none
Lync Client 14.0.x Logs off Lync Server unexpectedly

    Question

  • We are running into a communication problem with Mac Lync clients.  All Windows Lync clients function properly.  If I run a Windows virtual machine inside the Mac, and run the Windows Lync client, there are no connectivity issues.

    We are seeing this on all Mac clients, OSX versions 10.6 and 10.7.  The behaviors occurs on wired and wireless connections, internal and external connections.  The Lync client signs in, I can see the presence information for Lync contacts.  Within one minute the Lync client goes blank without warning.  Here is what pops up in the log file when the client disconnects:

    2011/12/22 10:46:04.316 [o365] acquire credentials handle.

    2011/12/22 10:46:04.316 [o365] query security package info.

    2011/12/22 10:46:04.316 [o365] initialize security context.

    2011/12/22 10:46:04.316 [o365] constructing client_hello, waiting server_certificate.

    2011/12/22 10:46:04.328 [o365] initialize security context.

    2011/12/22 10:46:04.328 [o365] processing server_certificate.

    2011/12/22 10:46:04.328 [o365] invalid input token

    2011/12/22 10:46:04.328 [o365] process server certificate from input token failed

    2011/12/22 10:46:04.328 [o365] free credentials.

    2011/12/22 10:46:04.328 [o365] delete security context.

    2011/12/22 10:46:04.331 [o365] acquire credentials handle.

    2011/12/22 10:46:04.331 [o365] query security package info.

    2011/12/22 10:46:04.331 [o365] initialize security context.

    2011/12/22 10:46:04.331 [o365] constructing client_hello, waiting server_certificate.

    2011/12/22 10:46:04.342 [o365] initialize security context.

    2011/12/22 10:46:04.342 [o365] processing server_certificate.

    2011/12/22 10:46:04.343 [o365] invalid input token

    2011/12/22 10:46:04.343 [o365] process server certificate from input token failed

    2011/12/22 10:46:04.343 [o365] free credentials.

    2011/12/22 10:46:04.343 [o365] delete security context.

    2011/12/22 10:46:04.361 SIPService::OnEvent(NModel::ILogonSessionEvent), hr: 0x80ef0191, oldState: 30, newState: 10, direction: 1

    2011/12/22 10:46:04.362 void SIPService::OnLogoffResult(HRESULT), hr: 0x80ef0191

    2011/12/22 10:46:04.691  Office Communications Server LOGOFF ENDED:  USER = {qsi\jregan}

    2011/12/22 10:46:04.691 void SIPService::LogoffEx()

    2011/12/22 10:46:04.692 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.692 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.693 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.693 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.693 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.693 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.694 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.694 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.694 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.694 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.694 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.695 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.695 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.695 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.796 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.797 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.797 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.797 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.797 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:04.797 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0

    2011/12/22 10:46:05.041 SIPService::OnEvent(IApplicationLayerEvent &), type: 2, HasSignedIn(): 0, HasSignedOut: 0

    We're thinking there is a certificate problem, but the CA cert is installed in the X509Anchors keychain. 

    HELP!!!!

    Thursday, December 22, 2011 4:39 PM

All replies

  • Hi,Thomas,

    Have you checked this KB article below?

    http://support.microsoft.com/kb/2623821

    Hope the solution in it does the trick.

    Regards,


    Sharon Shen

    TechNet Community Support

    ******************************************************************************************************************************************************* Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community memb
    Monday, December 26, 2011 5:09 AM
    Moderator
  • Hi Sharon,

    Thank you for your reply, but this article does not describe the problem we are experiencing.  Also, the update specified applies to Windows machines, not Macs.

    Tom

    Tuesday, January 3, 2012 12:30 PM
  • I should have been more specific in my original post.  Here is the behavior we are seeing on Mac clients:

    The client logs on, contacts and presence information appear.

    If the user is fast, he or she can IM other users for a brief time.

    Within one to two minutes, the Lync client disconnects and returns to the logon screen (not a "blank" screen)

    I apologize for the confusion.  Since my Mac users are all high-profile users, I need to get this fixed - ASAP!

    Thanks,

    Tom

    Tuesday, January 3, 2012 1:33 PM
  • Hi Thomas,

    Some of my MAC clients are having the same issue, and some aren't.  What version of Lync 2011 are you running?  Are you running the version 14.0.1 or 14.0.0 (110823) ?

    Tuesday, January 3, 2012 5:17 PM
  • We've tried both versions.  Both versions behave the same.

     

    HTH,

    Tom

    Tuesday, January 3, 2012 5:50 PM
  • Hey Tom,

     

    Just curious is the SIP user address the same as the email address for the users having problems?

    Tuesday, January 3, 2012 11:40 PM
  • Yes, the sip address is the same as the email address for all users in the organization.

     

    Tom

    Wednesday, January 4, 2012 2:28 PM
  • Just a note I have gotten reports of the same issue with the Mac Lync client.  It seems to have started after setting up the Lync Mobility Service...
    Wednesday, January 4, 2012 4:19 PM
  • Hi Michael,

    Thanks for the input.  We have not deployed the mobility service yet, and won't, until this problem is solved!

    Tom

    Wednesday, January 4, 2012 4:34 PM
  • Hey Tom,

    I haven't installed the mobility service yet either.  I have opened a ticket with Microsoft.  Sent logs from the edge server and client having problems.  I will let you know if I find a resolution.

    Wednesday, January 4, 2012 9:01 PM
  • Any updates on this issue?  My Mac users have just about given up on Lync!

    Tuesday, January 17, 2012 4:38 PM
  • Hello Thomas,

    I just tried a temporary fix which seemed to resolve the issue:

    Open Lync Control Panel click on security and in the right pane we can find the authentication methods
    Double click on the global setting so that we can edit that.

    uncheck the Enable Certificate Authentication. Commit the changes.

    Everyone has to log off I found to be able to send messages... But the MAC clients now stay online.

    Tuesday, January 17, 2012 9:52 PM
  • Thanks for the suggestion.  Unfortunately, our clients exhibit the same behavior as before.
    Thursday, January 19, 2012 8:20 PM
  • Hello Thomas,

    Do the MAC clients have any expired root certs?  Also we deleted the "unknown" certs from the MAC clients.

    Lastly I just installed CU4.  http://support.microsoft.com/kb/2493736

    Friday, January 20, 2012 2:43 PM
  • I re-enabled cert authentication after CU4 update on the MAC clients seem to be ok now. 
    Friday, January 20, 2012 8:27 PM
  • We're having similar issues.  Haven't had much luck tracking down the root cause.  One thing to not is that it isn't happening to all of our Macs, only a handful.  But the issue also seems to be happening with our external VoIP phones.
    Tuesday, January 24, 2012 1:06 AM
  • Just a note I have gotten reports of the same issue with the Mac Lync client.  It seems to have started after setting up the Lync Mobility Service...

    I've had the exact same problem. Lync for Mac 14.0.1 was working fine until I deployed Mobility. 

    Now Macs that have the MAC 2012-01 OS Patch disconnect after 1 minute.  Macs without the January 2012 OS patch work fine.

    Edit: MAC OS 10.7.2 works - stays logged in, 10.7.3 fails - disconnects after 1 minute.

    Ok it must be something with my on-prem setup because this same setup works fine on 10.7.3 with office 365 Lync.

    • Edited by alifambler Friday, February 24, 2012 10:30 PM
    Friday, February 24, 2012 7:47 PM
  • Hello all;

    i have  the same issue; this happens only for my Macintosh machines; they disconect after 2 minutes, and the user have to connect aigain.

    The operating systems on those Macintosh are 10.6 , 10.7 and 10.8 respectively, and i'm on Office365.

    If you have an answer, share with us.

    Friday, March 2, 2012 5:46 PM
  • For me the issue was that the properties in the root certs of the certs I was using (Thawte / GoDaddy) reverted to 'use only for the following purposes'.  I had to edit the certificate settings and 'enable for all purposes'  I've had to do this multiple times and it has reverted on me and caused problems a couple of times as well....

    Now it is one of the first things I look at.

    More info about this and a possible fix to prevent them from reverting.

    http://www.linkedin.com/groups/Lync-Certificate-Third-Party-Enable-3411197.S.53871863?qid=9ecb1ba5-767f-4fca-9ade-4e966ccf9d0d

    I've had to do this on ALL my lync servers, including the reverse proxy. (ON-PREM setup - probably won't apply to office 365 setups)

    This fixed my Mac Client disconnecting after 1 minute issue. 

    One more thing if you are at the end of your rope is to open a paid support incident. I've had to do a few and the UC Support team at MS is very good!

    Monday, March 12, 2012 9:06 PM