问题
We have set up a TFS 2012 Server on AWS and have implemented one of the newer Application Load Balancers in front of it. We did this to leverage the CName functionality and save on our Elastic IP Address allocation. This server is only for the internal team, but we were creating a public URL.
When logging into the server directly through the local IP, it prompts for un/password one time, when coming from external through the load balancer, every AJAX call gets prompted on the page, and you end up with numerous prompts. It seems to be a problem with the pass through authentication of the site. We've tried adjusting numerous things, and read several articles on how to configure TFS, but still can't figure out what setting we're missing.
Does this need to switch to a Classic? We are at the cap on our Elastic IPs, and I'd rather not request an extra, but if that's the only way I will. Any insight or items to check would be greatly appreciated.
回答1:
When you're using Elastic Load Balancer with "Windows Authentication", you need to configure your ELB's listener for "TCP", not "HTTP" or "HTTPS". Basically, ELB changes the authentication information that Windows does not like.
At this time, ALB cannot use "TCP" listeners.
Try using a classic ELB with a "TCP" listener instead.
来源：https://stackoverflow.com/questions/41000562/tfs-through-load-balancer-login-prompts