Hi all I’ve got an issue with a fresh installation of Lync 2013 and Wac service.
When I try to present a PowerPoint with a lync client I’ve got an access issue
- From the client I can open the Wacserver url discovery without no security warning
- From the Front End I can open the wacserver url discovery without no security warning
- When I open the certificate on the Wacserver I can see that the certificate have a valid private key
- When I open the certificate on the Wacserver I can see that the certificate path is ok
- The workstation who try to present the powerpoint have direct access to the FE and the WAC
- The workstation can resolve the wac internal and external url
- The workstation do not have proxy .
- I Launch the Lync 2013 Best Practice : No issue on the report.
- We try with a Lync 2013 client behind a Firewall and we can observe that the client use 8057 to the front end and 443 to the Wac server. All flow are permitted in this scenario but non access to the Wac
- I read the technet Article ref: jj205393.aspx and unable to find a LS DATA MCU event 41033 in the Lync Event Log
- 15 April 2013 : 16h01 : Reboot the server and test… Same issue
- 15 April 2013 : 16h01 : Disabling the crl check on the client machine… same issue.
- Try to execute this powershell command import-module servermanager add-windowsfeature Net-Framework-core / IISreset and try again : Same issue
- Try add-windowsfeature net-framework and iisreset/ Same issue but the issue appear more fast on the client side
- Try aspnet_regiis.exe –I and IISreset … same issue L(((
- 15 April 2013 : 17:00 The client could not launch the URl Wac server discovery… ok Uninstalling the wacserver / rebooting the wac server
- Deleting the content of the directory c:\program files\microsoft Office Web app
- Reinstalling the webapp / applying the march update Kb2760486
- Reconfiguring the webfarm
- New-OfficeWebAppsFarm -InternalUrl "https://wacserver.company.net" -ExternalUrl "https://wacserver.company.com" -CertificateName "OfficeWebAppsIda2013 Certificate" –EditingEnabled
PS C:\Users\laurent.teruin> New-OfficeWebAppsFarm -InternalUrl "https://wacserver.company.net/" -ExternalUrl "https://wac
server.company.com/" -CertificateName "OfficeWebAppsIda2013 Certificate" -EditingEnabled
Setting EditingEnabled to TRUE. You should only do this if users of this Office Web Apps Server have licenses that
permit editing using Office Web Apps.
Continue with this operation?
[Y] Yes [N] No [S] Suspend [?] Help (default is "Y"): Y
FarmOU :
InternalURL : https://wacserver.company.net/
ExternalURL : https://wacserver.company.com/
AllowHTTP : False
SSLOffloaded : False
CertificateName : OfficeWebAppsIda2013 Certificate
EditingEnabled : True
LogLocation : C:\ProgramData\Microsoft\OfficeWebApps\Data\Logs\ULS
LogRetentionInDays : 7
LogVerbosity :
Proxy :
CacheLocation : C:\ProgramData\Microsoft\OfficeWebApps\Working\d
MaxMemoryCacheSizeInMB : 75
DocumentInfoCacheSize : 5000
CacheSizeInGB : 15
ClipartEnabled : False
TranslationEnabled : False
MaxTranslationCharacterCount : 125000
TranslationServiceAppId :
TranslationServiceAddress :
RenderingLocalCacheLocation : C:\ProgramData\Microsoft\OfficeWebApps\Working\waccache
RecycleActiveProcessCount : 5
AllowCEIP : False
ExcelRequestDurationMax : 300
ExcelSessionTimeout : 450
ExcelWorkbookSizeMax : 10
ExcelPrivateBytesMax : -1
ExcelConnectionLifetime : 1800
ExcelExternalDataCacheLifetime : 300
ExcelAllowExternalData : True
ExcelWarnOnDataRefresh : True
OpenFromUrlEnabled : False
OpenFromUncEnabled : True
OpenFromUrlThrottlingEnabled : True
PicturePasteDisabled : True
RemovePersonalInformationFromLogs : False
AllowHttpSecureStoreConnections : False
Machines : {NTINTFR06443}
15 April 2013 17:28
Now the client couldnot have access to the discovery url . I hate Office Web app !!!
When I try to open the discovery url I ve got this
Log Name: Microsoft Office Web Apps
Source: Office Web Apps
Date: 4/15/2013 5:25:18 PM
Event ID: 8118
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: NTINTFR06443.emea.company.net
Description:
Error when trying to connect to Farm State Manager service: System.ServiceModel.ProtocolException: The content type text/html; charset=utf-8 of the response message does not match the content type of the binding (application/soap+msbin1). If using a custom encoder, be sure that the IsContentTypeSupported method is implemented properly. The first 1024 bytes of the response were: ‘<!DOCTYPE html>
<html>
<head>
<title>Could not load type ‘System.ServiceModel.Activation.HttpModule’ from assembly ‘System.ServiceModel, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089′.</title>
<meta name="viewport" content="width=device-width" />
<style>
body {font-family:"Verdana";font-weight:normal;font-size: .7em;color:black;}
p {font-family:"Verdana";font-weight:normal;color:black;margin-top: -5px}
b {font-family:"Verdana";font-weight:bold;color:black;margin-top: -5px}
H1 { font-family:"Verdana";font-weight:normal;font-size:18pt;color:red }
H2 { font-family:"Verdana";font-weight:normal;font-size:14pt;color:maroon }
pre {font-family:"Consolas","Lucida Console",Monospace;font-size:11pt;margin:0;padding:0.5em;line-height:14pt}
.marker {font-weight: bold; color: black;text-decoration: none;}
.version {color: gray;}
.error {margin-bottom: 10px;}
.expandable {‘. —> System.Net.WebException: The remote server returned an error: (500) Internal Server Error.
at System.Net.HttpWebRequest.GetResponse()
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
— End of inner exception stack trace —
……
.error {margin-bottom: 10px;}
.expandable {‘. —> System.Net.WebException: The remote server returned an error: (500) Internal Server Error.
at System.Net.HttpWebRequest.GetResponse()
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
— End of inner exception stack trace —
…
</Event>
For this issue i resolve it by applying this KB :
http://support.microsoft.com/kb/2015129
After applying this kb the client can access to the discovery wac URL
If you inspect the IIS Log file on the Wac server when the user wants to present the PPT you will see that wacserver will use the webservice url. Lsweb.company.net in my configuration
Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status time-taken
2013-04-15 15:49:08 10.203.0.11 GET /hosting/discovery/ – 443 – 10.203.0.14 – 200 0 0 1285
2013-04-15 15:50:02 10.203.0.11 GET /hosting/discovery – 443 – 10.203.0.21 Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+Trident/6.0) 200 0 0 0
2013-04-15 15:50:42 10.203.0.11 GET /m/Presenter.aspx a=0&e=true&WopiSrc=https%3A%2F%2Flsweb.company.net%2FDataCollabWeb%2Fwopi%2Ffiles%2F7-2-6A6AAB&access_token=AAMFEMvgfUUmM5ZZo_ivhzc4s5sGECLij1Ks9a4uqC7oV6ETKIiBEMvgfUUmM5ZZo_ivhzc4s5uCAvd2gyA3CoLTJf7OejmmW-_jLnl7wYVRzjsWsd1tFZ1sNabm5oYIa7jqtUcI0AgIDURhdGFDb2xsYWJXZWI&fs=false&rec=false&thm=1&ui=en-US&rs=en-US& 443 – 10.203.0.21 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.1;+Trident/6.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+.NET4.0C;+InfoPath.3) 302 0 0 27815
2013-04-15 15:50:42 10.203.0.11 GET /error.html – 443 – 10.203.0.21 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.1;+Trident/6.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+.NET4.0C;+InfoPath.3) 304 0 0 322
Because in my configuration the internal webservice was not accessible through the HLB, the presentation fail. For demonstrate this, I’ve just putting the internalwebservice fqdn = frontend fdqn on the host file, on the client and on the Wacserver, and the client was able to launch and present the ppt
It means that the client need to have access to Http 443 /TCP to the Wacserver and also have access to internal url of the webservice for presenting.
Personally I think that Microsoft should precise how the Lync 2013 office Web App publication and the flow occurs.
Thanks to S.Duta@ microsoft.com for his precious help
Laurent Teruin
Additionnal information below
Certificat on the IISweb Site on the wac server
When I search on the client log I ve find this
<reportError xmlns="http://schemas.microsoft.com/2006/09/sip/error-reporting"><error toUri="sip:laurent.teruin@company.com;gruu;opaque=app:conf:focus:id:50BKY1DS" callId="22e343524b3a47248e999ec1c324e0e6" fromTag="dcdd931fab" toTag="0C390080" requestType="" contentType="" responseCode="0"><diagHeader>54031;reason="The WAC presentation failed with a server error."
;ClientType=Lync;Build=15.0.4481.1000;ContentMCU="sip:Laurent.Teruin@company.com;gruu;opaque=app:conf:data-conf:id:50BKY1DS";ConferenceUri="sip:laurent.teruin@company.com;gruu;opaque=app:conf:focus:id:50BKY1DS";LocalFqdn="WIN7TESTCLIENT.emea.company.net";Url="https://wacserver.company.net/m/Presenter.aspx?a=0&e=true&WopiSrc=https%3A%2F%2Flsweb.company.net%2FDataCollabWeb%2Fwopi%2Ffiles%2F8-1-
Because we change the certificate on the wac I uninstall the wac component / reboot the wac server/ reinstall the Wac with the March update , create the WebAppsFarm
The webapp is below
FarmOU :
InternalURL : https://wacserver.company.net/
ExternalURL : https://wacserver.company.net/
AllowHTTP : False
SSLOffloaded : False
CertificateName : OfficeWebAppsIda2013 Certificate
EditingEnabled : True
LogLocation : C:\ProgramData\Microsoft\OfficeWebApps\Data\Logs\ULS
LogRetentionInDays : 7
LogVerbosity :
Proxy :
CacheLocation : C:\ProgramData\Microsoft\OfficeWebApps\Working\d
MaxMemoryCacheSizeInMB : 75
DocumentInfoCacheSize : 5000
CacheSizeInGB : 15
ClipartEnabled : False
TranslationEnabled : False
MaxTranslationCharacterCount : 125000
TranslationServiceAppId :
TranslationServiceAddress :
RenderingLocalCacheLocation : C:\ProgramData\Microsoft\OfficeWebApps\Working\waccache
RecycleActiveProcessCount : 5
AllowCEIP : False
ExcelRequestDurationMax : 300
ExcelSessionTimeout : 450
ExcelWorkbookSizeMax : 10
ExcelPrivateBytesMax : -1
ExcelConnectionLifetime : 1800
ExcelExternalDataCacheLifetime : 300
ExcelAllowExternalData : True
ExcelWarnOnDataRefresh : True
OpenFromUrlEnabled : False
OpenFromUncEnabled : True
OpenFromUrlThrottlingEnabled : True
PicturePasteDisabled : True
RemovePersonalInformationFromLogs : False
AllowHttpSecureStoreConnections : False
Machines : {NTINTFR06443}
Anthony Costeseque
Arnaud DUTEIL
Frédéric Laubel
Teruin laurent
David ANDRE
David PEKMEZ
Yohan Boullier
