Hi All,

I have followed half a dozen blogs and triple checked my settings but I still can't login to the mobility service through the mobile app (in this case it is a Windows phone).

I have Forefront TMG with 2 x NICs running on the perimeter network, I have set the web publishing rules and certs as per several blogs & have the correct public DNS entries externally - relevant update packs have also been installed.

When I navigate to lyncdisover.domain.com from IE I do get a response, the file prompted to download contains the following: (I don't know if this is correct or not).

{"AccessLocation":"External","Root":{"Links":[{"href":"https:\/\/lync.domain.com\/Autodiscover\/AutodiscoverService.svc\/root\/domain","token":"Domain"},{"href":"https:\/\/lync.domain.com\/Autodiscover\/AutodiscoverService.svc\/root\/user","token":"User"}]}}

However, when I try and log on with a phone I receive the error:

Can't connect to the server. It might be unavailable. Also please check your network connection, sign-in address, and server addresses

The log from the phone is below (sorry for the volume).

Thanks for your help - can't wait to move on from this job and do something else!!

K

****************************************************

2012-10-26 09:51:07.269+1 : Info : 481167826 : App : Launching 4.1.8092.0
2012-10-26 09:51:07.319+1 : Info : 481167826 : PhotoManager : StartPhotoDownloads()
2012-10-26 09:51:07.320+1 : Info : 481167826 : PresenceSubscriptionManager : Subscription context will be renewed at 0001-01-01 00:00:00Z and expires at 0001-01-01 00:00:00Z.
2012-10-26 09:51:07.352+1 : Info : 481167826 : InternalExternalSelector : Configuring Transport to use EXTERNAL URLs
2012-10-26 09:51:07.368+1 : Info : 481167826 : PushNotificationChannel : Syncing actual=Closed to desiredOpen=False
2012-10-26 09:51:07.376+1 : Info : 481167826 : App : Launching took 500 ms
2012-10-26 09:51:08.367+1 : Info : 481167826 : MainPage : QueryString Value
2012-10-26 09:51:11.438+1 : Info : 481167826 : NavigationManager : Navigating to: /UI/Pages/About.xaml
2012-10-26 09:51:15.688+1 : Info : 481167826 : App : Deactivating
2012-10-26 09:51:16.019+1 : Info : 481167826 : App : Deactivating took 330 ms
2012-10-26 09:51:21.679+1 : Info : 481167826 : App : Activating 4.1.8092.0
2012-10-26 09:51:21.680+1 : Info : 481167826 : InternalExternalSelector : Configuring Transport to use EXTERNAL URLs
2012-10-26 09:51:21.681+1 : Info : 481167826 : PushNotificationChannel : Syncing actual=Closed to desiredOpen=False
2012-10-26 09:51:21.683+1 : Info : 481167826 : App : Activating took 39 ms
2012-10-26 09:51:22.694+1 : Info : 481167826 : MainPage : QueryString Value
2012-10-26 09:51:24.406+1 : Info : 481167826 : LogonSession : UI invoked SignIn
2012-10-26 09:51:24.411+1 : Info : 481167826 : CredentialManager : Got a new user credential from app layer.
2012-10-26 09:51:24.413+1 : Info : 481167826 : TrustManager : Adding domain.com to trusted domain list for Autodiscovery.
2012-10-26 09:51:24.416+1 : Info : 481167826 : DiscoverySession : Uri for request IntDisc_https is https://lyncdiscoverinternal.domain.com/?sipuri=firstname.lastname@domain.com.
2012-10-26 09:51:24.418+1 : Info : 481167826 : DiscoverySession : Uri for request IntDisc_http is http://lyncdiscoverinternal.domain.com/?sipuri=firstname.lastname@domain.com.
2012-10-26 09:51:24.479+1 : Info : 481167826 : LogonSession : SignInState: SigningIn
2012-10-26 09:51:24.482+1 : Info : 481167826 : PresenceSubscriptionManager : HandleLogonSessionPropertyChange(SigningIn)
2012-10-26 09:51:24.483+1 : Info : 481167826 : McxDataSynchronizer : Signed out
2012-10-26 09:51:24.515+1 : Info : 481167826 : PresenceSubscriptionManager : HandleLogonSessionPropertyChange(SigningIn)
2012-10-26 09:51:24.515+1 : Info : 481167826 : McxDataSynchronizer : Signed out
2012-10-26 09:51:24.515+1 : Info : 481167826 : LogonSession : New LogonSession internal state = DiscoveringServer
2012-10-26 09:51:26.167+1 : Warning : 480971158 : HttpRequestPump : Got a WebException while reading the response for IntDisc_http.
2012-10-26 09:51:26.171+1 : Error : 480971158 : HttpRequestPump : Got a failure response to request IntDisc_http. Status: UnknownError. Code: 404.
2012-10-26 09:51:26.175+1 : Verbose : 480971158 : HttpRequestPump : Error status description for request IntDisc_http is "Not Found".
2012-10-26 09:51:26.176+1 : Verbose : 480971158 : HttpRequestPump : Error header collection for request IntDisc_http is: Date="Fri, 26 Oct 2012 08:52:47 GMT"; Server="Apache"; Content-Length="38"; Content-Type="text/html"; Connection="keep-alive";
2012-10-26 09:51:26.179+1 : Error : 480971158 : HttpRequestPump : Calling back IntDisc_http with error HttpInvalidServerUrlError [Error, Transport, TransportFramework].
2012-10-26 09:51:26.199+1 : Info : 481167826 : ConfigurationResolver : A discover request has failed. Waiting for parallel request result.
2012-10-26 09:51:27.236+1 : Warning : 480971158 : HttpRequestPump : Got a WebException while reading the response for IntDisc_https.
2012-10-26 09:51:27.236+1 : Error : 480971158 : HttpRequestPump : Request IntDisc_https failed due to an unidentified network error.
2012-10-26 09:51:27.236+1 : Error : 480971158 : HttpRequestPump : Calling back IntDisc_https with error ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:27.241+1 : Info : 481167826 : ConfigurationResolver : Internal autodiscovery requests failed. Trying external.
2012-10-26 09:51:27.241+1 : Info : 481167826 : DiscoverySession : Uri for request ExtDisc_https is https://lyncdiscover.domain.com/?sipuri=firstname.lastname@domain.com.
2012-10-26 09:51:27.241+1 : Info : 481167826 : DiscoverySession : Uri for request ExtDisc_http is http://lyncdiscover.domain.com/?sipuri=firstname.lastname@domain.com.
2012-10-26 09:51:27.614+1 : Warning : 480971158 : HttpRequestPump : Got a WebException while reading the response for ExtDisc_http.
2012-10-26 09:51:27.614+1 : Error : 480971158 : HttpRequestPump : Got a failure response to request ExtDisc_http. Status: UnknownError. Code: 403.
2012-10-26 09:51:27.614+1 : Verbose : 480971158 : HttpRequestPump : Error status description for request ExtDisc_http is "Forbidden".
2012-10-26 09:51:27.615+1 : Verbose : 480971158 : HttpRequestPump : Error header collection for request ExtDisc_http is: Content-Length="1864"; Pragma="no-cache"; Cache-Control="no-cache"; Content-Type="text/html"; Connection="keep-alive";
2012-10-26 09:51:27.619+1 : Error : 480971158 : HttpRequestPump : Calling back ExtDisc_http with error HttpClientForbiddenError [Error, Transport, TransportFramework].
2012-10-26 09:51:27.630+1 : Info : 481167826 : ConfigurationResolver : A discover request has failed. Waiting for parallel request result.
2012-10-26 09:51:28.090+1 : Info : 480971158 : HttpRequestPump : Completed request ExtDisc_https.
2012-10-26 09:51:28.103+1 : Info : 481167826 : ConfigurationResolver : Redirect to https://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user from secure link https://lyncdiscover.domain.com/?sipuri=firstname.lastname@domain.com does not require a trust decision.
2012-10-26 09:51:28.103+1 : Info : 481167826 : ConfigurationResolver : Redirecting discovery query for firstname.lastname@domain.com to https://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user.
2012-10-26 09:51:28.104+1 : Info : 481167826 : ConfigurationResolver : Sending authenticated discovery request for firstname.lastname@domain.com to https://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user.
2012-10-26 09:51:28.107+1 : Verbose : 481167826 : HttpRequestPump : Request AuthDisc to https://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user requires metadata.
2012-10-26 09:51:28.110+1 : Verbose : 481167826 : MetadataManager : Got a resolve request for https://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user.
2012-10-26 09:51:28.778+1 : Warning : 480971158 : HttpRequestPump : Got a WebException while reading the response for UnauthGethttps://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user.
2012-10-26 09:51:28.779+1 : Error : 480971158 : MetadataManager : Unauthenticated get did not receive a web ticket issuer header.
2012-10-26 09:51:28.779+1 : Error : 480971158 : HttpRequestPump : Request UnauthGethttps://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user failed due to an unidentified network error.
2012-10-26 09:51:28.779+1 : Error : 480971158 : HttpRequestPump : Calling back UnauthGethttps://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user with error ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:28.780+1 : Error : 480971158 : MetadataManager : Web request to resolve failed. Error: ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:28.784+1 : Error : 480971158 : HttpRequestPump : Failed to resolve metadata for AuthDisc. Status=ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:28.784+1 : Error : 480971158 : HttpRequestPump : Calling back AuthDisc with error ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:28.796+1 : Info : 481167826 : RequestRetryQueue : AuthDisc ConnectionError [Error, Transport, TransportFramework] retry=True
2012-10-26 09:51:28.797+1 : Verbose : 481167826 : HttpRequestPump : Request AuthDisc to https://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user requires metadata.
2012-10-26 09:51:28.797+1 : Verbose : 481167826 : MetadataManager : Got a resolve request for https://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user.
2012-10-26 09:51:29.093+1 : Warning : 480971158 : HttpRequestPump : Got a WebException while reading the response for UnauthGethttps://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user.
2012-10-26 09:51:29.093+1 : Error : 480971158 : MetadataManager : Unauthenticated get did not receive a web ticket issuer header.
2012-10-26 09:51:29.094+1 : Error : 480971158 : HttpRequestPump : Request UnauthGethttps://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user failed due to an unidentified network error.
2012-10-26 09:51:29.094+1 : Error : 480971158 : HttpRequestPump : Calling back UnauthGethttps://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user with error ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:29.094+1 : Error : 480971158 : MetadataManager : Web request to resolve failed. Error: ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:29.095+1 : Error : 480971158 : HttpRequestPump : Failed to resolve metadata for AuthDisc. Status=ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:29.095+1 : Error : 480971158 : HttpRequestPump : Calling back AuthDisc with error ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:29.100+1 : Info : 481167826 : RequestRetryQueue : AuthDisc ConnectionError [Error, Transport, TransportFramework] retry=True
2012-10-26 09:51:29.101+1 : Verbose : 481167826 : HttpRequestPump : Request AuthDisc to https://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user requires metadata.
2012-10-26 09:51:29.101+1 : Verbose : 481167826 : MetadataManager : Got a resolve request for https://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user.
2012-10-26 09:51:29.383+1 : Warning : 480971158 : HttpRequestPump : Got a WebException while reading the response for UnauthGethttps://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user.
2012-10-26 09:51:29.384+1 : Error : 480971158 : MetadataManager : Unauthenticated get did not receive a web ticket issuer header.
2012-10-26 09:51:29.384+1 : Error : 480971158 : HttpRequestPump : Request UnauthGethttps://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user failed due to an unidentified network error.
2012-10-26 09:51:29.384+1 : Error : 480971158 : HttpRequestPump : Calling back UnauthGethttps://lync.domain.com/Autodiscover/AutodiscoverService.svc/root/user with error ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:29.384+1 : Error : 480971158 : MetadataManager : Web request to resolve failed. Error: ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:29.389+1 : Error : 480971158 : HttpRequestPump : Failed to resolve metadata for AuthDisc. Status=ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:29.389+1 : Error : 480971158 : HttpRequestPump : Calling back AuthDisc with error ConnectionError [Error, Transport, TransportFramework].
2012-10-26 09:51:29.406+1 : Info : 481167826 : InternalExternalSelector : Checking whether to switch from EXTERNAL because of ConnectionError [Error, Transport, TransportFramework]
2012-10-26 09:51:29.407+1 : Info : 481167826 : InternalExternalSelector : Not signed in
2012-10-26 09:51:29.424+1 : Error : 481167826 : ConfigurationResolver : Autodiscovery for firstname.lastname@domain.com failed with status DiscoveryFailedPastRoot [Error, Application, Discovery].
2012-10-26 09:51:29.440+1 : Info : 481167826 : LogonSession : SignInState: SignedOut
2012-10-26 09:51:29.441+1 : Info : 481167826 : ConversationManager : LogonSession signed in or out
2012-10-26 09:51:29.441+1 : Info : 481167826 : PresenceSubscriptionManager : HandleLogonSessionPropertyChange(SignedOut)
2012-10-26 09:51:29.441+1 : Info : 481167826 : McxDataSynchronizer : Signed out
2012-10-26 09:51:29.443+1 : Info : 481167826 : ConversationManager : LogonSession signed in or out
2012-10-26 09:51:29.443+1 : Info : 481167826 : PresenceSubscriptionManager : HandleLogonSessionPropertyChange(SignedOut)
2012-10-26 09:51:29.444+1 : Info : 481167826 : McxDataSynchronizer : Signed out
2012-10-26 09:51:29.444+1 : Info : 481167826 : LogonSession : New LogonSession internal state = SignedOut
2012-10-26 09:51:29.445+1 : Info : 481167826 : LogonSession : Doing UI callback with DiscoveryFailedPastRoot [Error, Application, Discovery]
2012-10-26 09:51:29.513+1 : Error : 481167826 : AppLayerHelper : Can't connect to the server. It might be unavailable. Also please check your network connection, sign-in address, and server addresses.
DiscoveryFailedPastRoot [Error, Application, Discovery]
2012-10-26 09:51:30.928+1 : Info : 481167826 : AppLayerHelper : SignIn completed with DiscoveryFailedPastRoot [Error, Application, Discovery]
2012-10-26 09:51:33.137+1 : Info : 481167826 : NavigationManager : Navigating to: /UI/Pages/About.xaml
2012-10-26 09:51:35.896+1 : Info : 481167826 : App : Deactivating
2012-10-26 09:51:37.588+1 : Info : 481167826 : App : Deactivating took 1691 ms
2012-10-26 09:51:44.164+1 : Info : 481167826 : App : Activating 4.1.8092.0
2012-10-26 09:51:44.165+1 : Info : 481167826 : InternalExternalSelector : Configuring Transport to use EXTERNAL URLs
2012-10-26 09:51:44.166+1 : Info : 481167826 : PushNotificationChannel : Syncing actual=Closed to desiredOpen=False
2012-10-26 09:51:44.167+1 : Info : 481167826 : App : Activating took 25 ms

*************************************************************

Hi,

Can you try this troubleshooting steps http://blogs.technet.com/b/nexthop/archive/2012/02/21/troubleshooting-external-lync-mobility-connectivity-issues-step-by-step.aspx

Regards,

Ahmed

Hi Thanks for your reply, there are a couple of things I have noted that could be the cause:

1) In Step 2 of the guide I do not have the "Override FQDN" option for the internal web services URL.

2) Step 7, where the file shouild contain:

"AccessLocation":"External","Domain":{"Links":[{"href":"https:\/\/lyncexternal.contoso.com\/Autodiscover\/AutodiscoverService.svc\/root","token":"External\/Autodiscover"},{"href":"https:\/\/lyncexternal.contoso.com\/Reach\/sip.svc","token":"External\/AuthBroker"},{"href":"https:\/\/lyncexternal.contoso.com\/Mcx\/McxService.svc","token":"External\/Mcx"}],"SipClientExternalAccess":{"fqdn":"edge.contoso.com","port":"5061"},"SipClientInternalAccess":null,"SipServerExternalAccess":{"fqdn":"edge.contoso.com","port":"5061"},"SipServerInternalAccess":null}}

mine contains a different port of 443 as below:

{"AccessLocation":"External","Domain":{"Links":[{"href":"https:\/\/lync.domain.com\/Autodiscover\/AutodiscoverService.svc\/root","token":"External\/Autodiscover"},{"href":"https:\/\/lync.domain.com\/Reach\/sip.svc","token":"External\/AuthBroker"},{"href":"https:\/\/lync.domain.com\/Mcx\/McxService.svc","token":"External\/Mcx"}],"SipClientExternalAccess":{"fqdn":"sip.domain.com","port":"443"},"SipClientInternalAccess":null,"SipServerExternalAccess":{"fqdn":"sip.domain.com","port":"5061"},"SipServerInternalAccess":null}}

3) Step 7 - When I navigate to https://lyncexternal.domain.com/mcx/mcxservice.svc/mex I get a page cannot be displayed.

Does this point to anything obvious?

Thanks

K

In your log, I see something about lincdiscoverinternal.  Are you trying to connect using internal WiFi?

Try your mobile provider instead.

Thank you.

Hi Igor, thanks for your reply.

I have tried both internal wi-fi and over a 3G connection.

I do get further on internal wi-fi as it gets to a prompt for the autodiscover URL with the FQDN of my front end server (https://frontendfqdn.domain.local/Autodiscover/AutodiscoverService.svc/root? sipuri=my.name@domain.com) It says tap ok to always allow this connection but then it just gets the cannot connect message as before.

When I am over 3G I don't get any message except that I cannot connect.

Cheers

K

Can you run Lync Log Tool and see if there are any messages about this connection?

Internal WiFi will now work if you do not have public certificate installed on your FE Lync or Director Servers.

Please test it while you use 3G connection.

Thank you.

Hi,

In Step 6, is lync.domain.com your the external web services URL for the Front End Server? If it is the internal web services URL, the web publishing rule is incorrect. Please try to check the the port of bridging connection for Lync Server external web services.

As my understanding, it is normal that the first number in show 443 instead 5061 if you use 443 as your access edge port of edge external interface.

In step 7, have you tried to run Get-CsWebServicesConfiguration |fl ?

Please verify the value for the UseWindowsAuth parameter is set to Negotiate.

In addition, you can try to manual input the internal and external discovery address to sign in for testing.

https://<ExtPoolFQDN>/Autodiscover/autodiscoverservice.svc/Root for external access

https://<IntPoolFQDN>/AutoDiscover/AutoDiscover.svc/Root for internal access

Hi Kent, thanks for your reply.

In my topology under webservices, lync.domain.com is my EXTERNAL URL, it is listending on ports 8080 & 4443.  There is no URL under the internal web services but is listening on ports 80 & 443.

When I run the Get-CsWebservicesconfiguration | fl the "UseWindowsAuth" field is indded set to "Negotiate".

https://lync.domain.com/Autodiscover/autodiscoverservice.svc/Root times out

https://lyncdiscover.domain.comAutodiscover/autodiscoverservice.svc/Root downloads the expected file (example in my previous post)

https://serverfrontend.domain.localAutoDiscover/AutoDiscoverservice.svc/Root downloads the expected file.

Does this this point to anything obvious?

Thanks for your help,

K

In Step 2 of the guide I do not have the "Override FQDN" option for the internal web services URL.

Is it because if Lync Standard Edition Server or Lync Mobility not supported in Standard Edition.