Lync Sign in Issue

Currently this is my setup.
Lync Front End Pool - Consist of 4 Front End Servers
Lync Back End - Clustered SQL Server
Lync Edge Pool - Consist of 2 Load Balanced Edge on the DMZ
1 x Hardware Reverse Proxy
Currently Certificate wise i am using:
Front End: Lync Internal Cert for Internal Services and GoDaddy Wildcard Cert for External Services
Edge: Edge Internal Cert and GoDaddy Wildcard Cert
Reverse Proxy: GoDaddy Wildcard Cert
*Problem for me so far is GoDaddy Wildcard Cert doesn't support adding SAN so the SAN is currently *.domain.com not sure if this is the root of the problem.
Issue:
I am able to connect to my Lync via Lync 2013 Mobile App on my iPhone and chat with no problem
However when i try logging in to Lync via my Lync 2013 Client on a External Network (Non Domain Joined)Error States: The Server is temporarily unavailable. If the problem continues, please contact your support team.
But i am able to connect to Lync via Lync 2013 Client on a Internal Network with a Domain Joined PC.
Tried running the Testconnectivity:
Lync Autodiscover Web Service Remote Connectivity Test: All Pass
Lync Server Remote Connectivity Test: Failed
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.
Additional Details
Elapsed Time: 473 ms.
Test Steps
The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server sip.domain.com on port 443.
The Microsoft Connectivity Analyzer wasn't able to obtain the remote SSL certificate.
Additional Details
The certificate couldn't be validated because SSL negotiation wasn't successful. This could have occurred as a result of a network error or because of a problem with the certificate installation.
Elapsed Time: 455 ms.
Do i need to change the certificate? or is this error mainly a connection/port/firewall issue on my servers

Hi,
It is not supported to use wildcard certificate for Lync Edge Server external interface. You need to use a public SAN certificate with the SAN in the link below:
https://technet.microsoft.com/en-us/library/gg398519.aspx?f=255&MSPPError=-2147217396
For wildcard certificate, you can use in the following server role:
Reverse proxy.   Wildcard SAN entry is supported for Simple URL (meet and dialin) publishing certificate.
Reverse proxy.   Wildcard SAN entry is supported for the SAN entries for LyncDiscover on the publishing certificate.
          Wildcard SAN entry is supported for Simple URLs (meet and dialin) and for SAN entries for LyncDiscover and LyncDiscoverInternal in Director web components.
Front End Server (Standard Edition) and Front End pool (Enterprise Edition). Wildcard SAN entry is supported for Simple URLs (meet and dialin) and for SAN entries for LyncDiscover and LyncDiscoverInternal
in Front End web components.
Exchange Unified Messaging (UM).   The server does not use SAN entries when deployed as a stand-alone server.
Microsoft Exchange Server Client Access server.   Wildcard entries in the SAN are supported for internal and external clients.
Exchange Unified Messaging (UM) and Microsoft Exchange Server Client Access server on same server.   Wildcard SAN entries are supported.
More details:
https://technet.microsoft.com/en-us/library/hh202161.aspx?f=255&MSPPError=-2147217396
Best Regards,
Eason Huang
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Eason Huang
TechNet Community Support

Similar Messages

Lync Sign in issue through Proxy

Hi All,
Not to be confused when said Lync Sign in issue through Proxy as it is unlikely that this is an issue with the proxy settings. Find it out yourself from the behavior below.
It is in fact a weird issue that I have come across.
Overall there are almost 30 Lync Users accounts.
And they are trying to authenticate to external Lync Server.
28/30 works fine through the proxy. Except for 2 user accounts.
The proxy settings are same for all the users and no individual configurations set.
Now, here is the interesting part. Go out of the network and authenticate this 2 user account to any of the workstation which is not going through Proxy, it works. Come back to the workstation which is going through the proxy and try again, it will work
now.
Now, I am interested in finding how exactly does Microsoft authenticates their Lync users. And what are the step by step procedure of User Authentication for Lync service. And why is this happening?
Just to add some more point here, these happens only with 2 specific accounts.
And if you try using these 2 accounts on any of the 28 working workstations, which is going through the proxy, the first time, it would still fail to get authenticated.
Can someone put a highlight on these behaviors? is there any user specific settings on the lync server?
Thanks for your inputs.

You can check the following blogs about Lync authentication process:
http://blog.schertz.name/2012/12/lync-2013-client-autodiscover/
http://blogs.technet.com/b/nexthop/archive/2012/11/28/lync-2010-client-authentication.aspx
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or
suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
You can enable Lync client logging to collect the log file to check the sign in process for these two users can’t sign in externally.
Lisa Zheng
TechNet Community Support

Sign in issue with Lync Mobile client

Hi guys,
I'm trying to deploy a reverse proxy for mobile and external users, but I am having issues with the mobile client for android. It keeps saying "an unknown error occurred". Please try again.
I've got the log zip file outputted by the client here if someone could have a look and point me in the right direction? I've set
up server farms for the webservices, meet, and dialin.
Desktop clients can log in without any issue btw.
Cheers,
Gareth L. Armstrong

Verify from DNS Configuration and Check what is causing this issue from
Lync Connectivity analyzer
Also to troubleshooting Lync mobility, you can refer below link
http://blogs.technet.com/b/nexthop/archive/2012/02/21/troubleshooting-external-lync-mobility-connectivity-issues-step-by-step.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

Imessage on my iMac has created two iMessage account both asking for Apple ID....and no option to - (delete) one of the two duplicate accounts....how can I delete one of them it just bothers me due to sign in issues....goes inactive when signed in on othe

imessage on my iMac has created two iMessage account both asking for Apple ID....and no option to - (delete) one of the two duplicate accounts....how can I delete one of them it just bothers me due to sign in issues....when signed into one it signs out the other and goes inactive I just wanted to delete one of them so this issue doesn't happen....why doesn't it give the option to delete ONLY these two accounts

1. Don't confuse "Apple ID" with iTunes Account ID. You can have many Apple IDs but only one iTunes account active at a time.
2. If you "changed" your iTunes account ID, you actually have 2 accounts - one under the old name plus the new name.
3. You can't merge the accounts - they remain separate. Apps purcahsed under the old account name will update ONLY WHEN THE PHONE IS SIGNED IN TO THE OLD ACCOUNT NAME and visa versa.
4. Likewise, you can sync only the apps, music, media purchased under the account the phone AND iTunes are signed in to.

Rhapsody Verizon Sign In Issues Username and Password

If you are trying to sign into Rhapsody.com or if you are current subscriber of Rhapsody through Verizon billing or a former user of VCast with Rhapsody, you will need to migrate your old account using the method described in this link:
https://help.rhapsody.com/entries/25066508-Verizon-sign-in-issues
It took me forever to find this! Hope it helps someone.
Max

Thanks for this
At some point, my logins started failing on and off on my pc and phone. After multiple resets, I could not get it to connect. I have the most recent client software and there is no indication anywhere that any action is required. Here's how it went for me
This link https://help.rhapsody.com/entries/25066508-Verizon-sign-in-issues gives an overview of the problem. I guess Rhapsody is revising it's account base. A more active notification progrm would have been helpful.
Using the link https://account.rhapsody.com/myacct/migration/verizon.html allows you to fix the problem. The web page asks for you mobile number, sends a code to the phone and puts up a page asking you to confirm the code. You get to use an email address as your login-id heareafter.
After this was done everything returned to normal and my quite extensive playlists etc remained intact.

VZW URL coming up on the VZT Sign-In Page and the Email "Keep Me Signed In" issue

Hello All,
Here are two messages as it pertains to the VZW URL coming up on the VZT Sign-In Page and the Email “Keep Me Signed In” issue:
I’m a VZT customer and want to sign-in to my VZT account. Why am I being sent to a My Verizon sign-in page with a VerizonWireless URL (website address)?
Thank you for raising this issue, and it is always good to ask when you see something unexpected in an online experience. We are in the process of making some security enhancements and other changes to our wireline My Verizon site. At least during the early stages of this important process you may notice a verizonwireless.com URL at the top of your browser screen – this is normal.
I’ve selected the “Keep Me Signed In” function on the My Verizon sign-in page. It used to work on the old “verizon.com” URL (website address) sign-in page, but it doesn’t work on the new “verizonwireless.com” URL sign-in page. Why?
We apologize for your inconvenience. We are in the process of making some security enhancements and other changes to our wireline My Verizon site. “Keep Me Signed In” is one of the items being changed and is unavailable for some of our customers. This is a temporary situation until the function can be removed entirely.
Thank you for your patience while we work on the changes and enhancements to our wireline My Verizon site.

I have this too it's driving me crazy!

Lync 2013 for iPad & Windows Mobile Sign in Issue

Hi,
I hope someone can help with a very frustrating issue I'm having with Lync 2013 on iOS & Windows Mobile - it won't sign in with an error message saying 'We can't sign you in. Please check your account info and try again'
I know my account info is right as I use it to sign in to the desktop client when working remotely, and it also works fine on an Android client.
The Lync remote connectivity analyser passes all the tests, I can get to the xml file using https://lyncdiscover.domain.org/autodiscover/autodiscoverservice.svc/root from a laptop, but from the iPad it's just a blank screen.
I've tried using auto detect, and entering details manually, but still no luck. I'm completely stumped. I've trawled blogs, form posts etc, but nothing. HELP!!!
Some details - we have a FE server, and an Edge Server, both running Lync 2013 with latest updates. We use nGinX as the RP and that all seems to be fine. It just doesn't want to authenticate me (or anyone else).
See below part of log file from my iPad that shows an error on the FE server.
</SentRequest>
2014-03-07 08:19:36.200 Lync[1615:74c6000] INFO UTILITIES CHttpStreamPool.cpp/409:Allocating stream 0x589d0a0 for url - http://lyncdiscover.domain.org/ with persistent id as 7
2014-03-07 08:19:36.200 Lync[1615:74c6000] VERBOSE TRANSPORT CHttpProxyHelper.cpp/436:CHttpProxyHelper::discoverProxy : No proxy found for url http://lyncdiscover.domain.org/. Sending over direct connection.
2014-03-07 08:19:36.200 Lync[1615:74c6000] INFO TRANSPORT CHttpStreamPool.cpp/556:Not setting TLS as the url(http://lyncdiscover.domain.org/) is not https
2014-03-07 08:19:36.205 Lync[1615:3bc6218c] INFO UI CMConversationCommon.mm/43:not signed in
2014-03-07 08:19:36.206 Lync[1615:3bc6218c] INFO UI CMConversationCommon.mm/43:not signed in
2014-03-07 08:19:36.206 Lync[1615:3bc6218c] INFO UI CMConversationCommon.mm/43:not signed in
2014-03-07 08:19:36.206 Lync[1615:3bc6218c] INFO UI CMConversationCommon.mm/43:not signed in
2014-03-07 08:19:36.206 Lync[1615:3bc6218c] INFO UI CMConversationCommon.mm/43:not signed in
2014-03-07 08:19:36.595 Lync[1615:74c6000] INFO UTILITIES CHttpConnection.cpp/577:Received kCFStreamEventEndEncountered (UcwaAutoDiscoveryRequest)isHeadersAvailable = true responseHeadersHandle = 58b1930
2014-03-07 08:19:36.596 Lync[1615:74c6000] INFO UTILITIES CHttpConnection.cpp/651:Response status = 200 for request UcwaAutoDiscoveryRequest
2014-03-07 08:19:36.597 Lync[1615:74c6000] INFO UTILITIES CHttpStreamPool.cpp/455:Scheduling stream 0x58812c0 for release.
2014-03-07 08:19:36.597 Lync[1615:74c6000] INFO TRANSPORT CHttpRequestProcessor.cpp/173:Received response of request(UcwaAutoDiscoveryRequest) with status = 0x0
2014-03-07 08:19:36.598 Lync[1615:74c6000] INFO TRANSPORT TransportUtilityFunctions.cpp/925:<ReceivedResponse>
GET https://lyncdiscover.domain.org/?sipuri=sip:[email protected]
Request Id: 0x11d4988
HttpHeader:Cache-Control no-cache
HttpHeader:Connection keep-alive
HttpHeader:Content-Length 1025
HttpHeader:Content-Type application/vnd.microsoft.rtc.autodiscover+xml; v=1
HttpHeader:Date Fri, 07 Mar 2014 08:19:34 GMT
HttpHeader:Expires -1
HttpHeader:Pragma no-cache
HttpHeader:Server nginx/1.4.1
HttpHeader:StatusCode 200
HttpHeader:X-AspNet-Version 4.0.30319
HttpHeader:X-Content-Type-Options nosniff
HttpHeader:X-MS-Server-Fqdn KPPLYN04.ad.domain.org
HttpHeader:X-Powered-By ASP.NET
Ôªø<?xml version="1.0" encoding="utf-8"?><AutodiscoverResponse xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" AccessLocation="External"><Root><Link
token="Domain" href="https://extwebsvc01.domain.org/Autodiscover/AutodiscoverService.svc/root/domain?originalDomain=domain.org" /><Link token="User" href="https://extwebsvc01.domain.org/Autodiscover/AutodiscoverService.svc/root/user?originalDomain=domain.org"
/><Link token="Self" href="https://extwebsvc01.domain.org/Autodiscover/AutodiscoverService.svc/root?originalDomain=domain.org" /><Link token="OAuth" href="https://extwebsvc01.domain.org/Autodiscover/AutodiscoverService.svc/root/oauth/user?originalDomain=domain.org"
/><Link token="External/XFrame" href="https://extwebsvc01.domain.org/Autodiscover/XFrame/XFrame.html" /><Link token="Internal/XFrame" href="https://ly13webpool.ad.domain.org/Autodiscover/XFrame/XFrame.html"
/><Link token="XFrame" href="https://extwebsvc01.domain.org/Autodiscover/XFrame/XFrame.html" /></Root></AutodiscoverResponse>
</ReceivedResponse>
2014-03-07 08:19:36.599 Lync[1615:74c6000] INFO TRANSPORT CUcwaAutoDiscoveryResponse.cpp/119:location value is external
2014-03-07 08:19:36.600 Lync[1615:74c6000] INFO TRANSPORT CUcwaAutoDiscoveryResponse.cpp/195:User url is https://extwebsvc01.domain.org/autodiscover/autodiscoverservice.svc/root/user?originaldomain=domain.org
2014-03-07 08:19:36.601 Lync[1615:74c6000] INFO TRANSPORT CHttpRequestProcessor.cpp/266:Sending event to main thread for request(0x11d4988)
2014-03-07 08:19:36.602 Lync[1615:3bc6218c] INFO APPLICATION CTransportRequestRetrialQueue.cpp/822:Req. completed, Stopping timer.
2014-03-07 08:19:36.602 Lync[1615:3bc6218c] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/290:Received a root response
2014-03-07 08:19:36.602 Lync[1615:3bc6218c] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation completed with url = https://lyncdiscover.domain.org/?sipuri=sip:[email protected], userUrl = https://extwebsvc01.domain.org/autodiscover/autodiscoverservice.svc/root/user?originaldomain=domain.org,
status = S_OK (S0-0-0)
2014-03-07 08:19:36.603 Lync[1615:3bc6218c] INFO APPLICATION CTransportRequestRetrialQueue.cpp/725:Response received for req. GET-UnAuthenticatedGet(0x11d4988): S_OK (S0-0-0) (Success); Done with req.; Stopping resend timer
2014-03-07 08:19:36.603 Lync[1615:3bc6218c] INFO APPLICATION CTransportRequestRetrialQueue.cpp/399:Cancelling all requests
2014-03-07 08:19:36.603 Lync[1615:3bc6218c] INFO APPLICATION CTransportRequestRetrialQueue.cpp/409:Cancelling request: 0x1124488
2014-03-07 08:19:36.604 Lync[1615:3bc6218c] INFO TRANSPORT CSessionBase.hxx/158:Cancelling request: 0x1124488
2014-03-07 08:19:36.604 Lync[1615:3bc6218c] INFO TRANSPORT CTransportThread.cpp/163:Added Request(UcwaAutoDiscoveryRequest) to Request Processor queue
2014-03-07 08:19:36.604 Lync[1615:3bc6218c] INFO APPLICATION CUrlRedirectAndTrustResolver.cpp/610:UrlRedirectAndTrustResolver complete with url = http://lyncdiscover.domain.org/, Hops = 1, status = W_Cancelled (W0-0-6)
2014-03-07 08:19:36.605 Lync[1615:74c6000] INFO TRANSPORT CTransportThread.cpp/343:Sent Request(UcwaAutoDiscoveryRequest) to Request Processor
2014-03-07 08:19:36.605 Lync[1615:3bc6218c] INFO APPLICATION CUcwaAutoDiscoveryGetUserUrlOperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation completed with url = http://lyncdiscover.domain.org/?sipuri=sip:[email protected], userUrl = , status = W_Cancelled
(W0-0-6)
2014-03-07 08:19:36.605 Lync[1615:74c6000] INFO UTILITIES CHttpStreamPool.cpp/455:Scheduling stream 0x589d0a0 for release.
2014-03-07 08:19:36.606 Lync[1615:3bc6218c] INFO TRANSPORT CCredentialManager.cpp/176:getSpecificCredential for serviceId(1) returning: credType (1) signInName ([email protected]) domain (ad) username (ab00wk) password.empty() (0) certificate.isValid() (0)
privateKey.empty() (1) compatibleServiceIds(1)
2014-03-07 08:19:36.606 Lync[1615:3bc6218c] INFO TRANSPORT CMetaDataManager.cpp/403:Received a request to get the meta data of type 0 for url https://extwebsvc01.domain.org/autodiscover/autodiscoverservice.svc/root/user?originaldomain=domain.org
2014-03-07 08:19:36.606 Lync[1615:3bc6218c] INFO TRANSPORT CMetaDataManager.cpp/467:Sending Unauthenticated get to get the web-ticket url
2014-03-07 08:19:36.607 Lync[1615:3bc6218c] INFO TRANSPORT CTransportThread.cpp/131:Added Request() to Request Processor queue
2014-03-07 08:19:36.607 Lync[1615:3bc6218c] INFO TRANSPORT CAuthenticationResolver.cpp/108:Waiting on Meta Data from https://extwebsvc01.domain.org/autodiscover/autodiscoverservice.svc/root/user?originaldomain=domain.org
2014-03-07 08:19:36.607 Lync[1615:6081000] INFO TRANSPORT CTransportThread.cpp/343:Sent Request() to Request Processor
2014-03-07 08:19:36.607 Lync[1615:3bc6218c] INFO APPLICATION CTransportRequestRetrialQueue.cpp/385:Submitting new req. GET-AuthenticatedUserGetRequest(0x11e6bf8)
2014-03-07 08:19:36.608 Lync[1615:6081000] WARNING TRANSPORT CCredentialManager.cpp/317:CCredentialManager::getSpecificCredential returning NULL credential for serviceId (4) type (1)!
2014-03-07 08:19:36.608 Lync[1615:3bc6218c] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1194:Submitting Authenticated AutoDiscovery request to https://extwebsvc01.domain.org/autodiscover/autodiscoverservice.svc/root/user?originaldomain=domain.org
2014-03-07 08:19:36.609 Lync[1615:6081000] INFO TRANSPORT TransportUtilityFunctions.cpp/631:<SentRequest>
GET https://extwebsvc01.domain.org/autodiscover/autodiscoverservice.svc/root/user?originaldomain=domain.org
Request Id: 0x1124488
HttpHeader:Accept
HttpHeader:X-MS-WebTicket xxxxxxxxxx
</SentRequest>
2014-03-07 08:19:36.609 Lync[1615:3bc6218c] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1688:Ignoring GetUserUrlOperation event as current state is 6
2014-03-07 08:19:36.610 Lync[1615:3bc6218c] INFO APPLICATION CUcwaAutoDiscoveryService.cpp/1690:Request url was http://lyncdiscover.domain.org/?sipuri=sip:[email protected]
2014-03-07 08:19:36.610 Lync[1615:6081000] INFO UTILITIES CHttpStreamPool.cpp/409:Allocating stream 0x58bf6c0 for url - https://extwebsvc01.domain.org/autodiscover/autodiscoverservice.svc/root/user with persistent id as 15
2014-03-07 08:19:36.610 Lync[1615:6081000] VERBOSE TRANSPORT CHttpProxyHelper.cpp/436:CHttpProxyHelper::discoverProxy : No proxy found for url https://extwebsvc01.domain.org/autodiscover/autodiscoverservice.svc/root/user?originaldomain=domain.org. Sending over
direct connection.
2014-03-07 08:19:36.941 Lync[1615:6081000] INFO UTILITIES CHttpConnection.cpp/577:Received kCFStreamEventEndEncountered (0x%u0x104bc00)isHeadersAvailable = true responseHeadersHandle = 58b6bd0
2014-03-07 08:19:36.942 Lync[1615:6081000] INFO UTILITIES CHttpConnection.cpp/651:Response status = 401 for request 0x%u0x104bc00
2014-03-07 08:19:36.943 Lync[1615:6081000] INFO UTILITIES CHttpConnection.cpp/718:Not send authenticating request(0x%u0x104bc00). isAuthObjectValid - 0, areCredentialsValid - 0, resendRequestCounter - 1
2014-03-07 08:19:36.943 Lync[1615:6081000] INFO UTILITIES CHttpStreamPool.cpp/455:Scheduling stream 0x58bf6c0 for release.
2014-03-07 08:19:36.943 Lync[1615:6081000] INFO TRANSPORT CHttpRequestProcessor.cpp/173:Received response of request() with status = 0x0
2014-03-07 08:19:36.944 Lync[1615:6081000] INFO TRANSPORT TransportUtilityFunctions.cpp/925:<ReceivedResponse>
GET https://extwebsvc01.domain.org/autodiscover/autodiscoverservice.svc/root/user?originaldomain=domain.org
Request Id: 0x1124488
HttpHeader:Cache-Control no-cache
HttpHeader:Connection keep-alive
HttpHeader:Content-Length 1293
HttpHeader:Content-Type text/html
HttpHeader:Date Fri, 07 Mar 2014 08:19:35 GMT
HttpHeader:Server nginx/1.4.1
HttpHeader:StatusCode 401
HttpHeader:X-Content-Type-Options nosniff
HttpHeader:X-MS-Server-Fqdn KPPLYN04.ad.domain.org
HttpHeader:X-MS-WebTicketSupported cwt,saml
HttpHeader:X-MS-WebTicketURL https://extwebsvc01.domain.org/WebTicket/WebTicketService.svc
HttpHeader:X-Powered-By ASP.NET
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>401 - Unauthorized: Access is denied due to invalid credentials.</title>
<style type="text/css">

</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
<h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
</fieldset></div>
</div>
</body>
</html>
If you need any further info, please let me know.
Thanks in advance
Aron

Hi,
Did the sip address name match with User Principle Name?
If not, when you enter the login information please also populate the Username filed using the format domainusername and test again.
Here is a blog may help you, it is for Lync server 2010 but similar for Lync server 2013:
http://blogs.perficient.com/microsoft/2011/12/lync-mobility-understanding-sip-sign-in-address-vs-user-principle-name-upn/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Sign in Issue on pc but not on Lync throughOWA.

Hello,
We have an issue with one of our users. He is able to use Lync through OWA but not with Lync 2010 client. Our infrastructure is Lync Server 2013 On-Premise + Exchange 2010 On-Premise.
I tried to sign-in my own computer with his account without success.
I got this error :
"Sign-in didn't work.
You didn't get signed in. It might be your sign-in address or logon credentials."
I already deleted then recreated his Lync account with the Lync Control Panel, but it did not resolve the issue. I know that this user has a previous Lync account on another domain on our AD forest that has been deleted.
Does anyone have an idea or where to look for ?
Thank you
Jonatan

Good troubleshooting steps, Eason, but I am wondering if they may be unnecessary since Jonatan has already tried logging in with the problematic user account on his own computer (where your login presumabley works without issue?).
At any rate, this does indeed sound tricky. I am having a hard time thinking of why a user account would be unable to sign in from a desktop client, but not have issue in OWA. Is it possible to also try signing him in on a mobile device, assuming you have Edge
access setup and the user is allowed External access via policy? Also, my advice at this point is to take a good look at the 'Lync-UccApi-0.UccApilog' log file in this directory: 'C:\Users\<username>\AppData\Local\Microsoft\Office\15.0\Lync\Tracing\.'
If the file looks too big and cumbersome, try deleting the file with the user logged out, and then have them try the login again. The file should be recreated, and will only have the data relating to his sign-on attempt. If you find anything interesting in
it, but need further help with interpreting what you found, feel free to copy it here, and I will do my best to assist!
-Regards,
Josh B. | MCSE: Communication; MCSA: Office 365
Blog: http://blog.msucguy.com
View Josh Blalock's
profile

Lync 2013 Sign in issue on iPhone

Hi,
So far I can sign in to the lync server 2013 from PCs . I have only one external ip in my lab environment so after reading about it I decided that the best practice is to assign it to the edge server and change the A/V Web conf ports. It works great from
computers from outside the network. But whenever i sign in from a mobile device i get the "we can't connect to the server check your network connection and server address" Error. I enable mobile devices from the servers.
What do you think the problem is ?
Any help would be appreciated, Thanks :-)

Have you deployed a reverse proxy server for web services to your front-end server? The mobile client uses UCWA exclusively for login/signaling and not the edge server. Mobile only uses the edge server for audio/video call only.
Thanks,
Richard
Richard Brynteson, Lync MVP | http://masteringlync.com | http://lyncvalidator.com

Lync 2010 Certificate Issue - "There was a problem verifying your certificate from the server"

Greetings.
My Issue:
Lync 2010 client does not connect to server;error displayed "Cannot sign into Lync. There was a problem verifying the certificate from the server."
Description:
The client is running on my Windows 7 box, and my CA server is a Windows Server 2003 box. I have installed the hotfix on the Server 2003 box to update the Web Enrollment portion of CA to allow for newer clients (Vista and 7) to receive certificates from
this server.
Lync server is running on Server 2008 R2 STD, installation was a success.
The Windows 7 box is a part of the domain.
I have manually exported the Root CA from my Enterprise CA server from
Trusted Root Certification Authorities -> Certificates and imported into the same location on my Windows 7 box.
If I look at the certification path on the Root CA, on my Windows 7 box, it says "The certificate is OK." The same goes for the servers involved.
Still nothing.
I have read the other forum posts on here about people having success once they manually import the Root CA from the Enterprise CA server, but this is not my case here.
All certificates are successfully assigned on the Lync server box; however, I did have to manually import the Root CA into Lync server's
Trusted Root Certification Authorities -> Certificates before I could successfully assign them. Had to do this on another deployment I completed, so I didn't think anything of it.
To recap: it seems that even with my Root CA imported into my Windows 7 box I can still not connect to my Lync server with the client, and I get the error message "There was a problem verifying the certificate from the server."

Solved
Solution : Export certificate from Lync Server Start > Administrative Tools > IIS > Server Certificate > Export > abc.pfx save it, Copy and place the certificate where Ms Lync 2010 client is installed or getting certificate
error. Follow these steps on client machine to install certificate
Run > mmc > add or remove snap in > certificates > computer account > local computer >finish > ok > expand Certificate > Trusted Root Certification Authorities > Certificate > All task > Import > copy abc.pfx certificate
and delete unnecessary certificate from there.
Restart Client machine and open microsoft Lync client 2010 and open option menu > Personal > Advanced > choose Auto Configuration > save ok

HP 4120 Lync Phone Network issues

Hello Lync community!
We have a 2013 deployment running HP 4120 desk phones. I'd like to see if anyone else is having similar problems to ours. First things first: HP Lync Edition phone is manufactured by SNOM. While support/warranty comes from HP the packaging
materials on repaired units say SNOM. With this fact out of the way let me tell you what we are seeing. On initial roll-out the failure rate "out of the box" was about 5%. The downstream port would not function - and we needed it
to connect the workstations in the offices. The lights on the port would flash, but once you flipped the phone over and made a few calls the port would start acting up. On some phones the port would just go dead, on others it would come in and
out - causing endless frustration. You can typically fix the condition temporarily by unplugging and plugging back in the cable in the downstream/PC port. Needles to say these were sent back to HP for repair. By the end of 1st year about
another 5% of the phones had to be replaced due to the same issues. Initially we thought that some type of electrical issue on the phone side was at play - perhaps a poorly soldered connection, a batch of bad/loose network jack - something that has to
be addressed on the manufacturing side of things. Since then also learned that phones themselves can enter a state in which they remain powered on but claim no network availability. The phones are all powered via PoE - so they are connected, but
somehow they claim the lack of access to a network at an Ethernet/Level 2 level. A phone reboot fixes the problem. This makes us thing that the issue is not in wiring, but in some low level firmware on the phone - not the WinCE 6.0 the phone is
running - but maybe something else. Phones run the latest UC software available from Microsoft. We have some Polycom VVX phones in identical setup - those have no issues with the network.
Anyone seen this? Share your experience - let us know what you've done. We have no issues with phone provisioning, dropped calls or unexpected sign-outs. Lync farm running latest CU as well.

After writing the post above I did another experiment with the phone.
Took it apart to see if I can notice something obvious on the PCB - noting there - all is firmly attached and well soldered. Used a magnifying glass with high magnification to verify that there are no cracks in the solder where RJ-45 jack attaches
the to the PCB. Put it back together - plugged in the network cable. Phone boots, asks me to sign in - as I start the process and begin handling the phone I get disconnected from the network.
The error message that the phone shows:
"The Network cable was not detected. Please check that your cable is connected to the network port and that you have a network connection."
In this state the lights on the network port are off - they are not blinking. So the PoE is delivered but the interface is down. Looking at the port status on the switch shows that PoE is "delivering" but the link status is "down".
All you have to do is firmly press the network cable back into the phone and it starts working. Go figure what's at play.

HT204053 I have recently changed my apple id email address, which was ok however I have recently changed my password and now I have icloud account/sign-in issues, can anyone help?

I changed my apple id email address last week, not a problem I just entered the correct info on my 6 apple devices for FaceTime, AppStore and iTunes.
The issue now, is that I have changed my appleid password so that the kids couldn't install any apps and charge my credit card.
Now I am getting an icloud authorisation error, it is telling me that the account (old apple id) or password are incorrect.
What have I done and how can I fix it?
Do I have to 'delete account' on my iphone and add a new one? I have just paid for the max icloud storage plan as well.

I FOUND THE SOLUTION!
I had the same exact problem. I had my old apple ID connected to a school email which did not exist anymore. My ipad was prompting me to put the password in for that ID and I could not delete it from my ipad because the "Find My Ipad" was turned on, once again prompting for password. I called apple and they said this Apple no longer exists and is not in there system, which I knew already. After hours on the phone nobody could help me. Try this.
-Go to create a new Apple ID and use the same email address as the old apple ID which is locked in on your ipad
-Create a new password and all that, it will say it send a verification link to your email, in my case my email no longer exists so I could not do this
- I called Apple to explain this problem and I asked if they could verify it for me, which they did after I convinced them it was worth a try. The guy told me that the verification shouldnt matter and should still be able to login but he did it anyway. You can try skipping this step but if it doesn't work then go ahead.
-Go to ICloud and click on your account, the email should be grayed out but it should allow you to change that password, put in the new password which you just created.
-This allowed me to sign in to accept the new terms and conditions but it said "unable to conncet to server" so I just backed out and went to "Delete Account" and it worked!
The whole idea is to re-create your old apple ID into Apple's system and then use that new password. The guy at Apple said tons of people called about this problem and nobody could solve it. I thanked him for helping me and he thanked me for helping him. I hope this helps you!

T440P - Win 8.1 Fingerprint Single Sign on Issue

Hi,
I just bought the T440P laptop, and for some reason it never updated to win 8.1 pro from the CDs that were provided. So I installed Win 8.1 x64 Enterperise with Update (provided by my company). I downloaded all the drivers for win 8,1 x64 from the website and installed them. The issue that i am facing is while following the single-sign on guide i have checked (ticked) everything but when the system boots it asks for my fingerprint (power - on password) and then stops at windows login and asks for it again. Why isnt the single sign on working?
Below images show the settings in the fingerprint Manager Pro 8.01.26(x64). Any help will be apprecaited.
Also the guide says to click the power-on tick over the enrolled finger print. I cannot find this option, is it even possible to power on the machine (T440P) with the fingerprint with win 8.1 x64 ?
Thanks,
Usama

Hi,
Using kerberos authentication, users when logged in to windows environment need not enter any user name or password for logging into portal. Check these links for configurations.
http://help.sap.com/saphelp_nw2004s/helpdata/en/a4/385bef3bd14241b9c4f36bd779537d/frameset.htm
Regarding SSO between windows and portal
How To Identify which SSO(Windows Authentication ) is Implemented
Regards,
Harini S

Facebook sign in issues

I got my Z10 today. Ive been trying to sign in but the sign in page won't let me type in any of the fields. My carrier is Telus. The keyboard won't pop up. Ideas?
Solved!
Go to Solution.

Hi WilliamCampbel1,
Welcome to the BlackBerry Support Community.
Does reinserting your battery make any difference and allow you to type? Do you have this issue in any other applications (in the browser or messages) or only with the Facebook for BlackBerry smartphones application?
I look forward to your response.
-FS
Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.
Click Solution? for posts that have solved your issue(s)!

Skype Sign In Issue with Nokia E5

Hi Friends,
I am facing skype log in problem in my mobile Nokia E5 where as via PC i can logged in successfully. Through mobile whenever i try to log in skype it shows skype sining and later on after few seconds it stop working. Plz suggest how can i resolve this issue with my Nokia E5 ?

Hi kishor12345,
To further verify, are you using the internet browser when trying to access the Skype? If so, have you tried browsing the other website wherein you need to sign in your account first before you can proceed? In case that you are using mobile data, please use Wi-Fi connection instead. You may also restart your phone by switching the phone off, take the battery out, put it back in after a few seconds and switch your phone on.
Let us know how it will go.

Lync Sign in Issue

Similar Messages

Maybe you are looking for