Certificate error when Lync client login through VPN connection

Hello,
I am using the certificates from internal cert authority on Lync 2013 frontend servers and on edge server internal network. Edge external is using a third part certificate.
The users always use MS VPN connection when work remotely. We have multiple subnets in the company so "use default gateway on remote network" is enabled for routing.
When the users try to log in Lync client from non-domain joined computers while on VPN, they can't log in and get certificate error. It is hard to import the internal certificate on the computers.
What change do I need to do to the Lync certificates? Thanks

You have a few options:
1) You could attempt to hardcode the client so that it always connects through the edge. This can be done through tools->options->personal->advanced->manual configuration (but you may have to hardcode the FQDN in your hosts file so it doesn't
attempt to resolve via internal DNS). This may not work since your firewall may not be too happy with "internal" traffic leaving and coming back through the edge.
2) Write a script that helps automate the certificate installation and try to walk users through it.
3) Bite the bullet and use a third party certificate on the internal servers.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Similar Messages

My login is showing server error when tryinng to login through my application

Server Error in '/' Application. Failed to generate a user instance of SQL Server due to a failure in copying database files. The connection will be closed. Description: An unhandled exception occurred during the execution of the current web request. Please
review the stack trace for more information about the error and where it originated in the code. SQLExpress database file auto-creation error: The connection string specifies a local Sql Server Express instance using a database location within the application's
App_Data directory. The provider attempted to automatically create the application services database because the provider determined that the database does not exist. The following configuration requirements are necessary to successfully check for existence
of the application services database and automatically create the application services database: If the application is running on either Windows 7 or Windows Server 2008R2, special configuration steps are necessary to enable automatic creation of the provider
database. Additional information is available at: http://go.microsoft.com/fwlink/?LinkId=160102. If the application's App_Data directory does not already exist, the web server account must have read and write access to the application's directory. This is
necessary because the web server account will automatically create the App_Data directory if it does not already exist. If the application's App_Data directory already exists, the web server account only requires read and write access to the application's
App_Data directory. This is necessary because the web server account will attempt to verify that the Sql Server Express database already exists within the application's App_Data directory. Revoking read access on the App_Data directory from the web server
account will prevent the provider from correctly determining if the Sql Server Express database already exists. This will cause an error when the provider attempts to create a duplicate of an already existing database. Write access is required because the
web server account's credentials are used when creating the new database. Sql Server Express must be installed on the machine. The process identity for the web server account must have a local user profile. See the readme document for details on how to create
a local user profile for both machine and domain accounts.

Hi migold,
As other post, please help to post more details for analysis.
Based on my research, the error “Failed to generate a user instance of SQL Server due to a failure in copying database files” is usually caused by that User Instance is set improperly. Please check for the existence of the "User Instance=True;" in
your connection string, if it exists, change it to "User Instance=False;". For more details, please review the following blog.
http://blog.benhall.me.uk/2008/03/sql-express-error-failed-to-generate-a-user-instance-of-sql-server/
Thanks,
Lydia Zhang
Lydia Zhang
TechNet Community Support

Avoiding concurrency errors when updating a database through AJAX

What are some strategies for avoiding concurrency errors when updating a database through AJAX. That is, in cases where a given user could attempt to modify the same row in the database with simultaneous requests (say, that he updates one column with information with an AJAX call, then immediately submits a form that updates the same row), what are some good ways yo prevent the two updates from colliding? On the JavaScript side one might make the AJAX call synchronous, but I question whether that is the best way to do it. Has anyone else confronted this?

Well, since no one seems to have any ideas so far, I'll throw in my two cents worth.
I'm not too familiar with AJAX so my advice may be limited.
I suggest you do a google search on Optimistic concurrency database to get some ideas on how to handle it.
If your update/insert/delete query is thread safe, then even if the same user double clicks the button fast enough to immediately have another update to the same record, then the first update will complete before the second one is carried out. Therefore no harm is done since he is just updating the same record. Since a typical update/insert/delete takes only a few milliseconds (querying may take a lot more time), its not likely he can click the button that fast. (I assume your using connection pooling for speed).
The trouble comes up when two people call up data from the same record in different browsers. The first one updates/inserts/deletes the record. Now the other user is looking at old data. When he updates/inserts/deletes, there is a problem. One way to handle this is to keep a copy of all the fields from that record in each user's session scope when they first fetch it from the database (example: oldName). Then when you go to update some time later, to this:
sql= update person set name=newValue where personID=3344 and name=oldName
Note oldName is from session scope.
If name in the database has changed, the update will not occur and will return 0 records updated. If it didn't change, it will update.
Note your update function should not throw an exception if it cant update, it should return false. Return true if it worked.
Example: public boolean updateName(String name)
Similiarly, your insert should not throw an exception if the record already exists, it should return false meaning it cant insert.
Exaple: public bolean insertName(String name). Same thing with delete function.
If a record cant be updated due to someone else updating the record while the user was looking at data, return a message that it wasn't updated due to that problem. Then show the user the new value in the database ask him if he wants to overwrite the new change.
Note even if you show 100 records on the JSP, only update the ones that have changed and not all 100. This way, its not likely he has updated the same records someone else has altered. Less likely a colision compared to updating all 100.
If your updating/inserting/deleting more than 1 record (say, 3), then you should look into setting up a transaction in addition to all the above and rolling back all of them if one fails.
Reading the section on databases from http://www.javapractices.com/home/HomeAction.do may also help.

Provide steps to send Root CA certificate to the Lync client, getting error" There was a problem verifying certificate from the server"

Hi,
I Build an Lync 2013 set up with FEpool, Director pool and Exchange server is integrated. I have windows 8 client machine, with Lync client installed. When I try to login to the lync client, I am getting error like"There was a problem verifying
certificate from the server".
When I installed ROOT CA cert manually on client machine I am able to login to the lync client. similarly if I add my client machine in my domain, I am able to login to the Lync client.
Now is there any other way to send the certificate automatically to the client machine (Which are NOT part of the DOMAIN) from the server, instead of manual installation process.
Please help me troubleshoot this problem

Agree with S Guna, there is no easy way to push a certificate automatically to a client that you don't control other than building an installer package and asking them to run it. In this situation, if there are a lot of non-domain joined machines
a third party certificate is the way you need to go.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Lync client Login error

Hi guys,
I'm facing with an error while logging in to lync client. I have a user called nima, I added this user to lync server accordng to the following link but when I try to login I get an error stating that credentials are incorrect. I can login to windows with
my credentials but lync client doesn't work at all.
link: http://www.orcsweb.com/blog/cory-granata/how-to-install-lync-server-2013-standard-edition-on-windows-server-2012/
any help would be so appreciated.
Thanks and regards,
Bahman

Hi,
Is that you used the Users Email ID address while creating the user in Lync?
Try Specify SIP URI In first Block nima in the drop down menu select your Lync server.
Check this way.
Whenever you see a helpful reply, click on Vote As Helpful & click on Mark As Answer if a post answers your question.

Error when copying file under Cisco vpn client 5 x64

Hello Everyone,
My network scenario:
INTERNET<--->LoadBalacing( 2 Line) <---> Cisco ASA 5510<--> LAN
In Load Balancing i configured NAT port 500 and 10000 to Cisco ASA 5510 . On my laptop running windows 7 x64, i setup the vpn client v5 x64 and successfully connect to cisco ASA , I can copy file <1MB via VPN connection but have an trouble when copy file about more than 1MB
After the error occur, i checked the VPN Client status and it is connected .
Could you please help !!!!
I appreciate all your answer .
Thanks so much

No one know the error ?

Certificate error when connecting to RemoteApp outside of private network

I have a server running Windows Server 2012 R2. It is configured as an all-in-one RDS server - all roles are installed on it. We've configured it primarily to use an application as a RemoteApp - the application is hosted at a different site, and this RDS
server is at that site. We have a site to site VPN set up, so that it is all a part of our domain. The issue I'm having seems related to the fact that our internal network is .local, but the certificate only has a single .com name, so that we can access it
from the Internet.
Everything works, though what I'm trying to clear up is a certificate error. When connecting to the RemoteApp from outside of our private network, we get the error "The server name on the certificate is incorrect." This occurs after entering
credentials. The public name of the server (rds.contoso.com) is different from the private name (server.contoso.local). We can proceed through the error and connect (though we'd like to fix it).
I implemented a fix that I found elsewhere to try to fix this. This was to add a custom RDP setting like so:
Set-RDSessionCollectionConfiguration –CollectionName QuickSessionCollection -CustomRdpProperty "use redirection server name:i:1`nalternate full address:s:rds.contoso.com"
That seemed to make some progress, then we got another error. I made a change to the RD RAP in RD Gateway Manager - by default, it allowed access to Domain Computers (which rds.contoso.com did not exist as a domain computer). I modified it to allow
access to the rds.contoso.com name.
I now receive a different error message and that's where I'm stuck. The heading on the message is RemoteApp Disconnected. The text of the error is 'Remote Desktop can't find the computer "rds.contoso.com". This might mean that
"rds.contoso.com" does not belong to the specified network. Verify the computer name and domain that you are trying to connect to.'
Any thoughts on what I can do next? When I roll back the changes I've made, I'm again able to connect fine, I just have the certificate error again.

Hi,
1. For changing the published FQDN I recommend you use Set-RDPublishedName cmdlet instead setting a custom rdp property on the collection:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
2. As you mentioned before you need to edit the RD RAP so that the FQDN that you are using is permitted, or set it to Allow users to connect to any network resource.
3. On your internal network (internal to the RDG), you need to create a DNS A record for the published FQDN (rds.contoso.com) that points to your server's private ip address.
I'm not sure how you have things configured right now in terms of network and DNS so it is tough to give you instructions on how to fix. Let me explain a bit. Normally with a VPN you would not need RD Gateway, although it is okay
if you want to use it. If you have things configured properly an external client will normally connect to the RDG using the FQDN specified for RDG, then the RDG will connect to the published FQDN for the RDS deployment.
In your case these two FQDNs would be the same, only when the client does a DNS lookup it should get the ip address that you want users to connect to for the RDG whereas when the RDG does a DNS lookup it should get the private ip address of the server.
Exactly how you need to configure your DNS entries will depend on your VPN and networking configuration.
Please give it a try using the information provided above and reply back here with your results and any further questions you may have.
Thanks.
-TP

Error when installing Client

Hi,
I installed the 10g Client on my computer, and all went well until it got to the Network Configuration Assistant. When it got to this point, it failed, but let me go on because it was only optional.
I set up a Service Name in Net Manager, and the connection was successful -- I can login through sqlplus without a problem. But when I try to connect through the Enterprise Manager Console, I get the following error:
"The procedure entry point OCIConnectionPoolCreate could not be located in the dynamic link library OCI.dll"
Can somebody please tell me what I can do to fix this error?
Thanks

Thanks much for the reply. I appreciate the help.
Actually, I already tried your suggestion. I got a similar java error when I tried to run the client after I installed htmldb -- I was able to fix it by listing C:\oracle\product\10.1.0\db_1\bin first in the path.
But, it doesn't seem to do anything for this error. I'm still not sure what could be causing it.
Thanks again,
Nora

Error when create client proxy in ABAP

hi all
when I tried to create a client proxy through wsdl: http://www.webservicex.net/geoipservice.asmx?wsdl , I got and error message "Exception occurred in library handler", what's the really matter with this error ?
thanks very much!

You need to copy the WSDL file to a local file and edit it. The WSDL file contains non-SOAP bindings and that's what the generator is choking on. Use the 'Local file' option to generate the proxy class after editing the file.

I-200 error when trying to login

I just bought a Muse subscription but can't use it since I'm not able to sign in.
When trying to login with my username and password i receive this error:
I see that someone else has the same problem.
He is informed that it might have to to with antivirus or the like.
I've tried to deactivate my antivirus (Microsoft Security Essentials on Windows 7), but that didn't help.
It's also suggested to check 4 links to your Adobe servers - all 4 links do what they are supposed to do.
I've tried to uninstall and re-install Muse, that also didn't help.
What can I do to fix the problem??
My clients need to have their websites updated - hope you'll be able to help me as soon as possible.

I found a solution in another discussion:
1) opm.db file becomes corrupted and must be deleted. We're working to isolate the cause of this.
The opm.db file can be found in the OOBE folder in:
on Mac: <yourusername>/Library/Application Support/Adobe
on Windows XP: <youruser>\Local Settings\Application Data\Adobe
on Windows 7: <youruser>\AppData\Local\Adobe
This worked for me

RDS 2012 - Certificate error when using RemoteApp

Have setup the RD Gateway to use port 40001 for the https transport. Internally everything works good. Can login to RD Web externally fine, but when trying to launch a RemoteApp it starts then returns a certificate error. The certificate it is showing
is for the exchange server which of course is on port 443. This is a single IP environment. From what I see happening, it is defaulting back to 443 even though it has been told to use 40001. Obviously the site connects and secures using the 40001
port, but the RemoteApps still want to fall back to 443. It this a flaw or am I missing something? I thought the whole reason of selecting another port was to use that other port.
Thanks

This power script worked like a charm for me.
Luckily this is just a lab setup, but I was racking my brains for a couple of days until I found this.
Same situation, port 443 is used for email server and needed to use an alternate SSL port.
Changing the port on the server side for the RD Web Access URL was a breeze, but changing the port for the RemoteApp collection was not as easy to figure out until I found this post.
In my situation, like I read before, when you try to run one of the apps in the collection, it will invoke the certificate that our mail server uses since it tries to use port 443 which is assigned to the mail server.
Running the script immediately fixed the problem by using the alternate port specified in the script.
Hopefully this will help tons of folks in this same situation.
PS: If I had a bunch of public IPs to work with, I would not have to use alternate ports.

Getting 404 error when trying to login to Oracle EBS page

Hi,
I had installed Oracle EBS 12.0.4 last year and everything was running fine until last week. Last week, we suddenly started seeing this issue - when trying to login to the Oracle EBS page, we are getting the 404 page not found error.
I have EBS installed on 2 VMs (virtual machines) - one VM has the application server and other VM has the database server. I logged on to the aplpication server to do some debugging and noticed 2 things ->
1.The Oracle Fullfillment service was not running. I started it, it was up for some time but then it stopped on its own. This happens everytime - after successfully starting the service, it shuts down after sometime. There is nothing in the event viewer except this message "The service may have terminated abnormally, please see the log file generated by the service for more details." I checked the log file, but there is nothing significant inside the log file. Maybe I need to increase the log level. Can any one tell me how can I do that?
2. Reviver.exe was crashing intermitently on the application server. I belive reviver tries to establish the connection between the application and database server after its broken.
So I am thinking now that maybe the connection between the app server and the database server is getting broken intermittenlty and this is the root cause of all the problems.
I dont know how to verify whethe my analysis is correct or not? And it it is, how to resolved it? Is there a setting or a configuration file in which you have to specify the database server details (ip address / host name etc). Can you tell me where can I find this setting?
Or culd there be something altogether different that is causing the page not found error?
Thanks in advance,
Megha

Hussein,
The problem is partially solved - I am not getting the 404 error now. The issue was not with the netsvc file. Please see the resolution in NOTE:412980.1 (oafm,forms and oacore not starting up after IP adress change).
The OC4J services are imperative for any URL for java code. With just the Apache listener running, examples of URLS that will work are ->
http://HOST.DOMAIN:PORT/OA_MEDIA/FNDLOGOL.gif
http://HOST.DOMAIN:PORT/
Any URL for Java code will fail at this stage when OC4J services are down. For example this URL will fail: http://myHost.oracle.com:8000/OA_HTML/ServletPing.
But now, I am getting 500 Internal server error. Let me know if you kno anything about this error ->
oracle.apps.fnd.cache.CacheException at oracle.apps.fnd.cache.AppsCache.get(AppsCache.java:228) at oracle.apps.fnd.profiles.Profiles.getProfileOption(Profiles.java:1485) at oracle.apps.fnd.profiles.Profiles.getProfile(Profiles.java:354) at oracle.apps.fnd.profiles.ExtendedProfileStore.getSpecificProfileFromDB(ExtendedProfileStore.java:211) at oracle.apps.fnd.profiles.ExtendedProfileStore.getSpecificProfile(ExtendedProfileStore.java:171) at oracle.apps.fnd.profiles.ExtendedProfileStore.getProfile(ExtendedProfileStore.java:148) at oracle.apps.fnd.common.logging.DebugEventManager.configureUsingDatabaseValues(DebugEventManager.java:1259) at oracle.apps.fnd.common.logging.DebugEventManager.configureLogging(DebugEventManager.java:1114) at oracle.apps.fnd.common.logging.DebugEventManager.internalReinit(DebugEventManager.java:1083) at oracle.apps.fnd.common.logging.DebugEventManager.reInitialize(DebugEventManager.java:1050) at oracle.apps.fnd.common.logging.DebugEventManager.reInitialize(DebugEventManager.java:1037) at oracle.apps.fnd.common.AppsLog.reInitialize(AppsLog.java:595) at oracle.apps.fnd.common.AppsContext.initLog(AppsContext.java:941) at oracle.apps.fnd.common.AppsContext.initializeContext(AppsContext.java:926) at oracle.apps.fnd.common.AppsContext.initializeContext(AppsContext.java:891) at oracle.apps.fnd.common.AppsContext.<init>(AppsContext.java:751) at oracle.apps.fnd.common.WebAppsContext.<init>(WebAppsContext.java:1014) at oracle.apps.fnd.sso.Utils.getAppsContext(Utils.java:525) at oracle.apps.fnd.sso.AppsLoginRedirect.AppsSetting(AppsLoginRedirect.java:120) at oracle.apps.fnd.sso.AppsLoginRedirect.init(AppsLoginRedirect.java:170) at com.evermind[Oracle Containers for J2EE 10g (10.1.3.0.0) ].server.http.HttpApplication.loadServlet(HttpApplication.java:2231) at com.evermind[Oracle Containers for J2EE 10g (10.1.3.0.0) ].server.http.HttpApplication.findServlet(HttpApplication.java:4617) at com.evermind[Oracle Containers for J2EE 10g (10.1.3.0.0) ].server.http.HttpApplication.findServlet(HttpApplication.java:4541) at com.evermind[Oracle Containers for J2EE 10g (10.1.3.0.0) ].server.http.HttpApplication.getRequestDispatcher(HttpApplication.java:2821) at com.evermind[Oracle Containers for J2EE 10g (10.1.3.0.0) ].server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:740) at com.evermind[Oracle Containers for J2EE 10g (10.1.3.0.0) ].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:451) at com.evermind[Oracle Containers for J2EE 10g (10.1.3.0.0) ].server.http.AJPRequestHandler.run(AJPRequestHandler.java:299) at com.evermind[Oracle Containers for J2EE 10g (10.1.3.0.0) ].server.http.AJPRequestHandler.run(AJPRequestHandler.java:187) at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260) at oracle.oc4j.network.ServerSocketAcceptHandler.procClientSocket(ServerSocketAcceptHandler.java:230) at oracle.oc4j.network.ServerSocketAcceptHandler.access$800(ServerSocketAcceptHandler.java:33) at oracle.oc4j.network.ServerSocketAcceptHandler$AcceptHandlerHorse.run(ServerSocketAcceptHandler.java:831) at com.evermind[Oracle Containers for J2EE 10g (10.1.3.0.0) ].util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303) at java.lang.Thread.run(Thread.java:595)Caused by: oracle.apps.jtf.base.resources.FrameworkException: Error in IAS Cache: java.lang.NullPointerException: null Connection at oracle.apps.jtf.cache.IASCacheProvider.get(IASCacheProvider.java:712) at oracle.apps.jtf.cache.CacheManager.getInternal(CacheManager.java:4802) at oracle.apps.jtf.cache.CacheManager.get(CacheManager.java:4624) at oracle.apps.fnd.cache.AppsCache.get(AppsCache.java:216) ... 33 moreCaused by: oracle.apps.jtf.base.resources.FrameworkException:
An exception occurred in the method CacheAccess.get
null
The base exception is:
null Connection at oracle.apps.jtf.base.resources.FrameworkException.convertException(FrameworkException.java:607) at oracle.apps.jtf.base.resources.FrameworkException.addException(FrameworkException.java:585) at oracle.apps.jtf.base.resources.FrameworkException.<init>(FrameworkException.java:66) at oracle.apps.jtf.base.resources.FrameworkException.<init>(FrameworkException.java:88) at oracle.apps.jtf.base.resources.FrameworkException.<init>(FrameworkException.java:202) at oracle.apps.jtf.base.resources.FrameworkException.<init>(FrameworkException.java:218) at oracle.apps.jtf.base.resources.FrameworkException.<init>(FrameworkException.java:249) ... 37 more

Certificate error when try to send mail

Masters,
First of all sorry for my poor english. Im not IT specialist, so please ...
I need help to fix my problem. I know there are many post with this but i can't figure out.
We had a working enviroment with no certificate issue.
I tried to set the Outlook Anywhere, and so i messed up something. Now if user open outlook and send / or reply a mail got a certificate error message. I don't care Outlook Anyhere anymore but i need to fix my issue...
I have not enough reputation point, so i can't attach image. I used Snag to attach picture.
Certification error message:
This is how exchange certs looks like:
The problem is occure when start outlook and start or reply a mail. Certfication error pop-up, and inside the message windows on the Certification Chain tab i see: "mydomain".local
When i try to configure outlook anywhere i create and enable new certificate. I think when i did this i have to allow owerrite some service... I deleted that certification already.
If i install the cert to root CA, then works ok. But i don't want to install it all our server, because its workd earlier. How can i fix this?
Thank you

Hello,
First of all thank you for helpin' me.
I do not want to use outlook anywhere anymore, but now i know need 3rd certf for work...
Only i want to get back everything.
I know if i install to root CA than pop up disappear (i test this one of our server) but because earlier we have no installed this cert...so i don't understand what should i did...
1. i installed a new self-sign certificate and associate service SMTP for it.
2. after all test failed i decided to delete this cert...
3. now outlook get pop up with certificated issued by: ourcompany.local
- i did not seen any certificate in the certificate store with this name...
Now i test it again and the no pop up in outlook?! What happend? I check and the mentioned certificate not in the store?!
If i delete a certificate and assign service to another one, how many time need to affect this to the enviroment?
Thank you

Certificate error when downloading itunes...

I'm getting a certificate error in Internet Explorer when trying to download itunes on new computer.
It's blocking the download.
Help!

worked like a charm! I know PSE but don't know computers that well:))

Getting error when trying to login to CR XI server on suse linux server

http://www.experts-exchange.com/Database/Reporting_/Crystal_Reports/Q_21747694.html
Hello,
I'm getting the above error when I try to login as administrator (blank password).
This did work until I rebooted the linux server.
I checked there are no port conflicts (nothing is using port 6400).
I restarted the services manually, I even rebooted server and then restarted ccm services manually but no luck. I did find this is a known problem with linux crystal reports server but nothing stated about how to resolve it.
Finding solutions in the SAP portal is difficult! This is about as user friendly as the Cisco support website. Cisco portal is AWEFUL.
I'm in process of getting a support contract from SAP but it's taking a long time.
I have to state the support from SAP is a big step DOWN from the business objects support. We were able to call and speak to engineers in a few minutes.
With SAP support I was able to talk to some foreigner (asian or indian) to tell me that there is no phone support with SAP. This after being redirected at least 4 times between departments.
Wow! So what do the other business objects customers have to say about the SAP support?
I can't help but wonder about moving on to another solution for publishing reports.
A vendor who actually gives a damn about the customers.
Oskar

this worked until I rebooted the server.
I'm getting error showing it's trying to connect to a mysql database 'BOE115'.
This server does have a mysql db running on it, but that db has no instance of BOE115.
It also shows it's trying to connect as a user that isn't on the database.
Where can I see the script with user/password that is trying to run and connect to the mysql db?
Also, why didn't the install create the instance and user?
Why did this work until I rebooted?
There is no firewall on this server, that has been disabled.
Thank you,
Oskar

Certificate error when Lync client login through VPN connection

Similar Messages

Maybe you are looking for