locked
Communicator does not prompt for credentials RRS feed

  • Question

  • Hi. After installation of a OCS R2 2007 POC environment, we encounted a strange problem. Unlike other deployments we made of OCS 2007 (not R2), Office Communicator does not prompt for credentials when signing in. We can simple change the sign in name between enabled users - we do not have to offer windows credentials. Anyone experieced the same problems?

    We get a ABS error - I think this is due to the needed credentials.

    Friday, June 5, 2009 10:10 PM

All replies

  • Is your new server the same name as an old one by chance? An old one that maybe wasn't deactivated properly? Reason I ask is it sounds very similar to Mike Stacy's post about that situation: http://evangelyze.net/cs/blogs/mike/archive/2009/02/10/communicator-does-not-prompt-for-logon-credentials.aspx

    Friday, June 5, 2009 10:42 PM
  • Hi Tom

    It is a new deployment. I forgot to state that the client is remotely deployed and connecting through TLS and a firewall. It is really strange; ran some network/ip/acl monitoring events, and the client (MOC) only connect to access edge - does never reach the ABS service or anything else.
    Saturday, June 6, 2009 10:31 AM
  • I've seen this twice and both times it was due to an improperly decommissioned server.  Install the windows support tools and run the following command to determine if you are in the same situation:

    If your OCS settings are in the Domain NC:

    ldifde -f trustedservers.txt -d "dc=mydomain,dc=com" -r "(|(objectclass=msrtcsip-trustedservice)(objectclass=msrtcsip-trustedmcu))" -l "msrtcsip-trustedserverfqdn, msrtcsip-trustedservicetype, msrtcsip-trustedmcufqdn, msrtcsip-trustedmcutype" -p subtree

    If your OCS settings are the Config context:

    ldifde -f trustedservers.txt -d "cn=configuration,dc=mydomain,dc=com" -r "(|(objectclass=msrtcsip-trustedservice)(objectclass=msrtcsip-trustedmcu))" -l "msrtcsip-trustedserverfqdn, msrtcsip-trustedservicetype, msrtcsip-trustedmcufqdn, msrtcsip-trustedmcutype" -p subtree

    Change "dc=mydomain,dc=com" to match your domain.  You should only have one entry for your Edge server which looks like this:

    msRTCSIP-TrustedServerFQDN: evan-ocsedge.corp.evangelyze.net
    msRTCSIP-TrustedServiceType: MRAS

    If you see anything else with your Edge server FQDN then that is likely your problem.


    Mike Stacy | Evangelyze Communications | http://www.evangelyze.net/cs/blogs/mike
    Saturday, June 6, 2009 1:26 PM
    Moderator
  • Hi again. Here is the output from the trustedservers.txt file, the config i in the Domain NC.

    -- start --

    dn: CN={2A597107-E4B7-4616-8DE2-68165CABDDF3},CN=Trusted MCUs,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedMCUFQDN: ocsfe01.contosohosting.net

    dn: CN={71F7FF6A-5995-4A8D-B960-35AD64A2AFA8},CN=Trusted MCUs,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedMCUFQDN: ocsfe01.contosohosting.net

    dn: CN={FD7BFEB5-F06E-4ABD-BE1A-919EA7E98F79},CN=Trusted MCUs,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedMCUFQDN: ocsfe01.contosohosting.net

    dn: CN={921D5C38-0028-4311-A84E-395384A1D206},CN=Trusted MCUs,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedMCUFQDN: ocsfe01.contosohosting.net

    dn: CN={5B27BD6A-658B-4863-9E0E-DB2B9A059F69},CN=Trusted MCUs,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedMCUFQDN: ocsfe01.contosohosting.net

    dn: CN={9BE040AD-1C54-4FBD-BB5E-38B4A22A861E},CN=Trusted MCUs,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedMCUFQDN: ocsapp01.contosohosting.net

    dn: CN={92C821FD-4305-44B3-A730-BB717DD0E9F0},CN=Trusted MCUs,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedMCUFQDN: ocsapp01.contosohosting.net

    dn: CN={BC01DB4B-0769-4CF1-B74D-CE46AAAA1271},CN=Trusted MCUs,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedMCUFQDN: ocsapp01.contosohosting.net

    dn: CN={8F687B52-5163-462A-B7B3-6C8BB86563A3},CN=Trusted MCUs,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedMCUFQDN: ocsapp01.contosohosting.net

    dn: CN={6E066C90-B7BD-4C14-8FFD-FD97A096570B},CN=Trusted MCUs,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedMCUFQDN: ocsapp01.contosohosting.net

    dn: CN={4606BF09-6B58-416A-9DCB-A496ED9F32AF},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocs01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Caa

    dn: CN={403A5655-E15A-48E0-B550-CB8F83D32A58},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocsfe01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Caa

    dn: CN={52039611-5AF5-400D-BED9-D070BF33A346},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocs01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Cas

    dn: CN={64761D97-FFFF-46DB-B06D-ED1375ECBFF9},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocsfe01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Cas

    dn: CN={212BA2A0-3AE5-4FFD-B9EC-4BE8E63B8603},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocs01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Acd

    dn: CN={531D1D3F-26C8-4461-B726-B4721465C1BE},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocsfe01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Acd

    dn: CN={6631F981-8029-435C-AD5D-4F517369C88D},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocs01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Ccs

    dn: CN={B8AC3492-2993-4665-8404-08D8A1D85BD5},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocsfe01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Ccs

    dn: CN={9B57486F-B573-46C5-8023-9926471D0A66},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocs01.contosohosting.net
    msRTCSIP-TrustedServiceType: QoS

    dn: CN={A2586D7D-F8A5-44E6-B5C6-C2786FC0E1C8},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocsapp01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Caa

    dn: CN={51213453-9997-4261-A766-71392D6656D6},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocsapp01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Cas

    dn: CN={50B4F672-8010-470B-AFFE-17027E4CE8BF},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocsapp01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Acd

    dn: CN={A81CAC5F-5F61-4ECA-BE23-1419404BA703},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocsapp01.contosohosting.net
    msRTCSIP-TrustedServiceType: Microsoft.Rtc.Applications.Ccs

    dn: CN={479B0DD7-7E96-465B-8D8C-E1C54E2CD003},CN=Trusted Services,CN=RTC Service,CN=Microsoft,CN=System,DC=contosohosting,DC=net
    changetype: add
    msRTCSIP-TrustedServerFQDN: ocefe01.contosohosting.net
    msRTCSIP-TrustedServiceType: MRAS

    -- end --

    Should I then delete all records with ocsfe01 - not including the last one ?

    Regards

    Saturday, June 6, 2009 2:23 PM
  • Only the Edge server should have an MRAS entry, so if fe01 is an Edge then you should delete all the other entries associated with it.  There will be other lingering items in your active directory environment but this should at least fix your logon issue.  Make sure you same this export file so you can recreate the objects if necessary.  A system state backup of one of your DCs might also be a good idea.
    Mike Stacy | Evangelyze Communications | http://www.evangelyze.net/cs/blogs/mike
    Saturday, June 6, 2009 5:18 PM
    Moderator