Quantcast
Channel: Lync Server 2013 - Management, Planning, and Deployment forum
Viewing all articles
Browse latest Browse all 5984

Hybrid - Online users cannot login. 403 Forbidden error.

$
0
0

Hello,

I installed Lync server and connected it to existing Lync Online environment. I changed DNS records and now online users cannot sign in to Lync client.

This is the new workstation and user was not logged in before. Nothing in Lync Logs, but there are errors when I check Sign-in Logs on the client:

1 Login: FAIL (hr = 0x1)
Changed CBootstrapper status [10000] -> [10006]
1.1 Lync-autodiscovery: FAIL (hr = 0x1)
this request needs authentication, trying webticket from: https://lyncfe.domain.local/WebTicket/WebTicketService.svc
1.1.1 Get-NewWebTicket: FAIL (hr = 0x1)
CLogonCredentialManager::QueryForSpecificCreds() Credential user 0x09848DD0 id=15 querying for specific credentials, credSuccess=2, targetName=Microsoft_OC1:uri=user@domain.com:specific:LAD:1
1.1.1.1 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000)
this request needs authentication, trying webticket from: https://lyncfe.domain.local/WebTicket/WebTicketService.svc
1.1.1.2 ExecuteWithMetadataInternal: FAIL (hr = 0x3d0000)
Executing wws method with windows auth auth, asyncContext=0EAC26E8,
 context: WebRequest context@ :247480728
  MethodType:4
  ExecutionComplete? :0
  Callback@ :0EC701FC
  AsyncHResult:3d0000
  TargetUri:https://lyncfe.domain.local/WebTicket/WebTicketService.svc
  OperationName:http://tempuri.org/:IWebTicketService

.
1.1.1.3 ExecuteWithWindowsOrNoAuthInternal: PASS
1.1.1.4 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000)
Executing wws method with windows auth auth, asyncContext=0EAC26E8,
 context: WebRequest context@ :247480728
  MethodType:4
  ExecutionComplete? :1
  Callback@ :0EC701FC
  AsyncHResult:80f10041
  TargetUri:https://lyncfe.domain.local/WebTicket/WebTicketService.svc
  OperationName:http://tempuri.org/:IWebTicketService
 Error:
There was an error communicating with the endpoint at 'https://lyncfe.domain.local/WebTicket/WebTicketService.svc'.
The server returned HTTP status code '403 (0x193)' with text 'Forbidden'.
The server understood the request, but cannot fulfill it.

.
1.1.1.5 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000)
Executing wws method with windows auth auth, asyncContext=0EAC26E8,
 context: WebRequest context@ :247480728
  MethodType:4
  ExecutionComplete? :1
  Callback@ :0EC701FC
  AsyncHResult:80f10041
  TargetUri:https://lyncfe.domain.local/WebTicket/WebTicketService.svc
  OperationName:http://tempuri.org/:IWebTicketService
 Error:
The server returned a trust fault: 'The specified request failed'.
The fault reason was: 'The SIP URI in the claim type requirements of the web ticket request does not match the SIP URI associated with the presented credentials.'.

.
1.1.1.6 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000)
Created CManagedCredential[SPECIFIC this=0A886010, domain=domain, userName=]
1.1.1.7 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000)
Executing wws method with windows auth auth, asyncContext=0EAC26E8,
 context: WebRequest context@ :247480728
  MethodType:4
  ExecutionComplete? :1
  Callback@ :0EC701FC
  AsyncHResult:80f10041
  TargetUri:https://lyncfe.domain.local/WebTicket/WebTicketService.svc
  OperationName:http://tempuri.org/:IWebTicketService
 Error:
There was an error communicating with the endpoint at 'https://lyncfe.domain.local/WebTicket/WebTicketService.svc'.
The server returned HTTP status code '403 (0x193)' with text 'Forbidden'.
The server understood the request, but cannot fulfill it.

.
1.1.1.8 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000)
Created CManagedCredential[SPECIFIC this=0A884BC0, domain=, userName=]
1.1.1.9 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000)
Executing wws method with windows auth auth, asyncContext=0EAC26E8,
 context: WebRequest context@ :247480728
  MethodType:4
  ExecutionComplete? :1
  Callback@ :0EC701FC
  AsyncHResult:80f10041
  TargetUri:https://lyncfe.domain.local/WebTicket/WebTicketService.svc
  OperationName:http://tempuri.org/:IWebTicketService
 Error:
There was an error communicating with the endpoint at 'https://lyncfe.domain.local/WebTicket/WebTicketService.svc'.
The server returned HTTP status code '403 (0x193)' with text 'Forbidden'.
The server understood the request, but cannot fulfill it.

.
1.1.1.10 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000)
Created CManagedCredential[SPECIFIC this=0A886010, domain=, userName=]
1.1.1.11 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000)
Executing wws method with windows auth auth, asyncContext=0EAC26E8,
 context: WebRequest context@ :247480728
  MethodType:4
  ExecutionComplete? :1
  Callback@ :0EC701FC
  AsyncHResult:80f10041
  TargetUri:https://lyncfe.domain.local/WebTicket/WebTicketService.svc
  OperationName:http://tempuri.org/:IWebTicketService
 Error:
There was an error communicating with the endpoint at 'https://lyncfe.domain.local/WebTicket/WebTicketService.svc'.
The server returned HTTP status code '403 (0x193)' with text 'Forbidden'.
The server understood the request, but cannot fulfill it.

.
1.1.1.12 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000)
CLogonCredentialManager::QueryForSpecificCreds() Credential user 0x09848DD0 id=15 querying for specific credentials, credSuccess=2, targetName=Microsoft_OC1:uri=user@domain.com:specific:LAD:1

If I open IE and go to https://lyncfe.domain.local/WebTicket/WebTicketService.svc, after I login with this user, I receive the following:

HTTP Error 403.0 - Forbidden

You do not have permission to view this directory or page.

Any ideas? Can someone help me with this?


Thank you. Eric.


Viewing all articles
Browse latest Browse all 5984

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>