Hi,
Trio running 5.5.2.11217.
When signing in with a user account we get invalid username or password.
Siging in with the same account in a Skype For Business client on a laptop works without any problem.
No firewall blocking trafic.
The logs (i replaced our domain with contoso.com):
0223062623|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty 0223062623|AuthS|4|00|Number Of Controllers=0 0223062623|cfg |4|00|RT|pps is setting Login Credentials to valid 0223062623|WADSe|4|00|parseAndSaveRequiredInfo()- Response received is less than 32 bytes 0223062623|WADSe|4|00|parseAndSaveRequiredInfo()- Response received is less than 32 bytes 0223062624|sip |4|00|CTcpSocket::Abandon - TLS Listen Thread has exited. Process further to abandon this socket 0223062624|sip |4|00|CTcpSocket::Abandon connected socket. Send Message 0x41352388 0223062624|sip |4|00|SSL_get_error Error code=5,rc(0) 0223062624|sip |4|00|TLS Listen Thread Exit 0223062625|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/private.key doesn't exist or is empty 0223062625|sip |4|00|CTrans::~CTrans still holding Login Cred. Released as valid 0223062625|cfg |4|00|RT|SIP is setting Login Credentials to valid 0223062628|sip |*|00|User removed 0223062628|sip |4|00|CTcpSocket::Abandon - TLS Listen Thread has exited. Process further to abandon this socket 0223062628|sip |4|00|CTcpSocket::Abandon connected socket. Send Message 0x41354a08 0223062628|sip |4|00|CTcpSocket::Abandon - TLS Listen Thread has exited. Process further to abandon this socket 0223062628|sip |4|00|CTcpSocket::Abandon connected socket. Send Message 0x41354f28 0223062628|sip |4|00|SSL_get_error Error code=5,rc(0) 0223062628|sip |4|00|TLS Listen Thread Exit 0223062628|sip |4|00|SSL_get_error Error code=5,rc(0) 0223062628|sip |4|00|TLS Listen Thread Exit 0223062630|AuthS|4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[1] m_RetVal[0] curlReturn[0] HttpRspCode[200] csStrippedResponse[{"ver":"1.0","account_type":"Managed","domain_name":"contoso.com","cloud_instance_name":"microsoftonline.com","cloud_audience_urn":"urn:federation:MicrosoftOnline"}] 0223062630|AuthS|4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[1] m_RetVal[0] curlReturn[0] HttpRspCode[200] csStrippedResponse[{"ver":"1.0","account_type":"Managed","domain_name":"contoso.com","cloud_instance_name":"microsoftonline.com","cloud_audience_urn":"urn:federation:MicrosoftOnline"}] 0223062631|copy |4|00|Configuration of URL failed 0223062631|cfg |4|00|Prov|Could not download file 0004f2fe676e-web.cfg 0223062631|cfg |4|00|Prov|Uploading phoneWeb.cfg failed 0223062631|cfg |4|00|Prov|Update configuration failed 0223062632|AuthS|4|00|m_RetVal[-1] eReqRspID[2] 0223062632|AuthS|4|00|parseOAuth2ErrorCodeDetails: csErrorCode[invalid_grant] csErrorDescription[AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password Trace ID: 79e6746b-17a7-4e1a-9cc9-343510c10500 Correlation ID: 80ad4998-c885-41be-9a69-5b2262fbcad4 Timestamp: 2018-02-23 09:26:30Z] csErrorTimeStamp[2018-02-23 09:26:30Z] csTraceId[79e6746b-17a7-4e1a-9cc9-343510c10500] csCorrId[80ad4998-c885-41be-9a69-5b2262fbcad4] m_lRspErrorCode[401] 0223062632|AuthS|4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[2] m_RetVal[-1] curlReturn[0] HttpRspCode[401] csStrippedResponse[{"error":"invalid_grant","error_description":"AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password\r\nTrace ID: 79e6746b-17a7-4e1a-9cc9-343510c10500\r\nCorrelation ID: 80ad4998-c885-41be-9a69-5b2262fbcad4\r\nTimestamp: 2018-02-23 09:26:30Z","error_codes":[70002,50126],"timestamp":"2018-02-23 09:26:30Z","trace_id":"79e6746 0223062632|AuthS|4|00|[void COAuth2SmCtxt::printNIResponse(std::string)]:[1552] HttpResponse[{"error":"invalid_grant","error_description":"AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password\r\nTrace ID: 79e6746b-17a7-4e1a-9cc9-343510c10500\r\nCorrelation ID: 80ad4998-c885-41be-9a69-5b2262fbcad4\r\nTimestamp: 2018-02-23 09:26:30Z","error_codes":[70002,50126],"timestamp":"2018-02-23 09:26:30Z","trace_id":"79e6746b-17a7-4e1a-9cc9-343510c10500","correlation_i] 0223062632|AuthS|4|00|[void COAuth2SmCtxt::printNIResponse(std::string)]:[1552] HttpResponse[d":"80ad4998-c885-41be-9a69-5b2262fbcad4"}] 0223062632|AuthS|4|00|pHD(141)AuthServiceCallerWbad https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc/cert https://login.windows.net/common/oauth2/authorize https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc/OAuth https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc https://login.windows.net/common/oauth2/authorize http://nexus.microsoftonline-p.com/federationmetadata/2006-12/FederationMetaData.xml 0223062632|AuthS|4|00|AuthSvc SOAuth2Error, BaseEventInit restart[0] SfbTokenFetchMethod[3] 0223062632|WADSe|4|00|Not able to get WT from Auth Service 0223062632|sip |*|00|Sip Register Usr:done.peter@contoso.com Dsp:done.peter Auth:'Using Login Cred' Inx:0 0223062632|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty 0223062632|cfg |4|00|Prov|[CfgLyncSipSrvDiscover::cbFoundOption] Invalid STS-URI: '://:' 0223062634|AuthS|4|00|m_RetVal[-1] eReqRspID[2] 0223062634|AuthS|4|00|parseOAuth2ErrorCodeDetails: csErrorCode[invalid_grant] csErrorDescription[AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password Trace ID: e756d8a9-73e9-4f06-be37-4f99b81c0700 Correlation ID: 48b7197d-bc9c-46fb-863c-1bc342391db5 Timestamp: 2018-02-23 09:26:32Z] csErrorTimeStamp[2018-02-23 09:26:32Z] csTraceId[e756d8a9-73e9-4f06-be37-4f99b81c0700] csCorrId[48b7197d-bc9c-46fb-863c-1bc342391db5] m_lRspErrorCode[401] 0223062634|AuthS|4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[2] m_RetVal[-1] curlReturn[0] HttpRspCode[401] csStrippedResponse[{"error":"invalid_grant","error_description":"AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password\r\nTrace ID: e756d8a9-73e9-4f06-be37-4f99b81c0700\r\nCorrelation ID: 48b7197d-bc9c-46fb-863c-1bc342391db5\r\nTimestamp: 2018-02-23 09:26:32Z","error_codes":[70002,50126],"timestamp":"2018-02-23 09:26:32Z","trace_id":"e756d8a 0223062634|AuthS|4|00|[void COAuth2SmCtxt::printNIResponse(std::string)]:[1552] HttpResponse[{"error":"invalid_grant","error_description":"AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password\r\nTrace ID: e756d8a9-73e9-4f06-be37-4f99b81c0700\r\nCorrelation ID: 48b7197d-bc9c-46fb-863c-1bc342391db5\r\nTimestamp: 2018-02-23 09:26:32Z","error_codes":[70002,50126],"timestamp":"2018-02-23 09:26:32Z","trace_id":"e756d8a9-73e9-4f06-be37-4f99b81c0700","correlation_i] 0223062634|AuthS|4|00|[void COAuth2SmCtxt::printNIResponse(std::string)]:[1552] HttpResponse[d":"48b7197d-bc9c-46fb-863c-1bc342391db5"}] 0223062634|AuthS|4|00|pHD(-1) https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc https://webdir0e.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1 https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc/cert https://login.windows.net/common/oauth2/authorize https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc/OAuth https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc https://login.windows.net/common/oauth2/authorize http://nexus.microsoftonline- 0223062634|AuthS|4|00|AuthSvc SOAuth2Error, BaseEventInit restart[0] SfbTokenFetchMethod[3] 0223062635|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'contoso.com' found no records 0223062635|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'contoso.com' found no records 0223062635|sip |4|00|doDnsListLookup(tcp): doDnsSrvLookupForARecordList 'contoso.com' found no records 0223062635|sip |4|00|doDnsListLookup(tls): doDnsSrvLookupForARecordList 'sipinternal.contoso.com' found no records 0223062636|sip |4|00|CTcpSocket::Abandon - TLS Listen Thread has exited. Process further to abandon this socket 0223062636|sip |4|00|CTcpSocket::Abandon connected socket. Send Message 0x413520a8 0223062636|sip |4|00|SSL_get_error Error code=5,rc(0) 0223062636|sip |4|00|TLS Listen Thread Exit 0223062638|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/private.key doesn't exist or is empty 0223062638|sip |4|00|CTrans::~CTrans still holding Login Cred. Released as valid 0223062638|cfg |4|00|RT|SIP is setting Login Credentials to valid 0223062640|AuthS|4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[1] m_RetVal[0] curlReturn[0] HttpRspCode[200] csStrippedResponse[{"ver":"1.0","account_type":"Managed","domain_name":"contoso.com","cloud_instance_name":"microsoftonline.com","cloud_audience_urn":"urn:federation:MicrosoftOnline"}] 0223062642|AuthS|4|00|m_RetVal[-1] eReqRspID[2] 0223062642|AuthS|4|00|parseOAuth2ErrorCodeDetails: csErrorCode[invalid_grant] csErrorDescription[AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password Trace ID: c504b5f5-c3f4-43a3-8357-14f3136f0800 Correlation ID: f1b5131a-24ca-47f9-a66b-d6f8107a9653 Timestamp: 2018-02-23 09:26:40Z] csErrorTimeStamp[2018-02-23 09:26:40Z] csTraceId[c504b5f5-c3f4-43a3-8357-14f3136f0800] csCorrId[f1b5131a-24ca-47f9-a66b-d6f8107a9653] m_lRspErrorCode[401] 0223062642|AuthS|4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[2] m_RetVal[-1] curlReturn[0] HttpRspCode[401] csStrippedResponse[{"error":"invalid_grant","error_description":"AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password\r\nTrace ID: c504b5f5-c3f4-43a3-8357-14f3136f0800\r\nCorrelation ID: f1b5131a-24ca-47f9-a66b-d6f8107a9653\r\nTimestamp: 2018-02-23 09:26:40Z","error_codes":[70002,50126],"timestamp":"2018-02-23 09:26:40Z","trace_id":"c504b5f 0223062642|AuthS|4|00|[void COAuth2SmCtxt::printNIResponse(std::string)]:[1552] HttpResponse[{"error":"invalid_grant","error_description":"AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password\r\nTrace ID: c504b5f5-c3f4-43a3-8357-14f3136f0800\r\nCorrelation ID: f1b5131a-24ca-47f9-a66b-d6f8107a9653\r\nTimestamp: 2018-02-23 09:26:40Z","error_codes":[70002,50126],"timestamp":"2018-02-23 09:26:40Z","trace_id":"c504b5f5-c3f4-43a3-8357-14f3136f0800","correlation_i] 0223062642|AuthS|4|00|[void COAuth2SmCtxt::printNIResponse(std::string)]:[1552] HttpResponse[d":"f1b5131a-24ca-47f9-a66b-d6f8107a9653"}] 0223062642|AuthS|4|00|pHD(-1) https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc https://webdir0e.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1 https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc/cert https://login.windows.net/common/oauth2/authorize https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc/OAuth https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc https://login.windows.net/common/oauth2/authorize http://nexus.microsoftonline- 0223062642|AuthS|4|00|AuthSvc SOAuth2Error, BaseEventInit restart[0] SfbTokenFetchMethod[3] 0223062642|cfg |4|00|RT|SIP is setting Login Credentials to invalid 0223062642|so |4|00|[soRegistrationC] Login Credentials invalid causing SoRegEventLine Deleted 0223062642|so |4|00|[soRegistrationC] changing the line event to SoRegistrationEventLineChanged for line index 0, as line has address 0223062642|cfg |5|00|Prm|Parameter device.lync.timeZone requested type 7 (Bool) but is of type 1 (UIntNull) 0223062642|cfg |5|00|Prm|Parameter device.lync.timeZone requested type 7 (Bool) but is of type 1 (UIntNull) 0223062644|usbpp|4|00|[PpsUsbC]: OnEvReg Accepted 0223062644|app1 |*|00|SoRegistrationEventLineChanged - success lineIndex 0 RegListSize 0 0223062644|sip |*|00|Sip UnRegister Usr:done.peter@contoso.com Dsp:done.peter Auth:'' Inx:0 0223062644|sip |*|00|SipUserRemove: user 0 being removed. 0223062644|app1 |*|00|SoRegistrationEventLast - new AppRegLineC, szUser = done.peter@contoso.com 0223062644|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty 0223062644|pps |4|00|[Pps.cpp::getLoginCredentials] failed to get 'Login Credentials' 0223062644|WADSe|4|00|parseAndSaveRequiredInfo()- Response received is less than 32 bytes 0223062644|WADSe|4|00|parseAndSaveRequiredInfo()- Response received is less than 32 bytes 0223062648|AuthS|4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[1] m_RetVal[0] curlReturn[0] HttpRspCode[200] csStrippedResponse[{"ver":"1.0","account_type":"Managed","domain_name":"contoso.com","cloud_instance_name":"microsoftonline.com","cloud_audience_urn":"urn:federation:MicrosoftOnline"}] 0223062649|sip |*|00|User removed 0223062649|sip |4|00|CTcpSocket::Abandon - TLS Listen Thread has exited. Process further to abandon this socket 0223062649|sip |4|00|CTcpSocket::Abandon connected socket. Send Message 0x41354a08 0223062649|sip |4|00|SSL_get_error Error code=5,rc(0) 0223062649|sip |4|00|TLS Listen Thread Exit 0223062649|AuthS|4|00|m_RetVal[-1] eReqRspID[2] 0223062649|AuthS|4|00|parseOAuth2ErrorCodeDetails: csErrorCode[invalid_grant] csErrorDescription[AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password Trace ID: 421a11f1-89e3-4046-ab90-0d6702200800 Correlation ID: c3e28f0f-5f82-4882-8733-cb320bca7a5a Timestamp: 2018-02-23 09:26:47Z] csErrorTimeStamp[2018-02-23 09:26:47Z] csTraceId[421a11f1-89e3-4046-ab90-0d6702200800] csCorrId[c3e28f0f-5f82-4882-8733-cb320bca7a5a] m_lRspErrorCode[401] 0223062649|AuthS|4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[2] m_RetVal[-1] curlReturn[0] HttpRspCode[401] csStrippedResponse[{"error":"invalid_grant","error_description":"AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password\r\nTrace ID: 421a11f1-89e3-4046-ab90-0d6702200800\r\nCorrelation ID: c3e28f0f-5f82-4882-8733-cb320bca7a5a\r\nTimestamp: 2018-02-23 09:26:47Z","error_codes":[70002,50126],"timestamp":"2018-02-23 09:26:47Z","trace_id":"421a11f 0223062649|AuthS|4|00|[void COAuth2SmCtxt::printNIResponse(std::string)]:[1552] HttpResponse[{"error":"invalid_grant","error_description":"AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password\r\nTrace ID: 421a11f1-89e3-4046-ab90-0d6702200800\r\nCorrelation ID: c3e28f0f-5f82-4882-8733-cb320bca7a5a\r\nTimestamp: 2018-02-23 09:26:47Z","error_codes":[70002,50126],"timestamp":"2018-02-23 09:26:47Z","trace_id":"421a11f1-89e3-4046-ab90-0d6702200800","correlation_i] 0223062649|AuthS|4|00|[void COAuth2SmCtxt::printNIResponse(std::string)]:[1552] HttpResponse[d":"c3e28f0f-5f82-4882-8733-cb320bca7a5a"}] 0223062649|AuthS|4|00|pHD(141)AuthServiceCallerWbad https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc/cert https://login.windows.net/common/oauth2/authorize https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc/OAuth https://webdir0e.online.lync.com/WebTicket/WebTicketService.svc https://login.windows.net/common/oauth2/authorize http://nexus.microsoftonline-p.com/federationmetadata/2006-12/FederationMetaData.xml 0223062649|AuthS|4|00|AuthSvc SOAuth2Error, BaseEventInit restart[0] SfbTokenFetchMethod[3] 0223062649|WADSe|4|00|Not able to get WT from Auth Service 0223062649|sip |*|00|Sip Register Usr:done.peter@contoso.com Dsp:done.peter Auth:'Using Login Cred' Inx:0 0223062649|utilm|4|00|uBLFUnCompressed: File /data/polycom/ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty 0223062649|cfg |4|00|Prov|[CfgLyncSipSrvDiscover::cbFoundOption] Invalid STS-URI: '://:'
Anyone having an idea?
Hi Peter,
which Profile is actually activated on your Trio? Do you use Skype Profile or generic SIP? Updating the Trio would also make sense.
Hello @peter_nobels,
welcome back to the Polycom Community.
A couple of things:
Providing such details help us when looking at the logs.
0223062630|AuthS|4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[1] m_RetVal[0] curlReturn[0] HttpRspCode[200] csStrippedResponse[{"ver":"1.0","account_type":"Managed","domain_name":"contoso.com","cloud_instance_name":"microsoftonline.com","cloud_audience_urn":"urn:federation:MicrosoftOnline"}] 0223062630|AuthS|4|00|[StdRet COAuth2SmCtxt::OAuth2ParseAndSaveRequiredInfo(E_OAuth2ReqRspId)]:[1531] eReqRspID[1] m_RetVal[0] curlReturn[0] HttpRspCode[200] csStrippedResponse[{"ver":"1.0","account_type":"Managed","domain_name":"contoso.com","cloud_instance_name":"microsoftonline.com","cloud_audience_urn":"urn:federation:MicrosoftOnline"}]
I highlighted a section in the log where I could find a similar case within our internal records which required Microsofts involvement.
Please update the case with the requested details and we have another look.
Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.
Best Regards
Steffen Baier
Polycom Global Services
Hi, yes it was working before. We're not aware of any change. But this does not necessarily mean that Microsoft for example has not changed anything :-)
This is a Skype For Business Online.
The user has an E3 account.
I am not aware of any third party SSO. We're using the standard MFA Microsoft authentication. Which means that for SFB we need to use an app generated password.
Regarding the firmware update... Do we just select the newer firmware, push update and then wait for the magic to happen (performed tons on Telepresence systems, but none on Trio's)... No reconfig necessary after the update?
Yes
Upgraded firmware. But problem remains. Created a new (E1) account in O365, not having an app generated password and then login works???