Multiple Mobile Clients

Hi to all.
I want to use multiple mobile clients (up to 50) to send data (texts/numbers) to the same server wirelessly.
What is the best way to go? Bluetooth or WiFi? Is there any limitation in any of the protocols? Which one will quarantee that the data of all the clients will be received at the server?
Thanks, appreciate your concern...
Std.

The thing that causes the "-" half-slected buttons on the Account Creation tab is the absence of a value for the (new in 10.5?) attribute in the com.apple.MCX plist file. You can find this by using the Inspector in Workgroup Manager, getting the user account and editing the MCXSettings attrbute:
cachedaccounts.WarnOnCreate.allowNever
otherwise known as "Show Mobile Account Dialog's Never Option" if you look in the Details tab of Workgroup Manager,
otherwise known as "Show "Don't ask me again" checkbox" if you look in the Account Creation tab of Workgroup Manager.
Pet peeve -- three different terms for the same thing?

Similar Messages

AnyConnect Secure Mobility Client Multiple Profiles

Hi,
I have multiple clients that use multiple versions of VPNs including Cisco, Sonicwall and others.
I have a client with the (older) "Cisco Systems VPN Client". Then I got a new client with instructions to install the "Cisco AnyConnect Secure Mobility Client". Without warning, the installation uninstalled what I now believe was an older version of this same VPN client - but the name has changed, the installation directories have changed, etc.
OK, but the new client wiped out the connection parameters to the old client.
I've tried to read and understand the other discussion entries about storing multiple "profiles" (i.e. vpn connections). Other VPN clients have a menu option or a simple way to add a connection, but it seems more challenging to do this with the AnyConnect client. However, I read, and tried to set up, multiple profiles. From the other discussions, I followed these steps:
1. Located the (hidden in Windows 7) following directory:
     %ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile
2. Created two xml files, "Client1.xml" and "Client2.xml" in this directory. containing
<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/">
<ServerList>
    <HostEntry>
      <HostName>Client1HostName</HostName>
      <HostAddress>Client1HostaddressDNS</HostAddress>
      <PrimaryProtocol>IPsec</PrimaryProtocol>
    </HostEntry>
</ServerList>
</AnyConnectProfile>
{And a similar file for Client2}
There was another discussion thread that had more lines in the xml file, which I also tried. Again, I created 2 separate xml files, each one with the respective client's parameters.
<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/">
<ServerList>
     <HostEntry>
          <User>navadmin</User>
          <SecondUser></SecondUser>
          <ClientCertificateThumbprint></ClientCertificateThumbprint>
          <ServerCertificateThumbprint></ServerCertificateThumbprint>
          <HostName>Client1</HostName>
          <HostAddress>Client1DNS</HostAddress>
          <Domain></Domain>
          <Group>ssl_url</Group>
          <ProxyHost></ProxyHost>
          <ProxyPort></ProxyPort>
          <SDITokenType>none</SDITokenType>
          <ControllablePreferences>
          <LocalLanAccess>true</LocalLanAccess></ControllablePreferences>
     </HostEntry>
</ServerList>
</AnyConnectProfile>
I then quit the AnyConnect Secure Mobility Client and restarted, hoping that I would get a dropdown list that contained "Client1" and "Client2". This did not happen.
Prior to trying this, I did NOT delete the "Preferences.xml" file in the following directory:
C:\users\<myusername>\AppData\Local\Cisco\Cisco AnyConnect Secure Mobility Client
This is where the Anyconnect client stored the connection info when I manually input it into the GUI.
So, my questions are:
1.     Do I need to delete the preferences.xml in order for the profiles in the other directory to be read and displayed in the client dropdown?
2.     Are there naming conventions for the profile xml files that I'm not following by calling them "Client1.xml" and "Client2.xml"?
3.     Any other ideas as to why this isn't working?
4.     There are also references to a "profile editor", but the discussion threads aren't clear whether this utility is installed when you just install the client software, or if you have to have some sort of "administrator package" installed. If so, is this package available for download, or do you need to purchase a full VPN client license in order to have access to this utility?
Thanks,
Ron

The Client1.xml and Client2.xml files that you created have correct content but wrong names. You only need 1 file called Profile.xml and inside you can then add multiple hosts by adding the nodes.
So your Profile.xml would look like this -
<?xml version="1.0" encoding="UTF-8"?>
http://schemas.xmlsoap.org/encoding/">
      Client1HostName
      Client1HostaddressDNS
      IPsec
      Client2HostName
      Client2HostaddressDNS
      IPsec
I hope this helps.
Ratan.

AnyConnect Secure Mobility Client v3.1.04066 "The VPN client driver encountered an error"

Hello, I am a software engineer and have been trying to connect to my client's VPN using the AnyConnect Secure Mobility Client (version 3.1.04066) and keep receiving the error "The VPN client driver encountered an error. Please try again or restart your system."
I am on a Windows 7 system with an intel i7-2670QM cpu. My computer model is an HP Pavilion dv7.
I have tried uninstalling the software, re-installing it. I've tried restarting my system multiple times through the process. I've checked the registry and made sure the name was setup correctly. I have checked and made sure that the correct services are not enabled. I have also tried what was suggested on the support page and checked the integrity of catroot2 as well as renaming it and regenerating the folder. None of these have been able to fix my problem.
For information, this is the message history when I try to connect:
[12/8/2014 8:55:49 AM] Ready to connect.
[12/8/2014 9:27:19 AM] Contacting vpn.[hostaddressremoved].com.
[12/8/2014 9:27:22 AM] Please enter your username and password.
[12/8/2014 9:27:29 AM] User credentials entered.
[12/8/2014 9:27:30 AM] Please respond to banner.
[12/8/2014 9:27:31 AM] User accepted banner.
[12/8/2014 9:27:31 AM] Establishing VPN session...
[12/8/2014 9:27:32 AM] Checking for profile updates...
[12/8/2014 9:27:32 AM] Checking for product updates...
[12/8/2014 9:27:32 AM] Checking for customization updates...
[12/8/2014 9:27:32 AM] Performing any required updates...
[12/8/2014 9:27:32 AM] Establishing VPN session...
[12/8/2014 9:27:32 AM] Establishing VPN - Initiating connection...
[12/8/2014 9:27:33 AM] Establishing VPN - Examining system...
[12/8/2014 9:27:33 AM] Establishing VPN - Activating VPN adapter...
[12/8/2014 9:27:33 AM] Establishing VPN - Attempting to repair VPN adapter...
[12/8/2014 9:27:33 AM] Disconnect in progress, please wait...
[12/8/2014 9:28:22 AM] Connection attempt has failed.
[12/8/2014 9:28:24 AM] Ready to connect.
I have tried every kind of search I can think of to find any other solutions to try, and I cannot find anything else. Does anyone have any other recommendations of what to try in order to be able to connect to my client?
-TheJayDude

Yes, I am sorry to say that several people have seen the same issue. It seems like the issue is specific to Yosemite and Anyconnect. My very technical staff and I have tried many things. The default route is missing and the file /var/run/resolv.conf is also missing which means that both the route and DNS server are messed up. We re-added the default route manually which allows us to ping the servers and even access them via the IP address
Run the command below before starting the VPN to get the default route
netstat -nr | grep default
Then run the following to re-add the default route.
route add default xxx.xxx.xxx.xxx
BUT there is no way that I can find to fix the DNS entry.
We tried re-adding the DNS entries in the /var/run/resolv.conf and then restarting the DNS service
$ sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.discoveryd.plist
Password:
$ sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.discoveryd.plist
BUT THIS DOES NOT WORK!
If anyone can help us solve the DNS issue, at least we have a work-around for our technical people until Cisco and/or Apple can resolve it.
Here is a link to the same issue at Cisco.
https://supportforums.cisco.com/discussion/12334071/cisco-anyconnect-secure-mobi lity-client-os-x-yosemite-vpn-not-working-if-mac

Which network ip address will my mobile clients receive

Hi folks
I have an AP in my production site which has a vlan configured as native vlan and the ssid related to this vlan is being used for communication with other wireless bridges. The BVI interface of this AP is ofcourse having an IP of the native vlan.
Now I have a requirement of configuring this AP with mobile clients and these mobile clients should get IP addresses from the DHCP server. The IP address that these mobile clients should recieve is from a network which is different from that of the native vlan.
I know that I can define this new vlan in the APs as wellas everywhere in the network aswell as create a SSID binded to this VLAN, But I had this doubt in my mind if the client will really take the IP of the VLAN which I want or it will try to get an IP address of the VLAN to which the BVI interface belongs i.e. the native vlan.
Note:- The Client will be associated to the AP through the desired VLAN and not through the SSID of the native vlan.
I wanted to have your expert opinion before rolling this out in production.
Thanks

Given that you are using one DHCP server with multiple scopes
AND
Given that your multiple VLANs & SSIDs trunk (802.1q) to a router to different subnets (each of which would need an "IP Helper" on the client-side interface)
Then the DHCP server should recognize which scope to deliver based on the VLAN that the request is received from.
Good Luck
Scott

7.1 Trial: Error during installation of Mindb and Mobile Client

We are using a barcode scanner running on Windows Mobile 5.0. When I use the SP03 trial to install the mobile client, I get the following information for every application besides the CreMe (the error is shown on the barcode scanner):
The program you have installed may not display properly because it was designed for a previous version of Windows Mobile Software.
How is this possible and what does this mean? These applications state that they are supported on Windows Mobile 5.0.
I continue anyway but when I try to start the Mobile Client I get a pop-up stating Creme is starting, then running, then nothing. I read it can take up to 2 minutes to load the client so I gave it 10 minutes with no result.
I have uninstalled and reinstalled multiple times (everything, Creme, mindb, mobile client) and it doesn't work. I am using Active Sync 4.5.
Any help is greatly appreciated.

Thanks for the quick reply. It is a Creme error. I tried the licensed version from SAP first, then tried the 30 day copy and neither works. They both have the same errors.
See the jscpout.txt
NSIcom Ltd., CrEme(tm)
CrE-ME J2ME(tm)
CrE-ME V4.12 B142.190307 19-March-2007
MemoryLimit=64000Kb
EBCI(TM) Interpreter V1.00,
Copyright 1998-2002 by Bytecodes, Inc.
2008-05-15 09:20:11 ... Thread: com.sap.tc.mobile.cfs.startup.pda.Startup Error: Error creating initial tables -->
2008-05-15 09:20:11 ... Thread: com.sap.tc.mobile.cfs.startup.pda.Startup Error: Error dropping initial tables -->
2008-05-15 09:20:14 ... Thread: com.sap.tc.mobile.cfs.startup.pda.Startup Error: Insert sql executation failed -->
2008-05-15 09:20:14 ... Thread: com.sap.tc.mobile.cfs.startup.pda.Startup Error: Error storing model -->
2008-05-15 09:20:15 ... Thread: com.sap.tc.mobile.cfs.startup.pda.Startup Fatal: Cannot initialize framework -->
java.lang.IllegalArgumentException: Error storing model
     at com.sap.tc.mobile.cfs.meta.conthandler.MetaDeployTimeUtils.storeModel()
     at com.sap.tc.mobile.cfs.meta.conthandler.MetaDeployTimeUtils.deploySystemMBOs()
     at com.sap.tc.mobile.cfs.init.FrameworkInitializer.init()
     at com.sap.tc.mobile.cfs.startup.pda.Startup.main()
Error starting the framework
java.lang.reflect.InvocationTargetException: java.lang.IllegalStateException: Cannot initialize framework
     at com.sap.tc.mobile.cfs.init.FrameworkInitializer.init()
     at com.sap.tc.mobile.cfs.startup.pda.Startup.main()
CrEme jsPexit() called with status=1
Sorry for the bad formatting. Any help is appreciated!

Cisco Anyconnect Secure Mobility Client Fails to Install

I've followed and contributed to posts about this problem here: https://supportforums.cisco.com/thread/2057631
But this problem isn't only isolated to 2.5 client, so I thought a new discussion might attract a bit more attention and feedback.
For 5 or 6 users when I try to install the client as new as version 3.0.11042 (any version, not just the newest) I get a failure:
CustomAction VACon64_Install returned actual error code -536870348 (note this may not be 100% accurate if translation happened inside sandbox)
Error 1722. There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action VACon64_Install, location: C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\VACon64.exe, command: -install "C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\\vpnva64.inf" VPNVA
MSI (s) (44:94) [16:15:05:629]: Product: Cisco AnyConnect VPN Client -- Error 1722. There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action VACon64_Install, location: C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\VACon64.exe, command: -install "C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\\vpnva64.inf" VPNVA
Before it rolls back, I try to run the command manually which appears to do something, but doesn't fix the problem.
This is the step that is trying to install the service VPNVA, but it fails.
I have cleaned up all the files I know how (which registry entries might I also try?) and rebooted several times, but no luck.
The documented Cisco solution, and what i've been telling frustrated users one after another is "re-image your machine"
Does someone have an idea of what else I can try?

Thank you.
The workaround works. Yes, using Windows 8.1.
An HOW TO on how to set this for everyone who is not that computer savvy...
1. Go to the Start Screen of Windows 8.1 and look for the Cisco Anyconnect Secure Mobility Client icon (or just type it on the Start Screen).
2. Right click the icon and select 'Open file location'.
3. Right click the Cisco Anyconnect Secure Mobility Client (Shortcut) and select 'Properties'
4. Select the 'Compatibility' Tab.
5. Check the box 'Run this program in compatibility mode for:' and select 'Windows 8' in the drop down.
6. Click 'OK' to close the window.
7. Log off and log on again (or reboot the computer).
Note to point 5. If there are multiple users are using the PC with different user accounts and they're using the Cisco Secure Mobility Client as well, then go to 'Change settings for all users' and there apply point 5. To do so you'll need administrative rights to the computer though.

XMII and Multiple Thin Clients

Hi,
I am thinking of deploying multiple thin clients, each accessing a single xMII instance and am posting a general "broad" question. Although probably not an "xMII" related thread, but any others using xMII content on thin client(s)?
Any issues or pointers or suggestions or "not to do's" with content / java script / applets / performance / refresh?
Thanks all, Rgds Kevin.
Edited by: Kevin Hibbins on Apr 28, 2008 10:58 AM

A thin client is essentially a Web Browser, right? Or are you looking @ something else as well?
Just to add , this is from the MII help - "The following section provides a visual overview of the various applets provided with SAP xMII. By combining and linking these building blocks, incredibly powerful decision support applications that bridge a variety of disparate data sources can be quickly created and deployed on thin client platforms such as Web browser, personal digital assistants (PDAs), or other Web-aware mobile devices and internet appliances".
Help me understand if you have anything specific in mind when you say 'thin clients'.

Local admin priveleges required for Mobile Client

Anyone overcome a problem with the mobile client requiring local admin priveleges to run?

hi peter,
pls see the below urls.......
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/953928ff-0701-0010-43a0-b18b5e6ffeed
The Passwords Control Panel has a "Remote Administration" tab that
   works only if you have networking installed. If you use a central
   server, you can assign administrative privilege to a SUPERVISOR or
   Domain Admin.
   First, install File & Print Sharing for either MS networks (for a pure
   Win95 or NT domain network) or NetWare (For NetWare networks). If you
   use FPS for NetWare, keep SAP advertising OFF. In addition, install
   the Remote Registry service from Network Control Panel, as a Service
   (in ADMINNETTOOLSREMOTREG on the CD-ROM) on the remote machines. You
   can do this (and even enforce this) when you install Win95 as well.
   Now, if the workstations use User level security (highly
   advisable on NT Domains and NetWare networks), Setup will
   automatically enable remote administration for ADMIN and SUPERVISOR
   (NetWare) or DOMAIN ADMINS (NT Domain). If the stations use passwords
   instead of user lists (Share level security), or you don't have a
   central server, you will need to manually enable Remote Administration
   and supply a password to each station. Remote Administration settings
   will differ with each type of network client installed.
   Once done, you (the administrator) can control computers via Network
   Neighborhood. Right-click on any Win95 station and select
   "Properties". You will see a "Tools" tab that lets you edit the
   Registry, view network activity, or even browse the hard drives, on
   the remote computer. REGEDIT and POLEDIT also works on these stations.
   Of the tools listed, Remote Registry service is the biggest service
   (250 KB). To free up memory so you don't slow down the machines, check
   out How to Prevent Random Hard Drive Access, which also frees
   lots of memory for these services.
7.6.3.1. ...on a Windows NT network?
   Install FPS for MS networks, install Remote Registry service, and
   enable User level security. Remote Admin privileges are
   automatically given to anyone in the Domain Admins group on the domain
   controller. Re-boot. Then, go to another Win95 station, log in as
   Administrator (or anyone else in Domain Admins) and get properties on
   the remote station from Network Neighborhood.
   WARNING: This service will allow you to remotely edit an NT Server's
   Registry! I was able to get in to several (but not all) Registry keys
   on my own NT server by logging in as a member of Domain Admins. I'd
   hate to think what could happen to my poor server if someone ran
   REGEDIT on this network with malicious intent!
   WARNING: Remember the NetWare C$ bug? It's back, this time in FPS for
   Microsoft networks! Now if you perform a Remote Admin session on a
   Win95 station and view its hard drives, the Admin shares
machinec$) remain active, available for read-only viewing when a
   user types
machinec$ from Start Menu/Run. This bug may have always
   been around, but I suspect it emerged with Service Pack 1.
7.6.3.2. ...on a Peer Win95 network?
   You don't need to install Remote Registry service on the workstations
   to use peer to peer remote administration. You only need a file and
   print sharing service. When you use the Admin tools, the target
   computer will prompt you for a password.
   Be sure to set this password on all the workstations you want to
   administer remotely.
   NOTE: According to the Remote Registry readme files, Remote Registry
   service only works if you use User Level Security from a central
   server.
7.6.4. ...user level access?
   User Level access spares us the potential of lost passwords and
   multiple, security-killing, cached passwords, because the passwords
   remain on the central security provider. You need only log in once and
   type your password once, and you have access to any resources shared
   on the network that have you on their access list.
   Enable User Level security from Network Control Panel, in Access
   Control. Pick a security provider (the name of an NT domain, NetWare
   server, or other central server if your client/service software allows
   for it). The next time you re-boot, all your share requesters and
   password requesters will have user list requesters in their place. You
   could also enforce user level security via system policies.
   If the server is a NetWare 4.x server, you will need to set a Bindery
   context on it. This will allow all NDS clients access to any Win95
   stations sharing resources via FPS for NetWare.
   Unusual combinations to avoid:
FPS for MS networks, using a NetWare server as security provider
       (WFWG stations can't get access then! Win95 machines could get
       access, however)
FPS for NetWare, using an NT server as a security provider (Quite
       impossible, as the NCP server doesn't recognize NT security)
FPS for NetWare, using Share level security (It won't let you; NCP
       servers don't allow separate logins)
7.6.5. ...server-based setup and MSBATCH.INF
thanks
karthik

Lync 2013 Mobile Client

have a test Lync 2013 onprem installation, everything works fine both from inside and outside, however the Lync Client for iphone does not function as supposed. I checked debug logs on all servers and see nothing that could cause the behaviour. The strange
thing is that for example IM is actually working, the problem is that it disconnects on every action.
So, the test scenario is as following
- User 1 is logged on Lync Client on Windows 7 - LAN
- User 2 is logged on on Lync Mobile on Iphone - public internet
User 1 sees presence of User 2
User 1 sends IM message to User 2 - no errors
User 2 successfully recieves the message - gets an error "Failed to process the server respons" and appears offline
User 2 signs out of Lync Mobile and signs back In- no errors
User 2 sends IM message back to User 1 - gets an error "Failed to process the server respons" and appears offline
User 1 recieves the IM message - no error
Any glues anyone? Where to look? I used debugging tools (S4 and SIPStack) both on Edge and FE and found nothing strange
Thanks in advance
Emin

Hi,
Which kind of Reverse Proxy did you use (TMG or IIS ARR)?
Did the issue only happen to you or for multiple users?
Did the issue only happen for IPhone or for all kind of mobile clients (IOS, Android, Windows Phone)?
If the issue happen only for you, please try to use another mobile and test the issue again.
If the issue happen for multiple users, and only happen for IOS client, try to update to the latest version for Lync IOS client and test again.
If the issue happen for multiple users, and happen for all kind of mobile platforms, double check the configuration of Reverse Proxy ( certificate, port).
For WP8 root certificates need to have HTTP URLs in the CRL (Certificate Revocation List). If root certs doesn’t contain these CRL attributes than the certificate won’t be accepted by WP8 and sign in would fail.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Lync2010 Mobile client, fail to sign out

Hi,
Has anyone seen this type of issue before ?
Lync2010 Mobile client on IPAD and iPhone push notifications are working, can sign in to client, -- however most times when i sign out- my presence is still showing.
has anyone seen this type of issue before with lync2010 mobile on Iphone/Ipad. User logs in , sign out but presence is still showing as available.
Thank you,

Hi,
Did the issue happen only for you or for multiple users?
Did the issue also happen for Android or Windows Phones?
Please update to the latest version for Lync client on IPAD and iPhone and test again.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Using database views in ADF mobile client application

Hi,
I am using Jdeveloper 11.1.1.4 and WLS 10.3.4.
I have developed a POC in ADF mobile client application both with and without synchronization. However, both work with entity objects based on tables.
I need to use database views instead of tables. When I try to include entity object (based on views) in the view object, it shows an error saying "Only the entity objects based on tables can be selected"
Please guide me if there is a work around for this.
Also, please let me know if there is way to develop an ADF mobile client application skipping the use of entity objects at all and using view objects directly to specify the database query and fetch data from the database.
Thanks in advance.
Ansh
Edited by: ansh on Mar 28, 2011 5:40 AM

Hi, Ansh:
Currently, out of box, ADF Mobile Client does not support synchronization against Database Views. This is because Mobile Server imposes some schema restrictions to ensure synchronization with multi-table views would work correctly. This schema restriction requires, for example, the view must have a primary parent table with key defined, and also all base table must be included in the data publication. These dependencies requires manual resolution and advanced planning, and is managed outside of the ADF Mobile Client/JDeveloper project.
To continue development, you would need to create server Entity Objects directly against the base tables. You can then create the mobile ADF Business Component (EOs, VOs, etc). You can then create View Objects in your ADF Mobile Client application based on the database views, in order to retrieve the data you need exactly. In other words, instead of basing EO on the database view, create View Objects in the mobile applicaiton to mimic what you had in the View Object.
Is there any other reason why you would need to access data via database views, instead of directly against base tables?
Thanks,
Joe Huang

Auto Discover Mobile Client Connectivity issue.

I am currently working on getting mobility working for our lync environment. I have followed online articles for setting up the mobility service and while I have not got a true reverse proxy put in place yet I have a question regarding the autodiscover.
When I go to https://lyncdiscover.ourdomain.com/autodiscover/autodiscoverservice.aspx/root/sipuri=[email protected]
I get the following results
{"AccessLocation":"External","Root":{"Links":[{"href":"https:\/\/lyncfe-v01.ourdomain.local\/Autodiscover\/AutodiscoverService.svc\/root\/domain","token":"Domain"},{"href":"https:\/\/lyncfe-v01.ourdomain.local\/Autodiscover\/AutodiscoverService.svc\/root\/user","token":"User"}]}}The problem is that is our local internal URL not the external URL. I believe the setting comes from the Topology Builder under the Standard Front End Server for External web services FQDN as that is what is set there. My question is should that be changed to the FQDN of the edge server or the FQDN of the reverse proxy server? Also should that be the public ourdomain.com or remain the internal ourdomain.local?I hope this makes sense. I am just taking this piece by piece as I was hoping to get my android phone working internally on Wifi at the very least.Also for testing purposes I just pointed our firewall and setup nat from 80 -> 8080 and 443 -> 4443 to test that the external website was working and it is that is how I was able to get the auto discover information. I know this is not secure or ideal I am simply taking this one step at a time to ensure I get this working properly.Thank you for everyone's help.
KK

Ok update on my progress.
we updated our UCC certificate that we bought for our edge server. That certificate had the following in it
sip.ourdomain.com
webconf.ourdomain.com
we added
dialin.ourdomain.com
meet.ourdomain.com
lyncdiscover.ourdomain.com
I left the External Web Services FQDN as lyncdiscover.ourdomain.com
I then put that cert on the Reverse Proxy server. I then tested using testconnectivity.microsoft.com and the autodiscover test and everything passed. This is the good news.
Now the bad.
When I run the connectivity test if I manually select the server and put in sip.ourdomain.com and choose port 5061 the test passes but if I choose port 443 which apparently the mobile clients use as I do not see a spot to change that at it fails stating
that
The SSL certificate failed one or more certificate validation checks.
The certificate couldn't be validated because SSL negotiation wasn't successful. This could have occurred as a result of a network error or because of a problem with the certificate installation.
Elapsed Time: 192 ms.
I checked the External Cert on the edge server and sip.ourdomain.com and webconf.ourdomain.com are listed.
The Edge Pool has been configured to have SIP Access, Web Conf service and A/V service all point to sip.ourdomain.com using ports 5061, 444, 443
Can someone point to me what I have setup incorrectly?
This seems like I am very close to actually having this working. Almost like I can see the light.
Thank you,
KK

Resetting a mobile client (new device ID)

Hi,
We often experience that mobile clients have to be re-installed due to synchronization problems. Using the Reset feature on the client does not solve the problem so we have to start from scratch each time.
First the client is un-installed, a new client installed and then we start all over again with the distribution of applications & data. This process is VERY troublesome but SAP does not seem to have an alternative.
Are you familiar with a good solution for resetting the client including the device ID, so the MI Client can be re-used? This way we could avoid the re-installation of the client which is also an issue due to the laptop user authorization concept.
We are using SAP NetWeaver 2004s SP12 and MI Client 7.0 SP12 patch 5
Looking forward to your advice.
Kind regards
Christian

Hi Christian,
there are two possible ways: first you do a complete installation if MI on the client, add DB2e manually and enter the settings in mobileengine.config manually. This all happens without logon to MI and for sure without sync. If this is the case, you can create a copy of that folder and store it on device for later reference. All you have to do then is to copy this folder from SD card to \ and you have a running version. Register user, sync - and you have deviceID and start from scratch with sync and so on....
If users have different Versions of the App - please use the Profiles - all user that share the same profile will have the same version of the software by default - so this problem should be solved then as well.
The confusion about the Reset button is perhaps that you expect something else then it finally does. All it does is to remove the complete data from the persistence stack. But all general MI settings like Mobile ID, Device ID, SyncKey and so forth still are in the last value. If you have problems with data inside the APP, then this button is ok, but it will not reset the MI installation back to initial!
Perhaps these two blogs will help you:
Reinitialize MI client without reinstallation in seconds! Part 1&2
/people/sap.user72/blog/2005/11/17/reinitialize-mi-client-without-reinstallation-in-seconds
/people/sap.user72/blog/2005/12/01/reinitialize-mi-client-without-reinstallation-in-seconds-part-2
Hope this helps to solve your issue!
Regards,
Oliver

Lync 2013 Mobility Client - Video Call Issue (Everything Else works).

Hey Technet’ies,
I have been struggling for a couple of weeks now to resolve one of the final issues with a Migration/Upgrade Project on Lync Server 2013.
I have nearly every Lync Client Scenario working well except the Mobility Client (outside of the domain) which cannot successfully complete a Video
Call to a Windows Desktop Client (inside the domain) – the toast pops up, but when we click accept - it just times out after 15 seconds
K
The strange thing is every other Video Call scenario works;
Mobility Client (Outside Domain)
àWindows Desktop Client (Inside Domain)
= Unsuccessful
Mobility Client (Inside Domain)
à Windows Desktop Client (Inside Domain) = Successful
Mobility Client (Inside Domain)
à Windows Desktop Client (Outside Domain) = Successful
Mobility Client (Outside Domain)
à Windows Desktop Client (Outside Domain) = Successful
Mobility Client (Inside Domain)
à Mac Desktop Client (Inside Domain) = Successful
Mobility Client (Inside Domain)
à Mac Desktop Client (Outside Domain) = Successful
Mobility Client (Outside Domain)
à Mac Desktop Client (Outside Domain) = Successful
Mobility Client (Outside Domain)
à Mac Desktop Client (Inside Domain) = Successful
Mobility Client (All Scenarios)
à Mobility Client (All Scenarios) = Successful
Our setup is pretty standard;
All OS servers are Win Server 2012 R2
Lync 2013 Standard FE Server
Lync 2013 Edge Server
Reverse Proxy IIS AAR (Also Win Server 20012 R2)
Lync 2013 Desktop Clients, Lync 2011 Mac Clients, IOS and Android Mobility Clients – all latest versions.
External NAT (via Cisco Routers ACL’s)
Internal Windows Firewall Currently off on all Servers
All Certs / DNS Configured as per Technet Recommendation
I have reviewed / analysed a number of log/trace files – looking for some/any information on the problem;
Mobility Client (cmlogX.log)
Windows Desktop Client (*.etl) / Microsoft Message Analyzer
Lync 2013 Server (CSController)
With all my looking I could not make out an error except a timeout (15 seconds) on the Mobility Client log (which I currently can’t find).
Clearly we are missing something and I have gone up and down our implementation a number of times, the only semi-unknown is our old 2010 Pool / Central Management Server (which is currently pretty much redundant but the majority of users still on).
I would really appreciate any feedback anyone can provide or any insight anyone may have on this challenge.
Thanks in advance, Alex.
Alex

Hi Andrew,
Thanks for the quick contact!!
Sorry - typo in my post, I have now corrected it;
Mobility
Client (Outside Domain) àWindows
Desktop Client (Inside Domain) = Unsuccessful
So I completely missed that blog post of yours (out of the 100's I have read) and you are the first person to clearly say (in simple terms) to point the lyncweb.contso.com to the public IP address on my internal DNS, I have just made that change and see
if it will correct the issue - will wait for replication.
Also I am running IIS / AAR as Reverse Proxy (not ISA) and had the Internal DNS Host A of lyncweb.contso.com and lyncdiscover.contso.com point back to my Reverse Proxy Internal NIC (i.e. 10.1.1.32) as the External NIC is isolated on in the Perimeter Network,
is this correct?
So it now goes like this
*Inside Domain*
lyncdiscover.contson.com --> 10.1.1.32 (Reverse Proxy Internal Nic) --> 10.1.1.26 (Front End Server)
lyncweb.contson.com --> 201.183.0.1 (Reverse Proxy External Nic - Public IP) --> 10.1.2.16 (Reverse Proxy External Nic) --> 10.1.1.26 (Front End Server)
Does this make any sense, I know ISA and IIS/AAR are pretty much interchangeable.
Thanks again Andrew and look forward to any feedback,
Alex.
Alex

Lync Mobile client signs out - Error- IIS reset on Front End - WAS Errors

I have a very limited understanding of Lync dependency's & how to trace the issue I'm now seeing. Would appreciate any direction or information to assist.
We have Primary & Secondary Pools - both pools seem to be effected at different times. The Mobile Clients will error & not sign in until iisreset
is done on the effected Front End.
This issue has started a few weeks ago. Before that this has happened maybe twice in a year.
A few weeks ago we did move the FileStore location of the Primary Front End only (off a Siffs Application store to the local drive of the Primary Front End)– AV scan
exclusion was set for FileStore location.
Also some Windows 2008R2 patches were applied.
The Deployment Wizard has been rerun incase something was broken by MS updates.
The Window Event log is clean apart from:
WAS events: (1 to 4 are grouped)
5013 - A process serving application pool 'LyncUcwa' suffered a fatal communication error with the Windows Process Activation Service. The process id was '24076'. The data field
contains the error number.
5011- The Windows Process Activation Service failed to generate an application pool config file for application pool 'LyncExtFeature'. The error type is '7'.
5189 - A process serving application pool 'LyncIntFeature' suffered a fatal communication error with the Windows Process Activation Service. The process id was '17216'. The data
field contains the error number.
5011 - A process serving application pool 'LyncUcwa' exceeded time limits during shut down. The process id was '12520'.
The Windows Process Activation Service failed to generate an application pool config file for application pool 'LyncIntReach'. The error type is '7'. To resolve this issue, please
ensure that the applicationhost.config file is correct and recommit the last configuration changes made. The data field contains the error number.
Schannel: Same Error event happens twice within a few seconds
ID 36888 -
The following fatal alert was generated: 10. The internal error state is 1203.
ID 36888 -
The following fatal alert was generated: 10. The internal error state is 1203.
From What I’ve read SChannel doesn’t seem to be an issue.
Another set of WAS events:
5011 - A process serving application pool 'LyncUcwa' suffered a fatal communication error with the Windows Process Activation Service. The process id was '19132'.
5011 - A process serving application pool 'LyncIntFeature' suffered a fatal communication error with the Windows Process Activation Service. The process id was
'23876'.
5011 - A process serving application pool 'LyncIntReach' suffered a fatal communication error with the Windows Process Activation Service. The process id was
'9876'.
5011 - A process serving application pool 'LyncExtFeature' suffered a fatal communication error with the Windows Process Activation Service. The process id was
'21804'.
5138 -
A worker process '6620' serving application pool 'LyncUcwa' failed to stop a listener channel for protocol 'http' in the allotted time.
5013 - A process serving application pool 'LyncUcwa' exceeded time limits during shut down.
Our Exchange UM started to generate errors recently but not sure if that’s a result of the iisreset for WWW Pub – but these events don’t match any timing of Front End events:
Windows Process Activation Service
11/13/2014 04:06:37 PM
LogName=System
SourceName=Microsoft-Windows-Service Control Manager
EventCode=7031
EventType=2
Type=Error
ComputerName=Pxxx.xxx.com.au
TaskCategory=The operation completed successfully.
OpCode=The operation completed successfully.
RecordNumber=62445
Keywords=Classic
Message=The Windows Process Activation Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Run the configured recovery program.
World Wide Web Publishing Service
11/13/2014 04:06:37 PM
LogName=System
SourceName=Microsoft-Windows-Service Control Manager
EventCode=7034
EventType=2
Type=Error
ComputerName= Pxxx.xxx.com.au
TaskCategory=The operation completed successfully.
OpCode=The operation completed successfully.
RecordNumber=62444
Keywords=Classic
Message=The World Wide Web Publishing Service service terminated unexpectedly. It has done this 2 time(s).
I’m not sure where to go with this now. Any direction would be appreciated.
Thank you

Hi Davej006,
Web sites and Web applications depend on the availability of Internet Information Services (IIS) application pools. IIS application pools in turn depend on the Windows Process Activation Service (WAS). If WAS is not running or errors occur
during the startup or shutdown of an application pool, Web sites and Web applications may not be available.
And based on my understanding, if some program works sometime and does not in other times, RAM is the problem.
You could refer to the following article to troubleshoot your problem.
http://technet.microsoft.com/en-us/library/cc735271(v=ws.10).aspx
Hope it can be helpful.
Best regards,
Eric

Multiple Mobile Clients

Similar Messages

Maybe you are looking for