Test-AdfsFarmJoin

Test-AdfsFarmJoin

Runs prerequisite checks for adding the server computer to a federation server farm.

구문

Parameter Set: AdfsFarmJoinWidGmsa
Test-AdfsFarmJoin -GroupServiceAccountIdentifier <String> -PrimaryComputerName <String> [-PrimaryComputerPort <Int32> ] [ <CommonParameters>]

Parameter Set: __AllParameterSets
Test-AdfsFarmJoin [-CertificateThumbprint <String> ] [-Credential <PSCredential> ] [ <CommonParameters>]

Parameter Set: AdfsFarmJoinSqlGmsa
Test-AdfsFarmJoin -GroupServiceAccountIdentifier <String> -SQLConnectionString <String> [ <CommonParameters>]

Parameter Set: ADFSFarmJoinSqlSvcAcct
Test-AdfsFarmJoin -ServiceAccountCredential <PSCredential> -SQLConnectionString <String> [ <CommonParameters>]

Parameter Set: ADFSFarmJoinWidSvcAcct
Test-AdfsFarmJoin -PrimaryComputerName <String> -ServiceAccountCredential <PSCredential> [-PrimaryComputerPort <Int32> ] [ <CommonParameters>]

자세한 설명

The Test-AdfsFarmJoin cmdlet performs the checks that you must complete before you run the Add-AdfsFarmNode cmdlet to add the local server computer to an existing federation server farm.

매개 변수

-CertificateThumbprint<String>

Specifies the value of the certificate thumbprint of the certificate that the Secure Sockets Layer (SSL) binding of the default website uses in Internet Information Services (IIS). This value must match the thumbprint of a valid certificate in the certificate store of the local computer.

별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-Credential<PSCredential>

Specifies a PSCredential object based on a user name and password. To obtain a PSCredential object, use the Get-Credential cmdlet. For more information, type Get-Help Get-Credential.

별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-GroupServiceAccountIdentifier<String>

Specifies the name of the group Managed Service Account that the AD FS(Active Directory Federation Services) service uses as the logon identity for the AD FS service.

별칭

없음

필수 여부

true

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-PrimaryComputerName<String>

Specifies the name of the primary in a farm. The cmdlet checks the farm that has the primary that you specify.

별칭

없음

필수 여부

true

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-PrimaryComputerPort<Int32>

Specifies the primary computer port. The computer uses the HTTP port that you specify to connect with the primary computer in order to synchronize configuration settings. Specify a value of 80 for this parameter, or specify an alternative value if the HTTP port on the primary computer is not 80. If you do not specify this parameter, the cmdlet assigns the default port value of 443.

별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-ServiceAccountCredential<PSCredential>

Specifies a PSCredential object based on a user name and password for the service account in Active Directory® 도메인 서비스 under which the AD FS service runs. To obtain a PSCredential object, use the Get-Credential cmdlet. For more information, type Get-Help Get-Credential.

별칭

없음

필수 여부

true

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-SQLConnectionString<String>

Specifies the Microsoft SQL Server database that will store the AD FS configuration settings. If you do not specify this parameter, AD FS uses the Windows Internal Database to store configuration settings.

별칭

없음

필수 여부

true

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

<CommonParameters>

이 cmdlet은 일반 매개 변수 -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer 및 -OutVariable을 지원합니다. 자세한 내용은 다음을 참조하세요. about_CommonParameters(https://go.microsoft.com/fwlink/p/?LinkID=113216).

입력

입력 유형은 cmdlet에 파이프할 수 있는 개체의 유형입니다.

출력

출력 유형은 cmdlet이 내보내는 개체의 유형입니다.

  • System.Object

예제

Example 1: Test a server computer as a node in an existing federation server farm

The first command uses the Get-Credential cmdlet to create a credential object for the Active Directory account under which the AD FS service runs. The command stores the credential object in the $FScred variable.

The second command tests the joining of the local server computer as a node in an existing federation server farm that uses a SQL Server database that is installed on a computer named SQLHost. The command specifies the credentials that are stored in the $FScred variable for the Active Directory account under which the AD FS service runs.

PS C:\> $FScred = Get-Credential
PS C:\> Test-AdfsFarmJoin -ServiceAccountCredential $FScred -SQLConnectionString "Data Source=SQLHost;Integrated Security=True"

Example 2: Test the overwrites of an existing AD FS configuration database

The first command uses the Get-Credential cmdlet to create a credential object for the Active Directory account under which the AD FS service runs. The command stores the credential object in the $FScred variable.

The second command tests the overwrites of an existing AD FS configuration database and tests the joining of the local server computer as a node in an existing federation server farm that uses the Windows Internal Database. The primary node of the farm is installed on a computer named PrimaryWIDHost. The command specifies the credentials that are stored in $FScred for the Active Directory account under which the AD FS service runs.
Note: The CertificateThumbprint parameter must specify the thumbprint of a certificate that is currently installed in the certificate store of the local computer. The certificate must be the same certificate that is used as the service communications certificate on the primary node.

PS C:\> $FScred = Get-Credential
PS C:\> Test-AdfsFarmJoin -OverwriteConfiguration -PrimaryComputerName "PrimaryWIDHost" -PrimaryComputerPort 80 -ServiceAccountCredential $FScred -CertificateThumbprint 8169c52b4ec6e77eb2ae17f028fe5da4e35c0bed

관련 항목

Add-AdfsFarmNode

Test-AdfsFarmInstallation