Group Chat installation fails
Group Chat server installation fails with "Error creating trusted service for Channel Server".
Details:-
AD- Win2k3
The service account for Channel Service is "GCChannel"
We referred the Microsoft OCS R2 documentation and following link for installation:
http://blogs.technet.com/jitreddy/archive/2009/02/20/how-to-install-group-chat-server-in-ocs-2007-r2.aspx
The installation log file is (Serverconfigtool.log) has following entries:---
-----------------------------------------------------------------
WinServices.GetService | GetService: MGCCHANS
INFO |20090303-03:28:50.982| 1: | WinServices.GetService | Service <MGCCHANS> is <Stopped>
INFO |20090303-03:28:50.998| 1: | WinServices.ChangeServiceCredentials | ChangeServiceCredentials: MGCCHANS
INFO |20090303-03:28:51.013| 1: | WinServices.ChangeServiceCredentials | ...successfully set creds. refreshing service: MGCCHANS
INFO |20090303-03:28:51.013| 1: | WinServices.ChangeServiceCredentials | ...refreshed: MGCCHANS
INFO |20090303-03:28:51.029| 1: | WinServices.GetServiceStartType | GetServiceStartType: MGCCHANS
INFO |20090303-03:28:51.029| 1: | WinServices.GetServiceStartType | ...service start type=Disabled
INFO |20090303-03:28:51.029| 1: | WinServices.ChangeServiceStartType | ChangeServiceStartType: MGCCHANS to Auto
INFO |20090303-03:28:51.045| 1: | WinServices.ChangeServiceStartType | ...start type set. refreshing service MGCCHANS
INFO |20090303-03:28:51.045| 1: | WinServices.ChangeServiceStartType | ...done refreshing service MGCCHANS
INFO |20090303-03:28:51.045| 1: | WinServices.GetServiceCredentials | GetServiceCredentials:MGCCHANS
INFO |20090303-03:28:51.045| 1: | WinServices.GetServiceCredentials | ...service creds: oye\gcchannel
INFO |20090303-03:28:51.045| 1: | WinServices.CanRunAsService | CanRunAsService?: account=oye\gcchannel
INFO |20090303-03:28:51.045| 1: |LocalSecurityAuthori.AccountRights | Enumerating account rights for <oye\gcchannel>
INFO |20090303-03:28:51.045| 1: |LocalSecurityAuthori.AccountRights | returning account right <SeServiceLogonRight>
INFO |20090303-03:28:51.045| 1: | WinServices.CanRunAsService | ...yes, oye\gcchannel can run as a service.
INFO |20090303-03:28:51.045| 1: | ServerConfigScript.ExecuteScript | Action #<12><Microsoft.Rtc.Internal.Chat.Server.ConfigTool.Actions.SetServiceCredsAction> succeeded
INFO |20090303-03:28:51.045| 1: | ServerConfigScript.ExecuteScript | Action #<13><Microsoft.Rtc.Internal.Chat.Server.ConfigTool.Actions.AddServerDbConfigRecordAction: ChannelServer-OCSSRV1.oye.com, net.tcp://OCSSRV1.oye.com:8011/MGC/PeerService> starting...
INFO |20090303-03:28:51.217| 1: | TseServices.QueryTrustedServices | Queried TSE. ChannelServer=(null) and 4 ports are reserved.
INFO |20090303-03:28:51.217| 1: | TSEQueryResult.IsPortInConflict | Port 5041: conflict=False
INFO |20090303-03:28:51.232| 1: | TseServices.CreateChannelServerTSE | Adding trusted service ID:Microsoft.Rtc.Chat.ChannelServer, Port:5041, FQDN/TlsTarget:OCSSRV1.oye.com
INFO |20090303-03:28:51.498| 1: | NotificationSink.NotifySubTaskStart | BEGIN: <Forest.CreateTrustedService>
INFO |20090303-03:28:51.888| 1: | NotificationSink.NotifySubTaskStart | BEGIN: <Initialize Forest Object>
INFO |20090303-03:28:51.888| 1: | NotificationSink.NotifySubTaskInfo | [FQDN]: oye.com
INFO |20090303-03:28:51.888| 1: | NotificationSink.NotifySubTaskInfo | [Local Forest]: True
INFO |20090303-03:28:51.904| 1: | NotificationSink.NotifySubTaskStart | BEGIN: <Initialize Active Directory Connections>
INFO |20090303-03:28:51.904| 1: | NotificationSink.NotifySubTaskInfo | [Domain]: oye.com
INFO |20090303-03:28:51.998| 1: | NotificationSink.NotifySubTaskInfo | [Domain Functional Level]: Windows 2003 mode or greater
INFO |20090303-03:28:51.998| 1: | NotificationSink.NotifySubTaskInfo | [Global Container DN]: CN=Configuration,DC=oye,DC=com
INFO |20090303-03:28:51.998| 1: | NotificationSink.NotifySubTaskInfo | [Global Container Domain DC]: DCOYE.oye.com
INFO |20090303-03:28:51.998| 1: | NotificationSink.NotifySubTaskInfo | [Domain DC]: DCOYE.oye.com
INFO |20090303-03:28:51.998| 1: | NotificationSink.NotifySubTaskInfo | [Forest GC]: DCOYE.oye.com
INFO |20090303-03:28:51.998| 1: | NotificationSink.NotifySubTaskEnd | END: <Initialize Active Directory Connections>, code: <0>
INFO |20090303-03:28:52.045| 1: | NotificationSink.NotifySubTaskEnd | END: <Initialize Forest Object>, code: <0>
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskStart | BEGIN: <Create Trusted Service Entry>
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskStart | BEGIN: <Check Active Directory Object CN=Trusted Services>
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Relative Distinguished Name]: CN=Trusted Services
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Filter]: (objectCategory=msRTCSIP-TrustedServices)
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Search base]: LDAP://DCOYE.oye.com/CN=Configuration,DC=oye,DC=com
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Domain Controller]: DCOYE.oye.com
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Verify Attribute Values]: False
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Object LDAP]: LDAP://DCOYE.oye.com/CN=Trusted Services,CN=RTC Service,CN=Services,CN=Configuration,DC=oye,DC=com
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Domain Controller]: DCOYE.oye.com
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Action Info]: Attribute "objectClass" State 0x3 (ATTR_EXIST | ATTR_TYPE_READY) (hr = 0x0)
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Action Info]: Object whenCreated "UTC 1/23/2009 7:50:50 PM"
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Action Info]: Object whenChanged "UTC 1/23/2009 7:50:50 PM"
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Object State]: 0x3 (OBJ_EXIST | OBJ_READY)
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Object State]: Ready
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskEnd | END: <Check Active Directory Object CN=Trusted Services>, code: <0>
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskStart | BEGIN: <Find existing AD entries>
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Filter]: (&(objectCategory=msRTCSIP-TrustedService)(msRTCSIP-TrustedServerFQDN=OCSSRV1.oye.com)(|(msRTCSIP-TrustedServicePort=5041)(msRTCSIP-TrustedServiceType=Microsoft.Rtc.Chat.ChannelServer)))
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Exists]: False
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskEnd | END: <Find existing AD entries>, code: <0>
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskStart | BEGIN: <Create Active Directory Object CN={B5B5DCE7-8339-4E59-8A99-EBC172B082C3}>
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Relative Distinguished Name]: CN={B5B5DCE7-8339-4E59-8A99-EBC172B082C3}
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Filter]: CN={B5B5DCE7-8339-4E59-8A99-EBC172B082C3}
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Search base]: LDAP://DCOYE.oye.com/CN=Trusted Services,CN=RTC Service,CN=Services,CN=Configuration,DC=oye,DC=com
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Domain Controller]: DCOYE.oye.com
INFO |20090303-03:28:52.060| 1: | NotificationSink.NotifySubTaskInfo | [Verify Attribute Values]: False
INFO |20090303-03:28:52.076| 1: | NotificationSink.NotifySubTaskEnd | END: <Create Active Directory Object CN={B5B5DCE7-8339-4E59-8A99-EBC172B082C3}>, code: <0>
INFO |20090303-03:28:52.076| 1: | NotificationSink.NotifySubTaskEnd | END: <Create Trusted Service Entry>, code: <0>
ERROR |20090303-03:28:52.138| 1: | NotificationSink.NotifySubTaskError | ERROR in add/remove trusted service: [A call to a subtask failed.]: The call to subtask Forest.CreateTrustedService failed. Failed execute task, code: <0>
INFO |20090303-03:28:52.138| 1: | NotificationSink.NotifySubTaskInfo | [Suggested Resolution]: See further details about the task in this log.
INFO |20090303-03:28:52.138| 1: | NotificationSink.NotifySubTaskEnd | END: <Forest.CreateTrustedService>, code: <-1006886899>
ERROR |20090303-03:28:52.232| 1: | ServerConfigScript.ExecuteScript | Action #<13><Microsoft.Rtc.Internal.Chat.Server.ConfigTool.Actions.AddServerDbConfigRecordAction: ChannelServer-OCSSRV1.oye.com, net.tcp://OCSSRV1.oye.com:8011/MGC/PeerService> failed: Microsoft.Rtc.Internal.Chat.Server.ConfigTool.Utilities.TrustedServicesException: Error creating trusted service for Channel Server ---> Microsoft.Rtc.Internal.Chat.Server.ConfigTool.Utilities.TrustedServicesException: Failed to create trusted service for Channel Server
at Microsoft.Rtc.Internal.Chat.Server.ConfigTool.Utilities.TseServices.CreateChannelServerTSE(UInt32 port)
--- End of inner exception stack trace ---
at Microsoft.Rtc.Internal.Chat.Server.ConfigTool.Utilities.TseServices.CreateChannelServerTSE(UInt32 port)
at Microsoft.Rtc.Internal.Chat.Server.ConfigTool.Utilities.TseServices.CreateOrUpdateTse(UInt32 selectedPort)
at Microsoft.Rtc.Internal.Chat.Server.ConfigTool.Actions.AddServerDbConfigRecordAction.Execute(ServerConfigScript configScript, String& errorMessage)
at Microsoft.Rtc.Internal.Chat.Server.ConfigTool.ServerSetup.ServerConfigScript.ExecuteScript(Boolean testMode, String& errorMsg)
INFO |20090303-03:28:52.232| 1: | ServerConfigScript.CloseAllSqlConnections
---------------------------------------
Does anybody know the solution to this issue?
Thanks,
Rupa- Moved byashawani_dubeyMSFT, AdministratorMonday, June 15, 2009 11:44 AMnot related to bookmark (From:Social Bookmarks Discussion Forum)
All Replies
- Did you figure it out? I am getting the same thing.
- Enabled it as a SIP account. Go figure.
- Proposed As Answer byKreedo Tuesday, May 05, 2009 1:18 PM
I got it and I slove it ,
Just Remove the Group Chat Server Role
Keep the Datebase checkbox
Reinstall the Group Chat Server role again
it will working ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Good Luck- I've got the same problem.
All the so called fixes posted above this one do not fix the issue.
Anyone with some guidence, please let us know. I'm wondering if the thread starter ever got around this issue. 1. Verify the certificate assigned to the group chat server it should have both Server and Client Authentication. If you have only server authentication, sign in to admin console will fail with above error.
2. Above service accounts must be part of RTCUniversalServerAdmins group and also Administrators group of the group chat server. Also add the user name (admin account) with which you are going to sign in to group chat.
3. Enable the admin account along with the above five service accounts for SIP communication on OCS 2007 server R2. Configure them for Federation,PIC,Remote User Access and Enhanced presence.
4. From SQL server management studio ->Security->Logins, Make sure all the above service accounts and admin account, are there. Then here Login properties, General-> default database for each of the account should be “GCDB”, Under user mapping->check db_owner for all the service accounts.
5. Under GC admin sign in console->Edit Accounts Settings->Automatic
Configuration->Uncheck “Use my Windows credentials to log in automatically” , then under Office communications Server leave Host “blank”, select encrypted radio button, under Group Chat Server Settings leave Use default server address box
unchecked and server address as “OCSchat service account uri”6. C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys re-add the Lookup Service account and the Channel Service account and give them full control to this folder and re-apply full control to all the files in it and try to restart the services.IF YOU DID AND TEST ALL OF IT AND NOT WORKING
1- Remove the Group Chat Server Role
2- Keep the Database checkbox
3- Reinstall Group Chat Server Role Again
It will working ,,,,,,,, GOOD LUCK
http://ledarma.wordpress.com/2009/07/16/lookup-or-channnel-services-at-group-chat-ocs-r2-stop/- First thing to jump out at me is step #1.
[quote]
1. Verify the certificate assigned to the group chat server it should have both Server and Client Authentication. If you have only server authentication, sign in to admin console will fail with above error.
[/quote]
My certificates only provide "server authentication" and I am unable to find out any way to request certificates with both client and server authentication. There were also no references to this info in the group chat setup documentations. Where can I find info on how to install the proper certificate? - Hi All,
Thank you for your comments.
I finally could get the Group Chat installed properly with the help of this link http://www.shudnow.net/2009/03/08/office-communications-server-2007-r2-group-chat-deployment-part-1/ and the subsequent part II.
I dont know what the earlier problem was. I followed the above , on a entire new setup and it worked
Thanks,
Rupa
