index > Team Foundation Server - Setup > Error TF50604 during Installation

Error TF50604 during Installation

I've got a problem during the installation of the TFS 2005 RC.

First I've set up a brand new PC with Windows 2003 Standard, Active Domain Controller
(= ADC; and new DNS;
the new domain is addc.mydomain, mydomain is an existing NT-domain, but I used "New Tree", so this shouldn't be the problem...)
After that I created three new accounts on the ADC-computer (TFSSetup, TFSService, TFSReports), TFSSetup is a Domain Admin, the two others are Domain Users.

On the other computer ready for the TFS (SingleServer) I did everything according to the chm-file (TFSInstall.chm), which includes installing hotfixes, sql server 2005 standard, and so on, then starting setup.
I entered ADDC\TFSSetup, ADDC\TFSService, ADDC\TFSReports as the user accounts and started the installation process.

Then...this message pops up: "Error 28002.Error unknown."

Analysing the log-file ("VSMsiLog####"; # is a letter/number) I discovered this:

TfsGSSInit - Irrecoverable error: TF50604: There was an error getting identity information from Active Directory.
02/21/06 11:30:46 DDSet_Status: Process returned 6130
02/21/06 11:30:46 DDSet_Status: Found the matching error code for return value '6130' and it is: '28002'
02/21/06 11:30:46 DDSet_Error: 6130
MSI (s) (C8!D4) [11:31:08:828]: Product: Microsoft Visual Studio 2005 Team Foundation Server - ENU -- Error 28002.Error unknown.

02/21/06 11:31:08 DDSet_Status: Commandline: "c:\Program Files\Microsoft Visual Studio 2005 Team Foundation Server\TF Setup\TfsGssInit.exe" /setup /install "TAB-FE-IMLAUER" "TfsIntegration" "ADDC\TFSSERVICE"
02/21/06 11:31:08 DDSet_Status: IgnoreExitCode: 0
02/21/06 11:31:08 DDSet_Status: Silent: 0
02/21/06 11:31:08 DDSet_Status: ActionStart: 0
02/21/06 11:31:08 DDSet_Status: Cost: 0
02/21/06 11:31:08 DDSet_Status: WorkingDirectory:
02/21/06 11:31:08 DDSet_Status: HideCmdLine: 0
TfsGSSInit - Team Foundation Server GSS Initialization Tool
(c)Copyright, Microsoft Corporation, 2005. All rights reserved.

I've logged in as ADDC\TFSSetup on the Server (Win2k3 Pro), ADDC\Domain Admins are members of "Administrators" on the server, ADDC\Domain users are members of "Users" on the server - and both groups are allowed to log in locally (checked in "Local Security Policy")

I can't get it...why is this. I'm getting desperated... :(

Everyone is a n00b

Steven I.

Error TF50604 means that the user running the install is not able to access information about either itself, or the service user.

Matthew Hoover

One other thing.

What functional level are you running on the Domain Controller?

NOTE: NT4 domains and Windows 2000 Native Mode function level are not supported (basically anything that supports NT4 DCs is not supported).

Thanks,

Dan Kershaw [msft]

Dan Kershaw

I can't find anything useful in the log files...

And regarding the functional level - I don't know what this is. But if it is the Pre-Windows-compatible-mode I've chosen the not-pre-mode.

But I guess I've found a solution. I logged in as every user (Service and Reports), and after that I was able to get a little bit further - but confronted with a new error *yeah*

Everyone is a n00b

Steven I.

where you able to overcome the problem ?

I've encountered the same problem & am still trying to work around it....

TfsGSSInit - Irrecoverable error: TF50604: There was an error getting identity information from Active Directory.
03/06/06 10:42:20 DDSet_Status: Process returned 6130
03/06/06 10:42:20 DDSet_Status: Found the matching error code for return value '6130' and it is: '28002'
03/06/06 10:42:20 DDSet_Error: 6130
MSI (s) (94!F0) [10:56:15:419]: Product: Microsoft Visual Studio 2005 Team Foundation Server - ENU -- Error 28002.Error unknown.

guyfe

We haven't been able to diagnose the root cause of this problem. Could you please check the event log on the app tier, and see if there are any events in the application log around this time. I would expect at least one error with a source of 'TFS Service'. Could you please post any events that you find in the event log near the correct time?

Thank you,

--Matt Hoover

Visual Studio Team Foundation

Software Design Engineer

Matthew Hoover

Hello Matt,

I have just read this post and find that have the same problem. But I haven't active directory .I have OpenLdap 2.2.13 with Samba 3. Is that a problem?

Gonçalo Ferreira

I don't think this will work.

We have not done any testing of TFS with non Active Directory LDAP servers. Since we are using ADSI to access the AD server, and doing a few AD specific queries, I would not expect TFS to work against a non AD directory server. Note, even if this environment did work, it wouldn't be a supported configuration.

In your environment, you will have to install TFS using local users, and have all of the TFS users be local users of the TFS app tier.

--Matt Hoover
Software Design Engineer
Team Foundation Server

Matthew Hoover - MSFT

I get the same error about 2/5th's of the way through the install.It's not DNS since our domain controller (Win2k) is also a DNS server and the server (WinXP Server 2003) dedicated to VSTS has a hard-coded IP to the Win2k server. My event log shows:

=====================================================

TF53010: An unexpected condition has occurred in a Team Foundation component. The information contained here should be made available to your site administrative staff.
Technical Information (for the administrative staff):
Date (UTC): 01/05/2006 7:49:08 AM
Machine: MACHINENAME
Application Domain: TfsGssInit.exe
Assembly: Microsoft.TeamFoundation.Server, Version=8.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a; v2.0.50727
Process Details:
Process Name: TfsGssInit
Process Id: 2808
Thread Id: 1424
Account name: domain\tfssetup

Detailed Message: TF50621: GSS: Failed to retrieve identity from source : [<deleted for security reasons>]
Exception Message: The server is not operational.

Name: "domain.companyname.com"
(type ActiveDirectoryServerDownException)

Exception Stack Trace: at System.DirectoryServices.ActiveDirectory.PropertyManager.GetPropertyValue(DirectoryContext context, DirectoryEntry directoryEntry, String propertyName)
at System.DirectoryServices.ActiveDirectory.Domain.GetDomain(DirectoryContext context)
at Microsoft.TeamFoundation.Server.IdentityStoreAccessor.GetDomainDirectoryEntry(String domain)
at Microsoft.TeamFoundation.Server.IdentityStoreAccessor.ReadIdentityFromAD(String domain, String username)
at Microsoft.TeamFoundation.Server.IdentityStoreAccessor.ReadIdentityFromSource(String sid)

Inner Exception Details:

Exception Message: The server is not operational.
(type COMException)

Exception Stack Trace: at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.PropertyValueCollection.PopulateList()
at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
at System.DirectoryServices.ActiveDirectory.PropertyManager.GetPropertyValue(DirectoryContext context, DirectoryEntry directoryEntry, String propertyName)

Our Win2k server was running and AD seemed to run just fine, so I don't know where the exception comes from.

Luis Miguel Huapaya

Luis Huapaya

The exception indicates that the installation process was unable to connect to Active Directory. There are two common causes for this exception. The first and most likely is that the user running the setup doesn't have rights to read information from Active Directory. The second is that the DC for your domain was down. Please try the following command when you are logged in as the setup user:

dsquery user -samid <account name> -d <domain> | dsget user -dn -samid -sid -display -email ??

This command performs a query against AD that is similar to what the server does to resolve a user.

Matthew Hoover - MSFT

reply 10