I've been working all week to get unified messaging working again. We had is setup with our on-premise exchange server 2013. We migrated to Office365 and I created a new Unified Messaging service and followed the documentation to set it up. I created an application, created a new user in the cloud and gave that user application impersonation role and assigned that user to the application. Following the guide I applied appropriate API permissions. I can't see that I missed a step, but I'm still getting errors. I followed troubleshooting steps and can see SSL communication between Unity Connection and Microsoft. It ends with the Unity Connection server sending an Encrypted Alert (21). To the best of my research, that's just a simple error message that is of course encrypted. I have wiresharked and looked at logs and cannot determine the issue. Attached is a screenshot of the test and a snippet of the logs i've pulled.
I am really starting to think there is a bug in 12.5 (SU6) or maybe it just isn't supported.
14:38:38.356 |18255,,,CuESD,0,Thread=http-nio-81-exec-8 autodiscover testEmailAddress=false extsvcObjectId= clientid=7aa01437-xxxx-xxxx-xxxx-c00e7exxxx45
14:38:38.361 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CCsDbHelper.cpp:403]: Error access token is not found in database for uid: 7aa01437-xxxx-xxxx-xxxx-c00e7exxxx45
14:38:38.402 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CCsDNSResolver.cpp:190] failed to get dns results for _ldap._tcp.mygeatn.onmicrosoft.com._sites.dc._msdcs.outlook.office365.com question type 33
14:38:38.402 |18255,,,CsExMbxLocator,11,[CsExMbxLocator/CsExMbxLocator.cpp:458]: DNS query for: _ldap._tcp.mygeatn.onmicrosoft.com._sites.dc._msdcs.outlook.office365.com didn't return results
14:38:38.551 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CsExMbxLocator.cpp:1420]: HTTP request failed with error: 80004005, HTTP status code: 401, for Autodiscovery URL: https://outlook.office365.com/autodiscover/autodiscover.xml, verb: GET, query:
14:38:38.551 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CsExMbxLocator.cpp:1476]: HTTP request failed with error: Bad response from server, HTTP code returned: 401, HTTP status code: 401, for Autodiscovery URL: https://outlook.office365.com/autodiscover/autodiscover.xml, verb: GET, query:
14:38:38.577 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CsExMbxLocator.cpp:1420]: HTTP request failed with error: 80004005, HTTP status code: 0, for Autodiscovery URL: https://autodiscover.outlook.office365.com/autodiscover/autodiscover.xml, verb: GET, query:
14:38:38.577 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CsExMbxLocator.cpp:1476]: HTTP request failed with error: Couldn't resolve host name -- Could not resolve: autodiscover.outlook.office365.com (Domain name not found), HTTP status code: 0, for Autodiscovery URL: https://autodiscover.outlook.office365.com/autodiscover/autodiscover.xml, verb: GET, query:
14:38:38.752 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CsExMbxLocator.cpp:1420]: HTTP request failed with error: 80004005, HTTP status code: 401, for Autodiscovery URL: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml, verb: GET, query:
14:38:38.753 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CsExMbxLocator.cpp:1476]: HTTP request failed with error: Bad response from server, HTTP code returned: 401, HTTP status code: 401, for Autodiscovery URL: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml, verb: GET, query:
14:38:38.754 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CsExMbxLocator.cpp:1420]: HTTP request failed with error: 80004005, HTTP status code: 0, for Autodiscovery URL: http://autodiscover.outlook.office365.com/autodiscover/autodiscover.xml, verb: GET, query:
14:38:38.754 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CsExMbxLocator.cpp:1476]: HTTP request failed with error: Couldn't resolve host name -- Could not resolve: autodiscover.outlook.office365.com (Domain name not found), HTTP status code: 0, for Autodiscovery URL: http://autodiscover.outlook.office365.com/autodiscover/autodiscover.xml, verb: GET, query:
14:38:38.793 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CCsDNSResolver.cpp:190] failed to get dns results for _autodiscover._tcp.outlook.office365.com question type 33
14:38:38.793 |18255,,,CsExMbxLocator,11,[CsExMbxLocator/CsExMbxLocator.cpp:741]: DNS query for: _autodiscover._tcp.outlook.office365.com didn't return results
Looks like the name lookup is failing with these errors.
14:38:38.754 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CsExMbxLocator.cpp:1476]: HTTP request failed with error: Couldn't resolve host name -- Could not resolve: autodiscover.outlook.office365.com (Domain name not found)
14:38:38.793 |18255,,,CsExMbxLocator,10,[CsExMbxLocator/CCsDNSResolver.cpp:190] failed to get dns results for _autodiscover._tcp.outlook.office365.com
14:38:38.793 |18255,,,CsExMbxLocator,11,[CsExMbxLocator/CsExMbxLocator.cpp:741]: DNS query for: _autodiscover._tcp.outlook.office365.com didn't return results
Have you verified that the CUC system can resolve DNS records for the MS O365 services?
Could you please verify the settings again
I encountered a similar issue in the past, which was primarily due to an incorrect secret being shared (often the secret ID instead of the actual password value).
They may not be able to retrieve the password again, so it might be necessary to generate a new one and request them to copy the value.
Regards,
Shalid
Disclaimer:
Responses are based on personal knowledge and experience. Consider them as guidance. Other members may offer different perspectives or better approaches. No responsibility is assumed for outcomes; discretion is advised.
Hi ,
I am pasting a few screenshots from the document which I referred to originally and from my working solution.
It looks like (App registration)
Once you have delegated it, you must grant permission as follows
on the Azure /Entra portal, Enterprise Application >> Select the app that you created
choose Permissions and click on "Grant admin consent for security"
I checked my configuration and it looks like the below; (App Registration)
Enterprise Application:
Regards,
Shalid
Disclaimer:
Responses are based on personal knowledge and experience. Consider them as guidance. Other members may offer different perspectives or better approaches. No responsibility is assumed for outcomes; discretion is advised.
This is from our CUC v15SU1a system.
If memory serves this would look differently in the version you’re on as there was a change in the authentication process in v14SU3 and onwards.
