Lync 2013 IP Phone error getting web ticket

Hi,
I have been unable to get a Polycom CX500 phone working on our network (first IP phone), the phone connects but gets "an account matching this phone number cannot be found" I have run the DHCP commands through and everything looks OK and all options
appear to be configured.
I have run the powershell command to test phone connectivity and get the error message below, I have checked my phone pin and reset it and the number shows up correct in the dial in URL. When you go the web service in a browser you get prompted for credentials
but that is all I can see.
Web Service Url :
https://lync.mydomain.com:443/WebTicket/WebTicketService.svc
Using PIN authentication with Phone\Ext : 44166342 Pin : 211113
Could not get a web ticket
CHECK:
- Web service Url is valid and the web services are functional
- If using Phone Number\PIN to authenticate, make sure they match the user uri
- If using NTLM\Kerberos authentication, make sure you provided valid
credentials
'UnRegister' activity started.
'UnRegister' activity completed in '3.17E-05' seconds.
VERBOSE: Workflow Instance ID 'dbff2882-afb1-4379-9d3b-acb841485097' completed.
VERBOSE: Workflow run-time (sec): 1.3363675.
Any help would be greatly appreciated!
Thanks
James
PS, numbers and names above have been adjusted to protect the innocent!

Hi,
The snippet was from that above here is the full unabridged version...
Thanks
James
PS C:\Users\admin1> Test-CsPhoneBootstrap -PhoneOrExt "441122333231" -Pin "21255
3" -Verbose
VERBOSE: Workflow Instance Id 'dbff2882-afb1-4379-9d3b-acb841485097', started.
VERBOSE: Command line executed is 'Test-CsPhoneBootstrap -PhoneOrExt
"441122333231" -Pin "222333" -Verbose'.
Target Fqdn   : lyncpool1.mydomain.co.uk
Target Uri    : https://lync.mydomain.co.uk:443/CertProv/CertProvision
                ingService.svc
Result        : Failure
Latency       : 00:00:01.0580720
Error Message : Getting web ticket for the given user is failed. Error Code:
                28037 , Error Reason: The AppliesTo element of web ticket
                request points to a different web server or site.
Diagnosis     :
VERBOSE: Workflow
'Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow'
started.
Workflow
'Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow'
completed in '6.5E-05' seconds.
Target server Fqdn or web service Url not provided. Will have to do DHCP
Registrar Discovery.
An exception 'Getting web ticket for the given user is failed. Error Code:
28037 , Error Reason: The AppliesTo element of web ticket request points to a
different web server or site.' occurred during Workflow
Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow
execution.
Exception Call Stack:    at
Microsoft.Rtc.Admin.Authentication.WebServicesHelper.ProcessFaultMessage(Messag
eFault fault)
   at Microsoft.Rtc.Admin.Authentication.WebServicesHelper.GetWebTicket()
   at
Microsoft.Rtc.SyntheticTransactions.Activities.GetWebTicketActivity.InternalExe
cute(ActivityExecutionContext executionContext)
   at
Microsoft.Rtc.SyntheticTransactions.Activities.SyntheticTransactionsActivity.Ex
ecute(ActivityExecutionContext executionContext)
   at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity,
ActivityExecutionContext executionContext)
   at
System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRunti
me workflowCoreRuntime)
   at System.Workflow.Runtime.Scheduler.Run()
'DHCPDiscover' activity started.
Starting DHCP registrar discovery...
Constructing a DHCP packet.
Adding DHCP option PARAMETER_REQUEST_LIST.
Successfully added DHCP option.
Adding DHCP option VENDOR_CLASS_IDENTIFIER.
Successfully added DHCP option.
Successfully constructed DHCP packet.
Trying to open an udp connection.
Remote IP : 255.255.255.255.
Local IP : 192.168.100.64.
\tCreating a new UDP client.
Udp connection successfully created.
Sending packet.
Remote IP : 255.255.255.255.
Remote Port : 67.
Packet sent successfully.
DHCP discovery message send. Waiting for DHCP servers to respond.
Data received successfully.
Remote IP : 192.168.100.31.
Remote Port : 67.
Response received for the DHCP Discovery message.
Constructing a DHCP packet from received raw data.
Extracting DHCP Options.
Successfully constructed DHCP packet.
Return value for DHCP option : SIP_SERVER.
Found registrar Fqdn : lyncpool1.mydomain.co.uk.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.1.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.1 - MS-UC-Client.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.2.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.2 - https.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.3.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.3 -
lync.mydomain.co.uk.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.4.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.4 - 443.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.5.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.5 -
/CertProv/CertProvisioningService.svc.
Successfully extracted sub option value.
Found web service Url :
https://lync.mydomain.co.uk:443/CertProv/CertProvisioningService.svc.
Disconnecting.
DHCP registrar discovery activity completed successfully.
'DHCPDiscover' activity completed in '1.0455587' seconds.
'GetRootCertChains' activity started.
Trying to download a certificate chain from web service.
Web Service Url :
http://lync.mydomain.co.uk/CertProv/CertProvisioningService.svc
Certificate chain downloaded successfully.
'GetRootCertChains' activity completed in '0.0125133' seconds.
'GetWebTicket' activity started.
Trying to get web ticket.
Web Service Url :
https://lync.mydomain.co.uk:443/WebTicket/WebTicketService.svc
Using PIN authentication with Phone\Ext : 441122333231 Pin : 222333
Could not get a web ticket
CHECK:
- Web service Url is valid and the web services are functional
- If using Phone Number\PIN to authenticate, make sure they match the user uri
- If using NTLM\Kerberos authentication, make sure you provided valid
credentials
'UnRegister' activity started.
'UnRegister' activity completed in '3.17E-05' seconds.
VERBOSE: Workflow Instance ID 'dbff2882-afb1-4379-9d3b-acb841485097' completed.
VERBOSE: Workflow run-time (sec): 1.3363675.
PS C:\Users\admin1> Test-CsPhoneBootstrap -PhoneOrExt "441122333231" -Pin "21255
3" -Verbose
VERBOSE: Workflow Instance Id '5e3f5050-85fe-4d37-9801-a764a5375b89', started.
VERBOSE: Command line executed is 'Test-CsPhoneBootstrap -PhoneOrExt
"441122333231" -Pin "222333" -Verbose'.
Target Fqdn   : lyncpool1.mydomain.co.uk
Target Uri    : https://lync.mydomain.co.uk:443/CertProv/CertProvision
                ingService.svc
Result        : Failure
Latency       : 00:00:01.1911386
Error Message : Getting web ticket for the given user is failed. Error Code:
                28037 , Error Reason: The AppliesTo element of web ticket
                request points to a different web server or site.
Diagnosis     :
VERBOSE: Workflow
'Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow'
started.
Workflow
'Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow'
completed in '5.52E-05' seconds.
Target server Fqdn or web service Url not provided. Will have to do DHCP
Registrar Discovery.
An exception 'Getting web ticket for the given user is failed. Error Code:
28037 , Error Reason: The AppliesTo element of web ticket request points to a
different web server or site.' occurred during Workflow
Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow
execution.
Exception Call Stack:    at
Microsoft.Rtc.Admin.Authentication.WebServicesHelper.ProcessFaultMessage(Messag
eFault fault)
   at Microsoft.Rtc.Admin.Authentication.WebServicesHelper.GetWebTicket()
   at
Microsoft.Rtc.SyntheticTransactions.Activities.GetWebTicketActivity.InternalExe
cute(ActivityExecutionContext executionContext)
   at
Microsoft.Rtc.SyntheticTransactions.Activities.SyntheticTransactionsActivity.Ex
ecute(ActivityExecutionContext executionContext)
   at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity,
ActivityExecutionContext executionContext)
   at
System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRunti
me workflowCoreRuntime)
   at System.Workflow.Runtime.Scheduler.Run()
'DHCPDiscover' activity started.
Starting DHCP registrar discovery...
Constructing a DHCP packet.
Adding DHCP option PARAMETER_REQUEST_LIST.
Successfully added DHCP option.
Adding DHCP option VENDOR_CLASS_IDENTIFIER.
Successfully added DHCP option.
Successfully constructed DHCP packet.
Trying to open an udp connection.
Remote IP : 255.255.255.255.
Local IP : 192.168.100.64.
\tCreating a new UDP client.
Udp connection successfully created.
Sending packet.
Remote IP : 255.255.255.255.
Remote Port : 67.
Packet sent successfully.
DHCP discovery message send. Waiting for DHCP servers to respond.
Data received successfully.
Remote IP : 192.168.100.31.
Remote Port : 67.
Response received for the DHCP Discovery message.
Constructing a DHCP packet from received raw data.
Extracting DHCP Options.
Successfully constructed DHCP packet.
Return value for DHCP option : SIP_SERVER.
Found registrar Fqdn : lyncpool1.mydomain.co.uk.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.1.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.1 - MS-UC-Client.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.2.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.2 - https.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.3.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.3 -
lync.mydomain.co.uk.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.4.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.4 - 443.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.5.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.5 -
/CertProv/CertProvisioningService.svc.
Successfully extracted sub option value.
Found web service Url :
https://lync.mydomain.co.uk:443/CertProv/CertProvisioningService.svc.
Disconnecting.
DHCP registrar discovery activity completed successfully.
'DHCPDiscover' activity completed in '1.1765221' seconds.
'GetRootCertChains' activity started.
Trying to download a certificate chain from web service.
Web Service Url :
http://lync.mydomain.co.uk/CertProv/CertProvisioningService.svc
Certificate chain downloaded successfully.
'GetRootCertChains' activity completed in '0.0146165' seconds.
'GetWebTicket' activity started.
Trying to get web ticket.
Web Service Url :
https://lync.mydomain.co.uk:443/WebTicket/WebTicketService.svc
Using PIN authentication with Phone\Ext : 441122333231 Pin : 222333
Could not get a web ticket
CHECK:
- Web service Url is valid and the web services are functional
- If using Phone Number\PIN to authenticate, make sure they match the user uri
- If using NTLM\Kerberos authentication, make sure you provided valid
credentials
'UnRegister' activity started.
'UnRegister' activity completed in '2.5E-05' seconds.
VERBOSE: Workflow Instance ID '5e3f5050-85fe-4d37-9801-a764a5375b89' completed.
VERBOSE: Workflow run-time (sec): 1.6982607.
PS C:\Users\admin1>

Similar Messages

LYNC 2013 control panel error: this page cannot be displayed

Dear sir,
Now i am suffering with the lync 2013 control panel problem, i cannot open it and got the error "This page can't be displayed" as below screenshot shows,
I've tried some ways, but still same problem
1. Reflush the dns, checked the A record and SRV record of the FE are normally.
2. checked the IIS and also cannot find any problem.
3, reboot the FE server/IIS, and AD.
4. i can open the console page normally via web :https://localhost/cscp
5. i can ping the FE server domain name and return the right IP info.

Hi TECH-Tommy,
The certificate is under “Personal” store.
In addition, can you open the page via
https://admin.domain.com ?
Also please try to clear IE cache and treat the FQDNs for admin, pool or FE server name as trusted zone.
Best regards,
Eric
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Lync 2013 Showing Phone Numbers which have been removed from AD

My Server is Lync 2013, Exchange is 2010 SP3. I'm also running 2012 Domain Controllers. The Lync 2013 install is migrated from 2010.
I have a myriad of users who have moved departments and thus have a new, or altered phone number, but for some reason the contact cards in all of my Lync 2010/2013 clients and Outlook 2010/2013 are showing phone numbers that no longer exist in Active
Directory.
If the Lync client is closed the Outlook Contact card does not show these "phantom" numbers:
But if the client is open the contact card has a number that doesn't exist in any field in Active Directory (I checked twice):
Suggestions? I have many users displaying phantom numbers in Contact Cards. My normalization rules are working correctly (no errors), and synchronization seems to be working as expected. I have also run debug-csaddressbookreplication with verifyreplication
on a problem user and it succeeds. I've also double-checked the attribute values and this phantom phone number does not exist.
Is it possible that the 2010 Contacts migrated from the old server contain these phantom entries, is there a way to clear this information out and start fresh if need be?
Thanks Kindly!

I actually found a bit of a solution without going to MS for support.
I haven't done this for all users yet, but I tested this solution on two users last week.
I removed the problem users from the Lync pool via the Lync console.
I then ran update-csaddressbook and waited the requisite time for a full address book sync to complete.
I then added the user back into the pool and ran another update-csaddressbook.
The contact details were refreshed and updated correctly. It appears that this was the only way to force-remove the legacy address and phone number information from the problem users I tested on as the problem users were added back in as a "new" user.
Hopefully this solution works for you too.

Lync 2013 Database Mismatch Error

Hi
We are experiencing the following error in Lync 2013 after migrating from 2010:
Microsoft Lync Server 2013, Master Replicator Agent successfully registered with the back-end, but a schema or sproc version mismatch was detected.
The service will not start until this problem is resolved.
Database version: Actual = 10.8, Expected = 10.13.
Cause: Installation error.
Resolution:
Ensure both Microsoft Lync Server 2013, Master Replicator Agent and back-end were installed or modified by the same installation package

Hi,
Have you moved the Lync Server 2010 Configuration Management Server to Lync Server 2013 successfully?
You could move the users back to Lync 2010 and reinstall database. You can refer to “Preparing Lync Server 2013 Front End Servers before moving the Central Management Server” in the following link:
http://technet.microsoft.com/en-us/library/jj688013.aspx
Kent Huang
TechNet Community Support

Lync 2013 commands shell to get the report which user is connecting to which pool in coexistence with Legacy version

HI,
We have LYNC 2013 in coexistence with OCS 2007 R2 and setup is like that user can connect to any pool either sip is exist on OCS 2007 or on LYNC 2013
Do we have any command shell to get the details about which user is connecting to which pool?
lync 2013 commands to get the report which user is connecting to legacy pool in coexistence with ocs 2007
Thanks
jitender

HI Holger,
Thanks for reply!!
But the above link will not work as per scenrio.
The SIP addresses has been migrated to LYNC server. ther is no user host on OCS server. However in communicator client the manual entry is done and OCS pool name is given. OCS pool just redirect the query to LYNC pool.
And we need to idenfy the SIP user request on OCS which are redirecting by ocs pool to lync pool
In other word we can say this question like: How to collect the number of SIP users connections coming on OCS Direct server?
Thanks
jitender
As all users are migrated to Lync Server, all users will be redirected to their home pool.
You want to collect the number of SIP connections coming from OCS server that means you want to count the number of Lync client with manual configuration pointing to OCS server.
This information is stored in SIP session. There is no Lync command to get this kind of information natively.
Lisa Zheng
TechNet Community Support

Sharepoint 2013 Publish ContentHub Error Metadata web service application proxy Metadata Service Application Proxy.

I'm trying to republish the content hub but getting mms errors. I checked the coorlation id but make no sense of it. Any help would be appreciated.

Hi,
According to your post, my understanding is that you failed to republish the content hub.
I recommend to execute the following PowerShell command to add all permissions needed:
Initialize-SPResourceSecurity
In addition, you can create a new managed metadata service application and also a new application pool account to check whether it works.
More information:
Troubleshooting “The Managed Metadata Service or Connection is currently not available in SharePoint
2013”
Upgrade Managed Metadata Service App
Migrate Managed Metadata Service to SharePoint 2013 error
Best Regards,
Linda Li
Linda Li
TechNet Community Support

Lync 2013 Sign in error

Hello
I installed lync server 2013, it installed well but when I am trying to sign in there occures error "the
server is temporarily unavailable, if the problem continues please contact your suport team"

Hi,
1. Please double check the ports between Lync Server and clients with the help of Kazzan provided above.
2. Please check the DNS setting, on Lync client side, you can login manually instead of automatically to check the DNS issue. Make sure you set the correct DNS records for login automatically in DNS Server with the help of the link below:
https://technet.microsoft.com/en-us/library/gg398758.aspx?f=255&MSPPError=-2147217396
Best Regards,
Eason Huang
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Eason Huang
TechNet Community Support

Lync 2013 Conferencing Phone Disconnecting Polycom CX5500 SIP/2.0 409 Conflict

Hi,
Its been a very embarassing and stressful day as we have had top executive conferences using this equipment and it keeps resetting. The CX5500 is plugged into a PC running the Microsoft Lync Client on it.
What is happening is this device is resetting by itself after using the conference equipment. After using snooper on the device I see that we get the following error.
03/04/2015|10:42:01.441 6E0:10B0 INFO :: Data Received -192.168.1.85:5061 (To Local Address: 192.168.1.69:50161) 2669 bytes:
03/04/2015|10:42:01.441 6E0:10B0 INFO ::
SIP/2.0 409 Conflict
Authentication-Info: TLS-DSK qop="auth", opaque="188E8831", srand="5C6DF4A8", snum="489", rspauth="8b0854c1f40fe7ab6189fbecd30abaac4e3add51", targetname="LYNC2013.company.com", realm="SIP Communications
Service", version=4
Content-Length: 1922
From: "Northbrook Conference Room"<sip:[email protected]>;tag=7191789454;epid=2c28cfd5fb
To: <sip:[email protected]>;tag=251341B5CFCCB289FF58501FF5A5F525
Call-ID: 513460c5cc8a447cb2f3a767fb26f8a9
CSeq: 1 SERVICE
Via: SIP/2.0/TLS 192.168.1.69:50161;ms-received-port=50161;ms-received-cid=FB55700
ms-diagnostics: 2044;reason="Publication version out of date";source="LYNC2013.company.com"
Content-Type: application/msrtc-fault+xml
Server: RTC/5.0
- <Fault>
<Faultcode>Client.BadCall.WrongDelta</Faultcode>
+ <details>
</Fault>
03/04/2015|10:42:01.441 6E0:10B0 INFO :: End of Data Received -192.168.1.85:5061 (To Local Address: 192.168.1.69:50161) 2669 bytes
After googling I didnt find much one person said to try updating the client software which we did another said reboot the CX to flush cache well we have to reboot every 20 minutes.

Hi pslager,
You can install the latest firmware for Lync released by Polycom.
http://support.polycom.com/PolycomService/support/us/support/voice/cx/cx5100.html
In addition, you said that “What is happening is this device is resetting by itself after using the conference equipment.”.
Do you mean it works properly without using the conference equipment ?
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability
of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best regards,
Eric
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Lync 2013 mobility / AV problem over web proxy

Hi,
We use Corporate Wi-fi network in our company and users going away to internet over web proxy. Lync mobility users use https connection to connect this corporate network but calling is unsuccesfull because of A/V ports can’t pass over web proxy,
Is there any solution for this ?
Mmst of hotels give internet conntection to their customers by web proxy thats why our users can’ t use their Mobile device for A/V call during at hotel. Because A/V media ports are blocked by hotels web proxy . How can we overcome this issue? Is
it posible to send all of the media traffic on HTTPS port?
Thanks in advance.
Bugra Keskin

Hi,
Did you deploy an Edge server in DMZ zone?
If the internal Lync clients are unable to negotiate media directly, then the clients will rely on the Edge Server to tunnel the media for them. The mobile client will connect to and send its media session to the external Edge interface.
More details:
http://blog.schertz.name/2013/11/lync-mobility-media-paths/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Lync 2013 invalid phone numbers contains missing entries

I've been looking over my invalid phone numbers log file and have found a lot of entries pertianing to users who no longer exist, as a bunch of items that look like SIDs but don't seem to map to anything. Has anyone else ever seen this type of thing?
Unmatched number: User: 'sip:[email protected]' AD Attribute: 'telephoneNumber' Number: '1234'
Unmatched number: User: '7ba854a8-14f0-41b7-bdc0-55b23b43705a' AD Attribute: 'homePhone' Number: '123-126-1234 x1234'
these are two such entries. the first is a user who has been gone for a couple of years, i'm not sure what the second is.

i'm pretty sure I've tried that as well, although I didn't check the event logs when i did either. I ran it, and came up with the following after running update-csuserdatabase. it came up twice
=============================================
Warning 4/21/2014 11:05:12 AM
LS User Replicator 30059
(1009)
The older user are getting synchronized as part of current synchronization cycle for naming context DC=<removed>,DC=<removed>
Source of replication is: LocalRegistrarReplication.
Resolution:
The issue should rectify itself in next synchronization cycle.
==============================================
Then i ran update-csaddressbook, and got the following, along with the notice that some numbers failed to normalize.
=================================================
Error 4/21/2014 11:12:27 AM
LS Address Book Server 21054
(1008)
Users are not indexed in the database that should be.
Expected indexed user count: 0
Actual indexed user count: 559
Cause: User replication issue.
Resolution:
Run Update-CsAddressBook to synchronize all accounts.
=================================================

Database out of memory error getting Web Intelligence prompts

The following code generates an exception for a particular web intelligence report object ID:
m_engines = (ReportEngines)m_entSession.getService("ReportEngines");
m_widocRepEngine = (ReportEngine)m_engines.getService(ReportEngines.ReportEngineType.WI_REPORT_ENGINE);
DocumentInstance doc = m_widocRepEngine.openDocument(id);
Prompts prompts = doc.getPrompts();
The exception is as follows:
A database error occurred. The database error text is: The system is out of memory. Use system side cursors for large result sets: Java heap space. Result set size: 31,207, 651. JVM total memory size: 66,650,112..(WIS 10901).
I can't understand how the result set could be over 31 million, or how to fix this. Any ideas?

So what happens in InfoView?
I ask since it doesn't appear to be a SDK coding issue.
Sincerely,
Ted Ueda

Lync 2013 WIndows phone Username with space

lync2013 windows phone version
if add external Skype contacts with space character "Alex Loddy"
in lync contact list show "Alex%20Loddy"
fix it please....

Hi,
Did the issue also happen for Lync Android or IOS client?
Did the issue happen only for you or for multiple users?
Please login on other Window Phone Lync client with your Lync account to check the issue.
Please also check if the version of Lync app on Windows Phone update to the latest version. If not, update it and then test the issue again.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Web-Ticket service returns: (500) Internal Server Error

I get Internal server errors when I try to get something from the server. This is what I get from the "Test-CSAddressBookService":
PS C:\Users\testuser> Test-CsAddressBookService -TargetFqdn wak-lync.testdomain.com -UserCredential testdomain\testuser -UserSipAddress "sip:[email protected]" -verbose
VERBOSE: Workflow Instance Id 42f8f454-5d02-48b2-8b8e-4ecaf6dba5e0, started.
Connecting to web service : https://wak-lync.testdomain.com:443/WebTicket/WebTicketService.svc
Using IWA authentication
Successfully created connection proxy and website bindings
Requesting new web ticket
Sending Web-Ticket Request: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
<s:Header>
<Action s:mustUnderstand="1" xmlns="http://schemas.microsoft.com/ws/2005/05/addressing/none">http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue</Action>
</s:Header>
<s:Body>
<RequestSecurityToken xmlns="http://docs.oasis-open.org/ws-sx/ws-trust/200512">
<TokenType>http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1</TokenType>
<RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</RequestType>
<AppliesTo xmlns="http://schemas.xmlsoap.org/ws/2004/09/policy">
<EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
<Address>https://wak-lync.testdomain.com/WebTicket/WebTicketService.svc</Address>
</EndpointReference>
</AppliesTo>
<Entropy>
<BinarySecret>BMLGyAK9H+6w1rrdFY+I2oSy39FMyfy86/WwJoTK0nE=</BinarySecret>
</Entropy>
<KeyType>http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey</KeyType>
</RequestSecurityToken>
</s:Body>
</s:Envelope>
ERROR communicating with GetWebTicket() service System.ServiceModel.ProtocolException: The content type text/html of the response message does not match the content type of the binding (text/xml; charset=utf-8). If using a custom encoder, be sure that the IsContentTypeSupported method is implemented properly. The first 1024 bytes of the response were:
'<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>500 - Internal server error.</title>
<style type="text/css">

</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
'. ---> System.Net.WebException: The remote server returned an error: (500) Internal Server Error.
at System.Net.HttpWebRequest.GetResponse()
at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
--- End of inner exception stack trace ---
Server stack trace:
at System.ServiceModel.Channels.HttpChannelUtilities.ValidateRequestReplyResponse(HttpWebRequest request, HttpWebResponse response, HttpChannelFactory factory, WebException responseException, ChannelBinding channelBinding)
at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.Rtc.Internal.WebTicketService.IWebTicketService.IssueToken(Message request)
at Microsoft.Rtc.SyntheticTransactions.WebServicesHelper.GetWebTicket()
TargetUri : https://wak-lync.testdomain.com:443/abs/handler
TargetFqdn : wak-lync.testdomain.com
Result : Failure
Latency : 00:00:00
Error : ERROR - No response received for Web-Ticket service.
Inner Exception:The content type text/html of the response message
does not match the content type of the binding (text/xml; charset
=utf-8). If using a custom encoder, be sure that the IsContentType
Supported method is implemented properly. The first 1024 bytes of
the response were: '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 S
trict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-88
59-1"/>
<title>500 - Internal server error.</title>
<style type="text/css">

</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
Inner Exception:The remote server returned an error: (500) Interna
l Server Error.
Diagnosis :
VERBOSE: 'Register' activity started.
Sending Registration request:
Target Fqdn = wak-lync.testdomain.com
User Sip Address = sip:[email protected]
Registrar Port = No Port is provided..
Auth Type 'IWA' is selected.
Registration Request hit against sip/WAK-LYNC.testdomain.com
'Register' activity completed in '0.3157031' secs.
'ReadUriFromInBandProvisioningDataActivity' activity started.
'ReadUriFromInBandProvisioningDataActivity' activity completed in '0.0002991' secs.
'UnRegisterActivity' activity started.
'UnRegisterActivity' activity completed in '0.0102002' secs.
'STActivity' activity started.
Trying to get web ticket.
Web Service url :
https://wak-lync.testdomain.com:443/WebTicket/WebTicketService.svc
Using NTLM\Kerb auth.
Could not get a web ticket
CHECK:
- Web service url is valid and the web services are functional
- If using PhoneNo\PIN to authenticate, make sure they match the user uri
- If using NTLM\Kerberos auth, make sure you provided valid credentials
An exception 'ERROR - No response received for Web-Ticket service.' occurred
during Workflow Microsoft.Rtc.SyntheticTransactions.Workflows.STAbsWorkflow
execution.
Exception Call Stack: at
Microsoft.Rtc.SyntheticTransactions.WebServicesHelper.GetWebTicket()
at
Microsoft.Rtc.SyntheticTransactions.Activities.GetWebTicketActivity.InternalExe
cute(ActivityExecutionContext executionContext)
at
Microsoft.Rtc.SyntheticTransactions.Activities.STActivity.Execute(ActivityExecu
tionContext executionContext)
at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity,
ActivityExecutionContext executionContext)
at System.Workflow.ComponentModel.CompositeActivityExecutor`1.Execute(T
activity, ActivityExecutionContext executionContext)
at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(Activity
activity, ActivityExecutionContext executionContext)
at
System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRunti
me workflowCoreRuntime)
at System.Workflow.Runtime.Scheduler.Run()
Server stack trace:
at
System.ServiceModel.Channels.HttpChannelUtilities.ValidateRequestReplyResponse(
HttpWebRequest request, HttpWebResponse response, HttpChannelFactory factory,
WebException responseException, ChannelBinding channelBinding)
at
System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelR
equest.WaitForReply(TimeSpan timeout)
at System.ServiceModel.Channels.RequestChannel.Request(Message message,
TimeSpan timeout)
at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message
message, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean
oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan
timeout)
at
System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessa
ge methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage
message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage
reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData&
msgData, Int32 type)
at
Microsoft.Rtc.Internal.WebTicketService.IWebTicketService.IssueToken(Message
request)
at Microsoft.Rtc.SyntheticTransactions.WebServicesHelper.GetWebTicket()
VERBOSE: Workflow Instance Id 42f8f454-5d02-48b2-8b8e-4ecaf6dba5e0, completed.
VERBOSE: Workflow Execution Time (sec): 0.481
When I look at the server I see the following in the log:
2012-07-10 15:02:09 10.128.1.16 POST /WebTicket/WebTicketService.svc - 443 TESTDOMAIN\g01 10.10.20.115 OC/4.0.7577.4098+(Microsoft+Lync+2010) 500 0 0 218
2012-07-10 15:02:09 10.128.1.16 POST /groupexpansion/service.svc - 443 TESTDOMAIN\g01 10.10.20.115 OC/4.0.7577.4098+(Microsoft+Lync+2010) 500 0 0 0
2012-07-10 15:02:12 10.128.1.16 POST /WebTicket/WebTicketService.svc/cert - 443 TESTDOMAIN\e01 10.10.30.105 OC/4.0.7577.0+(Microsoft+Lync+2010) 500 0 0 15
2012-07-10 15:02:12 10.128.1.16 POST /WebTicket/WebTicketService.svc - 443 TESTDOMAIN\e01 10.10.30.105 OC/4.0.7577.0+(Microsoft+Lync+2010) 500 0 0 0
2012-07-10 15:02:15 10.128.1.16 POST /WebTicket/WebTicketService.svc - 443 TESTDOMAIN\k01 10.10.20.59 OC/4.0.7577.4098+(Microsoft+Lync+2010) 500 0 0 46
2012-07-10 15:02:15 10.128.1.16 POST /groupexpansion/service.svc - 443 TESTDOMAIN\k01 10.10.20.59 OC/4.0.7577.4098+(Microsoft+Lync+2010) 500 0 0 202
2012-07-10 15:02:18 10.128.1.16 POST /WebTicket/WebTicketService.svc - 443 TESTDOMAIN\g02 10.10.11.53 OC/4.0.7577.0+(Microsoft+Lync+2010) 500 0 0 31
2012-07-10 15:02:18 10.128.1.16 POST /groupexpansion/service.svc - 443 TESTDOMAIN\g02 10.10.11.53 OC/4.0.7577.0+(Microsoft+Lync+2010) 500 0 0 202
2012-07-10 15:02:18 10.128.1.16 POST /WebTicket/WebTicketService.svc - 443 TESTDOMAIN\k01 10.10.20.59 OC/4.0.7577.4098+(Microsoft+Lync+2010) 500 0 0 46
2012-07-10 15:02:18 10.128.1.16 POST /groupexpansion/service.svc - 443 TESTDOMAIN\k01 10.10.20.59 OC/4.0.7577.4098+(Microsoft+Lync+2010) 500 0 0 218
So I see it is not only a address book issue, though it is the first visible hint you get about it. I also get the Password request window for "Retrieving Response Groups" after the log in.
I looked at similar issues, but what I found was mainly Kerberos issues, but that is not the case here, the user is able to access the folders.

Hi,
Try the way the following thread mentioned:
http://social.technet.microsoft.com/Forums/en-US/ocsaddressbook/thread/83106a88-7b38-49cc-b62d-52867a99bfd1
Regards,
Lisa

Lync 2013 Edge & Web proxy

Hi Everyone
I'm having a little trouble getting my head around the setup for Lync external access.
I have setup an ADFS server, Lync 2013 server(works internally), 2012 web proxy server(doing nothing) and an edge server(currently doing nothing).
My understanding is that the Edge and Web proxy server are in "parallel", I.E, they both face the WAN as they perform different tasks.
The problem I have is that I'm unsure how to map everything correctly, I also don't understand how an external Lync client will get it's config. If my domain setup is:
something.domain.internal, and I would like to register a DNS entry externally as something.domain.external. How do I map those correctly via the web proxy and edge server? Sending the request via the firewall is easy enough, however I'm unsure how I'm supposed
to define them on my servers. Is the Lync server supposed to know about the external URL? Or does it not care?

Hi,
The Edge Servers run the services that allow external access to IM and presence, conferencing, audio/video, and other media services. You can also configure the Edge Server to federate with other Lync Server and other XMPP deployments.
Lync Server uses the reverse proxy to publish a number of features, such as conferencing meetings, conference join locations, the address book, distribution list expansion, downloading meeting content, device updates, Mobility services, and more. Any reverse
proxy that can meet the requirements for publishing the necessary resource locations can be used.
You just need to define the Edge information in topology builder and publish it. Then configure the server as defined in topology and install local configuration store, setup Lync components and assign certificate. Here is a topology that
using private IP addresses and NAT.
http://technet.microsoft.com/en-us/library/gg399001.aspx
Here are other resource how to publish Lync Server web services
http://blogs.technet.com/b/dodeitte/archive/2013/10/29/how-to-publish-lync-server-2013-web-services-with-windows-server-2012-r2-web-application-proxy.aspx
https://social.technet.microsoft.com/wiki/contents/articles/9807.how-to-configure-forefront-tmg-2010-as-reverse-proxy-for-lync-server-2010.aspx
Kent Huang
TechNet Community Support

Lync 2013 Mobility continues to not work

Having issues getting mobility to work.
Simple environment:
Single server Edge pool
Single server EE pool
SQL clustered backend
All Lync 2013 CU1 at this point in time.
Potentially required reading:
Deploying Mobility (Technet)
Lync Mobility Deep dive
(based on 2010, but nearly the same in 2013)
http://masteringlync.com/2011/08/13/using-fiddler-to-troubleshoot-address-book-download-issues/
http://blogs.technet.com/b/nexthop/archive/2012/11/09/understanding-lync-server-autodiscover-to-support-the-lync-windows-store-app.aspx
Windows RT app uses the same method as IOS, and is more wiresharkable/tracable, so I am using that.
Client end errors:
Windows RT app (15.0.4481.1503) - this client version cannot log in.
iOS - Can't sign in. Please check your account information and try again.
I don't have a windows phone or android, so working with the clients I have. (I understand these also do not work)
Fiddler trace of Windows RT app session:
From the W3svc logs:
2013-03-20 03:53:17 1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user [email protected] 4443 - 75.122.79.199
LyncImm/15.0.4481.1503+(Microsoft+Lync) 401 0 0 35
LyncImm is
NOT a user agent listed in the CSCP - google "user agent" +lyncIMM turned up nothing. Dead lead?
Lync connectivity analyzer shows it repeats the same webticket 401 over and over with:
Cookie found in autodiscover response: StatusCode: 401, ReasonPhrase: 'Unauthorized', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
X-Ms-diagnostics: 28032;source="LyncFE.company.local";reason="The web ticket is invalid.";faultcode="wsse:InvalidSecurityToken"
X-MS-WebTicketURL:
https://lyncweb.company.com/WebTicket/WebTicketService.svc
X-MS-WebTicketSupported: cwt,saml
X-MS-Server-Fqdn: LyncFE.company.local
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Date: Wed, 20 Mar 2013 04:12:20 GMT
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 1293
Content-Type: text/html
LCA: from inside, choosing Windows App - success!
LCA: from inside, choosing Lync Mobile Apps- fail:
Failed to obtain the WS-Metadata Exchange (MEX) document using GET for
https://lyncweb.company.com/Mcx/McxService.svc/mex.
The service did not require authorization.
LCA, from outside, choosing Windows App - hangs repeatedly on the HTTPS external channel. (repeating 401's on webticket service)
LCA, from outside, choosing Choosing Lync Mobile apps - failed, same as from inside #2
Here's what the LCA failure looked like:
2013-03-20 04:59:12
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 134
2013-03-20 04:59:12
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 155
2013-03-20 04:59:12
1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user
[email protected] 4443 - 75.122.79.199 -
401 0 0 35
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 126
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 158
2013-03-20 04:59:13
1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user
[email protected] 4443 - 75.122.79.199 -
401 0 0 31
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 126
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 148
2013-03-20 04:59:13
1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user
[email protected] 4443 - 75.122.79.199 -
401 0 0 33
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 121
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 155
2013-03-20 04:59:13
1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user
[email protected] 4443 - 75.122.79.199 -
401 0 0 31
2013-03-20 04:59:15
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 125
2013-03-20 04:59:15
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 147
2013-03-20 04:59:15
1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user
[email protected] 4443 - 75.122.79.199 -
401 0 0 32
2013-03-20 04:59:15
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 120
2013-03-20 04:59:15
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 151
Similar thread:
http://social.technet.microsoft.com/Forums/en-US/ocsmobility/thread/96c3fc3a-2f80-435a-8368-1a83dcd56e55/
http://msdn.microsoft.com/en-us/library/ff595929%28v=office.12%29.aspx
IOS attempt at sign on (version 4.3.8000.0000)
IIS log files:
2013-03-20 04:26:08
1.2.3.4 GET / sipuri=sip:[email protected] 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 200 0 0 1382013-03-20 04:26:08
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 0 0 802013-03-20 04:26:08
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074254 1292013-03-20 04:26:08
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074252 882013-03-20 04:26:08
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074254 782013-03-20 04:26:08
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074252 882013-03-20 04:26:09
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074254 782013-03-20 04:26:09
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074252 84
IOS log file was too large to post in message.
Running test-cmdlets:
$passwd1 = ConvertTo-SecureString "supersecure" -AsPlainText -Force $passwd2 = ConvertTo-SecureString "notontheinternet" -AsPlainText -Force $tuc1 = New-Object Management.Automation.PSCredential("domain\user1",
$passwd1) $tuc2 = New-Object Management.Automation.PSCredential("domain\user2", $passwd2) Test-CsMcxP2PIM -TargetFqdn lyncfe.company.local -Authentication Negotiate -SenderSipAddress sip:[email protected] -SenderCredential $tuc1 -ReceiverSipAddress
sip:[email protected] -ReceiverCredential $tuc2 -v
From <http://technet.microsoft.com/en-us/library/hh690024.aspx>
Results:
Target Fqdn   : lyncfe.company.com
Target Uri    :
https://lyncfe.company.com:443/mcx
Result        : Failure
Latency       : 00:00:00
Error Message : No response received for Web-Ticket service.
                Inner Exception:The HTTP request is unauthorized with client
                authentication scheme 'Ntlm'. The authentication header
                received from the server was 'Negotiate,NTLM'.
                Inner Exception:The remote server returned an error: (401)
                Unauthorized.
Diagnosis     :
                Inner Diagnosis:X-MS-Server-Fqdn : lyncfe.company.com
                Cache-Control : private
                Content-Type : text/html; charset=utf-8
                Server : Microsoft-IIS/7.5
                WWW-Authenticate : Negotiate,NTLM
                X-Powered-By : ASP.NET
                X-Content-Type-Options : nosniff
                Date : Wed, 20 Mar 2013 04:39:44 GMT
                Content-Length : 6639
Verbose comments on it:
Trying to get web ticket.
Web Service Url :
https://lyncfe.company.com:443/WebTicket/WebTicketService.svc
Using NTLM\Kerberos authentication.
Could not get a web ticket
CHECK:
- Web service Url is valid and the web services are functional
- If using Phone Number\PIN to authenticate, make sure they match the user uri
- If using NTLM\Kerberos authentication, make sure you provided valid
credentials
URLs and ports all look OK, all services started.
Not using phone/PIN
I provided valid creds - the virtual directories show anon/NTLM for the Webticket vdir.
Any help is welcome - really want this issue put to bed!

I know this is an old thread, but I was struggling with the same error for mobility, and I hope this may help others in the same situation.
On my scenario the issue was caused because the customer didn't use any reverse-proxy solution, instead the FE external website was directly published using a FortiGate box.
Given that scenario, there were 2 different certs installed on the FE server, 1 (internal RootCA) certificate was applied to the internal website, and another one issued by Godaddy was assigned to the external website manually from IIS console.
---I know this is far from a supported solution, but I was able to get it working after some investigation---
To solve the issue I use this article:
http://technet.microsoft.com/en-us/library/jj205253.aspx it explains how to check and assign the certificates for oAuth and I used these cmdlets to specify the Godaddy cert to the "WebServiceExternal" & "OAuthTokenIssuer" websites.
After that the mobility access for internal and external users started to work as expected, I've validated it with "Lync Connectivity Analyzer" and with different mobile clients on Android, IOS and Windows Store.
Hope this information may be useful.
Performance, Security & Design

Lync 2013 IP Phone error getting web ticket

Similar Messages

Maybe you are looking for