Lync 2013 mobility / AV problem over web proxy

Hi,
We use Corporate Wi-fi network in our company and users going away to internet over web proxy. Lync mobility users use https connection to connect this corporate network but calling is unsuccesfull because of A/V ports can’t pass over web proxy,
Is there any solution for this ?
Mmst of hotels give internet conntection to their customers by web proxy thats why our users can’ t use their Mobile device for A/V call during at hotel. Because A/V media ports are blocked by hotels web proxy . How can we overcome this issue? Is
it posible to send all of the media traffic on HTTPS port?
Thanks in advance.
Bugra Keskin

Hi,
Did you deploy an Edge server in DMZ zone?
If the internal Lync clients are unable to negotiate media directly, then the clients will rely on the Edge Server to tunnel the media for them. The mobile client will connect to and send its media session to the external Edge interface.
More details:
http://blog.schertz.name/2013/11/lync-mobility-media-paths/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Similar Messages

Lync 2013 Mobility Issue

Hello,
I have a Lync 2013 server installed with CU1.
I can connect to it perfectly with the windows client and the mobile Lync 2010 client. However when i try to login to the server with the Lync 2013 mobile client, i get : "An error occured in Lync. Please retry. If the problem persists, contact your
support team."

Hi Barry,
i have fixed the certificate issue, now i get an xml file when going to the web address.
This XML file does not appear to have any style information associated with it. The document tree is shown below.
<resource xmlns="http://schemas.microsoft.com/rtc/2012/03/ucwa" rel="root" href="https://lync.'domain'.local/Autodiscover/AutodiscoverService.svc/root?originalDomain='domain'.com.au">
<link rel="user" href="https://lync.'domain'.com.au/Autodiscover/AutodiscoverService.svc/root/oauth/user?originalDomain='domain'.com.au"/>
<link rel="xframe" href="https://lync.'domain'.com.au/Autodiscover/XFrame/XFrame.html"/>
</resource>

Lync 2013 Mobility Upgrade

Hi,
Im currently upgrading Lync 2010 to 2013.
Is it possible to coexist Lync 2010 Mobility Users with Lync 2013 Mobility users?
I realise that the 2010 users will still need to use the 2010 client and the 2013 users use the 2013 client. Is it true mobility does not actually use edge and just uses the Reverse Proxy?
Any help greatly appreciated.

Each Lync Front End pool has it's own unique Lync external web services url. You can point Lyncdiscover.domain.com to either 2010 or 2013, but the response will redirect the mobile client to the correct external web services FQDN for their homed pool.
Please mark posts as answers/helpful if it answers your question.
Blog
Lync Validator - Used to assist in the validation and documentation of Lync Server 2013.

Lync 2013 Mobile unable to login from wifi

Dear All,
Many thanks in advance.
My Lync 2013 mobile client is unable to login via internal network.
I have tried to provide external web directory and lyncdiscover by giving way through internal leg of reverseproxy(TMG).
I think I'm missing something from the basic. Will appreciate your reply. :)

You are not missing something basic, this is a real issue with using Lync mobile while on internal corpnet. A known feature (issue) with Lync mobile is that has to connect to the external web services. So when internal it will hairpin out your FW and connect
to the web services:
http://technet.microsoft.com/en-us/library/hh690030.aspx
Some more info:
http://blog.schertz.name/2013/07/understanding-lync-2013-mobility/
A lot of Firewalls do not allow this sort of "hairpinning".
Thom Foreman, MCSE, MCSA, MCTS

Lync 2013 mobile client can't see all fields in contact card

We have deployed Lync 2013 infra in our organization, now we observed, mobile Lync client users are not able to see other users mobile number on contact card rest all information is visible.
Is there any workaround or fix to resolve this issue. Appreciate quick help.

That's effectively by design (but a popular complaint). The workaround is to put the users who's mobile numbers you need in your Outlook contact list. There's another workaround related to setting the privacy relationship, but you have to coordinate
it with many people which is not too feasible.
Here are others upset about it:
http://ammarhasayen.com/2013/09/25/lync-2013-mobile-contact-card-not-showing-mobile-number/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Voice problems with Lync 2013 Mobile

Hi
I have a situation where Lync 2013 on both iPhone & Android has started giving problems with making and receiving voice calls. There are no problems with Windows, Mac or Phone Edition clients that I'm aware of. I have not tested anything over the VPN,
but this should not be a factor.
For receiving calls - If the user is connected to the LAN via Wi-Fi AND the call is from an internal user, all works fine. If the call is from an external user OR the user is connected via 3G, then the call just shows "Connecting" indefinitely.
This includes transferred calls.
For making calls - If the user is connected to the LAN via Wi-FI and calls either an internal or external users, all works fine. If the user is connected via 3G and calls either an internal or external user, the phone rings, but when it's answered it shows
call ended.
I have ran RUCT on a computer outside the network, with the following findings:
DNS:
Record
Type
Hostname
IP Address
Port
Weight
Priority
_sip._tls.domain.com
SRV
sip.domain.com
Edge External IP
443
100
0
sip.domain.com
A
sip.domain.com
Edge External IP
sipexternal.domain.com
A
sipexternal.domain.com
Edge External IP
meet.domain.com
A
meet.domain.com
<null>
_ntp._udp.domain.com
SRV
pool.ntp.org
NTP Server IP
123
100
0
_sipfederationtls._tcp.domain.com
SRV
sip.domain.com
Edge External IP
5061
100
0
lyncdiscover.domain.com
A
sip.domain.com
Edge External IP
lyncdiscover.domain.com
CNAME
sip.domain.com
I have ran Test Port on each entry where there is a port with successful results. Ping works on all entries.
If I query Certificate Information on sip.domain.com with port 5061 or 444, it succeeds and returns the certificate with subject sip.domain.com. If I query 443, it fails with error "An error occurred while retrieving the certificate. Unable to read
data from the transport connection: An existing connection was forcibly closed by the remote host."
On Microsoft Remote Connectivity Analyzer, all tests pass except for the certificate test:
The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server sip.domain.com on port 443
The Microsoft Connectivity Analyzer wasn't able to obtain the remote SSL certificate.
Running netstat on Lync Edge gives me the following with regards to port 443:
TCP <Internal IP>:443 Lync2:0 LISTENING
TCP <External IP>:443 Lync2:0 LISTENING
Firewall allows connections on port 443 and I've tried disabling the firewall as well. Trying to open https://sip.domain.com in the browser on the Lync Edge fails also, telnet succeeds, but no data is returned.
I've restarted the AV service and also rebooted the Lync Edge server, no change. In the topology builder, I can see that AV is configured to listen on port 443.
Any ideas would be most welcome.
Regards
Lionel
MCP Windows Server MCTS .NET

I have ran a large amount of additional tests. On my latest round of testing, I have obtained the following results:
Call received via PSTN gateway on user DID, answered by desktop client inside LAN - works.
Call received via PSTN gateway on response group, answered by desktop client inside LAN - works.
Call received via PSTN gateway on user DID, answered by desktop client outside LAN (behind NAT, DSL router) - works.
Call received via PSTN gateway on response group, answered by desktop client outside LAN (behind NAT, DSL router) - works.
Call received via PSTN gateway on user DID, answered by mobile client inside LAN - does not work.
Call received via PSTN gateway on response group, answered by mobile client inside LAN - does not work.
Call received via PSTN gateway on user DID, answered by mobile client outside LAN (behind NAT, DSL router) - works.
Call received via PSTN gateway on response group, answered by mobile client outside LAN (behind NAT, DSL router) - works.
Call received via PSTN gateway on user DID, answered by mobile client outside LAN (3G) - does not work.
Call received via PSTN gateway on response group, answered by mobile client outside LAN (3G) - does not work.
Call received via PSTN gateway on user DID, answered by desktop client inside LAN and transferred to mobile client inside LAN - does not work.
Call received via PSTN gateway on response group, answered by desktop client inside LAN and transferred to mobile client inside LAN - does not work.
Call received via PSTN gateway on user DID, answered by desktop client inside LAN and transferred to mobile client outside LAN (behind NAT, DSL router) - works.
Call received via PSTN gateway on response group, answered by desktop client inside LAN and transferred to mobile client outside LAN (behind NAT, DSL router) - works.
Call received via PSTN gateway on user DID, answered by desktop client inside LAN and transferred to mobile client outside LAN (3G) - does not work.
Call received via PSTN gateway on response group, answered by desktop client inside LAN and transferred to mobile client outside LAN (3G) - does not work.
Call made through PSTN gateway from desktop client inside LAN - works.
Call made through PSTN gateway from desktop client outside LAN (behind NAT, DSL router) - works.
Call made through PSTN gateway from mobile client inside LAN - does not work.
Call made through PSTN gateway from mobile client outside LAN (behind NAT, DSL router) - works.
Call made through PSTN gateway from mobile client outside LAN (3G) - does not work.
Call from desktop client inside LAN to desktop or mobile client (regardless of location) - works.
Call from desktop or mobile client (regardless of location) to desktop client inside LAN - works.
Call from desktop or mobile client (regardless of location) to desktop or mobile client (regardless of location) - works.
There is no difference in behaviour between normal calls and conference calls. Reproducing the problem seems to require the following:
1. PSTN gateway needs to be involved
2. One party needs to be on mobile client
3. The mobile client needs to be inside the LAN or on a 3G connection, but not behind NAT on a DSL connection
The only conclusion I can make is that somehow NAT makes the problem go away, but it does not affect desktop clients (on the LAN or Wi-Fi at least, I do not have a way to test them on 3G).
The PSTN gateway (Cisco UCM) could also be the problem, but it works fine in all other cases. It has 4 trunks and makes all kinds of routing decisions, but once a call is routed to/from Lync, it should not make a difference on what type of device it is answered.
I'm really baffled by this one. Perhaps the 3G thing is a service provider issue and the issue on the LAN has something to do with the internal DNS combined with the behaviour of the mobile client. Just not sure exactly what.
MCP Windows Server MCTS .NET

Lync 2013 Mobility continues to not work

Having issues getting mobility to work.
Simple environment:
Single server Edge pool
Single server EE pool
SQL clustered backend
All Lync 2013 CU1 at this point in time.
Potentially required reading:
Deploying Mobility (Technet)
Lync Mobility Deep dive
(based on 2010, but nearly the same in 2013)
http://masteringlync.com/2011/08/13/using-fiddler-to-troubleshoot-address-book-download-issues/
http://blogs.technet.com/b/nexthop/archive/2012/11/09/understanding-lync-server-autodiscover-to-support-the-lync-windows-store-app.aspx
Windows RT app uses the same method as IOS, and is more wiresharkable/tracable, so I am using that.
Client end errors:
Windows RT app (15.0.4481.1503) - this client version cannot log in.
iOS - Can't sign in. Please check your account information and try again.
I don't have a windows phone or android, so working with the clients I have. (I understand these also do not work)
Fiddler trace of Windows RT app session:
From the W3svc logs:
2013-03-20 03:53:17 1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user [email protected] 4443 - 75.122.79.199
LyncImm/15.0.4481.1503+(Microsoft+Lync) 401 0 0 35
LyncImm is
NOT a user agent listed in the CSCP - google "user agent" +lyncIMM turned up nothing. Dead lead?
Lync connectivity analyzer shows it repeats the same webticket 401 over and over with:
Cookie found in autodiscover response: StatusCode: 401, ReasonPhrase: 'Unauthorized', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
X-Ms-diagnostics: 28032;source="LyncFE.company.local";reason="The web ticket is invalid.";faultcode="wsse:InvalidSecurityToken"
X-MS-WebTicketURL:
https://lyncweb.company.com/WebTicket/WebTicketService.svc
X-MS-WebTicketSupported: cwt,saml
X-MS-Server-Fqdn: LyncFE.company.local
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Date: Wed, 20 Mar 2013 04:12:20 GMT
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 1293
Content-Type: text/html
LCA: from inside, choosing Windows App - success!
LCA: from inside, choosing Lync Mobile Apps- fail:
Failed to obtain the WS-Metadata Exchange (MEX) document using GET for
https://lyncweb.company.com/Mcx/McxService.svc/mex.
The service did not require authorization.
LCA, from outside, choosing Windows App - hangs repeatedly on the HTTPS external channel. (repeating 401's on webticket service)
LCA, from outside, choosing Choosing Lync Mobile apps - failed, same as from inside #2
Here's what the LCA failure looked like:
2013-03-20 04:59:12
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 134
2013-03-20 04:59:12
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 155
2013-03-20 04:59:12
1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user
[email protected] 4443 - 75.122.79.199 -
401 0 0 35
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 126
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 158
2013-03-20 04:59:13
1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user
[email protected] 4443 - 75.122.79.199 -
401 0 0 31
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 126
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 148
2013-03-20 04:59:13
1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user
[email protected] 4443 - 75.122.79.199 -
401 0 0 33
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 121
2013-03-20 04:59:13
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 155
2013-03-20 04:59:13
1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user
[email protected] 4443 - 75.122.79.199 -
401 0 0 31
2013-03-20 04:59:15
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 125
2013-03-20 04:59:15
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 147
2013-03-20 04:59:15
1.2.3.4 GET /Autodiscover/AutodiscoverService.svc/root/user
[email protected] 4443 - 75.122.79.199 -
401 0 0 32
2013-03-20 04:59:15
1.2.3.4 POST /WebTicket/WebTicketService.svc/mex - 4443 - 75.122.79.199 - 200 0
0 120
2013-03-20 04:59:15
1.2.3.4 POST /WebTicket/WebTicketService.svc/Auth - 4443 - 75.122.79.199 - 200
0 0 151
Similar thread:
http://social.technet.microsoft.com/Forums/en-US/ocsmobility/thread/96c3fc3a-2f80-435a-8368-1a83dcd56e55/
http://msdn.microsoft.com/en-us/library/ff595929%28v=office.12%29.aspx
IOS attempt at sign on (version 4.3.8000.0000)
IIS log files:
2013-03-20 04:26:08
1.2.3.4 GET / sipuri=sip:[email protected] 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 200 0 0 1382013-03-20 04:26:08
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 0 0 802013-03-20 04:26:08
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074254 1292013-03-20 04:26:08
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074252 882013-03-20 04:26:08
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074254 782013-03-20 04:26:08
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074252 882013-03-20 04:26:09
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074254 782013-03-20 04:26:09
1.2.3.4 POST /webticket/webticketservice.svc - 4443 - 166.137.151.211
Lync%202010/1.6+CFNetwork/609.1.4+Darwin/13.0.0 401 1 2148074252 84
IOS log file was too large to post in message.
Running test-cmdlets:
$passwd1 = ConvertTo-SecureString "supersecure" -AsPlainText -Force $passwd2 = ConvertTo-SecureString "notontheinternet" -AsPlainText -Force $tuc1 = New-Object Management.Automation.PSCredential("domain\user1",
$passwd1) $tuc2 = New-Object Management.Automation.PSCredential("domain\user2", $passwd2) Test-CsMcxP2PIM -TargetFqdn lyncfe.company.local -Authentication Negotiate -SenderSipAddress sip:[email protected] -SenderCredential $tuc1 -ReceiverSipAddress
sip:[email protected] -ReceiverCredential $tuc2 -v
From <http://technet.microsoft.com/en-us/library/hh690024.aspx>
Results:
Target Fqdn   : lyncfe.company.com
Target Uri    :
https://lyncfe.company.com:443/mcx
Result        : Failure
Latency       : 00:00:00
Error Message : No response received for Web-Ticket service.
                Inner Exception:The HTTP request is unauthorized with client
                authentication scheme 'Ntlm'. The authentication header
                received from the server was 'Negotiate,NTLM'.
                Inner Exception:The remote server returned an error: (401)
                Unauthorized.
Diagnosis     :
                Inner Diagnosis:X-MS-Server-Fqdn : lyncfe.company.com
                Cache-Control : private
                Content-Type : text/html; charset=utf-8
                Server : Microsoft-IIS/7.5
                WWW-Authenticate : Negotiate,NTLM
                X-Powered-By : ASP.NET
                X-Content-Type-Options : nosniff
                Date : Wed, 20 Mar 2013 04:39:44 GMT
                Content-Length : 6639
Verbose comments on it:
Trying to get web ticket.
Web Service Url :
https://lyncfe.company.com:443/WebTicket/WebTicketService.svc
Using NTLM\Kerberos authentication.
Could not get a web ticket
CHECK:
- Web service Url is valid and the web services are functional
- If using Phone Number\PIN to authenticate, make sure they match the user uri
- If using NTLM\Kerberos authentication, make sure you provided valid
credentials
URLs and ports all look OK, all services started.
Not using phone/PIN
I provided valid creds - the virtual directories show anon/NTLM for the Webticket vdir.
Any help is welcome - really want this issue put to bed!

I know this is an old thread, but I was struggling with the same error for mobility, and I hope this may help others in the same situation.
On my scenario the issue was caused because the customer didn't use any reverse-proxy solution, instead the FE external website was directly published using a FortiGate box.
Given that scenario, there were 2 different certs installed on the FE server, 1 (internal RootCA) certificate was applied to the internal website, and another one issued by Godaddy was assigned to the external website manually from IIS console.
---I know this is far from a supported solution, but I was able to get it working after some investigation---
To solve the issue I use this article:
http://technet.microsoft.com/en-us/library/jj205253.aspx it explains how to check and assign the certificates for oAuth and I used these cmdlets to specify the Godaddy cert to the "WebServiceExternal" & "OAuthTokenIssuer" websites.
After that the mobility access for internal and external users started to work as expected, I've validated it with "Lync Connectivity Analyzer" and with different mobile clients on Android, IOS and Windows Store.
Hope this information may be useful.
Performance, Security & Design

Lync 2013 Mobility Client - Video Call Issue (Everything Else works).

Hey Technet’ies,
I have been struggling for a couple of weeks now to resolve one of the final issues with a Migration/Upgrade Project on Lync Server 2013.
I have nearly every Lync Client Scenario working well except the Mobility Client (outside of the domain) which cannot successfully complete a Video
Call to a Windows Desktop Client (inside the domain) – the toast pops up, but when we click accept - it just times out after 15 seconds
K
The strange thing is every other Video Call scenario works;
Mobility Client (Outside Domain)
àWindows Desktop Client (Inside Domain)
= Unsuccessful
Mobility Client (Inside Domain)
à Windows Desktop Client (Inside Domain) = Successful
Mobility Client (Inside Domain)
à Windows Desktop Client (Outside Domain) = Successful
Mobility Client (Outside Domain)
à Windows Desktop Client (Outside Domain) = Successful
Mobility Client (Inside Domain)
à Mac Desktop Client (Inside Domain) = Successful
Mobility Client (Inside Domain)
à Mac Desktop Client (Outside Domain) = Successful
Mobility Client (Outside Domain)
à Mac Desktop Client (Outside Domain) = Successful
Mobility Client (Outside Domain)
à Mac Desktop Client (Inside Domain) = Successful
Mobility Client (All Scenarios)
à Mobility Client (All Scenarios) = Successful
Our setup is pretty standard;
All OS servers are Win Server 2012 R2
Lync 2013 Standard FE Server
Lync 2013 Edge Server
Reverse Proxy IIS AAR (Also Win Server 20012 R2)
Lync 2013 Desktop Clients, Lync 2011 Mac Clients, IOS and Android Mobility Clients – all latest versions.
External NAT (via Cisco Routers ACL’s)
Internal Windows Firewall Currently off on all Servers
All Certs / DNS Configured as per Technet Recommendation
I have reviewed / analysed a number of log/trace files – looking for some/any information on the problem;
Mobility Client (cmlogX.log)
Windows Desktop Client (*.etl) / Microsoft Message Analyzer
Lync 2013 Server (CSController)
With all my looking I could not make out an error except a timeout (15 seconds) on the Mobility Client log (which I currently can’t find).
Clearly we are missing something and I have gone up and down our implementation a number of times, the only semi-unknown is our old 2010 Pool / Central Management Server (which is currently pretty much redundant but the majority of users still on).
I would really appreciate any feedback anyone can provide or any insight anyone may have on this challenge.
Thanks in advance, Alex.
Alex

Hi Andrew,
Thanks for the quick contact!!
Sorry - typo in my post, I have now corrected it;
Mobility
Client (Outside Domain) àWindows
Desktop Client (Inside Domain) = Unsuccessful
So I completely missed that blog post of yours (out of the 100's I have read) and you are the first person to clearly say (in simple terms) to point the lyncweb.contso.com to the public IP address on my internal DNS, I have just made that change and see
if it will correct the issue - will wait for replication.
Also I am running IIS / AAR as Reverse Proxy (not ISA) and had the Internal DNS Host A of lyncweb.contso.com and lyncdiscover.contso.com point back to my Reverse Proxy Internal NIC (i.e. 10.1.1.32) as the External NIC is isolated on in the Perimeter Network,
is this correct?
So it now goes like this
*Inside Domain*
lyncdiscover.contson.com --> 10.1.1.32 (Reverse Proxy Internal Nic) --> 10.1.1.26 (Front End Server)
lyncweb.contson.com --> 201.183.0.1 (Reverse Proxy External Nic - Public IP) --> 10.1.2.16 (Reverse Proxy External Nic) --> 10.1.1.26 (Front End Server)
Does this make any sense, I know ISA and IIS/AAR are pretty much interchangeable.
Thanks again Andrew and look forward to any feedback,
Alex.
Alex

Lync 2013 mobile sign in error

I try sign in to Lync in my Windows Phone, and get error - Check my password. My password correct. For diagnose I enable "Failed Request Tracing Rules" on IIS on Lync 2013 Server and view only one warning from DirectoryListingModule - HttpStatus
403 Forbidden. I try reinstall web components on Server but no relult. How I can fix this?
If I create file "C:\Program Files\Microsoft Lync Server 2013\Web Components\External Website\default.aspx", I view blank page for
https://lyncdiscover.mydomain.com
If I enable Directory Browsing for Lync Server External Web Site, I view folder content for
https://lyncdiscover.mydomain.com and in "Failed Request Tracing Logs" I see OCSAuthModule - HttpStatus 401 Unauthorized

Hi,
The error message indicate the client is having an issue authenticating with Lync Server 2013. Please double check that Authentication Delegation is verified on the reverse proxy publishing rule configuration.
Client may authenticate directly. If the reverse proxy publishing rules are set to No delegate and client cannot authenticate directly, it fails to sign-in when it reaches the step to provide credentials to request a token after MEX retrieval.
More details you can refer to the link below, it is for Lync server 2010 but similar for Lync server 2013:
http://blogs.technet.com/b/nexthop/archive/2012/02/21/troubleshooting-external-lync-mobility-connectivity-issues-step-by-step.aspx
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Lync 2013 Mobility not working

Dear All,
I have Lync 2013 Server running in my environment. Below are the details,
1) We have one Lync FrontEnd server as well as one Lync Edge Server installed in Egypt Site & one Lync FrontEnd server as well as one Lync Edge Server installed in Dubai Site in a Single domain.
Users who are in Egypt site pool are able to login through Lync Mobility but unfortunately users in Dubai Site pool are unable to login through Lync mobility.
Anyone help would be highly appreciated.
Thanks & Regards,
Zeeshan Butt

Hi Zeeshan Butt,
You can try to test in the internal network in site Dubai.
If a user in site Dubai login with mobile externally, the user will connect to the Reverse Proxy. The autodiscover service on Egypt site will search the user information about which pool he belongs and return the right
external Web service URL of that pool. Then the user will connect to the right pool (Site Dubai) through the Reverse Proxy belongs of Site Dubai.
You can use Lync Connectivity Analyzer to check if the correct URL of web services have been returned from autodiscover service:
http://blogs.technet.com/b/nexthop/archive/2013/02/08/the-new-lync-connectivity-analyzer.aspx
Please also try to login mobile manually to have a test:
https://<ExtPoolFQDN>/Autodiscover/autodiscoverservice.svc/Root for external access
https://<IntPoolFQDN>/AutoDiscover/AutoDiscover.svc/Root for internal access
Note: the ExtPoolFQDN is the External web FQDN of Site Dubai.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Lync 2013 Mobile Client

have a test Lync 2013 onprem installation, everything works fine both from inside and outside, however the Lync Client for iphone does not function as supposed. I checked debug logs on all servers and see nothing that could cause the behaviour. The strange
thing is that for example IM is actually working, the problem is that it disconnects on every action.
So, the test scenario is as following
- User 1 is logged on Lync Client on Windows 7 - LAN
- User 2 is logged on on Lync Mobile on Iphone - public internet
User 1 sees presence of User 2
User 1 sends IM message to User 2 - no errors
User 2 successfully recieves the message - gets an error "Failed to process the server respons" and appears offline
User 2 signs out of Lync Mobile and signs back In- no errors
User 2 sends IM message back to User 1 - gets an error "Failed to process the server respons" and appears offline
User 1 recieves the IM message - no error
Any glues anyone? Where to look? I used debugging tools (S4 and SIPStack) both on Edge and FE and found nothing strange
Thanks in advance
Emin

Hi,
Which kind of Reverse Proxy did you use (TMG or IIS ARR)?
Did the issue only happen to you or for multiple users?
Did the issue only happen for IPhone or for all kind of mobile clients (IOS, Android, Windows Phone)?
If the issue happen only for you, please try to use another mobile and test the issue again.
If the issue happen for multiple users, and only happen for IOS client, try to update to the latest version for Lync IOS client and test again.
If the issue happen for multiple users, and happen for all kind of mobile platforms, double check the configuration of Reverse Proxy ( certificate, port).
For WP8 root certificates need to have HTTP URLs in the CRL (Certificate Revocation List). If root certs doesn’t contain these CRL attributes than the certificate won’t be accepted by WP8 and sign in would fail.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Lync 2013 for Android problem

Hi,
We've got a problem with Lync 2013 client for andriod unable to connect to our on prem Lync 2013 deployment.
Windows Phone clients can connect without any problems, Lync diagnostic tool doesn't throw any significant errors, PC clients are working fine as well. Below you will find part of a connection log from Lync 2013 client on one of our android phones:
-19 00:50:24.198 4048 4048 I LyncPerformance: PerfBegin|2-12:Signin - Started|1413672624207
10-19 00:50:24.358 4048 4048 I LYNC    : INFO APPLICATION .\capplication.cpp/1824:Initialized the sign in BRB logger
10-19 00:50:24.358 4048 4048 I LYNC    : INFO APPLICATION .\cucwaappsession.cpp/975:CUcwaAppSession canceling all requests
10-19 00:50:24.368 4048 4048 I LYNC    : INFO UTILITIES .\cbasepersistablecomponent.cpp/230:Storing 7 out-of-sync components took 7ms
10-19 00:50:24.368 4048 4048 I LYNC    : INFO APPLICATION .\cucwaautodiscoveryserviceretrialwrapper.cpp/566:Timer cancelled. OnResume = 0
10-19 00:50:24.368 4048 4048 I LYNC    : INFO APPLICATION .\calertreporter.cpp/117:Alert cleared of Category 1, Type 201, cleared 0 alerts
10-19 00:50:24.368 4048 4048 I LYNC    : INFO APPLICATION .\cucwaautodiscoveryserviceretrialwrapper.cpp/566:Timer cancelled. OnResume = 0
10-19 00:50:24.368 4048 4048 I AndroidOperationQueue: CancelSync Started
10-19 00:50:24.368 4048 4048 I AndroidOperationQueue: No operations pending
10-19 00:50:24.368 4048 4048 I LYNC    : INFO APPLICATION .\capplication.cpp/934:CApplication::serialize() called
10-19 00:50:24.368 4048 4048 V LYNC    : VERBOSE APPLICATION .\ccredentialstore.cpp/137:storing credentials for service:1
10-19 00:50:24.558 4048 4048 I LYNC    : INFO APPLICATION .\cbasepersistableentity.cpp/179:Storing 2 out-of-sync Object Models took 195ms
10-19 00:50:24.598 4048 4048 I AndroidOperationQueue: CancelSync Started
10-19 00:50:24.598 4048 4048 I AndroidOperationQueue: No operations pending
10-19 00:50:24.608 4048 4048 I LYNC    : INFO APPLICATION .\cbasepersistableentity.cpp/179:Storing 4 out-of-sync Object Models took 7ms
10-19 00:50:24.628 4048 4048 I LYNC    : INFO APPLICATION .\cbasepersistableentity.cpp/179:Storing 0 out-of-sync Object Models took 0ms
10-19 00:50:24.628 4048 4048 I LYNC    : INFO APPLICATION .\ccertificateprovisioningservice.cpp/541:Clearing certificate from transport: 37c7c324-637d-4991-9eb3-0ff64460f41c
10-19 00:50:24.628 4048 4048 I LYNC    : INFO TRANSPORT .\chttprequestprocessor.cpp/134:Clearing request processor for component MetaDataManager on sign-out.
10-19 00:50:24.628 4048 4048 I LYNC    : INFO APPLICATION .\capplication.cpp/897:Impersonalized the Object Model
10-19 00:50:24.638 4048 4048 I LYNC    : INFO APPLICATION .\cconfiguration.cpp/1279:CConfiguration::deserialize() called
10-19 00:50:24.638 4048 4048 I LYNC    : INFO APPLICATION .\cucwaappsession.cpp/434:SignIn. signInAsUserState=2, actualState=0
10-19 00:50:24.638 4048 4048 I LYNC    : INFO APPLICATION .\cucwaappsession.cpp/1234:Updating URLs. For Ucwa: discoveredFqdn=, applicationsRelativeUrl=, configuredInternal=https://lyncdiscover.domain.com, configuredExternal=https://lyncdiscover.domain.com,
loc=0, auto-discovery=0
10-19 00:50:24.638 4048 4048 I LYNC    : INFO APPLICATION .\cucwaappsession.cpp/975:CUcwaAppSession canceling all requests
10-19 00:50:24.638 4048 4048 I LYNC    : INFO APPLICATION .\cucwaappsession.cpp/674:Sending AutoDiscovery request (in sign-in sequence)
10-19 00:50:24.638 4048 4048 I LYNC    : INFO APPLICATION .\cucwaautodiscoveryserviceretrialwrapper.cpp/566:Timer cancelled. OnResume = 0
10-19 00:50:24.638 4048 4048 I LYNC    : INFO APPLICATION .\calertreporter.cpp/117:Alert cleared of Category 1, Type 201, cleared 0 alerts
10-19 00:50:24.638 4048 4048 I LYNC    : INFO APPLICATION .\cucwaautodiscoveryservice.cpp/2142:suspensionState = 2
10-19 00:50:24.638 4048 4048 I LYNC    : INFO APPLICATION .\cucwaautodiscoveryservice.cpp/2118:adIsEnabled = 0, sipUri = sip:[email protected], m_internalADUrlInput = https://lyncdiscover.domain.comm_externalADUrlInput = https://lyncdiscover.domain.com
10-19 00:50:24.638 4048 4048 I LYNC    : INFO APPLICATION .\cucwaautodiscoveryservice.cpp/1017:Discover UCWA urls from https://lyncdiscover.domain.com & https://lyncdiscover.domain.com for sip:[email protected]
10-19 00:50:24.638 4048 4048 I LYNC    : INFO TRANSPORT .\transportutilityfunctions.cpp/491:Extracted domain.com from sip:[email protected]
10-19 00:50:24.638 4048 4048 I LYNC    : INFO APPLICATION .\cucwaautodiscoveryservice.cpp/1121:Starting Auto Discovery with urls https://lyncdiscover.domain.com?sipuri=sip:[email protected] and https://lyncdiscover.domain.com?sipuri=sip:[email protected]
10-19 00:50:24.638 4048 4048 V HttpConnection: get native 1378331608 httpCallback com.microsoft.office.lync.platform.HttpConnectionNativeCallback$1@412f39c0
10-19 00:50:24.648 4048 4048 I LYNC    : INFO TRANSPORT .\ccredentialmanager.cpp/176:getSpecificCredential for serviceId(4) returning: credType (1) signInName () domain () username () password.empty() (1) certificate.isValid() (0)
privateKey.empty() (1) compatibleServiceIds(4)
10-19 00:50:24.648 4048 4048 I HttpConnection: originalurl is https://lyncdiscover.domain.com?sipuri=sip:[email protected] method Get
10-19 00:50:24.648 4048 4048 I HttpConnection: decodedurl is https://lyncdiscover.domain.com?sipuri=sip:[email protected]
10-19 00:50:24.648 4048 4048 I LYNC    : INFO TRANSPORT .\transportutilityfunctions.cpp/634:<SentRequest>
10-19 00:50:24.648 4048 4048 I LYNC    : GET https://lyncdiscover.domain.com?sipuri=sip:[email protected]
10-19 00:50:24.648 4048 4048 I LYNC    : Request Id: 0x52134210
10-19 00:50:24.648 4048 4048 I LYNC    : HttpHeader:Accept application/vnd.microsoft.rtc.autodiscover+xml;v=1
10-19 00:50:24.648 4048 4048 I LYNC    :
10-19 00:50:24.648 4048 4048 I LYNC    :
10-19 00:50:24.648 4048 4048 I LYNC    : </SentRequest>
10-19 00:50:24.648 4048 4048 V HttpConnection: post request: https://lyncdiscover.domain.com?sipuri=sip:[email protected]
10-19 00:50:24.648 4048 4202 V HttpConnection: send request: https://lyncdiscover.domain.com?sipuri=sip:[email protected]
10-19 00:50:24.648 4048 4202 I HttpEngine: AutoRedirect true for https://lyncdiscover.domain.com?sipuri=sip:[email protected] and setting it to FALSE for manual handling
10-19 00:50:24.648 4048 4202 V HttpEngine: Executing request with https://lyncdiscover.domain.com?sipuri=sip:[email protected] Connection pool count is 1
10-19 00:50:24.648 4048 4048 I LYNC    : INFO APPLICATION .\ctransportrequestretrialqueue.cpp/385:Submitting new req. GET-UnauthenticatedRootGetRequest(0x52134210)
10-19 00:50:24.648 4048 4048 I LYNC    : INFO APPLICATION .\cucwaautodiscoveryservice.cpp/1171:Submitting Unauthenticated AutoDiscovery request to https://lyncdiscover.domain.com?sipuri=sip:[email protected]
10-19 00:50:24.648 4048 4048 I LYNC    : INFO TRANSPORT .\transportutilityfunctions.cpp/491:Extracted domain.com from sip:[email protected]
10-19 00:50:24.648 4048 4048 I LYNC    : INFO APPLICATION .\cucwaappsession.cpp/998:CUcwaAppSession::setNewActualState() state=1
10-19 00:50:24.658 4048 4048 I LYNC    : INFO APPLICATION .\capplication.cpp/1858:CUcwaAppSession::signIn() succeeded
10-19 00:50:24.678 4048 4048 W LocaleUtil: locale = en_US
10-19 00:50:24.678 4048 4048 W LocaleUtil: scriptSubtag = Latn
10-19 00:50:24.688 4048 4048 W LocaleUtil: locale = en_US
10-19 00:50:24.688 4048 4048 W LocaleUtil: scriptSubtag = Latn
10-19 00:50:24.818 4048 4048 W LocaleUtil: locale = en_US
10-19 00:50:24.818 4048 4048 W LocaleUtil: scriptSubtag = Latn
10-19 00:50:24.828 4048 4048 W LocaleUtil: locale = en_US
10-19 00:50:24.828 4048 4048 W LocaleUtil: scriptSubtag = Latn
10-19 00:50:24.878 4048 4202 D HttpEngine: Resolved addr : localhost
10-19 00:50:24.888 4048 4202 E HttpConnection: java.lang.NullPointerException
10-19 00:50:24.888 4048 4202 E HttpConnection:    at com.microsoft.office.lync.platform.HttpEngine$DelegateSocketFactory.verifyHostname(HttpEngine.java:663)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at com.microsoft.office.lync.platform.HttpEngine$DelegateSocketFactory.createSocket(HttpEngine.java:623)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:165)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:360)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at com.microsoft.office.lync.platform.HttpEngine.execute(HttpEngine.java:391)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at com.microsoft.office.lync.platform.HttpConnection$1.run(HttpConnection.java:227)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:442)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:305)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at java.util.concurrent.FutureTask.run(FutureTask.java:137)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1076)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:569)
10-19 00:50:24.888 4048 4202 E HttpConnection:    at java.lang.Thread.run(Thread.java:856)
10-19 00:50:24.888 4048 4202 V HttpConnection: got Response: https://lyncdiscover.domain.com?sipuri=sip:[email protected] statusCode: 0 callback com.microsoft.office.lync.platform.HttpConnectionNativeCallback$1@412f39c0
10-19 00:50:24.978 4048 4048 I UcClientStateManager: New UI State: ActualState = IsSigningIn DesiredState = BeSignedIn DataAvailable = false New state=class com.microsoft.office.lync.ui.login.SigningInActivity
10-19 00:50:25.098 4048 4048 V LyncActivity: finish being called for com.microsoft.office.lync.ui.login.SigninActivity
10-19 00:50:25.108 4048 4048 I LYNC    : INFO APPLICATION .\cewsattachmentmanager.cpp/196:Scheduling cleanup run in 86400sec
10-19 00:50:25.108 4048 4048 I LYNC    : INFO TRANSPORT .\ccredentialmanager.cpp/176:getSpecificCredential for serviceId(1) returning: credType (1) signInName ([email protected]) domain (corp) username (test) password.empty() (0) certificate.isValid()
(0) privateKey.empty() (1) compatibleServiceIds(1)
10-19 00:50:25.108 4048 4048 V HttpConnectionNativeCallback: exception java.lang.NullPointerException statusCode 0
10-19 00:50:25.108 4048 4048 E LYNC    : ERROR TRANSPORT .\chttpconnection.cpp/226:CHttpConnection exception: java.lang.NullPointerException
10-19 00:50:25.108 4048 4048 I LYNC    : INFO TRANSPORT .\chttprequestprocessor.cpp/173:Received response of request(UcwaAutoDiscoveryRequest) with status = 0x22020001
10-19 00:50:25.108 4048 4048 I LYNC    : INFO TRANSPORT .\chttprequestprocessor.cpp/201:Request UcwaAutoDiscoveryRequest resulted in E_ConnectionError (E2-2-1). The retry counter is: 0
10-19 00:50:25.108 4048 4048 V HttpConnection: get native 1370056832 httpCallback com.microsoft.office.lync.platform.HttpConnectionNativeCallback$1@41299c88
10-19 00:50:25.108 4048 4048 I LYNC    : INFO TRANSPORT .\ccredentialmanager.cpp/176:getSpecificCredential for serviceId(4) returning: credType (1) signInName () domain () username () password.empty() (1) certificate.isValid() (0)
privateKey.empty() (1) compatibleServiceIds(4)
10-19 00:50:25.108 4048 4048 I HttpConnection: originalurl is https://lyncdiscover.domain.com?sipuri=sip:[email protected] method Get
10-19 00:50:25.108 4048 4048 I HttpConnection: decodedurl is https://lyncdiscover.domain.com?sipuri=sip:[email protected]
10-19 00:50:25.108 4048 4048 I LYNC    : INFO TRANSPORT .\transportutilityfunctions.cpp/634:<SentRequest>
10-19 00:50:25.108 4048 4048 I LYNC    : GET https://lyncdiscover.domain.com?sipuri=sip:[email protected]
10-19 00:50:25.108 4048 4048 I LYNC    : Request Id: 0x52134210
10-19 00:50:25.108 4048 4048 I LYNC    : HttpHeader:Accept application/vnd.microsoft.rtc.autodiscover+xml;v=1
10-19 00:50:25.108 4048 4048 I LYNC    :
10-19 00:50:25.108 4048 4048 I LYNC    :
10-19 00:50:25.108 4048 4048 I LYNC    : </SentRequest>
10-19 00:50:25.108 4048 4048 V HttpConnection: post request: https://lyncdiscover.domain.com?sipuri=sip:[email protected]
10-19 00:50:25.108 4048 4198 V HttpConnection: send request: https://lyncdiscover.domain.com?sipuri=sip:[email protected]
10-19 00:50:25.108 4048 4198 I HttpEngine: AutoRedirect true for https://lyncdiscover.domain.com?sipuri=sip:[email protected] and setting it to FALSE for manual handling
10-19 00:50:25.108 4048 4198 V HttpEngine: Executing request with https://lyncdiscover.domain.com?sipuri=sip:[email protected] Connection pool count is 1
10-19 00:50:25.178 4048 4051 D dalvikvm: GC_CONCURRENT freed 313K, 10% free 7311K/8071K, paused 8ms+6ms, total 46ms
10-19 00:50:25.368 4048 4198 D HttpEngine: Resolved addr : localhost
10-19 00:50:25.368 4048 4198 E HttpConnection: java.lang.NullPointerException
10-19 00:50:25.368 4048 4198 E HttpConnection:    at com.microsoft.office.lync.platform.HttpEngine$DelegateSocketFactory.verifyHostname(HttpEngine.java:663)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at com.microsoft.office.lync.platform.HttpEngine$DelegateSocketFactory.createSocket(HttpEngine.java:623)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:165)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:360)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at com.microsoft.office.lync.platform.HttpEngine.execute(HttpEngine.java:391)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at com.microsoft.office.lync.platform.HttpConnection$1.run(HttpConnection.java:227)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:442)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:305)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at java.util.concurrent.FutureTask.run(FutureTask.java:137)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1076)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:569)
10-19 00:50:25.368 4048 4198 E HttpConnection:    at java.lang.Thread.run(Thread.java:856)
10-19 00:50:25.368 4048 4198 V HttpConnection: got Response: https://lyncdiscover.domain.com?sipuri=sip:[email protected] statusCode: 0 callback com.microsoft.office.lync.platform.HttpConnectionNativeCallback$1@41299c88
10-19 00:50:25.398 4048 4048 D SigninActivity: onPause()
10-19 00:50:25.438 4048 4048 V HttpConnectionNativeCallback: exception java.lang.NullPointerException statusCode 0
10-19 00:50:25.438 4048 4048 E LYNC    : ERROR TRANSPORT .\chttpconnection.cpp/226:CHttpConnection exception: java.lang.NullPointerException
10-19 00:50:25.438 4048 4048 I LYNC    : INFO TRANSPORT .\chttprequestprocessor.cpp/173:Received response of request(UcwaAutoDiscoveryRequest) with status = 0x22020001
10-19 00:50:25.438 4048 4048 I LYNC    : INFO TRANSPORT .\chttprequestprocessor.cpp/201:Request UcwaAutoDiscoveryRequest resulted in E_ConnectionError (E2-2-1). The retry counter is: 1
10-19 00:50:25.438 4048 4048 I LYNC    : INFO TRANSPORT .\chttprequestprocessor.cpp/266:Sending event to main thread for request(0x52134210)
10-19 00:50:25.448 4048 4048 I loadLabel: ComponentInfo.java loadLabel
10-19 00:50:25.448 4048 4048 I loadLabel: ComponentInfo packageName iscom.microsoft.office.lync15
10-19 00:50:25.448 4048 4048 D SigningInActivity: onCreate()
10-19 00:50:25.448 4048 4048 V ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.login.SigningInActivity
10-19 00:50:25.458 4048 4048 W AccessibilityViewFactory: Failed to find class for view RelativeLayout
10-19 00:50:25.478 4048 4048 D SigningInActivity: onStart()
10-19 00:50:25.478 4048 4048 V ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.login.SigningInActivity
10-19 00:50:25.478 4048 4048 D SigningInActivity: onResume()
10-19 00:50:25.508 4048 4048 I LYNC    : INFO APPLICATION .\ctransportrequestretrialqueue.cpp/822:Req. completed, Stopping timer.
10-19 00:50:25.508 4048 4048 I LYNC    : INFO APPLICATION .\cucwaautodiscoveryservice.cpp/1305:Received autodiscovery response with status E_ConnectionError (E2-2-1)
10-19 00:50:25.508 4048 4048 I LYNC    : INFO APPLICATION .\cucwaautodiscoveryservice.cpp/1319:Ignoring request of type 1 as current state is 8
10-19 00:50:25.508 4048 4048 I LYNC    : INFO APPLICATION .\cucwaautodiscoveryservice.cpp/1321:Request url was https://lyncdiscover.domain.com?sipuri=sip:[email protected]
10-19 00:50:25.508 4048 4048 I LYNC    : INFO APPLICATION .\ctransportrequestretrialqueue.cpp/725:Response received for req. GET-UnauthenticatedRootGetRequest(0x52134210): E_ConnectionError (E2-2-1) (RemoteNetworkTemporaryError);
Done with req.; Stopping resend timer
10-19 00:50:26.178 4048 4048 D SigninActivity: onStop()
10-19 00:50:26.178 4048 4048 V ActivityMonitor: Activity Stop: com.microsoft.office.lync.ui.login.SigninActivity
10-19 00:50:26.178 4048 4048 D SigninActivity: onDestroy()
10-19 00:50:26.178 4048 4048 V ActivityMonitor: Activity Destroy: com.microsoft.office.lync.ui.login.SigninActivity
10-19 00:50:37.878 4048 4048 I Choreographer: Skipped 73 frames! The application may be doing too much work on its main thread.
Any help would be greatly appreciated.
Best,
Marcin

Hi,
Server is up to date and accessible from ALL clients apart of Android one.
Reflashed phone with latest Android 4, reinstalled Lync 2013 and at first login attempt I got (with server autodiscover ON):
11-06 16:37:44.699 2387 2387 V HttpConnection: post request: https://lyncdiscover.domain.com/?sipuri=sip:[email protected]
11-06 16:37:44.699 2387 2484 V HttpConnection: send request: https://lyncdiscover.domain.com/?sipuri=sip:[email protected]
11-06 16:37:44.699 2387 2484 V HttpEngine: Executing request with https://lyncdiscover.domain.com/?sipuri=sip:[email protected] Connection pool count is 1
11-06 16:37:44.729 2387 2387 I LYNC : INFO APPLICATION .\cucwaautodiscoverygetuserurloperation.cpp/393:CUcwaAutoDiscoverGetUserUrlOperation::onEvent received. Status = E_ClientVersionBlocked (E2-3-30), url = http://lyncdiscover.domain.com/
11-06 16:37:44.729 2387 2387 I LYNC : INFO APPLICATION .\cucwaautodiscoverygetuserurloperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation completed with url = http://lyncdiscover.domain.com/?sipuri=sip:[email protected], userUrl = , status = E_ClientVersionBlocked (E2-3-30)
11-06 16:37:44.889 2387 2484 D HttpEngine: Resolved addr : localhost
11-06 16:37:44.929 2387 2484 E HttpConnection: java.lang.NullPointerException
11-06 16:37:44.929 2387 2484 E HttpConnection: at com.microsoft.office.lync.platform.HttpEngine$DelegateSocketFactory.verifyHostname(HttpEngine.java:663)
11-06 16:37:44.929 2387 2484 E HttpConnection: at com.microsoft.office.lync.platform.HttpEngine$DelegateSocketFactory.createSocket(HttpEngine.java:623)
11-06 16:37:44.929 2387 2484 E HttpConnection: at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:165)
11-06 16:37:44.929 2387 2484 E HttpConnection: at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164)
11-06 16:37:44.929 2387 2484 E HttpConnection: at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119)
11-06 16:37:44.929 2387 2484 E HttpConnection: at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:360)
11-06 16:37:44.929 2387 2484 E HttpConnection: at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
11-06 16:37:44.929 2387 2484 E HttpConnection: at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
11-06 16:37:44.929 2387 2484 E HttpConnection: at com.microsoft.office.lync.platform.HttpEngine.execute(HttpEngine.java:391)
11-06 16:37:44.929 2387 2484 E HttpConnection: at com.microsoft.office.lync.platform.HttpConnection$1.run(HttpConnection.java:227)
11-06 16:37:44.929 2387 2484 E HttpConnection: at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:442)
11-06 16:37:44.929 2387 2484 E HttpConnection: at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:305)
11-06 16:37:44.929 2387 2484 E HttpConnection: at java.util.concurrent.FutureTask.run(FutureTask.java:137)
11-06 16:37:44.929 2387 2484 E HttpConnection: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1076)
11-06 16:37:44.929 2387 2484 E HttpConnection: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:569)
11-06 16:37:44.929 2387 2484 E HttpConnection: at java.lang.Thread.run(Thread.java:856)
11-06 16:37:44.929 2387 2484 V HttpConnection: got Response: https://lyncdiscover.domain.com/?sipuri=sip:[email protected] statusCode: 0 callback com.microsoft.office.lync.platform.HttpConnectionNativeCallback$1@42613ed8
11-06 16:37:45.219 2387 2387 V HttpConnectionNativeCallback: exception java.lang.NullPointerException statusCode 0
11-06 16:37:45.219 2387 2387 E LYNC : ERROR TRANSPORT .\chttpconnection.cpp/226:CHttpConnection exception: java.lang.NullPointerException
11-06 16:37:45.219 2387 2387 I LYNC : INFO TRANSPORT .\chttprequestprocessor.cpp/173:Received response of request(UcwaAutoDiscoveryRequest) with status = 0x22020001
11-06 16:37:45.219 2387 2387 I LYNC : INFO TRANSPORT .\chttprequestprocessor.cpp/201:Request UcwaAutoDiscoveryRequest resulted in E_ConnectionError (E2-2-1). The retry counter is: 1
11-06 16:37:45.219 2387 2387 I LYNC : INFO TRANSPORT .\chttprequestprocessor.cpp/266:Sending event to main thread for request(0x51d45b00)
11-06 16:37:45.239 2387 2388 D dalvikvm: GC_CONCURRENT freed 335K, 7% free 7367K/7879K, paused 32ms+263ms, total 343ms
11-06 16:37:45.249 2387 2387 I LYNC : INFO APPLICATION .\ctransportrequestretrialqueue.cpp/822:Req. completed, Stopping timer.
11-06 16:37:45.249 2387 2387 E LYNC : ERROR APPLICATION .\cucwaautodiscoverygetuserurloperation.cpp/325:Request failed. Error - E_ConnectionError (E2-2-1)
11-06 16:37:45.249 2387 2387 I LYNC : INFO APPLICATION .\cucwaautodiscoverygetuserurloperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation completed with url = https://lyncdiscover.domain.com/?sipuri=sip:[email protected], userUrl = , status = E_ConnectionError (E2-2-1)
11-06 16:37:45.249 2387 2387 I LYNC : INFO APPLICATION .\ctransportrequestretrialqueue.cpp/725:Response received for req. GET-UnAuthenticatedGet(0x51d45b00): E_ConnectionError (E2-2-1) (RemoteNetworkTemporaryError); Done with req.; Stopping resend timer
11-06 16:37:45.269 2387 2387 I LYNC : INFO APPLICATION .\cucwaautodiscoveryservice.cpp/1263:Raising Autodiscovery event with status E_ConnectionError (E2-2-1) for eventType 0
11-06 16:37:45.269 2387 2387 I LYNC : INFO APPLICATION .\cucwaautodiscoveryserviceretrialwrapper.cpp/417:Received event for type 0 with status E_ConnectionError (E2-2-1)
11-06 16:37:45.269 2387 2387 I LYNC : INFO APPLICATION .\cucwaautodiscoveryserviceretrialwrapper.cpp/539:Autodiscovery scheduled retrial timer. Timer 0.000000 seconds
11-06 16:37:45.269 2387 2387 I LYNC : INFO APPLICATION .\calertreporter.cpp/64:Alert received! Category 1, Type 201, level 0, error E_ConnectionError (E2-2-1), context '', hasAction=false
11-06 16:37:45.269 2387 2387 I LYNC : INFO APPLICATION .\calertreporter.cpp/117:Alert cleared of Category 1, Type 201, cleared 0 alerts
11-06 16:37:45.269 2387 2387 D AlertItemSource: AlertEvent: action=Add, category=CategoryApplication, type=AutoDiscoveryAlert, errorCode=E_ConnectionError, hasAction=false, isGlobal=false
What's quite strange opening https://lyncdiscover.domain.com/?sipuri=sip:[email protected] in normal browser (IE or Firefox) gives me:
<resource rel="root" href="https://lync1.domain.com/Autodiscover/AutodiscoverService.svc/root?originalDomain=domain.com">
<link rel="user" href="https://lync1.domain.com/Autodiscover/AutodiscoverService.svc/root/oauth/user?originalDomain=domain.com"/>
<link rel="xframe" href="https://lync1.domain.com/Autodiscover/XFrame/XFrame.html"/></resource>
which is correct by the look of it. Lync Connectivity Analyzer for Mobile Lync 2013 Client doesn't indicate any problems apart of inaccessible http://lyncdiscover.domain.com part (it's not redirected - we are using only https traffic):
[06/11/2014 17:13:21] [SUCCESS] Successfully created the UCWA service
[06/11/2014 17:13:21] [SUMMARY] Completed tests for Mobility (UCWA) service
[06/11/2014 17:13:21] [DEBUG] None, AutoInternalDNSFail, AutoInternalSecureD, AutoInternalUnsecureD, AutoExternalUnsecureD, ManualDNSFail, ManualSecureD, ManualUnsecureD, AuthBrokerInternalLMXCheckGET, AuthBrokerInternalLMXCheckPOST, AuthBrokerExternalLMXCheckGET, AuthBrokerExternalLMXCheckPOST, MobilityMCXInternalLMXCheckGET, MobilityMCXInternalLMXCheckPOST, MobilityMCXExternalLMXCheckGET, MobilityMCXExternalLMXCheckPOST, LMXSIPServerInternalDNS, LMXSIPServerExternalDNS, MobilityUCWAInternalCheckPOST
[06/11/2014 17:13:21] [SUMMARY]
[06/11/2014 17:13:21] [SUMMARY_SUCCESS]
Your deployment meets the minimum requirements for Lync Mobile 2013 App.
Any help would be greatly appreciated.
Best,
Marcin

OCS to Lync 2013, move all users over before client deployed?

Hello, quick question hoping someone can answer...
We've deployed Lync 2013 and are migrating about 2000 users from OCS across many branch offices, going branch-by-branch.
Is there any downside to moving ALL 2000 users over to the Lync pool before they have the Lync client deployed to their site? They would still be using Communicator until their site receives the Lync install. I know Communicator works when connecting to
the Lync pool so I'm guessing this should be OK.
The problem we're seeing during this transition phase is when an employee travels to a site that's had Lync client deployed but the employee is still on the Communicator pool because their primary site hasn't been upgraded yet, and are thus unable to sign-in
to Lync.

I would agree with Anthony,
The basic features works with the Communicator clients but when it comes to conferencing users will face a lot of problems, also a problem as been identified during such scenario is when users homed on the lync pool and signing in using the OC client
experience a weird behavior when their contact lists disappear, then it appears again when logging using a lync client.
as a resume.
If you are obliged to use the OC client please make sure that it is patched with the latest updated released.
as a best practice move to Lync client as soon as possible.
Regards,
Charbel Hanna
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread

Lync 2013 Mobility - Works for Android, not iOS

Here's the situation I am facing right now.
I have installed Lync 2013 for a client and have everything working finally but have hit a roadblock that I just can't seem to overcome.
The environment is this:
1 Lync 2013 Standard Edition Server (Front End)
1 Lync 2013 Persistent Chat Server
1 Lync 2013 Edge Server
1 Reverse Proxy Server
Like I said everything looks like it's working, save one thing. Clients using iPhones can't connect to the service but Android devices can. That's the only thing.
Here is a log snippet from my test device:
POST https://lync.mydomain.org/webticket/webticketservice.svc
Request Id: 0x70b5f68
HttpHeader:Content-Length 1293
HttpHeader:Content-Type text/html
HttpHeader:Date Wed, 18 Dec 2013 17:40:32 GMT
HttpHeader:Server Microsoft-IIS/7.5
HttpHeader:StatusCode 401
HttpHeader:Www-Authenticate Negotiate, NTLM, Basic realm="lync.mydomain.org"
HttpHeader:X-Powered-By ASP.NET
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>401 - Unauthorized: Access is denied due to invalid credentials.</title>
<style type="text/css">

</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
<h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
</fieldset></div>
</div>
</body>
</html>
</ReceivedResponse>
Everything looks like it's going good until it gets there and then at the bottom of the log I see this:
2013-12-18 11:40:47.602 Lync[7237:907] is not a valid email address.
This user has no problems signing on to his computer or Lync there. Also, I can sign on to an Android device with his account.
If anyone has an idea on this I welcome it. Please help.

Hi Okrobpr,
Did you solved the issue with the help of Michael provided?
Basically the IOS clients do not support the basic NTLM Authentication method while Windows Phone and Android clients do. So you can check the UseWindowsAuth option is true running the command in Lync Server Management Shell:
Get-CsWebServiceConfiguration
If it shows NTLM you can run the command:
Set-CsWebServiceConfiguration –UseWindowsAuth Negotiate
Get-CsWebServiceConfiguration to make it to be Negotiate.
Please also make sure you have updated to the latest version for Lync Server and clients.
You can check if there are any errors in event viewer of FE server.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Lync 2013 Mobile client on Windows phone

Hello All,
I am configuring Lync 2013 client and lync 2013 server.
When i try to sign in on Windows Mobile, it does not sign in. Log file also empty.
I uses IIS ARR as RP. Is there any way to see logs on IIS ARR ?
regards

Hi,
Did the issue happen only for you or for multiple users?
You can login manually in your Windows Lync client:
https://<ExtPoolFQDN>/Autodiscover/autodiscoverservice.svc/Root for external access
https://<IntPoolFQDN>/AutoDiscover/AutoDiscover.svc/Root for internal access
You can check Reverse Proxy (IIS ARR) with the help of the link below:
http://blogs.technet.com/b/nexthop/archive/2013/02/19/using-iis-arr-as-a-reverse-proxy-for-lync-server-2013.aspx
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Lync 2013 mobility / AV problem over web proxy

Similar Messages

Maybe you are looking for