• ×
    Information
    Windows update impacting certain printer icons and names. Microsoft is working on a solution.
    Click here to learn more
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
  • ×
    Information
    Windows update impacting certain printer icons and names. Microsoft is working on a solution.
    Click here to learn more
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
Guidelines
The HP Community is where owners of HP products, like you, volunteer to help each other find solutions.
HP Recommended

I setup a new DC last week on Server 2016 as the PDC, DHCP, all FSMO roles. We had an existing 2008 that was still running and everything was OK. We had some compatability issues with one of our replication programs so I setup a 2012 DC. Moved all FSMO roles over, DHCP. Everything in our environment seems to be working well, except our Phones. Can't login it says that Skype for Business Authentication has failed. Users that were signed in before the new DC are still able to use their phones. We are on Skype for business. I have 2 DC's, the new 2012R2 and the old 2008R2. 

 

Logs for signing in are as follows: I've changed my username to user and our domain name to ourdomain.

 

0213135833|so |4|00|[soRegistrationC] Login Credentials valid causing SoRegEventLine Changed
0213135833|brow |4|00|CWebLayoutMgr::handleProxyConfiguration Enter

0213135833|brow |4|00|CWebLayoutMgr::handleProxyConfiguration Default

0213135833|brow |4|00|CWebLayoutMgr::handleProxyConfiguration Exit

0213135835|app1 |*|00|SoRegistrationEventLineChanged - success lineIndex 0 RegListSize 0
0213135835|app1 |5|00|AppPhoneLockC::Init - bPhoneLockState [0]
0213135835|app1 |*|00|SoRegistrationEventLast - new AppRegLineC, szUser = user@ourdomain.com
0213135835|so |4|00|[SoNcasC]: appncascontext termination:1
0213135835|so |4|00|[SoNcasC]: Case Handling termination:1
0213135835|app1 |5|00|AppPhoneLockC::Init - bPhoneLockState [0]
0213135835|cfg |4|00|RT|pps is setting Login Credentials to valid
0213135835|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7
0213135835|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7
0213135835|auth |4|00|Failed to parse NI response
0213135835|auth |4|00|Retry Cnt[0] pHD(139)AuthServiceCallerWbad
https://skype.ourdomain.com/WebTicket/WebTicketService.svc


https://skype.ourdomain.com/WebTicket/WebTicketService.svc/cert
https://skype.ourdomain.com/WebTicket/WebTicketService.svc/pin

 


https://skype.ourdomain.com/WebTicket/WebTicketService.svc

 


0213135835|wad |4|00|Not able to get WT from Auth Service

0213135835|sip |*|00|Sip Register Usr:user@ourdomain.com Dsp:user Auth:'Using Login Cred' Inx:0
0213135835|utilm|4|00|uBLFUnCompressed: File /ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty
0213135839|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'ourdomain.com' found no records
0213135839|sip |4|00|doDnsListLookup(tls): doDnsSrvLookupForARecordList 'ourdomain.com' found no records
0213135839|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'ourdomain.com' found no records
0213135839|utilm|4|00|uBLFUnCompressed: File /ffs0/Config/Local/WebTicket/0/private.key doesn't exist or is empty
0213135839|utilm|4|00|uBLFUnCompressed: File /ffs0/Config/Local/WebTicket/0/private.key doesn't exist or is empty
0213135839|sip |4|00|CTcpSocket::Abandon - TLS Listen Thread has exited. Process further to abandon this socket
0213135839|sip |4|00|CTcpSocket::Abandon connected socket. Send Message 0xb62024c8
0213135839|cfg |4|00|RT|SIP is setting Login Credentials to invalid
0213135839|so |4|00|[soRegistrationC] Login Credentials invalid causing SoRegEventLine Deleted
0213135839|sip |4|00|Registration failed User: keiths, Error Code:480 Temporarily not available
0213135839|sip |5|00|SSL_get_error nLen 0 errno 0 nError 5 = (0)error:00000000:lib(0):func(0):reason(0)
0213135839|sip |4|00|TLS Listen Thread Exit
0213135839|brow |4|00|CWebLayoutMgr::handleProxyConfiguration Enter

0213135839|brow |4|00|CWebLayoutMgr::handleProxyConfiguration Default

0213135839|brow |4|00|CWebLayoutMgr::handleProxyConfiguration Exit

 

4 REPLIES 4
HP Recommended

Hello @ScottSVFD,

welcome to the Polycom Community.

It is always useful to include the currently used UC Software version as issues experienced or a question asked may already be addressed in a newer release.

Please also include what type of Polycom Phone model you are actually using.


This also allows yourself and others to check against current software release notes, Administrator Guides or FAQ post’s.

The above is also stated in the "Must Read First" and is the absolute minimum requirement every new post should include. .

In addition providing us with this basic information gives Polycom an idea what Software Versions are used in the field and avoids wasting time trying to troubleshoot issues which have already been addressed.

Therefore the Polycom VoIP FAQ contains this post here:

Question: How can I find out my SIP or UC Software Version of my Phone?
Resolution: Please check here

 

To your actual issue:

 

0213135835|auth |4|00|Failed to parse NI response

and

0213135835|wad |4|00|Not able to get WT from Auth Service

I assume something in your network is wrong but as the logs are in standard logging we will not be able to help you.

 

The community's Skype for Business FAQ contains:

 

Jan 17, 2017 Question:How can I troubleshoot simple Skype for Business, LYNC or Office365 issues?

Resolution: Have a look => here <=


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN
HP Recommended

Thanks for the response. I have a Polycom VVX 501 running UC Version 5.6.0.17325.

 

I've  uploaded new logs that had the settings recommended in the troubleshooting guide. Looks like maybe a certificate issue, but it's not clear to me from the logs.

 

Scott

 

 

HP Recommended

Hello @ScottSVFD,

Based on the logs I checked internally and found I had a similar case in the past.

 

Could you create a configuration file and import this via the web Interface:

 

<test sec.TLS.profile.1.cipherSuite="ALL:!aNULL:!eNULL:!DSS:!SEED:!ECDSA:!IDEA:!MEDIUM:!LOW:!EXP:!ADH:!PSK:!MD5:!RC4:@STRENGTH"
		sec.TLS.profile.1.cipherSuiteDefault="0"/>


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN
HP Recommended

Steffan,

 

Looks like we've got the problem resolved. We had the old DC still in some of the DNS SRV records. We removed those and people were able to sign back into their phones. I'm not 100% convinced that's what actually did it, but we are working now.

† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the <a href="https://www8.hp.com/us/en/terms-of-use.html" class="udrlinesmall">Terms of Use</a> and <a href="/t5/custom/page/page-id/hp.rulespage" class="udrlinesmall"> Rules of Participation</a>.