Environment:
Lync Server 2010 – Enterprise Edition
Skype for Business Server 2015 – Enterprise Edition
Issue:
When migrating a user from Lync Server 2010 to Skype for Business 2015 we encountered 2 issues:
- Address book search was not returning any values
- Authentication pop-up
Resolution:
The Lync Server 2010 web services can have connectivity issues that are centric to Kerberos authentication, which affect the Lync client’s ability access to them. In the Lync Server 2010 we had setup a Kerberos Account Assignment.
First we had to find the Kerberos Account that is used by running: Get-CsKerberosAccountAssignment
When the Kerberos Account Assignment was tested: Test-CsKerberosAccountAssignment -Identity “Site:Ottawa” -Report “C:\temp\report.htm” – Verbose
The error below was received:
Test-CsKerberosAccountAssignment : The Kerberos configuration on LyncFE01.company.com is invalid. The expected assigned account is Company\kerberosuser. Ensure that the account has not expired, and the configured password on the machine matches the Active Directory password of the account.
At line:1 char:33
+ Test-CsKerberosAccountAssignment <<<< -Identity “site:central”
+ CategoryInfo : InvalidData: ([0] Company\kerberosacct:SourceCollection) [Test-CsKerberosAccountAssignment], Exception
+ FullyQualifiedErrorId : InvalidKerberosConfiguration,Microsoft.Rtc.Management.Deployment.TestKerberosAccountAssignmentCmdlet
WARNING: Test-CsKerberosAccountAssignment encountered errors. Consult the log file for a detailed analysis, and ensure all errors (1) and warnings (0) are addressed before continuing.
WARNING: Detailed results can be found at
“C:\Users\Administrator.company\AppData\Local\Temp\Test-CsKerberosAccountAssignment-d7a69316-bb4b-456c-a3a9-5628bbfa389a.html”.
We decided to copy the password from the account that is assigned on the Lync 2010 FE server by running the cmdlets below:
Set-CsKerberosAccountPassword -FromComputer “Lync2010FE.company.com” -ToComputer “SFBFE01.company.com”
Set-CsKerberosAccountPassword -FromComputer “Lync2010FE.company.com” -ToComputer “SFBFE02.company.com”
After the above cmdlets completed, we signed out of the Skype for Business client and signed back in the issues were resolved.
Thank you, this saved my bacon!