Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Wednesday, March 21, 2018 9:09 PM
Trying to sort out a particular problem,
Found an issue with our autodiscover URL being used for EWS services for Skype. EWS was failing but autodiscover was working for login and other services. With some testing and sorcery was able to get EWS to work for skype but ran into an odd issue along the way.
Https://autodiscover.domain.com/autodiscover/autodicover.svc - Fails with a 500 error after logging into the site
https://mail.domain.com/autodiscover/autodiscover.svc - successfully accesses the site and redirects you to the services.wsdl page
both names are on the SSL Cert, Autodiscover is a Cname pointing to the Mail.domain.com A record.
In the IIS logs the specific 500 error is 500 0 1346 62.
Server is 2012 R2 with Exchange 2016 Cu2.
wasn't able to find much on the errors and looking for any help or suggestions on this one.
All replies (6)
Wednesday, March 21, 2018 9:39 PM
Hi Kevin,
Can you check in IIS if the SSL settings for the Autodiscover site is set to "Client certificates: ignore"?
Check this link as an example https://support.kemptechnologies.com/hc/en-us/articles/115002311943-ActiveSync-Attachments-Client-Certs
Regards
Simon
If you find that my post has answered your question, please mark it as the answer. If you find my post to be helpful in anyway, please click vote as helpful. Regards Simon Disclaimer: This posting is provided AS IS with no warranties or guarantees, and confers no rights.
Wednesday, March 21, 2018 11:11 PM
Hi Simon,
Client Certs are set to ignore.
Thursday, March 22, 2018 11:52 AM
Hi Kevin,
For Exchange side, the autodiscover URL is similar like below: Https://autodiscover.domain.com/autodiscover/autodicover.xml
Thus, I recommend to browser this URL in IE and test the result, it might be 600 Error it's normal.
Also, run below command to double check the SCP in Exchange PowerShell:
Get-ClientAccessServer | FL *URI*
To configure integrate Exchange Server and Skype for Business Server, we may need to use Set-OAuthConfiguration (in Skype for Business Server) to configure ExchangeAutodiscoverURL before running the New-CSPartnerApplication, for example:
Set-OAuthConfiguration -ExchangeAutodiscoverURL "Https://autodiscover.domain.com/autodiscover/autodicover.svc"
If all works fine, I recommend to run Test-CsExStorageConnectivity with Verbose to check the status of its relationship.
Best Regards,
Allen Wang
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.
Thursday, March 22, 2018 5:10 PM
HI Allen,
See below,
*Https://autodiscover.domain.com/autodiscover/autodicover.xml - This returns a 600 as expected. *
[PS] C:\Windows\system32>Get-ClientAccessServer | FL *URI*
WARNING: The Get-ClientAccessServer cmdlet will be removed in a future version of Exchange. Use the
Get-ClientAccessService cmdlet instead. If you have any scripts that use the Get-ClientAccessServer cmdlet, update them
to use the Get-ClientAccessService cmdlet. For more information, see http://go.microsoft.com/fwlink/p/?LinkId=254711.
AutoDiscoverServiceInternalUri : https://autodiscover.domain.com/Autodiscover/Autodiscover.xml
**Skype Oauth***
Get-CsOAuthConfiguration
Identity : Global
PartnerApplications : {Name=Exchange;ApplicationIdentifier=00000002-0000-0ff1-ce00-000000000000;Real
m=Brakepartsinc.com;ApplicationTrustLevel=Full;AcceptSecurityIdentifierInforma
tion=False;Enabled=True}
OAuthServers : {}
Realm :
ServiceName : 00000004-0000-0ff1-ce00-000000000000
ClientAuthorizationOAuthServerIdentity :
ExchangeAutodiscoverUrl : https://autodiscover.domain.com/autodiscover/autodiscover.svc
ExchangeAutodiscoverAllowedDomains :
***Test-CsExStorageConnectivity***
Test-CsExStorageConnectivity -SipUri:[email protected] -Verbose
VERBOSE: Successfully opened a connection to storage service at localhost using binding: NetNamedPipe.
VERBOSE: Create message.
VERBOSE: Execute Exchange Storage Command.
Test-CsExStorageConnectivity : ExCreateItem exchange operation failed, code=50043,
The error appears to be around not being able to access the https://autodiscover.domain.com/autodiscover/autodiscover.svc,
Saturday, March 24, 2018 6:42 AM
Hi,
Do you get the proper LyncEnterprise-ApplicationAccount in AD by Configure-EnterprisePartnerApplication.ps1 (in Exchange)?
Run "Get-PartnerApplication Lync* | FL" to check "AuthMetadataURL", then browser this URL to check the result.
In Skype for Business server, run "Get-CSPartnerApplication | FL" to check MetadataURL.
Best Regards,
Allen Wang
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.
Monday, April 2, 2018 2:17 PM
Any further help we can do for you?
If it's solved, would you please post the solution here to share it with us? Thanks.
Also, please free to mark the useful reply as answer. Thanks again. :)
Best Regards,
Allen Wang
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.