Lync Mobility internal connectivity ovre Wifi - Android versus iOS behavior

I am having a problem with getting iOS mobility clients to connect to the UCWA external web services.
Android clients don't exhibit this problem.
Access outside the corporate network works fine but if I'm interpreting the logs correctly when internal the iOS client is hitting lyncdiscoverinternal.domain.com over an unencrypyed connection and receiving the INTERNAL web services URL (FQDN of the Standard
FE server) instead of the public external address for the Autodiscover service which in our internal DNS is also pointing to the ARR external proxy IP.  At that point the autodiscover process breaks down because they don't trust our internal CA. 
For some reason Android clients seem to just keep on trying until they eventually hit the lyncdiscover.domain.com record which resolves to the external ARR proxy IP address, then receive the external autodiscover web service URL and get hairpinned back into
the internal network.
My understanding is that the mobility clients should ALWAYS receive the EXTERNAL web services URL.  Maybe the iOS client will eventually receive this if they can get through the Autodiscover process.  But as long as it's being told to access the
INTERNAL autodiscover URL it's going to fail.
Has anyone experienced this?
GET http://lyncdiscoverinternal.sandvine.com/
Request Id: 0x14e2ab8
HttpHeader:Cache-Control no-cache
HttpHeader:Content-Length 1072
HttpHeader:Content-Type application/vnd.microsoft.rtc.autodiscover+xml; v=1
HttpHeader:Date Tue, 11 Nov 2014 14:34:05 GMT
HttpHeader:Expires -1
HttpHeader:Pragma no-cache
HttpHeader:Server Microsoft-IIS/8.5
HttpHeader:StatusCode 200
HttpHeader:X-AspNet-Version 4.0.30319
HttpHeader:X-Content-Type-Options nosniff
HttpHeader:X-MS-Server-Fqdn WTL-LYNC-1.sandvine.com
HttpHeader:X-Powered-By ASP.NET
......<?xml version="1.0" encoding="utf-8"?><AutodiscoverResponse xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" AccessLocation="Internal"><Root><Link token="Domain" href="https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/domain?originalDomain=sandvine.com" /><Link token="User" href="https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com" /><Link token="Self" href="https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root?originalDomain=sandvine.com" /><Link token="OAuth" href="https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/oauth/user?originalDomain=sandvine.com" /><Link token="External/XFrame" href="https://webservices.sandvine.com/Autodiscover/XFrame/XFrame.html" /><Link token="Internal/XFrame" href="https://wtl-lync-1.sandvine.com/Autodiscover/XFrame/XFrame.html" /><Link token="XFrame" href="https://webservices.sandvine.com/Autodiscover/XFrame/XFrame.html" /></Root></AutodiscoverResponse>
</ReceivedResponse>
2014-11-11 09:34:06.360 Lync[1044:79e2000] INFO TRANSPORT CUcwaAutoDiscoveryResponse.cpp/112:location value is internal
2014-11-11 09:34:06.361 Lync[1044:79e2000] INFO TRANSPORT CUcwaAutoDiscoveryResponse.cpp/195:User url is https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.362 Lync[1044:79e2000] INFO TRANSPORT CHttpRequestProcessor.cpp/266:Sending event to main thread for request(0x14e2ab8)
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/822:Req. completed, Stopping timer.
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CUrlRedirectAndTrustResolver.cpp/610:UrlRedirectAndTrustResolver complete with url = http://lyncdiscoverinternal.sandvine.com/, Hops = 1, status = S_OK (S0-0-0)
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/725:Response received for req. UrlTrustResolver(0x14e2ab8): S_OK (S0-0-0) (Success); Done with req.; Stopping resend timer
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/393:CUcwaAutoDiscoverGetUserUrlOperation::onEvent received. Status = S_OK (S0-0-0), url = http://lyncdiscoverinternal.sandvine.com/
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/449:Received a root response
2014-11-11 09:34:06.363 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/456:Running trust check on user url. url = https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.364 Lync[1044:3c9939dc] INFO APPLICATION CUrlRedirectAndTrustResolver.cpp/77:Starting CUrlRedirectAndTrustResolver with url = https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com, maxHops = 1
2014-11-11 09:34:06.364 Lync[1044:3c9939dc] INFO APPLICATION CUrlRedirectAndTrustResolver.cpp/201:CUrlRedirectAndTrustResolver::processUrl called with url = https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user, hopCount = 0, maxHops = 1
2014-11-11 09:34:06.364 Lync[1044:3c9939dc] INFO APPLICATION CUrlRedirectAndTrustResolver.cpp/610:UrlRedirectAndTrustResolver complete with url = https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user, Hops = 0, status = S_OK (S0-0-0)
2014-11-11 09:34:06.364 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation completed with url = http://lyncdiscoverinternal.sandvine.com/?sipuri=sip:[email protected], userUrl = https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com, status = S_OK (S0-0-0)
2014-11-11 09:34:06.364 Lync[1044:3c9939dc] INFO TRANSPORT CCredentialManager.cpp/176:getSpecificCredential for serviceId(1) returning: credType (1) signInName ([email protected]) domain () username ([email protected]) password.empty() (0) certificate.isValid() (0) privateKey.empty() (1) compatibleServiceIds(1)
2014-11-11 09:34:06.367 Lync[1044:3c9939dc] INFO TRANSPORT CMetaDataManager.cpp/403:Received a request to get the meta data of type 0 for url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.367 Lync[1044:3c9939dc] INFO TRANSPORT CMetaDataManager.cpp/458:Sending Unauthenticated get to get the web-ticket url
2014-11-11 09:34:06.367 Lync[1044:3c9939dc] INFO TRANSPORT CTransportThread.cpp/135:Added Request() to Request Processor queue
2014-11-11 09:34:06.368 Lync[1044:3c9939dc] INFO TRANSPORT CTransportThread.cpp/230:Created thread => context[0x155cad0]
2014-11-11 09:34:06.368 Lync[1044:7b68000] INFO TRANSPORT CTransportThread.cpp/401:Started executing thread => context[0x155cad0]
2014-11-11 09:34:06.368 Lync[1044:3c9939dc] INFO TRANSPORT CAuthenticationResolver.cpp/109:Waiting on Meta Data from https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.368 Lync[1044:7b68000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component MetaDataManager on sign-out.
2014-11-11 09:34:06.368 Lync[1044:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/385:Submitting new req. GET-AuthenticatedUserGetRequest(0x5e08478)
2014-11-11 09:34:06.368 Lync[1044:7b68000] INFO TRANSPORT CTransportThread.cpp/347:Sent Request() to Request Processor
2014-11-11 09:34:06.368 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1285:Submitting Authenticated AutoDiscovery request to https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.369 Lync[1044:7b68000] WARNING TRANSPORT CCredentialManager.cpp/317:CCredentialManager::getSpecificCredential returning NULL credential for serviceId (4) type (1)!
2014-11-11 09:34:06.369 Lync[1044:7b68000] INFO TRANSPORT TransportUtilityFunctions.cpp/689:<SentRequest>
GET https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
Request Id: 0x5e19588
HttpHeader:Accept
</SentRequest>
2014-11-11 09:34:06.369 Lync[1044:7b68000] INFO UTILITIES CHttpStreamPool.cpp/399:Allocating stream 0x5e03bd0 for url - https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user with persistent id as 16
2014-11-11 09:34:06.370 Lync[1044:7b68000] VERBOSE TRANSPORT CHttpProxyHelper.cpp/435:CHttpProxyHelper::discoverProxy : No proxy found for url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com. Sending over direct connection.
2014-11-11 09:34:06.373 Lync[1044:7b68000] INFO UTILITIES CTimer.cpp/225:Created timer instance (0x15c85c4) for runloop (0x5e06150)
2014-11-11 09:34:06.409 Lync[1044:281330] CFNetwork SSLHandshake failed (-9807)
2014-11-11 09:34:06.410 Lync[1044:7b68000] ERROR TRANSPORT CHttpConnection.cpp/1029:Request Type = 0x%u0x15af3e0 Error domain = NSOSStatusErrorDomain code = 0xffffd9b1 ErrorDescription = The operation couldn.......t be completed. (OSStatus error -9807.) ErrorFailureReason = ErrorRecoverySuggestion =
2014-11-11 09:34:06.410 Lync[1044:7b68000] INFO UTILITIES CHttpStreamPool.cpp/467:Releasing stream 0x5e03bd0.
2014-11-11 09:34:06.410 Lync[1044:7b68000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x5e03bd0.
2014-11-11 09:34:06.411 Lync[1044:7b68000] INFO TRANSPORT CHttpRequestProcessor.cpp/173:Received response of request() with status = 0x22020002
2014-11-11 09:34:06.411 Lync[1044:7b68000] INFO TRANSPORT CHttpRequestProcessor.cpp/201:Request resulted in E_SslError (E2-2-2). The retry counter is: 0
2014-11-11 09:34:06.411 Lync[1044:7b68000] INFO TRANSPORT CHttpRequestProcessor.cpp/266:Sending event to main thread for request(0x5e19588)
2014-11-11 09:34:06.412 Lync[1044:3c9939dc] INFO TRANSPORT CMetaDataManager.cpp/585:Received response for meta data request of type 60 with status 570556418
2014-11-11 09:34:06.412 Lync[1044:3c9939dc] ERROR TRANSPORT CMetaDataManager.cpp/601:Unable to get a response to an unauthenticated get to url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.412 Lync[1044:3c9939dc] INFO TRANSPORT CAuthenticationResolver.cpp/208:MetaData retrieval for url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com completed with status 570556418
2014-11-11 09:34:06.412 Lync[1044:3c9939dc] INFO TRANSPORT CAuthenticationResolver.cpp/238:Deleting 1 pended Meta data requests for url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.413 Lync[1044:3c9939dc] ERROR TRANSPORT CAuthenticationResolver.cpp/334:Unable to get the meta data for server url https://wtl-lync-1.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-11 09:34:06.413 Lync[1044:3c9939dc] INFO TRANSPORT CAuthenticationResolver.cpp/337:Failing request to the request manager
2014-11-11 09:34:06.413 Lync[1044:3c9939dc] INFO TRANSPORT CRequestManager.cpp/284:Failing secure request UcwaAutoDiscoveryRequest with status E_SslError (E2-2-2)
2014-11-11 09:34:06.413 Lync[1044:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/822:Req. completed, Stopping timer.
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1406:Received autodiscovery response with status E_SslError (E2-2-2)
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1365:Raising Autodiscovery event with status (E_SslError (E2-2-2)) for eventType (0) AD in progress (0), NL in progress (0)
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryServiceRetrialWrapper.cpp/417:Received event for type 0 with status E_SslError (E2-2-2)
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryServiceRetrialWrapper.cpp/496:Raising Autodiscovery event with status E_SslError (E2-2-2) for eventType 0
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] ERROR APPLICATION CUcwaAppSession.cpp/2072:Auto-discovery failed, aborting sign-in!
2014-11-11 09:34:06.414 Lync[1044:3c9939dc] INFO APPLICATION CUcwaAppSession.cpp/997:CUcwaAppSession::setNewActualState() state=0
2014-11-11 09:34:06.415 Lync[1044:79e2000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component UcwaAutoDiscoverySession on sign-out.
2014-11-11 09:34:06.415 Lync[1044:79e2000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x14ecd90.
2014-11-11 09:34:06.416 Lync[1044:7b68000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component MetaDataManager on sign-out.
2014-11-11 09:34:06.416 Lync[1044:3c9939dc] INFO APPLICATION CCertificateProvisioningService.cpp/544:Clearing certificate from transport: 35ed3513-05b6-49e3-a724-2ce2f7e7ab82
2014-11-11 09:34:06.416 Lync[1044:3c9939dc] INFO UTILITIES CiOsAppStateQuery.hxx/264:Clearing keep-alive timer callback
2014-11-11 09:34:06.417 Lync[1044:3c9939dc] INFO APPLICATION CAlertReporter.cpp/64:Alert received! Category 1, Type 201, level 0, error E_SslError (E2-2-2), context '', hasAction=false
2014-11-11 09:34:06.417 Lync[1044:3c9939dc] INFO APPLICATION CAlertReporter.cpp/117:Alert cleared of Category 1, Type 201, cleared 0 alerts
2014-11-11 09:34:06.417 Lync[1044:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/725:Response received for req. GET-AuthenticatedUserGetRequest(0x5e08478): E_SslError (E2-2-2) (RemoteNetworkPermanentError); Done with req.; Stopping resend timer
2014-11-11 09:34:06.418 Lync[1044:3c9939dc] INFO UI CMUIManager.mm/957:UpdateViews
2014-11-11 09:34:06.419 Lync[1044:3c9939dc] INFO UI CMUIManager.mm/1025:ActualState = IsSignedOut DesiredState = BeSignedIn DataAvailable = 0 Showing UI = CredentialTableViewController
2014-11-11 09:34:06.419 Lync[1044:3c9939dc] INFO UI CMTableViewControllerBase.mm/303:MEMORY TRACKING 0x020bb400 CREATED CMCredentialsTableViewController
2014-11-11 09:34:06.473 Lync[1044:3c9939dc] INFO UI CMSettingsManager.mm/231:CMFirstViewController SETTINGS_LYNCFIRSTRUN_APPLICATION 1
2014-11-11 09:34:06.473 Lync[1044:3c9939dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-11 09:34:06.473 Lync[1044:3c9939dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-11 09:34:06.473 Lync[1044:3c9939dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-11 09:34:06.474 Lync[1044:3c9939dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-11 09:34:06.474 Lync[1044:3c9939dc] INFO UI CMConversationCommon.mm/43:not signed in
2014-11-11 09:34:06.474 Lync[1044:3c9939dc] INFO UI CMNotificationManager.mm/697:desired view is alert, size 1
2014-11-11 09:34:06.474 Lync[1044:3c9939dc] INFO UI CMNotificationManager.mm/737:adding the desired view
2014-11-11 09:34:06.475 Lync[1044:3c9939dc] INFO UI CMNotificationManager.mm/472:reposition floating views
2014-11-11 09:34:06.475 Lync[1044:3c9939dc] INFO UI CMAlertViewController.mm/98:showalert is 1
2014-11-11 09:34:06.475 Lync[1044:3c9939dc] INFO UI CMAlertViewController.mm/102:showalert is 0
2014-11-11 09:34:06.475 Lync[1044:3c9939dc] INFO UI CMUIUtil.mm/410:Mapping error code = 0x22020002, context = , type = 201
2014-11-11 09:34:06.481 Lync[1044:3c9939dc] INFO UI CMUIUtil.mm/1714:Mapped error message is 'We can...t verify the certificate from the server. Please contact your support team.

Well,
I've changed my web services internal FQDN as per
this blog.
I've also added that FQDN and our lyncdiscoverinternal FQDN to our public UCC cert and then bound it to the internal and external web services on the FE server.
Now I"m getting a web ticket error instead of a certificate trust error.
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
<h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
</fieldset></div>
</div>
</body>
</html>
</ReceivedResponse>
2014-11-12 15:25:24.506 Lync[1895:6817000] INFO TRANSPORT CHttpRequestProcessor.cpp/266:Sending event to main thread for request(0x14c3e58)
2014-11-12 15:25:24.507 Lync[1895:3c9939dc] INFO TRANSPORT CWebTicketSession.cpp/986:Received auth error (E_AuthError (E2-3-2)), Invalidating web-ticket for serverUrl(https://webservicesint.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com)
2014-11-12 15:25:24.507 Lync[1895:3c9939dc] INFO TRANSPORT CWebTicketSession.cpp/997:Invalidated 1 webtickets for https://webservicesint.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com.
2014-11-12 15:25:24.508 Lync[1895:3c9939dc] INFO TRANSPORT CLiveIdSession.cpp/604:Invalidating liveid tickets matching https://webservicesint.sandvine.com/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=sandvine.com
2014-11-12 15:25:24.508 Lync[1895:3c9939dc] INFO TRANSPORT CLiveIdSession.cpp/629:Invalidated 0 liveid tickets.
2014-11-12 15:25:24.508 Lync[1895:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/822:Req. completed, Stopping timer.
2014-11-12 15:25:24.508 Lync[1895:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1406:Received autodiscovery response with status E_AuthError (E2-3-2)
2014-11-12 15:25:24.509 Lync[1895:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1365:Raising Autodiscovery event with status (E_AuthError (E2-3-2)) for eventType (0) AD in progress (0), NL in progress (0)
2014-11-12 15:25:24.509 Lync[1895:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryServiceRetrialWrapper.cpp/417:Received event for type 0 with status E_AuthError (E2-3-2)
2014-11-12 15:25:24.509 Lync[1895:3c9939dc] INFO APPLICATION CUcwaAutoDiscoveryServiceRetrialWrapper.cpp/496:Raising Autodiscovery event with status E_AuthError (E2-3-2) for eventType 0
2014-11-12 15:25:24.509 Lync[1895:3c9939dc] ERROR APPLICATION CUcwaAppSession.cpp/2072:Auto-discovery failed, aborting sign-in!
2014-11-12 15:25:24.509 Lync[1895:3c9939dc] INFO APPLICATION CUcwaAppSession.cpp/997:CUcwaAppSession::setNewActualState() state=0
2014-11-12 15:25:24.510 Lync[1895:6817000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component UcwaAutoDiscoverySession on sign-out.
2014-11-12 15:25:24.510 Lync[1895:3c9939dc] INFO APPLICATION CCertificateProvisioningService.cpp/544:Clearing certificate from transport: 139372fc-3cb8-4017-9bfc-fcaa1ab29698
2014-11-12 15:25:24.511 Lync[1895:6a3d000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component WebTicketSession on sign-out.
2014-11-12 15:25:24.511 Lync[1895:69bb000] INFO TRANSPORT CHttpRequestProcessor.cpp/134:Clearing request processor for component MetaDataManager on sign-out.
2014-11-12 15:25:24.511 Lync[1895:6817000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x1434be0.
2014-11-12 15:25:24.511 Lync[1895:3c9939dc] INFO UTILITIES CiOsAppStateQuery.hxx/264:Clearing keep-alive timer callback
2014-11-12 15:25:24.512 Lync[1895:6a3d000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x642f6c0.
2014-11-12 15:25:24.513 Lync[1895:69bb000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x14415d0.
2014-11-12 15:25:24.514 Lync[1895:6817000] INFO UTILITIES CHttpStreamPool.cpp/599:Releasing stream 0x156e680.
2014-11-12 15:25:24.516 Lync[1895:3c9939dc] INFO APPLICATION CAlertReporter.cpp/64:Alert received! Category 1, Type 201, level 0, error E_AuthError (E2-3-2), context '', hasAction=false
2014-11-12 15:25:24.516 Lync[1895:3c9939dc] INFO APPLICATION CAlertReporter.cpp/117:Alert cleared of Category 1, Type 201, cleared 0 alerts
2014-11-12 15:25:24.516 Lync[1895:3c9939dc] INFO APPLICATION CTransportRequestRetrialQueue.cpp/725:Response received for req. GET-AuthenticatedUserGetRequest(0x14c3e58): E_AuthError (E2-3-2) (RemoteNetworkPermanentError); Done with req.; Stopping resend timer

Similar Messages

  • Can't connect to wifi network after iOS update

    Can't connect to wifi network after iOS update.

    This does not work in my case.
    Situation: we have wifi at home using WPA encryption.
    The iPod Touch 8GB connected seamless to this network and anything was ok. After some days i could no longer connect, the iPod told me "connection to network 'networkname here' failed". Deleting the network and reenter the (correct) passphrase was no help, but changing the SSID on the router was helpful: the iPod could connect again ... for several days.
    Now things stopped working again. Resetting network settings did not help either.
    The iPod can see the network, is asking me for the passphrase and after several seconds telling me: can't connect. On the router log i don't even see a dhcp request, but other laptops work fine with the same wifi network.
    That's a mess, i cannot and will not change the SSID every some days just to get the iPod working again.

  • Lync mobile device connection issue

    Hello everybody,
    I'm implementing Lync Mobility and remote access in our organization. Remote access is workig fine. But mobile devices cannot connecting to Lync Server 2010. My topology is : 
    Reverse Proxy Server(IIS7 works fine) <--> Front End Server <--> Back End Server
    pool : pool1.lynctest.local
    internal web srvc : lyncinternalweb.lynctest.local
    external web srvc : lyncweb.lynctest.domain.com
    All internal and external DNS records created. Deployed internal CA and external internal web service certificates issued from internal CA. Also installed all root certificates on mobile devices and other remote machines. Below is log from android device.
    20 Mar 2014 10:53:27 INFO APPLICATION:SignIn. signInAsUserState=0, actualSessionState=0
    20 Mar 2014 10:53:27 INFO APPLICATION:Sending AutoDiscovery request (in sign-in sequence)
    20 Mar 2014 10:53:27 INFO TRANSPORT:setUsernamePasswordCredential changing credential: 
    20 Mar 2014 10:53:27 INFO TRANSPORT:Credential information: credType (1) signInName ([email protected]) domain () username ([email protected]) password.empty() (0) compatibleServiceIds(1)
    20 Mar 2014 10:53:27 INFO APPLICATION:Serialized sipuri= intUcwa= extUcwa= intADRoot= extADRoot= location=1 networkType=1
    20 Mar 2014 10:53:27 INFO APPLICATION:Storing 2 out-of-sync components took 49ms
    20 Mar 2014 10:53:27 INFO APPLICATION:Timer cancelled. OnResume = 0
    20 Mar 2014 10:53:27 INFO APPLICATION:Discover UCWA urls from https://lyncdiscover.lynctest.golomtbank.com & https://lyncdiscover.lynctest.golomtbank.com for sip:[email protected]
    20 Mar 2014 10:53:27 INFO APPLICATION:Extracted lynctest.golomtbank.com from sip:[email protected]
    20 Mar 2014 10:53:27 INFO APPLICATION:Starting Auto Discovery with urls https://lyncdiscover.lynctest.golomtbank.com?sipuri=sip:[email protected] and https://lyncdiscover.lynctest.golomtbank.com?sipuri=sip:[email protected]
    20 Mar 2014 10:53:27 INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (4)
    20 Mar 2014 10:53:27 INFO TRANSPORT:Credential information: credType (1) signInName () domain () username () password.empty() (1) compatibleServiceIds(0)
    20 Mar 2014 10:53:27 INFO TRANSPORT:Added Request(UcwaAutoDiscoveryRequest) to Request Processor queue
    20 Mar 2014 10:53:27 INFO APPLICATION:Submitting new req. <unknown>
    20 Mar 2014 10:53:27 INFO TRANSPORT:Sent Request(UcwaAutoDiscoveryRequest) to Request Processor
    20 Mar 2014 10:53:27 INFO APPLICATION:Submitting Unauthenticated AutoDiscovery request to https://lyncdiscover.lynctest.golomtbank.com?sipuri=sip:[email protected]
    20 Mar 2014 10:53:27 INFO APPLICATION:CLogonSession::setNewActualState() state=1
    20 Mar 2014 10:53:27 INFO UcClientStateManager: New UI State: ActualState = IsSigningIn DesiredState = BeSignedOut  DataAvailable = false
    20 Mar 2014 10:53:27 INFO TRANSPORT:<SentRequest>
    20 Mar 2014 10:53:27 INFO TRANSPORT:To:https://lyncdiscover.lynctest.golomtbank.com?sipuri=sip:[email protected]
    20 Mar 2014 10:53:27 INFO TRANSPORT:HttpHeader:Accept application/vnd.microsoft.rtc.autodiscover+xml;v=1
    20 Mar 2014 10:53:27 INFO TRANSPORT:
    20 Mar 2014 10:53:27 INFO TRANSPORT:</SentRequest>
    20 Mar 2014 10:53:27 INFO TRANSPORT:Sending request(UcwaAutoDiscoveryRequest) to server type = 0
    20 Mar 2014 10:53:27 VERBOSE HttpConnection: post request: https://lyncdiscover.lynctest.golomtbank.com?sipuri=sip:[email protected]
    20 Mar 2014 10:53:27 VERBOSE HttpConnection: send request: https://lyncdiscover.lynctest.golomtbank.com?sipuri=sip:[email protected]
    20 Mar 2014 10:53:27 INFO APPLICATION:LogonSession::signIn() succeeded
    20 Mar 2014 10:53:27 INFO UcClientStateManager: New UI State: ActualState = IsSigningIn DesiredState = BeSignedIn  DataAvailable = false
    20 Mar 2014 10:53:27 VERBOSE ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.options.SigningInActivity
    20 Mar 2014 10:53:27 VERBOSE ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.options.SigningInActivity
    20 Mar 2014 10:53:27 VERBOSE ActivityMonitor: Activity Stop: com.microsoft.office.lync.ui.options.CredentialsActivity
    20 Mar 2014 10:53:27 VERBOSE ActivityMonitor: Activity Destroy: com.microsoft.office.lync.ui.options.CredentialsActivity
    20 Mar 2014 10:55:33 INFO APPLICATION:Called signOut() in state 1
    20 Mar 2014 10:55:33 INFO APPLICATION:Cancelling all requests
    20 Mar 2014 10:55:33 INFO APPLICATION:Serialized sipuri=sip:[email protected] intUcwa= extUcwa= intADRoot= extADRoot= location=1 networkType=1
    20 Mar 2014 10:55:33 INFO APPLICATION:Storing 2 out-of-sync components took 31ms
    20 Mar 2014 10:55:33 INFO APPLICATION:Timer cancelled. OnResume = 0
    20 Mar 2014 10:55:33 INFO APPLICATION:CLogonSession canceling all requests
    20 Mar 2014 10:55:33 INFO APPLICATION:CLogonSession::setNewActualState() state=0
    20 Mar 2014 10:55:33 INFO UcClientStateManager: New UI State: ActualState = IsSignedOut DesiredState = BeSignedOut  DataAvailable = false
    20 Mar 2014 10:55:34 INFO APPLICATION:Timer cancelled. OnResume = 0
    20 Mar 2014 10:55:34 INFO APPLICATION:Storing 1 out-of-sync Object Models took 22ms
    20 Mar 2014 10:55:34 VERBOSE ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.options.CredentialsActivity
    20 Mar 2014 10:55:34 VERBOSE ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.options.CredentialsActivity
    20 Mar 2014 10:55:34 VERBOSE ActivityMonitor: Activity Stop: com.microsoft.office.lync.ui.options.SigningInActivity
    20 Mar 2014 10:55:34 VERBOSE ActivityMonitor: Activity Destroy: com.microsoft.office.lync.ui.options.SigningInActivity
    20 Mar 2014 10:55:41 VERBOSE ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.options.CredentialsOptionsActivity
    20 Mar 2014 10:55:41 VERBOSE ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.options.CredentialsOptionsActivity
    20 Mar 2014 10:55:41 VERBOSE ActivityMonitor: Activity Stop: com.microsoft.office.lync.ui.options.CredentialsActivity
    20 Mar 2014 10:55:42 INFO APPLICATION:CMcxDataSynchronizer now in mode 1
    20 Mar 2014 10:55:42 INFO APPLICATION:Mode 1 scheduled to timeout in 30.000000s
    20 Mar 2014 10:55:42 INFO APPLICATION:No SendUpdate schedule action. timerStarted=0, timerNeedsToRun=0, channelState=0, timerAction=0
    20 Mar 2014 10:55:42 VERBOSE ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.options.AboutActivity
    20 Mar 2014 10:55:42 VERBOSE ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.options.AboutActivity
    20 Mar 2014 10:55:43 VERBOSE ActivityMonitor: Activity Stop: com.microsoft.office.lync.ui.options.CredentialsOptionsActivity
    Also I tested web services by web browser and they seem fine. I cannot find what's wrong with this. Please help me dears.
    Thank you

    The ports will be visible in the Netstat result after a connection has been setup by a mobile device.
    For details, you can check http://www.lync-blog.nl/?p=671&lang=en
    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
    sure that you completely understand the risk before retrieving any suggestions from the above link.
    Please follow the follow blog to troubleshoot external Lync Mobility connectivity issue step by step:
    http://blogs.technet.com/b/nexthop/archive/2012/02/21/troubleshooting-external-lync-mobility-connectivity-issues-step-by-step.aspx
    Lisa Zheng
    TechNet Community Support

  • A dilemma - phone won't connect to wifi, need to upgrade IOS but need to connect to wifi to update IOS

    Noticed a couple of weeks back that the phone wouldn't connect to WIFI - that option is grayed out on the settings>wifi screen.
    I've gotten suggestions that I update the software, but phone says it needs to be connected to WIFI to download update...
    Where do I go from here?

    Read this: iOS: How to update your iPhone, iPad, or iPod touch - Support - Apple

  • IPhone 5S won't connect to wifi after downloading iOS 7.0.1

    I bought the iPhone 5S this morning and restored from the previous backup of iOS 7. Everything went fine after it almost immediately asks you to log into a wifi network, I typed in the password. As one would naturally expect, I had no issues. Then I downloaded and install the new 7.0.1 iOS. Went through the setup and when the prompt to log into the same network popped up, I typed in the same password but this time I get an "Incorrect Password" for my network. I'm literally copy/pasting it and typing it in slowly but no success.
    VERY annoying considering I JUST bought this product...

    I have an iPhone 5 with iOS 7 update.  Same issue.  I had no issues previously with iOS 6.  So far I've only NOT been able to connect to my home router.....until about 10 minutes ago.   I selected my SSID and chose the option to FORGET the network, restarted my router by unplugging the power supply, let sit for 30 seconds, then re powered it.  Went into my iPhone settings, turned wifi OFF, then turned Bluetooth OFF.  Turned wifi back ON and kept Bluetooth OFF (though there should be no direct correlation) and the router SSID appeared, so I tried my KEY again (WPA2 encryption) and it finally connected.  I would also recommend turning all wifi sync services off just in case, they aren't doing any good without wifi anyway. I really hope this helps. I'm going to update my iPad mini today and see if the same issue comes up and apply the same steps mentioned.  Good luck, even if this doesn't help, I'm sure someone (if not Apple) will help resolve the issue.

  • Not being able to connect to Wifi Iphone5 after IOS 8.3

    After updating to IOS and especially IOS8.3 my IPhone 5 is not able to connect to a Wifi network or is constantly asking for a password even though the correct password is entered. How to solve this problem?

    Hello jriprv,
    After reviewing your post, it sounds like the iPhone is having trouble connecting to one Wi-Fi network. I would recommend that you read these articles, they may be helpful in troubleshooting your issue.
    If your iPhone, iPad, or iPod touch won’t connect to a Wi-Fi network - Apple Support
    Recommended settings for Wi-Fi routers and access points - Apple Support
    Thanks for using Apple Support Communities.
    Have a nice day,
    Mario

  • TS1398 Is anyone having trouble connecting to WiFi since installing iOS 6.0.1

    I can not connect my iPhone 4S to any WiFi since I installed iOS 6.0.1.
    I use three Mac products: Mac Air; iPad 3; and an iPhone 4s.  I have not been able to connect to any WiFi since I installed 6.0.1 on my iPhone.  All other devices have connected successfully to at least 7 or 8 other networks but the iPhone does not.  I am writing this request for help from Pikesville, Kentucky. I live in Syracuse New York.  I have been on the road since Monday. I have been in and out of motels and client's offices all week.  All other devices connected sucessfully at all other locations------except, the iPhone does not.
    The iPhone does not see local networks immediately.  I have to turn the Wi-Fi off and back on in Settings.  I get a dialogue box response immediatley (I mean instantaneoulsy)  upon selecting the network once it finds it. The message states, "Unable to join the network "HolidayInnExpress" --- "Dismiss".  I am writing this request from my Mac Air on the same network my iPhone refuses to join. Both the Air and iPad (iOS 6.0.1) found and joined the Holioday Inn network without any issues.
    I don't remember this issue with earlier operating systems on iPhone--is there an issue with the new operating system on the iPhone?
    Any help would be greatly appreciated.
    Ed

    The good (?) news is many people are have OS 6.0.1 wifi problems.
    I could not connect to my home network.  What eventually worked for me (twice now), though it makes no sense, is to go to the particular connection you want to use, hit the little blue arrow on the right to get the details screen.  Scroll down to the bottom and change "HTTP Proxy" from "None" to "Auto".  Then leave the "URL" field that pops up blank. 
    This should not work.  However, it has for me where many other suggestions have not. 
    *shrug*
    Best of luck.

  • Mobile Devices (Android and iOS) cannot Connect to WS 2008 RRAS L2TP VPN with Pre-Shared Key

    I have my Windows Server 2008 standard installed with RRAS service and configure with L2TP VPN with pre-shared key. Services such as Active Directory, DHCP and DNS are not installed. The Internet connection doesn't pass through a router to my server machine.
    I have the Verizon fios Internet cable plugged in to the server machine directly.
    PCs running Windows and Mac OS X can connect to the server without problem. When I tried to connect by using android or iOS mobiles and tablets, they cannot connect to the server. If I change the VPN type to PPTP, the mobile devices can connect successfully
    but I would like to use IPSec/L2TP since it's more secure.
    I tried so hard to look for the solution for this issue on Internet but I had no luck on that. Can anyone please provide me some help, please ?
    Thanks,
    CK

    Hi CK,
    I think we may need to create a policy in Network Policies. Please follow the steps below,
    Right click Network Policies, Click New.
    Enter the policy name, click Next.
    Click Add, select the Day and Time Restrictions, click
    Add.
    In the Day and Time Restrictions, choose Permited for
    all, click OK.
    Click Next five times(leave everything default), click
    Finish.
    Move the policy to top and try to connect with your device.
    If issue persists, please make sure that the Connection Requet Policies have been configured properly.
    For detailed information about how to create a network policy, please refer to the link below,
    Configuring NPS network policies
    http://technet.microsoft.com/en-us/library/dd441006.aspx
    Best Regards.
    Steven Lee
    TechNet Community Support

  • I'm having problems with my mobile internet connection

    I'm having problems with my mobile internet connection. Wifi works fine. It seems like my connection get lost every tuesday and friday between 11 and 12 am local time (guess it would be between 2 and 3 am Los angeles time for example). The connection won't comeback by itself. I have to turn the phone, iPhone 4s iOS 5.0.1, off and back on again. The connection immediatly works fine after the restart and stays fine for days. I really don't know what to do. My provider doesn't seem to know either. Tried a lot of things, new settings, resets, I even got a new iPhone. Still the same problem however. Richt now I changes the time setting to see it the problem occurs at another time. Btw: the phone doesn't say "no service" and I can send sms messages and make phonecalls. The 3G symbol or the circular symbol is shown next to the name of the provider.
    Does somebody has an idea what this might be? Thanks a lot.

    Update. My carrier says the antenna of my iPhone 4s is not so good as the one in the iPhone 3G. They can't solve the problem. Their signal is too weak for the 4s at places I spend most of my time. Not the answer I expected, but I'm free to choose an other carrier. Hope this will help.
    This was not the correct answer, I accidentially clicked the button..
    Message was edited by: vasch

  • TS1398 Installed IOS 6, can't connect to wifi.

    Anybody have a problem connecting to wifi after installing IOS 6?

    I just downloaded iOS 6 and it shows WiFi connected under settings.  When I open up the WiFi tab, it has the grey circle continuously running on my wifi network and will not connect.
    It only shows 3G - no wifi signal strength on the top bar.

  • IPad2 iOS 5.01... How can I connect to wifi?

    Like thousands of others I can't connect to wifi from iPad2 iOS 5.0.1
    Can this be resolved?  How?

    Look at iOS Troubleshooting Wi-Fi networks and connections  http://support.apple.com/kb/TS1398
    Also try this - Turn Off your iPad. Then turn Off the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
     Cheers, Tom 

  • My iphone 4s and my ipad both will not stay connected to wifi since the latest update ios.6

    my iphone will not stay connected to wifi since the ios 6.0 update

    Hello DickChris,
    The following article provides some useful troubleshooting steps and information that can help establish and stabilize Wi-Fi connections on your iPad.
    iOS: Troubleshooting Wi-Fi networks and connections
    http://support.apple.com/kb/TS1398
    Cheers,
    Allen

  • How to block mobile devices connected to internal Wi-Fi networks on Lync 2013

    How to block mobile devices connected to internal Wi-Fi networks on Lync 2013.
    we don't have lyncdiscoverinternal.contoso.com and lyncdiscover.contoso.com in internal DNS record, all mobile users are connecting from Internet, and we want it to be that way.
    So if I create the lyncdiscoverinternal.contoso.com record for Windows desktop clients autodiscover, how do I block internal mobile users from connecting to Lync??
    Praveen | MCSE Messaging 2003

    Hi Praveen,
    Based on my experience, one way to achieve this purpose you need to use the Reverse Proxy that is integrate with a Firewall (e.g. TMG 2010 , F5, etc…).
    Please have a look at the following picture.
    In Lync Server 2013,
    both the internal Mobility Service URL and the external Mobility Service URL are associated with the external Web Services FQDN.
     From the above picture, if you use a reverse proxy that is
    separate from the firewall, then the hairpin will be created,
     and cause the mobile client which connected to the internal Wifi will be able to
     access the external interface of the Reverse Proxy.
    In this situation, the mobile client which from Internet will not be effected.
    Best regards,
    Eric
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Lync Mobility 2013, lyncdiscoverinternal and Internal Certificates.

    Hi Everyone, 
    The last few days i have been racking my brain over the deployment processes of Lync Mobility in a Lync 2013 environment. 
    What has got me confused is the process of lyncdiscoverinternal and the autodiscover certificate. 
    As far as I am aware, All lync 2013 clients require either lyncdiscover or lyncdiscoverinternal DNS records to determine whether they are internal or external to the corporate network. 
    Thats understandable.
    What I cant understand, is the fact that the lync 2013 mobile client, when obtaining lyncdiscoverinrternal.domain.com (which points to the internal address of the front end pool) contacts the Lync front end
    services for the auto discover record and is prompted for the certificate that's provided from the web services
    on the front end. This certificate is signed by my Internal CA. Is that intended behavior?. because 100% that device
    is not going to trust it. 
    Because if after the autodiscover service has succeeded the Mobility client will then return the external UCWA services URL
    and then Hairpin via the reveres proxy back in.  This part here makes total sense. So now we have the Mobile
    client connected to the front end services VIA the reverse porxy. Public Certificate now.  
    But the autodiscover part is stumping me. 
    I can understand if I were to push all trusted CA certificates onto devices then this wouldnt be a problem. But is that feasible? I mean what about in BYOD scenarios, EG a college campus or school. Pushing certificates onto unmanaged devices is sometimes
    not an option. 
    Have other people found solutions in getting the lyncdiscoverinternal record to work for mobility without installing trusted Root CA,s on mobility devices?
    Or is a feasible option to create a new DNS for a Guest WIFI network and have only the lyncdiscover record exist just like it was an external network?
    Or am i doing something wrong and missed and important design or configuration factor?
    Is it possible to tell the Lync Mobility client to push ALL requests via the reverse proxy when on the internal network, Just like the old days when we issued "lyncdiscover" to the external Reverse
    Proxy address.
    Thanks. 

    After speaking with Microsoft Support, They did indeed inform me to use the "lyncdiscover" record internally.
    They stated to remove the lyncdiscoverinternal record from the DNS and point the lyncdiscover record to the external side of the reverse proxy.
    they also informed me that all desktop clients would fail upon using the lyncdiscover record and fall back to the SRV records.
    Is this true?
    Also once the autodiscover service has worked, how does the mobility client then connect to the server?
    From what i have found it will use the external UCWA website on IIS address. Which is the Externallync webservices address which is alos pointing to the reverse proxy external address from the internal network.
    Now what happens when media traffic is sent to and from the mobility device. Does it use the edge? If so is it fair to say that hairpinning of media traffic is required aswell?
    Or does media use peer to peer or media bypass if enbaled?

  • Lync Mobile 2013 not connected.

    Hello Guys
    I have the following problem with Lync Mobile 2013 ):
    - I have running Lync 2013 Standard and configure Lync Mobile for Internal/External Link. When a user need to connect to internal lync with Wifi Connection, the connection is not established. Internal dns records for the url webapps.domain.net and also to
    lyncdiscovery.domain.net were created but until now the mobiles are trying to connect for some time without success.
    We reviewed the step without finding a solution to the problem of mobiles procedures.
    Could someone tell me or help to solve this problem, because I stopped in this detail. We are not using TMG to publish internally and the firewall has open ports on our LAN.
    Thanks for your help

    For internal access, you will need lyncdiscoverinternal.domain.com an a redirect through your reverse proxy.
    Here is a good link from Jeff Schertz:
    http://blog.schertz.name/2013/07/understanding-lync-2013-mobility/
    regards Holger Technical Specialist UC

Maybe you are looking for