question

FabioRicci-0126 avatar image
0 Votes"
FabioRicci-0126 asked FabioRicci-0126 commented

Address book error 401 unauthorized

We have a customer that upgraded from SFB 2015 to SFB 2019 last year. last week reported issues with the address book not working on the clientes. They get an error on the cliente stating it can't connect to the address book service. Websearch ain't working either. doing a test on the addressbook we get this error:

Target Fqdn : admin.xxxxxxxxx.com
Target Uri : https://pool.xxxxxxxxx.com:443/abs/handler
Result : Failure
Latency : 00:00:00.1222238
Error Message : The remote server returned an error: (401) Unauthorized.

Diagnosis : X-Ms-diagnostics : 28032;source="BBISFBFE01.xxxxxxxxx.COM";reason="The web ticket is
invalid.";faultcode="wsse:InvalidSecurityToken"
X-MS-WebTicketURL : https://pool.xxxxxxxxx.com/WebTicket/WebTicketService.svc
X-MS-WebTicketSupported : cwt,saml
X-MS-Server-Fqdn : BBISFBFE01.xxxxxxxxx.COM
X-MS-Correlation-Id : 2677f74a-f8bf-4007-a53a-b6ea43a2f8fe
x-ms-client-request-id : a612e30b-c38e-44d2-aa6c-abdf7721b669
Strict-Transport-Security : max-age=31536000; includeSubDomains
X-Content-Type-Options : nosniff
Content-Length : 1293
Content-Type : text/html
Date : Tue, 16 Mar 2021 17:04:30 GMT
WWW-Authenticate : NTLM


if we try to navigate to the https://pool.XXXXXXXXX.com/abs/handler page, we get error 500 another symptom: there is an excessive bandwidth usage (and connections) between users and the pool on port 443. 100 times what it should be. tried: reinstalling certificates on the FE (this is an enterprise pool) restarted iis services checked certs for the IIS services updated the address book suggestions?

office-skype-business-server-itpro-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

JimmyYang-MSFT avatar image
0 Votes"
JimmyYang-MSFT answered FabioRicci-0126 commented

Hi @FabioRicci-0126,

In this case, we firstly recommend you try to delete the Internal Web Service SSL Certificate and regenerated it through SFB 2019 Deployment Wizard. Then run the command “Test-CsAddressBookService” to see if it is success.

If the Address book Service status is success, you can verify if the URL is working for you in Skype for Business Server. If you got the 500 error in your page, you can try to add the AddressBook file name to the end of URL (For example : https://Lync pool FQDN:443/abs/handler/ C-1cb7-1cb8.lsabs).You can choose any file name from the following location (Picture 1).

\\xxx\Fileshare\1-WebServices-1\ABFiles\00000000-0000-0000-0000-000000000000\00000000-0000-0000-0000-000000000000.
Picture 1:

78650-19.png
If you can see the following picture (Picture 2) after you use the new URL and save it successfully, it means the URL works well.

Picture2:
78568-18.png



If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



18.png (10.0 KiB)
19.png (103.8 KiB)
· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello Jimmy. Thanks for your answer.

I just realize in my original post I didn't put the actual tests or actions taken:

We have already replaced the certificates via the wizard
removed the address book directory and ran the update-csaddressbook to check if it was created....it does
downloading the address book actually works!
still the test fails

0 Votes 0 ·

@FabioRicci-0126

Have you checked the replication under the Topology tab in SFB control pannel?

You can run the command "Debug-CsAddressBookReplication" to verifiy replication between Active Directory and the Skype for Business Server Address book service.


0 Votes 0 ·

@FabioRicci-0126

Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.

0 Votes 0 ·
Show more comments