Lync Discover Internal & External Web URL

we have Lync 2013 standard deployment with one front end & Edge server role. we have use our firewall as a reverse proxy by natting live IP with Frontend server.
now we have deployed same web URL for internal and external access that is lync.domain.com. Now we are not able to access lync discover from mobile client who is connecting from internal.
Please find herewith the result of Lync Connectivity Analyser :
Total server discovery time: 0.1 seconds
Server discovery succeeded for unsecure (HTTP) internal channel against URL http://lyncdiscoverinternal.domain.com/
Starting automatic discovery for secure (HTTPS) external channel
An error occurred while sending the request.
Unable to connect to the remote server
A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond X.X.X.X(external IP):443
For troubleshooting, try using a browser to open the server discovery URL https://lyncdiscover.domain.com/[email protected]
Server discovery failed for secured external channel against https://lyncdiscover.domain.com/
Starting automatic discovery for unsecure (HTTP) external channel
An error occurred while sending the request.
Unable to connect to the remote server
A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond X.X.X.X(external IP):80
For troubleshooting, try using a browser to open the server discovery URL http://lyncdiscover.domain.com/[email protected]
Server discovery failed for unsecured external channel against http://lyncdiscover.domain.com/
Automatic discovery meant for external network access failed. Please verify the server requirements at http://go.microsoft.com/fwlink/?LinkId=278998 .
Automatic discovery meant for internal network access succeeded from an external network which could be a potential security concern.
Kindly let me know , how we can use same web URL for external and internal access of lyncdiscover in 2013 version.

You can refer below link to help you in your issue
http://blogs.technet.com/b/nexthop/archive/2012/04/25/lync-server-2010-mobility-deep-dive-autodiscover-service.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blogs: Technical

Similar Messages

Lync internal / external web services FQDN

I have a Standard edition 2013 FE server
Should my internal/external web services url in DNS point to my FE internal IP or my Reverse proxy public IP?
For mobility it says it should point to the external IP but for address book updates etc surely I want my internal windows clients using the FE pool directly?
I am unable to differ them on 2013 standard edition...
***Don't forget to mark helpful or answer***

The external web services works in conjunction with a reverse proxy in the perimeter network. It provides clients external access to by using these web services. The FQDNs configured here are sent to clients when they log on, and are used to make an HTTPS
connection back to the reverse proxy when connecting remotely. The reverse-proxy server forwards the external web service FQDN to an internal hardware load balancer, or directly to the pool. The reverse proxy must be able to resolve the external web services
FQDN to the IP address of the internal Web server. The external web services FDQN must be resolvable in the public Internet.
If your internal server is a Standard Edition server, the internal FQDN is the Standard Edition server FQDN. If your internal server is a Front End pool, the FQDN is a hardware load balancer virtual IP (VIP) that load balances the internal web farm servers.
A hardware load balancer is required in a Front End pool with more than one Enterprise Edition server. A load balancer is not required for a Standard Edition server or a single Enterprise Edition Front End Server.
For DNS configuration, you can refer below link
http://expertslab.wordpress.com/2014/04/09/dns-requirements-for-mobility/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical

Lync Discover Internal Load Balance

I have tried using DNS and hardware load balancing for the lyncdiscoverinternal A record,
If I disable the NIC on one of my 2 front end servers in my pool that the client is connected to it gets signed out,
the client does not then sign back in for about 2 minutes.
Can someone explain why the client takes so long to try another server in the pool and re-try the signing to a different FE server as 2 minutes is too long...
I have 2 servers in a pool called pool.domain.com and the srv record points to pool.domain.com
I have 2 A records for pool.domain.com pointing to each FE server
I also have a director pool, will pointing the pool.domain.com srv record for _sip to this pool improve failover speed?
***Don't forget to mark helpful or answer***

i tried doing the full HLB method (using f5) and during testing it seems lync itself doesnt want to support that (which is why microsoft recommends DNS AND HLB i am betting). What i saw in my testing was after the node you were on was "failed" the
lync client went to its secondary via the list of servers it gets when it first connects, so instead of connecting to the VIP of the HLB, it connected directly to a front-end server that was listed as secondary for that user at that point.
Doing the combination of HLB and DNS LB, the time it takes for the client to connect seemed to be much less (under 10 seconds in my tests). I hate that i have to use both technologies, if they are going to force you to use HLB (for web servcies), they
should let everything work via that method...

Web Url Monitoring internal/external network

We know that SCOM 2007 R2 can monitor the web url's. Does it monitor the weburl with in the internal network and also from external network. is it possible to monitor the same internal website which is confiured to use out side the network(external)
from scom 2007 R2. how to find which url is internal and which is external.

Please confirm that SCOM 2007 R2 having the capability to monitor a weburl from internal network and also from external network(internet).
I have configured the web url monitoring using the web application template…which I am sure that is monitoring the weburl internally(with in the network).
For the same weburl is configured to access from external network (internet). I need to monitor the same url
which is accessing from internet. If internet users are not able to access the weburl we need an alert from scom 2007 R2.
i googled for this answer and no luck.
Is there any different monitors available with scom to monitor weburl for both internal and external network

Hybrid Lync - External Web Services?

Can anyone tell me if the external web services, provided by the on-premise Front-End server are ever used in a Lync Hybrid deployment?
If not, how is "meeting content" that is created in a Lync on-premise meeting accessed by Lync Online users?
Is the content in this scenario shared over media between the Edge servers or is it accessed via the external web services urls (i.e. reverse proxy)?
I'm trying to determine if i need to setup the external web service access from outside (internet) into the on-premise Lync deployment to support a Hybrid deployment, as in this particular case none of the users will be external.

Yes you need it. Even if a Lync user on premises is never external, if they want to invite an external person to a meeting or use mobile client internally, this will be necessary.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

External Web Services Url Change

When I installed Lync 2013 I used the same fqdn for the internal and external web services url. I now am implementing a reverse proxy server and realized that the fqdn needs to be different for the external services. I am using IIS AAR on a 2012
Server for my proxy. WHen I change the web services external url in topology builder and republish it, what other steps do I need to do after the change. I figured I would need to rerun the setup, but do I need new internal or external certs if I already have
the SAN name in my certificate that I plan to use.

External web FQDN is required in certificate for Lync Server Front End Server, you can that at
http://technet.microsoft.com/en-us/library/gg398094.aspx
External web FQDN is require in certificate for Reverse Proxy Server, check that at
http://technet.microsoft.com/en-us/library/gg429704.aspx
Lisa Zheng
TechNet Community Support

DNS records to be created for Lync deployment (Internal and External)

Hi There,
If I want the Lync server environment to work Internal as well from External in all the aspects. (auto-discover, meetings, AV conferencing,web conferencing, voice integration, mobility etc), please answer to the below questions and also their purpose please.
I'm not sure whether the answer varies for 2010 and 2013 version.
1. What are the Internal and External(public) DNS records to be created for the reverse proxy(assume i'm using TMG servers), and their purpose?
2. What are the Internal and External(public) DNS records to be created for Lync Edge server, and their purpose?

I'll try to answer as well.
1) For the reverse proxy, you'll need to publish the following:
External:
lyncdiscover.sipdomain.com (You'll need this record for every sip domain you have). This is for client autodiscover.
external web services FQDN (You'll need one of these per pool, you get to choose the name). This is for address book downloads, web conferencing, etc.
Meet.sipdomain.com (You can choose the name here, and have one per sip domain or one for the whole org). This is for web conferencing.
Dialin.sipdomain.com (You'll just need one here, it doesn't have to be dialin). This is for changing your conferencing/phone pin, resetting conference info, and general conferencing info.
For Lync 2013 only, you may want the Office Web Application server pool name as well for PowerPoint sharing. Lync 2010 doesn't use this.
Internal:
The external web services FQDN. You'll need this available internally through the reverse proxy so you can redirect requests on port 443 to port 4443. This will be used for mobile devices on WiFi.
2) For the Edge server:
Externally:
sip.sipdomain.com (you'll need one per sip domain) this is an autodiscover/multi use FQDN and should point to your access edge IP.
webedge.sipdomain.com (edge web conferencing, you can pick any name you like).
avedge.sipdomain.com (av edge, you can pick any name you like).
accessedge.sipdomain.com (you'll need a name for the access edge role, however you can just use sip.sipdomain.com and save a name in your certificate request).
Internally:
edgepool.sipdomain.com (you can pick any name you want, it's just the name assigned to the internal edge interface.
If you choose to have a single ip for the external edge, you can get away with just an access edge name and/or sip.sipdomain.com
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Front End internal and external web services

Hi all,
Can someone explain the purpose of internal and external web services URL in front end server. what does it do and what is it used for? and why the external traffic goes directly to it and not through reverse proxy?
Thanks,

They're for multiple purposes. Address books, autodiscovery, meeting urls, mobile clients, etc. There are two because they respond slightly differently based on whether the client is internal or external. External traffic should always reach
it through a reverse proxy, that reverse proxy should proxy traffic received on port 443 to port 4443 on your front end pool.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Consuming external Web Service in portal application:Error URL.getProtocol

Hello!
I implemented a portal application which consums a external Web Service with NWDS 7.2.
The Webservice access works fine when I test it in a Java-Main Class.
If I deploy the application in a portal then I get the error:
java.lang.NullPointerException: while trying to invoke the method java.net.URL.getProtocol() of an object loaded from local variable 'tmpUrl'
It seems that my service_client-class has the problem to call the wsdl if the application is in portal:
static {
    java.net.URL url = null;
    try {
               java.net.URL tmpUrl = SERVICEClient.class.getClassLoader().getResource
              ("wsdl/com/sap/test/SERVICE.wsdl");
              url = new java.net.URL(tmpUrl.getProtocol(), tmpUrl.getHost(), tmpUrl.getPort(), tmpUrl.getFile());
    } catch (java.net.MalformedURLException e) {
      e.printStackTrace();
Can anybody help me?
Thanks, Thomas

Hello Thomas,
I got the same error. In my case I used an Enterprise Application Project for the developement of my Portal Service. The portal service itself was calling an external webservice.
The reason in my case lies behind the generation of the EAR-File with the NetWeaver Developer Studio). Inside the generated EAR-File the WSDL-File was always missing. In consequence "
java.net.URL tmpUrl = SERVICEClient.class.getClassLoader().getResource
              ("wsdl/com/sap/test/SERVICE.wsdl");" is always "NULL".
and "tmpUrl.getProtocol()" leads to the NullPointerException.
So I copied my wsdl-folder / package with the wsdl-file inside the {application}.ear / {application}.war / WEB-INF / private / lib / {application}.jar and everything works fine:-)
Regards
Steffen
PS: Today I found a better way without copying the wsdl-file into the EAR-File. I just didn't use the Enterprise Application Project for the developement of portal services anymore. If you look inside the generated EAR-File, you can see, that you can develop the portal service also by using a simple Dynamic Web Project wrapped by an Enterprise Application Project:-)
(Rem.: Don't miss the portalapp.xml deployment descriptor).
If you deploy the Enterprise Project the WSDL-File is always inside the generated EAR-File :-)

Changing Internal & External URLs?

We run split DNS so right now for all services the internal and external Exchange 2010 URLs are simply set to mail.domain1.com.
If I change them to mail.domain2.net, assuming there is a valid cert on the Exchange box for mail.domain2.net, and assuming that split DNS points mail.domain2.net to the internal/external IP of the Exchange box, new clients should pick up the new domain.
What happens to existing clients i.e. Outlook and ActiveSync?
Will they continue to use mail.domain1.com until the account is removed and added again, or do they do a periodic refresh/update/poll of which setting to use?
In particular would the URL used by Outlook Anywhere be updated on the client automatically?
This topic first appeared in the Spiceworks Community

Hi,
For the migration from the Exchange 2007 to Exchange 2013, we need change the external URLs with the new Exchange 2007 host name legacy.domain.com and migrate all mailboxes including public folders.
For more information about the migration, you can refer to the following articles:
http://blogs.technet.com/b/meamcs/archive/2013/07/25/part-3-step-by-step-exchange-2007-to-2013-migration.aspx
http://blogs.technet.com/b/meamcs/archive/2013/07/25/part-4-step-by-step-exchange-2007-to-2013-migration.aspx
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Accessing external web service with non-constant URL

Hello, all
I am looking in the documentation on accessing external web services, but either I am looking in the wrong place, or the documentatoin is lacking info.
My clients have several web services in the local network (regular services, not DB-based), the have the same interface, but different URL's.
Versions of the DB are 11, 12, and 16.
First of all, I do not see in the specs an option for a non-hardcoded URL. The logic says that this has to be possible, but I cannot find it.
Second, I need to see an example of accessing an XML or JSon based service, I cannot find it in the specs either.
Can anyone point me to a document with examples?
Thank you
Arcady

The following will call a web service with whatever URL you pass in as the argument "myurl". I think that is what you are looking for.
CREATE PROCEDURE cli_test2( myurl LONG VARCHAR )
RESULT( httpheaders long varchar, httpvalues long varchars
URL '!myurl'
To deal with the resulting data in XML, use the OPENXML() function.
eg. To turn an XML list of employees that looks like this:
<root>
<row EmployeeID="102" Surname="Whitney" GivenName="Fran" StartDate="1984-08-28"/>
</root>
into a table of results, you would do this (where xmlgetemplist() is the web service call):
CREATE OR REPLACE PROCEDURE xmlgetemplist() RESULT( httpheader long varchar, httpbody long varchar)
URL 'http://localhost/demo/xmlEmployeeList'
TYPE 'HTTP:GET';
create variable res long varchar;
-- call the web service
select httpbody into res from xmlgetemplist() where httpheader = 'Body'
-- extract the XML elements into a SQL result set
select * from openXML( res, '/root/row' ) WITH ( EmployeeID INT '@EmployeeID',
       GivenName    CHAR(20) '@GivenName',
       Surname      CHAR(20) '@Surname',
       PhoneNumber CHAR(10) '@Phone');
To deal with the resulting data in JSON, use the sp_parse_json() procedure.
eg.
To turn a JSON formatted list of employees that looks like this:
"EmployeeID": 102,
"Surname": "Whitney",
"GivenName": "Fran",
"StartDate": "1984-08-28",
"TerminationDate": null
into a table of results, you would do this (where jsongetemplist() is the web service call):
CREATE OR REPLACE PROCEDURE jsongetemplist() RESULT( httpheader long varchar, httpbody long varchar)
URL 'http://localhost/demo/jsonEmployeeList'
TYPE 'HTTP:GET';
create variable foo long varchar;
--call the webservice
select httpbody into foo from jsongetemplist() where httpheader = 'Body';
--turn the json result into a structured array of data
-- this step is required because of less structured nature of JSON
call sp_parse_json( 'output_array', foo);
--extract the JSON elements from the output array into a SQL result set
SELECT output_array[[row_num]].EmployeeID as EmployeeID,
               output_array[[row_num]].SurName as SurName,
               output_array[[row_num]].GivenName as GivenName,
               output_array[[row_num]].StartDate as StartDate,
               output_array[[row_num]].TerminationDate as EndDate
FROM sa_rowgenerator(1, CARDINALITY(output_array))
Hope this helps,
--Jason

What is the URL for an external web service

I have an external web service that I want to invoke a BPEL process. I was wondering how to find the URL for the BPEL process.
cheers
James

We're invoking the BPEL endpoint from a .NET app using the 'endpoint location' but seemed to be forced to use the embedded version number. For instance we have to say 'http://<server>:<port>/orabpel/<domain>/<process>/1.0' and I can't seem to get rid of the '1.0'. This contrasts to the WSDL location where I can use a browser and remove the version number to get the current default.
Am I doing something wrong? I'd like to avoid embedding the version in the endpoint.

Lync Mobile for external users not working

Hello,
We have Lync Server Enterprise pool with 2 front end server, 2 edge server & TMG for reverse proxy.
PC client internally & externally working. Internal mobile users are working. But not working for external mobile users.
I used 2 tools to check this.
Web based connectivity analyser, it runs without any error.
But when I use installed version of lync connectivity analyser its throws error that. Server discovery failed for secured internal channel against
https://lyncdiscoverinternal.mydomain.com
Also, I am able to download a .json file when you access
https://lyncdiscover.mydomain.com

Hello,
Sorry for late response. My TMG server was not functioning, now it is working for lync mobile is still having problem. I am pasting the lync analyser full reports:
Network access: NetworkAccessExternal
Logging test parameters:
SIP Uri: [email protected]
User Name:
Discovery Type: Automatic Discovery
Selected client: ApplicationLyncMobile2013
Starting Lync server autodiscovery
Please wait; this test may take several minutes to complete...
Starting automatic discovery for secure (HTTPS) internal channel
Sending HTTP request to
https://lyncdiscoverinternal.contoso.com/[email protected]
Cookie found in autodiscover response: StatusCode: 403, ReasonPhrase: 'Forbidden ( The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. )', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
Connection: close
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 2040
Content-Type: text/html
Autodiscover: SendRequest(): the URL
https://lyncdiscoverinternal.contoso.com/[email protected] couldn't be connected. Complete HTTP headers:\r\n Connection: close
Pragma: no-cache
Cache-Control: no-cache
Couldn't connect to URL
https://lyncdiscoverinternal.contoso.com/[email protected] (HTTP status code Forbidden)
System.Exception: Couldn't connect to URL
https://lyncdiscoverinternal.contoso.com/[email protected] (HTTP status code Forbidden)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.TerminateAD(String mesg)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<SendRequest>d__d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<StartDiscoveryJourney>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at LyncConnectivityAnalyzerCore.Utilities.<RetrieveUserLocation>d__3e.MoveNext()
Server discovery failed for secured internal channel against
https://lyncdiscoverinternal.contoso.com/
Starting automatic discovery for unsecure (HTTP) internal channel
Sending HTTP request to
http://lyncdiscoverinternal.contoso.com/[email protected]
Cookie found in autodiscover response: StatusCode: 403, ReasonPhrase: 'Forbidden ( The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. )', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
Connection: close
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 2040
Content-Type: text/html
Autodiscover: SendRequest(): the URL
http://lyncdiscoverinternal.contoso.com/[email protected] couldn't be connected. Complete HTTP headers:\r\n Connection: close
Pragma: no-cache
Cache-Control: no-cache
Couldn't connect to URL
http://lyncdiscoverinternal.contoso.com/[email protected] (HTTP status code Forbidden)
System.Exception: Couldn't connect to URL
http://lyncdiscoverinternal.contoso.com/[email protected] (HTTP status code Forbidden)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.TerminateAD(String mesg)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<SendRequest>d__d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<StartDiscoveryJourney>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at LyncConnectivityAnalyzerCore.Utilities.<RetrieveUserLocation>d__3e.MoveNext()
Server discovery failed for unsecured internal channel against
http://lyncdiscoverinternal.contoso.com/
Starting automatic discovery for secure (HTTPS) external channel
Sending HTTP request to
https://lyncdiscover.contoso.com/[email protected]
Cookie found in autodiscover response: StatusCode: 200, ReasonPhrase: 'OK', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
Connection: Keep-Alive
Pragma: no-cache
X-MS-Server-Fqdn: SGRFLYNC1.contoso.com
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Date: Mon, 24 Nov 2014 13:36:49 GMT
Server: Microsoft-IIS/8.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 1065
Content-Type: application/vnd.microsoft.rtc.autodiscover+xml; v=1
Expires: -1
Parsing the response for URL
https://lyncdiscover.contoso.com/[email protected]. Full response: <?xml version="1.0" encoding="utf-8"?><AutodiscoverResponse xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" AccessLocation="External"><Root><Link token="Domain" href="https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/domain?originalDomain=contoso.com"
/><Link token="User" href="https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=contoso.com"
/><Link token="Self" href="https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root?originalDomain=contoso.com"
/><Link token="OAuth" href="https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/oauth/user?originalDomain=contoso.com"
/><Link token="External/XFrame" href="https://lyncdiscover.contoso.com/Autodiscover/XFrame/XFrame.html" /><Link token="Internal/XFrame"
href="https://lync.contoso.com/Autodiscover/XFrame/XFrame.html" /><Link token="XFrame" href="https://lyncdiscover.contoso.com/Autodiscover/XFrame/XFrame.html"
/></Root></AutodiscoverResponse>
Autodiscover URL
https://lyncdiscover.contoso.com/[email protected] redirected to
https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=contoso.com
Sending HTTP request to
https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/[email protected]
Cookie found in autodiscover response: StatusCode: 403, ReasonPhrase: 'Forbidden ( The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. )', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
Connection: close
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 2040
Content-Type: text/html
Autodiscover: SendRequest(): the URL
https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/[email protected] couldn't be connected. Complete HTTP headers:\r\n Connection: close
Pragma: no-cache
Cache-Control: no-cache
Couldn't connect to URL
https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/[email protected] (HTTP status code Forbidden)
System.Exception: Couldn't connect to URL
https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/[email protected] (HTTP status code Forbidden)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.TerminateAD(String mesg)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<SendRequest>d__d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<ParseResponse>d__16.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<StartDiscoveryJourney>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at LyncConnectivityAnalyzerCore.Utilities.<RetrieveUserLocation>d__3e.MoveNext()
Server discovery failed for secured external channel against
https://lyncdiscover.contoso.com/
Starting automatic discovery for unsecure (HTTP) external channel
Sending HTTP request to
http://lyncdiscover.contoso.com/[email protected]
Cookie found in autodiscover response: StatusCode: 200, ReasonPhrase: 'OK', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
Connection: Keep-Alive
Pragma: no-cache
X-MS-Server-Fqdn: SGRFLYNC1.contoso.com
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Date: Mon, 24 Nov 2014 13:36:49 GMT
Server: Microsoft-IIS/8.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 1065
Content-Type: application/vnd.microsoft.rtc.autodiscover+xml; v=1
Expires: -1
Parsing the response for URL
http://lyncdiscover.contoso.com/[email protected]. Full response: <?xml version="1.0" encoding="utf-8"?><AutodiscoverResponse xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" AccessLocation="External"><Root><Link token="Domain" href="https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/domain?originalDomain=contoso.com"
/><Link token="User" href="https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=contoso.com"
/><Link token="Self" href="https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root?originalDomain=contoso.com"
/><Link token="OAuth" href="https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/oauth/user?originalDomain=contoso.com"
/><Link token="External/XFrame" href="https://lyncdiscover.contoso.com/Autodiscover/XFrame/XFrame.html" /><Link token="Internal/XFrame"
href="https://lync.contoso.com/Autodiscover/XFrame/XFrame.html" /><Link token="XFrame" href="https://lyncdiscover.contoso.com/Autodiscover/XFrame/XFrame.html"
/></Root></AutodiscoverResponse>
Autodiscover URL
http://lyncdiscover.contoso.com/[email protected] redirected to
https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=contoso.com
Sending HTTP request to
https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/[email protected]
Cookie found in autodiscover response: StatusCode: 403, ReasonPhrase: 'Forbidden ( The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. )', Version: 1.1, Content: System.Net.Http.StreamContent, Headers:
Connection: close
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 2040
Content-Type: text/html
Autodiscover: SendRequest(): the URL
https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/[email protected] couldn't be connected. Complete HTTP headers:\r\n Connection: close
Pragma: no-cache
Cache-Control: no-cache
Couldn't connect to URL
https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/[email protected] (HTTP status code Forbidden)
System.Exception: Couldn't connect to URL
https://lyncdiscover.contoso.com/Autodiscover/AutodiscoverService.svc/root/[email protected] (HTTP status code Forbidden)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.TerminateAD(String mesg)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<SendRequest>d__d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<ParseResponse>d__16.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<StartDiscoveryJourney>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at LyncConnectivityAnalyzerCore.Utilities.<RetrieveUserLocation>d__3e.MoveNext()
Server discovery failed for unsecured external channel against
http://lyncdiscover.contoso.com/
None, AutoInternalSecureD, AutoInternalUnsecureD, AutoExternalSecureD, AutoExternalUnsecureD, ManualDNSFail, ManualSecureD, ManualUnsecureD, AuthBrokerInternalLMXCheckGET, AuthBrokerInternalLMXCheckPOST, AuthBrokerExternalLMXCheckGET, AuthBrokerExternalLMXCheckPOST,
MobilityMCXInternalLMXCheckGET, MobilityMCXInternalLMXCheckPOST, MobilityMCXExternalLMXCheckGET, MobilityMCXExternalLMXCheckPOST, LMXSIPServerInternalDNS, LMXSIPServerExternalDNS, MobilityUCWAInternalCheckPOST, MobilityUCWAExternalCheckPOST
Automatic discovery of the Lync server failed. Please verify the server requirements at
http://go.microsoft.com/fwlink/?LinkId=278998 . Lync mobile apps do not require automatic discovery. You could enter the server FQDN manually and test connectivity again.
Microsoft Lync Connectivity Analyzer cannot analyze deployment readiness until a discovery test has completed successfully.

Lync Mobility internal connectivity ovre Wifi - Android versus iOS behavior

I am having a problem with getting iOS mobility clients to connect to the UCWA external web services.
Android clients don't exhibit this problem.
Access outside the corporate network works fine but if I'm interpreting the logs correctly when internal the iOS client is hitting lyncdiscoverinternal.domain.com over an unencrypyed connection and receiving the INTERNAL web services URL (FQDN of the Standard
FE server) instead of the public external address for the Autodiscover service which in our internal DNS is also pointing to the ARR external proxy IP. At that point the autodiscover process breaks down because they don't trust our internal CA.
For some reason Android clients seem to just keep on trying until they eventually hit the lyncdiscover.domain.com record which resolves to the external ARR proxy IP address, then receive the external autodiscover web service URL and get hairpinned back into
the internal network.
My understanding is that the mobility clients should ALWAYS receive the EXTERNAL web services URL. Maybe the iOS client will eventually receive this if they can get through the Autodiscover process. But as long as it's being told to access the
INTERNAL autodiscover URL it's going to fail.
Has anyone experienced this?
GET http://lyncdiscoverinternal.sandvine.com/
Request Id: 0x14e2ab8
HttpHeader:Cache-Control no-cache
HttpHeader:Content-Length 1072
HttpHeader:Content-Type application/vnd.microsoft.rtc.autodiscover+xml; v=1
HttpHeader:Date Tue, 11 Nov 2014 14:34:05 GMT
HttpHeader:Expires -1
HttpHeader:Pragma no-cache
HttpHeader:Server Microsoft-IIS/8.5
HttpHeader:StatusCode 200
HttpHeader:X-AspNet-Version 4.0.30319
HttpHeader:X-Content-Type-Options nosniff
HttpHeader:X-MS-Server-Fqdn WTL-LYNC-1.sandvine.com
HttpHeader:X-Powered-By ASP.NET
......<?xml version="1.0" encoding="utf-8"?><AutodiscoverResponse xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" AccessLocation="Internal"><Root><Link token="Domain" href="https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/domain?originalDomain=sandvine.com" /><Link token="User" href="https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com" /><Link token="Self" href="https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root?originalDomain=sandvine.com" /><Link token="OAuth" href="https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/oauth/user?originalDomain=sandvine.com" /><Link token="External/XFrame" href="https://webservices.sandvine.com/Autodiscover/XFrame/XFrame.html" /><Link token="Internal/XFrame" href="https://wtl-lync-1.sandvine.com/Autodiscover/XFrame/XFrame.html" /><Link token="XFrame" href="https://webservices.sandvine.com/Autodiscover/XFrame/XFrame.html" /></Root></AutodiscoverResponse>
</ReceivedResponse>
2014-11-11 09:34:06.360 Lync[1044:79e2000] INFO TRANSPORT CUcwaAutoDiscoveryResponse.cpp/112:location value is internal
2014-11-11 09:34:06.361 Lync[1044:79e2000] INFO TRANSPORT CUcwaAutoDiscoveryResponse.cpp/195:User url is https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.362 Lync[1044:79e2000] INFO TRANSPORT CHttpRequestProcessor.cpp/266:Sending event to main thread for request(0x14e2ab8)
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/822:Req. completed, Stopping timer.
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CUrlRedirectAndTrustResolver.cpp/610:UrlRedirectAndTrustResolver complete with url = http://lyncdiscoverinternal.sandvine.com/, Hops = 1, status = S_OK (S0-0-0)
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/725:Response received for req. UrlTrustResolver(0x14e2ab8): S_OK (S0-0-0) (Success); Done with req.; Stopping resend timer
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/393:CUcwaAutoDiscoverGetUserUrlOperation::onEvent received. Status = S_OK (S0-0-0), url = http://lyncdiscoverinternal.sandvine.com/
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/449:Received a root response
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/456:Running trust check on user url. url = https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.364 Lync[1044:3c9939dc] INFO APPLICATION CUrlRedirectAndTrustResolver.cpp/77:Starting CUrlRedirectAndTrustResolver with url = https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com, maxHops = 1
2014-11-11 09:34:06.364 Lync[1044:3c9939dc] INFO APPLICATION CUrlRedirectAndTrustResolver.cpp/201:CUrlRedirectAndTrustResolver::processUrl called with url = https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user, hopCount = 0, maxHops = 1
2014-11-11 09:34:06.364 Lync[1044:3c9939dc] INFO APPLICATION CUrlRedirectAndTrustResolver.cpp/610:UrlRedirectAndTrustResolver complete with url = https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user, Hops = 0, status = S_OK (S0-0-0)
2014-11-11 09:34:06.364 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation completed with url = http://lyncdiscoverinternal.sandvine.com/?sipuri=sip:[email protected], userUrl = https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com, status = S_OK (S0-0-0)
2014-11-11 09:34:06.364 Lync[1044:3c9939dc] INFO TRANSPORT CCredentialManager.cpp/176:getSpecificCredential for serviceId(1) returning: credType (1) signInName ([email protected]) domain () username ([email protected]) password.empty() (0) certificate.isValid() (0) privateKey.empty() (1) compatibleServiceIds(1)
2014-11-11 09:34:06.367 Lync[1044:3c9939dc] INFO TRANSPORT CMetaDataManager.cpp/403:Received a request to get the meta data of type 0 for url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.367 Lync[1044:3c9939dc] INFO TRANSPORT CMetaDataManager.cpp/458:Sending Unauthenticated get to get the web-ticket url
2014-11-11 09:34:06.367 Lync[1044:3c9939dc] INFO TRANSPORT CTransportThread.cpp/135:Added Request() to Request Processor queue
2014-11-11 09:34:06.368 Lync[1044:3c9939dc] INFO TRANSPORT CTransportThread.cpp/230:Created thread => context[0x155cad0]
2014-11-11 09:34:06.368 Lync[1044:7b68000] INFO TRANSPORT CTransportThread.cpp/401:Started executing thread => context[0x155cad0]
2014-11-11 09:34:06.368 Lync[1044:3c9939dc] INFO TRANSPORT CAuthenticationResolver.cpp/109:Waiting on Meta Data from https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.368 Lync[1044:7b68000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component MetaDataManager on sign-out.
2014-11-11 09:34:06.368 Lync[1044:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/385:Submitting new req. GET-AuthenticatedUserGetRequest(0x5e08478)
2014-11-11 09:34:06.368 Lync[1044:7b68000] INFO TRANSPORT CTransportThread.cpp/347:Sent Request() to Request Processor
2014-11-11 09:34:06.368 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1285:Submitting Authenticated AutoDiscovery request to https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.369 Lync[1044:7b68000] WARNING TRANSPORT CCredentialManager.cpp/317:CCredentialManager::getSpecificCredential returning NULL credential for serviceId (4) type (1)!
2014-11-11 09:34:06.369 Lync[1044:7b68000] INFO TRANSPORT TransportUtilityFunctions.cpp/689:<SentRequest>
GET https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
Request Id: 0x5e19588
HttpHeader:Accept
</SentRequest>
2014-11-11 09:34:06.369 Lync[1044:7b68000] INFO UTILITIES CHttpStreamPool.cpp/399:Allocating stream 0x5e03bd0 for url - https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user with persistent id as 16
2014-11-11 09:34:06.370 Lync[1044:7b68000] VERBOSE TRANSPORT CHttpProxyHelper.cpp/435:CHttpProxyHelper::discoverProxy : No proxy found for url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com. Sending over direct connection.
2014-11-11 09:34:06.373 Lync[1044:7b68000] INFO UTILITIES CTimer.cpp/225:Created timer instance (0x15c85c4) for runloop (0x5e06150)
2014-11-11 09:34:06.409 Lync[1044:281330] CFNetwork SSLHandshake failed (-9807)
2014-11-11 09:34:06.410 Lync[1044:7b68000] ERROR TRANSPORT CHttpConnection.cpp/1029:Request Type = 0x%u0x15af3e0 Error domain = NSOSStatusErrorDomain code = 0xffffd9b1 ErrorDescription = The operation couldn.......t be completed. (OSStatus error -9807.) ErrorFailureReason = ErrorRecoverySuggestion =
2014-11-11 09:34:06.410 Lync[1044:7b68000] INFO UTILITIES CHttpStreamPool.cpp/467:Releasing stream 0x5e03bd0.
2014-11-11 09:34:06.410 Lync[1044:7b68000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x5e03bd0.
2014-11-11 09:34:06.411 Lync[1044:7b68000] INFO TRANSPORT CHttpRequestProcessor.cpp/173:Received response of request() with status = 0x22020002
2014-11-11 09:34:06.411 Lync[1044:7b68000] INFO TRANSPORT CHttpRequestProcessor.cpp/201:Request resulted in E_SslError (E2-2-2). The retry counter is: 0
2014-11-11 09:34:06.411 Lync[1044:7b68000] INFO TRANSPORT CHttpRequestProcessor.cpp/266:Sending event to main thread for request(0x5e19588)
2014-11-11 09:34:06.412 Lync[1044:3c9939dc] INFO TRANSPORT CMetaDataManager.cpp/585:Received response for meta data request of type 60 with status 570556418
2014-11-11 09:34:06.412 Lync[1044:3c9939dc] ERROR TRANSPORT CMetaDataManager.cpp/601:Unable to get a response to an unauthenticated get to url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.412 Lync[1044:3c9939dc] INFO TRANSPORT CAuthenticationResolver.cpp/208:MetaData retrieval for url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com completed with status 570556418
2014-11-11 09:34:06.412 Lync[1044:3c9939dc] INFO TRANSPORT CAuthenticationResolver.cpp/238:Deleting 1 pended Meta data requests for url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.413 Lync[1044:3c9939dc] ERROR TRANSPORT CAuthenticationResolver.cpp/334:Unable to get the meta data for server url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.413 Lync[1044:3c9939dc] INFO TRANSPORT CAuthenticationResolver.cpp/337:Failing request to the request manager
2014-11-11 09:34:06.413 Lync[1044:3c9939dc] INFO TRANSPORT CRequestManager.cpp/284:Failing secure request UcwaAutoDiscoveryRequest with status E_SslError (E2-2-2)
2014-11-11 09:34:06.413 Lync[1044:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/822:Req. completed, Stopping timer.
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1406:Received autodiscovery response with status E_SslError (E2-2-2)
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1365:Raising Autodiscovery event with status (E_SslError (E2-2-2)) for eventType (0) AD in progress (0), NL in progress (0)
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryServiceRetrialWrapper.cpp/417:Received event for type 0 with status E_SslError (E2-2-2)
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryServiceRetrialWrapper.cpp/496:Raising Autodiscovery event with status E_SslError (E2-2-2) for eventType 0
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] ERROR APPLICATION CUcwaAppSession.cpp/2072:Auto-discovery failed, aborting sign-in!
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAppSession.cpp/997:CUcwaAppSession::setNewActualState() state=0
2014-11-11 09:34:06.415 Lync[1044:79e2000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component UcwaAutoDiscoverySession on sign-out.
2014-11-11 09:34:06.415 Lync[1044:79e2000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x14ecd90.
2014-11-11 09:34:06.416 Lync[1044:7b68000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component MetaDataManager on sign-out.
2014-11-11 09:34:06.416 Lync[1044:3c9939dc] INFO APPLICATION CCertificateProvisioningService.cpp/544:Clearing certificate from transport: 35ed3513-05b6-49e3-a724-2ce2f7e7ab82
2014-11-11 09:34:06.416 Lync[1044:3c9939dc] INFO UTILITIES CiOsAppStateQuery.hxx/264:Clearing keep-alive timer callback
2014-11-11 09:34:06.417 Lync[1044:3c9939dc] INFO APPLICATION CAlertReporter.cpp/64:Alert received! Category 1, Type 201, level 0, error E_SslError (E2-2-2), context '', hasAction=false
2014-11-11 09:34:06.417 Lync[1044:3c9939dc] INFO APPLICATION CAlertReporter.cpp/117:Alert cleared of Category 1, Type 201, cleared 0 alerts
2014-11-11 09:34:06.417 Lync[1044:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/725:Response received for req. GET-AuthenticatedUserGetRequest(0x5e08478): E_SslError (E2-2-2) (RemoteNetworkPermanentError); Done with req.; Stopping resend timer
2014-11-11 09:34:06.418 Lync[1044:3c9939dc] INFO UI CMUIManager.mm/957:UpdateViews
2014-11-11 09:34:06.419 Lync[1044:3c9939dc] INFO UI CMUIManager.mm/1025:ActualState = IsSignedOut DesiredState = BeSignedIn DataAvailable = 0 Showing UI = CredentialTableViewController
2014-11-11 09:34:06.419 Lync[1044:3c9939dc] INFO UI CMTableViewControllerBase.mm/303:MEMORY TRACKING 0x020bb400 CREATED CMCredentialsTableViewController
2014-11-11 09:34:06.473 Lync[1044:3c9939dc] INFO UI CMSettingsManager.mm/231:CMFirstViewController SETTINGS_LYNCFIRSTRUN_APPLICATION 1
2014-11-11 09:34:06.473 Lync[1044:3c9939dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-11 09:34:06.473 Lync[1044:3c9939dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-11 09:34:06.473 Lync[1044:3c9939dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-11 09:34:06.474 Lync[1044:3c9939dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-11 09:34:06.474 Lync[1044:3c9939dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-11 09:34:06.474 Lync[1044:3c9939dc] INFO UI CMNotificationManager.mm/697:desired view is alert, size 1
2014-11-11 09:34:06.474 Lync[1044:3c9939dc] INFO UI CMNotificationManager.mm/737:adding the desired view
2014-11-11 09:34:06.475 Lync[1044:3c9939dc] INFO UI CMNotificationManager.mm/472:reposition floating views
2014-11-11 09:34:06.475 Lync[1044:3c9939dc] INFO UI CMAlertViewController.mm/98:showalert is 1
2014-11-11 09:34:06.475 Lync[1044:3c9939dc] INFO UI CMAlertViewController.mm/102:showalert is 0
2014-11-11 09:34:06.475 Lync[1044:3c9939dc] INFO UI CMUIUtil.mm/410:Mapping error code = 0x22020002, context = , type = 201
2014-11-11 09:34:06.481 Lync[1044:3c9939dc] INFO UI CMUIUtil.mm/1714:Mapped error message is 'We can...t verify the certificate from the server. Please contact your support team.

Well,
I've changed my web services internal FQDN as per
this blog.
I've also added that FQDN and our lyncdiscoverinternal FQDN to our public UCC cert and then bound it to the internal and external web services on the FE server.
Now I"m getting a web ticket error instead of a certificate trust error.
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
<h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
</fieldset></div>
</div>
</body>
</html>
</ReceivedResponse>
2014-11-12 15:25:24.506 Lync[1895:6817000] INFO TRANSPORT CHttpRequestProcessor.cpp/266:Sending event to main thread for request(0x14c3e58)
2014-11-12 15:25:24.507 Lync[1895:3c9939dc] INFO TRANSPORT CWebTicketSession.cpp/986:Received auth error (E_AuthError (E2-3-2)), Invalidating web-ticket for serverUrl(https://webservicesint.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com)
2014-11-12 15:25:24.507 Lync[1895:3c9939dc] INFO TRANSPORT CWebTicketSession.cpp/997:Invalidated 1 webtickets for https://webservicesint.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com.
2014-11-12 15:25:24.508 Lync[1895:3c9939dc] INFO TRANSPORT CLiveIdSession.cpp/604:Invalidating liveid tickets matching https://webservicesint.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-12 15:25:24.508 Lync[1895:3c9939dc] INFO TRANSPORT CLiveIdSession.cpp/629:Invalidated 0 liveid tickets.
2014-11-12 15:25:24.508 Lync[1895:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/822:Req. completed, Stopping timer.
2014-11-12 15:25:24.508 Lync[1895:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1406:Received autodiscovery response with status E_AuthError (E2-3-2)
2014-11-12 15:25:24.509 Lync[1895:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1365:Raising Autodiscovery event with status (E_AuthError (E2-3-2)) for eventType (0) AD in progress (0), NL in progress (0)
2014-11-12 15:25:24.509 Lync[1895:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryServiceRetrialWrapper.cpp/417:Received event for type 0 with status E_AuthError (E2-3-2)
2014-11-12 15:25:24.509 Lync[1895:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryServiceRetrialWrapper.cpp/496:Raising Autodiscovery event with status E_AuthError (E2-3-2) for eventType 0
2014-11-12 15:25:24.509 Lync[1895:3c9939dc] ERROR APPLICATION CUcwaAppSession.cpp/2072:Auto-discovery failed, aborting sign-in!
2014-11-12 15:25:24.509 Lync[1895:3c9939dc] INFO APPLICATION CUcwaAppSession.cpp/997:CUcwaAppSession::setNewActualState() state=0
2014-11-12 15:25:24.510 Lync[1895:6817000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component UcwaAutoDiscoverySession on sign-out.
2014-11-12 15:25:24.510 Lync[1895:3c9939dc] INFO APPLICATION CCertificateProvisioningService.cpp/544:Clearing certificate from transport: 139372fc-3cb8-4017-9bfc-fcaa1ab29698
2014-11-12 15:25:24.511 Lync[1895:6a3d000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component WebTicketSession on sign-out.
2014-11-12 15:25:24.511 Lync[1895:69bb000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component MetaDataManager on sign-out.
2014-11-12 15:25:24.511 Lync[1895:6817000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x1434be0.
2014-11-12 15:25:24.511 Lync[1895:3c9939dc] INFO UTILITIES CiOsAppStateQuery.hxx/264:Clearing keep-alive timer callback
2014-11-12 15:25:24.512 Lync[1895:6a3d000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x642f6c0.
2014-11-12 15:25:24.513 Lync[1895:69bb000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x14415d0.
2014-11-12 15:25:24.514 Lync[1895:6817000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x156e680.
2014-11-12 15:25:24.516 Lync[1895:3c9939dc] INFO APPLICATION CAlertReporter.cpp/64:Alert received! Category 1, Type 201, level 0, error E_AuthError (E2-3-2), context '', hasAction=false
2014-11-12 15:25:24.516 Lync[1895:3c9939dc] INFO APPLICATION CAlertReporter.cpp/117:Alert cleared of Category 1, Type 201, cleared 0 alerts
2014-11-12 15:25:24.516 Lync[1895:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/725:Response received for req. GET-AuthenticatedUserGetRequest(0x14c3e58): E_AuthError (E2-3-2) (RemoteNetworkPermanentError); Done with req.; Stopping resend timer

Source system set up for internal / external access

Hi all.
We have an EP 6.0 (NW04 SP16) system delivering BW data from a back-end BW 3.1/3.2 system. We are using BW Report iViews to deliver all reports to external and internal users. I am having a very specific problem when setting up the source system for the BW system.
The BW Report iView object uses the WAS hostname parameter(found under: System Administration -> System Configuration -> Systems -> BWSourceSystem -> Open ->Object -> "Web Application Server (WAS)") when retrieving the back-end BW report.
When this parameter is set using an internal host id (internal_host.company.com) internal users can access the report in question, but external users can't. Alternatively, when this parameter is set using an external host id (ie. the host of our DMZ proxy server) external users can access the report, but internal users can't.
I need to find a way to use one hostname for this parameter that will work for both internal and external users. I have worked with the HTTPURLLOC table and this solution works great for URL iViews, but not for BW Report iViews. Does anyone have any suggestions? Thanks!

Hi Shashi.
We did find a solution using web dispatcher. We actually installed two instances of web dispatcher... one in our DMZ for external access and another one our corporate LAN. The web dispatchers are configured identically and the EP instance knows only one hostname:
name.company.com
The port passed to the URL https://name.company.com:port is what tells web dispatcher what to do with the request (ie. pass the request to EP, BW, ECC, R/3, etc.).
Be aware that EP allows for only one hostname for Source System Setup - my name.company.com in my example above -(this is the EP Web Application Server hostname (WAS) parameter found under System Admin - System Config - Systems) - so you may need to do something like we did:
register name.company.com on the internet as a public address and use that DNS mapping for external users (using your DMZ version of webdispatcher). Subsequently, use internal DNS or host name mapping to register an internal private addresss for name.company.com (using your LAN version of web dispatcher). this will allow both internal / external users access to the portal and other SAP back-end systems.
It may sound a bit kludgy, but believe me - we tried everything to make this work. I took this all of the way to SAP and this was the recommendation SAP made for allowing both internal and external users access to portal and BW data.
Hope this helps!

Lync Discover Internal & External Web URL

Similar Messages

Maybe you are looking for