RE: LCS 2005 SP1 project
- From: v-crinal@xxxxxxxxxxxxxxxxxxxx ("Crina Li")
- Date: Tue, 04 Apr 2006 09:31:36 GMT
Hi Robert,
Thank you for posting in SBS newsgroup.
From the description, do you mean you are able to connect to LCS frominternal clients, also you can connect to the Communicator Web Access
website from external clients. However logins fail with "The session was
ended. Communicator Web Access Server cannot log the user on to the Live
Communications Server. (Error Code: 1)" when you access it from external
clients?
To narrow down the problem, would you please help me collect the following
information?
1. Are you using ISA 2000 or ISA 2004?
2. Can you access Communicator Web Access website from internal clients?
3.Can you attach a screen shot to newsgroup?
4. Please also help me collect the ISA log:
For ISA 2000:
1) Open ISA Management, and then point to Monitoring Configuration | Logs
2) Double click ISA Server Firewall Service in the right pane, click to
select Enable Logging for this service, click Fields tab, click Select All,
and then click OK.
3) Please repeat Step 2) to enable logging IP Packet Filter and Web Proxy
Services.
4) Run command "net stop isactrl" (without the quotation marks) to stop all
ISA Services.
5) Backup all files in the folder C:\Program Files\Microsoft ISA
Server\ISALogs, and then delete them.
6) In ISA Management | <server name> | Monitoring | Services, start all ISA
services.
7) Reproduce the issue.
8) Wait for about 3 minutes, and then send that day¡¯s firewall, web proxy
and IP Packet filter log below in C:\Program Files\Microsoft ISA
Server\ISALogs to me:
Firewall log: FWSEXTDyyyymmdd.log
Web Proxy log: WEBEXTDyyyymmdd.log
IP Packet Filter log: IPPEXTDyyyymmdd.log
9) Please also let me know the IP address of the testing client so that I
can filter the data.
For ISA 2004:
1) Schedule a down time.
2) Open ISA 2004 management console.
3) Expand the server node and highlight 'Monitoring'.
4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.
5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.
6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.
8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
9) Click 'Apply' to save changes and update the configuration.
10) Temporarily disable the Firewall service. To do that, please click
Monitoring | Services tab, and then right click 'Microsoft Firewall' to
choose 'Stop'.
11) Clear the current existing W3C logs. To do that, go to the log saving
directory and clean any existing .W3C logs. By default, the logs will be
saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
be able to deleted, that's normal.) You may backup them first and then
delete them.
12) Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.
13) Reproduce the problem (initiate an SQL access), stop the service, and
then gather the resulting W3C files to me for analysis.
More information:
875420 How to enable Live Communication Server traffic through ISA Server
2000
http://support.microsoft.com/default.aspx?scid=kb;EN-US;875420
Please feel free to let me know if there is anything I can do for you.
Best regards,
Crina Li (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Robert Byrne" <Robert@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: LCS 2005 SP1 project
| Date: Mon, 3 Apr 2006 12:18:49 -0500
| Newsgroups: microsoft.public.windows.server.sbs
|
|
| Hello All,
|
| I have an SBS2003 Premium server with LCS 2005 SP1 installed, without an
| Access Proxy. I am able to connect to LCS with Windows Messenger 5.1
from
| internal clients. I am able to connect to the Communicator Web Access
| website from external clients, however logins fail with "The session was
| ended. Communicator Web Access Server cannot log the user on to the Live
| Communications Server. (Error Code: 1)." I've downloaded the Resource
Kit
| and run the LCSping.exe, and the LCSCheck.exe with success and the
| LCSDiag.exe with success. However I do receive one error on the
LCSDiag.exe
| tool,
|
| DNS resolve failed -- Fail to resolve [odyssey2006.ocg.local] server fqdn
| The requested name is valid, but no data
of
| the requested type was found.
| Check the server name for a typo or make
| sure the DNS server or host file ar properly configured.
|
| What should the configuration be?
|
|
| I've also run the LCSMon.exe tool with the following results, I don't see
a
| RtcSrv in the services snap-in to verify username and logon privleges.
|
| Error Event - 30710 - Server Snap-in
| Live Communications Server Snap-in failed to start service:
| Service Name = RtcSrv
| Machine Name = odyssey2006.ocg.local
| HRESULT = 8007042d
| Error Description = The service did not start due to a logon failure.
|
| TL_ERROR 384.cpp(370) CSIPRouter::Execute (SIPStack)
| Routing operation failed Returned
| C3ED180F(SIPPROXY_E_CONTACT_NOT_AUTHORIZED
| )
| TL_ERROR 266.cpp(619) DispatchMessageCallback::Callback (SIPStack)
| SIP request message processing failed. message [07094F08] id [338].
| Returned
| C3ED180F(SIPPROXY_E_CONTACT_NOT_AUTHORIZED)
| TL_ERROR 167.cpp(226) CRecvContext::Process (SIPStack)
| Exit, Parsing/receive failure Returned HRESULT=80004005
|
| Where to go from here?
|
| I posted in this newsgroup also because ISA is a breed of its own, the
only
| log entries show the connection to the SSL port for communicator login,
then
| the attemp to log into the LCS Server on port 5061 then I get an
| Unidentified IP Traffic Protocol denied entry. Do I need to set up a
| separate protocol and corresponding access rule for TLS
|
| Robert
|
|
|
.
- References:
- LCS 2005 SP1 project
- From: Robert Byrne
- LCS 2005 SP1 project
- Prev by Date: RE: permission to upload using HTTP
- Next by Date: RE: Manual VPN works...Connect to SBS doesn't
- Previous by thread: LCS 2005 SP1 project
- Next by thread: Re: Hidden files in Exchange
- Index(es):
Relevant Pages
|
