is 2012 R2 for both the ADFS and WAP servers. ADFS is working. I am following this guide: goodworkaround.com/node/53
Jul
1
comment ADFS 3.0 / Web Application Proxy Server 2012 R2 error
It is failing well before anything with DNS names come up, the error is with generating some certificate. Unfortunately the event log just offers the same error message about creating the proxy trust certificate. I am going to try a rebuild and report back.
Jun
30
comment ADFS 3.0 / Web Application Proxy Server 2012 R2 error
Thanks User1721192. I am willing to try changing the DNS, but it doesn't seem like this is where the problem is originating. I am trying to set up the first WAP. Right now the adfs is working fine pointing directly to the ADFS server. If I change the DNS, it will stop working until the WAP is set up. In other words, it will break the working setup.
Jun
26
awarded  Tumbleweed
Jun
19
asked ADFS 3.0 / Web Application Proxy Server 2012 R2 error