Lync 2013 Topology Publication Failed!

Scenario
Lync Enterprise Edition!
Windows Server 2012R2 - LyncServer 2013
WIndows Server 2008R2 - Sql 2008 R2 Failover Cluster (Multiple Database and Instances Created) 5 Others Application Database also
Created which has been used.
DNS Entries
HOst Name :
LYNCFE.consoto.com
Pool.consoto.com (Host Name Created Same IP as Lync Frontend Server)
dialin.consoto.com
meet.consoto.com
admin.consoto.com
DBLYNC.consoto.com
Virtual Instant Name of Sql Database and Instance name : DBLYNC\Lynccore
Permission Rights:
I am using the Administrator account for Lync 2013 Installation.
Domain Administrator Account Member to CSAdministrator group and RTC Universal Server admin group.
SQL sysadmin Account member Sqladmin and Domain administrator User.
ShareFolder-Lyncshare on Storage.consoto.com
Permission:
Everyone
Read-write
RTCComponentUniversalServices Read-write
RTCHSUniversalServices Read-write
RTCUniversalServerAdmins Read-write
RTCUniversalConfigReplicator Read-write
Virtual Computer Name DBLYNC$
Full control
Issue : I have create one topology and try to publish but getting error.Log Detail Below
Feature: CentralMgmtStore
SQL Instance: domain-name.com\lynccore
Collocated: False
Found "RTCUniversalServerAdmins": True
Found "RTCUniversalConfigReplicator": True
Found "RTCUniversalReadOnlyAdmins": True
TaskFailed: Task execution failed.
Error:The network name cannot be found.
▼ Details
└ Type: IOException
└ ▼ Stack Trace
└ at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.Directory.InternalCreateDirectory(String fullPath, String path, Object dirSecurityObj, Boolean checkHost)
at System.IO.Directory.InternalCreateDirectoryHelper(String path, Boolean checkHost)
at Microsoft.Rtc.Common.Data.DatabaseManager.CreateDatabase(String dbFileBase, String dbPath, String logPath, Int32 dbSizeMB, Int32 logSizeMB, Int32 dbGrowthMB, Int32 logGrowthMB, Int32 maxDbSizeMB, Int32 maxLogSizeMB)
at Microsoft.Rtc.Common.Data.DatabaseManager.CleanInstallDatabase(String dbFileBase, String initialScripfilePath, String
dbPath, String logPath, Int32 dbSizeMB, Int32 logSizeMB, Int32 dbGrowthMB, Int32 logGrowthMB, Int32 maxDbSizeMB, Int32 maxLogSizeMB)
at Microsoft.Rtc.Common.Data.DbSetupBase.CleanInstallDatabase()
at Microsoft.Rtc.Common.Data.DbSetupBase.CreateOrUpdateDatabase()
at Microsoft.Rtc.Common.Data.XdsDatabase.CreateOrUpdateDatabase()
at Microsoft.Rtc.Management.Deployment.Tasks.DatabaseCreator.CreateDatabaseForFeature(String featureName, Boolean clean, Boolean update, String sqlServer, String instanceName, Boolean collocated, Boolean backup, Boolean noreindex,DatabasePathAssignment[]
pathAssignments, Boolean broadCast, String& logfile)
at Microsoft.Rtc.Management.Deployment.installdatabaseCmdlet.CreateDatabaseForFeature(Planitem i)
at Microsoft.Rtc.Management.Internal.Utilities.LogWriter.InvokeAndLog[T](Action`1 action,T arg)
TaskFailed: An error occurred while creating or updating the database for feature CentralMgmtStore. For details, see the log
file ‘C:\Users\Administrator\AppData\Local\Temp\2\Create-CentralMgmtStore-domain-name.com_lynccore-[2014_07_09]
[11_40_46].log’
TaskFailedResolution: Consult exception information and previous errors for more information on how to resolve this error.
Error: An error occurred: "System.IO.FileNotFoundException" "The network name cannot be found"

SQL Scenario
Windows Server 2008R2 - Sql 2008 R2 Failover Cluster (Multiple Database and Instances Created) 5 Others
Application Database also Created on the Failover Cluster.
Failover SQL Cluster
Active Passive
Computer Name: Cluster1.Consoto.com
Computer Name : Cluster2.Consoto.com
ping cluster1.consoto.com reply IP 192.168.0.30 from Lync FE ping
cluster2.consoto.com reply IP 192.168.0.31 from Lync FE
SQL Database DBLYNC IP is 192.168.0.40 and also reply from Lync Server

Similar Messages

Can I add a two way trusted but in different forest domain to My existing Lync 2013 Topology !

HI !
We have an installed Lync 2013 Std Edt. setup and its working perfectly for one domain. Our network infrastructure ( LAN ) is being shared with our sister company. They have their own forest and domain and a two ways trust relationship with our domain. I
want to add them in our Lync 2013 topology, is it possible ?? if yes, thn what are the requirements and which changes i need to consider.
Response from experts would be greatly appreciated.

Yes, You must establish a two-way trust between the central forest and user forests to enable distribution group expansion when groups from user forests are synchronized as contacts to the central forest.
Also you can refer below link
http://technet.microsoft.com/en-us/library/gg670909%28v=ocs.14%29.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical

Lync 2013 Mirror Database fails to install - Error: DsRoleGetPrimaryDomainInformation failed with error "6BA".

Database primary installs just fine for Lync 2013 - however fails instantly when trying to install mirror DB to mirror SQL Server. The account has dull domain admin, Enterprise admins, and schema admins. Full access to the share as well. I
get the following error:
InstallMirrorDatabaseCmdlet.StartMirroring
4/7/2014 10:38:56 AM
Failed
└
Error: DsRoleGetPrimaryDomainInformation failed with error "6BA".
▼ Details
└ Type: CannotGetDomainInfoException
└ ► Stack Trace
└
at Microsoft.Rtc.Management.ADConnect.NativeHelpers.NativeHelper.GetPrimaryDomainInformation(String server)
at Microsoft.Rtc.Management.Deployment.MirrorUtils.GetSqlServerAccount(String server, String instanceName)
at Microsoft.Rtc.Management.Deployment.TopologyParser.PopulateDatabasesForSqlInstance(ISqlInstance sqlInstance)
at Microsoft.Rtc.Management.Deployment.TopologyParser.FindDatabasesForMachine(IMachine machine)
at Microsoft.Rtc.Management.Deployment.TopologyParser.FindDatabasesForFqdn()
at Microsoft.Rtc.Management.Deployment.TopologyParser.GetDbListToMirror()
at Microsoft.Rtc.Management.Deployment.TopologyParser.get_DbInfoList()
at Microsoft.Rtc.Management.Deployment.InstallMirrorDatabaseCmdlet.StartMirroring()
at Microsoft.Rtc.Management.Internal.Utilities.LogWriter.InvokeAndLog(Action action)
4/7/2014 10:38:58 AM
Error
└
Error: An error occurred: "Microsoft.Rtc.Management.ADConnect.CannotGetDomainInfoException" "DsRoleGetPrimaryDomainInformation failed with error "6BA"."

The issue could be a typo in the SQL server name or that the SQL server isn't allowing remote connections. If you run the Install-csmirrordatabase command from powershell you should see more details about the error.
Take a look at Doug Deitterick's blog: http://blogs.technet.com/b/dodeitte/archive/2013/03/05/issue-configuring-sql-mirroring-for-lync-server-2013-when-sql-witness-is-defined-but-not-available.aspx
Please mark posts as answers/helpful if it answers your question.
Blog
Lync Validator - Used to assist in the validation and documentation of Lync Server 2013.

Lync 2013 android client fails to login bug when ISP overrides DNS

Hello all,
I've noticed an issue occurring in the latest Android client (as of 3/9/2015) with internet networks where the provider resolves all DNS queries to an IP address (e.g. T-Mobile, Cox Cable, and lots of others).
Essentially, sometimes I have noticed my android client stuck on "Signing in". The diagnostic logs show that the client is attempting to resolve http://lyncdiscover.contoso.com (which is not resolvable
externally), but T-Mobile is sending it into a search engine. The app continues to try to connect despite not realizing that it really did not resolve properly. See below logs.
<html><head><meta http-equiv="refresh" content="0;url=http://lookup.t-mobile.com/index.php?origURL=http://lyncdiscoverinternal.contoso.com/"/></head><body><script type="text/javascript">window.location="http://lookup.t-mobile.com/index.php?origURL="+escape(window.location)+"&r="+escape(document.referrer);</script></body></html>
</ReceivedResponse>
Mar 9, 2015 8:26:50 AM ERROR LYNC: ERROR TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/common/private/TransportUtilityFunctions.cpp/1874:Accept-types (application/vnd.microsoft.rtc.autodiscover+xml;v=1) not found in Content-Type response from server (text/html). Not decoding.
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/requestprocessor/private/CHttpRequestProcessor.cpp/266:Sending event to main thread for request(0x9a306048)
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CTransportRequestRetrialQueue.cpp/822:Req. completed, Stopping timer.
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUrlRedirectAndTrustResolver.cpp/610:UrlRedirectAndTrustResolver complete with url = http://lyncdiscoverinternal.contoso.com/, Hops = 1, status = E_ResponseUnknown (E2-1-5)
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CTransportRequestRetrialQueue.cpp/725:Response received for req. UrlTrustResolver(0x9a306048): E_ResponseUnknown (E2-1-5) (RemoteNetworkPermanentError); Done with req.; Stopping resend timer
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaAutoDiscoveryGetUserUrlOperation.cpp/393:CUcwaAutoDiscoverGetUserUrlOperation::onEvent received. Status = E_ResponseUnknown (E2-1-5), url = http://lyncdiscoverinternal.contoso.com/
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaAutoDiscoveryGetUserUrlOperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation completed with url = http://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected], userUrl = , status = E_ResponseUnknown (E2-1-5)
Mar 9, 2015 8:26:50 AM DEBUG SigningInActivity: onStop()
Mar 9, 2015 8:26:50 AM DEBUG SigninActivity: onStop()
Mar 9, 2015 8:27:20 AM DEBUG HubActivity: onPause()
Mar 9, 2015 8:27:20 AM DEBUG MyStatusFragment: onPause()
Mar 9, 2015 8:27:20 AM DEBUG ContactsFragment: onPause()
Mar 9, 2015 8:27:20 AM DEBUG HubActivity: onStop()
Mar 9, 2015 8:27:20 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/objectmodel/private/CApplication.cpp/944:CApplication::serialize() called
Mar 9, 2015 8:27:20 AM VERBOSE LYNC: VERBOSE APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/privateandroid/CCredentialStore.cpp/90:storing credentials for service:0
Mar 9, 2015 8:27:20 AM VERBOSE LYNC: VERBOSE APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/privateandroid/CCredentialStore.cpp/90:storing credentials for service:1
Mar 9, 2015 8:27:20 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/objectmodel/private/CBasePersistableEntity.cpp/179:Storing 1 out-of-sync Object Models took 32ms
Mar 9, 2015 8:27:20 AM INFO LYNC: INFO UTILITIES /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/platform/persistentstorage/private/CBasePersistableComponent.cpp/245:Storing 3 out-of-sync components took 1ms
Mar 9, 2015 8:27:20 AM INFO PreferencesManager: commit is called on
Mar 9, 2015 8:27:20 AM DEBUG MyStatusFragment: onStop()
Mar 9, 2015 8:27:20 AM DEBUG ContactsFragment: onStop()
Mar 9, 2015 8:27:27 AM ERROR HttpConnection: org.apache.http.conn.HttpHostConnectException: Connection to https://lyncdiscoverinternal.contoso.com refused
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:183)
at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164)
at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119)
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:360)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
at com.microsoft.office.lync.platform.http.HttpEngine.execute(HttpEngine.java:502)
at com.microsoft.office.lync.platform.http.HttpConnection$1.run(HttpConnection.java:219)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:422)
at java.util.concurrent.FutureTask.run(FutureTask.java:237)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1112)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:587)
at java.lang.Thread.run(Thread.java:818)
Caused by: java.net.ConnectException: failed to connect to /198.105.244.104 (port 443) after 180000ms: isConnected failed: ECONNREFUSED (Connection refused)
at libcore.io.IoBridge.isConnected(IoBridge.java:238)
at libcore.io.IoBridge.connectErrno(IoBridge.java:171)
at libcore.io.IoBridge.connect(IoBridge.java:122)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:183)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:456)
at java.net.Socket.connect(Socket.java:882)
at org.apache.http.conn.scheme.PlainSocketFactory.connectSocket(PlainSocketFactory.java:119)
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:144)
... 12 more
Caused by: android.system.ErrnoException: isConnected failed: ECONNREFUSED (Connection refused)
at libcore.io.IoBridge.isConnected(IoBridge.java:223)
... 19 more
Since DNS overrides by ISPs are a common occurance, I believe the app should properly handle this situation. I installed an app to override my DNS and use Google's DNS servers, and the client connects fine.

Hi,
Did you login Lync 2013 mobile client internal or external the company?
Did the issue also happen for IOS/Windows Phones or just happen for Android Phones?
Please try to check if the issue only happen for your mobile Lync client or also happen for other Android mobile clients.
If the issue only happen for your Android mobile, please try to uninstall Lync client and install the latest version from Android Market and test the issue again.
If the issue happen for multiple mobile clients, please double check the Reverse Proxy settings, if you use IIS ARR for Reverse Proxy, you can troubleshooting with the help of the link below:
http://blogs.technet.com/b/nexthop/archive/2013/02/19/using-iis-arr-as-a-reverse-proxy-for-lync-server-2013.aspx
Best Regards,
Eason Huang
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected].
Eason Huang
TechNet Community Support
Ok, I figured out that I had a partial misconfiguration, but the existing client behavior still leads to long delays on a variety of networks. I had the reverse proxy forwarding into port 80 instead of 8080, which seemingly caused problems
during the second autodiscovery phase after the first timed out. I have since confirmed that it's not just T-Mobile, but any such provider (e.g. Cox Cable, see below) that resolves all DNS entries.
Essentially, the following is happening:
1) Client attempts to resolve lyncdiscoverinternal first.
2) DNS record resolves to ISP's website, because they resolve everything and will return their own page if the entry really doesn't exist.
3) Lync client continues to try to connect to the ISP's address, and sits for at least a minute until it eventually falls to the lyncdiscover record.
From the below log entries, you can see that the login process is delayed a full minute due to the client being stuck on the lyncdiscoverinternal record! Again, this does not occur on ISPs that do not catch all DNS resolution
attempts, regardless of validity.
Mar 9, 2015 8:10:04 PM INFO HttpConnection: originalurl is
https://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected] method Get
Mar 9, 2015 8:10:04 PM INFO HttpConnection: decodedurl is
https://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected]
Mar 9, 2015 8:10:04 PM INFO LYNC: INFO TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/common/private/TransportUtilityFunctions.cpp/689:<SentRequest>
GET
https://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected] 9, 2015 8:10:05 PM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaAutoDiscoveryGetUserUrlOperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation
completed with url =
http://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected], userUrl = , status = E_ResponseUnknown (E2-1-5)
GET http://lyncdiscoverinternal.contoso.com/
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "<html><head><meta">http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><meta
http-equiv="refresh" content="0;url=http://finder.cox.net/main?InterceptSource=0&ClientLocation=us&ParticipantID=96e687opkbv4scrood8k84drs6gw5duf&FailureMode=1&SearchQuery=&FailedURI=http%3A%2F%2Flyncdiscoverinternal.contoso.com%2F&AddInType=4&Version=2.1.8-1.90base&Referer=&Implementation=0&method=GET"/><script
type="text/javascript">url="http://finder.cox.net/main?InterceptSource=0&ClientLocation=us&ParticipantID=96e687opkbv4scrood8k84drs6gw5duf&FailureMode=1&SearchQuery=&FailedURI=http%3A%2F%2Flyncdiscoverinternal.contoso.com%2F&AddInType=4&Version=2.1.8-1.90base&Referer=&Implementation=0&method=GET";if(top.location!=location){var
w=window,d=document,e=d.documentElement,b=d.body,x=w.innerWidth||e.clientWidth||b.clientWidth,y=w.innerHeight||e.clientHeight||b.clientHeight;url+="&w="+x+"&h="+y;}window.location.replace(url);</script></head><body></body></html>
</ReceivedResponse>
Mar 9, 2015 8:10:21 PM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaDataSynchronizer.cpp/799:Mode 0
timed out
Mar 9, 2015 8:11:08 PM ERROR HttpConnection: org.apache.http.conn.HttpHostConnectException:
Connection to https://lyncdiscoverinternal.contoso.com refused
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:183)
Mar 9, 2015 8:11:08 PM INFO LYNC: INFO TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/common/private/TransportUtilityFunctions.cpp/1032:<ReceivedResponse>
GET http://lyncdiscover.contoso.com/

Lync 2013 failed on windows 7 64-bit system with ErrorCode: 1624(0x658)

I have HP xw4400 Workstation (64bit) with windows 7 SP1.
LYNC 2013 is getting failed again and again with error "Microsoft setup bootstrapper has stopped working".
I checked setup log at %temp% and found something went wrong in c:\MSOCache\All Users but couldn't fix it
2014/09/02 17:58:28:477::[5164] Error: Failed to configure: {90150000-012C-0000-0000-0000000FF1CE} ErrorCode: 1624(0x658).
2014/09/02 17:58:28:477::[5164] Log level changed from: Standard to: Verbose
2014/09/02 17:58:28:477::[5164] Rolling back chain
2014/09/02 17:58:28:477::[5164] Error attaching to OSE, error 0x00000000
2014/09/02 17:58:28:477::[5164] Stopping running ose
I followed another TechNet article regarding MSO 2013 getting crashed with same error
http://social.technet.microsoft.com/forums/office/en-US/4b4c3176-b436-4f07-99c1-ea92091bd621/windows-7-64bit-office-2013-install-error
Thanks in advance

Hi,
Did you solve the issue with the help of Edwin provided above?
Please try to download the latest version of Office 2013 from Microsoft Website and then install it to check if the issue happen again.
Please also go to your computer manufacturer’s website and update all driver packages for your computer, such as: Audio drivers, Bluetooth drivers, System chipset drivers, webcam drivers.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Lync 2013 SQL Backend Witness replacement

Can we replace backend SQL witness server via lync 2013 topology builder as H/W of existing witness server needs to be released due to some technical reason.
We don’t prefer P2V. I want fresh installation of SQL witness server with SQL 2012 express edition and then move the witness role
What is the procedure for the same?
Please help me for the same

Hi,
deploy the new SQL server which dedicated for Witness. Configure the topology and associate the new SQL server as the witness server and publish. remove the old SQL store which was configured as the Witness form the topology.
Z-Hire -- Automate Lync User Account creation process ( AD / Exchange / Lync )

Mac Lync 2011 and Lync 2013 - Autodiscovery not working

We're currently setting up a Lync 2013 topology including Front End Pool and Edge Server. I've been told that the Lync 2011 client should work with lyncdiscover and lyncdiscoverinternal as it does for IOS and Windows.
However looking at the logs being generated by the Lync 2011 client this doesn't seem to be the case. I'm seeing
sipinternal, sip, sipexternal when Lync 2011 is set to AutoConfigure. I do not have any of these configured.
If I manually specify lyncdiscover and lyncdiscoverinternal the logs show it's starting to find the Front End Servers, but still errors.
What am I doing wrong?

Hi,
Please add the following SRV records in internal DNS Server:
_sipinternaltls._tcp.sipdomain.com
_sipinternal._tcp.sipdomain.com
_sip._tls.sipdmain.com
Then flush the DNS cache on the local Mac computer, then test the issue again.
Best Regards,
Eason Huang
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Eason Huang
TechNet Community Support

Lync 2013 client connectivity to Lync Edge Pool

Hi all,
I have a question regarding Lync 2013 topology deployment
I have read somewhere that
The external interfaces of the Edge Server must not be routable by either clients or servers on the internal corporate network. The internal interface of the Edge Server must not be routable from the Internet. These routing principles must be enforced by deploying
firewalls between the Edge Servers (an internal and an external firewall) or by enforcing strict routing at the network layer.
Is the statement true? If it is, then there is no way for the internal client to talk directly to Edge server: its internal network interface doesn't have default route, so this interface can't talk to any client/server that is located on different subnet.
(unless I have to manually add-route in command line for all the subnets in the internal network, which is not preferable)
Any advise is greatly appreciated. Thanks

The mentioned statement is true. You need to manually add static routes in to the Edge server. Only the external interface must have a Gateway configured.
http://thamaraw.com

SQL HA with Mirroring for Lync 2013

Hi All,
Does SQL mirroring require Windows clustering in place? or Lync 2013 just manages the mirroring?

The network file share is only required while the actual SQL mirroring is initially created as soon as the Lync 2013 topology is published. Clearly, the share should have sufficient space to handle the size of the existing databases with some buffer
to spare.
Please share with us if this helps.
Thanks / rgds,
TechNet/MSDN Forum Moderator - http://www.leedesmond.com

Lync 2013 Publish Topology Failed in window server 2012R2

Scenario
Lync Enterprise Edition!
Windows Server 2012R2 - LyncServer 2013
WIndows Server 2008R2 - Sql 2008 R2 Failover Cluster (Multiple Database and Instances Created) 5 Others Application Database also Created which has been used.
DNS Entries
HOst Name :
LYNCFE.consoto.com
Pool.consoto.com (Host Name Created Same IP as Lync Frontend Server)
dialin.consoto.com
meet.consoto.com
admin.consoto.com
DBLYNC.consoto.com
Virtual Instant Name of Sql Database and Instance name : DBLYNC\Lynccore
Permission Rights:
I am using the Administrator account for Lync 2013 Installation.
Domain Administrator Account Member to CSAdministrator group and RTC Universal Server admin group.
SQL sysadmin Account member Sqladmin and Domain administrator User.
ShareFolder-Lyncshare on Storage.consoto.com
Permission:
Everyone Read-write
RTCComponentUniversalServices Read-write
RTCHSUniversalServices Read-write
RTCUniversalServerAdmins Read-write
RTCUniversalConfigReplicator Read-write
Virtual Computer Name DBLYNC$ Full control
Issue : I have create one topology and try to publish but getting error.Log Detail Below
Feature: CentralMgmtStore
SQL Instance: domain-name.com\lynccore
Collocated: False
Found "RTCUniversalServerAdmins": True
Found "RTCUniversalConfigReplicator": True
Found "RTCUniversalReadOnlyAdmins": True
TaskFailed: Task execution failed.
Error:The network name cannot be found.
▼ Details
└ Type: IOException
└ ▼ Stack Trace
└ at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.Directory.InternalCreateDirectory(String fullPath, String path, Object dirSecurityObj, Boolean checkHost)
at System.IO.Directory.InternalCreateDirectoryHelper(String path, Boolean checkHost)
at Microsoft.Rtc.Common.Data.DatabaseManager.CreateDatabase(String dbFileBase, String dbPath, String logPath, Int32 dbSizeMB,
Int32 logSizeMB, Int32 dbGrowthMB, Int32 logGrowthMB, Int32 maxDbSizeMB, Int32 maxLogSizeMB)
at Microsoft.Rtc.Common.Data.DatabaseManager.CleanInstallDatabase(String dbFileBase, String initialScripfilePath, String
dbPath, String logPath, Int32 dbSizeMB, Int32 logSizeMB, Int32 dbGrowthMB, Int32 logGrowthMB, Int32 maxDbSizeMB, Int32
maxLogSizeMB)
at Microsoft.Rtc.Common.Data.DbSetupBase.CleanInstallDatabase()
at Microsoft.Rtc.Common.Data.DbSetupBase.CreateOrUpdateDatabase()
at Microsoft.Rtc.Common.Data.XdsDatabase.CreateOrUpdateDatabase()
at Microsoft.Rtc.Management.Deployment.Tasks.DatabaseCreator.CreateDatabaseForFeature(String featureName, Boolean clean,
Boolean update, String sqlServer, String instanceName, Boolean collocated, Boolean backup, Boolean noreindex,
DatabasePathAssignment[] pathAssignments, Boolean broadCast, String& logfile)
at Microsoft.Rtc.Management.Deployment.installdatabaseCmdlet.CreateDatabaseForFeature(Planitem i)
at Microsoft.Rtc.Management.Internal.Utilities.LogWriter.InvokeAndLog[T](Action`1 action,T arg)
TaskFailed: An error occurred while creating or updating the database for feature CentralMgmtStore. For details, see the log
file ‘C:\Users\Administrator\AppData\Local\Temp\2\Create-CentralMgmtStore-domain-name.com_lynccore-[2014_07_09]
[11_40_46].log’
TaskFailedResolution: Consult exception information and previous errors for more information on how to resolve this error.
Error: An error occurred: "System.IO.FileNotFoundException" "The network name cannot be found"


SQL Scenario
Windows Server 2008R2 - Sql 2008 R2 Failover Cluster (Multiple Database and Instances Created) 5 Others Application Database
also Created on the Failover Cluster.
Failover SQL Cluster
Active
Passive
Computer Name: Cluster1.Consoto.com
Computer Name : Cluster2.Consoto.com
ping cluster1.consoto.com reply IP 192.168.0.30 from Lync FE
ping cluster2.consoto.com reply IP 192.168.0.31 from Lync FE
SQL Database DBLYNC IP is 192.168.0.40 and also reply from Lync Server

Topology not replicating to Lync 2013 Edge servers

Hello all,
I have installed Lync 2013 with a FE Pool (three servers HW Load Balanced), Director Pool (two servers HW Load Balanced), and an Edge Environment (2 servers, in DMZ, member of a work group, also HW load balanced). All servers are Windows 2012
server (not R2).
I am able to login remotely and have green checks across the board at
https://testconnectivity.microsoft.com. So things are looking good.
My issue is that I am unable to replicate to my Edge servers from the FE. I am not seeing errors in the event viewer, just a big red 'x' on the topology tab in the control panel for the Edge servers. Also, when trying to force replication
the Edge servers continue to show 'False'.
Here are things I have done/checked to resolve this - so I need your assistance please:
1. From the FE, I can visit
https://EdgeFQDN:4443/replicationwebservice - there are no errors, no certificate errors so things look good
2. I have verified that I the Edge servers have the domain suffix added to them. The HW Load balancer is configured as the EdgeInternal.domain.com entry and the physical edge servers are named Edge01 and Edge02 (obviously with the domain suffix added).
So this seems correct based on recommendations.
3. I have added the following reg keys to all Lync Servers in the org
HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL ->DWORD ClientAuthTrustMode Value=2 and SendTrustedIssuerList DWORD Value: 0
I am trying to avoid having to resort to this as possible resolution -
http://ucken.blogspot.com/2012/04/resetting-lync-cms-replication.html, but if this is my next step, please let me know.
May be useless info, but here it is anyway....
One thing I will mention - during my setup, I setup Kerberos Authentication for Lync 2013. I followed
http://howdouc.blogspot.com/2011/07/kerberos-web-authentication-for-lync.html and
http://technet.microsoft.com/en-us/library/gg398976.aspx to configure this.
I am unable to access the RtcReplicaRoot\xds-replica directory on the primary FE server or any other lync server for that matter. I assume this is because it is locked down to the Kerberos account that
was created. However, I am unable to run the command "Set-CsKerberosAccountPassword -FromComputer FEFQDN.Domain.com -ToComputer EdgeFQDN.Domain.com". Obviously
this fails because the Edge servers are in a workgroup and cant see the Kerberos account that was created. Would this break the replication? Just thinking outloud...
Thanks in advance for any input.
Wall

Michael, Thank you for your response. We are currently in coexistence with a Lync 2010 environment.
Our environment consists of a European domain and a North American domain, both in the same forest. The European environment has had 2010 up and running for a couple of years and we (North America) just installed 2013 Lync. The EU domain has
many domain names they support (.uk, .net, .ie, etc.) NAm only manages .com domain name space.
I tell you this because I have configured the NAm environment to support only .com (save $ for SSL UCC licensing) and to provide separate paths to our services. There is a EU site and a NAm site in the Lync topology. The issues are with the FE
servers in NAm.
Based on your response above, the NAm servers are fine with your suggestions in #2 and #3. The CMS database is still on 2010 in the EU site.
Given that the NAm domain is configured to support only .com domain namespace, I am worried that moving the CMS to NAm FE's as it would break EU's ability for federation.
Any guidance or expertise is greatly appreciated.
My ultimate goal is to have NAm employees authenticate to their Edge servers in the site and EU to authenticate to their respective Edge Servers. Also, I have read that we can only have one Edge pool responsible for Federation in the Lync org.
I assume that we will have to keep federation going through EU as they have the SSL certs for all domains configured in their environment. Just a little confused before I make any changes.
Wall

Lync 2013 for 8000 user for 6 locations - Topology question

Hello everyone,
I have a project for Lync on 6 locations (Central site and 5 other branches) and would like to like to ask some questions regarding the topology of servers.
What I initially think would be required for those users is as following:
1- 2 Pools (Central pool will have 3 Lync FE Enterprise) in the central site) and another pool will have at least 1 FE Enterprise In each branch..
2- 1 SQL BE + Mirror + Witness for all the Front ends.
3- ONE SQL for Archiving and Monitoring
4- One SQL for Persistent chat pool
5- One Mediation server or a Pool with 2 Mediation servers.
6- One Edge Pool with 2 Edge Servers.
The questions that I would like to ask regarding this topology is as following
1- Would the front end servers distribution as I stated be convenient for such situation to avoid any issues with connectivity or HA ? And do pool pairing between the two pools for HA?
2- Would one Backend SQL with Mirror and Witness be enough for all front ends in all locations considering there's a 100 MB MPLS connection between all locations.? or is it better if I deploy SQL BE for each site?
3- In case of Edge Pool. how would the Public IPs distribution and the public/Internal DNS configuration be with the presence of Hardware and DNS load balancers?
I'm curious in things like
A- How many Public IPs would there be?
B- What are the Configuration of the Public DNS be like ? e.g. SIP A Name would point to how many IPs.
C- How would the Hardware load balancer configuration be like ?
4- Would a hardware load balancer be required to handle the traffic of all those numbers of users? or would one reverse proxy be enough?
5- Customer required disaster site deployment so Is it possible to deploy Lync on another data center and do Pool pairing ?
I would appreciate your suggestions and comments.
Thanks
Mohammed JH

Does that mean I will have to install SQL Backend in all 6 locations for FEs?
- Each pool of Enterprise Edition FE's will require a SQL backend database.
Do you mean I'll have to do the failover manually by powershell?
- Yes, if acceptable you could use the resiliency built in to Lync server
since you have multiple pools. If you loose SQL in Lync 2013 your front ends will maintain most functionality, if you loose an entire Lync pool PSTN calling can automatically fail over, however you will need to run a couple of PowerShell commands to fail the
entire pool over.
I have 6 different locations,
so I think this means i'll install 6 different pools with one FE in each location and do Pool pairing between 3 of them with the other 3. do you think this make sense?
- Ideally each pool should
have 3 FE's. For the smaller sites
I would look at using Lync Standard Edition. Standard Edition supports up for 5000 users on hardware or about 2500 on VM and it run's SQL locally. You only really need to use Enterprise Edition
where you require the pool to be highly available.
Does this mean that I need 6 Edges with each 3 Public IPs on each one? Can't I just deploy 1 pool with 2 Edges on it and associate
them with all the pools .. I haven't tried that before to be honest.
- Yes you can do that. I would deploy 2 edge pools in 2 different sites with1 or 2 servers in each. This will give you failover options
if you have an entire site go down.
And btw I wonder how would the SIP, AV and Webconf names point to ....
in case of all those IPs I think they will be configured on the load balancer right?
- Youd have the public IP's on the load balancer, then you can use private
IP's on the edge servers and load balance across the pool.
I read microsoft says it's recommended for the HTTPS but with the number of users that will be enabled for Lync you mean that the Reverse proxy should handle all the traffic? I will be using IIS ARR should that be enough?
- Each pool will have its own web services that need a reverse proxy so you could use IIS ARR in each location. Is that what you were thinking, or was the plan to centrally locate the reverse proxy for all pools?
Hope its all becoming clearer :)
Andrew Morpeth
Lync Server Specialist - Auckland, NZ
Check out my blog

Lync 2013 Logon Failing (HTTP status code 500) No valid security token

Hello there,
I'm in the process of deploying Lync 2013. I have the pool deployed and everything is at least running. I can access the control panel and provision users. However when I try to logon to the Lync Client I get a DNS error. The DNS
error appears to be misleading and is a result of the earlier auto-detection methods failing.
However using the Lync Connectivity Analyzer I get a "No valid security token." error. This doesnt matter if I use auto-detection or manual pointing the Connectivity Analyzer to the pool servers.
[3/2/2015 9:34:15 AM] [ERROR] Reason: Internal server error (HTTP status code 500)
[3/2/2015 9:34:15 AM] [ERROR] Ms-Diagnostics-Fault ErrorId: 28020, Reason: No valid security token.
[3/2/2015 9:34:15 AM] [CRITICAL] The credentials were not authorized by the server. Please verify your login credentials and try again.
[3/2/2015 9:34:15 AM] [DEBUG] System.Exception: Exception of type 'System.Exception' was thrown.
at Microsoft.LyncServer.WebServices.WebTicketManager.WTExceptions(String exText)
at Microsoft.LyncServer.WebServices.WebTicketManager.<AcquireTicketAsync>d__19.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.WebTicketManager.<AcquireOpaqueTicketAsync>d__14.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<AuthenticationRequired>d__2a.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<SendRequest>d__d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<ParseResponse>d__16.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<StartDiscoveryJourney>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at LyncConnectivityAnalyzerCore.Utilities.<RetrieveUserLocation>d__3e.MoveNext()
Im a bit stumped where to go next.
Thanks.

Manually entering the server also fails and does not provide much to help "We're having trouble connecting to the server. If this continues, please contact your support team."
I found that each time I try to logon it generates a Schannel Error on the server. "A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 51.
The Windows SChannel error state is 1106."
There seems to be a lot more information on that than the previous "Internal Error" message I was trying to deal with.
https://social.technet.microsoft.com/Forums/office/en-US/41718327-203f-445f-8657-87b0a8545ead/lync-2013-client-signin-issue-with-lync-2013-server?forum=lyncprofile
Actually I just found the Lync Server Front-End is stuck "starting" so that would explain why I cannot login. However I re-issued my certificate to make sure the primary CN matched "lync.domain.tld" and it still wont start.
https://expertslab.wordpress.com/2014/04/23/lync-server-2013-front-end-service-stuck-on-starting/
I think my problem is the certificate. I have been trying to use selfSSL7 to generate the certificate for testing but it does not support creating SAN entries so I have entered all the FQDNs as CN entries.
Im going to get another method to generate the self-signed certificate for testing.

Install-CsDatabase Command Execution Failed: the network name cannot be found Lync 2013

Hi, I'm having problems when trying to create a new central management database on Lync 2013 to move the one from Lync 2010.
I'm executing this command:
Install-CsDatabase -CentralManagementDatabase -SQLServerFQDN <FQDN of your SQL Server> -SQLInstanceName <name of instance>
The user is member of RTCUniversalServerAdmins and is a SysAdmin on the SQL Server.
Any ideas are appreciated, thanks!
Eduardo Rojas

Hi, thanks for your response,
The server does respond to PING using the DNS name.
I turned on network discovery and verified I can telnet to the port that is using for SQL, however is not the normal 1433, is another port (1439) , so I don't know if that is needed to be specified when excecuting the command and how to do it because I haven't
been able to see a port switch on the Install-CsDatabase command.
I also specified the correct instance for Lync, is the same server I used to install Lync Server 2013.
when Excecuting the commando it starts generating a lot of information when trying to create the database, it's not like it just doesn't find the server and throws the error immediately.
One of the things it says before the error is:
Attaching database xds from data path \\server\c$\csdata\... and the path.
The operation failed because xds is DbState_NonExist.
Attaching database failed because one of the files not found. The database will be created.
State of database xds is DbState_DoesNotExist.
Creating database xds from scratch. Data file path = c:\csdata\centralmgmstore\... and the path.
Then the error is generated: The network name cannot be found.
Any other ideas on how to fix this?
Thanks.
Eduardo Rojas

Lync 2013 federation failing for a specific domain

Hello,
We have recently migrated to Lync 2013 and noticed that one of the domains we federate with is unable to federate with us.
we are getting the following error:
Log Name: Lync Server Source: LS Protocol Stack Event ID: 14428 Task Category: (1001)
Level: Error Keywords: Classic User: N/A Computer: server.fqdn.com Description: TLS outgoing connection
failures.
Over the past 28 minutes, Lync Server has experienced TLS outgoing connection failures 4 time(s). The error code of the last failure is 0x80090325(SEC_E_UNTRUSTED_ROOT) while trying
to connect to the server "sip.example.com" at address [10.10.10.10:5061], and the display name in the peer certificate is "Unavailable". Cause: Most often a problem with the peer certificate or perhaps the host name (DNS) record used to
reach the peer server. Target principal name is incorrect means that the peer certificate does not contain the name that the local server used to connect. Certificate root not trusted error means that the peer certificate was issued by a remote CA that is
not trusted by the local machine. Resolution: Check that the address and port matches the FQDN used to connect, and that the peer certificate contains this FQDN somewhere in its subject or SAN fields. If the FQDN refers to a DNS load balanced pool then check
that all addresses returned by DNS refer to a server in the same pool. For untrusted root errors, ensure that the remote CA certificate chain is installed locally. If you have already installed the remote CA certificate chain, then try rebooting the local
machine.
Thanks

Thanks Michael.
That worked for one of two issues I'm seeing, I did use the same steps for the second issue but it didn't seem to work, I have imported the CA of the domain we would like to federate with to the trusted root certification authorities and the intermediate
certification authorities per the certificate issuer's website guidelines. I did learn that the federated partner is also using OCS 2007 R2, not sure if this may have to do with this.
Over the past 30 minutes, Lync Server has experienced TLS outgoing connection failures 1 time(s). The error code of the last failure is 0x80072746 while trying to connect to
the server "ocs.example.com" at address [10.10.10.10:5061], and the display name in the peer certificate is "ocs.example.com". Cause: Most often a problem with the peer certificate or perhaps the host name (DNS) record used to reach the peer server. Target
principal name is incorrect means that the peer certificate does not contain the name that the local server used to connect. Certificate root not trusted error means that the peer certificate was issued by a remote CA that is not trusted by the local machine.
Resolution: Check that the address and port matches the FQDN used to connect, and that the peer certificate contains this FQDN somewhere in its subject or SAN fields. If the FQDN refers to a DNS load balanced pool then check that all addresses returned by
DNS refer to a server in the same pool. For untrusted root errors, ensure that the remote CA certificate chain is installed locally. If you have already installed the remote CA certificate chain, then try rebooting the local machine.

Lync 2013 Topology Publication Failed!

Similar Messages

Maybe you are looking for