Relay IP Address

Hi,
I have just upgraded to Exchange 2010 and I am in the process of decommissioning Exchange 2003.
I have SMTP logging enabled on the Exchange 03 server and can see there is still quite a few mails being relayed off this server.
Some of the application on this servers that are relaying off Exchange 03 are quiet old and on Linux / Unix systems and at this point no one on my team knows how or where to change the relay server name.
So what I am planning is to decommission Exchange 2003 as per MS best practices then do the following so the old Unix/Linux server can still relay mail
Put an additional NIC on the Exchange 2010 CAS server and give this NIC the IP address of the Exchange 2003 server.
Add a DNS entry for the Exchange 2003 server and give it the IP of one of my Exchange 2010 CAS servers.
My question is - Is this a workable solution ?
Thanks

This will not work as you still need to allow the sender IP in Receive Connectors, and it is recommended that you create a new custom Receive Connector with the IP address of your retired Exchange 2003 server and that will work fine. Please follow steps
outlined in below URL for Exchange 2007 server (This is same for Exchange 2010 )
http://blogs.technet.com/b/exchange/archive/2006/12/28/3397620.aspx
Regards, Sourabh Kumar Jha | Please mark it as an answer if it solves your problem or vote as helpful if you like it. |

Similar Messages

How do you alter a relayed email address??

We have customer facing servers on the public internet that use our internal Exchange 2010 server for relaying. I have an issue where some recipients are not getting the emails because certain ISPs are blocking the messages. They are being blocked
because the email appears to be coming from
[email protected] This is a issue with out web applications code. The ISPs blocking are saying PublicServer.domain.com is not a valid sending domain so they block it. Rather then waiting for our developers to fix the App code, is there a
way in Exchange 2010 to take the relayed email and change it form PublicServer.domain.com to domain.com? Thanks!
Mike Garcia

This is a common issue. Exchange is Fun!
This link will assist,
http://exchangeserverpro.com/how-to-configure-a-relay-connector-for-exchange-server-2010/
W.Maxx MCITP MCSE MCSA MCP 2k8 2k3 2k nt4 AD, Exchange, DNS, msProject, SharePoint IBM iSeries RIM blackberry

Unable to send email from my server to internet mail address. Labview.

I have had great success sending mail when I SMTP to the actual mail server that the email address is on. But when I try to send from my server to some other email address I get an unable to relay "email address" server response. If someone has any ideas on this I would appreciate it. I have included some information that may aid in this endeavor. (I do not want to use Active X thanks to Outlook's dislike of that)
Example:
[email protected] email to mail.bellsouth.net works fine. [email protected] email to mail.company.com works fine. [email protected] from mail.company.com gives unable to relay message. (Vice Versa)
Exact server response from SendEmail_LV6.vi from developer zone: (
ht
tp://sine.ni.com/apps/we/niepd_web_display.DISPLAY_EPD4?p_guid=B45EACE3EB9956A4E034080020E74861&p_node=DZ52050&p_submitted=N&p_rank=&p_answer=&p_source=External)
220 server.company.com Microsoft ESMTP MAIL Service, Version: 5.0.2195.5329 ready at Fri, 23 Jan 2004 10:27:22 -0600
250 server.company.com Hello [10.1.1.176]
250 2.1.0 [email protected]...Sender OK
550 5.7.1 Unable to relay for [email protected]
554 5.5.2 No valid recipients
500 5.3.3 Unrecognized command

I agree, it is ususual for an SMTP server to check the validity of the reverse-path address, because mailers could just use a invalid address on a valid domain, e.g. [email protected] The address in the "MAIL FROM:" command gives the reverse path to communicate errors and can be different from the actual sender address.
In any case, this is quite irrelevant for the current discussion, because address verification has nothing to do with relaying.
The error message:
550 5.7.1 Unable to relay for [email protected]
is completely unrelated to your:
450 Unable to find nowhere.com
Just to clarify, I was talking about address in the FROM: field of the message header, and not what is
communicated in the "MAIL FROM:" SMTP command. (Similarly, the TO: field in the header is not used for message targeting and can be anything, it can even be missing and the SMTP server still does not care. Targeting is done entirely with the RCPT TO: SMTP command which not contained in the header (the mail header is part of the message DATA). Refer to RFC 821 for further details.
You probably won't find a legitimate SMTP server that allows relaying, so the solution is to use the designated SMTP server for the particular location.
LabVIEW Champion . Do more with less code and in less time .

Never-used email address getting spammed.

When I signed up for BT Broadband they made me choose an email address [email protected]. I have never used it to send an email, not even to BT.
Within days of getting connected I began to receive spam emails on the new email address from a company called dabs.com. I worked out that they are the contractor BT uses to supply modems to customers. All dabs.com needed was my street address to post me the modem but BT told them my email address as well and they decided to abuse it. After I complained, BT said they would arrange for the emails to stop within 28 days but they've missed that deadline.
Now I am receiving spam advertising male libido boosting tablets.
How can my never-used email address have leaked? Can I blame dabs.com for selling it on to a spammer? Can spammers get them in other ways?

Fathom wrote:
When I signed up for BT Broadband they made me choose an email address [email protected]. I have never used it to send an email, not even to BT.
Within days of getting connected I began to receive spam emails on the new email address from a company called dabs.com. I worked out that they are the contractor BT uses to supply modems to customers. All dabs.com needed was my street address to post me the modem but BT told them my email address as well and they decided to abuse it. After I complained, BT said they would arrange for the emails to stop within 28 days but they've missed that deadline.
Now I am receiving spam advertising male libido boosting tablets.
How can my never-used email address have leaked? Can I blame dabs.com for selling it on to a spammer? Can spammers get them in other ways?
Hi.
dabs.com is not only a modem company, they sell all sorts of tech stuff. They used to be a separate company, but BT bought them a few years ago.
Spammers get their email address in a vast number of ways. Even if you've chosen a new address, this address could still actually be on a spam list.
For example spammers can assume if [email protected] exists, then so does [email protected] and [email protected] etc. They can also use dictionary methods, make all sorts of assumptions based on other user names (e.g. with or without a "period" and add/remove it). Also the email address can also have been used before, either as a primary or sub account - this means that the email address is already known and on spam lists.
Similarly [email protected], [email protected] etc, as well as slightly mispelt ones [email protected] ....
If the email address was dormant until you "picked it", then any bounces returned as email address not existing will never end up at the sending spammer, as the email addresses they use as the "From" address are never theirs and are either spoofed as someone elses (and they get the non delivery reports) or just random addresses.
There are other methods e.g. virus/trojan infected computers relaying email addresses to spammers without the user even knowing, and this virus infected computer could be a contact who has your email address, and not necessarily your computer infected.
http://www.andyweb.co.uk/shortcuts
http://www.andyweb.co.uk/pictures

X1000 stops giving out Wireless DHCP IP addresses

I have 2 X1000 switches, the prmary switch, IP, 192.168.1.1 connects to my ADSL line upstairs and handles all DHCP..
My second router is downstairs and has been configured as 192.168.1.2, there is a LAN cable running from a LAN port of the primary router to the secondary router. Any device that I connect to the second router via the LAN ports works perfectly. However, when I connect a wireless device, the first time it works,If I then disconnect from the second router and reconnect I connect to the wireless network, but I cannot get an IP.
I've gone through posts here and reset to defaults and reconfigured according to the posts, the problem persists.
Router 1 - Works perfect, no problems
Router 2 - IP 192.168.1.2
Router 2 is configured as Ethernet
different SSID to router 1
different channelto Router 1
I've turned off internet filtering and the firewalls to see if that would make a difference, no change.
It's really strange as DHCP works perfect via an ethernet connection to Router 2, but wifi only works once, thereafter you connect to the wifi fine, but the wifi device never gets an IP Address. I've checked for new fw and there is only version 1 available and I have already gone back to factory defaults and re-setup the router.

murattug wrote:
Same problem here
we have 5 older model linksys adsl modem (all of them works as wireless acces point) works well
yesterday we bought 2 x1000 and I tried to configure as wireless router. our network has only one dhcp server and network gateway and its ip is 192.168.1.234
I configured x1000 as router, its ip as 192.168.1.16, dhcp relay mode, relay server address: 192.168.1.234
then I tried to connect using my smartphone, but it never gets an ip number.
after first unsucsessful connection try, I downloaded firmware and flashed the x1000
but no change
thanks
Be sure to avoid IP address conflict. If you are to configure the X1000 with an IP address of 192.168.1.x, plug the cable from the modem to any of the LAN ports of the X1000. If you are to configure the X1000 with an IP address of 192.168.x.x, plug the cable from the modem to the Internet port of the X1000.

3000 series and Multiple DHCP scopes (DHCP-relay)

I need to send different DHCP options to users; however, I need to put certain groups in different subnets. Is it possible to setup the concentrator to relay for addresses from different scopes?

- Configuration
- System
- IP Routing
- DHCP Relay
a. Enable 'Enabled' checkbox
b. Select Forward to
c. Address == 192.168.10.8 255.255.255.0
- Address Management
- Assignment
a. Enable 'Use DHCP'
- User Management
- Groups
- Select 'groupA'
- Modify Group
- Click General tab
- Enter 'DHCP Network Scope' x.x.x.x
- Select 'groupA'
- Remove Address Pool
Now I get the following error:
118 02/08/2005 13:29:00.720 SEV=3 DHCPDBG/39 RPT=34
DHCP discover timeout: no response from polled servers (xid 3821297335)
I can ping the server, and it is serving up this scope to other devices (just not from the concentrator)

Helper address IOS XR ASR9000

Hi
Everyone I have a doubt about the configuration for the helper address on ASR9000, mainly I try to configure the helper address in this way:
configure
interface type number
ipv4 helper-address vrf vrf_name address
However it doesnt work.
What is the correct way to apply an helper address on my ASR9000 ???
Regards !!!!

Hi,
Correct configuration is:
dhcp ipv4
profile DHCP-HELP relay
helper-address vrf <VRF> <IP address>
interface <interface> relay profile DHCP-HELP
Florian

DHCP Relay

I have a setup where my ISP router hands out DHCP addresses and my 2 time capsules is used to backing up our mac computers. I´ve installed the TC´s in bridged mode and their ip addresses is from the DHCP. Then today I tried to setup both my TC´s with an ip address just outside the scope, this way I always know what their ip addresses are, useful for some of my other clients that uses them as fileshares. But if I do that it looks like they wont relay DHCP addresses anymore?? If my scope is 192.168.1.10 - 99 and the gateway is .1, the TC´s should agree fine with being .2 and .3. But everyone connected to the TC´s (ethernet and wireless) stops receiving DHCP addresses.. Is this by design or is it a bug. I´ve never seen any other network devices do this??
It would be ok, if I was able to enable the relay again, but I can´t.
Regards

Go back to the start.. something is strange.. I run a number of TC in bridge and they have no issues getting IP and in fact in bridge if there is no dhcp server they will self-assign a 169.254.x.x address. Each time the lease expires the TC should simply find itself an address.. i have set this up with numerous different modems and routers. and not one has had issues. Although it is not unknown for dhcp to fail. You will generally have to do some rather intensive investigation, using a hub or a managed switch where you can mirror the ports and use a utility like wireshark to check dhcp requests.
You stated the ISP is giving you dhcp address.. does this mean you have a block of Public IP addresses?
I didn't think so because you then give the address range as 192.168.1.10-99.. that has nothing to do with the ISP and is purely from the modem router. So what did you mean by that statement??

[sendmail] unable to relay

Hi Experts,
I have a problem which I can't send email from my solaris box
here is the condition :
- I have 1 solaris box with ip address x.x.x.x and hostname ABC.com
- I have 1 email server with ip address y.y.y.y and hostname DEF.com, i have account on this server [email protected]
this is my sendmail.cf :
=====================================
Cwlocalhost
# file containing names of hosts for which we receive email
Fw/etc/mail/local-host-names
# my official domain name
# ... define this only if sendmail cannot automatically determine your domain
#Dj$DEF.com
# host/domain names ending with a token in class P are canonical
CP.
# "Smart" relay host (may be null)
DS[y.y.y.y]
====================================
when i want to send email by using "/usr/bin/mailx -v [email protected]" --> appears some error notification :
550 5.7.1 Unable to relay
503 5.5.2 Need rcpt command
I tried to capture the log from /var/log/syslog
========================================================================================
ABC.com sendmail[10336]: [ID 702911 mail.error] dangerous permissions=40777 on queue directory /var/spool/clientmqueue/
ABC.com sendmail[10336]: [ID 801593 mail.info] qBB3xCRp010336: from=root, size=95, class=0, nrcpts=1, msgid=<[email protected]>, relay=root@localhost
ABC.com sendmail[10336]: [ID 801593 mail.info] qBB3xCRp010336: [email protected], ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:05, mailer=relay, pri=30095, relay=DEF.com. [y.y.y.y], dsn=5.7.1, stat=User unknown
ABC.com sendmail[10336]: [ID 801593 mail.info] qBB3xCRq010336: to=root, delay=00:00:10, xdelay=00:00:10, mailer=relay, pri=31119, relay=DEF.com. [y.y.y.y], dsn=5.7.1, stat=User unknown
ABC.com sendmail[10336]: [ID 801593 mail.info] qBB3xCRq010336: qBB3xCRr010336: return to sender: User unknown
ABC.com sendmail[10336]: [ID 801593 mail.info] qBB3xCRr010336: to=postmaster, delay=00:00:10, xdelay=00:00:10, mailer=relay, pri=32143, relay=DEF.com. [y.y.y.y], dsn=5.7.1, stat=User unknown
=============================================================================================================
Any help will be appreciate :)
Regards,
Fahrul
Edited by: 971924 on Dec 10, 2012 8:50 PM

Hi muvvas,
I've try your way, but it appears the same:
ABC.com sendmail[27281]: [ID 702911 mail.error] dangerous permissions=40777 on queue directory /var/spool/clientmqueue/
And I already add relay ip address on /etc/hosts
However, what do you mean about add my solaris box into exchange server?
Pardon me if I'm wrong, noob :)
regards,
fahrul

SGE2010P - DHCP Relay - offer packet not reaching host

I have an SGE2010P in L3 mode. I set up 2 vlans, 1 & 5. Vlan 1 has an interface of 10.0.3.252; Vlan 5 is at 10.0.10.9. I have defined the DHCP at 10.0.3.4 (on vlan 1) and enabled DHCP Interface for vlan 5. Put switch port g28 in access mode on vlan 5 and connected client machine. Set up wireshark on both DHCP a server and client. DHCP server is receiving the DHCP discovery packet with the correct relay agent address (10.0.10.9), and it sends back an offer packet to that address, but it is never received by the host machine. What am I missing?

Hello,
DHCP server typically is on subnet of one of the switch IP interface. Thus there si no need to indicate where the server is however you have to indicate from which VLAN DHCP requests are relayed. For example:
VLAN 1 - switch IP 192.168.1.25/24
DHCP server is on VLAN 1 with IP 192.168.1.1/24
Other VLANs:
VLAN 5 IP address 192.168.5.254/24
VLAN 10 IP address 192.168.10.254/24
enabling DHP relay from VLAN 5 and VLAN 10 is required.
Please check IF you have IP addresses on the switch of other VLANs 5 and 10
Regards,
Aleksandra

James Send to Junk Mail

Hello , i am using james 2.2.0 installed on a server with a online DNS , it recives mails properly , but when i try to send emails ( also when using Authenticated SMTP) , mail go to junk mails ( as hotmail and yahoo) , When i use Outlook express outside the server to send mail i get the following error :
The message could not be sent because one of the recipients was rejected by the server. The rejected e-mail address was '[email protected]'. Subject 'hahahhaha', Account: 'mytrans-port.com', Server: 'mytrans-port.com', Protocol: SMTP, Server Response: '550 - Requested action not taken: relaying denied', Port: 25, Secure(SSL): No, Server Error: 550, Error Number: 0x800CCC79
here is my config.xml , Thanks
<?xml version="1.0"?>
<!DOCTYPE config [
<!ENTITY listserverConfig SYSTEM "../conf/james-listmanager.xml">
<!ENTITY listserverStores SYSTEM "../conf/james-liststores.xml">
<!ENTITY fetchmailConfig SYSTEM "../conf/james-fetchmail.xml">
]>











<config>
   <James>

      
      
      
      
      <postmaster>Postmaster@localhost</postmaster>
      
      
      
      
      
      
      
      
      
      
      
      
      
      
      
      
      
      <servernames autodetect="true" autodetectIP="true">

         <servername>mytrans-port.com</servername>
      </servernames>
      
      
      
      <usernames ignoreCase="true" enableAliases="true" enableForwarding="true"/>
      
      
      <inboxRepository>
         <repository destinationURL="file://var/mail/inboxes/" type="MAIL"/>
      </inboxRepository>
      
      
      
      
      
      
      
      
      
      
      
      
      
      
      
      
   </James>
   
   
   
   
   
    <fetchpop enabled="true">
        
        
        <fetch name="mydomain.com">
            
            <host>mail.mydomain.com</host>
            
            <user>username</user>
            
            <password>pass</password>
            
            <interval>600000</interval>
        </fetch>
    </fetchpop>
    
    
    
    
    
    
    
    
    &fetchmailConfig;
   
   
   
   <spoolmanager>
      
      <threads> 10 </threads>
      
      <mailetpackages>
         <mailetpackage>org.apache.james.transport.mailets</mailetpackage>
      </mailetpackages>
      <matcherpackages>
         <matcherpackage>org.apache.james.transport.matchers</matcherpackage>
      </matcherpackages>
      
      
      
      
      <processor name="root">
         
         
         
         
         
         <mailet match="RelayLimit=30" class="Null"/>
         
         
         
         
         
         <mailet match="InSpammerBlacklist=query.bondedsender.org"
                 class="ToProcessor">
           <processor> transport </processor>
         </mailet>
         
         
         
         
         
         
         
         <mailet match="InSpammerBlacklist=dnsbl.njabl.org"
                 class="ToProcessor">
           <processor> spam </processor>
           <notice>550 Requested action not taken: rejected - see http://njabl.org/ </notice>
         </mailet>
         <mailet match="InSpammerBlacklist=relays.ordb.org"
                 class="ToProcessor">
           <processor> spam </processor>
           <notice>550 Requested action not taken: rejected - see http://www.ordb.org/ </notice>
         </mailet>
         
         
         
         <mailet match="All" class="ToProcessor">
            <processor> transport </processor>
         </mailet>
      </processor>
      
      
      
      
      
      
      <processor name="error">
         
         
         
         
         
         <mailet match="All" class="ToRepository">
            <repositoryPath> file://var/mail/error/</repositoryPath>
            
            
         </mailet>
      </processor>
      
      
      <processor name="transport">
        
        
        
         
         <mailet match="RecipientIsLocal" class="LocalDelivery"/>
         
         
         <mailet match="HostIsLocal" class="ToProcessor">
            <processor> local-address-error </processor>
            <notice>550 - Requested action not taken: no such user here</notice>
         </mailet>

         
         
         
         
         
         
         
         
         
         
         
         
         
         
         
         
         
         
         
         
         <mailet match="RemoteAddrNotInNetwork=127.0.0.1" class="ToProcessor">
            <processor> relay-denied </processor>
            <notice>550 - Requested action not taken: relaying denied</notice>
         </mailet>
         
         
         <mailet match="All" class="RemoteDelivery">
            <outgoing> file://var/mail/outgoing/ </outgoing>
            
            
            
            
            <delayTime> 5 minutes </delayTime>
            <delayTime> 10 minutes </delayTime>
            <delayTime> 45 minutes </delayTime>
            <delayTime> 2 hours </delayTime>
            <delayTime> 3 hours </delayTime>
            <delayTime> 6 hours </delayTime>
            <maxRetries> 25 </maxRetries>
            
            <deliveryThreads> 1 </deliveryThreads>
            
            <sendpartial>false</sendpartial>
            
            
            
            
            
            
            
            
            
            
            
            
            
            
            
         </mailet>
      </processor>
      
      
      
      <processor name="spam">
         
         
         
         
         
         
         
         
         <mailet match="All" class="ToRepository">
            <repositoryPath>file://var/mail/spam/</repositoryPath>
            
            
            
            
            
         </mailet>
      </processor>
      
      <processor name="local-address-error">
         
         
         
         
         
         <mailet match="All" class="ToRepository">
            <repositoryPath> file://var/mail/address-error/</repositoryPath>
            
            
         </mailet>
      </processor>
      
      
      <processor name="relay-denied">
         
         
         
         
         
         <mailet match="All" class="ToRepository">
            <repositoryPath>file://var/mail/relay-denied/</repositoryPath>
            
            
         </mailet>
      </processor>
   </spoolmanager>
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   <dnsserver>
      <servers>
         
         
         
      </servers>
      
      
      <autodiscover>true</autodiscover>
      <authoritative>false</authoritative>
   </dnsserver>
   <remotemanager>
      <port>4555</port>
      
      
      
      
      <handler>
         
         
         
         
         
         <helloName autodetect="true">myMailServer</helloName>
         <administrator_accounts>

            
            <account login="username" password="password"/>
         </administrator_accounts>
         <connectiontimeout> 60000 </connectiontimeout>
      </handler>
   </remotemanager>
    
    
    
   <pop3server enabled="true">
      
      
      <port>110</port>
      
      
      
      
      <handler>
         
         
         
         
         
         <helloName autodetect="true">myMailServer</helloName>
         <connectiontimeout>120000</connectiontimeout>
      </handler>
   </pop3server>
    
    
    
   <smtpserver enabled="true">
      
      <port>25</port>
      
      
      
      
      <handler>
         
         
         
         
         
         <helloName autodetect="true">myMailServer</helloName>
         <connectiontimeout>360000</connectiontimeout>
         
         

         
         <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
         
         
         
         
         
         
         <maxmessagesize>0</maxmessagesize>
      </handler>
   </smtpserver>
    
    
    
    
   <nntpserver enabled="true">
   
      
      
      <port>119</port>
      
      
      
      
      <handler>
         
         
         
         
         
         <helloName autodetect="true">myMailServer</helloName>
         <co

hi
you have to change the config.xml to allow the server accept relay mails from your host machine from which you are sendign the mail ...
ie
change
<mailet match="RemoteAddrNotInNetwork=127.0.0.1" class="ToProcessor">
<processor> relay-denied </processor>
<notice>550 - Requested action not taken: relaying denied</notice>
</mailet>
add few more ips (your network / subnet ip)
so that it accpets mails from that machine to be relayed ...
you can also change the smtp autheriZation part and do that ...
any one is enough ..
Regards
Venkat

802.1X and automatic vlan assignment

Hello,
I'm testing a 802.1X infrastructure :
Switch : Try with Netgear Prosafe GS728TPS and Cisco SF300
Radius Server : Microsoft NPS
DHCP Relay for address assignement by Vlan
I have created some policies with simple authentication for testing (MSCHAP V2) and vlan assignement or not (depend on Active Directory Group).
All work fine on a Windows 7 Pro. The user 1 is authenticated whithout vlan and the user 2 is authenticated with a vlan.
The DHCP works fine and the 2 users have an IP.
When I try on MAC OS X (ver. 10.7.2 and ver. 10.9.2) the user 1 (whithout vlan) work fine. I have an IP and access to the LAN. But the user 2 (with vlan) don't work. The Mac don't get an IP and I'm not on the VLAN. If i push manually an IP of the vlan, I have no access to the VLAN.
There are some specifics parameters to add for enable vlan on Mac OS X ?
Thanks for reply
Ben

Edit : It's for wired connections

Lync HP 4120 Sign in problems with Lync Server 2013

Hi, this is my second request for help, this with more information...
I`ll ready install the follow infrastructure: (I change the name of my organization for contoso)
Lync Server 2013 Installation with Enterprise mode with 1 front end : Pool: lync.contoso.com Front End: lyncfe01.contoso.com Back End: lyncsql01.contoso.com
I`ll ready install a PKI infrastructure with two tiers, the root offline and the subordnate ac.contoso.com
This with the defailt algorithm configuration RSA SHA1
My phones are HP 4120
In the Front End Server i configured the SCHANNEL registers:
EnableSessionTicket in 2
Send..etc in 0
Ok, the installation is ok, services are OK, Client login trough PC its OK, PSTN Configuration... (I can make a phonecall with the lync client of Office 365)
Commnd Checks:
When i run the command Test-CsPhoneBootstrap -PhoneOrExt 12345 -PIN 123456 -TargetFqdn lync.contoso.com
The result is:
Target Fqdn : lync.contoso.com
Target Uri : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
Result : Success
Latency : 00:00:09.0559615
Error Message :
Diagnosis :
When i run the command Test-CsPhoneBootstrap -PhoneOrExt 12345 -PIN 123456 for
check the DHCP the result is:
Target Fqdn : lync.contoso.com
Target Uri : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
Result : Success
Latency : 00:00:09.0559615
Error Message :
Diagnosis :
When i run the follow command
PS C:\Users\Administrator> $cred = Get-Credential
cmdlet Get-Credential at command pipeline position 1
Supply values for the following parameters:
Credential
PS C:\Users\Administrator> Test-CsClientAuth -TargetFqdn lync.contoso.com -UserSipAddress "sip:[email protected]" -UserCredential $cred
I got this:
Target Fqdn : lync.contoso.com
Target Uri : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
Result : Success
Latency : 00:00:00.3431783
Error Message :
Diagnosis :
But.. when i use the same command but i remove the -targetFqdn for check the Dhcp i got this:
VERBOSE: Workflow Instance Id 'bca95636-af7b-4b0a-b43d-dba259294b2d', started.
VERBOSE: Command line executed is 'Test-CsClientAuth -UserSipAddress "sip:[email protected]" -UserCredential $cred
-Verbose'.
Target Fqdn :
Target Uri :
Result : Failure
Latency : 00:00:00
Error Message : 10060, A connection attempt failed because the connected party did not properly respond after a period
of time, or established connection failed because connected host has failed to respond 194.90.8.20:5061
Inner Exception:A connection attempt failed because the connected party did not properly respond after
a period of time, or established connection failed because connected host has failed to respond
194.90.8.20:5061
Diagnosis :
VERBOSE: Workflow 'Microsoft.Rtc.SyntheticTransactions.Workflows.STClientAuthWorkflow' started.
Workflow 'Microsoft.Rtc.SyntheticTransactions.Workflows.STClientAuthWorkflow' completed in '5.62E-05' seconds.
Target web service Url not provided. Will have to extract it from authentication challenge.
An exception 'Unable to establish a connection.' occurred during Workflow
Microsoft.Rtc.SyntheticTransactions.Workflows.STClientAuthWorkflow execution.
Exception Call Stack: at Microsoft.Rtc.Signaling.SipAsyncResult`1.ThrowIfFailed()
at Microsoft.Rtc.Signaling.Helper.EndAsyncOperation[T](Object owner, IAsyncResult result)
at Microsoft.Rtc.SyntheticTransactions.Activities.GetSTSUriActivity.InternalExecute(ActivityExecutionContext
executionContext)
at Microsoft.Rtc.SyntheticTransactions.Activities.SyntheticTransactionsActivity.Execute(ActivityExecutionContext
executionContext)
at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity, ActivityExecutionContext executionContext)
at System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRuntime workflowCoreRuntime)
at System.Workflow.Runtime.Scheduler.Run()
at System.Net.Sockets.Socket.EndConnect(IAsyncResult asyncResult)
at Microsoft.Rtc.Internal.Sip.TcpTransport.OnConnected(Object arg)
'GetSTSUri' activity started.
Starting STS Uri Discovery...
ERROR getting STS Uri.
'UnRegister' activity started.
'UnRegister' activity completed in '3.12E-05' seconds.
VERBOSE: Workflow Instance ID 'bca95636-af7b-4b0a-b43d-dba259294b2d' completed.
VERBOSE: Workflow run-time (sec): 126.0548512.
The Real Problem is that my Lync HP 4120 Phone can't make a sign in, not from USB cable loging, nor with PIN authentification
When I try to make a login with the USB cable, I set the user and password and the phone says "Connecting to Lync".. "Downloading a certificate" ... "Installing certificate"... "Downloading Certificate"...
"Installing Certificate".. forever
When I try to make a login with PIN Authentification, the phone first displays the following:
Account used is not authorized, Please Contact your support team and then shows this:
An Account matching this phone number cannot be found. Please contact your support team.
The Pin authentification is enable
In the Lync Server Enable Kerberos Authentification, Enable Integrated Windows Authentification and Enable Certificate Authentification are enable
This is the configuration from DHCP
Starting Discovery ...
Sending Packet (Size: 284, Network Adapter: xx.xx.xx.xx, Attempt Type: Broadcast only)
--Begin Packet--
DHCP: INFORM (xid=130EA7FA)
DHCP: Op Code (op) = 1
DHCP: Hardware Type (htype) = 6
DHCP: Hops (hops) = 0
DHCP: Transaction ID (xid) = 319727610
DHCP: Seconds (secs) = 0
DHCP: Flags (flags) = 0000
DHCP: Client IP Address (ciaddr) = Xx.xx.xx.xx
DHCP: Your IP Address (yiaddr) = 0.0.0.0
DHCP: Server IP Address (siaddr) = 0.0.0.0
DHCP: Relay IP Address (giaddr) = 0.0.0.0
DHCP: Client HW Address (chaddr) = FC15B4###--End Packet--
Received Packet
Sender:xx.xx.xx.xx:67, Size:363
--Begin Packet--
DHCP: ACK (xid=130EA7FA)
DHCP: Op Code (op) = 1
DHCP: Hardware Type (htype) = 6
DHCP: Hops (hops) = 0
DHCP: Transaction ID (xid) = 319727610
DHCP: Seconds (secs) = 0
DHCP: Flags (flags) = 0000
DHCP: Client IP Address (ciaddr) = xx.xx.xx.xx
DHCP: Your IP Address (yiaddr) = 0.0.0.0
DHCP: Server IP Address (siaddr) = 0.0.0.0
DHCP: Relay IP Address (giaddr) = 0.0.0.0
DHCP: Client HW Address (chaddr) = FC15B4100289
DHCP: Server Host Name (sname) =
DHCP: Boot File Name (file) =
DHCP: Magic Cookie = 99.130.83.99
DHCP: Option Field
DHCP: DHCP MESSAGE TYPE( 53) = (Length: 1) DHCP ACK
DHCP: Server Identifier( 54) = (Length: 4) XX.XX.XX.XX
DHCP: Client Identifier( 61) = (Length: 0) ()
DHCP: SIP Server( 120) = (Length: 17) enc:0 lync.contoso.com (00046C796E6306756E69736F6E026D7800)
DHCP: Host Name( 12) = (Length: 0)
DHCP: Vendor Identifier( 60) = (Length: 0)
DHCP: Param Req List( 55) = (Length: 0) 0 0
DHCP: Vendor Info( 43) = (Length: 86) MS-UC-Clienthttpslync.contoso.com443%/CertProv/CertProvisioningService.svcÜNAP (010C4D532D55432D436C69656E7402056874747073030E6C796E632E756E69736F6E2E6D78040334343305252F4365727450726F762F4365727450726F766973696F6E696E67536572766963652E737663DC034E4150)
DHCP: End of this option field
--End Packet--
Result: Success
DHCP Server : xx.xx.x.xx.
SIP Server FQDN : lync.contoso.com
Certificate Provisioning Service URL : https://lync.contoso.com:443/CertProv/CertProvisioningService.svc
thanks for all, hope somebody can help me with this problem.. i am going crazy...

Hi, i connected the Lync Phone to another switch and i update the firmware to the newest firmware and i got the same problem..
The lync phone download the certificate but cant install it and the still the same error with the SIP login
An Account matching this phone number cannot be found. Please contact your support team.

Network user log in problem

Can not create a network user, with home on the server.
I;m sure I am missing something, but can't seem to find it.
Any suggestions/pointers greatly appreciated.
The layout:
Server = Mini, 10.6.2, Open directory master, private network
Client1 = G4, 10.4.11, hardwired
Client2 = MacBook, 10.5.8, wireless
Airport extreme, handling dhcp
On the server a share point "Homes" created, with enable automount, use for home folders.
On the server user "zxc" is created, home folder set to afp://xyz.private/Homes.
Preferences for login managed, with "add network home share point" checked.
Client1 attempts to login and gets: "...account login failed....the home folder is located on AFP or SMB server...."
Client2 attempts to login and after delay, gets shaken off with no error.
Changing the home folder in workgroup manager to none, results in Client1 logging in but with error "...folder 99 can not be accessed .... premissions..." which would seem to confirm that Client1 is connecting to the server but having issues with home folder.
Don't know why Client1 can not log in, or why Client2 is not acting the same as Client1 ?
Did I miss something in setting up the network home folder? It shows up in the Home panel for the user and shows the correct home url and full path. Logging in on Client1 as a local user, I can connect to the server and mount the home folder using the "zxc" user and password.
I'm lost where to look next.
Thanks.

I encountered this issue when we did a clean install of 10.6 server to replace 10.4 server on our Mac Pro. The 10.4 clients cannot correctly distinguish the CNAME records of the 10.6 server. This VERY IMPORTANT piece of information is missing from the 10.6 administration guides.
Open Directory, like Active Directory, heavily relies on correct DNS setting. Your DNS settings are the first thing to look at.
The fix is simple. On the Mac client machines make sure the following is done:
1: Login with a local admin account. In the Network system preference make sure the primary DNS server IP address is the IP address of the OSX server.
On the OSX Server in the DNS manager you need to specify the external or "relay" IP address of your ISP's DNS server(s) if it is not already there. This way if the internal Mac DNS server cannot resolve the name they will push the request to the external DNS server. 10.6 server's wizard automatically assigns the external DNS entry to Server Admin when you set up the server.
2: Go into the utilities folder on the 10.4 client and open Directory Access. You should have the LDAP entry of the Mac OS X server. to the right of that is LDAP settings come from pull down menu. Choose Open Directory; it probably was set on automatic. 10.4 clients do not understand the automatic open directory server CNAME entries, you have to specifically tell then to use Open Directory as the LDAP source.
If you do not have a LDAP entry then you need to add it. type in the IP address or the DNS name of your mac server. Choose Open Directory as the LDAP entry type.
The "Cannot login to the user account because the home directory is located on an AFP/SMB server" error message is a constant headache to OSX admins because the error message doesn't tell you anything.
You should now be able to click on "other" and login to you AFP mounted home directory.
Message was edited by: lakorai

Polycom CX 600 - Certificate web service cannot be found

Hi All,
I know, there are some same issues in the forum, bot those are not helpful for me. My problem is the same, via network cable (using just DHCP) the Polycom CX 600 Lync Phone are not able to sign in (however 1 month ago it was), returning the error message:
'Certificate web service cannot be found.'
I've double checked the DHCP options and all of them are OK! We are not using Windows DHCP, but the options are right, the 43 option containing the proper hexa value, the sub-options are also valid. From the DHCP log I can verify that the device got the
options, but the phone still not able to sign in.
From the browser I cannot open the device, by it's IP, just with FTP:\\'IP'. There I could find a .clg1 log file, but it not containing useful information for me.
This is the link of the log file: http://speedy.sh/XAgMT/system.clg1
If I run the DHCPUtil.exe -emulateclient on my workstation, I got the following:
Starting Discovery ...
Result: Failure = -2147014848
Or... sometimes it has a result:
Starting Discovery ...
Sending Packet (Size: 288, Network Adapter: 57.56.69.138, Attempt Type: Broadcas
t + Unicast)
--Begin Packet--
DHCP: INFORM (xid=5C1E8177)
DHCP: Op Code (op) = 1
DHCP: Hardware Type (htype) = 6
DHCP: Hops (hops) = 0
DHCP: Transaction ID (xid) = 1545503095
DHCP: Seconds (secs) = 0
DHCP: Flags (flags) = 0000
DHCP: Client IP Address (ciaddr) = 57.56.69.138
DHCP: Your IP Address (yiaddr) = 0.0.0.0
DHCP: Server IP Address (siaddr) = 0.0.0.0
DHCP: Relay IP Address (giaddr) = 0.0.0.0
DHCP: Client HW Address (chaddr) = E0DB55DE###--End Packet--
Received Packet
Sender:57.20.120.85:67, Size:408
--Begin Packet--
DHCP: ACK (xid=5C1E8177)
DHCP: Op Code (op) = 1
DHCP: Hardware Type (htype) = 6
DHCP: Hops (hops) = 0
DHCP: Transaction ID (xid) = 1545503095
DHCP: Seconds (secs) = 0
DHCP: Flags (flags) = 0000
DHCP: Client IP Address (ciaddr) = 57.56.69.138
DHCP: Your IP Address (yiaddr) = 0.0.0.0
DHCP: Server IP Address (siaddr) = 0.0.0.0
DHCP: Relay IP Address (giaddr) = 57.56.69.131
DHCP: Client HW Address (chaddr) = E0DB55DE8993
DHCP: Server Host Name (sname) =
DHCP: Boot File Name (file) =
DHCP: Magic Cookie = 99.130.83.99
DHCP: Option Field
DHCP: DHCP MESSAGE TYPE( 53) = (Length: 1) DHCP ACK
DHCP: Server Identifier( 54) = (Length: 4) 57.20.120.85
DHCP: Client Identifier( 61) = (Length: 0) ()
DHCP: SIP Server( 120) = (Length: 18) enc:0 lync2013.dlh.de (00086C79
6E633230313303646C6802646500)
DHCP: Host Name( 12) = (Length: 0)
DHCP: Vendor Identifier( 60) = (Length: 0)
DHCP: Param Req List( 55) = (Length: 0) 0 0
DHCP: Vendor Info( 43) = (Length: 130) ☺♀MS-UC-Client☻♣https♥☼lync201
3.dlh☻E6465040334343305252F4365727450726F762F4365727450726F766973696F6E696E67536
572766963652E737663] (010C4D532D55432D436C69656E7402056874747073030F6C796E633230
31332E646C6802453634363530343033333433343333303532353246343336353732373435303732
36463736324634333635373237343530373236463736363937333639364636453639364536373533
36353732373636393633363532453733373636335D)
DHCP: End of this option field
--End Packet--
Received Packet
Sender:57.20.120.85:67, Size:408
--Begin Packet--
DHCP: ACK (xid=5C1E8177)
DHCP: Op Code (op) = 1
DHCP: Hardware Type (htype) = 6
DHCP: Hops (hops) = 0
DHCP: Transaction ID (xid) = 1545503095
DHCP: Seconds (secs) = 0
DHCP: Flags (flags) = 0000
DHCP: Client IP Address (ciaddr) = 57.56.69.138
DHCP: Your IP Address (yiaddr) = 0.0.0.0
DHCP: Server IP Address (siaddr) = 0.0.0.0
DHCP: Relay IP Address (giaddr) = 57.56.69.130
DHCP: Client HW Address (chaddr) = E0DB55DE8993
DHCP: Server Host Name (sname) =
DHCP: Boot File Name (file) =
DHCP: Magic Cookie = 99.130.83.99
DHCP: Option Field
DHCP: DHCP MESSAGE TYPE( 53) = (Length: 1) DHCP ACK
DHCP: Server Identifier( 54) = (Length: 4) 57.20.120.85
DHCP: Client Identifier( 61) = (Length: 0) ()
DHCP: SIP Server( 120) = (Length: 18) enc:0 lync2013.dlh.de (00086C79
6E633230313303646C6802646500)
DHCP: Host Name( 12) = (Length: 0)
DHCP: Vendor Identifier( 60) = (Length: 0)
DHCP: Param Req List( 55) = (Length: 0) 0 0
DHCP: Vendor Info( 43) = (Length: 130) ☺♀MS-UC-Client☻♣https♥☼lync201
3.dlh☻E6465040334343305252F4365727450726F762F4365727450726F766973696F6E696E67536
572766963652E737663] (010C4D532D55432D436C69656E7402056874747073030F6C796E633230
31332E646C6802453634363530343033333433343333303532353246343336353732373435303732
36463736324634333635373237343530373236463736363937333639364636453639364536373533
36353732373636393633363532453733373636335D)
DHCP: End of this option field
--End Packet--
Received Packet
Sender:57.20.120.100:67, Size:408
--Begin Packet--
DHCP: ACK (xid=5C1E8177)
DHCP: Op Code (op) = 1
DHCP: Hardware Type (htype) = 6
DHCP: Hops (hops) = 0
DHCP: Transaction ID (xid) = 1545503095
DHCP: Seconds (secs) = 0
DHCP: Flags (flags) = 0000
DHCP: Client IP Address (ciaddr) = 57.56.69.138
DHCP: Your IP Address (yiaddr) = 0.0.0.0
DHCP: Server IP Address (siaddr) = 0.0.0.0
DHCP: Relay IP Address (giaddr) = 0.0.0.0
DHCP: Client HW Address (chaddr) = E0DB55DE8993
DHCP: Server Host Name (sname) =
DHCP: Boot File Name (file) =
DHCP: Magic Cookie = 99.130.83.99
DHCP: Option Field
DHCP: DHCP MESSAGE TYPE( 53) = (Length: 1) DHCP ACK
DHCP: Server Identifier( 54) = (Length: 4) 57.20.120.100
DHCP: Client Identifier( 61) = (Length: 0) ()
DHCP: SIP Server( 120) = (Length: 18) enc:0 lync2013.dlh.de (00086C79
6E633230313303646C6802646500)
DHCP: Host Name( 12) = (Length: 0)
DHCP: Vendor Identifier( 60) = (Length: 0)
DHCP: Param Req List( 55) = (Length: 0) 0 0
DHCP: Vendor Info( 43) = (Length: 130) ☺♀MS-UC-Client☻♣https♥☼lync201
3.dlh☻E6465040334343305252F4365727450726F762F4365727450726F766973696F6E696E67536
572766963652E737663] (010C4D532D55432D436C69656E7402056874747073030F6C796E633230
31332E646C6802453634363530343033333433343333303532353246343336353732373435303732
36463736324634333635373237343530373236463736363937333639364636453639364536373533
36353732373636393633363532453733373636335D)
DHCP: End of this option field
--End Packet--
Received Packet
Sender:57.20.120.100:67, Size:408
--Begin Packet--
DHCP: ACK (xid=5C1E8177)
DHCP: Op Code (op) = 1
DHCP: Hardware Type (htype) = 6
DHCP: Hops (hops) = 0
DHCP: Transaction ID (xid) = 1545503095
DHCP: Seconds (secs) = 0
DHCP: Flags (flags) = 0000
DHCP: Client IP Address (ciaddr) = 57.56.69.138
DHCP: Your IP Address (yiaddr) = 0.0.0.0
DHCP: Server IP Address (siaddr) = 0.0.0.0
DHCP: Relay IP Address (giaddr) = 57.56.69.131
DHCP: Client HW Address (chaddr) = E0DB55DE8993
DHCP: Server Host Name (sname) =
DHCP: Boot File Name (file) =
DHCP: Magic Cookie = 99.130.83.99
DHCP: Option Field
DHCP: DHCP MESSAGE TYPE( 53) = (Length: 1) DHCP ACK
DHCP: Server Identifier( 54) = (Length: 4) 57.20.120.100
DHCP: Client Identifier( 61) = (Length: 0) ()
DHCP: SIP Server( 120) = (Length: 18) enc:0 lync2013.dlh.de (00086C79
6E633230313303646C6802646500)
DHCP: Host Name( 12) = (Length: 0)
DHCP: Vendor Identifier( 60) = (Length: 0)
DHCP: Param Req List( 55) = (Length: 0) 0 0
DHCP: Vendor Info( 43) = (Length: 130) ☺♀MS-UC-Client☻♣https♥☼lync201
3.dlh☻E6465040334343305252F4365727450726F762F4365727450726F766973696F6E696E67536
572766963652E737663] (010C4D532D55432D436C69656E7402056874747073030F6C796E633230
31332E646C6802453634363530343033333433343333303532353246343336353732373435303732
36463736324634333635373237343530373236463736363937333639364636453639364536373533
36353732373636393633363532453733373636335D)
DHCP: End of this option field
--End Packet--
Received Packet
Sender:57.20.120.100:67, Size:408
--Begin Packet--
DHCP: ACK (xid=5C1E8177)
DHCP: Op Code (op) = 1
DHCP: Hardware Type (htype) = 6
DHCP: Hops (hops) = 0
DHCP: Transaction ID (xid) = 1545503095
DHCP: Seconds (secs) = 0
DHCP: Flags (flags) = 0000
DHCP: Client IP Address (ciaddr) = 57.56.69.138
DHCP: Your IP Address (yiaddr) = 0.0.0.0
DHCP: Server IP Address (siaddr) = 0.0.0.0
DHCP: Relay IP Address (giaddr) = 57.56.69.130
DHCP: Client HW Address (chaddr) = E0DB55DE8993
DHCP: Server Host Name (sname) =
DHCP: Boot File Name (file) =
DHCP: Magic Cookie = 99.130.83.99
DHCP: Option Field
DHCP: DHCP MESSAGE TYPE( 53) = (Length: 1) DHCP ACK
DHCP: Server Identifier( 54) = (Length: 4) 57.20.120.100
DHCP: Client Identifier( 61) = (Length: 0) ()
DHCP: SIP Server( 120) = (Length: 18) enc:0 lync2013.dlh.de (00086C79
6E633230313303646C6802646500)
DHCP: Host Name( 12) = (Length: 0)
DHCP: Vendor Identifier( 60) = (Length: 0)
DHCP: Param Req List( 55) = (Length: 0) 0 0
DHCP: Vendor Info( 43) = (Length: 130) ☺♀MS-UC-Client☻♣https♥☼lync201
3.dlh☻E6465040334343305252F4365727450726F762F4365727450726F766973696F6E696E67536
572766963652E737663] (010C4D532D55432D436C69656E7402056874747073030F6C796E633230
31332E646C6802453634363530343033333433343333303532353246343336353732373435303732
36463736324634333635373237343530373236463736363937333639364636453639364536373533
36353732373636393633363532453733373636335D)
DHCP: End of this option field
--End Packet--
Result: Failure = 1
I don't know what is that Failure = 1
Has anybody an idea???
Many thanks,
Tamás

Hi,
The DHCP options are good.
Finally, I was able to run the test-csphonebootsrap cmdlet, and I got the following error:
Result : Failure
Latency : 00:00:01.2179659
Error Message : No response received for getting root certificate chain.
Inner Exception:The remote server returned an unexpected respon
se: (417) Expectation Failed.
Inner Exception:The remote server returned an error: (417) Expe
ctation Failed.
Diagnosis :
Inner Diagnosis:Mime-Version : 1.0
X-Squid-Error : ERR_INVALID_REQ 0
Vary : Accept-Language
Content-Language : en
X-Cache : MISS from proxy.lsy.bud.dlh.de
X-Cache-Lookup : NONE from proxy.lsy.bud.dlh.de:3128
Connection : close
Content-Length : 3944
Content-Type : text/html
Date : Thu, 09 Jan 2014 13:24:47 GMT
Server : squid/3.1.10
Via : 1.0 proxy.lsy.bud.dlh.de (squid/3.1.10)
VERBOSE: Workflow
'Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow'
started.
Workflow
'Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow'
completed in '0.0001508' seconds.
Target server Fqdn or web service Url not provided. Will have to do DHCP
Registrar Discovery.
An exception 'No response received for getting root certificate chain.'
occurred during Workflow
Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow
execution.
Exception Call Stack: at
Microsoft.Rtc.Admin.Authentication.WebServicesHelper.GetRootCertChains()
at
Microsoft.Rtc.SyntheticTransactions.Activities.GetRootCertChainsActivity.Intern
alExecute(ActivityExecutionContext executionContext)
at
Microsoft.Rtc.SyntheticTransactions.Activities.SyntheticTransactionsActivity.Ex
ecute(ActivityExecutionContext executionContext)
at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity,
ActivityExecutionContext executionContext)
at
System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRunti
me workflowCoreRuntime)
at System.Workflow.Runtime.Scheduler.Run()
Server stack trace:
at
System.ServiceModel.Channels.HttpChannelUtilities.ValidateRequestReplyResponse(
HttpWebRequest request, HttpWebResponse response, HttpChannelFactory`1 factory,
WebException responseException, ChannelBinding channelBinding)
at
System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChanne
lRequest.WaitForReply(TimeSpan timeout)
at System.ServiceModel.Channels.RequestChannel.Request(Message message,
TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean
oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan
timeout)
at
System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessa
ge methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage
message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage
reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData&
msgData, Int32 type)
at RootCertChainService.GetRootCertChains(GetRootCertChainsRequest request)
at Microsoft.Rtc.Admin.Authentication.WebServicesHelper.GetRootCertChains()
'DHCPDiscover' activity started.
Starting DHCP registrar discovery...
Constructing a DHCP packet.
Adding DHCP option PARAMETER_REQUEST_LIST.
Successfully added DHCP option.
Adding DHCP option VENDOR_CLASS_IDENTIFIER.
Successfully added DHCP option.
Successfully constructed DHCP packet.
Trying to open an udp connection.
Remote IP : 255.255.255.255.
Local IP : 10.150.7.33.
\tCreating a new UDP client.
Udp connection successfully created.
Sending packet.
Remote IP : 255.255.255.255.
Remote Port : 67.
Packet sent successfully.
DHCP discovery message send. Waiting for DHCP servers to respond.
Data received successfully.
Remote IP : 57.20.120.85.
Remote Port : 67.
Response received for the DHCP Discovery message.
Constructing a DHCP packet from received raw data.
Extracting DHCP Options.
Successfully constructed DHCP packet.
Return value for DHCP option : SIP_SERVER.
Found registrar Fqdn : lyncpool.dlh.de.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.1.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.1 - MS-UC-Client.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.2.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.2 - https.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.3.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.3 - lyncpool.dlh.de.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.4.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.4 - 443.
Successfully extracted sub option value.
Searching for DHCP sub option : VENDOR_SPECIFIC_INFORMATION.5.
Return value for DHCP option : VENDOR_SPECIFIC_INFORMATION.
Found DHCP sub option : VENDOR_SPECIFIC_INFORMATION.5 -
/CertProv/CertProvisioningService.svc.
Successfully extracted sub option value.
Found web service Url :
https://lyncpool.dlh.de:443/CertProv/CertProvisioningService.svc.
Disconnecting.
DHCP registrar discovery activity completed successfully.
'DHCPDiscover' activity completed in '1.2179659' seconds.
'GetRootCertChains' activity started.
Trying to download a certificate chain from web service.
Web Service Url : http://lyncpool.dlh.de/CertProv/CertProvisioningService.svc
Could not download certificate chain from web service.
CHECK:
- Web service Url is valid and the web services are functional.
'UnRegister' activity started.
'UnRegister' activity completed in '3.78E-05' seconds.
VERBOSE: Workflow Instance ID 'a9313cfa-b82c-4bd2-9df6-81acca1bcbbc' completed.
VERBOSE: Workflow run-time (sec): 1.5083016.
It looks like the telephone are not able to download the root CA, but the webservice is available and reachable via port 80 and 443 too.... So, what is the reason? Why the Polycom CX600 is not able to download the root CA??

Relay IP Address

Similar Messages

Maybe you are looking for