Daniyar's Tech blog

Thursday, June 9, 2016

ServiceNow and Skype for Business integration

ServiceNow can shows the S4B presence (in full mode). But S4B must be allowed to respond to ServiceNow requests. We need to allow a specific domain. In S4B powershell run:

$x = New-CsWebOrigin -Url https://serviceportal.xxx.yyy

Set-CsWebServiceConfiguration -CrossDomainAuthorizationList @{Add=$x}

if not you may see an error

X-Ms-diagnostics: 28070;source="xxx";reason="Service does not allow a cross domain request from this origin."

Wednesday, June 1, 2016

Enable ping ICMP for Windows 2012 R2 command line

Windows 2012 R2 by default does not allow ICMP.

Run in CMD admin

netsh advfirewall firewall add rule name="allow ping" dir=in action=allow enable=yes profile=any protocol=icmpv4 interfacetype=any

Tuesday, May 31, 2016

Direct Access KDS issue

On the Direct Access server I could not start KDS proxy server.

Errors:

Log Name: System
Source: Service Control Manager
Date: 31.05.2016 20:23:53
Event ID: 7023
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer:
Description:
The KDC Proxy Server service (KPS) service terminated with the following error:
Access is denied.

Log Name: Microsoft-Windows-Kerberos-KdcProxy/Operational
Source: Microsoft-Windows-Kerberos-KdcProxy
Date: 31.05.2016 20:23:53
Event ID: 5
Task Category: (1)
Level: Critical
Keywords:
User: NETWORK SERVICE
Computer:
Description:
Service failed to register UrlPrefix https://+:443/KdcProxy: error code 0x5. Contact your administrator to make sure https://+:443/KdcProxy is properly reserved.

Solution to run:

netsh http add urlacl url=https://+:443/KdcProxy user="NT AUTHORITY\NETWORKSERVICE"

Monday, May 30, 2016

How to estimate number of channels for PRI or SIP

Rule of thumb is 10:1 or 10% for moderate use.

https://www.dialogic.com/~/media/products/docs/whitepapers/11767-trunk-req-dmg-uc-wp.pdf

Friday, May 13, 2016

Skype for Business Skill search does not work

If you have activated Skill search in Skype for Business or Lync 2013 and you get instead an error ""An error occured during search.Please try again, and contact your support team if the problem continues" .

Using IIS log on Sharepoint you may see that there is en error 500

2016-05-13 15:05:24 192.168.254.12 POST /_vti_bin/search.asmx - 443 - 192.168.254.182 OC/15.0.4809.1000+(Skype+for+Business) 500 0 0 78

From the client side you may see this issue in Fiddler.

Try to check if Anonymous Authentication is activated for _vti_bin folder. Open IIS, sites - SharePoint -80 or whatever you have there, find _vti_bin and disable Anonymous Authentication.

SfB will use Windows Authentification to get there. Checkout for side effects if some applications or hackers prefer to use anonymous authentification - that will not work anymore.

Another thing here is that if you have enabled Kerberor authentification might work ok without any change.

Not that _vti_bin is deprecated method - plan to stop using it in the future.

https://technet.microsoft.com/en-us/library/ff607742.aspx

Most probably this will be changed in SfB client rather soon.