| Author |
Message |
Mike Breen
Guest
|
Posted:
Thu Nov 10, 2005 5:51 pm Post subject:
LCS EE and SE in the same domain? |
|
|
Hi. Having a bit of a problem in a lab enviroment. For testing purposes we
need to set up an Enterprise Edition pool and a Standard Edition server and
test against both. Currently the setup is as follows:
Win2k3 SP1 on all servers.
AD
SQL 2000 SP3a
LCS EE (2) behind a hardware load balancer
LCS SE
LCS SE (to be used as a director)
Users logged onto the EE pool can see each other, get the right presence
info, and can communicate without a problem. Users on the SE server can also
see each other etc. The problem is that users on the SE server do not always
get the proper presence info from the EE users (mostly it's "status
unknown"), while the EE users get up-to-date presence info. Also, EE users
can send and receive messages from the SE users, while SE users can not
initiate a conversation (they get "The following messge could not be
delivered to all recipiants possibly because the user is offline" message),
but can reply to messages from the EE users.
My question is - first and foremost is this a supported configuration?
Secondly - if this is supported, what are we doing wrong and/or what do we
need to do to get this to work?
Thanks in advance
---Mike |
|
| Back to top |
|
 |
Bob Christian
Guest
|
Posted:
Fri Nov 11, 2005 9:50 pm Post subject:
Re: LCS EE and SE in the same domain? |
|
|
This article is a great start:
Live Communications Server 2005 Document: Configuring Certificates
http://www.microsoft.com/downloads/details.aspx?FamilyId=779DEDAA-2687-4452-901E-719CE6EC4E5A&displaylang=en
If everything is setup correctly regarding TLS/MTLS, I have seen this only
on one instance, between federated environments. That, however, is a red
herring in this case.
--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog
"Mike Breen" <Mike Breen@discussions.microsoft.com> wrote in message
news:F1C523DC-15F2-4CE6-84DB-32B9CA4AAB72@microsoft.com...
| Quote: | Hi. Having a bit of a problem in a lab enviroment. For testing purposes
we
need to set up an Enterprise Edition pool and a Standard Edition server
and
test against both. Currently the setup is as follows:
Win2k3 SP1 on all servers.
AD
SQL 2000 SP3a
LCS EE (2) behind a hardware load balancer
LCS SE
LCS SE (to be used as a director)
Users logged onto the EE pool can see each other, get the right presence
info, and can communicate without a problem. Users on the SE server can
also
see each other etc. The problem is that users on the SE server do not
always
get the proper presence info from the EE users (mostly it's "status
unknown"), while the EE users get up-to-date presence info. Also, EE
users
can send and receive messages from the SE users, while SE users can not
initiate a conversation (they get "The following messge could not be
delivered to all recipiants possibly because the user is offline"
message),
but can reply to messages from the EE users.
My question is - first and foremost is this a supported configuration?
Secondly - if this is supported, what are we doing wrong and/or what do we
need to do to get this to work?
Thanks in advance
---Mike |
|
|
| Back to top |
|
 |
Bob Christian
Guest
|
Posted:
Fri Nov 11, 2005 9:50 pm Post subject:
Re: LCS EE and SE in the same domain? |
|
|
Mike - Are the LCS 2005 SE users connecting via TLS or TCP? Do you have
certificates on the SE server?
Bob
--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog
"Mike Breen" <Mike Breen@discussions.microsoft.com> wrote in message
news:F1C523DC-15F2-4CE6-84DB-32B9CA4AAB72@microsoft.com...
| Quote: | Hi. Having a bit of a problem in a lab enviroment. For testing purposes
we
need to set up an Enterprise Edition pool and a Standard Edition server
and
test against both. Currently the setup is as follows:
Win2k3 SP1 on all servers.
AD
SQL 2000 SP3a
LCS EE (2) behind a hardware load balancer
LCS SE
LCS SE (to be used as a director)
Users logged onto the EE pool can see each other, get the right presence
info, and can communicate without a problem. Users on the SE server can
also
see each other etc. The problem is that users on the SE server do not
always
get the proper presence info from the EE users (mostly it's "status
unknown"), while the EE users get up-to-date presence info. Also, EE
users
can send and receive messages from the SE users, while SE users can not
initiate a conversation (they get "The following messge could not be
delivered to all recipiants possibly because the user is offline"
message),
but can reply to messages from the EE users.
My question is - first and foremost is this a supported configuration?
Secondly - if this is supported, what are we doing wrong and/or what do we
need to do to get this to work?
Thanks in advance
---Mike |
|
|
| Back to top |
|
 |
Mike Breen
Guest
|
Posted:
Sun Nov 13, 2005 5:50 pm Post subject:
Re: LCS EE and SE in the same domain? |
|
|
Bob,
Both TCP and TLS, and there are certs on the SE server. I'll read over that
article you sent and let you know if it helps. Thanks.
Another thing cropped up after I posted the previous message - we're getting
errors on the SE server where it claims it's not part of the domain (and we
get the same error on the AD box when we try to access the SE server from the
LCS snap-in there). Rebooting the SE server clears that up. Now previously
there were two LCS SE servers in this domain and we removed one of them to
make room for the EE pool (lack of servers on our part). Could this have
messed up our domain, and would we be better off just rebuilding the domain
from scratch? Thanks again.
"Bob Christian" wrote:
| Quote: | Mike - Are the LCS 2005 SE users connecting via TLS or TCP? Do you have
certificates on the SE server?
Bob
--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog
"Mike Breen" <Mike Breen@discussions.microsoft.com> wrote in message
news:F1C523DC-15F2-4CE6-84DB-32B9CA4AAB72@microsoft.com...
Hi. Having a bit of a problem in a lab enviroment. For testing purposes
we
need to set up an Enterprise Edition pool and a Standard Edition server
and
test against both. Currently the setup is as follows:
Win2k3 SP1 on all servers.
AD
SQL 2000 SP3a
LCS EE (2) behind a hardware load balancer
LCS SE
LCS SE (to be used as a director)
Users logged onto the EE pool can see each other, get the right presence
info, and can communicate without a problem. Users on the SE server can
also
see each other etc. The problem is that users on the SE server do not
always
get the proper presence info from the EE users (mostly it's "status
unknown"), while the EE users get up-to-date presence info. Also, EE
users
can send and receive messages from the SE users, while SE users can not
initiate a conversation (they get "The following messge could not be
delivered to all recipiants possibly because the user is offline"
message),
but can reply to messages from the EE users.
My question is - first and foremost is this a supported configuration?
Secondly - if this is supported, what are we doing wrong and/or what do we
need to do to get this to work?
Thanks in advance
---Mike
|
|
|
| Back to top |
|
 |
Bob Christian
Guest
|
Posted:
Mon Nov 14, 2005 1:50 am Post subject:
Re: LCS EE and SE in the same domain? |
|
|
You may have to use Netdom to reset the secure channel between the client
system and the domain. I would look at the domain controller, performing a
dcdiag and a netdiag at the minimum, to make sure that it is healthy.
If you cleanly uninstalled the other LCS SE server, then you should be fine.
Either way, performing an uninstall that is not clean should not affect your
Active Directory services.
Regards,
Bob
--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog
"Mike Breen" <MikeBreen@discussions.microsoft.com> wrote in message
news:C63D7E48-1379-47D7-8B20-5704E88BE1E1@microsoft.com...
| Quote: | Bob,
Both TCP and TLS, and there are certs on the SE server. I'll read over
that
article you sent and let you know if it helps. Thanks.
Another thing cropped up after I posted the previous message - we're
getting
errors on the SE server where it claims it's not part of the domain (and
we
get the same error on the AD box when we try to access the SE server from
the
LCS snap-in there). Rebooting the SE server clears that up. Now
previously
there were two LCS SE servers in this domain and we removed one of them to
make room for the EE pool (lack of servers on our part). Could this have
messed up our domain, and would we be better off just rebuilding the
domain
from scratch? Thanks again.
"Bob Christian" wrote:
Mike - Are the LCS 2005 SE users connecting via TLS or TCP? Do you have
certificates on the SE server?
Bob
--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog
"Mike Breen" <Mike Breen@discussions.microsoft.com> wrote in message
news:F1C523DC-15F2-4CE6-84DB-32B9CA4AAB72@microsoft.com...
Hi. Having a bit of a problem in a lab enviroment. For testing
purposes
we
need to set up an Enterprise Edition pool and a Standard Edition server
and
test against both. Currently the setup is as follows:
Win2k3 SP1 on all servers.
AD
SQL 2000 SP3a
LCS EE (2) behind a hardware load balancer
LCS SE
LCS SE (to be used as a director)
Users logged onto the EE pool can see each other, get the right
presence
info, and can communicate without a problem. Users on the SE server
can
also
see each other etc. The problem is that users on the SE server do not
always
get the proper presence info from the EE users (mostly it's "status
unknown"), while the EE users get up-to-date presence info. Also, EE
users
can send and receive messages from the SE users, while SE users can not
initiate a conversation (they get "The following messge could not be
delivered to all recipiants possibly because the user is offline"
message),
but can reply to messages from the EE users.
My question is - first and foremost is this a supported configuration?
Secondly - if this is supported, what are we doing wrong and/or what do
we
need to do to get this to work?
Thanks in advance
---Mike
|
|
|
| Back to top |
|
 |
Mike Breen
Guest
|
Posted:
Mon Nov 14, 2005 5:50 pm Post subject:
Re: LCS EE and SE in the same domain? |
|
|
Hey Bob, looks like you're right about it being a domain controller issue. I
got the a Directory Binding Error -2146892976, a DsBindWithSpnEx() failed
with error -2146892976, and an error that stated my server wasn't responding
to directory service requests.
We're going to build a temporary second domain controller, promote it,
demote this one, rte-install, and re-promote it. This should fix the problem
while allowing us to continue troubleshooting the LCS's, in case this is only
one aspect of a bigger problem.
I will let you know how we make out.
"Bob Christian" wrote:
| Quote: | You may have to use Netdom to reset the secure channel between the client
system and the domain. I would look at the domain controller, performing a
dcdiag and a netdiag at the minimum, to make sure that it is healthy.
If you cleanly uninstalled the other LCS SE server, then you should be fine.
Either way, performing an uninstall that is not clean should not affect your
Active Directory services.
Regards,
Bob
--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog
"Mike Breen" <MikeBreen@discussions.microsoft.com> wrote in message
news:C63D7E48-1379-47D7-8B20-5704E88BE1E1@microsoft.com...
Bob,
Both TCP and TLS, and there are certs on the SE server. I'll read over
that
article you sent and let you know if it helps. Thanks.
Another thing cropped up after I posted the previous message - we're
getting
errors on the SE server where it claims it's not part of the domain (and
we
get the same error on the AD box when we try to access the SE server from
the
LCS snap-in there). Rebooting the SE server clears that up. Now
previously
there were two LCS SE servers in this domain and we removed one of them to
make room for the EE pool (lack of servers on our part). Could this have
messed up our domain, and would we be better off just rebuilding the
domain
from scratch? Thanks again.
"Bob Christian" wrote:
Mike - Are the LCS 2005 SE users connecting via TLS or TCP? Do you have
certificates on the SE server?
Bob
--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog
"Mike Breen" <Mike Breen@discussions.microsoft.com> wrote in message
news:F1C523DC-15F2-4CE6-84DB-32B9CA4AAB72@microsoft.com...
Hi. Having a bit of a problem in a lab enviroment. For testing
purposes
we
need to set up an Enterprise Edition pool and a Standard Edition server
and
test against both. Currently the setup is as follows:
Win2k3 SP1 on all servers.
AD
SQL 2000 SP3a
LCS EE (2) behind a hardware load balancer
LCS SE
LCS SE (to be used as a director)
Users logged onto the EE pool can see each other, get the right
presence
info, and can communicate without a problem. Users on the SE server
can
also
see each other etc. The problem is that users on the SE server do not
always
get the proper presence info from the EE users (mostly it's "status
unknown"), while the EE users get up-to-date presence info. Also, EE
users
can send and receive messages from the SE users, while SE users can not
initiate a conversation (they get "The following messge could not be
delivered to all recipiants possibly because the user is offline"
message),
but can reply to messages from the EE users.
My question is - first and foremost is this a supported configuration?
Secondly - if this is supported, what are we doing wrong and/or what do
we
need to do to get this to work?
Thanks in advance
---Mike
|
|
|
| Back to top |
|
 |
|
|
|
|