Address book error 401 unauthorized

Fabio Ricci 1 Reputation point
2021-03-16T17:24:44.81+00:00

We have a customer that upgraded from SFB 2015 to SFB 2019 last year. last week reported issues with the address book not working on the clientes. They get an error on the cliente stating it can't connect to the address book service. Websearch ain't working either. doing a test on the addressbook we get this error:

Target Fqdn : admin.xxxxxxxxx.com
Target Uri : https://pool.xxxxxxxxx.com:443/abs/handler
Result : Failure
Latency : 00:00:00.1222238
Error Message : The remote server returned an error: (401) Unauthorized.

Diagnosis : X-Ms-diagnostics : 28032;source="BBISFBFE01.xxxxxxxxx.COM";reason="The web ticket is
invalid.";faultcode="wsse:InvalidSecurityToken"
X-MS-WebTicketURL : https://pool.xxxxxxxxx.com/WebTicket/WebTicketService.svc
X-MS-WebTicketSupported : cwt,saml
X-MS-Server-Fqdn : BBISFBFE01.xxxxxxxxx.COM
X-MS-Correlation-Id : 2677f74a-f8bf-4007-a53a-b6ea43a2f8fe
x-ms-client-request-id : a612e30b-c38e-44d2-aa6c-abdf7721b669
Strict-Transport-Security : max-age=31536000; includeSubDomains
X-Content-Type-Options : nosniff
Content-Length : 1293
Content-Type : text/html
Date : Tue, 16 Mar 2021 17:04:30 GMT
WWW-Authenticate : NTLM

if we try to navigate to the https://pool.XXXXXXXXX.com/abs/handler page, we get error 500 another symptom: there is an excessive bandwidth usage (and connections) between users and the pool on port 443. 100 times what it should be. tried: reinstalling certificates on the FE (this is an enterprise pool) restarted iis services checked certs for the IIS services updated the address book suggestions?

Skype for Business
Skype for Business
A Microsoft communications service that provides communications capabilities across presence, instant messaging, audio/video calling, and an online meeting experience that includes audio, video, and web conferencing.
606 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JimmyYang-MSFT 49,191 Reputation points Microsoft Vendor
    2021-03-17T07:39:41.07+00:00

    Hi @Fabio Ricci ,

    In this case, we firstly recommend you try to delete the Internal Web Service SSL Certificate and regenerated it through SFB 2019 Deployment Wizard. Then run the command “Test-CsAddressBookService” to see if it is success.

    If the Address book Service status is success, you can verify if the URL is working for you in Skype for Business Server. If you got the 500 error in your page, you can try to add the AddressBook file name to the end of URL (For example : https://Lync pool FQDN:443/abs/handler/ C-1cb7-1cb8.lsabs).You can choose any file name from the following location (Picture 1).

    \xxx\Fileshare\1-WebServices-1\ABFiles\00000000-0000-0000-0000-000000000000\00000000-0000-0000-0000-000000000000.
    Picture 1:

    78650-19.png
    If you can see the following picture (Picture 2) after you use the new URL and save it successfully, it means the URL works well.

    Picture2:
    78568-18.png

    If the response is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.