We are having issues connecting our external clients to mobility, internally everything is working fine but externally we are getting a 401 The Web Ticket is invalid error when trying to sign in (found via the client logs).

Ive been through the troubleshooting guide found here: http://blogs.technet.com/b/nexthop/archive/2012/02/21/troubleshooting-external-lync-mobility-connectivity-issues-step-by-step.aspx and everything tests okay with the exception of step 6, we are not getting URLs when using the HTTP autodiscover, all 4 are returning as null Ive checked the HTTPS autodiscover file and everything looks alright in that file.

I also decided to check the http autodiscover from inside our network and the same behaviour is found there, all the URLs are blank, although as I mentioned internally clients are working fine.

Hi,

I've just deployed Lync Mobile successfully after facing some issues too. Previously i have problem with blank URL, but it is because i haven't installed the update for Lync Server. The issue has resolved after i apply the July update.

On public DNS, have you created A record for both lyncdiscover.domain.com and your external web address? Both should be included on SAN of proxy certificate as well.

Are you using TMG to publish? Here some references if you would like to double cross check your published web site.

http://social.technet.microsoft.com/wiki/contents/articles/9807.how-to-configure-forefront-tmg-2010-as-reverse-proxy-for-lync-server-2010.aspx

If you are using TMG/ISA, maybe you can filter out the incoming request to your Lync Front End, see what the details information you can get.

Hi, thanks for the reply.

We have already installed the July Update and still no joy.  We are publishing via TMG and we can see the traffic being forwarded to the Lync front end server, but then we are receiving the above mentioned 401 error from the lync server.

Hi,

Please use the Lync Management Shell to run the following cmdlet to verify the value for the UseWindowsAuth parameter is set to Negotiate.

Get-CsWebServicesConfiguration |fl

Please double check your reverse proxy configuration:

http://technet.microsoft.com/en-us/library/hh690011.aspx

Please run Remote Connectivity Analyzer and choose Lync Autodiscover web service remote connectivity test:

https://www.testexchangeconnectivity.com/

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

If the issue persists, please paste the entire client log for further troubleshooting.

If you have set the authentication web service configuration to negotiate and set the exposed URL to external, that should do.

I assume you didn't touch anything on IIS, by default the authentication allowed by external UCWA is anonymous. I ever got 401 error but it was for UCWA service, not webticket.

Then, on my publishing, i changed All Authenticated Users with All Users under Tab User, that solved my issue. I don't know whether it will work for your case, but i guess nothing to lose to try.

get-CSWebServicesConfiguration shows negotiate

We have definitely configured our reverse proxy as per instructions.

Test Exchange connectivity returns a success.

We will post the client logs in a bit.

Client log part 1

Aug 30, 2013 10:39:31 AM VERBOSE ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.options.ServerSettingActivity

Aug 30, 2013 10:39:31 AM VERBOSE ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.options.ServerSettingActivity

Aug 30, 2013 10:39:32 AM VERBOSE ActivityMonitor: Activity S"mailto:xxx.xxx@sedgemoor.gov.uk">xxx.xxx@sedgemoor.gov.uk) domain (XXXX) username (XXXXXX) password.empty() (0) compatibleServiceIds(1)

Aug 30, 2013 10:39:35 AM INFO APPLICATION:Timer cancelled. OnResume = 0

Aug 30, 2013 10:39:35 AM INFO APPLICATION:Discover UCWA urls for sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:35 AM INFO APPLICATION:Extracted sedgemoor.gov.uk from sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:35 AM INFO APPLICATION:Starting Lync Discovery with urls http://lyncdiscoverinternal.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk and http://lyncdiscover.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:35 AM INFO APPLICATION:Starting CUrlRedirectAndTrustResolver with url = https://lyncdiscoverinternal.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk, maxHops = 10

Aug 30, 2013 10:39:35 AM INFO APPLICATION:CUrlRedirectAndTrustResolver::processUrl called with url = https://lyncdiscoverinternal.sedgemoor.gov.uk/, hopCount = 0, maxHops = 10

Aug 30, 2013 10:39:35 AM INFO APPLICATION:UrlRedirectAndTrustResolver complete with url = https://lyncdiscoverinternal.sedgemoor.gov.uk/, Hops = 0, status = S0-0-0

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (4)

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:Credential information: credType (1) signInName () domain () username () password.empty() (1) compatibleServiceIds(0)

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:Added Request(UcwaAutoDiscoveryRequest) to Request Processor queue

Aug 30, 2013 10:39:35 AM INFO APPLICATION:Submitting new req. <unknown>

Aug 30, 2013 10:39:35 AM INFO APPLICATION:Successfully started the GetUserUrlOperation request for https://lyncdiscoverinternal.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:35 AM INFO APPLICATION:Starting CUrlRedirectAndTrustResolver with url = http://lyncdiscoverinternal.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk, maxHops = 10

Aug 30, 2013 10:39:35 AM INFO APPLICATION:CUrlRedirectAndTrustResolver::processUrl called with url = http://lyncdiscoverinternal.sedgemoor.gov.uk/, hopCount = 0, maxHops = 10

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (4)

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:Credential information: credType (1) signInName () domain () username () password.empty() (1) compatibleServiceIds(0)

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:Added Request(UcwaAutoDiscoveryRequest) to Request Processor queue

Aug 30, 2013 10:39:35 AM INFO APPLICATION:Submitting new req. <unknown>

Aug 30, 2013 10:39:35 AM INFO APPLICATION:Successfully started the GetUserUrlOperation request for http://lyncdiscoverinternal.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:35 AM INFO APPLICATION:CLogonSession::setNewActualState() state=1

Aug 30, 2013 10:39:35 AM INFO UcClientStateManager: New UI State: ActualState = IsSigningIn DesiredState = BeSignedOut  DataAvailable = true

Aug 30, 2013 10:39:35 AM INFO APPLICATION:LogonSession::signIn() succeeded

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:Sent Request(UcwaAutoDiscoveryRequest) to Request Processor

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:<SentRequest>

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:To:https://lyncdiscoverinternal.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:HttpHeader:Accept application/vnd.microsoft.rtc.autodiscover+xml;v=1

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:</SentRequest>

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:Sending request(UcwaAutoDiscoveryRequest) to server type = 0

Aug 30, 2013 10:39:35 AM VERBOSE HttpConnection: post request: https://lyncdiscoverinternal.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:35 AM INFO TRANSPORT:Sent Request(UcwaAutoDiscoveryRequest) to Request Processor

Aug 30, 2013 10:39:35 AM VERBOSE HttpConnection: send request: https://lyncdiscoverinternal.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:<SentRequest>

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:To:http://lyncdiscoverinternal.sedgemoor.gov.uk/

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:HttpHeader:Accept application/vnd.microsoft.rtc.autodiscover+xml;v=1

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:</SentRequest>

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Sending request(UcwaAutoDiscoveryRequest) to server type = 0

Aug 30, 2013 10:39:36 AM VERBOSE HttpConnection: post request: http://lyncdiscoverinternal.sedgemoor.gov.uk/

Aug 30, 2013 10:39:36 AM VERBOSE HttpConnection: send request: http://lyncdiscoverinternal.sedgemoor.gov.uk/

Aug 30, 2013 10:39:36 AM INFO UcClientStateManager: New UI State: ActualState = IsSigningIn DesiredState = BeSignedIn  DataAvailable = true

Aug 30, 2013 10:39:36 AM VERBOSE ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.options.SigningInActivity

Aug 30, 2013 10:39:36 AM VERBOSE ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.options.SigningInActivity

Aug 30, 2013 10:39:36 AM VERBOSE ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.RootTabActivity

Aug 30, 2013 10:39:36 AM VERBOSE ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.status.MyStatusActivity

Aug 30, 2013 10:39:36 AM VERBOSE ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.status.MyStatusActivity

Aug 30, 2013 10:39:36 AM ERROR HttpConnection:

Aug 30, 2013 10:39:36 AM ERROR TRANSPORT:CHttpConnection exception: java.net.UnknownHostException

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Received response of request(UcwaAutoDiscoveryRequest) with status = 0x22020001

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Sending event to main thread for request(0xbfbef0)

Aug 30, 2013 10:39:36 AM VERBOSE ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.RootTabActivity

Aug 30, 2013 10:39:36 AM ERROR HttpConnection:

Aug 30, 2013 10:39:36 AM ERROR TRANSPORT:CHttpConnection exception: java.net.UnknownHostException

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Received response of request(UcwaAutoDiscoveryRequest) with status = 0x22020001

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Sending event to main thread for request(0xc8e1e8)

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Notifying response of request(UcwaAutoDiscoveryRequest) with status = 0x22020001

Aug 30, 2013 10:39:36 AM INFO APPLICATION:Req. event received: responseErrorCode=E2-2-1

Aug 30, 2013 10:39:36 AM INFO APPLICATION:No more req. timing out

Aug 30, 2013 10:39:36 AM ERROR APPLICATION:Request failed.  Error - E2-2-1

Aug 30, 2013 10:39:36 AM INFO APPLICATION:UcwaAutoDiscoveryGetUserUrlOperation completed with url = https://lyncdiscoverinternal.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk, userUrl = , status = E2-2-1

Aug 30, 2013 10:39:36 AM INFO APPLICATION:Response received for req. <unknown>: E2-2-1 (RemoteNetworkTemporaryError); Done with req.; Stopping resend timer

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Notifying response of request(UcwaAutoDiscoveryRequest) with status = 0x22020001

Aug 30, 2013 10:39:36 AM INFO APPLICATION:Req. event received: responseErrorCode=E2-2-1

Aug 30, 2013 10:39:36 AM INFO APPLICATION:No more req. timing out

Aug 30, 2013 10:39:36 AM INFO APPLICATION:UrlRedirectAndTrustResolver complete with url = http://lyncdiscoverinternal.sedgemoor.gov.uk/, Hops = 1, status = E2-2-1

Aug 30, 2013 10:39:36 AM INFO APPLICATION:Response received for req. <unknown>: E2-2-1 (RemoteNetworkTemporaryError); Done with req.; Stopping resend timer

Aug 30, 2013 10:39:36 AM INFO APPLICATION:CUcwaAutoDiscoverGetUserUrlOperation::onEvent received.  Status = E2-2-1, url = http://lyncdiscoverinternal.sedgemoor.gov.uk/

Aug 30, 2013 10:39:36 AM INFO APPLICATION:UcwaAutoDiscoveryGetUserUrlOperation completed with url = http://lyncdiscoverinternal.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk, userUrl = , status = E2-2-1

Aug 30, 2013 10:39:36 AM INFO APPLICATION:AutoDiscovery: Falling back to probing external urls

Aug 30, 2013 10:39:36 AM INFO APPLICATION:Starting CUrlRedirectAndTrustResolver with url = https://lyncdiscover.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk, maxHops = 10

Aug 30, 2013 10:39:36 AM INFO APPLICATION:CUrlRedirectAndTrustResolver::processUrl called with url = https://lyncdiscover.sedgemoor.gov.uk/, hopCount = 0, maxHops = 10

Aug 30, 2013 10:39:36 AM INFO APPLICATION:UrlRedirectAndTrustResolver complete with url = https://lyncdiscover.sedgemoor.gov.uk/, Hops = 0, status = S0-0-0

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (4)

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Credential information: credType (1) signInName () domain () username () password.empty() (1) compatibleServiceIds(0)

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Added Request(UcwaAutoDiscoveryRequest) to Request Processor queue

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Sent Request(UcwaAutoDiscoveryRequest) to Request Processor

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:<SentRequest>

Aug 30, 2013 10:39:36 AM INFO APPLICATION:Submitting new req. <unknown>

Aug 30, 2013 10:39:36 AM INFO APPLICATION:Successfully started the GetUserUrlOperation request for https://lyncdiscover.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:36 AM INFO APPLICATION:Starting CUrlRedirectAndTrustResolver with url = http://lyncdiscover.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk, maxHops = 10

Aug 30, 2013 10:39:36 AM INFO APPLICATION:CUrlRedirectAndTrustResolver::processUrl called with url = http://lyncdiscover.sedgemoor.gov.uk/, hopCount = 0, maxHops = 10

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (4)

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:To:https://lyncdiscover.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Credential information: credType (1) signInName () domain () username () password.empty() (1) compatibleServiceIds(0)

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Added Request(UcwaAutoDiscoveryRequest) to Request Processor queue

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:HttpHeader:Accept application/vnd.microsoft.rtc.autodiscover+xml;v=1

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:</SentRequest>

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Sending request(UcwaAutoDiscoveryRequest) to server type = 0

Aug 30, 2013 10:39:36 AM INFO APPLICATION:Submitting new req. <unknown>

Aug 30, 2013 10:39:36 AM VERBOSE HttpConnection: post request: https://lyncdiscover.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:36 AM INFO APPLICATION:Successfully started the GetUserUrlOperation request for http://lyncdiscover.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Sent Request(UcwaAutoDiscoveryRequest) to Request Processor

Aug 30, 2013 10:39:36 AM VERBOSE HttpConnection: send request: https://lyncdiscover.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:<SentRequest>

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:To:http://lyncdiscover.sedgemoor.gov.uk/

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:HttpHeader:Accept application/vnd.microsoft.rtc.autodiscover+xml;v=1

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:</SentRequest>

Aug 30, 2013 10:39:36 AM INFO TRANSPORT:Sending request(UcwaAutoDiscoveryRequest) to server type = 0

Aug 30, 2013 10:39:36 AM VERBOSE HttpConnection: post request: http://lyncdiscover.sedgemoor.gov.uk/

Aug 30, 2013 10:39:36 AM VERBOSE HttpConnection: send request: http://lyncdiscover.sedgemoor.gov.uk/

Aug 30, 2013 10:39:36 AM VERBOSE ActivityMonitor: Activity Slt;ReceivedResponse>

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:Cache-Control no-cache

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:Connection Keep-Alive

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:Content-Length 431

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:Content-Type application/vnd.microsoft.rtc.autodiscover+xml;v=1

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:Date Fri, 30 Aug 2013 09:38:50 GMT

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:Expires -1

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:Pragma no-cache

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:Server Microsoft-IIS/7.5

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:StatusCode 200

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:X-AspNet-Version 2.0.50727

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:X-MS-Server-Fqdn XXXX

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:HttpHeader:X-Powered-By ASP.NET

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:<?xml version="1.0" encoding="utf-8"?><AutodiscoverResponse AccessLocation="External" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="<Root><Link">http://www.w3.org/2001/XMLSchema"><Root><Link token="Domain" href="<Link">https://web.sedgemoor.gov.uk/Autodiscover/AutodiscoverService.svc/root/domain"/><Link token="User" href="</Root></AutodiscoverResponse">https://web.sedgemoor.gov.uk/Autodiscover/AutodiscoverService.svc/root/user"/></Root></AutodiscoverResponse>

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:</ReceivedResponse>

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:location value is external

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:User url is https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Sending event to main thread for request(0xbbf6b8)

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Notifying response of request(UcwaAutoDiscoveryRequest) with status = 0x0

Aug 30, 2013 10:39:37 AM INFO APPLICATION:Response received

Aug 30, 2013 10:39:37 AM INFO APPLICATION:No more req. timing out

Aug 30, 2013 10:39:37 AM INFO APPLICATION:Received a root response

Aug 30, 2013 10:39:37 AM INFO APPLICATION:UcwaAutoDiscoveryGetUserUrlOperation completed with url = https://lyncdiscover.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk, userUrl = https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user, status = S0-0-0

Aug 30, 2013 10:39:37 AM INFO APPLICATION:Response received for req. <unknown>: S0-0-0 (Success); Done with req.; Stopping resend timer

Aug 30, 2013 10:39:37 AM INFO APPLICATION:Cancelling all requests

Aug 30, 2013 10:39:37 AM INFO APPLICATION:UrlRedirectAndTrustResolver complete with url = http://lyncdiscover.sedgemoor.gov.uk/, Hops = 1, status = W0-0-6

Aug 30, 2013 10:39:37 AM INFO APPLICATION:UcwaAutoDiscoveryGetUserUrlOperation completed with url = http://lyncdiscover.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk, userUrl = , status = W0-0-6

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (1)

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Credential information: credType (1) signInName (xxx.xxx@sedgemoor.gov.uk) domain (XXXX) username (XXXX) password.empty() (0) compatibleServiceIds(0)

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (4)

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Credential information: credType (1) signInName () domain () username () password.empty() (1) compatibleServiceIds(0)

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Received a request to get the meta data of type 0 for url https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Base service url constructed is https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Sending Unauthenticated get to get the web-ticket url

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (4)

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Credential information: credType (1) signInName () domain () username () password.empty() (1) compatibleServiceIds(0)

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Added Request(UnauthenticatedGetRequest) to Request Processor queue

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Waiting on Meta Data from https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user

Aug 30, 2013 10:39:37 AM INFO APPLICATION:Submitting new req. <unknown>

Aug 30, 2013 10:39:37 AM INFO APPLICATION:Submitting Authenticated AutoDiscovery request to https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user

Aug 30, 2013 10:39:37 AM INFO APPLICATION:Ignoring GetUserUrlOperation event as current state is 6

Aug 30, 2013 10:39:37 AM INFO APPLICATION:Request url was http://lyncdiscover.sedgemoor.gov.uk/?sipuri=sip:xxx.xxx@sedgemoor.gov.uk

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Sent Request(UnauthenticatedGetRequest) to Request Processor

Aug 30, 2013 10:39:37 AM INFO TRANSPORT:Sending request(UnauthenticatedGetRequest) to server type = 0

Aug 30, 2013 10:39:37 AM VERBOSE HttpConnection: post request: https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user

Aug 30, 2013 10:39:37 AM VERBOSE HttpConnection: send request: https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Received response of request(UnauthenticatedGetRequest) with status = 0x0

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:<ReceivedResponse>

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Cache-Control no-cache

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Connection Keep-Alive

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Content-Length 1293

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Content-Type text/html

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Date Fri, 30 Aug 2013 09:38:52 GMT

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Expires -1

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Pragma no-cache

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Server Microsoft-IIS/7.5

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:StatusCode 401

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:X-MS-Server-Fqdn XXXX

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:X-MS-WebTicketURL https://web.sedgemoor.gov.uk/WebTicket/WebTicketService.svc

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:X-Powered-By ASP.NET

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>

<title>401 - Unauthorized: Access is denied due to invalid credentials.</title>

<style type="text/css">

<!--

body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}

fieldset{padding:0 15px 10px 15px;}

h1{font-size:2.4em;margin:0;color:#FFF;}

h2{font-size:1.7em;margin:0;color:#CC0000;}

h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;}

#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;

background-color:#555555;}

#content{margin:0 0 0 2%;;}

.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;;}

-->

</style>

</head>

<body>

<div id="header"><h1>Server Error</h1></div>

<div id="content">

<div><fieldset>

  <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>

  <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>

</fieldset></div>

</div>

</body>

</html>

Client Log part 2

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:</ReceivedResponse>

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Sending event to main thread for request(0xdb6ac0)

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Received response for meta data request of type 120 with status 0

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Endpoint url constructed from unauth-get response is https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Base service url constructed from unauth-get-response is https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Added a binding based on the unauth-get response

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:MetaData retrieval for url https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user completed with status 0

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Received a request to get the meta data of type 0 for url https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Base service url constructed is https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Found a binding with AuthType 16

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (1)

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Credential information: credType (1) signInName (xxx.xxx@sedgemoor.gov.uk) domain (XXXX) username (XXXX) password.empty() (0) compatibleServiceIds(0)

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Request to get web ticket for https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Cached web-ticket found. Verifying details.

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Web Ticket has expired. ExpiryTime 1377801782 and Now 1377855878

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Deleting expired web-ticket

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Received request for a new token for https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (4)

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Credential information: credType (1) signInName () domain () username () password.empty() (1) compatibleServiceIds(0)

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Received a request to get the meta data of type 2 for url https://web.sedgemoor.gov.uk/webticket/webticketservice.svc

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Sending Mex request get the meta data for the endpoint

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (4)

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Credential information: credType (1) signInName () domain () username () password.empty() (1) compatibleServiceIds(0)

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Added Request(MetaDataRequest) to Request Processor queue

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Sent Request(MetaDataRequest) to Request Processor

Aug 30, 2013 10:39:38 AM VERBOSE HttpConnection: set body(POST)- length=487

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Sending request(MetaDataRequest) to server type = 1

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Waiting on Meta Data from https://web.sedgemoor.gov.uk/webticket/webticketservice.svc

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Waiting on the token

Aug 30, 2013 10:39:38 AM VERBOSE HttpConnection: post request: https://web.sedgemoor.gov.uk/webticket/webticketservice.svc/mex

Aug 30, 2013 10:39:38 AM VERBOSE HttpConnection: send request: https://web.sedgemoor.gov.uk/webticket/webticketservice.svc/mex

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:Received response of request(MetaDataRequest) with status = 0x0

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:MEX response received.

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:<ReceivedResponse>

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Cache-Control private

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Connection Keep-Alive

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Content-Length 18350

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Content-Type application/soap+xml; charset=utf-8

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Date Fri, 30 Aug 2013 09:38:52 GMT

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:Server Microsoft-IIS/7.5

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:StatusCode 200

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:X-AspNet-Version 2.0.50727

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:X-MS-Server-Fqdn XXXX

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:HttpHeader:X-Powered-By ASP.NET

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action s:mustUnderstand="1">http://schemas.xmlsoap.org/ws/2004/09/transfer/GetResponse</a:Action></s:Header><s:Body><Metadata xmlns="http://schemas.xmlsoap.org/ws/2004/09/mex" xmlns:wsx="<wsx:MetadataSection">http://schemas.xmlsoap.org/ws/2004/09/mex"><wsx:MetadataSection Dialect="http://schemas.xmlsoap.org/wsdl/" Identifier="http://tempuri.org/" xmlns=""><wsdl:definitions name="WebTicketService" targetNamespace="http://tempuri.org/" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:soap12="http://schemas.xmlsoap.org/wsdl/soap12/" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsap="http://schemas.xmlsoap.org/ws/2004/08/addressing/policy" xmlns:msc="http://schemas.microsoft.com/ws/2005/12/wsdl/contract" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsam="http://www.w3.org/2007/05/addressing/metadata" xmlns:wsaw="http://www.w3.org/2006/05/addressing/wsdl" xmlns:tns="http://tempuri.org/" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:wsa10="<wsp:Policy">http://www.w3.org/2005/08/addressing"><wsp:Policy wsu:Id="WebTicketServiceWinNegotiate_policy"><wsp:ExactlyOne><wsp:All><http:NegotiateAuthentication xmlns:http="<af:Binding">http://schemas.microsoft.com/ws/06/2004/policy/http"/><af:Binding xmlns:af="urn:component:Microsoft.Rtc.WebAuthentication.2010"/><sp:TransportBinding xmlns:sp="<wsp:Policy><sp:TransportToken><wsp:Policy><sp:HttpsToken">http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"><wsp:Policy><sp:TransportToken><wsp:Policy><sp:HttpsToken RequireClientCertificate="false"/></wsp:Policy></sp:TransportToken><sp:AlgorithmSuite><wsp:Policy><sp:Basic256/></wsp:Policy></sp:AlgorithmSuite><sp:Layout><wsp:Policy><sp:Strict/></wsp:Policy></sp:Layout></wsp:Policy></sp:TransportBinding></wsp:All></wsp:ExactlyOne></wsp:Policy><wsp:Policy wsu:Id="WebTicketServiceCert_policy"><wsp:ExactlyOne><wsp:All><af:Binding xmlns:af="urn:component:Microsoft.Rtc.WebAuthentication.2010"/><sp:TransportBinding xmlns:sp="<wsp:Policy><sp:TransportToken><wsp:Policy><sp:HttpsToken">http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"><wsp:Policy><sp:TransportToken><wsp:Policy><sp:HttpsToken RequireClientCertificate="false"/></wsp:Policy></sp:TransportToken><sp:AlgorithmSuite><wsp:Policy><sp:Basic256/></wsp:Policy></sp:AlgorithmSuite><sp:Layout><wsp:Policy><sp:Strict/></wsp:Policy></sp:Layout><sp:IncludeTimestamp/></wsp:Policy></sp:TransportBinding><sp:EndorsingSupportingTokens xmlns:sp="<wsp:Policy><sp:X509Token">http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"><wsp:Policy><sp:X509Token sp:IncludeToken="<wsp:Policy><sp:RequireThumbprintReference/><sp:WssX509V3Token10/></wsp:Policy></sp:X509Token><sp:SignedParts><sp:Header">http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient"><wsp:Policy><sp:RequireThumbprintReference/><sp:WssX509V3Token10/></wsp:Policy></sp:X509Token><sp:SignedParts><sp:Header Name="To" Namespace="</sp:SignedParts></wsp:Policy></sp:EndorsingSupportingTokens><sp:Wss11">http://www.w3.org/2005/08/addressing"/></sp:SignedParts></wsp:Policy></sp:EndorsingSupportingTokens><sp:Wss11 xmlns:sp="<wsp:Policy><sp:MustSupportRefKeyIdentifier/><sp:MustSupportRefIssuerSerial/><sp:MustSupportRefThumbprint/><sp:MustSupportRefEncryptedKey/></wsp:Policy></sp:Wss11><sp:Trust10">http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"><wsp:Policy><sp:MustSupportRefKeyIdentifier/><sp:MustSupportRefIssuerSerial/><sp:MustSupportRefThumbprint/><sp:MustSupportRefEncryptedKey/></wsp:Policy></sp:Wss11><sp:Trust10 xmlns:sp="<wsp:Policy><sp:MustSupportIssuedTokens/><sp:RequireClientEntropy/><sp:RequireServerEntropy/></wsp:Policy></sp:Trust10><wsaw:UsingAddressing/></wsp:All></wsp:ExactlyOne></wsp:Policy><wsp:Policy">http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"><wsp:Policy><sp:MustSupportIssuedTokens/><sp:RequireClientEntropy/><sp:RequireServerEntropy/></wsp:Policy></sp:Trust10><wsaw:UsingAddressing/></wsp:All></wsp:ExactlyOne></wsp:Policy><wsp:Policy wsu:Id="WebTicketServiceMachineCert_policy"><wsp:ExactlyOne><wsp:All><sp:TransportBinding xmlns:sp="<wsp:Policy><sp:TransportToken><wsp:Policy><sp:HttpsToken">http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"><wsp:Policy><sp:TransportToken><wsp:Policy><sp:HttpsToken RequireClientCertificate="false"/></wsp:Policy></sp:TransportToken><sp:AlgorithmSuite><wsp:Policy><sp:Basic256/></wsp:Policy></sp:AlgorithmSuite><sp:Layout><wsp:Policy><sp:Strict/></wsp:Policy></sp:Layout><sp:IncludeTimestamp/></wsp:Policy></sp:TransportBinding><sp:EndorsingSupportingTokens xmlns:sp="http://schemas.xmlsoap.org

Aug 30, 2013 10:39:38 AM INFO TRANSPORT:</ReceivedResponse>

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Sending event to main thread for request(0xdfc720)

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Received response for meta data request of type 80 with status 0

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:MetaData retrieval for url https://web.sedgemoor.gov.uk/webticket/webticketservice.svc completed with status 0

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Received a request to get the meta data of type 2 for url https://web.sedgemoor.gov.uk/webticket/webticketservice.svc

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Found a binding with AuthType 32

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (1)

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Credential information: credType (1) signInName (xxx.xxx@sedgemoor.gov.uk) domain (XXXX) username (XXXX) password.empty() (0) compatibleServiceIds(0)

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Added Request(WebTicketRequest) to Request Processor queue

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Sent Request(WebTicketRequest) to Request Processor

Aug 30, 2013 10:39:39 AM VERBOSE HttpConnection: set body(POST)- length=1448

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Sending request(WebTicketRequest) to server type = 1

Aug 30, 2013 10:39:39 AM VERBOSE HttpConnection: post request: https://web.sedgemoor.gov.uk/webticket/webticketservice.svc/auth

Aug 30, 2013 10:39:39 AM VERBOSE HttpConnection: send request: https://web.sedgemoor.gov.uk/webticket/webticketservice.svc/auth

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Received response of request(WebTicketRequest) with status = 0x0

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Decoding the WebTicket Response

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:WebTicket RSTR received.

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:<ReceivedResponse>

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Cache-Control private

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Connection Keep-Alive

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Content-Length 5380

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Content-Type text/xml; charset=utf-8

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Date Fri, 30 Aug 2013 09:38:53 GMT

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Server Microsoft-IIS/7.5

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:StatusCode 200

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:X-AspNet-Version 2.0.50727

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:X-MS-Server-Fqdn XXXX

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:X-Powered-By ASP.NET

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:<s:Envelope xmlns:s="<RequestSecurityTokenResponseCollection">http://schemas.xmlsoap.org/soap/envelope/"><s:Body><RequestSecurityTokenResponseCollection xmlns="http://docs.oasis-open.org/ws-sx/ws-trust/200512" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="<RequestSecurityTokenResponse">http://www.w3.org/2001/XMLSchema"><RequestSecurityTokenResponse Context="daa442cc-eedc-465e-8ee4-fafd136500e9"><TokenType>http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1</TokenType><RequestedSecurityToken><saml:Assertion MajorVersion="1" MinorVersion="1" AssertionID="SamlSecurityToken-103ba1dd-8509-4f5f-a0ce-fc661c4c560c" Issuer="https://xxxx/webticket/webticketservice.svc" IssueInstant="2013-08-30T09:38:53.505Z" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"><saml:Conditions NotBefore="2013-08-30T09:38:53.505Z" NotOnOrAfter="2013-08-30T18:05:39.505Z"><saml:AudienceRestrictionCondition><saml:Audience>https://web.sedgemoor.gov.uk/</saml:Audience></saml:AudienceRestrictionCondition></saml:Conditions><saml:AuthenticationStatement AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:unspecified" AuthenticationInstant="2013-08-30T09:38:53.505Z"><saml:Subject><saml:NameIdentifier Format="sip:xxx.xxx@sedgemoor.gov.uk</saml:NameIdentifier><saml:SubjectConfirmation><saml:ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:holder-of-key</saml:ConfirmationMethod><KeyInfo">http://schemas.xmlsoap.org/ws/2005/05/identity/claims/uri">sip:xxx.xxx@sedgemoor.gov.uk</saml:NameIdentifier><saml:SubjectConfirmation><saml:ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:holder-of-key</saml:ConfirmationMethod><KeyInfo xmlns="<e:EncryptedKey">http://www.w3.org/2000/09/xmldsig#"><e:EncryptedKey xmlns:e="<e:EncryptionMethod">http://www.w3.org/2001/04/xmlenc#"><e:EncryptionMethod Algorithm="</e:EncryptionMethod><KeyInfo><KeyName>XXXX">http://www.w3.org/2001/04/xmlenc#kw-aes256"></e:EncryptionMethod><KeyInfo><KeyName>XXXX :8d0736e0f540000</KeyName></KeyInfo><e:CipherData><e:CipherValue>XXXXXXXXXX</e:CipherValue></e:CipherData></e:EncryptedKey></KeyInfo></saml:SubjectConfirmation></saml:Subject></saml:AuthenticationStatement><Signature xmlns="<SignedInfo><CanonicalizationMethod">http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="</CanonicalizationMethod><SignatureMethod">http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="</SignatureMethod><Reference">http://www.w3.org/2000/09/xmldsig#rsa-sha1"></SignatureMethod><Reference URI="#SamlSecurityToken-103ba1dd-8509-4f5f-a0ce-fc661c4c560c"><Transforms><Transform Algorithm="</Transform><Transform">http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform><Transform Algorithm="</Transform></Transforms><DigestMethod">http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="</DigestMethod><DigestValue>XXXXXXXXXX</DigestValue></Reference></SignedInfo><SignatureValue>XXXXXXXXXX</SignatureValue><KeyInfo><o:SecurityTokenReference">http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>XXXXXXXXXX</DigestValue></Reference></SignedInfo><SignatureValue>XXXXXXXXXX</SignatureValue><KeyInfo><o:SecurityTokenReference xmlns:o="<o:KeyIdentifier">http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><o:KeyIdentifier ValueType="tEY41iHAh7Mqjem6z1QzzXyouk0=</o:KeyIdentifier></o:SecurityTokenReference></KeyInfo></Signature></saml:Assertion></RequestedSecurityToken><AppliesTo">http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1">tEY41iHAh7Mqjem6z1QzzXyouk0=</o:KeyIdentifier></o:SecurityTokenReference></KeyInfo></Signature></saml:Assertion></RequestedSecurityToken><AppliesTo xmlns="<EndpointReference">http://schemas.xmlsoap.org/ws/2004/09/policy"><EndpointReference xmlns="

https://web.sedgemoor.gov.uk/

</EndpointReference></AppliesTo><RequestedAttachedReference><o:SecurityTokenReference">http://www.w3.org/2005/08/addressing"><Address>https://web.sedgemoor.gov.uk/</Address></EndpointReference></AppliesTo><RequestedAttachedReference><o:SecurityTokenReference xmlns:o="<o:KeyIdentifier">http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><o:KeyIdentifier ValueType="SamlSecurityToken-103ba1dd-8509-4f5f-a0ce-fc661c4c560c</o:KeyIdentifier></o:SecurityTokenReference></RequestedAttachedReference><RequestedUnattachedReference><o:SecurityTokenReference">http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID">SamlSecurityToken-103ba1dd-8509-4f5f-a0ce-fc661c4c560c</o:KeyIdentifier></o:SecurityTokenReference></RequestedAttachedReference><RequestedUnattachedReference><o:SecurityTokenReference xmlns:o="<o:KeyIdentifier">http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><o:KeyIdentifier ValueType="SamlSecurityToken-103ba1dd-8509-4f5f-a0ce-fc661c4c560c</o:KeyIdentifier></o:SecurityTokenReference></RequestedUnattachedReference><RequestedProofToken><ComputedKey>http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1</ComputedKey></RequestedProofToken><Entropy><BinarySecret>XXXXXX">http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID">SamlSecurityToken-103ba1dd-8509-4f5f-a0ce-fc661c4c560c</o:KeyIdentifier></o:SecurityTokenReference></RequestedUnattachedReference><RequestedProofToken><ComputedKey>http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1</ComputedKey></RequestedProofToken><Entropy><BinarySecret>XXXXXX

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:</ReceivedResponse>

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Sending event to main thread for request(0xdf79b8)

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Received webticket resposne with status 0

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:New web ticket obtained

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Raising WebTicketEvent for https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root and https://web.sedgemoor.gov.uk/webticket/webticketservice.svc with status 0

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Web-Ticket retrieval for url https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root completed with status 0

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Found a binding with AuthType 16

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:getSpecificCredential returning the following credential for credType (1) serviceId (1)

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Credential information: credType (1) signInName (xxx.xxx@sedgemoor.gov.uk) domain (XXXX) username (xxxx) password.empty() (0) compatibleServiceIds(0)

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Request to get web ticket for https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Cached web-ticket found. Verifying details.

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Found a valid cached web-ticket

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Cached web ticket found

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Using endpoint address https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user as the server address

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Added Request(UcwaAutoDiscoveryRequest) to Request Processor queue

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Sent Request(UcwaAutoDiscoveryRequest) to Request Processor

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:<SentRequest>

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:To:https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Accept application/vnd.microsoft.rtc.autodiscover+xml;v=1

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:X-MS-WebTicket xxxxxxxxxx

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:</SentRequest>

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Sending request(UcwaAutoDiscoveryRequest) to server type = 0

Aug 30, 2013 10:39:39 AM VERBOSE HttpConnection: post request: https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user

Aug 30, 2013 10:39:39 AM VERBOSE HttpConnection: send request: https://web.sedgemoor.gov.uk/autodiscover/autodiscoverservice.svc/root/user

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Received response of request(UcwaAutoDiscoveryRequest) with status = 0x0

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:<ReceivedResponse>

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Cache-Control no-cache

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Connection Keep-Alive

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Content-Length 1293

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Content-Type text/html

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Date Fri, 30 Aug 2013 09:38:53 GMT

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Expires -1

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Pragma no-cache

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:Server Microsoft-IIS/7.5

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:StatusCode 401

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:X-Ms-diagnostics 28032;source="XXXX";reason="The web ticket is invalid.";faultcode="wsse:InvalidSecurityToken"

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:X-MS-Server-Fqdn XXXX

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:X-MS-WebTicketURL https://web.sedgemoor.gov.uk/WebTicket/WebTicketService.svc

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:HttpHeader:X-Powered-By ASP.NET

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>

<title>401 - Unauthorized: Access is denied due to invalid credentials.</title>

<style type="text/css">

<!--

body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}

fieldset{padding:0 15px 10px 15px;}

h1{font-size:2.4em;margin:0;color:#FFF;}

h2{font-size:1.7em;margin:0;color:#CC0000;}

h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;}

#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;

background-color:#555555;}

#content{margin:0 0 0 2%;;}

.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;;}

-->

</style>

</head>

<body>

<div id="header"><h1>Server Error</h1></div>

<div id="content">

<div><fieldset>

  <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>

  <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>

</fieldset></div>

</div>

</body>

</html>

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:</ReceivedResponse>

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Sending event to main thread for request(0xdaec00)

Aug 30, 2013 10:39:39 AM INFO TRANSPORT:Notifying response of request(UcwaAutoDiscoveryRequest) with status = 0x22030002

Aug 30, 2013 10:39:39 AM INFO APPLICATION:Req. event received: responseErrorCode=E2-3-2

Aug 30, 2013 10:39:39 AM INFO APPLICATION:No more req. timing out

Aug 30, 2013 10:39:39 AM INFO APPLICATION:Received autodiscovery response with status 570621954

Aug 30, 2013 10:39:39 AM INFO APPLICATION:Raising Autodiscovery event with status 570621954 for eventType 0

Aug 30, 2013 10:39:40 AM ERROR APPLICATION:Auto-discovery failed. Analysing the failure

Aug 30, 2013 10:39:40 AM INFO APPLICATION:Raising Autodiscovery event with status 570621954 for eventType 0

Aug 30, 2013 10:39:40 AM ERROR APPLICATION:Auto-discovery failed, aborting sign-in!

Aug 30, 2013 10:39:40 AM INFO APPLICATION:CLogonSession::setNewActualState() state=0

Aug 30, 2013 10:39:40 AM INFO UcClientStateManager: New UI State: ActualState = IsSignedOut DesiredState = BeSignedIn  DataAvailable = true

Aug 30, 2013 10:39:40 AM ERROR APPLICATION:Alert received! Type 16384, level 0, error E2-3-2, context ''

Aug 30, 2013 10:39:40 AM INFO APPLICATION:Response received for req. <unknown>: E2-3-2 (RemoteNetworkPermanentError); Done with req.; Stopping resend timer

Aug 30, 2013 10:39:40 AM VERBOSE ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.options.CredentialsActivity

Aug 30, 2013 10:39:40 AM VERBOSE ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.options.CredentialsActivity

Aug 30, 2013 10:39:40 AM VERBOSE ActivityMonitor: Activity Stop: com.microsoft.office.lync.ui.status.MyStatusActivity

Aug 30, 2013 10:39:40 AM VERBOSE ActivityMonitor: Activity Stop: com.microsoft.office.lync.ui.RootTabActivity

Aug 30, 2013 10:39:40 AM VERBOSE ActivityMonitor: Activity Destroy: com.microsoft.office.lync.ui.status.MyStatusActivity

Aug 30, 2013 10:39:40 AM VERBOSE ActivityMonitor: Activity Destroy: com.microsoft.office.lync.ui.RootTabActivity

Aug 30, 2013 10:39:42 AM VERBOSE ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.options.CredentialsOptionsActivity

Aug 30, 2013 10:39:42 AM VERBOSE ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.options.CredentialsOptionsActivity

Aug 30, 2013 10:39:43 AM INFO APPLICATION:No SendUpdate schedule action. timerStarted=0, timerNeedsToRun=0, channelState=0, timerAction=0

Aug 30, 2013 10:39:48 AM VERBOSE ActivityMonitor: Activity Create: com.microsoft.office.lync.ui.options.AboutActivity

Aug 30, 2013 10:39:48 AM VERBOSE ActivityMonitor: Activity Start: com.microsoft.office.lync.ui.options.AboutActivity

Aug 30, 2013 10:39:48 AM VERBOSE ActivityMonitor: Activity Stop: com.microsoft.office.lync.ui.options.CredentialsOptionsActivity

Aug 30, 2013 10:39:48 AM VERBOSE LyncUtils: Compress adding: cmlog0.log

The log saying something like 401 - Unauthorized: Access is denied due to invalid credentials

In my case, the user located on child domain while the lync located on forest level. So my sign in address is username@root.com and i expand the details option and set username to child\username. See if your case is the same.

Have you tried to set "All User" on published rule?

The published rule is definately set to all users.  I have also tried to change the lync logon to be domain\user.name instead of user.name@domain.com, still no joy I'm afraid.