35

DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Embed Size (px)

Citation preview

Page 1: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return
Page 2: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Brian R RicksOwner / Principal ConsultantBriComp Computers, LLC

Deep Dive into the Lync 2013 client sign in process

CLNT400

Page 3: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Discovery

Page 4: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Lync Client DiscoveryLync 2010DNS SRV Lookup

Lync 2013LyncDiscoverDNS SRV Lookup

Lync Mobile 201xLyncDiscover

Lync Phone EditionDNS SRV Lookup

Lync Windows Store AppLyncDiscover

Page 5: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Lyncdiscover vs. DNS SRV records

DNS SRV LYNCDISCOVERMultiple SRV Records Possible – varying costs

One A Record for inside and outside

Results return a Pool Name & Port

Results return Home Server, Edge Pool, Service Names, etc.

Supported on all Legacy Clients and Lync ‘Fat’ clients

Required for Mobility and Modern App

No query security Certificate Trust required &Autodiscover requires Auth

Page 6: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Lync 2013 Client (2010)LyncDiscoverCheck for Internal RecordIf Internal fails (does not exist or certificate failure) check for External RecordIf External fails process ends

SRV and DNSCheck for SRV record _sipinternaltls._tcpCheck for SRV record _sip._tlsCheck for A record sipinternalCheck for A record sipCheck for A record sipexternal

Web QueriesIf SIP registration is successful, internal/external names are provided and checked

Page 7: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Capture 1 – Internal Failure

Page 8: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Capture 2 – Internal Success LyncDiscoverInitial Login on Computer

Subsequent Logins on Computer

Page 9: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Capture 3 – Internal Success SRVInitial Login on Computer

Subsequent Logins on Computer

Page 10: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Web ServicesLyncDiscover Results

Page 11: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Web ServicesLync Autodiscover Results

Page 12: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Demo

Lync 2013 Sign-In Discovery using:Wireshark, Fiddler and Command Prompt

Page 13: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Lync Windows Store AppLyncDiscoverCheck for Internal RecordIf Internal fails (does not exist or certificate failure) check for External RecordIf External fails process ends

Web QueriesIf SIP registration is successful, internal/external names are provided and checked

Page 14: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Capture 1 – Internal FailureInitial Login on Computer

Page 15: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Capture 2 – Internal SuccessInitial Login on Computer

Subsequent Logins on Computer

Page 16: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Authentication

Page 17: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Lync SIP RegistrationBasic Registration

Page 18: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Lync Client to ServerConnection IssuesInvalid SIP URI

Typos – Failure at LYNCDISCOVERUser Not Provisioned

Invalid/Expired PasswordTypos – Failure at AD AuthHacks

Invalid CertificatePrivate Root Certificate

ToolsOCSLoggerCLSLoggingSnooper

Page 19: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Capture – Bad SIP URILyncdiscover Deployed

SIP traffic never reaches Lync Server – will not see any attempts in the SIP Logs

Page 20: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Capture – Bad SIP URI cont’DNS SRV only Deployed

Page 21: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Invalid CredentialsGood AD Creds, Wrong Lync Account

Bad AD Creds

Page 22: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Untrusted CertificateLyncdiscover – Fat client ignores HTTPS errors

But…Lync Server will not let the client on!

Page 23: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Demo

Lync Client to Server Authentication

Page 24: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Mobile Client

Page 25: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Lync 2013 Mobile (Apple iPad)LyncDiscoverCheck for Internal RecordIf Internal fails (does not exist or certificate failure) check for External RecordIf External fails process ends

Web QueriesIf SIP registration is successful, internal/external names are provided and checked

Page 26: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Client Logs (from Apple iPad)

External DNS Entry MissingNetwork Access Failure

Page 27: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Questions?

Page 28: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return
Page 29: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Microsoft PavilionDemos, Speakers, Demos, Lync Room System, Experts, Demos, a Bar....and more Demos

Page 30: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

ATTENDEE PARTYWednesday, February 19th

6:30pm-9:30pmHakkasan, MGM Grand

Brought to you by

When it comes to Vegas nightclubs, it doesn’t get any hotter than Hakkasan. And when it comes to opportunities to connect and reasons to party, no one does it better than Lync Conference! Our attendee party has a full lineup: an open bar, awesome food, and one of the best DJs that Vegas has to offer. Don’t miss out on the fun—stop by at 6:30pm and kick off and evening to remember. Come together.

Page 31: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

HANDS-ON LABS

You can also access labs on MyLync!

3:00pm – 9:00pm10:30am – 9:00pm7:30am – 9:00pm8:00am –1:30pm

LOCATIONPinyon 3

Monday, February 17Tuesday, February 18Wednesday, February 19 Thursday, February 20

LRS

LOCATIONCopperleaf 12

Wednesday, February 198:30am – 9:45am10:15am – 11:30am1:00pm – 2:15pm2:45pm – 4:00pm4:30pm – 5:45pm

Thursday, February 209:00am – 10:15am10:45am – 12:15pm12:45pm – 2:00pm

Page 32: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

MyLync allows you to create a custom experience and network with the Lync Community both online and in person.With MyLync, you can:• Build your own personalized calendar while browsing all available sessions• View breakout session material including PPTs and Videos within

48 hours of each session• Participate in the Community and find people in your social networks

who are attending and interact with speakers• Arrange meetings or social activities• Navigate the Exhibit Hall floor plan and learn more about our Sponsors• Fill out evaluations to win prizes

Log into MyLync at http://mylync.lyncconf.comFor MyLync support, please visit the Registration Desk.*

* Please note that adding a session to your calendar does not reserve a seat. Seating is on a first-come, first-served basis.

Page 33: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Birds of a FeatherBirds of a Feather flock together! Join daily breakfast discussions of relevant topics by sitting in the separately designated areas of the Meal Hall. Seating will be sorted in a different way for each Birds of a Feather breakfast:Wednesday, February 19:Where are you from? Asia/Pacific, Eastern & Central Europe, Latin America, Middle East & Africa, US (West, Central & East) and Canada, Western Europe

Thursday, February 20:What is your interest?Best Practices, Business Value, Clients & Mobility, Lync Meetings and Video, Lync Online, Networking, Platform, Server & Manageability, Voice

Page 34: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

Fill out evaluations to win prizesFill out evaluations on MyLync or MyLync Mobile.Prizes awarded daily.

Page 35: DNS SRVLYNCDISCOVER Multiple SRV Records Possible – varying costs One A Record for inside and outside Results return a Pool Name & PortResults return

© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.