Start Free Trial

asked on

Lync 2013 Test Connectivity error

I'm getting the below error when doing testconnectivity microsoft tool check. Unsure what else to look at in TMG

Testing HTTP authentication methods for URL https://lyncdiscover.domain.com/Autodiscover/AutodiscoverService.svc/root/user.
     HTTP authentication test failed.
      Tell me more about this issue and how to resolve it

      Additional Details

HTTP 401 status received from server, but X-MS-WebTicketURL not provided.
HTTP Response Headers:
WWW-Authenticate: Negotiate,Kerberos,NTLM,Basic realm="lyncdiscover.domain.com"
Connection: Keep-Alive
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html
Content-Length: 2073
Elapsed Time: 216 ms.

Gajendra Rathod

First:
Check Lync mobile is working internally.
Lync connectivity tool

Second:
1. TMG set to forward port 443 > 4443
2. Authenticated delegation is set to "No delegation, but clients may authenticate directly"

Make sure the DNS records for external and the ports are open.
Here is the blog which mentioning the checks,

http://blogs.technet.com/b/nexthop/archive/2012/02/21/troubleshooting-external-lync-mobility-connectivity-issues-step-by-step.aspx

Also,
Only you are getting error from the this testconnectivity microsoft tool check?
Any issues observed from the external connection from lync clients?

ASKER

Ok I see the problem was because of authentication. I ran https://testconnectivity.microsoft.com/ and everything seems ok. The settings I have on TMG listeners for my https firewall rules is attached... Now I'm getting a different error when i ran Lync Connectivity Analyzer:

[10/30/2014 12:36:49 PM] Cleared the log file
[10/30/2014 12:36:50 PM] [DEBUG] Logging test parameters:
[10/30/2014 12:36:50 PM] [DEBUG] SIP Uri: user@domain.com
[10/30/2014 12:36:50 PM] [DEBUG] User Name: user@ad.domain.com
[10/30/2014 12:36:50 PM] [DEBUG] Discovery Type: Automatic Discovery
[10/30/2014 12:36:50 PM] [DEBUG] Network access: NetworkAccessExternal
[10/30/2014 12:36:50 PM] [DEBUG] Selected client: ApplicationLMX
[10/30/2014 12:36:50 PM] [SUBHEADING] Starting Lync server autodiscovery
[10/30/2014 12:36:50 PM] [INFO] Please wait; this test may take several minutes to complete...
[10/30/2014 12:36:50 PM] [SUBHEADING] Starting automatic discovery for secure (HTTPS) internal channel
[10/30/2014 12:36:50 PM] [SUMMARY] lyncdiscoverinternal.domain.com can't be resolved by the DNS server. Skipping internal discovery.
[10/30/2014 12:36:50 PM] [SUBHEADING] Starting automatic discovery for secure (HTTPS) external channel
[10/30/2014 12:36:50 PM] [DEBUG] Sending HTTP request to https://lyncdiscover.domain.com/?sipuri=user@domain.com
[10/30/2014 12:36:50 PM] [DEBUG] Cookie found in autodiscover response: StatusCode: 200, ReasonPhrase: 'OK', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
{
Connection: Keep-Alive
Pragma: no-cache
X-MS-Server-Fqdn: internalserver.ad.domain.com
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Date: Thu, 30 Oct 2014 19:35:41 GMT
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 1071
Content-Type: application/vnd.microsoft.rtc.autodiscover+xml; v=1
Expires: -1
}
[10/30/2014 12:36:50 PM] [DEBUG] Parsing the response for URL https://lyncdiscover.domain.com/?sipuri=user@domain.com. Full response: <?xml version="1.0" encoding="utf-8"?><AutodiscoverResponse xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" AccessLocation="External"><Root><Link token="Domain" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/domain?originalDomain=domain.com" /><Link token="User" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.com" /><Link token="Self" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root?originalDomain=domain.com" /><Link token="OAuth" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/oauth/user?originalDomain=domain.com" /><Link token="External/XFrame" href="https://lync13.domain.com/Autodiscover/XFrame/XFrame.html" /><Link token="Internal/XFrame" href="https://internalserver.ad.domain.com/Autodiscover/XFrame/XFrame.html" /><Link token="XFrame" href="https://lync13.domain.com/Autodiscover/XFrame/XFrame.html" /></Root></AutodiscoverResponse>
[10/30/2014 12:36:50 PM] [DEBUG] Autodiscover URL https://lyncdiscover.domain.com/?sipuri=user@domain.com redirected to https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.com
[10/30/2014 12:36:50 PM] [DEBUG] Sending HTTP request to https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.com?sipuri=user@domain.com
[10/30/2014 12:36:51 PM] [DEBUG] Cookie found in autodiscover response: StatusCode: 401, ReasonPhrase: 'Unauthorized', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
{
Connection: Keep-Alive
X-MS-WebTicketURL: https://lync13.domain.com/WebTicket/WebTicketService.svc
X-MS-WebTicketSupported: cwt,saml
X-MS-Server-Fqdn: internalserver.ad.domain.com
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Date: Thu, 30 Oct 2014 19:35:41 GMT
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Content-Length: 1293
Content-Type: text/html
}
[10/30/2014 12:36:51 PM] [DEBUG] Authorization required for https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.com?sipuri=user@domain.com
[10/30/2014 12:36:51 PM] [DEBUG] Obtaining WebTicket from https://lync13.domain.com/WebTicket/WebTicketService.svc
[10/30/2014 12:36:51 PM] [DEBUG] StatusCode=InternalServerError, Reason=Internal Server Error
[10/30/2014 12:36:51 PM] [DEBUG] System.Exception: Exception of type 'System.Exception' was thrown.
at Microsoft.LyncServer.WebServices.WebTicketManager.WTExceptions(String exText)
at Microsoft.LyncServer.WebServices.WebTicketManager.<GetMexDocumentAsync>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<AuthenticationRequired>d__2a.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<SendRequest>d__d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<ParseResponse>d__16.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<StartDiscoveryJourney>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at LyncConnectivityAnalyzerCore.Utilities.<RetrieveUserLocation>d__3e.MoveNext()
[10/30/2014 12:36:51 PM] [SUMMARY_ERROR] Server discovery failed for secured external channel against https://lyncdiscover.domain.com/
[10/30/2014 12:36:51 PM] [SUBHEADING] Starting automatic discovery for unsecure (HTTP) external channel
[10/30/2014 12:36:51 PM] [DEBUG] Sending HTTP request to http://lyncdiscover.domain.com/?sipuri=user@domain.com
[10/30/2014 12:36:51 PM] [DEBUG] Cookie found in autodiscover response: StatusCode: 403, ReasonPhrase: 'Forbidden ( The page must be viewed over a secure channel (Secure Sockets Layer (SSL)). Contact the server administrator. )', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
{
Connection: Keep-Alive
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 2052
Content-Type: text/html
}
[10/30/2014 12:36:51 PM] [DEBUG] Autodiscover: SendRequest(): the URL http://lyncdiscover.domain.com/?sipuri=user@domain.com couldn't be connected. Complete HTTP headers:\r\n Connection: Keep-Alive
Pragma: no-cache
Cache-Control: no-cache

[10/30/2014 12:36:51 PM] [CRITICAL] Couldn't connect to URL http://lyncdiscover.domain.com/?sipuri=user@domain.com (HTTP status code Forbidden)
[10/30/2014 12:36:51 PM]

[10/30/2014 12:36:51 PM] [DEBUG] System.Exception: Couldn't connect to URL http://lyncdiscover.domain.com/?sipuri=user@domain.com (HTTP status code Forbidden)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.TerminateAD(String mesg)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<SendRequest>d__d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<StartDiscoveryJourney>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at LyncConnectivityAnalyzerCore.Utilities.<RetrieveUserLocation>d__3e.MoveNext()
[10/30/2014 12:36:51 PM] [SUMMARY_ERROR] Server discovery failed for unsecured external channel against http://lyncdiscover.domain.com/
[10/30/2014 12:36:51 PM] [DEBUG] None, AutoInternalDNSFail, AutoInternalSecureD, AutoInternalUnsecureD, AutoExternalSecureD, AutoExternalUnsecureD, ManualDNSFail, ManualSecureD, ManualUnsecureD, AuthBrokerInternalLMXCheckGET, AuthBrokerInternalLMXCheckPOST, AuthBrokerExternalLMXCheckGET, AuthBrokerExternalLMXCheckPOST, MobilityMCXInternalLMXCheckGET, MobilityMCXInternalLMXCheckPOST, MobilityMCXExternalLMXCheckGET, MobilityMCXExternalLMXCheckPOST, LMXSIPServerInternalDNS, LMXSIPServerExternalDNS, MobilityUCWAInternalCheckPOST, MobilityUCWAExternalCheckPOST
[10/30/2014 12:36:51 PM] [SUMMARY]
[10/30/2014 12:36:51 PM] [SUMMARY_ERROR] Automatic discovery of the Lync server failed. Please verify the server requirements at http://go.microsoft.com/fwlink/?LinkId=278998
[10/30/2014 12:36:51 PM] [SUMMARY_ERROR]
Microsoft Lync Connectivity Analyzer cannot analyze deployment readiness until a discovery test has completed successfully.
Screen-Shot-2014-10-30-at-12.29.46-PM.pn
Screen-Shot-2014-10-30-at-12.29.32-PM.pn

Gajendra Rathod

Please try to open https://lyncdiscover.domain.com/ out network.

Check the SSL certificate in above URL. Link

ASKER

yeah I can see the SSL cert ok. I'm doing more research and found that the link below should return something?
https://lyncdiscover.domain.com/autodiscover/autodiscoverservice.svc/root/domain
but its returning below:

This XML file does not appear to have any style information associated with it. The document tree is shown below.
<reason xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/rtc/2012/03/ucwa">
<code>NotFound</code>
<subcode>None</subcode>
<debugInfo/>
<parameters/>
</reason>

ASKER

I did lync connectivity tester and below is what I get.

      Testing remote connectivity for user user@domain.com to the Microsoft Lync server.
     Specified remote connectivity test(s) to Microsoft Lync server failed. See details below for specific failure reasons.

      Additional Details

Couldn't sign in. Error: Error Message: Operation failed because the network connection was not available..
Error Type: ConnectionFailureException.
.
Elapsed Time: 882 ms.

ASKER

but when I connect from the lync edge server I can ping the Front End server without any problem.. Unsure what the problem all about...

Gajendra Rathod

Recheck TMG publish rule.

ASKER

ok recreated it the way it is showed on the website and still same problem.

ASKER

I have a lync edge server separate from lync front edge server

av/wc/sip.domain.com => goes to external sip ip address

lync13/lyncdiscover/meet/dialin.domain.com => goes to external lyncdiscover IP address and have TMG as first line of defense.

lync13 has port 443, 5087, 80
sip has port 3478, 50000-59999, 5061, 5062, 5269.

This is a good configuration right?

ASKER

Do I need to setup director pool in my network? Will that fix this 401 error I'm getting? Unsure what to do anymore

Gajendra Rathod

It do not think adding new feature like director pool will help.

You can check the design using Lync planning tool.

ASKER

ok base on the tool I'm on the right track. I have all things requirement and it doesn't talk about ADFS so its good. The problem still persist. Unsure what else I need to open or check to make this work:

[10/30/2014 12:36:51 PM] [DEBUG] Cookie found in autodiscover response: StatusCode: 401, ReasonPhrase: 'Unauthorized', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
{
Connection: Keep-Alive
X-MS-WebTicketURL: https://lync13.domain.com/WebTicket/WebTicketService.svc
X-MS-WebTicketSupported: cwt,saml
X-MS-Server-Fqdn: internalserver.ad.domain.com
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Date: Thu, 30 Oct 2014 19:35:41 GMT
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Content-Length: 1293
Content-Type: text/html
}

[10/30/2014 12:36:51 PM] [DEBUG] Cookie found in autodiscover response: StatusCode: 403, ReasonPhrase: 'Forbidden ( The page must be viewed over a secure channel (Secure Sockets Layer (SSL)). Contact the server administrator. )', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:

ASKER

I'm testing from my lync mobile phone and I found this:

2014-11-03 18:38:10.428 Lync[1486:6a4f000] VERBOSE TRANSPORT CHttpProxyHelper.cpp/435:CHttpProxyHelper::discoverProxy : No proxy found for url https://lync13.domain.com/WebTicket/WebTicketService.svc/mex. Sending over direct connection.
2014-11-03 18:38:10.429 Lync[1486:6a4f000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x1598630.
2014-11-03 18:38:10.556 Lync[1486:6a4f000] INFO UTILITIES CHttpConnection.cpp/579:Received kCFStreamEventEndEncountered (MetaDataRequest)isHeadersAvailable = true responseHeadersHandle = 1581690
2014-11-03 18:38:10.557 Lync[1486:6a4f000] INFO UTILITIES CHttpConnection.cpp/653:Response status = 500 for request MetaDataRequest
2014-11-03 18:38:10.557 Lync[1486:6a4f000] INFO UTILITIES CHttpStreamPool.cpp/445:Scheduling stream 0x1576590 for release.
2014-11-03 18:38:10.557 Lync[1486:6a4f000] INFO TRANSPORT CHttpRequestProcessor.cpp/173:Received response of request(MetaDataRequest) with status = 0x0
2014-11-03 18:38:10.557 Lync[1486:6a4f000] INFO TRANSPORT TransportUtilityFunctions.cpp/1032:<ReceivedResponse>
POST https://lync13.domain.com/WebTicket/WebTicketService.svc/mex
Request Id: 0x6354fb8
HttpHeader:Connection Keep-Alive
HttpHeader:Content-Length 1208
HttpHeader:Content-Type text/html
HttpHeader:Date Tue, 04 Nov 2014 02:37:03 GMT
HttpHeader:Server Microsoft-IIS/8.5
HttpHeader:StatusCode 500
HttpHeader:X-Content-Type-Options nosniff
HttpHeader:X-MS-Server-Fqdn internalserver.ad.domain.com
HttpHeader:X-Powered-By ASP.NET

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>

<title>500 - Internal server error.</title>

<style type="text/css">



</style>

</head>

<body>

<div id="header"><h1>Server Error</h1></div>

<div id="content">

<div class="content-container"><fieldset>

<h2>500 - Internal server error.</h2>

<h3>There is a problem with the resource you are looking for, and it cannot be displayed.</h3>

</fieldset></div>

</div>

</body>

</html>

</ReceivedResponse>

ASKER

hmm I'm lost I did a lot of researching and I have all the correct ports open. I'm still unsure why I'm getting this:
<title>500 - Internal server error.</title>

I enabled/disabled http authentication in TMG but still not working. What else can I check?

ASKER

found another error in event viewer. Still researching.

WebHost failed to process a request.
Sender Information: System.ServiceModel.ServiceHostingEnvironment+HostingManager/52809891
Exception: System.ServiceModel.ServiceActivationException: The service '/WebTicket/WebTicketService.svc' cannot be activated due to an exception during compilation. The exception message is: The authentication schemes configured on the host ('Ntlm') do not allow those configured on the binding 'WSHttpBinding_MachineCert' ('Anonymous'). Please ensure that the SecurityMode is set to Transport or TransportCredentialOnly. Additionally, this may be resolved by changing the authentication schemes for this application through the IIS management tool, through the ServiceHost.Authentication.AuthenticationSchemes property, in the application configuration file at the <serviceAuthenticationManager> element, by updating the ClientCredentialType property on the binding, or by adjusting the AuthenticationScheme property on the HttpTransportBindingElement.. ---> System.NotSupportedException: The authentication schemes configured on the host ('Ntlm') do not allow those configured on the binding 'WSHttpBinding_MachineCert' ('Anonymous'). Please ensure that the SecurityMode is set to Transport or TransportCredentialOnly. Additionally, this may be resolved by changing the authentication schemes for this application through the IIS management tool, through the ServiceHost.Authentication.AuthenticationSchemes property, in the application configuration file at the <serviceAuthenticationManager> element, by updating the ClientCredentialType property on the binding, or by adjusting the AuthenticationScheme property on the HttpTransportBindingElement.
at System.ServiceModel.Channels.HttpTransportBindingElement.UpdateAuthenticationSchemes(BindingContext context)
at System.ServiceModel.Channels.HttpsTransportBindingElement.BuildChannelListener[TChannel](BindingContext context)
at System.ServiceModel.Channels.ChannelBuilder.BuildChannelListener[TChannel]()
at System.ServiceModel.Channels.SecurityChannelListener`1.InitializeListener(ChannelBuilder channelBuilder)
at System.ServiceModel.Channels.TransportSecurityBindingElement.BuildChannelListenerCore[TChannel](BindingContext context)
at System.ServiceModel.Channels.SecurityBindingElement.BuildChannelListener[TChannel](BindingContext context)
at Microsoft.Rtc.Internal.WebServicesAuthFramework.OCSLayeredChannelListener`2.BuildInnerChannel(BindingContext context)
at Microsoft.Rtc.Internal.WebServicesAuthFramework.OCSLayeredChannelListener`2..ctor(BindingContext context)
at Microsoft.Rtc.Internal.WebServicesAuthFramework.OCSMessageSecurityBindingElement`1.BuildChannelListener[TChannel](BindingContext context)
at Microsoft.Rtc.Internal.WebServicesAuthFramework.OCSLayeredChannelListener`2.BuildInnerChannel(BindingContext context)
at Microsoft.Rtc.Internal.WebServicesAuthFramework.OCSLayeredChannelListener`2..ctor(BindingContext context)
at Microsoft.Rtc.Internal.WebServicesAuthFramework.OCSMessageSecurityBindingElement`1.BuildChannelListener[TChannel](BindingContext context)
at System.ServiceModel.Channels.Binding.BuildChannelListener[TChannel](Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, BindingParameterCollection parameters)
at System.ServiceModel.Description.DispatcherBuilder.MaybeCreateListener(Boolean actuallyCreate, Type[] supportedChannels, Binding binding, BindingParameterCollection parameters, Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, ServiceThrottle throttle, IChannelListener& result, Boolean supportContextSession)
at System.ServiceModel.Description.DispatcherBuilder.BuildChannelListener(StuffPerListenUriInfo stuff, ServiceHostBase serviceHost, Uri listenUri, ListenUriMode listenUriMode, Boolean supportContextSession, IChannelListener& result)
at System.ServiceModel.Description.DispatcherBuilder.InitializeServiceHost(ServiceDescription description, ServiceHostBase serviceHost)
at System.ServiceModel.ServiceHostBase.InitializeRuntime()
at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.ActivateService(ServiceActivationInfo serviceActivationInfo, EventTraceActivity eventTraceActivity)
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
--- End of inner exception stack trace ---
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
at System.ServiceModel.ServiceHostingEnvironment.EnsureServiceAvailableFast(String relativeVirtualPath, EventTraceActivity eventTraceActivity)
Process Name: w3wp
Process ID: 28492

ASKER

the error went away after I give anonymous access on web ticket authentication in IIS. Still can't login.

ASKER

ok So I'm still unsure what this error means when I login from my phone but I'm still researching:

2014-11-06 16:40:26.193 Lync[2792:7a37000] INFO TRANSPORT CTransportThread.cpp/347:Sent Request(UcwaAutoDiscoveryRequest) to Request Processor
2014-11-06 16:40:26.193 Lync[2792:7a37000] WARNING TRANSPORT CCredentialManager.cpp/317:CCredentialManager::getSpecificCredential returning NULL credential for serviceId (4) type (1)!
2014-11-06 16:40:26.194 Lync[2792:7a37000] INFO TRANSPORT TransportUtilityFunctions.cpp/689:<SentRequest>
GET http://lyncdiscoverinternal.domain.com/
Request Id: 0x1492958
HttpHeader:Accept application/vnd.microsoft.rtc.autodiscover+xml;v=1

</SentRequest>

2014-11-06 16:40:26.196 Lync[2792:7a37000] INFO UTILITIES CHttpStreamPool.cpp/399:Allocating stream 0x1552680 for url - http://lyncdiscoverinternal.domain.com/ with persistent id as 7
2014-11-06 16:40:26.197 Lync[2792:7a37000] VERBOSE TRANSPORT CHttpProxyHelper.cpp/435:CHttpProxyHelper::discoverProxy : No proxy found for url http://lyncdiscoverinternal.domain.com/. Sending over direct connection.
2014-11-06 16:40:26.197 Lync[2792:7a37000] INFO TRANSPORT CHttpStreamPool.cpp/546:Not setting TLS as the url(http://lyncdiscoverinternal.domain.com/) is not https
2014-11-06 16:40:26.239 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a09f0 UIImageView:0x149f5e0.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>",
"<NSLayoutConstraint:0x14a0a50 UIView:0x149f540.centerX == UIImageView:0x149f5e0.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a09f0 UIImageView:0x149f5e0.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.242 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a0ae0 UIView:0x149f540.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a0ae0 UIView:0x149f540.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.243 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a0a80 UILabel:0x149ca70'Lync is signing in...'.centerX == UIActivityIndicatorView:0x15df750.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0ba0 UIView:0x149f540.centerX == UIActivityIndicatorView:0x15df750.centerX>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a0a80 UILabel:0x149ca70'Lync is signing in...'.centerX == UIActivityIndicatorView:0x15df750.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.246 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a09f0 UIImageView:0x149f5e0.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>",
"<NSLayoutConstraint:0x14a0a50 UIView:0x149f540.centerX == UIImageView:0x149f5e0.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a09f0 UIImageView:0x149f5e0.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.247 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a0ae0 UIView:0x149f540.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a0ae0 UIView:0x149f540.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.248 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a0a80 UILabel:0x149ca70'Lync is signing in...'.centerX == UIActivityIndicatorView:0x15df750.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0ba0 UIView:0x149f540.centerX == UIActivityIndicatorView:0x15df750.centerX>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a0a80 UILabel:0x149ca70'Lync is signing in...'.centerX == UIActivityIndicatorView:0x15df750.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.249 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a09f0 UIImageView:0x149f5e0.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>",
"<NSLayoutConstraint:0x14a0a50 UIView:0x149f540.centerX == UIImageView:0x149f5e0.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a09f0 UIImageView:0x149f5e0.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.250 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a0ae0 UIView:0x149f540.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a0ae0 UIView:0x149f540.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.251 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a0a80 UILabel:0x149ca70'Lync is signing in...'.centerX == UIActivityIndicatorView:0x15df750.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0ba0 UIView:0x149f540.centerX == UIActivityIndicatorView:0x15df750.centerX>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a0a80 UILabel:0x149ca70'Lync is signing in...'.centerX == UIActivityIndicatorView:0x15df750.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.254 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a09f0 UIImageView:0x149f5e0.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>",
"<NSLayoutConstraint:0x14a0a50 UIView:0x149f540.centerX == UIImageView:0x149f5e0.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a09f0 UIImageView:0x149f5e0.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.255 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a0ae0 UIView:0x149f540.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a0ae0 UIView:0x149f540.centerX == UILabel:0x149ca70'Lync is signing in...'.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.256 Lync[2792:1221013] Unable to simultaneously satisfy constraints.
      Probably at least one of the constraints in the following list is one you don't want. Try this: (1) look at each constraint and try to figure out which you don't expect; (2) find the code that added the unwanted constraint or constraints and fix it. (Note: If you're seeing NSAutoresizingMaskLayoutConstraints that you don't understand, refer to the documentation for the UIView property translatesAutoresizingMaskIntoConstraints)
(
"<NSLayoutConstraint:0x14a0a80 UILabel:0x149ca70'Lync is signing in...'.centerX == UIActivityIndicatorView:0x15df750.centerX>",
"<NSLayoutConstraint:0x14a0b10 H:|-(26)-[UILabel:0x149ca70'Lync is signing in...'] (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0b40 H:[UILabel:0x149ca70'Lync is signing in...']-(25)-| (Names: '|':UIView:0x149f540 )>",
"<NSLayoutConstraint:0x14a0ba0 UIView:0x149f540.centerX == UIActivityIndicatorView:0x15df750.centerX>"
)

Will attempt to recover by breaking constraint
<NSLayoutConstraint:0x14a0a80 UILabel:0x149ca70'Lync is signing in...'.centerX == UIActivityIndicatorView:0x15df750.centerX>

Make a symbolic breakpoint at UIViewAlertForUnsatisfiableConstraints to catch this in the debugger.
The methods in the UIConstraintBasedLayoutDebugging category on UIView listed in <UIKit/UIView.h> may also be helpful.
2014-11-06 16:40:26.259 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.259 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.259 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.259 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.259 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.268 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.268 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.269 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.269 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.269 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.269 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.269 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.269 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.269 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.269 Lync[2792:3b81d9dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-06 16:40:26.275 Lync[2792:3b81d9dc] INFO UI CMTableViewControllerBase.mm/341:MEMORY TRACKING 0x0190f000 DEALLOC CMCredentialsTableViewController
2014-11-06 16:40:26.441 Lync[2792:7a37000] ERROR TRANSPORT CHttpConnection.cpp/1029:Request Type = UcwaAutoDiscoveryRequest Error domain = kCFErrorDomainCFNetwork code = 0x2 ErrorDescription = The operation couldn‚Äôt be completed. (kCFErrorDomainCFNetwork error 2.) ErrorFailureReason = ErrorRecoverySuggestion =
2014-11-06 16:40:26.441 Lync[2792:7a37000] ERROR UTILITIES CHttpConnection.cpp/958:GetAddrInfo returned error 0x8
2014-11-06 16:40:26.441 Lync[2792:7a37000] INFO UTILITIES CHttpStreamPool.cpp/467:Releasing stream 0x1493120.
2014-11-06 16:40:26.441 Lync[2792:7a37000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x1493120.
2014-11-06 16:40:26.441 Lync[2792:7a37000] INFO TRANSPORT CHttpRequestProcessor.cpp/173:Received response of request(UcwaAutoDiscoveryRequest) with status = 0x22020001
2014-11-06 16:40:26.442 Lync[2792:7a37000] INFO TRANSPORT CHttpRequestProcessor.cpp/201:Request UcwaAutoDiscoveryRequest resulted in E_ConnectionError (E2-2-1). The retry counter is: 0
2014-11-06 16:40:26.442 Lync[2792:7a37000] WARNING TRANSPORT CCredentialManager.cpp/317:CCredentialManager::getSpecificCredential returning NULL credential for serviceId (4) type (1)!
2014-11-06 16:40:26.442 Lync[2792:7a37000] INFO TRANSPORT TransportUtilityFunctions.cpp/689:<SentRequest>
GET https://lyncdiscoverinternal.domain.com/?sipuri=sip:user@domain.com
Request Id: 0x641c618
HttpHeader:Accept application/vnd.microsoft.rtc.autodiscover+xml;v=1

</SentRequest>

2014-11-06 16:40:26.442 Lync[2792:7a37000] INFO UTILITIES CHttpStreamPool.cpp/399:Allocating stream 0x1498cf0 for url - https://lyncdiscoverinternal.domain.com/ with persistent id as 6
2014-11-06 16:40:26.443 Lync[2792:7a37000] VERBOSE TRANSPORT CHttpProxyHelper.cpp/435:CHttpProxyHelper::discoverProxy : No proxy found for url https://lyncdiscoverinternal.domain.com/?sipuri=sip:user@domain.com. Sending over direct connection.
2014-11-06 16:40:26.444 Lync[2792:7a37000] ERROR TRANSPORT CHttpConnection.cpp/1029:Request Type = UcwaAutoDiscoveryRequest Error domain = kCFErrorDomainCFNetwork code = 0x2 ErrorDescription = The operation couldn‚Äôt be completed. (kCFErrorDomainCFNetwork error 2.) ErrorFailureReason = ErrorRecoverySuggestion =
2014-11-06 16:40:26.444 Lync[2792:7a37000] ERROR UTILITIES CHttpConnection.cpp/958:GetAddrInfo returned error 0x8
2014-11-06 16:40:26.444 Lync[2792:7a37000] INFO UTILITIES CHttpStreamPool.cpp/467:Releasing stream 0x1552680.
2014-11-06 16:40:26.444 Lync[2792:7a37000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x1552680.
2014-11-06 16:40:26.445 Lync[2792:7a37000] INFO TRANSPORT CHttpRequestProcessor.cpp/173:Received response of request(UcwaAutoDiscoveryRequest) with status = 0x22020001
2014-11-06 16:40:26.445 Lync[2792:7a37000] INFO TRANSPORT CHttpRequestProcessor.cpp/201:Request UcwaAutoDiscoveryRequest resulted in E_ConnectionError (E2-2-1). The retry counter is: 0
2014-11-06 16:40:26.445 Lync[2792:7a37000] WARNING TRANSPORT CCredentialManager.cpp/317:CCredentialManager::getSpecificCredential returning NULL credential for serviceId (4) type (1)!
2014-11-06 16:40:26.445 Lync[2792:7a37000] INFO TRANSPORT TransportUtilityFunctions.cpp/689:<SentRequest>
GET http://lyncdiscoverinternal.user.com/
Request Id: 0x1492958
HttpHeader:Accept application/vnd.microsoft.rtc.autodiscover+xml;v=1

</SentRequest>

2014-11-06 16:40:26.446 Lync[2792:7a37000] INFO UTILITIES CHttpStreamPool.cpp/399:Allocating stream 0x15c4e60 for url - http://lyncdiscoverinternal.domain.com/ with persistent id as 7
2014-11-06 16:40:26.446 Lync[2792:7a37000] VERBOSE TRANSPORT CHttpProxyHelper.cpp/435:CHttpProxyHelper::discoverProxy : No proxy found for url http://lyncdiscoverinternal.domain.com/. Sending over direct connection.
2014-11-06 16:40:26.446 Lync[2792:7a37000] INFO TRANSPORT CHttpStreamPool.cpp/546:Not setting TLS as the url(http://lyncdiscoverinternal.domain.com/) is not https
2014-11-06 16:40:26.449 Lync[2792:7a37000] ERROR TRANSPORT CHttpConnection.cpp/1029:Request Type = UcwaAutoDiscoveryRequest Error domain = kCFErrorDomainCFNetwork code = 0x2 ErrorDescription = The operation couldn‚Äôt be completed. (kCFErrorDomainCFNetwork error 2.) ErrorFailureReason = ErrorRecoverySuggestion =
2014-11-06 16:40:26.449 Lync[2792:7a37000] ERROR UTILITIES CHttpConnection.cpp/958:GetAddrInfo returned error 0x8
2014-11-06 16:40:26.450 Lync[2792:7a37000] INFO UTILITIES CHttpStreamPool.cpp/467:Releasing stream 0x1498cf0.
2014-11-06 16:40:26.450 Lync[2792:7a37000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x1498cf0.
2014-11-06 16:40:26.450 Lync[2792:7a37000] INFO TRANSPORT CHttpRequestProcessor.cpp/173:Received response of request(UcwaAutoDiscoveryRequest) with status = 0x22020001
2014-11-06 16:40:26.450 Lync[2792:7a37000] INFO TRANSPORT CHttpRequestProcessor.cpp/201:Request UcwaAutoDiscoveryRequest resulted in E_ConnectionError (E2-2-1). The retry counter is: 1
2014-11-06 16:40:26.450 Lync[2792:7a37000] INFO TRANSPORT CHttpRequestProcessor.cpp/266:Sending event to main thread for request(0x641c618)
2014-11-06 16:40:26.452 Lync[2792:3b81d9dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/822:Req. completed, Stopping timer.
2014-11-06 16:40:26.452 Lync[2792:3b81d9dc] ERROR APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/325:Request failed. Error - E_ConnectionError (E2-2-1)
2014-11-06 16:40:26.452 Lync[2792:3b81d9dc] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation completed with url = https://lyncdiscoverinternal.domain.com/?sipuri=sip:user@domaincom, userUrl = , status = E_ConnectionError (E2-2-1)
2014-11-06 16:40:26.452 Lync[2792:3b81d9dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/725:Response received for req. GET-UnAuthenticatedGet(0x641c618): E_ConnectionError (E2-2-1) (RemoteNetworkTemporaryError); Done with req.; Stopping resend timer
2014-11-06 16:40:26.452 Lync[2792:7a37000] ERROR TRANSPORT CHttpConnection.cpp/1029:Request Type = UcwaAutoDiscoveryRequest Error domain = kCFErrorDomainCFNetwork code = 0x2 ErrorDescription = The operation couldn‚Äôt be completed. (kCFErrorDomainCFNetwork error 2.) ErrorFailureReason = ErrorRecoverySuggestion =
2014-11-06 16:40:26.453 Lync[2792:7a37000] ERROR UTILITIES CHttpConnection.cpp/958:GetAddrInfo returned error 0x8

ASKER

Unsure why. I've been using testconnectivity tool from Microsoft and wanted to see how this was being handle or what's the process why I'm getting Error: Error Message: Operation failed because the network connection was not available..?

Testing remote connectivity for user user@domain.com to the Microsoft Lync server.
     Specified remote connectivity test(s) to Microsoft Lync server failed. See details below for specific failure reasons.

      Additional Details

Elapsed Time: 1521 ms.

      Test Steps

      Attempting to resolve the host name lync13.domain.com in DNS.
     The host name resolved successfully.

      Additional Details

IP addresses returned: xxx.xxx.129.xx
Elapsed Time: 230 ms.
      Testing TCP port 443 on host lync13.domain.com to ensure it's listening and open.
     The port was opened successfully.

      Additional Details

Elapsed Time: 161 ms.
      Testing the SSL certificate to make sure it's valid.
     The certificate passed all validation requirements.

      Additional Details

Elapsed Time: 270 ms.

      Test Steps

      The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server lync13.domain.com on port 443.
     The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate.

      Additional Details

Remote Certificate Subject: CN=*.domain.com, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)14, OU=GT60440101, SERIALNUMBER=<serial>, Issuer: CN=RapidSSL CA, O="GeoTrust, Inc.", C=US.
Elapsed Time: 225 ms.
      Validating the certificate name.
     The certificate name was validated successfully.

      Additional Details

The host name that was found, lync13.domain.com, is a wildcard certificate match for common name *.domain.com.
Elapsed Time: 0 ms.
      Testing the certificate date to confirm the certificate is valid.
     Date validation passed. The certificate hasn't expired.

      Additional Details

The certificate is valid. NotBefore = 9/14/2014 9:29:22 AM, NotAfter = 11/15/2018 12:14:04 PM
Elapsed Time: 0 ms.
      Testing remote connectivity for user user@domain.com to the Microsoft Lync server.
     Specified remote connectivity test(s) to Microsoft Lync server failed. See details below for specific failure reasons.
      Tell me more about this issue and how to resolve it

      Additional Details

Couldn't sign in. Error: Error Message: Operation failed because the network connection was not available..
Error Type: ConnectionFailureException.
.
Elapsed Time: 718 ms.

ASKER

Hello, The question more is how does the lync packets travel and authenticate lync from outside world? does it go to TMG and then lync front end? or does it go to TMG then Edge server then Lync front end? I'm unsure where this "Error Message: Operation failed because the network connection was not available.." is coming from.

Gajendra Rathod

For Lync Mobile : External traffic will go to TMG and then to Lync server for authentication. Here TMG acts as reverse proxy server. Hence external port 443 will change to internal port 4443.

Edge server is needed for external AV communication, federation and director.

ASKER

Thanks! 4443 and 8080 are redirected from TMG as 443 and 80. I have an open ticket from networking team to open the following ports:

Lync Server Front-End service (5060\ 5061 TLS)
Lync Server IM Conferencing service 5062
Lync Server Web Conferencing service 8057
Lync Server Web Conferencing Compatibility service 8058
Lync Server Audio/Video Conferencing service 5063

I'm following this link: https://www.experts-exchange.com/questions/28443088/Lync-2013-client-ports-requirements.html

ASKER

I opened all the ports and it didn't worked. I will try to delete edge from topology and try it again. It's getting really disappointing to setup lync :( I might move to just using hip chat

Gajendra Rathod

First verifying Lync mobile

Connect mobile to WiFi network and check if it is working or not. In case self-sign or domain signed certificate then please added certificate in Mobile.

For external mobile client add autodiscovery url manually

External:https://lync.contoso.com/Autodiscover/AutodiscoverService.svc/root
Internal:https://lync.contoso.local/Autodiscover/AutodiscoverService.svc/root

https://<ExtPoolFQDN>/Autodiscover/autodiscoverservice.svc/Root for external access
https://<IntPoolFQDN>/AutoDiscover/AutoDiscover.svc/Root for internal access

Ref:https://ucwa.lync.com/documentation/GettingStarted-RootURL

Please access https://lync.domain.com/WebTicket/WebTicketService.svc externally and check TMG logs to see what is error message in log file.

ASKER

Ok I think the problem was the SSL cert. So what I did this time was create a new one with all correct SAN, install CA cert to my home computer, and test again. This time I got new error:

[11/16/2014 6:19:21 PM] Cleared the log file
[11/16/2014 6:19:22 PM] [DEBUG] Logging test parameters:
[11/16/2014 6:19:22 PM] [DEBUG] SIP Uri: user@domain.com
[11/16/2014 6:19:22 PM] [DEBUG] User Name: user@ad.domain.com
[11/16/2014 6:19:22 PM] [DEBUG] Discovery Type: Automatic Discovery
[11/16/2014 6:19:22 PM] [DEBUG] Network access: NetworkAccessExternal
[11/16/2014 6:19:22 PM] [DEBUG] Selected client: ApplicationLyncMobile2013
[11/16/2014 6:19:22 PM] [SUBHEADING] Starting Lync server autodiscovery
[11/16/2014 6:19:22 PM] [INFO] Please wait; this test may take several minutes to complete...
[11/16/2014 6:19:22 PM] [SUBHEADING] Starting automatic discovery for secure (HTTPS) internal channel
[11/16/2014 6:19:22 PM] [SUMMARY] lyncdiscoverinternal.domain.com can't be resolved by the DNS server. Skipping internal discovery.
[11/16/2014 6:19:22 PM] [SUBHEADING] Starting automatic discovery for secure (HTTPS) external channel
[11/16/2014 6:19:22 PM] [DEBUG] Sending HTTP request to https://lyncdiscover.domain.com/?sipuri=user@domain.com
[11/16/2014 6:19:23 PM] [DEBUG] Cookie found in autodiscover response: StatusCode: 200, ReasonPhrase: 'OK', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
{
Connection: Keep-Alive
Pragma: no-cache
X-MS-Server-Fqdn: internalserver.ad.domain.com
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Date: Mon, 17 Nov 2014 02:18:59 GMT
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 1071
Content-Type: application/vnd.microsoft.rtc.autodiscover+xml; v=1
Expires: -1
}
[11/16/2014 6:19:23 PM] [DEBUG] Parsing the response for URL https://lyncdiscover.domain.com/?sipuri=user@domain.com. Full response: <?xml version="1.0" encoding="utf-8"?><AutodiscoverResponse xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" AccessLocation="External"><Root><Link token="Domain" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/domain?originalDomain=domain.com" /><Link token="User" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.com" /><Link token="Self" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root?originalDomain=domain.com" /><Link token="OAuth" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/oauth/user?originalDomain=domain.com" /><Link token="External/XFrame" href="https://lync13.domain.com/Autodiscover/XFrame/XFrame.html" /><Link token="Internal/XFrame" href="https://internalserver.ad.domain.com/Autodiscover/XFrame/XFrame.html" /><Link token="XFrame" href="https://lync13.domain.com/Autodiscover/XFrame/XFrame.html" /></Root></AutodiscoverResponse>
[11/16/2014 6:19:23 PM] [DEBUG] Autodiscover URL https://lyncdiscover.domain.com/?sipuri=user@domain.com redirected to https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.com
[11/16/2014 6:19:23 PM] [DEBUG] Sending HTTP request to https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.com?sipuri=user@domain.com
[11/16/2014 6:19:23 PM] [DEBUG] Cookie found in autodiscover response: StatusCode: 401, ReasonPhrase: 'Unauthorized', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
{
Connection: Keep-Alive
X-MS-WebTicketURL: https://lync13.domain.com/WebTicket/WebTicketService.svc
X-MS-WebTicketSupported: cwt,saml
X-MS-Server-Fqdn: internalserver.ad.domain.com
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Date: Mon, 17 Nov 2014 02:18:59 GMT
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Content-Length: 1293
Content-Type: text/html
}
[11/16/2014 6:19:23 PM] [DEBUG] Authorization required for https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.com?sipuri=user@domain.com
[11/16/2014 6:19:23 PM] [DEBUG] Obtaining WebTicket from https://lync13.domain.com/WebTicket/WebTicketService.svc
[11/16/2014 6:19:23 PM] [DEBUG] On-premises WebTicket server: https://lync13.domain.com/WebTicket/WebTicketService.svc/Auth
[11/16/2014 6:19:24 PM] [DEBUG] AcquireTicketAsync succeeded for https://lync13.domain.com/WebTicket/WebTicketService.svc/Auth
[11/16/2014 6:19:24 PM] [DEBUG] WebTicket: <saml:Assertion MajorVersion="1" MinorVersion="1" AssertionID="SamlSecurityToken-0919d724-8946-4d71-8438-31dd0a60a264" Issuer="https://internalserver.ad.domain.com:4443/c435ffee-01f2-5492-b345-31081d0382e9" IssueInstant="2014-11-17T02:18:59.980Z" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"><saml:Conditions NotBefore="2014-11-17T02:18:59.979Z" NotOnOrAfter="2014-11-17T10:03:31.979Z"><saml:AudienceRestrictionCondition><saml:Audience>https://lync13.domain.com/</saml:Audience></saml:AudienceRestrictionCondition></saml:Conditions><saml:AuthenticationStatement AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:unspecified" AuthenticationInstant="2014-11-17T02:18:59.980Z"><saml:Subject><saml:NameIdentifier Format="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/uri">sip:user@ad.domain.com</saml:NameIdentifier><saml:SubjectConfirmation><saml:ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:holder-of-key</saml:ConfirmationMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><e:EncryptedKey xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#kw-aes256"></e:EncryptionMethod><KeyInfo><KeyName>c435ffee-01f2-5492-b345-31081d0382e9:8d1d023d555c388</KeyName></KeyInfo><e:CipherData><e:CipherValue>RW24CDqAq3orAgi9J0rAl75itZ3uY9AyfcSdogvVTo0faO2XWDKDQA==</e:CipherValue></e:CipherData></e:EncryptedKey></KeyInfo></saml:SubjectConfirmation></saml:Subject></saml:AuthenticationStatement><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></SignatureMethod><Reference URI="#SamlSecurityToken-0919d724-8946-4d71-8438-31dd0a60a264"><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>r93NfGdW7K6spKWEjOKs1C6puDUqemm9gaKxMaFIyZg=</DigestValue></Reference></SignedInfo><SignatureValue>YjXjZuwvf74PZq8aLIPAxxOYFbkzuVIDUivto+BhIYg3MsLMBArgUH2PjZgEeUfMFGkAWQmB6bOhqLiA5FyIne2/vk4TFtiYo8IIcMwSeUUX72dT3UTa1HWXYSqoqOclV68SKxF5bUyl6fsp3+pSHnIJuxDNHTX9jL/qqmDBn9Jk9LPttQi39G/sB1F30ChYHpsptBPEMmoMmlyop8FRIe3sfiS2YpCwmWKRQSoRM2uNkVD51RKkRVxVLLE2nS7Q+NeSvUK/qJDy3zur8oPqcqd7Ug7U/laSCmhIFBZc7aDA5u2LYplHGI05xwbKJI/3OuJEf5h+hffVzyD9nscmbA==</SignatureValue><KeyInfo><o:SecurityTokenReference xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><o:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1">rBaCKQfOuFrNJv+EOjIwcT5+whs=</o:KeyIdentifier></o:SecurityTokenReference></KeyInfo></Signature></saml:Assertion>
[11/16/2014 6:19:24 PM] [DEBUG] Sending HTTP request to https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.com?sipuri=user@domain.com
[11/16/2014 6:19:24 PM] [DEBUG] Cookie found in autodiscover response: StatusCode: 200, ReasonPhrase: 'OK', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
{
Connection: Keep-Alive
Pragma: no-cache
X-MS-Server-Fqdn: internalserver.ad.domain.com
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Date: Mon, 17 Nov 2014 02:19:00 GMT
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 2179
Content-Type: application/vnd.microsoft.rtc.autodiscover+xml; v=1
Expires: -1
}
[11/16/2014 6:19:24 PM] [DEBUG] Parsing the response for URL https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.com?sipuri=user@domain.com. Full response: <?xml version="1.0" encoding="utf-8"?><AutodiscoverResponse xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" AccessLocation="External"><User><SipServerInternalAccess fqdn="internalserver.ad.domain.com" port="5061" /><SipClientInternalAccess fqdn="internalserver.ad.domain.com" port="5061" /><SipServerExternalAccess fqdn="sip.domain.com" port="5061" /><SipClientExternalAccess fqdn="sip.domain.com" port="443" /><Link token="Internal/Autodiscover" href="https://internalserver.ad.domain.com/Autodiscover/AutodiscoverService.svc/root" /><Link token="Internal/AuthBroker" href="https://internalserver.ad.domain.com/Reach/sip.svc" /><Link token="Internal/WebScheduler" href="https://internalserver.ad.domain.com/Scheduler" /><Link token="Internal/CertProvisioning" href="https://internalserver.ad.domain.com/CertProv/CertProvisioningService.svc" /><Link token="External/Autodiscover" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root" /><Link token="External/AuthBroker" href="https://lync13.domain.com/Reach/sip.svc" /><Link token="External/WebScheduler" href="https://lync13.domain.com/Scheduler" /><Link token="External/CertProvisioning" href="https://lync13.domain.com/CertProv/CertProvisioningService.svc" /><Link token="Internal/Mcx" href="https://lync13.domain.com/Mcx/McxService.svc" /><Link token="External/Mcx" href="https://lync13.domain.com/Mcx/McxService.svc" /><Link token="Ucwa" href="https://lync13.domain.com/ucwa/v1/applications" /><Link token="Internal/Ucwa" href="https://internalserver.ad.domain.com/ucwa/v1/applications" /><Link token="External/Ucwa" href="https://lync13.domain.com/ucwa/v1/applications" /><Link token="External/XFrame" href="https://lync13.domain.com/Autodiscover/XFrame/XFrame.html" /><Link token="Internal/XFrame" href="https://internalserver.ad.domain.com/Autodiscover/XFrame/XFrame.html" /><Link token="XFrame" href="https://lync13.domain.com/Autodiscover/XFrame/XFrame.html" /><Link token="Self" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user" /></User></AutodiscoverResponse>
[11/16/2014 6:19:24 PM] [INFO] Server discovery has completed for https://lyncdiscover.domain.com/.
[11/16/2014 6:19:24 PM] [DEBUG] Autodiscover full response for URL https://lyncdiscover.domain.com/ is <?xml version="1.0" encoding="utf-8"?><AutodiscoverResponse xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" AccessLocation="External"><User><SipServerInternalAccess fqdn="internalserver.ad.domain.com" port="5061" /><SipClientInternalAccess fqdn="internalserver.ad.domain.com" port="5061" /><SipServerExternalAccess fqdn="sip.domain.com" port="5061" /><SipClientExternalAccess fqdn="sip.domain.com" port="443" /><Link token="Internal/Autodiscover" href="https://internalserver.ad.domain.com/Autodiscover/AutodiscoverService.svc/root" /><Link token="Internal/AuthBroker" href="https://internalserver.ad.domain.com/Reach/sip.svc" /><Link token="Internal/WebScheduler" href="https://internalserver.ad.domain.com/Scheduler" /><Link token="Internal/CertProvisioning" href="https://internalserver.ad.domain.com/CertProv/CertProvisioningService.svc" /><Link token="External/Autodiscover" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root" /><Link token="External/AuthBroker" href="https://lync13.domain.com/Reach/sip.svc" /><Link token="External/WebScheduler" href="https://lync13.domain.com/Scheduler" /><Link token="External/CertProvisioning" href="https://lync13.domain.com/CertProv/CertProvisioningService.svc" /><Link token="Internal/Mcx" href="https://lync13.domain.com/Mcx/McxService.svc" /><Link token="External/Mcx" href="https://lync13.domain.com/Mcx/McxService.svc" /><Link token="Ucwa" href="https://lync13.domain.com/ucwa/v1/applications" /><Link token="Internal/Ucwa" href="https://internalserver.ad.domain.com/ucwa/v1/applications" /><Link token="External/Ucwa" href="https://lync13.domain.com/ucwa/v1/applications" /><Link token="External/XFrame" href="https://lync13.domain.com/Autodiscover/XFrame/XFrame.html" /><Link token="Internal/XFrame" href="https://internalserver.ad.domain.com/Autodiscover/XFrame/XFrame.html" /><Link token="XFrame" href="https://lync13.domain.com/Autodiscover/XFrame/XFrame.html" /><Link token="Self" href="https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user" /></User></AutodiscoverResponse>
[11/16/2014 6:19:24 PM] [DEBUG] SendRequest failed for https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.com?sipuri=user@domain.com
[11/16/2014 6:19:24 PM] [INFO] Automatic discovery results for https://lyncdiscover.domain.com/
[11/16/2014 6:19:24 PM] [INFO] Access Location : External
[11/16/2014 6:19:24 PM] [INFO] SIP Server Internal Access : internalserver.ad.domain.com
[11/16/2014 6:19:24 PM] [INFO] SIP Server External Access : sip.domain.com
[11/16/2014 6:19:24 PM] [INFO] SIP Client Internal Access : internalserver.ad.domain.com
[11/16/2014 6:19:24 PM] [INFO] SIP Client External Access : sip.domain.com
[11/16/2014 6:19:24 PM] [INFO] Internal Auth broker service : https://internalserver.ad.domain.com/Reach/sip.svc
[11/16/2014 6:19:24 PM] [INFO] External Auth broker service : https://lync13.domain.com/Reach/sip.svc
[11/16/2014 6:19:24 PM] [INFO] Internal Auto discover service : https://internalserver.ad.domain.com/Autodiscover/AutodiscoverService.svc/root
[11/16/2014 6:19:24 PM] [INFO] External Auto discover service : https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root
[11/16/2014 6:19:24 PM] [INFO] Internal MCX service : https://lync13.domain.com/Mcx/McxService.svc
[11/16/2014 6:19:24 PM] [INFO] External MCX service : https://lync13.domain.com/Mcx/McxService.svc
[11/16/2014 6:19:24 PM] [INFO] Internal UCWA service : https://internalserver.ad.domain.com/ucwa/v1/applications
[11/16/2014 6:19:24 PM] [INFO] External UCWA service : https://lync13.domain.com/ucwa/v1/applications
[11/16/2014 6:19:24 PM] [INFO] Internal Webscheduler service : https://internalserver.ad.domain.com/Scheduler
[11/16/2014 6:19:24 PM] [INFO] External Webscheduler service : https://lync13.domain.com/Scheduler
[11/16/2014 6:19:24 PM] [INFO] Total server discovery time: 1.4 seconds
[11/16/2014 6:19:24 PM] [SUMMARY_SUCCESS] Server discovery succeeded for secure (HTTPS) external channel against URL https://lyncdiscover.domain.com/
[11/16/2014 6:19:24 PM] [SUBHEADING] Starting automatic discovery for unsecure (HTTP) external channel
[11/16/2014 6:19:24 PM] [DEBUG] Sending HTTP request to http://lyncdiscover.domain.com/?sipuri=user@domain.com
[11/16/2014 6:19:24 PM] [DEBUG] Cookie found in autodiscover response: StatusCode: 403, ReasonPhrase: 'Forbidden ( The page must be viewed over a secure channel (Secure Sockets Layer (SSL)). Contact the server administrator. )', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
{
Connection: Keep-Alive
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 2052
Content-Type: text/html
}
[11/16/2014 6:19:24 PM] [DEBUG] Autodiscover: SendRequest(): the URL http://lyncdiscover.domain.com/?sipuri=user@domain.com couldn't be connected. Complete HTTP headers:\r\n Connection: Keep-Alive
Pragma: no-cache
Cache-Control: no-cache

[11/16/2014 6:19:24 PM] [CRITICAL] Couldn't connect to URL http://lyncdiscover.domain.com/?sipuri=user@domain.com (HTTP status code Forbidden)
[11/16/2014 6:19:24 PM]

[11/16/2014 6:19:24 PM] [DEBUG] System.Exception: Couldn't connect to URL http://lyncdiscover.domain.com/?sipuri=user@domain.com (HTTP status code Forbidden)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.TerminateAD(String mesg)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<SendRequest>d__d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<StartDiscoveryJourney>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at LyncConnectivityAnalyzerCore.Utilities.<RetrieveUserLocation>d__3e.MoveNext()
[11/16/2014 6:19:24 PM] [SUMMARY_ERROR] Server discovery failed for unsecured external channel against http://lyncdiscover.domain.com/
[11/16/2014 6:19:24 PM] [DEBUG] None, AutoInternalDNSFail, AutoInternalSecureD, AutoInternalUnsecureD, AutoExternalUnsecureD, ManualDNSFail, ManualSecureD, ManualUnsecureD, AuthBrokerInternalLMXCheckGET, AuthBrokerInternalLMXCheckPOST, AuthBrokerExternalLMXCheckGET, AuthBrokerExternalLMXCheckPOST, MobilityMCXInternalLMXCheckGET, MobilityMCXInternalLMXCheckPOST, MobilityMCXExternalLMXCheckGET, MobilityMCXExternalLMXCheckPOST, LMXSIPServerInternalDNS, LMXSIPServerExternalDNS, MobilityUCWAInternalCheckPOST, MobilityUCWAExternalCheckPOST
[11/16/2014 6:19:24 PM] [SUMMARY]
[11/16/2014 6:19:24 PM] [MAINHEADING] Starting the requirement tests for Lync Mobile 2013 App
[11/16/2014 6:19:24 PM] [INFO] Please wait; this test may take several minutes to complete...
[11/16/2014 6:19:24 PM] [INFO] Testing the app requirements using the following discovery response:
[11/16/2014 6:19:24 PM] [INFO] Access Location : External
[11/16/2014 6:19:24 PM] [INFO] SIP Server Internal Access : internalserver.ad.domain.com
[11/16/2014 6:19:24 PM] [INFO] SIP Server External Access : sip.domain.com
[11/16/2014 6:19:24 PM] [INFO] SIP Client Internal Access : internalserver.ad.domain.com
[11/16/2014 6:19:24 PM] [INFO] SIP Client External Access : sip.domain.com
[11/16/2014 6:19:24 PM] [INFO] Internal Auth broker service : https://internalserver.ad.domain.com/Reach/sip.svc
[11/16/2014 6:19:24 PM] [INFO] External Auth broker service : https://lync13.domain.com/Reach/sip.svc
[11/16/2014 6:19:24 PM] [INFO] Internal Auto discover service : https://internalserver.ad.domain.com/Autodiscover/AutodiscoverService.svc/root
[11/16/2014 6:19:24 PM] [INFO] External Auto discover service : https://lync13.domain.com/Autodiscover/AutodiscoverService.svc/root
[11/16/2014 6:19:24 PM] [INFO] Internal MCX service : https://lync13.domain.com/Mcx/McxService.svc
[11/16/2014 6:19:24 PM] [INFO] External MCX service : https://lync13.domain.com/Mcx/McxService.svc
[11/16/2014 6:19:24 PM] [INFO] Internal UCWA service : https://internalserver.ad.domain.com/ucwa/v1/applications
[11/16/2014 6:19:24 PM] [INFO] External UCWA service : https://lync13.domain.com/ucwa/v1/applications
[11/16/2014 6:19:24 PM] [INFO] Internal Webscheduler service : https://internalserver.ad.domain.com/Scheduler
[11/16/2014 6:19:24 PM] [INFO] External Webscheduler service : https://lync13.domain.com/Scheduler
[11/16/2014 6:19:24 PM] [SUBHEADING] Starting tests for Mobility (UCWA) service
[11/16/2014 6:19:24 PM] [DEBUG] UCWA user agent string: <input xmlns="http://schemas.microsoft.com/rtc/2012/03/ucwa"><property name="culture">en-US</property><property name="endpointId">44:D8:84:3C:68:68</property><property name="type">Phone</property><property name="userAgent">LyncConnectivityAnalyzer/5.0.8308.582 (Windows OS 6.0)</property></input>
[11/16/2014 6:19:24 PM] [INFO] Verifying external Ucwa service: https://lync13.domain.com/ucwa/v1/applications
[11/16/2014 6:19:25 PM] [DEBUG] On-premises WebTicket server: https://lync13.domain.com/WebTicket/WebTicketService.svc/Auth
[11/16/2014 6:19:25 PM] [DEBUG] AcquireTicketAsync succeeded for https://lync13.domain.com/WebTicket/WebTicketService.svc/Auth
[11/16/2014 6:19:25 PM] [DEBUG] WebTicket: <saml:Assertion MajorVersion="1" MinorVersion="1" AssertionID="SamlSecurityToken-e62c092c-8007-4c0d-be01-d26750400894" Issuer="https://internalserver.ad.domain.com:4443/c435ffee-01f2-5492-b345-31081d0382e9" IssueInstant="2014-11-17T02:19:01.931Z" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"><saml:Conditions NotBefore="2014-11-17T02:19:01.931Z" NotOnOrAfter="2014-11-17T10:12:27.931Z"><saml:AudienceRestrictionCondition><saml:Audience>https://lync13.domain.com/</saml:Audience></saml:AudienceRestrictionCondition></saml:Conditions><saml:AuthenticationStatement AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:unspecified" AuthenticationInstant="2014-11-17T02:19:01.932Z"><saml:Subject><saml:NameIdentifier Format="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/uri">sip:user@ad.domain.com</saml:NameIdentifier><saml:SubjectConfirmation><saml:ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:holder-of-key</saml:ConfirmationMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><e:EncryptedKey xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#kw-aes256"></e:EncryptionMethod><KeyInfo><KeyName>c435ffee-01f2-5492-b345-31081d0382e9:8d1d023d555c388</KeyName></KeyInfo><e:CipherData><e:CipherValue>6QSJgMZXhs0HYL82OP9kdmNcdCiuOvxFsz8D1T2OV2xpySk3JrUfgg==</e:CipherValue></e:CipherData></e:EncryptedKey></KeyInfo></saml:SubjectConfirmation></saml:Subject></saml:AuthenticationStatement><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></SignatureMethod><Reference URI="#SamlSecurityToken-e62c092c-8007-4c0d-be01-d26750400894"><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>QizJYLlaS5gIXfBOsx82NBXqyufS554K+6TO61hEOPg=</DigestValue></Reference></SignedInfo><SignatureValue>LIEFxvm/vhuin+ngN6eo8S4bdxQfoC74T9ydLKKdQyptQeY/07wlSx4KPYr98OJkuPM8pfb9S2WT9qNVWU1Um8C0km6RwirST8oiZUXce8goWIDCZV000L/rjCIoquNpB7v9nZP1dIud51AMI+2mipWMohbOUv1oW+n52SkjIkPFc0a85c+nEHROXiTrzCg2YuZ/+jdr0zLziIhCT88VtmUyNh0M4aWN5sIEFm6XEKAF6WLV20gOHP2DXd9xq7cokAUiLEEXL7047mlqNlXqxZvUO88peZMb8hzjsobXUup4UrtlE18F5o2KIbqo/O8x/3B59Z1u4xR1UOsJs/4UYw==</SignatureValue><KeyInfo><o:SecurityTokenReference xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><o:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1">rBaCKQfOuFrNJv+EOjIwcT5+whs=</o:KeyIdentifier></o:SecurityTokenReference></KeyInfo></Signature></saml:Assertion>
[11/16/2014 6:19:26 PM] [SUCCESS] Successfully connected to UCWA service using POST.
[11/16/2014 6:19:26 PM] [SUMMARY] Completed tests for Mobility (UCWA) service
[11/16/2014 6:19:26 PM] [DEBUG] None, AutoInternalDNSFail, AutoInternalSecureD, AutoInternalUnsecureD, AutoExternalUnsecureD, ManualDNSFail, ManualSecureD, ManualUnsecureD, AuthBrokerInternalLMXCheckGET, AuthBrokerInternalLMXCheckPOST, AuthBrokerExternalLMXCheckGET, AuthBrokerExternalLMXCheckPOST, MobilityMCXInternalLMXCheckGET, MobilityMCXInternalLMXCheckPOST, MobilityMCXExternalLMXCheckGET, MobilityMCXExternalLMXCheckPOST, LMXSIPServerInternalDNS, LMXSIPServerExternalDNS, MobilityUCWAInternalCheckPOST
[11/16/2014 6:19:26 PM] [SUMMARY]
[11/16/2014 6:19:26 PM] [SUMMARY_SUCCESS]
Your deployment meets the minimum requirements for Lync Mobile 2013 App.
domain

ASKER CERTIFIED SOLUTION

Gajendra Rathod

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

Hello! I managed to make the lync connectivity analyzer all green. I followed this website: http://salahuddinkhatri.wordpress.com/2012/02/21/lync-mobility-step-by-step-in-split-domain-name-part-ii/ I'm only having hard time logging in from external to lync. Though I'm ok connecting to lync if I'm connected to the VPN. Event viewer from my desktop is not showing any errors though and TMG is showing all are going through.

ASKER

I don't get it. Seems like I configured everything right and I followed what your website say. I'm able to login internally ok but externally its still not working.

Internally I login using format below:
username: user@ad.domain.com

Externally, I use the format below:
username: user@domain.com

lync server is configure on ad.domain.com and nothing about domain.com. When I try to login from my "desktop" at home that has company trusted cert, I'm getting the following:

Lync was unable to locate the login server.  No DNS SRV records exist for domain ad.domain.com, so Lync was unable to login.
 
 Resolution:
 Please double-check the server name to make sure that it is typed correctly.  If it is correct, the network administrator will either need to use manual configuration to specify the login server's fully-qualified domain name (FQDN), or add DNS SRV records for the ad.domain.com domain in order to allow automatic client configuration.  The DNS SRV records _sipinternaltls._tcp.ad.domain.com, _sipinternal._tcp.ad.domain.com and/or _sip._tls.ad.domain.com may need to be configured if automatic

Open in new window

Microsoft Lync connectivity analyzer says I meet the minimum requirement for lync mobile 2013 APP... Unsure what to do next...

ASKER

oh and lync client options, I setup the advanced connection settings to manual configuration:

Internal server name: lync13.domain.com
external server name: lync13.domain.com

Both point to the same server..

ASKER

I finally was able to fix it by following this link. http://blog.ucitsimple.com/2011/10/04/adding-new-sip-domains-to-lync/

What happen was my internal domain is not accessible from outside domain and creating conflict with the way I access Lync server. So what I did is I just added another domain in Lync pointing to external domain. Managed to make it work finally after I did that