היי,
הגדרתי מחדש את ה-certificate והוספתי ל-SAN את הדומיינים הפנימיים כולל את ה-lyncdiscoverinternal.
בדקתי הגדרות DNS כפי שביקשתם כולל גם את ה-CNAME
בדקתי בכלי של Lync Connectivity Analyzer והודעת השגיאה מהלוג היא:
[09/06/2014 16:34:30] Cleared the log file
[09/06/2014 16:34:34] [DEBUG] Logging test parameters:
[09/06/2014 16:34:34] [DEBUG] SIP Uri: eran@test.local
[09/06/2014 16:34:34] [DEBUG] User Name:
[09/06/2014 16:34:34] [DEBUG] Discovery Type: Manual Discovery
[09/06/2014 16:34:34] [DEBUG] Server FQDN: consoletech3.test.local
[09/06/2014 16:34:34] [DEBUG] Network access: NetworkAccessInternal
[09/06/2014 16:34:34] [DEBUG] Selected client: ApplicationLyncMobile2013
[09/06/2014 16:34:34] [SUBHEADING] Starting manual Lync server discovery
[09/06/2014 16:34:34] [INFO] Please wait; this test may take several minutes to complete...
[09/06/2014 16:34:34] [SUBHEADING] Starting server discovery for secure (HTTPS) channel
[09/06/2014 16:34:34] [INFO] Server discovery started for https://consoletech3.test.local/Autodiscover/AutodiscoverService.svc/root
[09/06/2014 16:34:34] [DEBUG] Sending HTTP request to https://consoletech3.test.local/Autodiscover/AutodiscoverService.svc/root?sipuri=eran@test.local
[09/06/2014 16:34:34] [DEBUG] Exception encountered while sending an HTTP request to https://consoletech3.test.local/Autodiscover/AutodiscoverService.svc/root?sipuri=eran@test.local: An error occurred while sending the request.. Complete Exception: \r\nSystem.Net.Http.HttpRequestException:
An error occurred while sending the request. ---> System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote
certificate is invalid according to the validation procedure.
at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult)
at System.Net.PooledStream.EndWrite(IAsyncResult asyncResult)
at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)
--- End of inner exception stack trace ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<SendHttpRequest>d__9.MoveNext()
[09/06/2014 16:34:34] [ERROR] An error occurred while sending the request.
The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
The remote certificate is invalid according to the validation procedure.
[09/06/2014 16:34:34] [INFO] For troubleshooting, try using a browser to open the server discovery URL https://consoletech3.test.local/Autodiscover/AutodiscoverService.svc/root?sipuri=eran@test.local
[09/06/2014 16:34:34] [DEBUG] System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. --->
System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult)
at System.Net.PooledStream.EndWrite(IAsyncResult asyncResult)
at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)
--- End of inner exception stack trace ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<SendHttpRequest>d__9.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<SendRequest>d__d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<TryNextUrl>d__3.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.LyncServer.WebServices.AutoDiscoverManager.<StartDiscoveryJourney>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at LyncConnectivityAnalyzerCore.Utilities.<RetrieveUserLocation>d__3e.MoveNext()
[09/06/2014 16:34:34] [INFO] Total server discovery time: 0.1 seconds
[09/06/2014 16:34:34] [SUMMARY_ERROR] Server discovery failed for secured channel against https://consoletech3.test.local/Autodiscover/AutodiscoverService.svc/root
[09/06/2014 16:34:34] [INFO] Server discovery ended for https://consoletech3.test.local/Autodiscover/AutodiscoverService.svc/root
[09/06/2014 16:34:34] [DEBUG] None, AutoInternalDNSFail, AutoExternalDNSFail, AutoInternalSecureD, AutoInternalUnsecureD, AutoExternalSecureD, AutoExternalUnsecureD, ManualSecureD, ManualUnsecureD, AuthBrokerInternalLMXCheckGET, AuthBrokerInternalLMXCheckPOST,
AuthBrokerExternalLMXCheckGET, AuthBrokerExternalLMXCheckPOST, MobilityMCXInternalLMXCheckGET, MobilityMCXInternalLMXCheckPOST, MobilityMCXExternalLMXCheckGET, MobilityMCXExternalLMXCheckPOST, LMXSIPServerInternalDNS, LMXSIPServerExternalDNS, MobilityUCWAInternalCheckPOST,
MobilityUCWAExternalCheckPOST
[09/06/2014 16:34:34] [SUMMARY]
[09/06/2014 16:34:34] [SUMMARY_ERROR] The remote certificate downloaded from https://consoletech3.test.local/Autodiscover/AutodiscoverService.svc/root?sipuri=eran@test.local is not valid. Please verify the Lync server certificate requirements at http://support.microsoft.com/kb/2667698.
If the certificate on your Lync server is configured correctly, verify that your load balancer or SSL gateway meets the certificate requirements. For further details refer to the Certificate Requirements section at http://go.microsoft.com/fwlink/?LinkId=278998
.
[09/06/2014 16:34:34] [SUMMARY_ERROR]
Microsoft Lync Connectivity Analyzer cannot analyze deployment readiness until a discovery test has completed successfully.
אשמח לעזרה בעניין.
תודה,
ערן
