Hi. I have an environment of Lync 2010.
Front End Pool - 1 server
Director pool - 2 servers
AV pool - 2 servers
My DNS system is split brain. Local domain company.net, external domain company.com
DNS pinpoint zones:
lyncpool01.company.net pointed to Lync FE server IP address
_sipinternaltls._tcp.company.com SRV 0 0 5061 pointed to sip.company.com
sip.company.com pointed to Lync FE server IP address.
dialin.company.com pointed to Lync FE server IP address
meet.company.com pointed to Lync FE server IP address
ucupdates-r2.company.com pointed to Lync FE server IP address
_ntp._udp.company.com SRV 0 0 123 pointed to my DC (WIN2K8R2)
=================================================
DHCP options
I tried to point option 120 and 43 to FE and Director pool, but no result.
All 6 options of DHCP successfully deployed:
==============================================================================
The result of Test-CsPhoneBootStrap
VERBOSE: Target server fqdn AND web service URL provided by user.
'STActivity' activity started.
Trying to download a certificate chain from web service.
Web Service url :
http://lyncpool01.company.net/CertProv/CertProvisioningService.svc
Certificate chain downloaded successfully.
'STActivity' activity completed in '0,0185095' secs.
'STActivity' activity started.
Trying to get web ticket.
Web Service url :
https://lyncpool01.company.net:443/WebTicket/WebTicketService.svc
Using PIN auth with Phone\Ext : 1010 Pin : 180291
GetWebTicketActivity completed.
'STActivity' activity completed in '0,1102579' secs.
'STActivity' activity started.
Starting ResolveUser activity using Web Ticket.
Web Service url :
https://lyncpool01.company.net:443/CertProv/CertProvisioningService.svc
Found user : sip:raliyev@company.com
Setting sip uri 'sip:raliyev@company.com' back to parent workflow.
ResolveUser activity completed.
'STActivity' activity completed in '0,0988848' secs.
'STActivity' activity started.
Trying to get web ticket.
Web Service url :
https://lyncpool01.copmany.net:443/WebTicket/WebTicketService.svc
Using PIN auth with Phone\Ext : 1010 Pin : 180291
GetWebTicketActivity completed.
'STActivity' activity completed in '0,1038949' secs.
'STActivity' activity started.
Trying to download a CS certificate for User :
raliyev@company.com endpoint :
STEpid
Web Service url :
https://lyncpool01.company.net:443/CertProv/CertProvisioningService.svc
GetCSCertificate activity completed.
'STActivity' activity completed in '0,4309389' secs.
'Register' activity started.
Sending Registration request:
Target Fqdn = lyncpool01.company.net
User Sip Address = sip:raliyev@company.com
Registrar Port = No Port is provided..
Auth Type 'Certificate' is selected.
Registration Request hit against LC2K10EES.company.net
'Register' activity completed in '0,0913775' secs.
Starting cleanup...
cleanup successful.
'UnRegisterActivity' activity started.
'UnRegisterActivity' activity completed in '0,0049845' secs.
Workflow
'Microsoft.Rtc.SyntheticTransactions.Workflows.STPhoneBootstrapWorkflow',
succeded.
VERBOSE: Workflow Instance Id d80e2d02-5e25-47dd-9927-ec8809c19089, completed.
VERBOSE: Workflow Execution Time (sec): 0.9030903
===========================================================================
The result of Test-CsClientAuth
VERBOSE: Target web service url not provided. Will have to extract it from auth
challenge.
'STActivity' activity started.
Starting STS Uri Discovery...
Found sts-uri :
https://lyncpool01.company.net:443/CertProv/CertProvisioningService.svc.
STS Uri Discovery activity completed successfully.
'STActivity' activity completed in '0,0141103' secs.
'STActivity' activity started.
Trying to get web ticket.
Web Service url :
https://lyncpool01.company.net:443/WebTicket/WebTicketService.svc
Using NTLM\Kerb auth.
GetWebTicketActivity completed.
'STActivity' activity completed in '0,0556596' secs.
'STActivity' activity started.
Trying to download a CS certificate for User :
raliyev@company.com endpoint :
STEpid
Web Service url :
https://lyncpool01.company.net:443/CertProv/CertProvisioningService.svc
GetCSCertificate activity completed.
'STActivity' activity completed in '0,5940291' secs.
'Register' activity started.
Sending Registration request:
Target Fqdn = lyncpool01.company.net
User Sip Address = sip:raliyev@company.com
Registrar Port = No Port is provided..
Auth Type 'Certificate' is selected.
Registration Request hit against LC2K10EES.company.net
'Register' activity completed in '0,0951852' secs.
'UnRegisterActivity' activity started.
'UnRegisterActivity' activity completed in '0,0046577' secs.
Starting cleanup...
cleanup successful.
Workflow 'Microsoft.Rtc.SyntheticTransactions.Workflows.STClientAuthWorkflow',
succeded.
VERBOSE: Workflow Instance Id 5419b6d7-ff06-4244-9dba-708d61978e88, completed.
VERBOSE: Workflow Execution Time (sec): 0.8020802
===========================================================
Configuration information of Lync 2010 Client
==============================================================================
The result of Get-CsWebServiceConfiguration
PS C:\Users\raliyev> Get-CsWebServiceConfiguration
Identity : Global
TrustedCACerts : {}
MaxGroupSizeToExpand : 100
EnableGroupExpansion : True
UseWindowsAuth : Negotiate
UseCertificateAuth : True
UsePinAuth : True
AllowAnonymousAccessToLWAConference : True
EnableCertChainDownload : True
InferCertChainFromSSL : True
CASigningKeyLength : 2048
MaxCSRKeySize : 16384
MinCSRKeySize : 1024
MaxValidityPeriodHours : 8760
MinValidityPeriodHours : 8
DefaultValidityPeriodHours : 4320
MACResolverUrl :
SecondaryLocationSourceUrl :
ShowJoinUsingLegacyClientLink : True
ShowDownloadCommunicatorAttendeeLink : True
=====================================================
The result of Get-CsProxyConfiguration
Identity : Global
Realm : Microsoft.Rtc.Management.WritableConfig.Se
ttings.SipProxy.UseDefault
MaxClientMessageBodySizeKb : 128
MaxServerMessageBodySizeKb : 5000
TreatAllClientsAsRemote : False
OutgoingTlsCount : 4
DnsCacheRecordCount : 30000
EnableWhiteSpaceKeepAlive : True
UseKerberosForClientToProxyAuth : False
UseNtlmForClientToProxyAuth : True
DisableNtlmFor2010AndLaterClients : False
UseCertificateForClientToProxyAuth : True
AcceptClientCompression : True
MaxClientCompressionCount : 15000
AcceptServerCompression : True
MaxServerCompressionCount : 1024
RequestServerCompression : True
===========================================================
Lync logging tool is not showing any usefull information.
I cheked for logs: CertProvisioning, S4, Sipstack and WebInfrastructure.
====================================================
Finally can't catch the problem.
RFT