| Author |
Message |
Ali Soylu
Guest
|
 Posted:
Mon Jan 03, 2005 9:04 pm Post subject:
LCS2005 Signed out of SIP because credentials are changed |
|
|
We are currently evaluations LCS 2005 Standard edition (using Messenger
5.1 as the client) The clients get the following message overnight "You
ahve been signed out of SIP Communications Service because your
credentials have changed. Please sign in again using your new
credentials". After acknowledging that and clicking on "Sign in" the
client signs in again without prompting for any user/pass. I've seen
earlier messages on the topic and turned on tracing. Here's what the
trace log says right before the disconnection. I have the full log if
more info is required:
23:56:37.267 4C4:2D4 INFO :: SIP/2.0 401 Unauthorized
Date: Thu, 30 Dec 2004 04:56:37 GMT
WWW-Authenticate: NTLM realm="SIP Communications Service",
targetname="foxtrot.mydomain"
WWW-Authenticate: Kerberos realm="SIP Communications Service",
targetname="sip/foxtrot.mydomain"
Via: SIP/2.0/TLS
x.x.x.25:1080;ms-received-port=1080;ms-received-cid=7900
From:
<sip:ali@mydomain>;tag=dabaeb206b974c7182804f08e2d5ad82;epid=112f7b6f05
To: <sip:ali@mydomain>;tag=B7ECCEB2F7563DE9BF19A52B73CA1F6C
ms-diagnostic-info:B7ECCEB2F7563DE9BF19A52B73CA1F6C
Call-ID: ea2698e9762349999832f10211da0912
CSeq: 2 SUBSCRIBE
Content-Length: 0
23:56:37.267 4C4:2D4 INFO :: End of Data Received - x.x.x.47:5061 (To
Local Address: x.x.x.25:1080)
23:56:37.267 4C4:2D4 INFO :: Data Received - x.x.x.47:5061 (To Local
Address: x.x.x.25:1080):
23:56:37.267 4C4:2D4 INFO :: SIP/2.0 401 Unauthorized
Date: Thu, 30 Dec 2004 04:56:37 GMT
WWW-Authenticate: NTLM realm="SIP Communications Service",
targetname="foxtrot.mydomain"
WWW-Authenticate: Kerberos realm="SIP Communications Service",
targetname="sip/foxtrot.mydomain"
Via: SIP/2.0/TLS
x.x.x.25:1080;ms-received-port=1080;ms-received-cid=7900
From:
<sip:ali@mydomain>;tag=b283731ff77140ea9552612575428914;epid=112f7b6f05
To: <sip:ali@mydomain>;tag=B7ECCEB2F7563DE9BF19A52B73CA1F6C
ms-diagnostic-info:B7ECCEB2F7563DE9BF19A52B73CA1F6C
Call-ID: bde8555fec40483aaf73efef513fcbf2
CSeq: 3 SUBSCRIBE
Content-Length: 0
23:56:37.267 4C4:2D4 INFO :: End of Data Received - x.x.x.47:5061 (To
Local Address: x.x.x.25:1080)
23:56:37.267 4C4:2D4 INFO :: Data Received - x.x.x.47:5061 (To Local
Address: x.x.x.25:1080):
23:56:37.267 4C4:2D4 INFO :: SIP/2.0 401 Unauthorized
Date: Thu, 30 Dec 2004 04:56:37 GMT
WWW-Authenticate: NTLM realm="SIP Communications Service",
targetname="foxtrot.mydomain"
WWW-Authenticate: Kerberos realm="SIP Communications Service",
targetname="sip/foxtrot.mydomain"
Via: SIP/2.0/TLS
x.x.x.25:1080;ms-received-port=1080;ms-received-cid=7900
From: "Ali Soylu"
<sip:ali@mydomain>;tag=28f8525a4971460a8a53274ddc5174f6;epid=112f7b6f05
To: <sip:ali@mydomain>;tag=B7ECCEB2F7563DE9BF19A52B73CA1F6C
ms-diagnostic-info:B7ECCEB2F7563DE9BF19A52B73CA1F6C
Call-ID: d06b21436aef432686258d0722da2948
CSeq: 2 SUBSCRIBE
Content-Length: 0
23:56:37.267 4C4:2D4 INFO :: End of Data Received - x.x.x.47:5061 (To
Local Address: x.x.x.25:1080)
23:56:37.297 4C4:2D4 INFO ::
SIP_MSG_PROCESSOR::GetChallengeListForPlatform
ProtocolsFromPlatform=0xf
23:56:37.297 4C4:2D4 ERROR :: OUTGOING_TRANSACTION::ProcessAuthRequired
- ProcessChallengeParamsAndSignature failed
23:56:37.297 4C4:2D4 ERROR ::
OUTGOING_TRANSACTION::ProcessAuthRequiredResponse - ProcessAuthRequired
failed 80004005
23:56:37.297 4C4:2D4 INFO ::
SIP_MSG_PROCESSOR::GetChallengeListForPlatform
ProtocolsFromPlatform=0xf
23:56:37.297 4C4:2D4 ERROR :: OUTGOING_TRANSACTION::ProcessAuthRequired
- ProcessChallengeParamsAndSignature failed
23:56:37.297 4C4:2D4 ERROR ::
OUTGOING_TRANSACTION::ProcessAuthRequiredResponse - ProcessAuthRequired
failed 80004005
23:56:37.297 4C4:2D4 INFO ::
SIP_MSG_PROCESSOR::GetChallengeListForPlatform
ProtocolsFromPlatform=0xf
23:56:37.297 4C4:2D4 ERROR :: OUTGOING_TRANSACTION::ProcessAuthRequired
- ProcessChallengeParamsAndSignature failed
23:56:37.297 4C4:2D4 ERROR ::
OUTGOING_TRANSACTION::ProcessAuthRequiredResponse - ProcessAuthRequired
failed 80004005
23:56:37.297 4C4:2D4 INFO ::
SIP_MSG_PROCESSOR::GetChallengeListForPlatform
ProtocolsFromPlatform=0xf
23:56:37.297 4C4:2D4 ERROR :: OUTGOING_TRANSACTION::ProcessAuthRequired
- ProcessChallengeParamsAndSignature failed
23:56:37.297 4C4:2D4 ERROR ::
OUTGOING_TRANSACTION::ProcessAuthRequiredResponse - ProcessAuthRequired
failed 80004005 |
|
| Back to top |
|
 |
Bob Christian
Guest
|
| Posted:
Tue Jan 04, 2005 9:20 am Post subject:
Re: LCS2005 Signed out of SIP because credentials are change |
|
|
I see port 1080, which is usually for a proxy. Are these users connecting
to the network through a proxy (ISA or otherwise)? Do you have Kerberos and
NTLM enabled for authentication?
There was an article on this a while back, but I can't find it.
There was an issue in LCS 2003 where users connected overnight would be
disconnected. Switching from Kerberos to NTLM temporarily fixed the
problem. I am not sure if this carried over to LCS 2005. I checked the KB
and could not find an article for it.
Bob
"Ali Soylu" <alisoylu@gmail.com> wrote in message
news:1104764648.828436.37020@z14g2000cwz.googlegroups.com...
| Quote: | We are currently evaluations LCS 2005 Standard edition (using Messenger
5.1 as the client) The clients get the following message overnight "You
ahve been signed out of SIP Communications Service because your
credentials have changed. Please sign in again using your new
credentials". After acknowledging that and clicking on "Sign in" the
client signs in again without prompting for any user/pass. I've seen
earlier messages on the topic and turned on tracing. Here's what the
trace log says right before the disconnection. I have the full log if
more info is required:
23:56:37.267 4C4:2D4 INFO :: SIP/2.0 401 Unauthorized
Date: Thu, 30 Dec 2004 04:56:37 GMT
WWW-Authenticate: NTLM realm="SIP Communications Service",
targetname="foxtrot.mydomain"
WWW-Authenticate: Kerberos realm="SIP Communications Service",
targetname="sip/foxtrot.mydomain"
Via: SIP/2.0/TLS
x.x.x.25:1080;ms-received-port=1080;ms-received-cid=7900
From:
sip:ali@mydomain>;tag=dabaeb206b974c7182804f08e2d5ad82;epid=112f7b6f05
To: <sip:ali@mydomain>;tag=B7ECCEB2F7563DE9BF19A52B73CA1F6C
ms-diagnostic-info:B7ECCEB2F7563DE9BF19A52B73CA1F6C
Call-ID: ea2698e9762349999832f10211da0912
CSeq: 2 SUBSCRIBE
Content-Length: 0
23:56:37.267 4C4:2D4 INFO :: End of Data Received - x.x.x.47:5061 (To
Local Address: x.x.x.25:1080)
23:56:37.267 4C4:2D4 INFO :: Data Received - x.x.x.47:5061 (To Local
Address: x.x.x.25:1080):
23:56:37.267 4C4:2D4 INFO :: SIP/2.0 401 Unauthorized
Date: Thu, 30 Dec 2004 04:56:37 GMT
WWW-Authenticate: NTLM realm="SIP Communications Service",
targetname="foxtrot.mydomain"
WWW-Authenticate: Kerberos realm="SIP Communications Service",
targetname="sip/foxtrot.mydomain"
Via: SIP/2.0/TLS
x.x.x.25:1080;ms-received-port=1080;ms-received-cid=7900
From:
sip:ali@mydomain>;tag=b283731ff77140ea9552612575428914;epid=112f7b6f05
To: <sip:ali@mydomain>;tag=B7ECCEB2F7563DE9BF19A52B73CA1F6C
ms-diagnostic-info:B7ECCEB2F7563DE9BF19A52B73CA1F6C
Call-ID: bde8555fec40483aaf73efef513fcbf2
CSeq: 3 SUBSCRIBE
Content-Length: 0
23:56:37.267 4C4:2D4 INFO :: End of Data Received - x.x.x.47:5061 (To
Local Address: x.x.x.25:1080)
23:56:37.267 4C4:2D4 INFO :: Data Received - x.x.x.47:5061 (To Local
Address: x.x.x.25:1080):
23:56:37.267 4C4:2D4 INFO :: SIP/2.0 401 Unauthorized
Date: Thu, 30 Dec 2004 04:56:37 GMT
WWW-Authenticate: NTLM realm="SIP Communications Service",
targetname="foxtrot.mydomain"
WWW-Authenticate: Kerberos realm="SIP Communications Service",
targetname="sip/foxtrot.mydomain"
Via: SIP/2.0/TLS
x.x.x.25:1080;ms-received-port=1080;ms-received-cid=7900
From: "Ali Soylu"
sip:ali@mydomain>;tag=28f8525a4971460a8a53274ddc5174f6;epid=112f7b6f05
To: <sip:ali@mydomain>;tag=B7ECCEB2F7563DE9BF19A52B73CA1F6C
ms-diagnostic-info:B7ECCEB2F7563DE9BF19A52B73CA1F6C
Call-ID: d06b21436aef432686258d0722da2948
CSeq: 2 SUBSCRIBE
Content-Length: 0
23:56:37.267 4C4:2D4 INFO :: End of Data Received - x.x.x.47:5061 (To
Local Address: x.x.x.25:1080)
23:56:37.297 4C4:2D4 INFO ::
SIP_MSG_PROCESSOR::GetChallengeListForPlatform
ProtocolsFromPlatform=0xf
23:56:37.297 4C4:2D4 ERROR :: OUTGOING_TRANSACTION::ProcessAuthRequired
- ProcessChallengeParamsAndSignature failed
23:56:37.297 4C4:2D4 ERROR ::
OUTGOING_TRANSACTION::ProcessAuthRequiredResponse - ProcessAuthRequired
failed 80004005
23:56:37.297 4C4:2D4 INFO ::
SIP_MSG_PROCESSOR::GetChallengeListForPlatform
ProtocolsFromPlatform=0xf
23:56:37.297 4C4:2D4 ERROR :: OUTGOING_TRANSACTION::ProcessAuthRequired
- ProcessChallengeParamsAndSignature failed
23:56:37.297 4C4:2D4 ERROR ::
OUTGOING_TRANSACTION::ProcessAuthRequiredResponse - ProcessAuthRequired
failed 80004005
23:56:37.297 4C4:2D4 INFO ::
SIP_MSG_PROCESSOR::GetChallengeListForPlatform
ProtocolsFromPlatform=0xf
23:56:37.297 4C4:2D4 ERROR :: OUTGOING_TRANSACTION::ProcessAuthRequired
- ProcessChallengeParamsAndSignature failed
23:56:37.297 4C4:2D4 ERROR ::
OUTGOING_TRANSACTION::ProcessAuthRequiredResponse - ProcessAuthRequired
failed 80004005
23:56:37.297 4C4:2D4 INFO ::
SIP_MSG_PROCESSOR::GetChallengeListForPlatform
ProtocolsFromPlatform=0xf
23:56:37.297 4C4:2D4 ERROR :: OUTGOING_TRANSACTION::ProcessAuthRequired
- ProcessChallengeParamsAndSignature failed
23:56:37.297 4C4:2D4 ERROR ::
OUTGOING_TRANSACTION::ProcessAuthRequiredResponse - ProcessAuthRequired
failed 80004005
|
|
|
| Back to top |
|
|
alisoylu@gmail.com
Guest
|
| Posted:
Tue Jan 04, 2005 12:11 pm Post subject:
Re: LCS2005 Signed out of SIP because credentials are change |
|
|
Hi Bob,
We are not using any proxy servers. I'll see if I can see the article
you're mentioning.
Thanks,
Ali |
|
| Back to top |
|
|
alisoylu@gmail.com
Guest
|
| Posted:
Tue Jan 04, 2005 11:41 pm Post subject:
Re: LCS2005 Signed out of SIP because credentials are change |
|
|
Changing to NTLM seems to have fixed the problem. So is there a way to
make it work with Kerberos?
ALi |
|
| Back to top |
|
|
Bob Christian
Guest
|
| Posted:
Wed Jan 05, 2005 2:53 am Post subject:
Re: LCS2005 Signed out of SIP because credentials are change |
|
|
The problems with Kerberos and LCS 2003 may have carried over to LCS 2005.
It might be worth a call to Microsoft PSS.
Dependent upon the call router, and if this is indeed the problem, you can
request that the cost of the call be waived. If it is something else, then
you are charged the fee.
Bob
<alisoylu@gmail.com> wrote in message
news:1104860480.528511.223800@f14g2000cwb.googlegroups.com...
| Quote: | Changing to NTLM seems to have fixed the problem. So is there a way to
make it work with Kerberos?
ALi
|
|
|
| Back to top |
|
|
toml@online.microsoft.com
Guest
|
| Posted:
Sat Jan 08, 2005 1:30 am Post subject:
Re: LCS2005 Signed out of SIP because credentials are change |
|
|
Bob is correct on this one,
If changing to NTLM fixes this there is a Kerberos hotfix. If you are
charged for the first call it will be refunded. At any point request to
speak to a manager (check the support tech's email signature also) if you
are concerned about it.
TomL
--------------------
From: "Bob Christian" <BobChristian@removethis.gmail.com>
References: <1104764648.828436.37020@z14g2000cwz.googlegroups.com>
<OoJ#iyg8EHA.3124@TK2MSFTNGP11.phx.gbl>
<1104819106.941722.76150@f14g2000cwb.googlegroups.com>
<1104860480.528511.223800@f14g2000cwb.googlegroups.com>
Subject: Re: LCS2005 Signed out of SIP because credentials are changed
Date: Tue, 4 Jan 2005 15:53:07 -0500
Lines: 17
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Message-ID: <udVe8#p8EHA.1228@tk2msftngp13.phx.gbl>
Newsgroups: microsoft.public.livecomm.general
NNTP-Posting-Host: 141.149.169.6
Path:
cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13
.phx.gbl
Xref: cpmsftngxa10.phx.gbl microsoft.public.livecomm.general:5002
X-Tomcat-NG: microsoft.public.livecomm.general
The problems with Kerberos and LCS 2003 may have carried over to LCS 2005.
It might be worth a call to Microsoft PSS.
Dependent upon the call router, and if this is indeed the problem, you can
request that the cost of the call be waived. If it is something else, then
you are charged the fee.
Bob
<alisoylu@gmail.com> wrote in message
news:1104860480.528511.223800@f14g2000cwb.googlegroups.com...
| Quote: | Changing to NTLM seems to have fixed the problem. So is there a way to
make it work with Kerberos?
ALi
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in