Cannot sign in Skype for Business client external
Question
All replies
-
Hello Saad,
Check the Technical Diagrams:
http://go.microsoft.com/fwlink/p/?LinkId=550989
These records are needed:
DNS Type Value Resolution Purpose SRV _sipfederationtls._tcp.<sip-domain> Access Edge FQDN: access.<sip-domain> Federation and public IM connectivity SRV _sip._tls.<sip-domain> Access Edge FQDN: access.<sip-domain> external user access SRV _xmpp-server._tcp.<sip-domain> Access Edge FQDN: access.<sip-domain> XMPP federation A sip.<sip-domain> Access Edge FQDN: access.<sip-domain> locate Edge Server A Access Edge FQDN: access.<sip-domain> Access Edge IP address Edge Server Access edge A A/V Edge FQDN: av.<sip-domain> A/V Edge IP address Edge Server A/V edge A Conf Edge FQDN: conf.<sip-domain> Conf Edge IP address Edge Server Conf edge A/CNAME lyncdiscover.<sip-domain> reverse proxy public IP address external AutoDiscover Service A meet URL reverse proxy public IP address proxied to Lync Server Web Service A dial-in URL reverse proxy public IP address proxied to Lync Server Web Service A external Web Services FQDN reverse proxy public IP address proxied to Lync Server Web Service
Also check the control panel:
and
Greetings,
Erdem
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.
- Proposed as answer by Er-D Thursday, December 28, 2017 1:02 PM
-
Hi Saad9837,
Accroding to your reply, you need add the A record “Access Edge FQDN: access.<sip-domain>” to the Public DNS. You could try to login the SFB server manually,like the following picture.if you could login ,you lack the lyncdiscover;In the “Skype For Business Options” window that opens click “Advanced”, select “Manual configuration”, and then enter Internal and External server names.
.Check if the certificate for Edge Server meets the following requirement.
3. Use Lync connectivity analyzer to see if there is any error.
https://testconnectivity.microsoft.com/
Regards,
Leon Lu
Please remember to mark the replies as answers if they helped.
If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
- Edited by Leon-LuMicrosoft contingent staff Wednesday, December 27, 2017 12:36 PM
-
Hi Saad9837,
You could try to use manual configuration to login SFB like the following screenshot , if you could login ,the problem is caused by the lyncdiscover
Regards,
Leon Lu
Please remember to mark the replies as answers if they helped.
If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com. -
Hi Erdem,
In that case I had to add every organization domain in allowed list.Am I right?
Since Users of my Domain wants to communicate with different organization Users having different domains
Let Suppose
Test@abc.com.pk wants to communicate with Test2@def.com.pk or Test3@efg@com.pk?
So I need to allow that DEF.COM.PK & EFG.COM.PK domain in Lync Control Panel Domain Allowed List?
I just want that User of my organization communicate anyone and to any domain without added the domains in control panel wizard.
Please suggest.
Hi Saad,
you need to enable partner discovery to turn on Open federation:
Greetings,
Erdem
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.
-
Hi Saad,
This is the conference policy that is use standard:
It also could be that the firewall is blocking, check if SRTP/UDP:49152-65535 from the user to the Front end pool is allowed internally.
These ports are needed for federated conferencing:
Source IP Destination IP Source Port Destination Port A/V Edge Any TCP 50,000-59,999 TCP 443 A/V Edge Any UDP 3478 UDP 3478 Any A/V Edge Any TCP 443 Any A/V Edge Any UDP 3478 The DNS records are correct.
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.
- Edited by Er-D Friday, January 5, 2018 7:01 AM
-
Thanks Erdem,
I will review the logs and share the status.
Kindly specify Log file name that will be responsible for conference call details?
After View Client Log History of LYNC i found:
<convErrorMessage xmlns="http://schemas.microsoft.com/2008/10/sip/convItems" ts="2018-01-09T10:01:00Z" mode="lcsConf" action="none" hr="-2131820136">
<errorInfo participantUri="sip:skypetest@domain.com.pk"/>
</convErrorMessage>
<convErrorMessage xmlns="http://schemas.microsoft.com/2008/10/sip/convItems" ts="2018-01-09T10:01:00Z" mode="voice" action="start" hr="-2131687933">
<errorInfo participantUri="sip:skypetest@domain.com.pk"/>
</convErrorMessage>
<convNotification xmlns="http://schemas.microsoft.com/2008/10/sip/convItems" ts="2018-01-09T10:01:00Z" id="72" mode="im" hr="-2131820136"/>
<convErrorMessage xmlns="http://schemas.microsoft.com/2008/10/sip/convItems" ts="2018-01-09T10:01:00Z" mode="lcsConf" action="none" hr="-2131820136">
<extendedStatusCode hrServerDiag="-2131689331" hrClientDiag="-2131689331" hrSipStatus="-2131689331" hrSipWarning="-2131689331" hrResultCode="-2131689331" hrAggregatedCode="-2131689331"/>
</convErrorMessage>
<convErrorMessage xmlns="http://schemas.microsoft.com/2008/10/sip/convItems" ts="2018-01-09T10:01:00Z" mode="im" action="message" hr="-2131572912">
<extendedStatusCode hrServerDiag="-2131689331" hrClientDiag="-2131689331" hrSipStatus="-2131689331" hrSipWarning="-2131689331" hrResultCode="-2131689331" hrAggregatedCode="-2131572912"/>
<messageInfo type="text/rtf" msgid="{DEA309E7-7398-42E9-907F-03B46587B191}" storyTitle="">{\rtf1\fbidis\ansi\ansicpg1252\deff0\nouicompat\deflang1033{\fonttbl{\f0\fnil\fcharset0 Segoe UI;}{\f1\fnil Segoe UI;}}
{\colortbl ;\red0\green0\blue0;}
{\*\generator Riched20 16.0.8730}\viewkind4\uc1
\pard\cf1\f0\fs20 Heloo\f1\par
{\*\lyncflags<rtf=1>}}
</messageInfo>
</convErrorMessage>
</conversationXml></conversations> ! AdOJMIGPgmFEjcfmQoiwOgacO5hALw== , {D61AE06E-AE36-4B6C-852E-DE73D6DD3552}.hist D sip:test1@domain.com,sip:test2@domain.com @¬Yé0‰Ó
If you can provide any further guidance regarding ports/firewall or services that need to be checked?
The Mention Error Occur if I try to do MEET NOW
However If I try to add 3rd Participant the mention error occur:1 on 1 A/V call occur smoothly internally but issue only occur If Internal Domain User try to add 3rd participant in conference call either external or same domain users then mention issue show
- Edited by Saad9837 Tuesday, January 9, 2018 12:29 PM
-
Hi Erdem,
Thanks for guide the topology is published however now the new issue is at Front End Server while Assign Internal Certificate it show error as mention in snap?
Will you please guide what i need to check?
-
Hi Experts,
Kindly suggest on mention issue since on Front End Server when I try to assign Certificate it show mention error
Previously it works fine but now certificate assignment create problem,I also request a fresh CSR and download certificate from CA but still same error
Please guide
