On a new lync deployment I cannot get mobility working
If I browse https://lyncdiscover.domain.co.uk/autodiscover/autodiscoverservice.aspx/root/sipuri=martinb@domain.co.uk
I get
Mobility error
April 10th, 2014 4:41am
Hi,
what happens when you browse https://lyncdiscover.domain.co.uk, does it allow you to download the .txt file?
Free Windows Admin Tool Kit Click here and download it now
April 10th, 2014 4:54am
No but it does if I browse to
https://lyncdiscover.domain.co.uk/Autodiscover/AutodiscoverService.svc/root
full details can be found on this post:
http://social.technet.microsoft.com/Forums/en-US/ab8a8ac8-85ce-4fe2-adf5-5114e77836ba/error-on-lync-discover-test?forum=ocsmanagement
April 10th, 2014 5:01am
I see the below if i try https://lyncdiscover.domain.co.uk
Server Error
<fieldset style="padding:0px 15px 10px;">403 - Forbidden: Access is denied.
You do not have permission to view this directory or page using the credentials that you supplied.
</fieldset>Free Windows Admin Tool Kit Click here and download it now
April 10th, 2014 5:03am
can you explain the base deployment? what's the reverse proxy that you have?
April 10th, 2014 5:05am
It is a cisco ASA firewall it just NAT's port 443 traffic directly to the front end server on port 4443, I can see the 4443 traffic on the front end server if i run a packet sniffer.
meet url works fine...
it is a standard edition 2010 deployment
1 FE 1 Edge
Free Windows Admin Tool Kit Click here and download it now
April 10th, 2014 5:23am
No-one can seem to come up with a theory as to what it might be...
is there a way to test it internally to rule out the firewall?
April 10th, 2014 5:44am
Hi,
I faced this problem before but with meet and dialin traffic gets 403 Forbidden when forwarded from the reverse proxy to the Frontend.
in the end it was a problem with my frontend IIS, for some reason I don't know until now, IIS was not installed correctly and the URL rewrite roles for the external site were pointing to wrong Lync webservices URL.
I was lucky I had two standard frontend servers so I moved all users to the one with functional IIS and reinstalled the one with the problem.
so i recommend you check your Frontend IIS and do detailed logging on the IIS to see more details of the traffic
hope this fix it for you
Kind Regards,
M.eltohamy
Free Windows Admin Tool Kit Click here and download it now
April 10th, 2014 7:11am
Testing HTTP authentication methods for URL https://lyncdiscover.domain.co.uk/Autodiscover/AutodiscoverService.svc/root/user.
HTTP authentication methods successful.
Additional Details
Web Ticket URL found as expected and confirmed anonymous access isn't allowed.
HTTP Response Headers:
Pragma: no-cache
X-MS-WebTicketURL: https://lync.domain.co.uk/WebTicket/WebTicketService.svc
X-MS-Server-Fqdn: JNBV48.domain.co.uk
Content-Length: 1293
Cache-Control: no-cache
Content-Type: text/html
Date: Thu, 10 Apr 2014 13:19:31 GMT
Expires: -1
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Elapsed Time: 458 ms.
Testing HTTP content for URL https://lyncdiscover.domain.co.uk/?sipuri=martinb@domain.co.uk has token="User".
HTTP content isn't verified.
Additional Details
An HTTP 403 forbidden response was received. The response appears to have come from IIS7. Body of the response: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>403 - Forbidden: Access is denied.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;}
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;}
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;}
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>403 - Forbidden: Access is denied.</h2>
<h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
</fieldset></div>
</div>
</body>
</html>
HTTP authentication methods successful.
Additional Details
Web Ticket URL found as expected and confirmed anonymous access isn't allowed.
HTTP Response Headers:
Pragma: no-cache
X-MS-WebTicketURL: https://lync.domain.co.uk/WebTicket/WebTicketService.svc
X-MS-Server-Fqdn: JNBV48.domain.co.uk
Content-Length: 1293
Cache-Control: no-cache
Content-Type: text/html
Date: Thu, 10 Apr 2014 13:19:31 GMT
Expires: -1
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Elapsed Time: 458 ms.
Testing HTTP content for URL https://lyncdiscover.domain.co.uk/?sipuri=martinb@domain.co.uk has token="User".
HTTP content isn't verified.
Additional Details
An HTTP 403 forbidden response was received. The response appears to have come from IIS7. Body of the response: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>403 - Forbidden: Access is denied.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;}
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;}
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;}
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>403 - Forbidden: Access is denied.</h2>
<h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
</fieldset></div>
</div>
</body>
</html>
April 10th, 2014 9:22am
Dont understand the "You do not have permission to view this directory or page using the credentials
that you supplied" bit as I have NOT supplied any credentials just a sip username
Free Windows Admin Tool Kit Click here and download it now
April 10th, 2014 9:25am
this thread says:
my external web service url is lync.domain.com, what is the spn?
1. Make sure that the external web service URL is not lyncdiscover.domain.com it needs to be diffrent.
2. verify your spn and make sure it is correct.
Thanks for the assistance.
http://social.technet.microsoft.com/Forums/lync/en-US/9fa61175-9b9f-484d-86e7-f5615808ca97/403-forbidden-access?forum=ocsmobility
April 10th, 2014 9:40am
If I try from the FE server to go to https://lyncdiscoverinternal.domain.co.uk I get:
HTTP content isn't verified An HTTP 403 forbidden response was received. The response appears to have come from IIS7. Body of the response: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml">
https://lyncdiscoverinternal.domain.co.uk/hosting/discovery
Server Error in Application "LYNC SERVER INTERNAL WEB SITE"
Internet Information Services 7.5
Error Summary
HTTP Error 403.14 - Forbidden
The Web server is configured to not list the contents of this directory.
Detailed Error Information
Module
DirectoryListingModule
Notification
ExecuteRequestHandler
Handler
StaticFile
Free Windows Admin Tool Kit Click here and download it now
April 11th, 2014 5:43am
I fixed this by re-installing mobility:
http://iconraja.wordpress.com/2012/01/12/microsoft-lync-2010-lync-mobility-mcx-installation-guide/
April 11th, 2014 6:18am
This topic is archived. No further replies will be accepted.
Other recent topics
