26.04.2015 Views

Team Development with Visual Studio Team Foundation Server

Team Development with Visual Studio Team Foundation Server

Team Development with Visual Studio Team Foundation Server

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

• Your remote users cannot publish test results to the TFS.<br />

• Internal users must connect to the extranet TFS over SSL just like external users.<br />

Note: Whenever you use Basic authentication, use SSL. Basic authentication transmits<br />

credentials in clear text. Use SSL to protect this information.<br />

Basic Authentication / SSL<br />

If you are using TFS SP1 and want to support the extranet or reverse proxy scenario, you need to<br />

enable Basic authentication over SSL by configuring IIS on your TFS application tier. With<br />

Basic authentication, logon credentials are passed over the Internet using an unprotected Base64<br />

encoded format. To protect your client’s credentials, use only Basic authentication over a Secure<br />

HTTP (HTTPS) connection that uses SSL.<br />

Use an Internet <strong>Server</strong> API (ISAPI) filter so that remote clients connect using Basic<br />

authentication over SSL, while local clients still connect using Integrated Windows<br />

authentication. The ISAPI filter looks for clients that you have configured as “external/Internet”<br />

and strips out NTLM authentication on the 401 response to force these clients to use other<br />

authentication methods, such as Basic authentication.<br />

More information<br />

• For more information about how to configure your TFS server to require Basic authentication<br />

and HTTPS over remote connections, see “Walkthrough: Setting up <strong>Team</strong> <strong>Foundation</strong> <strong>Server</strong><br />

to Require HTTPS and Secure Sockets Layer (SSL)” at http://msdn2.microsoft.com/enus/library/aa833873(VS.80).aspx<br />

• For more information about setting up the ISAPI filter, see “Walkthrough: Setting up <strong>Team</strong><br />

<strong>Foundation</strong> <strong>Server</strong> <strong>with</strong> Secure Sockets Layer (SSL) and an ISAPI Filter” at<br />

http://msdn2.microsoft.com/en-us/library/aa833872(VS.80).aspx<br />

• For more information about ISAPI filters for TFS, see James Manning’s blog post “The TFS<br />

extranet ISAPI filter mechanics” at http://blogs.msdn.com/jmanning/archive/2006/10/27/thetfs-quot-extranet-quot-isapi-filter-mechanics.aspx<br />

<strong>Team</strong> <strong>Foundation</strong> <strong>Server</strong> Proxy<br />

Figure 17.5 shows architecture for the use of the <strong>Team</strong> <strong>Foundation</strong> <strong>Server</strong> Proxy.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!