Вы находитесь на странице: 1из 490

404458.

722|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1570373250)

404458.722|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404458.722|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404458.722|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1570373250)

404458.722|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136626,1)IndicationCode:(0)

404458.722|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1570373250)

404458.722|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1570373250)

404458.740|auth |2|00|SM Module: SM created Ref(14657905)

404458.740|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404458.740|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404458.740|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404458.740|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404458.740|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404458.740|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


404458.741|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136626,0)IndicationLevel:
(200)

404458.741|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404458.741|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),(5),Ticks(0))

404458.741|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404458.741|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404458.741|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1570373250)

404458.741|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136626,1)IndicationCode:(0)

404458.742|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1570373250)

404458.742|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136626,1)IndicationCode:(100)SM Started

404458.742|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

404458.742|auth |3|00|auth's Timer,Running(0),Start(2483940)

404458.756|log |5|00|Skipped uploading of failed log file because no of failures are > 4 or last upload
failed time is < 60 seconds.

404459.244|nisvc|2|00|

****************************HTTP SEND**************************

404459.244|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404459.244|nisvc|2|00|ErrorBuffer::

404459.244|nisvc|2|00|
****************************HTTP SEND**************************

404459.251|nisvc|2|00|<\ni00:1,time taken(51)>

404459.251|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404459.255|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404459.256|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404459.256|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404459.256|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404459.256|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404459.256|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404459.256|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136626,0)IndicationLevel:
(200)

404459.256|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404459.256|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),(5),Ticks(0))

404459.719|nisvc|2|00|

****************************HTTP SEND**************************

404459.719|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

404459.719|nisvc|2|00|ErrorBuffer::

404459.719|nisvc|2|00|

****************************HTTP SEND**************************
404459.726|nisvc|2|00|<\ni01:1,time taken(47)>

404459.726|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404459.730|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404459.730|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404459.730|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404459.731|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404459.731|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404459.731|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404459.731|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404459.731|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404459.731|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1570373250)

404459.731|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404459.731|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404459.732|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1570373250)

404459.732|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1570373250)

404459.733|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)
,TransactionID(1570373250)

404459.733|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404459.733|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404459.733|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(1570373250)

404459.733|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136627,1)IndicationCode:(200)Got User Type

404459.733|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1570373250)

404459.733|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1570373250)

404459.743|auth |2|00|SM Module: SM created Ref(14658006)

404459.743|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404459.743|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

404459.743|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((501),
(5),Ticks(0))

404459.743|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404459.743|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

404459.743|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404459.743|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404459.743|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token
404459.743|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404459.743|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404459.743|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404459.743|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404459.743|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404459.743|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

404459.743|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136627,0)IndicationLevel:
(200)

404459.744|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

404459.744|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((512),
(5),Ticks(0))

404459.744|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404459.744|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404459.744|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1570373250)

404459.744|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136627,1)IndicationCode:(0)

404459.744|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1570373250)

404459.744|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136627,1)IndicationCode:(100)SM Started

404500.187|nisvc|2|00|
****************************HTTP SEND**************************

404500.187|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404500.187|nisvc|2|00|ErrorBuffer::

404500.187|nisvc|2|00|

****************************HTTP SEND**************************

404500.194|nisvc|2|00|<\ni02:1,time taken(45)>

404500.194|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404500.195|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527777848","not_before":"1527773948","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404500.195|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404500.195|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

404500.195|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404500.195|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404500.195|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404500.195|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404500.195|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404500.195|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token
404500.195|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404500.195|auth |3|00|auth's Timer,Running(1),Start(2482490)

404500.195|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404500.195|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((511),
(5),Ticks(0))

404500.195|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1570373250)

404500.195|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404500.195|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404500.196|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1570373250)

404500.196|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1570373250)

404500.196|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1570373250)

404500.207|auth |2|00|SM Module: SM created Ref(14658052)

404500.207|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404500.207|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404500.207|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404500.207|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((337),
(1)kBaseEventInit,Ticks(0))
404500.207|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404500.207|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404500.207|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136627,0)IndicationLevel:
(200)

404500.207|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404500.207|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((337),
(5),Ticks(0))

404500.207|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404500.207|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404500.207|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1570373250)

404500.207|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136627,1)IndicationCode:(200)Got OAUTH2 Token

404500.207|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1570373250)

404500.207|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136627,1)IndicationCode:(100)SM Started

404500.721|nisvc|2|00|

****************************HTTP SEND**************************

404500.721|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404500.721|nisvc|2|00|ErrorBuffer::

404500.721|nisvc|2|00|
****************************HTTP SEND**************************

404500.727|nisvc|2|00|<\ni03:1,time taken(52)>

404500.727|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404500.729|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404500.729|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404500.729|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404500.729|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404500.729|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

404500.729|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404500.729|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404500.729|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404500.729|auth |3|00|auth's Timer,Running(1),Start(2481950)

404500.730|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404500.730|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((349),
(5),Ticks(0))

404500.730|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1570373250)

404500.730|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404500.730|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404500.731|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT
,TransactionID(1570373250)

404500.731|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1570373250)

404500.731|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1570373250)

404500.731|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((355),(5),Ticks(0))

404500.731|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

404500.731|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

404500.731|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404500.731|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404500.731|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

404500.731|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404500.731|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404500.731|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404500.731|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404500.731|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404500.731|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404500.731|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404500.731|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((331),
(1)kBaseEventInit,Ticks(0))
404500.804|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404500.805|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404500.805|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404500.805|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:39:08.000Z] WTEnd[2018-05-


31T14:54:53.158Z]

404500.805|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404500.805|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:50:27Z]

404500.805|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404500.805|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404500.805|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136628,0)IndicationLevel:
(200)

404500.805|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

404500.805|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((332),(5),Ticks(0))

404500.805|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404500.805|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404500.805|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1570373250)

404500.805|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136628,1)IndicationCode:(200)Got WT

404500.805|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1570373250)

404500.805|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136628,1)IndicationCode:(100)SM Started

404501.281|nisvc|2|00|
****************************HTTP SEND**************************

404501.281|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404501.281|nisvc|2|00|ErrorBuffer::

404501.281|nisvc|2|00|

****************************HTTP SEND**************************

404501.287|nisvc|2|00|<\ni00:1,time taken(48)>

404501.287|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404501.288|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

404501.288|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

404501.288|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

404501.288|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404501.288|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

404501.288|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404501.288|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404501.288|auth |4|00|Retry Cnt [5] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404501.288|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(4)

404501.288|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((355),(4),Ticks(0))

404501.288|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((355),(4),Ticks(0))

404501.288|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((355),(-1),Ticks(0))

404501.288|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(1570373250)

404501.288|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404501.288|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404501.288|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(1570373250)

404501.289|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((355),
(7)kBaseEventStop,Ticks(0))

404501.289|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c88):Ctx((355),(-1),Ticks(0))

404501.289|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404501.291|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((349),
(7)kBaseEventStop,Ticks(0))
404501.291|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d814d0):Ctx((349),(-
1),Ticks(0))

404501.291|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404501.292|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((511),
(7)kBaseEventStop,Ticks(0))

404501.292|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d81748):Ctx((511),(-
1),Ticks(0))

404501.292|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404501.292|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(7)kBaseEventStop,Ticks(0))

404501.292|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404501.292|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404501.292|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(1570373250)

404501.292|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)pps,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136628,1)IndicationCode:(400)Failed to Get UC

404501.293|sip |1|00|SipGotNewUserCert: pstNewUserCert[0xb511cad4]

404501.293|sip |3|00|TLS-DSK:soWebTicketCbFunc: the event type is 1

404501.293|sip |4|00|TLS-DSK:soWebTicketCbFunc: SoWebTicketCb_ResponseError event triggered


from the soWebTicket

404501.293|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(400)Failed to Get UC

,TransactionID(1570373250)

404501.293|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1570373250,1526136628,1)IndicationCode:(400)Failed to Get UC

404503.809|so |4|00|SNTP: sync failed with all servers, trying again[0]

404625.699|sip |3|00|NoCall::TimeOut500ms 'Registering' m_nExpire == 0 RegisterCall -> Schedule


Register listSize 0 lTimeout 0

404625.699|sip |1|00|Schedule 'Register' nEvent 0 busyFlag 0 num events waiting 0


404625.699|sip |2|00|new UA Client Non-INVITE trans state 'callingTrying', timeout=0 (0xb62665a8)

404625.699|sip |3|00|RegClient:RegClient expire 66 overlap 0

404625.699|sip |2|00|SendCommand: reqDest 'couleecap.org' isLync 0 isGRUU 0 isIP 0


useEffectiveProxy 1

404625.699|sip |1|00|SendCommand: isLync 0 isGRUU 0 isIP 0 useEffectiveProxy 1

404625.699|sip |1|00|CreateFailOverProxyList : Reg to Domain 'couleecap.org' nPort 0, lkup 6

404625.699|sip |1|00|CreateFailOverProxyList : Domain is in user part

404625.699|sip |1|00|CreateFailOverProxyList : For REGISTER Request nPort 0

404625.699|sip |2|00|CreateFailOverProxyList resetting pps watchdog for 200000mSec in auto


discovery

404625.700|sip |1|00|CreateFailOverProxyList WAD:


ClientInternal[sippoolBLU0B05.infra.lync.com:443], ClientExternal[sipfed0B.online.lync.com:443]

404625.772|sip |1|00|doDnsListLookup(tls): doDnsSrvLookupForARecordList for


'sipfed0B.online.lync.com' port 443 returned 1 results

404625.772|sip |1|00|doDnsListLookup(tls): result 0 '52.112.64.203' port 443 isInBound 0

404625.772|sip |3|00|CreateFailOverProxyList WAD : Redirect list 'Auto Discovery'


'sipfed0B.online.lync.com' IP 1 is '52.112.64.203' on tls port 443

404625.772|sip |2|00|CreateFailOverProxyList : Exit 'Auto Discovery' lookup with 1 IP Addresses

404625.772|sip |2|00|CreateFailOverProxyList : IP 1 is '52.112.64.203' on tls port 443

404625.772|sip |1|00|CTrans:: SendCommand | this=0xb62665a8, bVQMonMessage=0, m_pCall-


>m_pUser->m_bOBFailOverReRegOn=0, m_pCall->m_pUser->m_bVQMonFailoverEnabled=1

404625.772|sip |1|00|CTcp::Send(TLS) entry for address 52.112.64.203 port 443 can Connect 1
canFailOver 0

404625.772|sip |1|00|CTcp::Send(TLS) address 52.112.64.203 port 443 can Connect 1

404625.772|sip |2|00|CTcpSocket::CTcpSocket entry m_bIsTcpPersistentConnection 0, Inbound 0


Timeout 120 this 0xb629dbe8

404625.772|sip |3|00|Open socket 215(0xb629dbe8)

404625.772|sip |1|00|SetRemoteAddress set SND BUF to 64000 OK

404625.772|sip |1|00|SetRemoteAddress set SEND TIMEOUT to 100ms OK

404625.773|sip |3|00|SetRemoteAddress OK on try 1 nPort 42440 0xb629dbe8

404625.773|sip |3|00|CTcpSocket::ConnectThreadLocal. Trying to connect IP 52.112.64.203:443

404625.773|sip |1|00|Task name tTCPCnt215


404625.773|sip |1|00|CTcp::Send(TLS) exit for address 52.112.64.203 port 443 can Connect 1 status 1
canFailOver 0 FoundSocket 0

404625.846|sip |3|00|connectNonBlock is successful

404625.846|sip |1|00|MsgSipTcpSocketStatus socket 215 status 1 m_bIsReconnectNeeded 0

404625.846|sip |2|00|CTcpSocket::OnSocketStatus socket 215(0xb629dbe8) bStatus 1

404625.846|sip |1|00|[CTcpSocket::MakeTlsConnection] TLS Protocol = 1

404626.049|sip |2|00|MakeTlsConnection: SSL_connect OK : TLS Handshake completed successfully

404626.049|sip |1|00|[TLS] hostname we are connected to is: 'sipfed0B.online.lync.com' IP


'52.112.64.203' port 443

404626.049|sip |3|00|[TLS] Validating Subject Alternative Name(s) (SAN) and Common Name (CN)
against the following:

404626.049|sip |3|00|[TLS] Hostname: couleecap.org

404626.049|sip |3|00|[TLS] Outbound Proxy: couleecap.org

404626.049|sip |3|00|[TLS] Hostname connection: sipfed0B.online.lync.com

404626.049|sip |1|00|[TLS] Comparing certificate SAN type DNS: 'sipfed.online.lync.com'

404626.049|sip |1|00|[TLS] Comparing certificate SAN type DNS: '*.online.lync.com'

404626.049|sip |3|00|[TLS] Allowing Server certificate with Specifc SN/SAN

404626.049|sip |3|00|[TLS] Validating certificate SAN of type DNS with '*.online.lync.com'

404626.049|sip |3|00|[TLS] Server Certificate SAN or CN validation success. SSL verify result 0

404626.049|sip |1|00|MakeTlsConnection: post_connection_checks passed

404626.049|sip |1|00|CTcpSocket::SendData TLS queuedTxData = 0 TotalLen 16 loop count 1


maxQueueDepth 40000

404626.050|sip |1|00|CTcpSocket::SendData TLS Sent 16 loop count 1

404626.050|sip |3|00|MakeTlsConnection: connection succeeded

404626.051|sip |1|00|CTcpSocket::SendData TLS queuedTxData = 101 TotalLen 989 loop count 1


maxQueueDepth 40000

404626.051|sip |1|00|CTcpSocket::SendData TLS Sent 989 loop count 1

404626.199|sip |1|00|MsgSipTcpPacket

404626.199|sip |3|00|CTcpSocket::OnRecvData

404626.200|sip |1|00|SipOnCommand: response 401,REGISTER

404626.200|sip |1|00|SipOnCommand: response 401,REGISTER matches user 1 of 1 'natalie.carlisle'


404626.201|sip |3|00|UA Client Non-INVITE REGISTER trans state 'callingTrying'->'completed' by 401
resp 10 timeout(0xb62665a8)

404626.201|sip |2|00|[CTrans::ResponseProcess] REGISTER NonInv reTrans ALREADY stopped in


'completed' state at retryCount 0 code 401, timeout=10 (0xb62665a8)

404626.201|sip |3|00|401 challenge received

404626.201|sip |2|00|SipCallState is not Idle, So send Re-INVITE

404626.201|sip |2|00|new UA Client Non-INVITE trans state 'callingTrying', timeout=0 (0xb577a578)

404626.201|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

404626.201|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

404626.201|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

404626.201|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

404626.201|sip |1|00|TLS-DSK authentication

404626.231|sip |1|00|TLS-DSK: Setting of Client Certificate failed due to (33558530)


error:02001002:system library:fopen:No such file or directory

404626.231|sip |1|00|TLS-DSK: Setting of Client Private key failed due to (537346050)


error:20074002:BIO routines:FILE_CTRL:system lib

404626.231|utilm|4|00|uBLFUnCompressed: File /ffs0/Config/Local/WebTicket/0/private.key doesn't


exist or is empty

404626.231|sip |3|00|getUserCertInfo: sip.usr[natalie.carlisle@couleecap.org] result[-1] validUntil[0]

404626.231|sip |2|00|[ParseMessageHeader]:[540],SIPURI=[natalie.carlisle@couleecap.org]

404626.231|sip |2|00|[ParseMessageHeader]:[555] Calling UC Fetch through Service FrameWork

404626.231|sip |3|00|TLS-DSK

404626.231|sip |1|00|CStkAuth::ParseAuthenticateHeader bTlsDskParseResult[0] bNtlmParseResult[0]


m_credType[2] m_bIsOnlyTlsDsk[1]

404626.231|sip |*|00|Sending User Cert fetch Request: OnlyTlsDsk[1]

404626.235|sip |1|00|Dialog 'id05c13a65' State 'Trying'->'Terminated'

404626.235|sip |2|00|CStkDialog::CStkDialog SetAddressLocal Config 'Natalie Carlisle'


<natalie.carlisle@couleecap.org:0>

404626.235|sip |2|00|CStkDialog::CStkDialog AddressLocal set to Config

404626.235|sip |3|00|CStkDialog::SetAddressLocal localTag set to ''


404626.235|sip |3|00|CStkDialog::SetAddressLocal new address added of 1

404626.235|sip |2|00|CStkDialog::CStkDialog TAG '6B95EF25-2664A7D4' generated

404626.235|sip |2|00|CStkDialog::CStkDialog local addr 'Natalie Carlisle'


<natalie.carlisle@couleecap.org:0> Tag '6B95EF25-2664A7D4'

404626.235|sip |2|00|CStkDialog::CStkDialog exit 0x30cdc94 local list size 1

404626.235|sip |2|00|CStkDialogList::CreateDialogObject localTarg usr 'natalie.carlisle'

404626.235|sip |2|00|[svcUserCert]:[8360]: SipUri[natalie.carlisle@couleecap.org]


User[natalie.carlisle@couleecap.org],Dom[],STS[https://webdir0B.online.lync.com:443/CertProv/CertPro
visioningService.svc] Expiry[-1]

404626.235|auth |2|00|Request(-1)auth,(102)AuthServiceUCMsgKey,(-1)pps,(14),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136713,0)IndicationLevel:(200)

404626.236|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(205)AuthSvcAOServiceRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(-1)

404626.236|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(-1)

404626.236|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404626.236|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404626.236|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404626.236|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404626.236|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0
404626.236|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404626.236|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404626.236|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136713,1)IndicationCode:(0)

404626.236|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404626.236|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404626.236|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404626.236|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404626.237|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404626.237|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136713,1)IndicationCode:(0)

404626.237|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404626.237|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)
404626.247|auth |2|00|SM Module: SM created Ref(14666656)

404626.247|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404626.247|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404626.247|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404626.247|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404626.247|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404626.247|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404626.247|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136713,0)IndicationLevel:
(200)

404626.247|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404626.247|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),(5),Ticks(0))

404626.247|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404626.247|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404626.247|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404626.247|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136713,1)IndicationCode:(0)

404626.247|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404626.247|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136713,1)IndicationCode:(100)SM Started

404626.805|nisvc|2|00|
****************************HTTP SEND**************************

404626.805|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404626.805|nisvc|2|00|ErrorBuffer::

404626.805|nisvc|2|00|

****************************HTTP SEND**************************

404626.811|nisvc|2|00|<\ni01:1,time taken(56)>

404626.811|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404626.815|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404626.815|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404626.815|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404626.815|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404626.815|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404626.815|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404626.815|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136714,0)IndicationLevel:
(200)

404626.815|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404626.815|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),(5),Ticks(0))

404627.382|nisvc|2|00|

****************************HTTP SEND**************************
404627.382|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

404627.382|nisvc|2|00|ErrorBuffer::

404627.382|nisvc|2|00|

****************************HTTP SEND**************************

404627.388|nisvc|2|00|<\ni02:1,time taken(58)>

404627.388|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404627.392|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404627.392|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404627.392|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404627.392|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404627.392|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404627.392|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404627.392|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404627.392|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404627.392|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404627.393|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404627.393|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404627.393|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)
404627.394|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:
(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404627.394|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404627.394|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404627.394|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404627.394|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(2103328734)

404627.394|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136714,1)IndicationCode:(200)Got User Type

404627.394|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404627.394|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404627.404|auth |2|00|SM Module: SM created Ref(14666772)

404627.404|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404627.404|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

404627.404|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))
404627.404|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404627.404|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

404627.405|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404627.405|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404627.405|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

404627.405|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404627.405|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404627.405|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404627.405|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404627.405|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404627.405|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

404627.405|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136714,0)IndicationLevel:
(200)

404627.405|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

404627.405|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

404627.405|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404627.405|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404627.405|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404627.405|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136714,1)IndicationCode:(0)
404627.405|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404627.405|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136714,1)IndicationCode:(100)SM Started

404628.146|nisvc|2|00|

****************************HTTP SEND**************************

404628.146|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404628.146|nisvc|2|00|ErrorBuffer::

404628.146|nisvc|2|00|

****************************HTTP SEND**************************

404628.153|nisvc|2|00|<\ni03:1,time taken(75)>

404628.153|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404628.154|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527777936","not_before":"1527774036","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404628.154|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404628.154|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

404628.154|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))
404628.154|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404628.154|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404628.154|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404628.154|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404628.154|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

404628.154|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404628.154|auth |3|00|auth's Timer,Running(1),Start(2394530)

404628.154|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404628.154|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

404628.154|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404628.155|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404628.155|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404628.156|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404628.156|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404628.156|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)
404628.166|auth |2|00|SM Module: SM created Ref(14666848)

404628.166|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404628.166|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404628.166|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404628.166|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404628.167|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404628.167|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404628.167|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136715,0)IndicationLevel:
(200)

404628.167|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404628.167|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(5),Ticks(0))

404628.167|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404628.167|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404628.167|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404628.167|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136715,1)IndicationCode:(200)Got OAUTH2 Token

404628.167|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404628.167|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136715,1)IndicationCode:(100)SM Started

404628.673|nisvc|2|00|
****************************HTTP SEND**************************

404628.673|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404628.673|nisvc|2|00|ErrorBuffer::

404628.673|nisvc|2|00|

****************************HTTP SEND**************************

404628.679|nisvc|2|00|<\ni00:1,time taken(52)>

404628.679|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404628.681|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404628.681|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404628.681|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404628.681|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404628.681|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

404628.681|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404628.681|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404628.681|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404628.681|auth |3|00|auth's Timer,Running(1),Start(2394000)

404628.681|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404628.681|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(5),Ticks(0))

404628.681|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey
Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404628.681|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404628.681|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404628.683|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404628.683|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404628.683|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404628.693|auth |2|00|SM Module: SM created Ref(14666901)

404628.693|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404628.693|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

404628.693|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404628.693|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404628.693|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404628.693|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404628.693|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404628.693|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404628.693|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))
404628.693|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404628.768|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404628.768|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404628.768|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404628.768|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:40:36.000Z] WTEnd[2018-05-


31T14:49:07.110Z]

404628.768|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404628.768|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:51:55Z]

404628.768|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404628.768|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404628.768|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136716,0)IndicationLevel:
(200)

404628.768|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

404628.768|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),(5),Ticks(0))

404628.768|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404628.768|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404628.768|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(2103328734)

404628.768|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136716,1)IndicationCode:(200)Got WT

404628.769|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)
404628.769|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136716,1)IndicationCode:(100)SM Started

404629.218|nisvc|2|00|

****************************HTTP SEND**************************

404629.218|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404629.218|nisvc|2|00|ErrorBuffer::

404629.218|nisvc|2|00|

****************************HTTP SEND**************************

404629.224|nisvc|2|00|<\ni01:1,time taken(45)>

404629.224|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404629.224|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

404629.224|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

404629.224|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

404629.224|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404629.225|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

404629.225|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404629.225|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))
404629.225|auth |4|00|Retry Cnt [0] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404629.225|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404629.225|auth |3|00|auth's Timer,Running(1),Start(10000)

404629.225|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

404629.225|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404639.218|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136726,0)IndicationLevel:(200)

404639.218|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xdfcc95,0xb5723de8,10000,4)

404639.218|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

404639.218|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

404639.219|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404639.219|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404639.219|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)


404639.219|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404639.219|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404639.219|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(7)kBaseEventStop,Ticks(0))

404639.219|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),(-
1),Ticks(0))

404639.219|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404639.221|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

404639.221|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

404639.221|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404639.221|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(7)kBaseEventStop,Ticks(0))

404639.221|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404639.221|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404639.222|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404639.222|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404639.222|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404639.222|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404639.222|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136726,1)IndicationCode:(509)Retry Request
Again
404639.222|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404639.222|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404639.222|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404639.222|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404639.222|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404639.222|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136726,1)IndicationCode:(0)

404639.222|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404639.222|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404639.233|auth |2|00|SM Module: SM created Ref(14667955)

404639.233|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404639.233|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404639.233|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))
404639.233|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404639.233|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404639.233|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404639.233|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136726,0)IndicationLevel:
(200)

404639.233|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404639.233|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),(5),Ticks(0))

404639.233|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404639.233|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404639.233|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404639.233|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136726,1)IndicationCode:(0)

404639.233|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404639.233|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136726,1)IndicationCode:(100)SM Started

404639.233|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

404639.233|auth |3|00|auth's Timer,Running(0),Start(2383460)

404639.731|nisvc|2|00|

****************************HTTP SEND**************************
404639.731|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404639.731|nisvc|2|00|ErrorBuffer::

404639.731|nisvc|2|00|

****************************HTTP SEND**************************

404639.737|nisvc|2|00|<\ni02:1,time taken(50)>

404639.738|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404639.744|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404639.744|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404639.744|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404639.744|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404639.744|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404639.744|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404639.744|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136727,0)IndicationLevel:
(200)

404639.744|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404639.744|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),(5),Ticks(0))

404640.239|nisvc|2|00|

****************************HTTP SEND**************************

404640.239|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)
404640.239|nisvc|2|00|ErrorBuffer::

404640.239|nisvc|2|00|

****************************HTTP SEND**************************

404640.245|nisvc|2|00|<\ni03:1,time taken(50)>

404640.245|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404640.249|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404640.249|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404640.249|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404640.249|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404640.249|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404640.249|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404640.249|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404640.249|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404640.249|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404640.249|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404640.249|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404640.251|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404640.251|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey
Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404640.251|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404640.251|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404640.251|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404640.251|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(2103328734)

404640.251|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136727,1)IndicationCode:(200)Got User Type

404640.251|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404640.251|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404640.261|auth |2|00|SM Module: SM created Ref(14668058)

404640.261|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404640.262|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

404640.262|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),(5),Ticks(0))

404640.262|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404640.262|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)
404640.262|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404640.262|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404640.262|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

404640.262|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404640.262|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404640.262|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404640.262|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404640.262|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404640.262|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

404640.262|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136727,0)IndicationLevel:
(200)

404640.262|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

404640.262|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),(5),Ticks(0))

404640.262|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404640.262|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404640.262|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404640.262|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136727,1)IndicationCode:(0)

404640.262|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)
404640.262|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136727,1)IndicationCode:(100)SM Started

404641.006|nisvc|2|00|

****************************HTTP SEND**************************

404641.006|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404641.006|nisvc|2|00|ErrorBuffer::

404641.006|nisvc|2|00|

****************************HTTP SEND**************************

404641.012|nisvc|2|00|<\ni00:1,time taken(75)>

404641.012|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404641.013|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527777949","not_before":"1527774049","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404641.013|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404641.013|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

404641.013|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404641.013|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404641.013|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404641.013|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))
404641.013|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404641.013|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

404641.013|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404641.013|auth |3|00|auth's Timer,Running(1),Start(2381680)

404641.013|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404641.013|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),(5),Ticks(0))

404641.013|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404641.014|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404641.014|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404641.015|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404641.015|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404641.015|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404641.025|auth |2|00|SM Module: SM created Ref(14668134)

404641.025|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404641.025|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404641.026|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(1)kBaseEventInit,Ticks(0))
404641.026|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404641.026|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404641.026|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404641.026|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136728,0)IndicationLevel:
(200)

404641.026|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404641.026|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(5),Ticks(0))

404641.026|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404641.026|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404641.026|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404641.026|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136728,1)IndicationCode:(200)Got OAUTH2 Token

404641.026|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404641.026|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136728,1)IndicationCode:(100)SM Started

404641.600|nisvc|2|00|

****************************HTTP SEND**************************

404641.600|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404641.600|nisvc|2|00|ErrorBuffer::
404641.600|nisvc|2|00|

****************************HTTP SEND**************************

404641.606|nisvc|2|00|<\ni01:1,time taken(58)>

404641.606|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404641.607|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404641.607|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404641.607|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404641.607|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404641.607|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

404641.607|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404641.607|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404641.608|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404641.608|auth |3|00|auth's Timer,Running(1),Start(2381090)

404641.608|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404641.608|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(5),Ticks(0))

404641.608|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404641.608|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404641.608|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404641.609|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey
Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404641.609|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404641.609|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404641.609|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404641.610|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

404641.610|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

404641.610|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404641.610|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404641.610|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

404641.610|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404641.610|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404641.610|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404641.610|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404641.610|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404641.610|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404641.610|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))
404641.610|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404641.681|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404641.681|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404641.681|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404641.681|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:40:49.000Z] WTEnd[2018-05-


31T14:47:13.200Z]

404641.681|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404641.681|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:52:07Z]

404641.682|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404641.682|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404641.682|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136729,0)IndicationLevel:
(200)

404641.682|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

404641.682|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),(5),Ticks(0))

404641.682|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404641.682|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404641.682|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(2103328734)

404641.682|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136729,1)IndicationCode:(200)Got WT

404641.682|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)
404641.682|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136729,1)IndicationCode:(100)SM Started

404642.128|nisvc|2|00|

****************************HTTP SEND**************************

404642.128|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404642.128|nisvc|2|00|ErrorBuffer::

404642.128|nisvc|2|00|

****************************HTTP SEND**************************

404642.133|nisvc|2|00|<\ni02:1,time taken(45)>

404642.133|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404642.135|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

404642.135|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

404642.135|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

404642.135|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404642.135|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

404642.135|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404642.135|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))
404642.135|auth |4|00|Retry Cnt [1] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404642.135|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404642.135|auth |3|00|auth's Timer,Running(1),Start(10000)

404642.135|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

404642.135|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404652.128|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136739,0)IndicationLevel:(200)

404652.128|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xdfcc95,0xb5723de8,10000,4)

404652.128|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

404652.128|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

404652.128|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404652.128|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404652.128|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)


404652.128|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404652.129|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404652.129|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(7)kBaseEventStop,Ticks(0))

404652.129|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),(-
1),Ticks(0))

404652.129|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404652.131|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(7)kBaseEventStop,Ticks(0))

404652.131|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),(-
1),Ticks(0))

404652.131|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404652.131|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(7)kBaseEventStop,Ticks(0))

404652.131|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404652.131|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404652.132|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404652.132|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404652.132|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404652.132|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404652.132|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136739,1)IndicationCode:(509)Retry Request
Again
404652.132|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404652.132|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404652.132|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404652.132|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404652.132|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404652.132|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136739,1)IndicationCode:(0)

404652.132|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404652.132|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404652.142|auth |2|00|SM Module: SM created Ref(14669246)

404652.143|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404652.143|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404652.143|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))
404652.143|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404652.143|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404652.143|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404652.143|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136739,0)IndicationLevel:
(200)

404652.143|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404652.143|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),(5),Ticks(0))

404652.143|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404652.143|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404652.143|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404652.143|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136739,1)IndicationCode:(0)

404652.143|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404652.143|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136739,1)IndicationCode:(100)SM Started

404652.143|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

404652.143|auth |3|00|auth's Timer,Running(0),Start(2370560)

404652.584|nisvc|2|00|

****************************HTTP SEND**************************
404652.584|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404652.584|nisvc|2|00|ErrorBuffer::

404652.584|nisvc|2|00|

****************************HTTP SEND**************************

404652.591|nisvc|2|00|<\ni03:1,time taken(45)>

404652.591|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404652.595|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404652.595|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404652.595|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404652.595|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404652.595|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404652.595|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404652.595|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136739,0)IndicationLevel:
(200)

404652.595|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404652.595|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),(5),Ticks(0))

404653.124|nisvc|2|00|

****************************HTTP SEND**************************

404653.124|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)
404653.124|nisvc|2|00|ErrorBuffer::

404653.124|nisvc|2|00|

****************************HTTP SEND**************************

404653.131|nisvc|2|00|<\ni00:1,time taken(54)>

404653.131|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404653.134|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404653.134|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404653.134|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404653.134|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404653.134|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404653.134|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404653.134|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404653.135|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404653.135|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404653.135|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404653.135|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404653.136|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404653.136|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey
Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404653.136|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404653.136|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404653.136|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404653.136|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(2103328734)

404653.136|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136740,1)IndicationCode:(200)Got User Type

404653.136|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404653.137|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404653.147|auth |2|00|SM Module: SM created Ref(14669346)

404653.147|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404653.147|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

404653.147|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),(5),Ticks(0))

404653.147|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404653.147|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)
404653.147|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404653.147|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404653.147|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

404653.147|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404653.147|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404653.147|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404653.147|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404653.147|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404653.147|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

404653.147|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136740,0)IndicationLevel:
(200)

404653.147|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

404653.147|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),(5),Ticks(0))

404653.147|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404653.147|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404653.147|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404653.147|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136740,1)IndicationCode:(0)

404653.147|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)
404653.147|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136740,1)IndicationCode:(100)SM Started

404653.896|nisvc|2|00|

****************************HTTP SEND**************************

404653.896|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404653.896|nisvc|2|00|ErrorBuffer::

404653.896|nisvc|2|00|

****************************HTTP SEND**************************

404653.902|nisvc|2|00|<\ni01:1,time taken(76)>

404653.902|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404653.903|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527777962","not_before":"1527774062","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404653.903|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404653.903|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

404653.903|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404653.903|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404653.903|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404653.903|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))
404653.903|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404653.903|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

404653.903|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404653.903|auth |3|00|auth's Timer,Running(1),Start(2368800)

404653.903|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404653.903|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),(5),Ticks(0))

404653.903|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404653.904|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404653.904|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404653.905|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404653.905|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404653.905|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404653.915|auth |2|00|SM Module: SM created Ref(14669423)

404653.915|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404653.916|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404653.916|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(1)kBaseEventInit,Ticks(0))
404653.916|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404653.916|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404653.916|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404653.916|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136741,0)IndicationLevel:
(200)

404653.916|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404653.916|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(5),Ticks(0))

404653.916|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404653.916|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404653.916|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404653.916|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136741,1)IndicationCode:(200)Got OAUTH2 Token

404653.916|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404653.916|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136741,1)IndicationCode:(100)SM Started

404654.436|nisvc|2|00|

****************************HTTP SEND**************************

404654.436|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404654.436|nisvc|2|00|ErrorBuffer::
404654.436|nisvc|2|00|

****************************HTTP SEND**************************

404654.443|nisvc|2|00|<\ni02:1,time taken(53)>

404654.443|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404654.444|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404654.444|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404654.445|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404654.445|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404654.445|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

404654.445|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404654.445|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404654.445|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404654.445|auth |3|00|auth's Timer,Running(1),Start(2368260)

404654.445|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404654.445|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(5),Ticks(0))

404654.445|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404654.445|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404654.445|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404654.446|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey
Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404654.447|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404654.447|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404654.447|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404654.447|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

404654.447|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

404654.447|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404654.447|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404654.447|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

404654.447|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404654.447|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404654.447|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404654.447|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404654.447|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404654.447|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404654.447|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))
404654.447|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404654.519|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404654.519|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404654.519|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404654.519|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:41:02.000Z] WTEnd[2018-05-


31T14:37:36.035Z]

404654.519|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404654.519|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:52:20Z]

404654.519|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404654.519|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404654.519|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136741,0)IndicationLevel:
(200)

404654.519|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

404654.519|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),(5),Ticks(0))

404654.519|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404654.519|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404654.519|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(2103328734)

404654.519|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136741,1)IndicationCode:(200)Got WT

404654.519|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)
404654.519|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136741,1)IndicationCode:(100)SM Started

404654.982|nisvc|2|00|

****************************HTTP SEND**************************

404654.982|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404654.982|nisvc|2|00|ErrorBuffer::

404654.982|nisvc|2|00|

****************************HTTP SEND**************************

404654.988|nisvc|2|00|<\ni03:1,time taken(47)>

404654.988|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404654.989|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

404654.989|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

404654.989|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

404654.989|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404654.989|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

404654.989|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404654.989|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))
404654.989|auth |4|00|Retry Cnt [2] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404654.989|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404654.989|auth |3|00|auth's Timer,Running(1),Start(10000)

404654.989|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

404654.989|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404657.960|sip |5|00|SSL_get_error nLen -1 errno 104 nError 5 =


(0)error:00000000:lib(0):func(0):reason(0)

404657.960|sip |4|00|TLS Listen Thread Exit

404657.961|sip |1|00|MsgSipTcpSocketStatus socket 215 status 0 m_bIsReconnectNeeded 0

404657.961|sip |2|00|CTcpSocket::OnSocketStatus socket 215(0xb629dbe8) bStatus 0

404657.961|sip |3|00|CTcpSocket::~CTcpSocket socket 215 entry for 0xb629dbe8

404657.961|sip |3|00|CTcpSocket::~CTcpSocket socket 215(0xb629dbe8) SSL_shutdown rc=-1, ltf(1)

404657.961|sip |3|00|CTcpSocket::~CTcpSocket socket 215(0xb629dbe8) close

404657.961|sip |3|00|CTcpSocket::~CTcpSocket Got lock

404704.988|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136752,0)IndicationLevel:(200)

404704.988|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xdfcc95,0xb5723de8,10000,4)
404704.988|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

404704.988|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

404704.988|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404704.988|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404704.988|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404704.989|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404704.989|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404704.989|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(7)kBaseEventStop,Ticks(0))

404704.989|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),(-
1),Ticks(0))

404704.989|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404704.991|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(7)kBaseEventStop,Ticks(0))

404704.991|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),(-
1),Ticks(0))

404704.991|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404704.991|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(7)kBaseEventStop,Ticks(0))

404704.991|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404704.991|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404704.992|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)
404704.992|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when
User Mode = 0

404704.992|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404704.992|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404704.992|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136752,1)IndicationCode:(509)Retry Request
Again

404704.992|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404704.992|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404704.992|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404704.992|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404704.992|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404704.992|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136752,1)IndicationCode:(0)

404704.992|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404704.992|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey
Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404705.003|auth |2|00|SM Module: SM created Ref(14670532)

404705.003|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404705.003|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404705.003|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404705.003|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404705.003|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404705.003|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404705.003|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136752,0)IndicationLevel:
(200)

404705.003|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404705.003|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),(5),Ticks(0))

404705.003|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404705.003|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404705.003|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404705.003|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136752,1)IndicationCode:(0)

404705.003|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404705.003|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136752,1)IndicationCode:(100)SM Started
404705.003|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

404705.003|auth |3|00|auth's Timer,Running(0),Start(2357710)

404705.578|nisvc|2|00|

****************************HTTP SEND**************************

404705.578|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404705.578|nisvc|2|00|ErrorBuffer::

404705.578|nisvc|2|00|

****************************HTTP SEND**************************

404705.584|nisvc|2|00|<\ni00:1,time taken(58)>

404705.584|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404705.589|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404705.589|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404705.589|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404705.589|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404705.589|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404705.589|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404705.589|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136752,0)IndicationLevel:
(200)

404705.589|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404705.589|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),(5),Ticks(0))
404706.050|nisvc|2|00|

****************************HTTP SEND**************************

404706.050|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

404706.050|nisvc|2|00|ErrorBuffer::

404706.050|nisvc|2|00|

****************************HTTP SEND**************************

404706.057|nisvc|2|00|<\ni01:1,time taken(46)>

404706.057|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404706.061|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404706.061|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404706.061|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404706.061|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404706.061|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404706.061|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404706.061|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404706.061|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404706.061|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404706.061|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)


404706.061|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404706.063|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404706.063|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404706.063|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404706.063|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404706.063|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404706.063|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(2103328734)

404706.063|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136753,1)IndicationCode:(200)Got User Type

404706.063|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404706.063|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404706.073|auth |2|00|SM Module: SM created Ref(14670639)


404706.073|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404706.073|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

404706.073|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),(5),Ticks(0))

404706.073|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404706.073|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

404706.073|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404706.073|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404706.073|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

404706.073|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404706.073|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404706.074|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404706.074|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404706.074|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404706.074|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

404706.074|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136753,0)IndicationLevel:
(200)

404706.074|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

404706.074|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),(5),Ticks(0))

404706.074|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404706.074|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404706.074|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)
,TransactionID(2103328734)

404706.074|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136753,1)IndicationCode:(0)

404706.074|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404706.074|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136753,1)IndicationCode:(100)SM Started

404706.700|nisvc|2|00|

****************************HTTP SEND**************************

404706.700|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404706.700|nisvc|2|00|ErrorBuffer::

404706.700|nisvc|2|00|

****************************HTTP SEND**************************

404706.706|nisvc|2|00|<\ni02:1,time taken(63)>

404706.706|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404706.707|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527777975","not_before":"1527774075","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404706.707|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404706.707|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)
404706.707|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404706.707|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404706.707|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404706.707|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404706.707|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404706.707|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

404706.707|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404706.707|auth |3|00|auth's Timer,Running(1),Start(2356010)

404706.707|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404706.707|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),(5),Ticks(0))

404706.707|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404706.707|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404706.708|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404706.709|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404706.709|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404706.709|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)
,TransactionID(2103328734)

404706.719|auth |2|00|SM Module: SM created Ref(14670704)

404706.719|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404706.719|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404706.720|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404706.720|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404706.720|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404706.720|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404706.720|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136754,0)IndicationLevel:
(200)

404706.720|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404706.720|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(5),Ticks(0))

404706.720|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404706.720|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404706.720|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404706.720|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136754,1)IndicationCode:(200)Got OAUTH2 Token

404706.720|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404706.720|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136754,1)IndicationCode:(100)SM Started

404707.239|nisvc|2|00|
****************************HTTP SEND**************************

404707.239|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404707.239|nisvc|2|00|ErrorBuffer::

404707.239|nisvc|2|00|

****************************HTTP SEND**************************

404707.246|nisvc|2|00|<\ni03:1,time taken(52)>

404707.246|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404707.247|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404707.247|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404707.247|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404707.247|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404707.247|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

404707.247|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404707.247|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404707.248|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404707.248|auth |3|00|auth's Timer,Running(1),Start(2355470)

404707.248|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404707.248|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(5),Ticks(0))
404707.248|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:
(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404707.248|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404707.248|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404707.250|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404707.250|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404707.250|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404707.250|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404707.250|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

404707.250|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

404707.250|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404707.250|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404707.250|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

404707.250|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404707.250|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))
404707.250|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404707.250|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404707.250|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404707.250|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404707.250|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404707.250|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404707.322|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404707.322|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404707.322|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404707.322|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:41:15.000Z] WTEnd[2018-05-


31T14:51:17.579Z]

404707.322|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404707.322|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:52:33Z]

404707.322|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404707.322|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404707.322|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136754,0)IndicationLevel:
(200)

404707.322|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

404707.322|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),(5),Ticks(0))

404707.322|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404707.322|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404707.322|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT
,TransactionID(2103328734)

404707.322|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136754,1)IndicationCode:(200)Got WT

404707.322|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404707.322|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136754,1)IndicationCode:(100)SM Started

404707.796|nisvc|2|00|

****************************HTTP SEND**************************

404707.796|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404707.796|nisvc|2|00|ErrorBuffer::

404707.796|nisvc|2|00|

****************************HTTP SEND**************************

404707.803|nisvc|2|00|<\ni00:1,time taken(48)>

404707.803|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404707.803|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

404707.803|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]
404707.803|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

404707.803|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404707.803|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

404707.803|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404707.803|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404707.803|auth |4|00|Retry Cnt [3] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404707.803|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404707.804|auth |3|00|auth's Timer,Running(1),Start(10000)

404707.804|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

404707.804|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404711.805|so |4|00|SNTP: sync failed with all servers, trying again[0]

404717.798|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136765,0)IndicationLevel:(200)

404717.798|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xdfcc95,0xb5723de8,10000,4)

404717.798|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))
404717.798|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

404717.798|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404717.798|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404717.799|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404717.799|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404717.799|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404717.799|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),
(7)kBaseEventStop,Ticks(0))

404717.799|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1dfb708):Ctx((349),(-
1),Ticks(0))

404717.799|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404717.801|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(7)kBaseEventStop,Ticks(0))

404717.801|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),(-
1),Ticks(0))

404717.801|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404717.801|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(7)kBaseEventStop,Ticks(0))

404717.801|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404717.802|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404717.802|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404717.802|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0
404717.802|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404717.802|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404717.802|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136765,1)IndicationCode:(509)Retry Request
Again

404717.802|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404717.802|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404717.802|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404717.802|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404717.802|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404717.802|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136765,1)IndicationCode:(0)

404717.803|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404717.803|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)
,TransactionID(2103328734)

404717.813|auth |2|00|SM Module: SM created Ref(14671813)

404717.813|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404717.813|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404717.813|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404717.813|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404717.813|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404717.813|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404717.813|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136765,0)IndicationLevel:
(200)

404717.813|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404717.813|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),(5),Ticks(0))

404717.813|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404717.813|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404717.813|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404717.813|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136765,1)IndicationCode:(0)

404717.813|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404717.813|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136765,1)IndicationCode:(100)SM Started

404717.813|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)


404717.813|auth |3|00|auth's Timer,Running(0),Start(2344910)

404718.198|app1 |4|00|CSignInMenu::TimerOut500ms [State = 1]

404718.275|nisvc|2|00|

****************************HTTP SEND**************************

404718.275|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404718.275|nisvc|2|00|ErrorBuffer::

404718.275|nisvc|2|00|

****************************HTTP SEND**************************

404718.282|nisvc|2|00|<\ni01:1,time taken(47)>

404718.282|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404718.287|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404718.287|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404718.287|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404718.287|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404718.287|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404718.287|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404718.287|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136765,0)IndicationLevel:
(200)

404718.287|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404718.287|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),(5),Ticks(0))
404718.744|nisvc|2|00|

****************************HTTP SEND**************************

404718.744|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

404718.744|nisvc|2|00|ErrorBuffer::

404718.744|nisvc|2|00|

****************************HTTP SEND**************************

404718.751|nisvc|2|00|<\ni02:1,time taken(47)>

404718.751|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404718.754|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404718.754|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404718.754|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404718.754|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404718.755|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404718.755|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404718.755|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404718.755|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404718.755|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404718.755|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)


404718.755|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404718.756|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404718.756|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404718.756|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404718.756|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404718.756|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404718.756|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(2103328734)

404718.756|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136766,1)IndicationCode:(200)Got User Type

404718.757|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404718.757|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404718.767|auth |2|00|SM Module: SM created Ref(14671908)


404718.767|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404718.767|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

404718.767|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((501),(5),Ticks(0))

404718.767|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404718.767|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

404718.767|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404718.767|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404718.767|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

404718.767|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404718.767|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404718.767|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404718.767|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404718.767|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404718.767|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

404718.767|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136766,0)IndicationLevel:
(200)

404718.767|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

404718.767|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((512),(5),Ticks(0))

404718.767|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404718.767|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404718.767|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)
,TransactionID(2103328734)

404718.767|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136766,1)IndicationCode:(0)

404718.767|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404718.767|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136766,1)IndicationCode:(100)SM Started

404719.400|nisvc|2|00|

****************************HTTP SEND**************************

404719.400|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404719.401|nisvc|2|00|ErrorBuffer::

404719.401|nisvc|2|00|

****************************HTTP SEND**************************

404719.407|nisvc|2|00|<\ni03:1,time taken(64)>

404719.407|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404719.408|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527777987","not_before":"1527774087","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404719.408|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404719.408|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)
404719.408|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404719.408|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404719.408|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404719.408|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404719.408|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404719.408|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

404719.408|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404719.408|auth |3|00|auth's Timer,Running(1),Start(2343310)

404719.408|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404719.408|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((511),(5),Ticks(0))

404719.408|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404719.408|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404719.408|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404719.410|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404719.410|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404719.410|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)
,TransactionID(2103328734)

404719.420|auth |2|00|SM Module: SM created Ref(14671974)

404719.420|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404719.420|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404719.420|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404719.420|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404719.421|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404719.421|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404719.421|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136766,0)IndicationLevel:
(200)

404719.421|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404719.421|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((337),
(5),Ticks(0))

404719.421|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404719.421|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404719.421|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404719.421|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136766,1)IndicationCode:(200)Got OAUTH2 Token

404719.421|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404719.421|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136766,1)IndicationCode:(100)SM Started

404719.961|nisvc|2|00|
****************************HTTP SEND**************************

404719.961|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404719.961|nisvc|2|00|ErrorBuffer::

404719.961|nisvc|2|00|

****************************HTTP SEND**************************

404719.967|nisvc|2|00|<\ni00:1,time taken(54)>

404719.968|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404719.969|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404719.969|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404719.969|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404719.969|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404719.969|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

404719.969|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404719.969|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404719.969|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404719.969|auth |3|00|auth's Timer,Running(1),Start(2342750)

404719.969|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404719.969|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((349),
(5),Ticks(0))
404719.969|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:
(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404719.969|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404719.969|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404719.971|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404719.971|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404719.971|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404719.971|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404719.971|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

404719.971|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

404719.971|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404719.971|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404719.971|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

404719.971|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404719.971|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))
404719.971|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404719.972|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404719.972|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404719.972|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404719.972|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404719.972|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404720.043|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404720.043|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404720.044|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404720.044|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:41:27.000Z] WTEnd[2018-05-


31T14:43:19.299Z]

404720.044|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404720.044|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:52:46Z]

404720.044|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404720.044|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404720.044|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136767,0)IndicationLevel:
(200)

404720.044|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

404720.044|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),(5),Ticks(0))

404720.044|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404720.044|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404720.044|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT
,TransactionID(2103328734)

404720.044|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136767,1)IndicationCode:(200)Got WT

404720.044|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404720.044|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136767,1)IndicationCode:(100)SM Started

404720.529|nisvc|2|00|

****************************HTTP SEND**************************

404720.529|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404720.529|nisvc|2|00|ErrorBuffer::

404720.529|nisvc|2|00|

****************************HTTP SEND**************************

404720.537|nisvc|2|00|<\ni01:1,time taken(49)>

404720.537|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404720.537|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

404720.537|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]
404720.537|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

404720.537|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404720.537|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

404720.537|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404720.537|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404720.537|auth |4|00|Retry Cnt [4] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404720.538|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404720.538|auth |3|00|auth's Timer,Running(1),Start(10000)

404720.538|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

404720.538|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404730.528|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136777,0)IndicationLevel:(200)

404730.528|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xdfcc95,0xb5723de8,10000,4)

404730.528|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

404730.528|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)
404730.528|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404730.528|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404730.529|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404730.529|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404730.529|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404730.529|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((349),
(7)kBaseEventStop,Ticks(0))

404730.529|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c1f0):Ctx((349),(-
1),Ticks(0))

404730.529|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404730.531|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((511),
(7)kBaseEventStop,Ticks(0))

404730.531|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfae10):Ctx((511),(-
1),Ticks(0))

404730.531|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404730.531|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(7)kBaseEventStop,Ticks(0))

404730.531|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404730.532|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404730.532|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404730.532|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404730.532|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)


404730.532|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404730.532|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136777,1)IndicationCode:(509)Retry Request
Again

404730.532|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404730.532|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404730.532|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404730.532|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404730.532|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404730.532|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136777,1)IndicationCode:(0)

404730.532|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404730.532|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)
404730.543|auth |2|00|SM Module: SM created Ref(14673086)

404730.543|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404730.543|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404730.543|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404730.543|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404730.543|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404730.543|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404730.543|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136777,0)IndicationLevel:
(200)

404730.543|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404730.543|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),(5),Ticks(0))

404730.543|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404730.543|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404730.543|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)

404730.543|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136777,1)IndicationCode:(0)

404730.543|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404730.543|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136777,1)IndicationCode:(100)SM Started

404730.543|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

404730.543|auth |3|00|auth's Timer,Running(0),Start(2332190)


404731.025|nisvc|2|00|

****************************HTTP SEND**************************

404731.025|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404731.025|nisvc|2|00|ErrorBuffer::

404731.025|nisvc|2|00|

****************************HTTP SEND**************************

404731.032|nisvc|2|00|<\ni02:1,time taken(49)>

404731.032|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404731.036|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404731.036|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404731.036|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404731.036|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404731.036|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404731.036|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404731.036|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136778,0)IndicationLevel:
(200)

404731.036|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404731.037|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),(5),Ticks(0))

404731.560|nisvc|2|00|
****************************HTTP SEND**************************

404731.560|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

404731.560|nisvc|2|00|ErrorBuffer::

404731.560|nisvc|2|00|

****************************HTTP SEND**************************

404731.566|nisvc|2|00|<\ni03:1,time taken(53)>

404731.566|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404731.570|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404731.570|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404731.570|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404731.570|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404731.570|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404731.570|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404731.570|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404731.570|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404731.570|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404731.570|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404731.570|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404731.572|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey
Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404731.572|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(2103328734)

404731.572|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404731.572|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404731.572|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404731.572|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(2103328734)

404731.572|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136778,1)IndicationCode:(200)Got User Type

404731.572|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404731.572|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)

404731.583|auth |2|00|SM Module: SM created Ref(14673190)

404731.583|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404731.583|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)
404731.583|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

404731.583|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404731.583|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

404731.583|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404731.583|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404731.583|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

404731.583|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404731.583|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404731.583|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404731.583|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404731.583|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404731.583|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

404731.583|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136778,0)IndicationLevel:
(200)

404731.583|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

404731.583|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

404731.583|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404731.583|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404731.583|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(2103328734)
404731.583|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136778,1)IndicationCode:(0)

404731.583|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404731.583|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136778,1)IndicationCode:(100)SM Started

404732.219|nisvc|2|00|

****************************HTTP SEND**************************

404732.219|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404732.219|nisvc|2|00|ErrorBuffer::

404732.219|nisvc|2|00|

****************************HTTP SEND**************************

404732.220|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404732.220|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778000","not_before":"1527774100","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404732.220|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404732.220|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

404732.220|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))
404732.220|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404732.220|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404732.221|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404732.221|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404732.221|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

404732.221|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404732.221|auth |3|00|auth's Timer,Running(1),Start(2330510)

404732.221|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404732.221|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

404732.221|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404732.221|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404732.221|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404732.222|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404732.222|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404732.222|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(2103328734)
404732.227|nisvc|2|00|<\ni00:1,time taken(64)>

404732.232|auth |2|00|SM Module: SM created Ref(14673255)

404732.232|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404732.232|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404732.232|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404732.232|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404732.232|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404732.232|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404732.233|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136779,0)IndicationLevel:
(200)

404732.233|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404732.233|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((337),
(5),Ticks(0))

404732.233|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404732.233|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404732.233|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(2103328734)

404732.233|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136779,1)IndicationCode:(200)Got OAUTH2 Token

404732.233|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404732.233|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136779,1)IndicationCode:(100)SM Started

404732.746|nisvc|2|00|
****************************HTTP SEND**************************

404732.746|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404732.746|nisvc|2|00|ErrorBuffer::

404732.746|nisvc|2|00|

****************************HTTP SEND**************************

404732.754|nisvc|2|00|<\ni01:1,time taken(52)>

404732.754|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404732.755|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404732.755|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404732.755|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404732.755|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404732.755|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

404732.755|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404732.755|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404732.755|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404732.755|auth |3|00|auth's Timer,Running(1),Start(2329980)

404732.755|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404732.755|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((349),
(5),Ticks(0))
404732.755|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:
(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404732.756|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404732.756|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404732.757|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404732.757|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(2103328734)

404732.757|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(2103328734)

404732.757|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(5),Ticks(0))

404732.757|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

404732.757|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

404732.757|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404732.757|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404732.757|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

404732.757|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404732.757|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((317),
(1)kBaseEventInit,Ticks(0))
404732.757|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404732.757|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404732.757|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404732.757|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404732.758|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404732.758|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404732.829|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404732.829|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404732.829|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404732.829|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:41:40.000Z] WTEnd[2018-05-


31T14:57:37.179Z]

404732.829|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404732.829|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:52:59Z]

404732.830|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404732.830|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404732.830|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136780,0)IndicationLevel:
(200)

404732.830|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

404732.830|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),(5),Ticks(0))

404732.830|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404732.830|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404732.830|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT
,TransactionID(2103328734)

404732.830|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136780,1)IndicationCode:(200)Got WT

404732.830|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(2103328734)

404732.830|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136780,1)IndicationCode:(100)SM Started

404733.277|nisvc|2|00|

****************************HTTP SEND**************************

404733.277|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404733.277|nisvc|2|00|ErrorBuffer::

404733.277|nisvc|2|00|

****************************HTTP SEND**************************

404733.280|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404733.281|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

404733.281|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

404733.281|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]


404733.281|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404733.281|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

404733.281|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404733.281|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404733.281|auth |4|00|Retry Cnt [5] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404733.281|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(4)

404733.281|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(4),Ticks(0))

404733.281|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(4),Ticks(0))

404733.281|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(-1),Ticks(0))

404733.281|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(2103328734)

404733.281|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404733.281|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


404733.281|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(2103328734)

404733.282|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),
(7)kBaseEventStop,Ticks(0))

404733.282|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1382710):Ctx((355),(-1),Ticks(0))

404733.282|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404733.285|nisvc|2|00|<\ni02:1,time taken(45)>

404733.288|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((349),
(7)kBaseEventStop,Ticks(0))

404733.288|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81388):Ctx((349),(-
1),Ticks(0))

404733.288|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404733.288|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

404733.288|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

404733.288|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404733.288|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(7)kBaseEventStop,Ticks(0))

404733.289|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404733.289|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404733.289|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(2103328734)

404733.289|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)pps,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136780,1)IndicationCode:(400)Failed to Get UC

404733.289|sip |1|00|SipGotNewUserCert: pstNewUserCert[0xb511cad4]

404733.289|sip |3|00|TLS-DSK:soWebTicketCbFunc: the event type is 1


404733.289|sip |4|00|TLS-DSK:soWebTicketCbFunc: SoWebTicketCb_ResponseError event triggered
from the soWebTicket

404733.289|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(400)Failed to Get UC

,TransactionID(2103328734)

404733.289|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,2103328734,1526136780,1)IndicationCode:(400)Failed to Get UC

404819.048|nisvc|2|00|Request(-1)nisvc,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136826,0)IndicationLevel:(200)

404819.048|nisvc|2|00|TimerId:(WPADStateMachineModule,CbData,ModuleP,MMS,State),
(0xb57461c0,0xb5710af8,900000,4)

404819.048|nisvc|2|00|<SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((654),(2),Ticks(0))

404819.048|nisvc|2|00|S/E(sSWPADRetry,),rO(3)

404819.048|nisvc|2|00|<\SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((645),
(1)kBaseEventInit,Ticks(0))

404819.048|nisvc|2|00|<SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((645),
(1)kBaseEventInit,Ticks(0))

404819.048|nisvc|2|00|S/E(sSWPADMode,kBaseEventInit),rO(1552)

404819.048|nisvc|2|00|<\SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((646),
(1)kBaseEventInit,Ticks(0))

404819.048|nisvc|2|00|<SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((646),
(1)kBaseEventInit,Ticks(0))

404819.048|nisvc|2|00|S/E(sSWPADConfigDiscovery,kBaseEventInit),rO(4)

404819.048|nisvc|2|00|<\SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((645),
(1)kBaseEventInit,Ticks(0))

404819.048|nisvc|2|00|<SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((645),
(1)kBaseEventInit,Ticks(0))

404819.048|nisvc|2|00|S/E(sSWPADMode,kBaseEventInit),rO(1553)

404819.048|nisvc|2|00|<\SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((647),
(1)kBaseEventInit,Ticks(0))

404819.048|nisvc|2|00|<SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((647),
(1)kBaseEventInit,Ticks(0))

404819.048|nisvc|2|00|DHCP 252 Opt Value:


404819.048|nisvc|2|00|S/E(sSWPADDHCPDiscovery,kBaseEventInit),rO(4)

404819.048|nisvc|2|00|<\SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((645),
(1)kBaseEventInit,Ticks(0))

404819.048|nisvc|2|00|<SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((645),
(1)kBaseEventInit,Ticks(0))

404819.048|nisvc|2|00|S/E(sSWPADMode,kBaseEventInit),rO(1554)

404819.048|nisvc|2|00|<\SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((648),
(1)kBaseEventInit,Ticks(0))

404819.048|nisvc|2|00|<SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((648),
(1)kBaseEventInit,Ticks(0))

404819.049|nisvc|2|00|DNS Domain(couleecap.local) DomainIdx(0)

404819.049|nisvc|2|00|S/E(sSWPADDnsADiscovery,kBaseEventInit),rO(4)

404819.049|nisvc|2|00|<\SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((645),
(1)kBaseEventInit,Ticks(0))

404819.049|nisvc|2|00|<SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((645),
(1)kBaseEventInit,Ticks(0))

404819.049|nisvc|2|00|S/E(sSWPADMode,kBaseEventInit),rO(4)

404819.049|nisvc|2|00|<\SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((652),
(1)kBaseEventInit,Ticks(0))

404819.049|nisvc|2|00|<SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((652),
(1)kBaseEventInit,Ticks(0))

404819.049|nisvc|4|00|Renew(0) Pac Fetch Failed, SMCtx:

ProxyData:UserName Valid,Password Invalid,nAddrs:0

Type/Address:

DHCPCurl:

HttpCode:0 CurlCode:0 DiagErrCode:1411522604

Retry:0 Failed:166 Renew:0 Expiry:0 Domain:couleecap.local Domain Tokens(1)

couleecap.local, Domain Idx:-1

404819.049|nisvc|2|00|Response(-1)nisvc,(893)NIWPADDiagMsgKey,(-1)lyncStatus,(99),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136826,1)IndicationCode:(400)

404819.049|nisvc|2|00|S/E(sSWPADError,kBaseEventInit),rO(3)
404819.049|nisvc|2|00|<\SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((654),
(1)kBaseEventInit,Ticks(0))

404819.049|nisvc|2|00|<SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((654),
(1)kBaseEventInit,Ticks(0))

404819.049|nisvc|3|00|nisvc's Ticked,Reason(Internal),Count/Size(1/1),Stop? (No)

404819.049|nisvc|3|00|nisvc's Timer,Running(0),Start(900000)

404819.049|nisvc|2|00|S/E(sSWPADRetry,kBaseEventInit),rO(5)

404819.049|nisvc|2|00|<\SM>(301)WPADStateMachineModule(0xb57461c0):Ctx((654),(5),Ticks(0))

404819.049|nisvc|3|00|nisvc's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

404819.049|nisvc|3|00|nisvc's Timer,Running(1),Start(900000)

404819.049|app1 |4|00| getIndication Str 400

404856.199|sip |3|00|NoCall::TimeOut500ms 'Registering' m_nExpire == 0 RegisterCall -> Schedule


Register listSize 0 lTimeout 0

404856.199|sip |1|00|Schedule 'Register' nEvent 0 busyFlag 0 num events waiting 0

404856.199|sip |2|00|new UA Client Non-INVITE trans state 'callingTrying', timeout=0 (0xb62665a8)

404856.199|sip |3|00|RegClient:RegClient expire 66 overlap 0

404856.199|sip |2|00|SendCommand: reqDest 'couleecap.org' isLync 0 isGRUU 0 isIP 0


useEffectiveProxy 1

404856.199|sip |1|00|SendCommand: isLync 0 isGRUU 0 isIP 0 useEffectiveProxy 1

404856.199|sip |1|00|CreateFailOverProxyList : Reg to Domain 'couleecap.org' nPort 0, lkup 6

404856.199|sip |1|00|CreateFailOverProxyList : Domain is in user part

404856.199|sip |1|00|CreateFailOverProxyList : For REGISTER Request nPort 0

404856.199|sip |2|00|CreateFailOverProxyList resetting pps watchdog for 200000mSec in auto


discovery

404856.199|sip |1|00|CreateFailOverProxyList WAD:


ClientInternal[sippoolBLU0B05.infra.lync.com:443], ClientExternal[sipfed0B.online.lync.com:443]

404856.262|sip |1|00|doDnsListLookup(tls): doDnsSrvLookupForARecordList for


'sipfed0B.online.lync.com' port 443 returned 1 results

404856.262|sip |1|00|doDnsListLookup(tls): result 0 '52.112.64.203' port 443 isInBound 0

404856.262|sip |3|00|CreateFailOverProxyList WAD : Redirect list 'Auto Discovery'


'sipfed0B.online.lync.com' IP 1 is '52.112.64.203' on tls port 443

404856.262|sip |2|00|CreateFailOverProxyList : Exit 'Auto Discovery' lookup with 1 IP Addresses


404856.262|sip |2|00|CreateFailOverProxyList : IP 1 is '52.112.64.203' on tls port 443

404856.262|sip |1|00|CTrans:: SendCommand | this=0xb62665a8, bVQMonMessage=0, m_pCall-


>m_pUser->m_bOBFailOverReRegOn=0, m_pCall->m_pUser->m_bVQMonFailoverEnabled=1

404856.262|sip |1|00|CTcp::Send(TLS) entry for address 52.112.64.203 port 443 can Connect 1
canFailOver 0

404856.262|sip |1|00|CTcp::Send(TLS) address 52.112.64.203 port 443 can Connect 1

404856.262|sip |2|00|CTcpSocket::CTcpSocket entry m_bIsTcpPersistentConnection 0, Inbound 0


Timeout 120 this 0xb629dbe8

404856.262|sip |3|00|Open socket 212(0xb629dbe8)

404856.262|sip |1|00|SetRemoteAddress set SND BUF to 64000 OK

404856.262|sip |1|00|SetRemoteAddress set SEND TIMEOUT to 100ms OK

404856.262|sip |3|00|SetRemoteAddress OK on try 1 nPort 52223 0xb629dbe8

404856.262|sip |3|00|CTcpSocket::ConnectThreadLocal. Trying to connect IP 52.112.64.203:443

404856.262|sip |1|00|Task name tTCPCnt212

404856.262|sip |1|00|CTcp::Send(TLS) exit for address 52.112.64.203 port 443 can Connect 1 status 1
canFailOver 0 FoundSocket 0

404856.321|sip |3|00|connectNonBlock is successful

404856.321|sip |1|00|MsgSipTcpSocketStatus socket 212 status 1 m_bIsReconnectNeeded 0

404856.321|sip |2|00|CTcpSocket::OnSocketStatus socket 212(0xb629dbe8) bStatus 1

404856.321|sip |1|00|[CTcpSocket::MakeTlsConnection] TLS Protocol = 1

404856.527|sip |2|00|MakeTlsConnection: SSL_connect OK : TLS Handshake completed successfully

404856.527|sip |1|00|[TLS] hostname we are connected to is: 'sipfed0B.online.lync.com' IP


'52.112.64.203' port 443

404856.527|sip |3|00|[TLS] Validating Subject Alternative Name(s) (SAN) and Common Name (CN)
against the following:

404856.527|sip |3|00|[TLS] Hostname: couleecap.org

404856.527|sip |3|00|[TLS] Outbound Proxy: couleecap.org

404856.527|sip |3|00|[TLS] Hostname connection: sipfed0B.online.lync.com

404856.528|sip |1|00|[TLS] Comparing certificate SAN type DNS: 'sipfed.online.lync.com'

404856.528|sip |1|00|[TLS] Comparing certificate SAN type DNS: '*.online.lync.com'

404856.528|sip |3|00|[TLS] Allowing Server certificate with Specifc SN/SAN


404856.528|sip |3|00|[TLS] Validating certificate SAN of type DNS with '*.online.lync.com'

404856.528|sip |3|00|[TLS] Server Certificate SAN or CN validation success. SSL verify result 0

404856.528|sip |1|00|MakeTlsConnection: post_connection_checks passed

404856.528|sip |1|00|CTcpSocket::SendData TLS queuedTxData = 0 TotalLen 16 loop count 1


maxQueueDepth 40000

404856.528|sip |1|00|CTcpSocket::SendData TLS Sent 16 loop count 1

404856.528|sip |3|00|MakeTlsConnection: connection succeeded

404856.529|sip |1|00|CTcpSocket::SendData TLS queuedTxData = 101 TotalLen 989 loop count 1


maxQueueDepth 40000

404856.529|sip |1|00|CTcpSocket::SendData TLS Sent 989 loop count 1

404856.680|sip |1|00|MsgSipTcpPacket

404856.680|sip |3|00|CTcpSocket::OnRecvData

404856.681|sip |1|00|SipOnCommand: response 401,REGISTER

404856.681|sip |1|00|SipOnCommand: response 401,REGISTER matches user 1 of 1 'natalie.carlisle'

404856.681|sip |3|00|UA Client Non-INVITE REGISTER trans state 'callingTrying'->'completed' by 401


resp 10 timeout(0xb62665a8)

404856.681|sip |2|00|[CTrans::ResponseProcess] REGISTER NonInv reTrans ALREADY stopped in


'completed' state at retryCount 0 code 401, timeout=10 (0xb62665a8)

404856.681|sip |3|00|401 challenge received

404856.681|sip |2|00|SipCallState is not Idle, So send Re-INVITE

404856.681|sip |2|00|new UA Client Non-INVITE trans state 'callingTrying', timeout=0 (0xaecdfd88)

404856.681|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

404856.681|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

404856.681|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

404856.681|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

404856.681|sip |1|00|TLS-DSK authentication

404856.713|sip |1|00|TLS-DSK: Setting of Client Certificate failed due to (33558530)


error:02001002:system library:fopen:No such file or directory

404856.713|sip |1|00|TLS-DSK: Setting of Client Private key failed due to (537346050)


error:20074002:BIO routines:FILE_CTRL:system lib
404856.713|utilm|4|00|uBLFUnCompressed: File /ffs0/Config/Local/WebTicket/0/private.key doesn't
exist or is empty

404856.713|sip |3|00|getUserCertInfo: sip.usr[natalie.carlisle@couleecap.org] result[-1] validUntil[0]

404856.713|sip |2|00|[ParseMessageHeader]:[540],SIPURI=[natalie.carlisle@couleecap.org]

404856.713|sip |2|00|[ParseMessageHeader]:[555] Calling UC Fetch through Service FrameWork

404856.713|sip |3|00|TLS-DSK

404856.713|sip |1|00|CStkAuth::ParseAuthenticateHeader bTlsDskParseResult[0] bNtlmParseResult[0]


m_credType[2] m_bIsOnlyTlsDsk[1]

404856.713|sip |*|00|Sending User Cert fetch Request: OnlyTlsDsk[1]

404856.716|sip |1|00|Dialog 'id01f43206' State 'Trying'->'Terminated'

404856.716|sip |2|00|CStkDialog::CStkDialog SetAddressLocal Config 'Natalie Carlisle'


<natalie.carlisle@couleecap.org:0>

404856.717|sip |2|00|CStkDialog::CStkDialog AddressLocal set to Config

404856.717|sip |3|00|CStkDialog::SetAddressLocal localTag set to ''

404856.717|sip |3|00|CStkDialog::SetAddressLocal new address added of 1

404856.717|sip |2|00|CStkDialog::CStkDialog TAG '6ADCF339-27AF7F18' generated

404856.717|sip |2|00|CStkDialog::CStkDialog local addr 'Natalie Carlisle'


<natalie.carlisle@couleecap.org:0> Tag '6ADCF339-27AF7F18'

404856.717|sip |2|00|CStkDialog::CStkDialog exit 0x30cd918 local list size 1

404856.717|sip |2|00|CStkDialogList::CreateDialogObject localTarg usr 'natalie.carlisle'

404856.717|sip |2|00|[svcUserCert]:[8360]: SipUri[natalie.carlisle@couleecap.org]


User[natalie.carlisle@couleecap.org],Dom[],STS[https://webdir0B.online.lync.com:443/CertProv/CertPro
visioningService.svc] Expiry[-1]

404856.717|auth |2|00|Request(-1)auth,(102)AuthServiceUCMsgKey,(-1)pps,(14),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136864,0)IndicationLevel:(200)

404856.717|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(205)AuthSvcAOServiceRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(-1)

404856.718|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)
,TransactionID(-1)

404856.718|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404856.718|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404856.718|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404856.718|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404856.718|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404856.718|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404856.718|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404856.718|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136864,1)IndicationCode:(0)

404856.718|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404856.718|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404856.718|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404856.718|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)


404856.718|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404856.718|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136864,1)IndicationCode:(0)

404856.719|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404856.719|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404856.729|auth |2|00|SM Module: SM created Ref(14681705)

404856.729|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404856.729|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404856.729|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404856.729|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404856.729|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404856.729|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404856.729|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136864,0)IndicationLevel:
(200)

404856.729|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404856.729|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),(5),Ticks(0))

404856.729|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404856.729|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


404856.729|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404856.729|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136864,1)IndicationCode:(0)

404856.729|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404856.729|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136864,1)IndicationCode:(100)SM Started

404857.215|nisvc|2|00|

****************************HTTP SEND**************************

404857.215|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404857.215|nisvc|2|00|ErrorBuffer::

404857.215|nisvc|2|00|

****************************HTTP SEND**************************

404857.222|nisvc|2|00|<\ni03:1,time taken(49)>

404857.222|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404857.227|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404857.227|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404857.227|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))
404857.227|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404857.227|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404857.227|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404857.227|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136864,0)IndicationLevel:
(200)

404857.227|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404857.227|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),(5),Ticks(0))

404857.728|nisvc|2|00|

****************************HTTP SEND**************************

404857.728|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

404857.728|nisvc|2|00|ErrorBuffer::

404857.728|nisvc|2|00|

****************************HTTP SEND**************************

404857.734|nisvc|2|00|<\ni00:1,time taken(51)>

404857.734|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404857.738|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404857.738|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404857.738|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404857.738|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))
404857.738|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404857.738|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404857.738|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404857.738|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404857.738|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404857.738|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404857.739|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404857.740|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404857.741|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404857.741|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404857.741|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404857.741|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404857.741|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(225166910)

404857.741|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136865,1)IndicationCode:(200)Got User Type
404857.741|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404857.741|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404857.751|auth |2|00|SM Module: SM created Ref(14681807)

404857.751|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404857.751|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

404857.751|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),(5),Ticks(0))

404857.751|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404857.751|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

404857.751|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404857.751|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404857.751|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

404857.751|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404857.751|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404857.751|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404857.751|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404857.751|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404857.751|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]
404857.752|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136865,0)IndicationLevel:
(200)

404857.752|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

404857.752|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),(5),Ticks(0))

404857.752|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404857.752|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404857.752|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404857.752|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136865,1)IndicationCode:(0)

404857.752|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404857.752|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136865,1)IndicationCode:(100)SM Started

404858.441|nisvc|2|00|

****************************HTTP SEND**************************

404858.441|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404858.441|nisvc|2|00|ErrorBuffer::

404858.441|nisvc|2|00|

****************************HTTP SEND**************************

404858.446|nisvc|2|00|<\ni01:1,time taken(69)>
404858.447|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404858.447|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778086","not_before":"1527774186","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404858.447|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404858.447|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

404858.447|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404858.447|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404858.447|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404858.447|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404858.448|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404858.448|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

404858.448|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404858.448|auth |3|00|auth's Timer,Running(1),Start(2244290)

404858.448|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404858.448|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),(5),Ticks(0))

404858.448|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404858.448|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404858.448|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


404858.449|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404858.449|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404858.449|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404858.460|auth |2|00|SM Module: SM created Ref(14681878)

404858.460|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404858.460|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404858.460|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404858.460|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404858.460|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404858.460|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404858.460|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136865,0)IndicationLevel:
(200)

404858.460|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404858.460|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((337),
(5),Ticks(0))

404858.460|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404858.460|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404858.460|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey
Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404858.460|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136865,1)IndicationCode:(200)Got OAUTH2 Token

404858.460|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404858.460|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136865,1)IndicationCode:(100)SM Started

404859.297|nisvc|2|00|

****************************HTTP SEND**************************

404859.297|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404859.297|nisvc|2|00|ErrorBuffer::

404859.297|nisvc|2|00|

****************************HTTP SEND**************************

404859.300|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404859.301|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404859.302|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404859.302|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404859.302|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404859.302|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)
404859.302|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404859.302|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404859.302|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404859.302|auth |3|00|auth's Timer,Running(1),Start(2243430)

404859.302|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404859.302|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((349),
(5),Ticks(0))

404859.302|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404859.302|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404859.302|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404859.306|nisvc|2|00|<\ni02:1,time taken(84)>

404859.307|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404859.307|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404859.307|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404859.318|auth |2|00|SM Module: SM created Ref(14681963)

404859.318|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404859.318|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)
404859.318|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404859.318|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404859.318|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404859.318|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404859.318|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404859.318|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404859.318|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404859.318|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404859.391|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404859.391|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404859.391|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404859.391|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:43:06.000Z] WTEnd[2018-05-


31T14:54:44.890Z]

404859.391|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404859.391|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:54:25Z]

404859.391|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404859.392|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404859.392|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136866,0)IndicationLevel:
(200)

404859.392|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

404859.392|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),(5),Ticks(0))

404859.392|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404859.392|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


404859.392|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(225166910)

404859.392|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136866,1)IndicationCode:(200)Got WT

404859.392|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404859.392|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136866,1)IndicationCode:(100)SM Started

404859.850|nisvc|2|00|

****************************HTTP SEND**************************

404859.850|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404859.850|nisvc|2|00|ErrorBuffer::

404859.850|nisvc|2|00|

****************************HTTP SEND**************************

404859.854|nisvc|2|00|<\ni03:1,time taken(46)>

404859.855|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404859.857|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det
404859.857|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is
outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

404859.857|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

404859.857|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404859.857|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

404859.857|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404859.857|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404859.857|auth |4|00|Retry Cnt [0] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404859.857|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404859.857|auth |3|00|auth's Timer,Running(1),Start(10000)

404859.857|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

404859.857|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404909.848|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136877,0)IndicationLevel:(200)

404909.848|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe0076b,0xb5723de8,10000,4)
404909.848|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

404909.848|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

404909.848|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404909.848|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404909.849|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404909.849|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404909.849|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404909.849|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((349),
(7)kBaseEventStop,Ticks(0))

404909.849|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1382e90):Ctx((349),(-
1),Ticks(0))

404909.849|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404909.851|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),
(7)kBaseEventStop,Ticks(0))

404909.851|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb131ff08):Ctx((511),(-
1),Ticks(0))

404909.851|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404909.851|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(7)kBaseEventStop,Ticks(0))

404909.851|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404909.852|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404909.852|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)
404909.852|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when
User Mode = 0

404909.852|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404909.852|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404909.852|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136877,1)IndicationCode:(509)Retry Request Again

404909.852|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404909.852|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404909.852|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404909.852|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404909.852|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404909.852|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136877,1)IndicationCode:(0)

404909.852|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404909.852|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey
Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404909.863|auth |2|00|SM Module: SM created Ref(14683018)

404909.863|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404909.863|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404909.863|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404909.863|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404909.863|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404909.863|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404909.863|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136877,0)IndicationLevel:
(200)

404909.863|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404909.863|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),(5),Ticks(0))

404909.863|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404909.863|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404909.863|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404909.863|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136877,1)IndicationCode:(0)

404909.863|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404909.863|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136877,1)IndicationCode:(100)SM Started
404909.863|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

404909.863|auth |3|00|auth's Timer,Running(0),Start(2232880)

404910.326|nisvc|2|00|

****************************HTTP SEND**************************

404910.326|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404910.326|nisvc|2|00|ErrorBuffer::

404910.326|nisvc|2|00|

****************************HTTP SEND**************************

404910.333|nisvc|2|00|<\ni00:1,time taken(47)>

404910.333|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404910.337|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404910.337|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404910.337|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404910.337|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404910.337|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404910.337|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404910.337|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136877,0)IndicationLevel:
(200)

404910.337|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404910.337|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),(5),Ticks(0))
404910.847|nisvc|2|00|

****************************HTTP SEND**************************

404910.847|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

404910.847|nisvc|2|00|ErrorBuffer::

404910.847|nisvc|2|00|

****************************HTTP SEND**************************

404910.853|nisvc|2|00|<\ni01:1,time taken(52)>

404910.853|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404910.856|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404910.856|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404910.856|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404910.856|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404910.856|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404910.856|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404910.856|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(3),Ticks(0))

404910.857|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404910.857|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404910.857|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)


404910.857|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404910.858|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404910.858|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404910.858|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404910.858|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404910.859|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404910.859|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(225166910)

404910.859|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136878,1)IndicationCode:(200)Got User Type

404910.859|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404910.859|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404910.869|auth |2|00|SM Module: SM created Ref(14683119)


404910.869|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404910.869|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

404910.869|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),(5),Ticks(0))

404910.869|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404910.869|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

404910.869|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404910.869|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404910.869|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

404910.869|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404910.869|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404910.869|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404910.869|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404910.869|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404910.869|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

404910.869|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136878,0)IndicationLevel:
(200)

404910.869|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

404910.869|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),(5),Ticks(0))

404910.869|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404910.869|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404910.870|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)
,TransactionID(225166910)

404910.870|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136878,1)IndicationCode:(0)

404910.870|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404910.870|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136878,1)IndicationCode:(100)SM Started

404911.544|nisvc|2|00|

****************************HTTP SEND**************************

404911.544|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404911.545|nisvc|2|00|ErrorBuffer::

404911.545|nisvc|2|00|

****************************HTTP SEND**************************

404911.551|nisvc|2|00|<\ni02:1,time taken(68)>

404911.552|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404911.552|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778099","not_before":"1527774199","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404911.552|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404911.552|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)
404911.552|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404911.552|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404911.552|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404911.552|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404911.552|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404911.552|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

404911.552|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404911.552|auth |3|00|auth's Timer,Running(1),Start(2231190)

404911.552|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404911.553|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),(5),Ticks(0))

404911.553|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404911.553|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404911.553|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404911.554|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404911.554|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404911.554|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)
,TransactionID(225166910)

404911.565|auth |2|00|SM Module: SM created Ref(14683188)

404911.565|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404911.565|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404911.565|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404911.565|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404911.565|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404911.565|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404911.565|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136878,0)IndicationLevel:
(200)

404911.565|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404911.565|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(5),Ticks(0))

404911.565|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404911.565|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404911.565|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404911.565|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136878,1)IndicationCode:(200)Got OAUTH2 Token

404911.565|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404911.565|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136878,1)IndicationCode:(100)SM Started

404912.117|nisvc|2|00|
****************************HTTP SEND**************************

404912.117|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404912.117|nisvc|2|00|ErrorBuffer::

404912.117|nisvc|2|00|

****************************HTTP SEND**************************

404912.123|nisvc|2|00|<\ni03:1,time taken(56)>

404912.123|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404912.125|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404912.125|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404912.125|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404912.125|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404912.125|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

404912.125|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404912.125|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404912.125|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404912.125|auth |3|00|auth's Timer,Running(1),Start(2230620)

404912.125|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404912.125|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(5),Ticks(0))
404912.125|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:
(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404912.125|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404912.125|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404912.128|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404912.128|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404912.128|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404912.128|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404912.128|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

404912.128|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

404912.128|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404912.128|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404912.128|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

404912.128|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404912.128|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))
404912.128|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404912.128|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404912.128|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404912.128|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404912.128|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404912.128|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404912.202|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404912.202|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404912.202|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404912.202|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:43:19.000Z] WTEnd[2018-05-


31T14:36:00.752Z]

404912.202|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404912.202|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:54:38Z]

404912.202|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404912.202|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404912.202|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136879,0)IndicationLevel:
(200)

404912.202|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

404912.202|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),(5),Ticks(0))

404912.202|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404912.202|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404912.203|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT
,TransactionID(225166910)

404912.203|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136879,1)IndicationCode:(200)Got WT

404912.203|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404912.203|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136879,1)IndicationCode:(100)SM Started

404912.669|nisvc|2|00|

****************************HTTP SEND**************************

404912.669|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404912.669|nisvc|2|00|ErrorBuffer::

404912.669|nisvc|2|00|

****************************HTTP SEND**************************

404912.675|nisvc|2|00|<\ni00:1,time taken(47)>

404912.676|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404912.676|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

404912.676|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]
404912.676|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

404912.676|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404912.676|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

404912.676|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404912.676|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404912.676|auth |4|00|Retry Cnt [1] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404912.676|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404912.676|auth |3|00|auth's Timer,Running(1),Start(10000)

404912.676|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

404912.676|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404919.794|so |4|00|SNTP: sync failed with all servers, trying again[0]

404922.668|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136890,0)IndicationLevel:(200)

404922.668|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe0076b,0xb5723de8,10000,4)

404922.668|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))
404922.668|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

404922.668|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404922.668|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404922.669|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404922.669|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404922.669|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404922.669|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(7)kBaseEventStop,Ticks(0))

404922.669|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),(-
1),Ticks(0))

404922.669|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404922.671|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(7)kBaseEventStop,Ticks(0))

404922.671|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),(-
1),Ticks(0))

404922.671|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404922.671|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),
(7)kBaseEventStop,Ticks(0))

404922.671|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb131da78):Ctx((345),(-1),Ticks(0))

404922.671|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404922.672|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404922.672|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0
404922.672|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404922.672|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404922.672|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136890,1)IndicationCode:(509)Retry Request Again

404922.672|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404922.672|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404922.672|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404922.672|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404922.672|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404922.672|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136890,1)IndicationCode:(0)

404922.672|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404922.672|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)
404922.683|auth |2|00|SM Module: SM created Ref(14684300)

404922.683|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404922.683|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404922.683|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404922.683|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404922.683|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404922.683|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404922.683|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136890,0)IndicationLevel:
(200)

404922.683|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404922.683|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

404922.683|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404922.683|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404922.683|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404922.683|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136890,1)IndicationCode:(0)

404922.683|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404922.683|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136890,1)IndicationCode:(100)SM Started

404922.683|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

404922.683|auth |3|00|auth's Timer,Running(0),Start(2220070)


404923.163|nisvc|2|00|

****************************HTTP SEND**************************

404923.163|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404923.163|nisvc|2|00|ErrorBuffer::

404923.163|nisvc|2|00|

****************************HTTP SEND**************************

404923.169|nisvc|2|00|<\ni01:1,time taken(49)>

404923.169|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404923.173|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404923.173|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404923.173|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404923.173|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404923.173|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404923.173|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404923.173|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136890,0)IndicationLevel:
(200)

404923.173|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404923.173|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

404923.694|nisvc|2|00|
****************************HTTP SEND**************************

404923.694|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

404923.694|nisvc|2|00|ErrorBuffer::

404923.694|nisvc|2|00|

****************************HTTP SEND**************************

404923.702|nisvc|2|00|<\ni02:1,time taken(53)>

404923.702|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404923.706|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404923.706|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404923.706|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404923.706|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404923.706|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404923.706|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

404923.706|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

404923.706|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

404923.706|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404923.706|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404923.706|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404923.708|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey
Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404923.708|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404923.708|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404923.708|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404923.708|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404923.708|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(225166910)

404923.708|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136891,1)IndicationCode:(200)Got User Type

404923.708|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404923.708|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404923.719|auth |2|00|SM Module: SM created Ref(14684404)

404923.719|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404923.719|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

404923.719|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),(5),Ticks(0))
404923.719|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404923.719|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

404923.719|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404923.719|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404923.719|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

404923.719|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404923.719|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404923.719|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404923.719|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404923.719|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404923.719|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

404923.719|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136891,0)IndicationLevel:
(200)

404923.719|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

404923.719|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),(5),Ticks(0))

404923.719|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404923.719|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404923.719|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404923.719|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136891,1)IndicationCode:(0)
404923.719|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404923.719|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136891,1)IndicationCode:(100)SM Started

404924.346|nisvc|2|00|

****************************HTTP SEND**************************

404924.346|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404924.346|nisvc|2|00|ErrorBuffer::

404924.346|nisvc|2|00|

****************************HTTP SEND**************************

404924.353|nisvc|2|00|<\ni03:1,time taken(63)>

404924.353|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404924.354|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778112","not_before":"1527774212","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404924.354|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404924.354|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

404924.354|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((510),
(1)kBaseEventInit,Ticks(0))
404924.354|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404924.354|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404924.354|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404924.354|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404924.354|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

404924.354|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404924.354|auth |3|00|auth's Timer,Running(1),Start(2218400)

404924.354|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404924.354|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),(5),Ticks(0))

404924.354|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404924.354|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404924.354|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404924.355|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404924.355|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404924.356|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404924.366|auth |2|00|SM Module: SM created Ref(14684468)


404924.366|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404924.366|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404924.366|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404924.366|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404924.366|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404924.366|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404924.366|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136891,0)IndicationLevel:
(200)

404924.366|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404924.366|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(5),Ticks(0))

404924.366|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404924.366|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404924.366|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404924.367|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136891,1)IndicationCode:(200)Got OAUTH2 Token

404924.367|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404924.367|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136891,1)IndicationCode:(100)SM Started

404924.912|nisvc|2|00|

****************************HTTP SEND**************************
404924.913|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404924.913|nisvc|2|00|ErrorBuffer::

404924.913|nisvc|2|00|

****************************HTTP SEND**************************

404924.919|nisvc|2|00|<\ni00:1,time taken(56)>

404924.919|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404924.920|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404924.920|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404924.920|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404924.920|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404924.921|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

404924.921|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404924.921|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404924.921|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404924.921|auth |3|00|auth's Timer,Running(1),Start(2217830)

404924.921|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404924.921|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(5),Ticks(0))

404924.921|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT
,TransactionID(225166910)

404924.921|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404924.921|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404924.922|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404924.922|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404924.923|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404924.923|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404924.923|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

404924.923|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

404924.923|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404924.923|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404924.923|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

404924.923|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404924.923|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404924.923|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404924.923|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))
404924.923|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404924.923|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404924.923|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404924.923|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404924.996|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404924.996|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404924.996|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404924.996|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:43:32.000Z] WTEnd[2018-05-


31T14:55:08.338Z]

404924.996|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404924.996|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:54:51Z]

404924.996|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404924.996|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404924.996|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136892,0)IndicationLevel:
(200)

404924.996|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

404924.996|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),(5),Ticks(0))

404924.996|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404924.996|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404924.996|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(225166910)

404924.997|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136892,1)IndicationCode:(200)Got WT
404924.997|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404924.997|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136892,1)IndicationCode:(100)SM Started

404925.440|nisvc|2|00|

****************************HTTP SEND**************************

404925.440|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404925.440|nisvc|2|00|ErrorBuffer::

404925.440|nisvc|2|00|

****************************HTTP SEND**************************

404925.446|nisvc|2|00|<\ni01:1,time taken(45)>

404925.446|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404925.447|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

404925.447|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

404925.447|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

404925.447|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404925.447|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)
404925.447|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404925.447|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404925.447|auth |4|00|Retry Cnt [2] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404925.447|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404925.447|auth |3|00|auth's Timer,Running(1),Start(10000)

404925.447|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

404925.447|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404928.508|sip |5|00|SSL_get_error nLen -1 errno 104 nError 5 =


(0)error:00000000:lib(0):func(0):reason(0)

404928.508|sip |4|00|TLS Listen Thread Exit

404928.508|sip |1|00|MsgSipTcpSocketStatus socket 212 status 0 m_bIsReconnectNeeded 0

404928.508|sip |2|00|CTcpSocket::OnSocketStatus socket 212(0xb629dbe8) bStatus 0

404928.508|sip |3|00|CTcpSocket::~CTcpSocket socket 212 entry for 0xb629dbe8

404928.508|sip |3|00|CTcpSocket::~CTcpSocket socket 212(0xb629dbe8) SSL_shutdown rc=-1, ltf(1)

404928.508|sip |3|00|CTcpSocket::~CTcpSocket socket 212(0xb629dbe8) close

404928.508|sip |3|00|CTcpSocket::~CTcpSocket Got lock


404935.438|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136902,0)IndicationLevel:(200)

404935.438|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe0076b,0xb5723de8,10000,4)

404935.438|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

404935.438|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

404935.438|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404935.438|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404935.439|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404935.439|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404935.439|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404935.439|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(7)kBaseEventStop,Ticks(0))

404935.439|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),(-
1),Ticks(0))

404935.439|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404935.441|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(7)kBaseEventStop,Ticks(0))

404935.441|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),(-
1),Ticks(0))

404935.441|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404935.441|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

404935.441|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

404935.441|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


404935.442|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:
(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404935.442|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404935.442|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404935.442|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404935.442|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136902,1)IndicationCode:(509)Retry Request Again

404935.442|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404935.442|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404935.442|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404935.442|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404935.442|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404935.442|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136902,1)IndicationCode:(0)

404935.442|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey
Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404935.442|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404935.453|auth |2|00|SM Module: SM created Ref(14685577)

404935.453|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404935.453|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404935.453|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404935.453|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404935.453|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404935.453|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404935.453|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136902,0)IndicationLevel:
(200)

404935.453|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404935.453|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

404935.453|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404935.453|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404935.453|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404935.453|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136902,1)IndicationCode:(0)

404935.453|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey
Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404935.453|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136902,1)IndicationCode:(100)SM Started

404935.453|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

404935.453|auth |3|00|auth's Timer,Running(0),Start(2207310)

404935.960|nisvc|2|00|

****************************HTTP SEND**************************

404935.960|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404935.960|nisvc|2|00|ErrorBuffer::

404935.960|nisvc|2|00|

****************************HTTP SEND**************************

404935.966|nisvc|2|00|<\ni02:1,time taken(51)>

404935.966|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404935.971|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404935.971|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404935.971|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404935.971|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404935.971|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404935.971|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


404935.971|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136903,0)IndicationLevel:
(200)

404935.971|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404935.971|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

404936.420|nisvc|2|00|

****************************HTTP SEND**************************

404936.420|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

404936.420|nisvc|2|00|ErrorBuffer::

404936.420|nisvc|2|00|

****************************HTTP SEND**************************

404936.426|nisvc|2|00|<\ni03:1,time taken(45)>

404936.426|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404936.430|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404936.430|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404936.430|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404936.430|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404936.430|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404936.430|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

404936.430|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

404936.430|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))
404936.430|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:
(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404936.430|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404936.431|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404936.432|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404936.432|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404936.432|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404936.432|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404936.432|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404936.432|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(225166910)

404936.432|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136903,1)IndicationCode:(200)Got User Type

404936.432|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)
404936.432|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:
(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404936.443|auth |2|00|SM Module: SM created Ref(14685676)

404936.443|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404936.443|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

404936.443|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((501),
(5),Ticks(0))

404936.443|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404936.443|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

404936.443|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404936.443|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404936.443|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

404936.443|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404936.443|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404936.443|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404936.443|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404936.443|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404936.443|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

404936.443|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136903,0)IndicationLevel:
(200)

404936.443|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)
404936.443|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((512),
(5),Ticks(0))

404936.443|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404936.443|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404936.443|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404936.443|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136903,1)IndicationCode:(0)

404936.443|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404936.443|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136903,1)IndicationCode:(100)SM Started

404937.113|nisvc|2|00|

****************************HTTP SEND**************************

404937.113|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404937.113|nisvc|2|00|ErrorBuffer::

404937.113|nisvc|2|00|

****************************HTTP SEND**************************

404937.120|nisvc|2|00|<\ni00:1,time taken(68)>

404937.120|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404937.121|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778125","not_before":"1527774225","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404937.121|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404937.121|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

404937.121|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404937.121|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404937.121|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404937.121|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404937.121|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404937.121|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

404937.121|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404937.121|auth |3|00|auth's Timer,Running(1),Start(2205640)

404937.121|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404937.121|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((511),
(5),Ticks(0))

404937.121|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404937.121|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404937.121|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404937.122|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token


,TransactionID(225166910)

404937.122|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404937.123|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404937.133|auth |2|00|SM Module: SM created Ref(14685745)

404937.133|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404937.133|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404937.133|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404937.133|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404937.133|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404937.133|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404937.133|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136904,0)IndicationLevel:
(200)

404937.133|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404937.133|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(5),Ticks(0))

404937.134|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404937.134|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404937.134|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)
404937.134|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136904,1)IndicationCode:(200)Got OAUTH2 Token

404937.134|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404937.134|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136904,1)IndicationCode:(100)SM Started

404937.664|nisvc|2|00|

****************************HTTP SEND**************************

404937.664|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404937.664|nisvc|2|00|ErrorBuffer::

404937.664|nisvc|2|00|

****************************HTTP SEND**************************

404937.672|nisvc|2|00|<\ni01:1,time taken(54)>

404937.672|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404937.673|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404937.673|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404937.673|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404937.673|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404937.673|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)
404937.673|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404937.673|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404937.674|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404937.674|auth |3|00|auth's Timer,Running(1),Start(2205090)

404937.674|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404937.674|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(5),Ticks(0))

404937.674|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404937.674|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404937.674|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404937.675|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404937.675|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404937.675|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404937.675|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404937.675|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

404937.676|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)
404937.676|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404937.676|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404937.676|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

404937.676|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404937.676|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404937.676|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404937.676|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404937.676|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404937.676|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404937.676|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404937.676|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404937.750|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404937.750|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404937.750|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404937.750|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:43:45.000Z] WTEnd[2018-05-


31T14:42:20.120Z]

404937.750|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404937.750|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:55:04Z]

404937.751|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404937.751|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


404937.751|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136905,0)IndicationLevel:
(200)

404937.751|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

404937.751|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),(5),Ticks(0))

404937.751|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404937.751|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404937.751|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(225166910)

404937.751|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136905,1)IndicationCode:(200)Got WT

404937.751|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404937.751|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136905,1)IndicationCode:(100)SM Started

404938.197|nisvc|2|00|

****************************HTTP SEND**************************

404938.197|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404938.197|nisvc|2|00|ErrorBuffer::

404938.197|nisvc|2|00|

****************************HTTP SEND**************************

404938.204|nisvc|2|00|<\ni02:1,time taken(45)>
404938.205|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404938.205|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

404938.205|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

404938.205|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

404938.205|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404938.205|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

404938.205|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404938.205|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404938.205|auth |4|00|Retry Cnt [3] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404938.206|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)


404938.206|auth |3|00|auth's Timer,Running(1),Start(10000)

404938.206|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

404938.206|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404948.198|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136915,0)IndicationLevel:(200)

404948.199|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe0076b,0xb5723de8,10000,4)

404948.199|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

404948.199|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

404948.199|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404948.199|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404948.199|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404948.199|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404948.199|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404948.199|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(7)kBaseEventStop,Ticks(0))

404948.199|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),(-
1),Ticks(0))

404948.200|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404948.202|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((511),
(7)kBaseEventStop,Ticks(0))

404948.202|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb13826c0):Ctx((511),(-
1),Ticks(0))

404948.202|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


404948.202|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

404948.202|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

404948.202|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404948.203|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404948.203|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404948.203|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404948.203|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404948.203|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136915,1)IndicationCode:(509)Retry Request Again

404948.203|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404948.203|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404948.203|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404948.203|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404948.203|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)
404948.203|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136915,1)IndicationCode:(0)

404948.203|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404948.203|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404948.213|auth |2|00|SM Module: SM created Ref(14686853)

404948.213|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

404948.213|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

404948.213|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404948.213|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

404948.214|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

404948.214|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404948.214|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136915,0)IndicationLevel:
(200)

404948.214|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

404948.214|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

404948.214|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404948.214|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404948.214|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)
404948.214|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136915,1)IndicationCode:(0)

404948.214|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404948.214|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136915,1)IndicationCode:(100)SM Started

404948.214|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

404948.214|auth |3|00|auth's Timer,Running(0),Start(2194560)

404948.725|nisvc|2|00|

****************************HTTP SEND**************************

404948.725|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

404948.725|nisvc|2|00|ErrorBuffer::

404948.725|nisvc|2|00|

****************************HTTP SEND**************************

404948.731|nisvc|2|00|<\ni03:1,time taken(52)>

404948.731|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404948.736|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

404948.736|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

404948.736|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

404948.736|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))
404948.736|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

404948.736|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404948.736|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136916,0)IndicationLevel:
(200)

404948.736|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

404948.736|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

404949.291|nisvc|2|00|

****************************HTTP SEND**************************

404949.291|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

404949.291|nisvc|2|00|ErrorBuffer::

404949.291|nisvc|2|00|

****************************HTTP SEND**************************

404949.297|nisvc|2|00|<\ni00:1,time taken(56)>

404949.298|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404949.301|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

404949.301|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

404949.301|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404949.301|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

404949.301|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

404949.301|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))
404949.301|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

404949.301|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

404949.301|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404949.301|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404949.302|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404949.303|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404949.303|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

404949.303|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404949.303|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

404949.303|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

404949.303|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(225166910)

404949.303|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136916,1)IndicationCode:(200)Got User Type

404949.303|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)
,TransactionID(225166910)

404949.303|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404949.314|auth |2|00|SM Module: SM created Ref(14686963)

404949.314|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),
(1)kBaseEventInit,Ticks(0))

404949.314|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

404949.314|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),(5),Ticks(0))

404949.314|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

404949.314|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

404949.314|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404949.314|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404949.314|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

404949.314|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

404949.314|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404949.314|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(1)kBaseEventInit,Ticks(0))

404949.314|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

404949.314|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

404949.314|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

404949.314|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136916,0)IndicationLevel:
(200)

404949.314|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)
404949.314|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),(5),Ticks(0))

404949.314|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404949.314|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404949.314|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

404949.314|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136916,1)IndicationCode:(0)

404949.314|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404949.314|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136916,1)IndicationCode:(100)SM Started

404949.940|nisvc|2|00|

****************************HTTP SEND**************************

404949.940|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

404949.940|nisvc|2|00|ErrorBuffer::

404949.940|nisvc|2|00|

****************************HTTP SEND**************************

404949.948|nisvc|2|00|<\ni01:1,time taken(63)>

404949.948|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404949.949|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778138","not_before":"1527774238","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

404949.949|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

404949.949|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

404949.949|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404949.949|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((510),
(1)kBaseEventInit,Ticks(0))

404949.949|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

404949.949|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404949.949|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

404949.949|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

404949.949|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404949.949|auth |3|00|auth's Timer,Running(1),Start(2192820)

404949.949|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

404949.949|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),(5),Ticks(0))

404949.949|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404949.949|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404949.949|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404949.951|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)
404949.951|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:
(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404949.951|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

404949.961|auth |2|00|SM Module: SM created Ref(14687028)

404949.961|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((336),
(1)kBaseEventInit,Ticks(0))

404949.961|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

404949.961|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404949.961|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(1)kBaseEventInit,Ticks(0))

404949.961|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

404949.961|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404949.962|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136917,0)IndicationLevel:
(200)

404949.962|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

404949.962|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(5),Ticks(0))

404949.962|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404949.962|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404949.962|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

404949.962|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136917,1)IndicationCode:(200)Got OAUTH2 Token
404949.962|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404949.962|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136917,1)IndicationCode:(100)SM Started

404950.486|nisvc|2|00|

****************************HTTP SEND**************************

404950.486|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

404950.486|nisvc|2|00|ErrorBuffer::

404950.486|nisvc|2|00|

****************************HTTP SEND**************************

404950.493|nisvc|2|00|<\ni02:1,time taken(53)>

404950.493|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404950.494|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

404950.495|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

404950.495|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404950.495|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((347),
(1)kBaseEventInit,Ticks(0))

404950.495|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

404950.495|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(1)kBaseEventInit,Ticks(0))
404950.495|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(1)kBaseEventInit,Ticks(0))

404950.495|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404950.495|auth |3|00|auth's Timer,Running(1),Start(2192280)

404950.495|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

404950.495|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(5),Ticks(0))

404950.495|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404950.495|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404950.495|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404950.497|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404950.497|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

404950.497|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

404950.497|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

404950.497|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

404950.497|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

404950.497|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((344),
(1)kBaseEventInit,Ticks(0))
404950.497|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((344),
(1)kBaseEventInit,Ticks(0))

404950.497|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

404950.497|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404950.497|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))

404950.497|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

404950.497|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404950.497|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))

404950.497|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

404950.497|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404950.497|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

404950.570|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

404950.570|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404950.570|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

404950.571|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:43:58.000Z] WTEnd[2018-05-


31T14:41:13.815Z]

404950.571|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

404950.571|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:55:16Z]

404950.571|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

404950.571|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

404950.571|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136917,0)IndicationLevel:
(200)

404950.571|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)
404950.571|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),(5),Ticks(0))

404950.571|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

404950.571|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

404950.571|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(225166910)

404950.571|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136917,1)IndicationCode:(200)Got WT

404950.571|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

404950.571|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136917,1)IndicationCode:(100)SM Started

404951.050|nisvc|2|00|

****************************HTTP SEND**************************

404951.050|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

404951.050|nisvc|2|00|ErrorBuffer::

404951.050|nisvc|2|00|

****************************HTTP SEND**************************

404951.056|nisvc|2|00|<\ni03:1,time taken(48)>

404951.056|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

404951.057|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

404951.057|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

404951.057|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

404951.057|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

404951.057|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

404951.057|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404951.057|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

404951.057|auth |4|00|Retry Cnt [4] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

404951.057|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

404951.057|auth |3|00|auth's Timer,Running(1),Start(10000)

404951.057|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

404951.057|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))
405001.048|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526136928,0)IndicationLevel:(200)

405001.048|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe0076b,0xb5723de8,10000,4)

405001.048|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405001.048|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405001.048|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

405001.049|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

405001.049|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405001.049|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405001.049|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

405001.049|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405001.049|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1380f98):Ctx((349),(-
1),Ticks(0))

405001.049|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405001.051|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405001.051|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),(-
1),Ticks(0))

405001.051|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405001.051|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405001.051|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405001.052|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405001.052|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:
(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

405001.052|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405001.052|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405001.052|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(225166910)

405001.052|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136928,1)IndicationCode:(509)Retry Request Again

405001.052|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

405001.052|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

405001.052|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405001.052|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405001.052|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

405001.052|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136928,1)IndicationCode:(0)

405001.052|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey
Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

405001.052|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

405001.063|auth |2|00|SM Module: SM created Ref(14688138)

405001.063|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405001.063|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405001.063|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405001.063|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405001.063|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405001.063|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405001.063|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136928,0)IndicationLevel:
(200)

405001.063|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405001.063|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405001.063|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405001.063|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405001.063|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

405001.063|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136928,1)IndicationCode:(0)

405001.063|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey
Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

405001.063|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136928,1)IndicationCode:(100)SM Started

405001.063|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405001.063|auth |3|00|auth's Timer,Running(0),Start(2181720)

405001.556|nisvc|2|00|

****************************HTTP SEND**************************

405001.556|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405001.556|nisvc|2|00|ErrorBuffer::

405001.556|nisvc|2|00|

****************************HTTP SEND**************************

405001.562|nisvc|2|00|<\ni00:1,time taken(50)>

405001.563|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405001.567|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405001.567|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405001.567|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405001.567|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405001.567|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405001.567|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405001.567|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136928,0)IndicationLevel:
(200)

405001.567|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405001.567|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405002.016|nisvc|2|00|

****************************HTTP SEND**************************

405002.016|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405002.016|nisvc|2|00|ErrorBuffer::

405002.016|nisvc|2|00|

****************************HTTP SEND**************************

405002.023|nisvc|2|00|<\ni01:1,time taken(46)>

405002.024|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405002.027|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405002.027|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405002.027|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405002.027|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405002.027|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405002.027|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405002.027|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405002.027|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))
405002.027|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:
(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

405002.027|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405002.028|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405002.029|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

405002.029|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(225166910)

405002.029|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

405002.029|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405002.029|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405002.029|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(225166910)

405002.029|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136929,1)IndicationCode:(200)Got User Type

405002.030|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)
405002.030|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:
(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

405002.040|auth |2|00|SM Module: SM created Ref(14688236)

405002.040|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405002.040|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405002.040|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),(5),Ticks(0))

405002.040|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405002.040|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405002.040|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405002.040|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405002.040|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405002.040|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405002.040|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405002.040|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405002.040|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405002.040|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405002.040|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405002.040|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136929,0)IndicationLevel:
(200)

405002.040|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405002.040|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),(5),Ticks(0))
405002.040|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405002.040|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405002.040|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(225166910)

405002.041|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136929,1)IndicationCode:(0)

405002.041|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

405002.041|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136929,1)IndicationCode:(100)SM Started

405002.569|nisvc|2|00|

****************************HTTP SEND**************************

405002.569|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405002.569|nisvc|2|00|ErrorBuffer::

405002.569|nisvc|2|00|

****************************HTTP SEND**************************

405002.575|nisvc|2|00|<\ni02:1,time taken(53)>

405002.576|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405002.576|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778150","not_before":"1527774250","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405002.576|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405002.576|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405002.576|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405002.576|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405002.576|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405002.577|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405002.577|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405002.577|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405002.577|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405002.577|auth |3|00|auth's Timer,Running(1),Start(2180210)

405002.577|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405002.577|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),(5),Ticks(0))

405002.577|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

405002.577|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405002.577|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405002.578|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)
405002.578|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:
(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

405002.578|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(225166910)

405002.588|auth |2|00|SM Module: SM created Ref(14688290)

405002.588|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405002.588|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405002.588|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405002.588|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405002.588|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405002.589|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405002.589|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136929,0)IndicationLevel:
(200)

405002.589|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405002.589|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(5),Ticks(0))

405002.589|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405002.589|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405002.589|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(225166910)

405002.589|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136929,1)IndicationCode:(200)Got OAUTH2 Token
405002.589|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

405002.589|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136929,1)IndicationCode:(100)SM Started

405003.110|nisvc|2|00|

****************************HTTP SEND**************************

405003.110|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405003.111|nisvc|2|00|ErrorBuffer::

405003.111|nisvc|2|00|

****************************HTTP SEND**************************

405003.117|nisvc|2|00|<\ni03:1,time taken(52)>

405003.117|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405003.118|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405003.118|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405003.119|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405003.119|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405003.119|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405003.119|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(1)kBaseEventInit,Ticks(0))
405003.119|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405003.119|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405003.119|auth |3|00|auth's Timer,Running(1),Start(2179660)

405003.119|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405003.119|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(5),Ticks(0))

405003.119|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

405003.119|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405003.119|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405003.121|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

405003.121|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(225166910)

405003.121|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(225166910)

405003.121|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(5),Ticks(0))

405003.121|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405003.121|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405003.121|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((344),
(1)kBaseEventInit,Ticks(0))
405003.121|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405003.121|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405003.121|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405003.121|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405003.121|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405003.121|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405003.121|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405003.121|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405003.121|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405003.121|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405003.194|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405003.194|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405003.194|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405003.194|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:44:10.000Z] WTEnd[2018-05-


31T14:40:33.532Z]

405003.194|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405003.194|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:55:29Z]

405003.194|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405003.194|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405003.194|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526136930,0)IndicationLevel:
(200)

405003.194|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)
405003.194|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),(5),Ticks(0))

405003.194|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405003.194|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405003.194|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(225166910)

405003.195|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136930,1)IndicationCode:(200)Got WT

405003.195|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(225166910)

405003.195|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136930,1)IndicationCode:(100)SM Started

405003.638|nisvc|2|00|

****************************HTTP SEND**************************

405003.638|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405003.638|nisvc|2|00|ErrorBuffer::

405003.638|nisvc|2|00|

****************************HTTP SEND**************************

405003.645|nisvc|2|00|<\ni00:1,time taken(45)>

405003.645|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405003.645|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405003.645|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405003.645|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405003.645|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405003.645|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405003.645|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405003.645|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405003.645|auth |4|00|Retry Cnt [5] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405003.645|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(4)

405003.645|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(4),Ticks(0))

405003.645|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(4),Ticks(0))

405003.645|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(-1),Ticks(0))
405003.646|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:
(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(225166910)

405003.646|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405003.646|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405003.646|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(225166910)

405003.646|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),
(7)kBaseEventStop,Ticks(0))

405003.646|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d81c38):Ctx((355),(-1),Ticks(0))

405003.646|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405003.649|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405003.649|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),(-
1),Ticks(0))

405003.649|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405003.649|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405003.649|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1dfac70):Ctx((511),(-
1),Ticks(0))

405003.649|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405003.649|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405003.649|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405003.649|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405003.650|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(225166910)
405003.650|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)pps,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136930,1)IndicationCode:(400)Failed to Get UC

405003.650|sip |1|00|SipGotNewUserCert: pstNewUserCert[0xb511cad4]

405003.650|sip |3|00|TLS-DSK:soWebTicketCbFunc: the event type is 1

405003.650|sip |4|00|TLS-DSK:soWebTicketCbFunc: SoWebTicketCb_ResponseError event triggered


from the soWebTicket

405003.650|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(400)Failed to Get UC

,TransactionID(225166910)

405003.650|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,225166910,1526136930,1)IndicationCode:(400)Failed to Get UC

405126.199|sip |3|00|NoCall::TimeOut500ms 'Registering' m_nExpire == 0 RegisterCall -> Schedule


Register listSize 0 lTimeout 0

405126.199|sip |1|00|Schedule 'Register' nEvent 0 busyFlag 0 num events waiting 0

405126.199|sip |2|00|new UA Client Non-INVITE trans state 'callingTrying', timeout=0 (0xb62665a8)

405126.199|sip |3|00|RegClient:RegClient expire 66 overlap 0

405126.199|sip |2|00|SendCommand: reqDest 'couleecap.org' isLync 0 isGRUU 0 isIP 0


useEffectiveProxy 1

405126.199|sip |1|00|SendCommand: isLync 0 isGRUU 0 isIP 0 useEffectiveProxy 1

405126.199|sip |1|00|CreateFailOverProxyList : Reg to Domain 'couleecap.org' nPort 0, lkup 6

405126.199|sip |1|00|CreateFailOverProxyList : Domain is in user part

405126.199|sip |1|00|CreateFailOverProxyList : For REGISTER Request nPort 0

405126.199|sip |2|00|CreateFailOverProxyList resetting pps watchdog for 200000mSec in auto


discovery

405126.199|sip |1|00|CreateFailOverProxyList WAD:


ClientInternal[sippoolBLU0B05.infra.lync.com:443], ClientExternal[sipfed0B.online.lync.com:443]

405126.273|sip |1|00|doDnsListLookup(tls): doDnsSrvLookupForARecordList for


'sipfed0B.online.lync.com' port 443 returned 1 results

405126.273|sip |1|00|doDnsListLookup(tls): result 0 '52.112.64.203' port 443 isInBound 0

405126.273|sip |3|00|CreateFailOverProxyList WAD : Redirect list 'Auto Discovery'


'sipfed0B.online.lync.com' IP 1 is '52.112.64.203' on tls port 443
405126.273|sip |2|00|CreateFailOverProxyList : Exit 'Auto Discovery' lookup with 1 IP Addresses

405126.273|sip |2|00|CreateFailOverProxyList : IP 1 is '52.112.64.203' on tls port 443

405126.273|sip |1|00|CTrans:: SendCommand | this=0xb62665a8, bVQMonMessage=0, m_pCall-


>m_pUser->m_bOBFailOverReRegOn=0, m_pCall->m_pUser->m_bVQMonFailoverEnabled=1

405126.273|sip |1|00|CTcp::Send(TLS) entry for address 52.112.64.203 port 443 can Connect 1
canFailOver 0

405126.273|sip |1|00|CTcp::Send(TLS) address 52.112.64.203 port 443 can Connect 1

405126.273|sip |2|00|CTcpSocket::CTcpSocket entry m_bIsTcpPersistentConnection 0, Inbound 0


Timeout 120 this 0xb629dbe8

405126.273|sip |3|00|Open socket 213(0xb629dbe8)

405126.273|sip |1|00|SetRemoteAddress set SND BUF to 64000 OK

405126.273|sip |1|00|SetRemoteAddress set SEND TIMEOUT to 100ms OK

405126.273|sip |3|00|SetRemoteAddress OK on try 1 nPort 35309 0xb629dbe8

405126.273|sip |3|00|CTcpSocket::ConnectThreadLocal. Trying to connect IP 52.112.64.203:443

405126.274|sip |1|00|Task name tTCPCnt213

405126.274|sip |1|00|CTcp::Send(TLS) exit for address 52.112.64.203 port 443 can Connect 1 status 1
canFailOver 0 FoundSocket 0

405126.341|sip |3|00|connectNonBlock is successful

405126.341|sip |1|00|MsgSipTcpSocketStatus socket 213 status 1 m_bIsReconnectNeeded 0

405126.341|sip |2|00|CTcpSocket::OnSocketStatus socket 213(0xb629dbe8) bStatus 1

405126.341|sip |1|00|[CTcpSocket::MakeTlsConnection] TLS Protocol = 1

405126.551|sip |2|00|MakeTlsConnection: SSL_connect OK : TLS Handshake completed successfully

405126.552|sip |1|00|[TLS] hostname we are connected to is: 'sipfed0B.online.lync.com' IP


'52.112.64.203' port 443

405126.552|sip |3|00|[TLS] Validating Subject Alternative Name(s) (SAN) and Common Name (CN)
against the following:

405126.552|sip |3|00|[TLS] Hostname: couleecap.org

405126.552|sip |3|00|[TLS] Outbound Proxy: couleecap.org

405126.552|sip |3|00|[TLS] Hostname connection: sipfed0B.online.lync.com

405126.552|sip |1|00|[TLS] Comparing certificate SAN type DNS: 'sipfed.online.lync.com'

405126.552|sip |1|00|[TLS] Comparing certificate SAN type DNS: '*.online.lync.com'


405126.552|sip |3|00|[TLS] Allowing Server certificate with Specifc SN/SAN

405126.552|sip |3|00|[TLS] Validating certificate SAN of type DNS with '*.online.lync.com'

405126.552|sip |3|00|[TLS] Server Certificate SAN or CN validation success. SSL verify result 0

405126.552|sip |1|00|MakeTlsConnection: post_connection_checks passed

405126.552|sip |1|00|CTcpSocket::SendData TLS queuedTxData = 0 TotalLen 16 loop count 1


maxQueueDepth 40000

405126.552|sip |1|00|CTcpSocket::SendData TLS Sent 16 loop count 1

405126.552|sip |3|00|MakeTlsConnection: connection succeeded

405126.553|sip |1|00|CTcpSocket::SendData TLS queuedTxData = 101 TotalLen 989 loop count 1


maxQueueDepth 40000

405126.554|sip |1|00|CTcpSocket::SendData TLS Sent 989 loop count 1

405126.735|sip |1|00|MsgSipTcpPacket

405126.736|sip |3|00|CTcpSocket::OnRecvData

405126.737|sip |1|00|SipOnCommand: response 401,REGISTER

405126.737|sip |1|00|SipOnCommand: response 401,REGISTER matches user 1 of 1 'natalie.carlisle'

405126.737|sip |3|00|UA Client Non-INVITE REGISTER trans state 'callingTrying'->'completed' by 401


resp 10 timeout(0xb62665a8)

405126.737|sip |2|00|[CTrans::ResponseProcess] REGISTER NonInv reTrans ALREADY stopped in


'completed' state at retryCount 0 code 401, timeout=10 (0xb62665a8)

405126.737|sip |3|00|401 challenge received

405126.737|sip |2|00|SipCallState is not Idle, So send Re-INVITE

405126.737|sip |2|00|new UA Client Non-INVITE trans state 'callingTrying', timeout=0 (0xb1443dc0)

405126.737|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405126.737|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405126.737|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405126.737|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405126.737|sip |1|00|TLS-DSK authentication

405126.768|sip |1|00|TLS-DSK: Setting of Client Certificate failed due to (33558530)


error:02001002:system library:fopen:No such file or directory
405126.768|sip |1|00|TLS-DSK: Setting of Client Private key failed due to (537346050)
error:20074002:BIO routines:FILE_CTRL:system lib

405126.769|utilm|4|00|uBLFUnCompressed: File /ffs0/Config/Local/WebTicket/0/private.key doesn't


exist or is empty

405126.769|sip |3|00|getUserCertInfo: sip.usr[natalie.carlisle@couleecap.org] result[-1] validUntil[0]

405126.769|sip |2|00|[ParseMessageHeader]:[540],SIPURI=[natalie.carlisle@couleecap.org]

405126.769|sip |2|00|[ParseMessageHeader]:[555] Calling UC Fetch through Service FrameWork

405126.769|sip |3|00|TLS-DSK

405126.769|sip |1|00|CStkAuth::ParseAuthenticateHeader bTlsDskParseResult[0] bNtlmParseResult[0]


m_credType[2] m_bIsOnlyTlsDsk[1]

405126.769|sip |*|00|Sending User Cert fetch Request: OnlyTlsDsk[1]

405126.772|sip |1|00|Dialog 'id039e1353' State 'Trying'->'Terminated'

405126.772|sip |2|00|CStkDialog::CStkDialog SetAddressLocal Config 'Natalie Carlisle'


<natalie.carlisle@couleecap.org:0>

405126.772|sip |2|00|CStkDialog::CStkDialog AddressLocal set to Config

405126.772|sip |3|00|CStkDialog::SetAddressLocal localTag set to ''

405126.772|sip |3|00|CStkDialog::SetAddressLocal new address added of 1

405126.772|sip |2|00|CStkDialog::CStkDialog TAG 'B8B7238D-1A10299C' generated

405126.772|sip |2|00|CStkDialog::CStkDialog local addr 'Natalie Carlisle'


<natalie.carlisle@couleecap.org:0> Tag 'B8B7238D-1A10299C'

405126.772|sip |2|00|CStkDialog::CStkDialog exit 0x30cdc94 local list size 1

405126.772|sip |2|00|CStkDialogList::CreateDialogObject localTarg usr 'natalie.carlisle'

405126.772|sip |2|00|[svcUserCert]:[8360]: SipUri[natalie.carlisle@couleecap.org]


User[natalie.carlisle@couleecap.org],Dom[],STS[https://webdir0B.online.lync.com:443/CertProv/CertPro
visioningService.svc] Expiry[-1]

405126.773|auth |2|00|Request(-1)auth,(102)AuthServiceUCMsgKey,(-1)pps,(14),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137014,0)IndicationLevel:(200)

405126.773|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(205)AuthSvcAOServiceRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(-1)
405126.773|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:
(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(-1)

405126.773|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405126.773|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405126.773|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405126.773|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405126.774|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405126.774|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405126.774|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405126.774|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137014,1)IndicationCode:(0)

405126.774|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405126.774|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)
405126.774|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when
User Mode = 0

405126.774|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405126.774|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405126.774|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137014,1)IndicationCode:(0)

405126.774|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405126.774|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405126.784|auth |2|00|SM Module: SM created Ref(14696710)

405126.784|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405126.784|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405126.784|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405126.784|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405126.785|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405126.785|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405126.785|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137014,0)IndicationLevel:
(200)

405126.785|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405126.785|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((315),(5),Ticks(0))
405126.785|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405126.785|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405126.785|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405126.785|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137014,1)IndicationCode:(0)

405126.785|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405126.785|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137014,1)IndicationCode:(100)SM Started

405127.390|nisvc|2|00|

****************************HTTP SEND**************************

405127.390|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405127.390|nisvc|2|00|ErrorBuffer::

405127.390|nisvc|2|00|

****************************HTTP SEND**************************

405127.395|nisvc|2|00|<\ni01:1,time taken(61)>

405127.395|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405127.400|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405127.400|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)
405127.400|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405127.400|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405127.400|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405127.400|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405127.400|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137014,0)IndicationLevel:
(200)

405127.400|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405127.400|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((318),(5),Ticks(0))

405127.776|so |4|00|SNTP: sync failed with all servers, trying again[0]

405127.892|nisvc|2|00|

****************************HTTP SEND**************************

405127.892|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405127.892|nisvc|2|00|ErrorBuffer::

405127.892|nisvc|2|00|

****************************HTTP SEND**************************

405127.898|nisvc|2|00|<\ni02:1,time taken(50)>

405127.898|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405127.902|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405127.902|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)
405127.902|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405127.902|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405127.902|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405127.902|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((345),(3),Ticks(0))

405127.902|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((345),(3),Ticks(0))

405127.902|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((345),(-1),Ticks(0))

405127.902|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405127.902|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405127.903|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405127.903|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405127.903|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405127.904|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405127.904|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405127.904|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405127.904|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type


,TransactionID(1855965065)

405127.904|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137015,1)IndicationCode:(200)Got User Type

405127.904|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405127.904|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405127.914|auth |2|00|SM Module: SM created Ref(14696823)

405127.914|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405127.914|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405127.914|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405127.914|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405127.914|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405127.914|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405127.914|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405127.914|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405127.914|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405127.914|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405127.914|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405127.914|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token
405127.914|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-
55444fa5ccd3

405127.914|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405127.915|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137015,0)IndicationLevel:
(200)

405127.915|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405127.915|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405127.915|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405127.915|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405127.915|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405127.915|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137015,1)IndicationCode:(0)

405127.915|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405127.915|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137015,1)IndicationCode:(100)SM Started

405128.495|nisvc|2|00|

****************************HTTP SEND**************************

405128.495|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405128.495|nisvc|2|00|ErrorBuffer::

405128.495|nisvc|2|00|
****************************HTTP SEND**************************

405128.501|nisvc|2|00|<\ni03:1,time taken(59)>

405128.502|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405128.502|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778236","not_before":"1527774336","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405128.502|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405128.502|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405128.502|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405128.502|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405128.502|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405128.502|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405128.502|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405128.502|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405128.502|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405128.502|auth |3|00|auth's Timer,Running(1),Start(2094280)

405128.502|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405128.503|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405128.503|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey
Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405128.503|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405128.503|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405128.504|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405128.504|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405128.504|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405128.515|auth |2|00|SM Module: SM created Ref(14696883)

405128.515|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405128.515|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405128.515|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405128.515|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405128.515|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405128.515|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405128.515|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137015,0)IndicationLevel:
(200)

405128.515|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)
405128.515|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(5),Ticks(0))

405128.515|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405128.515|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405128.515|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405128.515|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137015,1)IndicationCode:(200)Got OAUTH2 Token

405128.515|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405128.515|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137015,1)IndicationCode:(100)SM Started

405129.295|nisvc|2|00|

****************************HTTP SEND**************************

405129.295|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405129.295|nisvc|2|00|ErrorBuffer::

405129.295|nisvc|2|00|

****************************HTTP SEND**************************

405129.301|nisvc|2|00|<\ni00:1,time taken(79)>

405129.301|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))
405129.303|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]
messageLen[5399]

405129.303|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405129.303|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405129.303|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405129.303|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405129.303|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405129.303|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405129.303|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405129.303|auth |3|00|auth's Timer,Running(1),Start(2093480)

405129.303|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405129.303|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(5),Ticks(0))

405129.303|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405129.303|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405129.303|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405129.305|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405129.305|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)
405129.305|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:
(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405129.315|auth |2|00|SM Module: SM created Ref(14696963)

405129.315|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405129.315|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405129.315|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405129.315|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405129.315|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405129.315|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405129.315|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405129.315|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405129.315|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405129.315|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405129.389|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405129.389|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405129.389|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405129.389|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:45:36.000Z] WTEnd[2018-05-


31T14:42:02.922Z]

405129.389|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405129.389|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:56:55Z]

405129.389|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]
405129.389|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405129.389|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137016,0)IndicationLevel:
(200)

405129.389|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405129.389|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405129.389|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405129.389|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405129.390|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1855965065)

405129.390|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137016,1)IndicationCode:(200)Got WT

405129.390|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405129.390|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137016,1)IndicationCode:(100)SM Started

405129.881|nisvc|2|00|

****************************HTTP SEND**************************

405129.881|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405129.881|nisvc|2|00|ErrorBuffer::

405129.881|nisvc|2|00|

****************************HTTP SEND**************************
405129.887|nisvc|2|00|<\ni01:1,time taken(49)>

405129.887|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405129.887|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405129.888|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405129.888|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405129.888|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405129.888|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405129.888|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405129.888|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405129.888|auth |4|00|Retry Cnt [0] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi
405129.888|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405129.888|auth |3|00|auth's Timer,Running(1),Start(10000)

405129.888|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405129.888|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405139.878|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137027,0)IndicationLevel:(200)

405139.878|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe04203,0xb5723de8,10000,4)

405139.878|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405139.878|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405139.878|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405139.878|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405139.878|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405139.878|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405139.879|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405139.879|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405139.879|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),(-
1),Ticks(0))

405139.879|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405139.881|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405139.881|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405139.881|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405139.881|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405139.881|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1dfb7e0):Ctx((345),(-1),Ticks(0))

405139.881|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405139.882|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405139.882|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405139.882|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405139.882|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405139.882|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137027,1)IndicationCode:(509)Retry Request
Again

405139.882|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405139.882|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405139.882|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405139.882|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405139.882|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)
,TransactionID(1855965065)

405139.882|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137027,1)IndicationCode:(0)

405139.882|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405139.882|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405139.892|auth |2|00|SM Module: SM created Ref(14698021)

405139.892|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405139.892|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405139.892|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405139.892|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405139.892|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405139.892|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405139.893|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137027,0)IndicationLevel:
(200)

405139.893|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405139.893|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405139.893|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405139.893|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405139.893|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)
,TransactionID(1855965065)

405139.893|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137027,1)IndicationCode:(0)

405139.893|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405139.893|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137027,1)IndicationCode:(100)SM Started

405139.893|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405139.893|auth |3|00|auth's Timer,Running(0),Start(2082900)

405140.342|nisvc|2|00|

****************************HTTP SEND**************************

405140.342|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405140.342|nisvc|2|00|ErrorBuffer::

405140.342|nisvc|2|00|

****************************HTTP SEND**************************

405140.346|nisvc|2|00|<\ni02:1,time taken(45)>

405140.346|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405140.353|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405140.353|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405140.353|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))
405140.353|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405140.353|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405140.353|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405140.353|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137027,0)IndicationLevel:
(200)

405140.353|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405140.353|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405140.853|nisvc|2|00|

****************************HTTP SEND**************************

405140.853|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405140.853|nisvc|2|00|ErrorBuffer::

405140.853|nisvc|2|00|

****************************HTTP SEND**************************

405140.857|nisvc|2|00|<\ni03:1,time taken(50)>

405140.857|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405140.863|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405140.863|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405140.863|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405140.863|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))
405140.863|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405140.863|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405140.863|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405140.863|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405140.863|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405140.863|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405140.863|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405140.865|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405140.865|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405140.865|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405140.865|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405140.865|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405140.865|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(1855965065)

405140.865|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137028,1)IndicationCode:(200)Got User Type
405140.865|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405140.865|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405140.875|auth |2|00|SM Module: SM created Ref(14698119)

405140.875|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405140.875|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405140.876|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405140.876|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405140.876|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405140.876|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405140.876|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405140.876|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405140.876|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405140.876|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405140.876|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405140.876|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405140.876|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405140.876|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]
405140.876|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137028,0)IndicationLevel:
(200)

405140.876|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405140.876|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405140.876|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405140.876|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405140.876|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405140.876|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137028,1)IndicationCode:(0)

405140.876|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405140.876|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137028,1)IndicationCode:(100)SM Started

405141.303|nisvc|2|00|

****************************HTTP SEND**************************

405141.303|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405141.303|nisvc|2|00|ErrorBuffer::

405141.303|nisvc|2|00|

****************************HTTP SEND**************************

405141.309|nisvc|2|00|<\ni00:1,time taken(44)>
405141.309|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405141.310|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3600","ext_ex
pires_in":"0","expires_on":"1527778249","not_before":"1527774349","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405141.310|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405141.310|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405141.310|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405141.310|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405141.310|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405141.310|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405141.310|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405141.310|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405141.310|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405141.310|auth |3|00|auth's Timer,Running(1),Start(2081480)

405141.310|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405141.310|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405141.310|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405141.311|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405141.311|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405141.312|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405141.312|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405141.312|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405141.322|auth |2|00|SM Module: SM created Ref(14698164)

405141.322|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405141.322|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405141.322|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405141.323|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405141.323|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405141.323|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405141.323|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137028,0)IndicationLevel:
(200)

405141.323|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405141.323|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(5),Ticks(0))

405141.323|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405141.323|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405141.323|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey
Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405141.323|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137028,1)IndicationCode:(200)Got OAUTH2 Token

405141.323|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405141.323|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137028,1)IndicationCode:(100)SM Started

405141.852|nisvc|2|00|

****************************HTTP SEND**************************

405141.852|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405141.852|nisvc|2|00|ErrorBuffer::

405141.852|nisvc|2|00|

****************************HTTP SEND**************************

405141.858|nisvc|2|00|<\ni01:1,time taken(53)>

405141.858|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405141.859|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405141.859|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405141.859|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405141.859|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((347),
(1)kBaseEventInit,Ticks(0))
405141.859|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405141.860|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405141.860|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405141.860|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405141.860|auth |3|00|auth's Timer,Running(1),Start(2080930)

405141.860|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405141.860|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(5),Ticks(0))

405141.860|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405141.860|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405141.860|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405141.861|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405141.861|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405141.862|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405141.862|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405141.862|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(6)kBaseEventRestart,Ticks(0))
405141.862|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405141.862|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405141.862|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405141.862|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405141.862|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405141.862|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405141.862|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405141.862|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405141.862|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405141.862|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405141.862|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405141.862|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405141.934|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405141.934|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405141.934|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405141.934|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:45:49.000Z] WTEnd[2018-05-


31T15:02:17.301Z]

405141.934|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405141.934|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:57:08Z]

405141.934|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405141.934|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405141.934|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137029,0)IndicationLevel:
(200)

405141.934|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405141.934|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405141.934|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405141.934|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405141.935|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1855965065)

405141.935|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137029,1)IndicationCode:(200)Got WT

405141.935|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405141.935|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137029,1)IndicationCode:(100)SM Started

405142.387|nisvc|2|00|

****************************HTTP SEND**************************

405142.387|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405142.387|nisvc|2|00|ErrorBuffer::

405142.387|nisvc|2|00|

****************************HTTP SEND**************************

405142.392|nisvc|2|00|<\ni02:1,time taken(46)>
405142.392|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405142.394|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405142.394|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405142.394|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405142.394|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405142.394|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405142.394|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405142.394|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405142.395|auth |4|00|Retry Cnt [1] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405142.395|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)


405142.395|auth |3|00|auth's Timer,Running(1),Start(10000)

405142.395|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405142.395|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405152.388|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137039,0)IndicationLevel:(200)

405152.388|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe04203,0xb5723de8,10000,4)

405152.388|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405152.388|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405152.388|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405152.388|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405152.389|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405152.389|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405152.389|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405152.389|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405152.389|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),(-
1),Ticks(0))

405152.389|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405152.391|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405152.391|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405152.391|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405152.391|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405152.391|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405152.391|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405152.392|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405152.392|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405152.392|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405152.392|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405152.392|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137039,1)IndicationCode:(509)Retry Request
Again

405152.392|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405152.392|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405152.392|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405152.392|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405152.392|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)
,TransactionID(1855965065)

405152.392|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137039,1)IndicationCode:(0)

405152.392|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405152.392|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405152.403|auth |2|00|SM Module: SM created Ref(14699272)

405152.403|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405152.403|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405152.403|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405152.403|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405152.403|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405152.403|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405152.403|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137039,0)IndicationLevel:
(200)

405152.403|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405152.403|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405152.403|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405152.403|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405152.403|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)
,TransactionID(1855965065)

405152.403|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137039,1)IndicationCode:(0)

405152.403|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405152.403|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137039,1)IndicationCode:(100)SM Started

405152.403|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405152.403|auth |3|00|auth's Timer,Running(0),Start(2070400)

405152.839|nisvc|2|00|

****************************HTTP SEND**************************

405152.839|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405152.839|nisvc|2|00|ErrorBuffer::

405152.839|nisvc|2|00|

****************************HTTP SEND**************************

405152.843|nisvc|2|00|<\ni03:1,time taken(44)>

405152.843|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405152.850|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405152.850|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405152.850|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))
405152.850|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405152.850|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405152.850|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405152.850|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137040,0)IndicationLevel:
(200)

405152.850|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405152.850|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405153.275|nisvc|2|00|

****************************HTTP SEND**************************

405153.275|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405153.275|nisvc|2|00|ErrorBuffer::

405153.275|nisvc|2|00|

****************************HTTP SEND**************************

405153.282|nisvc|2|00|<\ni00:1,time taken(43)>

405153.282|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405153.285|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405153.285|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405153.285|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405153.285|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))
405153.285|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405153.285|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405153.285|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405153.285|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405153.285|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405153.285|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405153.285|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405153.287|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405153.287|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405153.287|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405153.287|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405153.287|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405153.287|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(1855965065)

405153.287|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137040,1)IndicationCode:(200)Got User Type
405153.287|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405153.287|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405153.297|auth |2|00|SM Module: SM created Ref(14699361)

405153.298|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405153.298|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405153.298|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((501),(5),Ticks(0))

405153.298|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405153.298|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405153.298|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405153.298|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405153.298|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405153.298|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405153.298|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405153.298|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405153.298|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405153.298|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405153.298|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]
405153.298|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137040,0)IndicationLevel:
(200)

405153.298|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405153.298|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((512),(5),Ticks(0))

405153.298|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405153.298|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405153.298|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405153.298|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137040,1)IndicationCode:(0)

405153.298|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405153.298|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137040,1)IndicationCode:(100)SM Started

405153.847|nisvc|2|00|

****************************HTTP SEND**************************

405153.847|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405153.847|nisvc|2|00|ErrorBuffer::

405153.847|nisvc|2|00|

****************************HTTP SEND**************************

405153.853|nisvc|2|00|<\ni01:1,time taken(55)>
405153.853|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405153.854|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778262","not_before":"1527774362","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405153.854|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405153.854|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405153.854|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405153.854|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405153.854|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405153.854|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405153.854|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405153.854|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405153.854|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405153.854|auth |3|00|auth's Timer,Running(1),Start(2068950)

405153.854|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405153.854|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((511),(5),Ticks(0))

405153.854|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405153.854|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405153.854|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405153.855|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405153.855|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405153.856|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405153.866|auth |2|00|SM Module: SM created Ref(14699418)

405153.866|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405153.866|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405153.866|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405153.866|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405153.866|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405153.866|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405153.866|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137041,0)IndicationLevel:
(200)

405153.866|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405153.866|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(5),Ticks(0))

405153.866|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405153.866|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405153.866|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey
Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405153.867|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137041,1)IndicationCode:(200)Got OAUTH2 Token

405153.867|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405153.867|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137041,1)IndicationCode:(100)SM Started

405154.426|nisvc|2|00|

****************************HTTP SEND**************************

405154.426|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405154.426|nisvc|2|00|ErrorBuffer::

405154.426|nisvc|2|00|

****************************HTTP SEND**************************

405154.431|nisvc|2|00|<\ni02:1,time taken(57)>

405154.431|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405154.434|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405154.434|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405154.434|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405154.434|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((347),
(1)kBaseEventInit,Ticks(0))
405154.434|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405154.435|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405154.435|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405154.435|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405154.435|auth |3|00|auth's Timer,Running(1),Start(2068370)

405154.435|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405154.435|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(5),Ticks(0))

405154.435|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405154.435|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405154.435|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405154.437|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405154.437|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405154.437|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405154.437|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405154.437|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(6)kBaseEventRestart,Ticks(0))
405154.437|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405154.437|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405154.437|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405154.437|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405154.437|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405154.437|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405154.437|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405154.437|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405154.437|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405154.437|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405154.437|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405154.437|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405154.509|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405154.509|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405154.509|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405154.509|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:46:02.000Z] WTEnd[2018-05-


31T14:53:31.842Z]

405154.509|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405154.509|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:57:20Z]

405154.509|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405154.509|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405154.509|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137041,0)IndicationLevel:
(200)

405154.509|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405154.509|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405154.509|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405154.509|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405154.510|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1855965065)

405154.510|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137041,1)IndicationCode:(200)Got WT

405154.510|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405154.510|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137041,1)IndicationCode:(100)SM Started

405154.984|nisvc|2|00|

****************************HTTP SEND**************************

405154.984|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405154.984|nisvc|2|00|ErrorBuffer::

405154.984|nisvc|2|00|

****************************HTTP SEND**************************

405154.988|nisvc|2|00|<\ni03:1,time taken(48)>
405154.988|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405154.991|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405154.991|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405154.991|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405154.991|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405154.991|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405154.991|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405154.991|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405154.991|auth |4|00|Retry Cnt [2] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405154.991|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)


405154.991|auth |3|00|auth's Timer,Running(1),Start(10000)

405154.991|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405154.991|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405158.432|sip |5|00|SSL_get_error nLen -1 errno 104 nError 5 =


(0)error:00000000:lib(0):func(0):reason(0)

405158.432|sip |4|00|TLS Listen Thread Exit

405158.433|sip |1|00|MsgSipTcpSocketStatus socket 213 status 0 m_bIsReconnectNeeded 0

405158.433|sip |2|00|CTcpSocket::OnSocketStatus socket 213(0xb629dbe8) bStatus 0

405158.433|sip |3|00|CTcpSocket::~CTcpSocket socket 213 entry for 0xb629dbe8

405158.433|sip |3|00|CTcpSocket::~CTcpSocket socket 213(0xb629dbe8) SSL_shutdown rc=-1, ltf(1)

405158.433|sip |3|00|CTcpSocket::~CTcpSocket socket 213(0xb629dbe8) close

405158.433|sip |3|00|CTcpSocket::~CTcpSocket Got lock

405204.988|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137052,0)IndicationLevel:(200)

405204.988|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe04203,0xb5723de8,10000,4)

405204.988|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405204.988|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405204.989|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405204.989|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405204.989|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405204.989|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405204.989|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)
405204.989|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405204.989|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),(-
1),Ticks(0))

405204.989|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405204.991|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405204.991|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138fe80):Ctx((511),(-
1),Ticks(0))

405204.991|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405204.991|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405204.992|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405204.992|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405204.992|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405204.992|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405204.992|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405204.992|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405204.992|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137052,1)IndicationCode:(509)Retry Request
Again

405204.992|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)
405204.992|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:
(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405204.992|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405204.992|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405204.992|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405204.992|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137052,1)IndicationCode:(0)

405204.992|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405204.992|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405205.003|auth |2|00|SM Module: SM created Ref(14700532)

405205.003|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405205.003|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405205.003|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405205.003|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405205.003|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405205.003|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405205.003|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137052,0)IndicationLevel:
(200)

405205.003|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405205.003|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405205.003|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405205.003|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405205.003|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405205.003|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137052,1)IndicationCode:(0)

405205.003|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405205.003|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137052,1)IndicationCode:(100)SM Started

405205.003|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405205.003|auth |3|00|auth's Timer,Running(0),Start(2057810)

405205.537|nisvc|2|00|

****************************HTTP SEND**************************

405205.537|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405205.537|nisvc|2|00|ErrorBuffer::

405205.537|nisvc|2|00|

****************************HTTP SEND**************************
405205.545|nisvc|2|00|<\ni00:1,time taken(54)>

405205.545|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405205.550|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405205.550|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405205.550|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405205.550|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405205.550|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405205.550|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405205.550|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137052,0)IndicationLevel:
(200)

405205.550|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405205.550|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405206.056|nisvc|2|00|

****************************HTTP SEND**************************

405206.056|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405206.056|nisvc|2|00|ErrorBuffer::

405206.056|nisvc|2|00|

****************************HTTP SEND**************************

405206.063|nisvc|2|00|<\ni01:1,time taken(51)>
405206.063|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405206.067|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405206.067|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405206.067|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405206.067|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405206.067|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405206.067|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405206.067|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405206.067|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405206.067|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405206.067|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405206.067|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405206.069|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405206.069|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405206.069|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)
405206.069|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when
User Mode = 0

405206.069|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405206.069|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(1855965065)

405206.069|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137053,1)IndicationCode:(200)Got User Type

405206.069|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405206.069|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405206.080|auth |2|00|SM Module: SM created Ref(14700640)

405206.080|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405206.080|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405206.080|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((501),
(5),Ticks(0))

405206.080|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405206.080|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405206.080|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405206.080|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405206.080|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405206.080|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)
405206.080|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405206.080|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405206.080|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405206.080|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405206.080|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405206.080|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137053,0)IndicationLevel:
(200)

405206.080|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405206.080|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((512),
(5),Ticks(0))

405206.080|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405206.080|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405206.080|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405206.080|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137053,1)IndicationCode:(0)

405206.080|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405206.080|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137053,1)IndicationCode:(100)SM Started

405206.545|nisvc|2|00|

****************************HTTP SEND**************************
405206.546|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),
HttpResCode(200), curlRetCode(0) retVal(0)

405206.546|nisvc|2|00|ErrorBuffer::

405206.546|nisvc|2|00|

****************************HTTP SEND**************************

405206.550|nisvc|2|00|<\ni02:1,time taken(47)>

405206.550|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405206.553|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778274","not_before":"1527774374","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405206.553|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405206.553|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405206.553|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405206.553|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405206.554|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405206.554|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405206.554|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405206.554|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405206.554|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)


405206.554|auth |3|00|auth's Timer,Running(1),Start(2056260)

405206.554|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405206.554|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((511),
(5),Ticks(0))

405206.554|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405206.554|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405206.554|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405206.555|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405206.555|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405206.555|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405206.566|auth |2|00|SM Module: SM created Ref(14700688)

405206.566|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405206.566|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405206.566|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405206.566|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405206.566|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]
405206.566|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405206.566|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137053,0)IndicationLevel:
(200)

405206.566|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405206.566|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((337),
(5),Ticks(0))

405206.566|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405206.566|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405206.566|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405206.566|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137053,1)IndicationCode:(200)Got OAUTH2 Token

405206.566|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405206.566|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137053,1)IndicationCode:(100)SM Started

405207.100|nisvc|2|00|

****************************HTTP SEND**************************

405207.100|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405207.100|nisvc|2|00|ErrorBuffer::

405207.100|nisvc|2|00|

****************************HTTP SEND**************************
405207.104|nisvc|2|00|<\ni03:1,time taken(54)>

405207.104|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405207.108|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405207.108|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405207.108|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405207.108|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405207.108|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405207.108|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405207.108|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405207.108|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405207.108|auth |3|00|auth's Timer,Running(1),Start(2055700)

405207.108|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405207.108|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((349),
(5),Ticks(0))

405207.108|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405207.108|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405207.108|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405207.110|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)
405207.110|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:
(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405207.110|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405207.110|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405207.110|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405207.110|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405207.110|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405207.110|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405207.110|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405207.110|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405207.110|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405207.110|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405207.110|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405207.110|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405207.110|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405207.110|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405207.110|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405207.183|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)
405207.183|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405207.183|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405207.183|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:46:14.000Z] WTEnd[2018-05-


31T14:40:28.600Z]

405207.183|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405207.183|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:57:33Z]

405207.184|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405207.184|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405207.184|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137054,0)IndicationLevel:
(200)

405207.184|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405207.184|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405207.184|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405207.184|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405207.184|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1855965065)

405207.184|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137054,1)IndicationCode:(200)Got WT

405207.184|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405207.184|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137054,1)IndicationCode:(100)SM Started

405207.653|nisvc|2|00|
****************************HTTP SEND**************************

405207.653|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405207.653|nisvc|2|00|ErrorBuffer::

405207.653|nisvc|2|00|

****************************HTTP SEND**************************

405207.659|nisvc|2|00|<\ni00:1,time taken(48)>

405207.660|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405207.660|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405207.660|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405207.660|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405207.660|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405207.660|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405207.660|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405207.660|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405207.660|auth |4|00|Retry Cnt [3] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405207.660|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405207.660|auth |3|00|auth's Timer,Running(1),Start(10000)

405207.660|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405207.660|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405217.658|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137065,0)IndicationLevel:(200)

405217.658|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe04203,0xb5723de8,10000,4)

405217.658|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405217.658|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405217.658|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405217.658|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405217.658|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405217.659|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405217.659|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)
405217.659|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405217.659|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((349),(-
1),Ticks(0))

405217.659|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405217.661|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405217.661|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b838):Ctx((511),(-
1),Ticks(0))

405217.661|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405217.661|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405217.661|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405217.662|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405217.662|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405217.662|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405217.662|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405217.662|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405217.662|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137065,1)IndicationCode:(509)Retry Request
Again

405217.662|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)
405217.662|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:
(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405217.662|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405217.662|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405217.662|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405217.662|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137065,1)IndicationCode:(0)

405217.662|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405217.662|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405217.673|auth |2|00|SM Module: SM created Ref(14701799)

405217.673|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405217.673|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405217.673|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405217.673|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405217.673|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405217.673|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405217.673|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137065,0)IndicationLevel:
(200)

405217.673|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405217.673|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405217.673|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405217.673|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405217.673|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405217.673|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137065,1)IndicationCode:(0)

405217.673|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405217.673|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137065,1)IndicationCode:(100)SM Started

405217.673|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405217.673|auth |3|00|auth's Timer,Running(0),Start(2045150)

405218.207|nisvc|2|00|

****************************HTTP SEND**************************

405218.207|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405218.207|nisvc|2|00|ErrorBuffer::

405218.207|nisvc|2|00|

****************************HTTP SEND**************************
405218.215|nisvc|2|00|<\ni01:1,time taken(54)>

405218.215|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405218.219|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405218.219|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405218.219|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405218.219|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405218.219|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405218.219|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405218.220|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137065,0)IndicationLevel:
(200)

405218.220|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405218.220|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405218.672|nisvc|2|00|

****************************HTTP SEND**************************

405218.672|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405218.672|nisvc|2|00|ErrorBuffer::

405218.672|nisvc|2|00|

****************************HTTP SEND**************************

405218.677|nisvc|2|00|<\ni02:1,time taken(45)>
405218.677|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405218.683|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405218.683|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405218.683|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405218.683|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405218.683|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405218.683|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405218.683|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405218.683|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405218.683|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405218.683|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405218.683|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405218.684|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405218.684|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405218.685|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)
405218.685|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when
User Mode = 0

405218.685|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405218.685|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(1855965065)

405218.685|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137066,1)IndicationCode:(200)Got User Type

405218.685|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405218.685|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405218.695|auth |2|00|SM Module: SM created Ref(14701901)

405218.695|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405218.695|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405218.695|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405218.695|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405218.695|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405218.695|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405218.695|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405218.695|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405218.695|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)
405218.695|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405218.695|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405218.695|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405218.695|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405218.695|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405218.695|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137066,0)IndicationLevel:
(200)

405218.695|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405218.696|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405218.696|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405218.696|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405218.696|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405218.696|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137066,1)IndicationCode:(0)

405218.696|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405218.696|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137066,1)IndicationCode:(100)SM Started

405219.152|nisvc|2|00|

****************************HTTP SEND**************************
405219.152|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),
HttpResCode(200), curlRetCode(0) retVal(0)

405219.152|nisvc|2|00|ErrorBuffer::

405219.152|nisvc|2|00|

****************************HTTP SEND**************************

405219.156|nisvc|2|00|<\ni03:1,time taken(46)>

405219.156|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405219.159|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778287","not_before":"1527774387","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405219.159|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405219.159|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405219.159|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405219.159|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405219.160|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405219.160|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405219.160|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405219.160|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405219.160|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)


405219.160|auth |3|00|auth's Timer,Running(1),Start(2043660)

405219.160|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405219.160|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405219.160|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405219.160|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405219.160|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405219.161|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405219.161|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405219.161|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405219.172|auth |2|00|SM Module: SM created Ref(14701949)

405219.172|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405219.172|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405219.172|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405219.172|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405219.172|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]
405219.172|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405219.172|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137066,0)IndicationLevel:
(200)

405219.172|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405219.172|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((337),
(5),Ticks(0))

405219.172|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405219.172|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405219.172|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405219.172|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137066,1)IndicationCode:(200)Got OAUTH2 Token

405219.173|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405219.173|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137066,1)IndicationCode:(100)SM Started

405219.755|nisvc|2|00|

****************************HTTP SEND**************************

405219.755|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405219.755|nisvc|2|00|ErrorBuffer::

405219.755|nisvc|2|00|

****************************HTTP SEND**************************
405219.762|nisvc|2|00|<\ni00:1,time taken(59)>

405219.762|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405219.763|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405219.763|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405219.763|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405219.763|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405219.763|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405219.763|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405219.763|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405219.763|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405219.763|auth |3|00|auth's Timer,Running(1),Start(2043060)

405219.763|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405219.763|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((349),
(5),Ticks(0))

405219.763|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405219.763|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405219.764|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405219.765|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)
405219.765|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:
(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405219.765|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405219.765|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405219.765|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405219.765|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405219.765|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405219.765|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405219.765|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405219.765|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405219.765|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405219.765|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405219.765|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405219.765|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405219.765|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405219.765|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405219.765|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405219.837|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)
405219.837|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405219.837|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405219.837|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:46:27.000Z] WTEnd[2018-05-


31T15:00:55.171Z]

405219.837|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405219.837|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:57:46Z]

405219.837|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405219.837|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405219.837|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137067,0)IndicationLevel:
(200)

405219.837|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405219.837|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405219.837|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405219.838|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405219.838|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1855965065)

405219.838|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137067,1)IndicationCode:(200)Got WT

405219.838|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405219.838|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137067,1)IndicationCode:(100)SM Started

405219.885|log |5|00|Skipped uploading of failed log file because no of failures are > 4 or last upload
failed time is < 60 seconds.
405220.307|nisvc|2|00|

****************************HTTP SEND**************************

405220.307|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405220.307|nisvc|2|00|ErrorBuffer::

405220.307|nisvc|2|00|

****************************HTTP SEND**************************

405220.314|nisvc|2|00|<\ni01:1,time taken(48)>

405220.315|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405220.315|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405220.315|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405220.315|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405220.315|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405220.315|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405220.315|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405220.315|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405220.315|auth |4|00|Retry Cnt [4] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc
https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405220.316|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405220.316|auth |3|00|auth's Timer,Running(1),Start(10000)

405220.316|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405220.316|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405230.308|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137077,0)IndicationLevel:(200)

405230.308|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe04203,0xb5723de8,10000,4)

405230.308|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405230.308|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405230.308|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405230.309|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405230.309|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405230.309|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405230.309|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey
Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405230.309|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405230.309|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fe80):Ctx((349),(-
1),Ticks(0))

405230.309|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405230.312|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405230.312|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405230.312|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405230.312|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405230.312|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405230.312|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405230.312|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405230.312|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405230.313|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405230.313|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405230.313|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137077,1)IndicationCode:(509)Retry Request
Again

405230.313|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)
,TransactionID(1855965065)

405230.313|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405230.313|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405230.313|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405230.313|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405230.313|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137077,1)IndicationCode:(0)

405230.313|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405230.313|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405230.323|auth |2|00|SM Module: SM created Ref(14703064)

405230.323|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405230.323|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405230.323|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405230.323|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405230.323|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]
405230.323|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405230.324|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137077,0)IndicationLevel:
(200)

405230.324|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405230.324|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405230.324|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405230.324|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405230.324|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405230.324|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137077,1)IndicationCode:(0)

405230.324|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405230.324|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137077,1)IndicationCode:(100)SM Started

405230.324|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405230.324|auth |3|00|auth's Timer,Running(0),Start(2032510)

405230.824|nisvc|2|00|

****************************HTTP SEND**************************

405230.824|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405230.824|nisvc|2|00|ErrorBuffer::

405230.824|nisvc|2|00|
****************************HTTP SEND**************************

405230.828|nisvc|2|00|<\ni02:1,time taken(51)>

405230.828|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405230.835|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405230.835|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405230.835|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405230.835|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405230.835|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405230.835|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405230.835|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137078,0)IndicationLevel:
(200)

405230.835|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405230.835|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405231.311|nisvc|2|00|

****************************HTTP SEND**************************

405231.311|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405231.311|nisvc|2|00|ErrorBuffer::

405231.311|nisvc|2|00|

****************************HTTP SEND**************************
405231.315|nisvc|2|00|<\ni03:1,time taken(48)>

405231.315|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405231.321|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405231.321|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405231.321|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405231.321|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405231.321|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405231.321|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405231.321|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405231.321|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405231.321|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405231.322|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405231.322|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405231.323|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405231.323|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1855965065)

405231.323|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)
405231.323|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when
User Mode = 0

405231.323|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405231.323|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(1855965065)

405231.323|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137078,1)IndicationCode:(200)Got User Type

405231.323|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405231.323|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405231.334|auth |2|00|SM Module: SM created Ref(14703165)

405231.334|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405231.334|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405231.334|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405231.334|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405231.334|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405231.334|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405231.334|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405231.334|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405231.334|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)
405231.334|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405231.334|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405231.334|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405231.334|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405231.334|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405231.334|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137078,0)IndicationLevel:
(200)

405231.334|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405231.334|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405231.334|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405231.334|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405231.334|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1855965065)

405231.334|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137078,1)IndicationCode:(0)

405231.334|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405231.334|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137078,1)IndicationCode:(100)SM Started

405231.845|nisvc|2|00|

****************************HTTP SEND**************************
405231.845|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),
HttpResCode(200), curlRetCode(0) retVal(0)

405231.845|nisvc|2|00|ErrorBuffer::

405231.845|nisvc|2|00|

****************************HTTP SEND**************************

405231.851|nisvc|2|00|<\ni00:1,time taken(52)>

405231.852|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405231.852|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778300","not_before":"1527774400","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405231.852|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405231.852|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405231.852|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405231.852|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405231.852|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405231.852|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405231.853|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405231.853|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405231.853|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)


405231.853|auth |3|00|auth's Timer,Running(1),Start(2030980)

405231.853|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405231.853|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405231.853|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405231.853|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405231.853|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405231.854|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405231.854|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405231.854|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1855965065)

405231.864|auth |2|00|SM Module: SM created Ref(14703218)

405231.864|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405231.864|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405231.864|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405231.864|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405231.864|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]
405231.864|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405231.864|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137079,0)IndicationLevel:
(200)

405231.865|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405231.865|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(5),Ticks(0))

405231.865|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405231.865|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405231.865|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1855965065)

405231.865|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137079,1)IndicationCode:(200)Got OAUTH2 Token

405231.865|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405231.865|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137079,1)IndicationCode:(100)SM Started

405232.390|nisvc|2|00|

****************************HTTP SEND**************************

405232.391|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405232.391|nisvc|2|00|ErrorBuffer::

405232.391|nisvc|2|00|

****************************HTTP SEND**************************
405232.398|nisvc|2|00|<\ni01:1,time taken(53)>

405232.398|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405232.399|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405232.399|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405232.399|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405232.399|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405232.399|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405232.399|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405232.399|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405232.400|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405232.400|auth |3|00|auth's Timer,Running(1),Start(2030430)

405232.400|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405232.400|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(5),Ticks(0))

405232.400|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405232.400|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405232.400|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405232.401|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)
405232.402|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:
(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1855965065)

405232.402|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1855965065)

405232.402|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405232.402|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405232.402|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405232.402|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405232.402|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405232.402|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405232.402|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405232.402|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405232.402|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405232.402|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405232.402|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405232.402|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405232.402|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405232.402|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405232.473|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)
405232.473|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405232.473|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405232.473|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:46:40.000Z] WTEnd[2018-05-


31T14:53:09.807Z]

405232.474|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405232.474|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:57:58Z]

405232.474|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405232.474|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405232.474|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137079,0)IndicationLevel:
(200)

405232.474|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405232.474|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405232.474|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405232.474|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405232.474|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1855965065)

405232.474|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137079,1)IndicationCode:(200)Got WT

405232.474|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1855965065)

405232.474|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137079,1)IndicationCode:(100)SM Started

405232.930|nisvc|2|00|
****************************HTTP SEND**************************

405232.930|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405232.930|nisvc|2|00|ErrorBuffer::

405232.930|nisvc|2|00|

****************************HTTP SEND**************************

405232.935|nisvc|2|00|<\ni02:1,time taken(46)>

405232.935|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405232.937|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405232.937|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405232.937|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405232.937|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405232.937|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405232.937|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405232.937|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405232.937|auth |4|00|Retry Cnt [5] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405232.938|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(4)

405232.938|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(4),Ticks(0))

405232.938|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(4),Ticks(0))

405232.938|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(-1),Ticks(0))

405232.938|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(1855965065)

405232.938|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405232.938|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405232.938|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(1855965065)

405232.938|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(7)kBaseEventStop,Ticks(0))

405232.938|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(-1),Ticks(0))

405232.939|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405232.942|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405232.942|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7c008):Ctx((349),(-
1),Ticks(0))
405232.942|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405232.943|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405232.943|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405232.943|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405232.943|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405232.943|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405232.943|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405232.943|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(1855965065)

405232.943|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)pps,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137080,1)IndicationCode:(400)Failed to Get UC

405232.943|sip |1|00|SipGotNewUserCert: pstNewUserCert[0xb511cad4]

405232.943|sip |3|00|TLS-DSK:soWebTicketCbFunc: the event type is 1

405232.943|sip |4|00|TLS-DSK:soWebTicketCbFunc: SoWebTicketCb_ResponseError event triggered


from the soWebTicket

405232.944|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(400)Failed to Get UC

,TransactionID(1855965065)

405232.944|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1855965065,1526137080,1)IndicationCode:(400)Failed to Get UC

405335.806|so |4|00|SNTP: sync failed with all servers, trying again[0]

405356.699|sip |3|00|NoCall::TimeOut500ms 'Registering' m_nExpire == 0 RegisterCall -> Schedule


Register listSize 0 lTimeout 0

405356.699|sip |1|00|Schedule 'Register' nEvent 0 busyFlag 0 num events waiting 0

405356.699|sip |2|00|new UA Client Non-INVITE trans state 'callingTrying', timeout=0 (0xb62665a8)

405356.699|sip |3|00|RegClient:RegClient expire 66 overlap 0


405356.699|sip |2|00|SendCommand: reqDest 'couleecap.org' isLync 0 isGRUU 0 isIP 0
useEffectiveProxy 1

405356.699|sip |1|00|SendCommand: isLync 0 isGRUU 0 isIP 0 useEffectiveProxy 1

405356.699|sip |1|00|CreateFailOverProxyList : Reg to Domain 'couleecap.org' nPort 0, lkup 6

405356.699|sip |1|00|CreateFailOverProxyList : Domain is in user part

405356.699|sip |1|00|CreateFailOverProxyList : For REGISTER Request nPort 0

405356.699|sip |2|00|CreateFailOverProxyList resetting pps watchdog for 200000mSec in auto


discovery

405356.700|sip |1|00|CreateFailOverProxyList WAD:


ClientInternal[sippoolBLU0B05.infra.lync.com:443], ClientExternal[sipfed0B.online.lync.com:443]

405356.860|sip |1|00|doDnsListLookup(tls): doDnsSrvLookupForARecordList for


'sipfed0B.online.lync.com' port 443 returned 1 results

405356.860|sip |1|00|doDnsListLookup(tls): result 0 '52.112.64.203' port 443 isInBound 0

405356.860|sip |3|00|CreateFailOverProxyList WAD : Redirect list 'Auto Discovery'


'sipfed0B.online.lync.com' IP 1 is '52.112.64.203' on tls port 443

405356.860|sip |2|00|CreateFailOverProxyList : Exit 'Auto Discovery' lookup with 1 IP Addresses

405356.860|sip |2|00|CreateFailOverProxyList : IP 1 is '52.112.64.203' on tls port 443

405356.860|sip |1|00|CTrans:: SendCommand | this=0xb62665a8, bVQMonMessage=0, m_pCall-


>m_pUser->m_bOBFailOverReRegOn=0, m_pCall->m_pUser->m_bVQMonFailoverEnabled=1

405356.860|sip |1|00|CTcp::Send(TLS) entry for address 52.112.64.203 port 443 can Connect 1
canFailOver 0

405356.860|sip |1|00|CTcp::Send(TLS) address 52.112.64.203 port 443 can Connect 1

405356.860|sip |2|00|CTcpSocket::CTcpSocket entry m_bIsTcpPersistentConnection 0, Inbound 0


Timeout 120 this 0xb629dbe8

405356.860|sip |3|00|Open socket 212(0xb629dbe8)

405356.860|sip |1|00|SetRemoteAddress set SND BUF to 64000 OK

405356.860|sip |1|00|SetRemoteAddress set SEND TIMEOUT to 100ms OK

405356.860|sip |3|00|SetRemoteAddress OK on try 1 nPort 47225 0xb629dbe8

405356.860|sip |3|00|CTcpSocket::ConnectThreadLocal. Trying to connect IP 52.112.64.203:443

405356.860|sip |1|00|Task name tTCPCnt212

405356.860|sip |1|00|CTcp::Send(TLS) exit for address 52.112.64.203 port 443 can Connect 1 status 1
canFailOver 0 FoundSocket 0
405356.918|sip |3|00|connectNonBlock is successful

405356.918|sip |1|00|MsgSipTcpSocketStatus socket 212 status 1 m_bIsReconnectNeeded 0

405356.918|sip |2|00|CTcpSocket::OnSocketStatus socket 212(0xb629dbe8) bStatus 1

405356.918|sip |1|00|[CTcpSocket::MakeTlsConnection] TLS Protocol = 1

405357.118|sip |2|00|MakeTlsConnection: SSL_connect OK : TLS Handshake completed successfully

405357.118|sip |1|00|[TLS] hostname we are connected to is: 'sipfed0B.online.lync.com' IP


'52.112.64.203' port 443

405357.118|sip |3|00|[TLS] Validating Subject Alternative Name(s) (SAN) and Common Name (CN)
against the following:

405357.118|sip |3|00|[TLS] Hostname: couleecap.org

405357.118|sip |3|00|[TLS] Outbound Proxy: couleecap.org

405357.118|sip |3|00|[TLS] Hostname connection: sipfed0B.online.lync.com

405357.119|sip |1|00|[TLS] Comparing certificate SAN type DNS: 'sipfed.online.lync.com'

405357.119|sip |1|00|[TLS] Comparing certificate SAN type DNS: '*.online.lync.com'

405357.119|sip |3|00|[TLS] Allowing Server certificate with Specifc SN/SAN

405357.119|sip |3|00|[TLS] Validating certificate SAN of type DNS with '*.online.lync.com'

405357.119|sip |3|00|[TLS] Server Certificate SAN or CN validation success. SSL verify result 0

405357.119|sip |1|00|MakeTlsConnection: post_connection_checks passed

405357.119|sip |1|00|CTcpSocket::SendData TLS queuedTxData = 0 TotalLen 16 loop count 1


maxQueueDepth 40000

405357.119|sip |1|00|CTcpSocket::SendData TLS Sent 16 loop count 1

405357.119|sip |3|00|MakeTlsConnection: connection succeeded

405357.120|sip |1|00|CTcpSocket::SendData TLS queuedTxData = 101 TotalLen 989 loop count 1


maxQueueDepth 40000

405357.120|sip |1|00|CTcpSocket::SendData TLS Sent 989 loop count 1

405357.294|sip |1|00|MsgSipTcpPacket

405357.294|sip |3|00|CTcpSocket::OnRecvData

405357.295|sip |1|00|SipOnCommand: response 401,REGISTER

405357.295|sip |1|00|SipOnCommand: response 401,REGISTER matches user 1 of 1 'natalie.carlisle'

405357.295|sip |3|00|UA Client Non-INVITE REGISTER trans state 'callingTrying'->'completed' by 401


resp 10 timeout(0xb62665a8)
405357.295|sip |2|00|[CTrans::ResponseProcess] REGISTER NonInv reTrans ALREADY stopped in
'completed' state at retryCount 0 code 401, timeout=10 (0xb62665a8)

405357.295|sip |3|00|401 challenge received

405357.295|sip |2|00|SipCallState is not Idle, So send Re-INVITE

405357.295|sip |2|00|new UA Client Non-INVITE trans state 'callingTrying', timeout=0 (0xb14624c8)

405357.296|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405357.296|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405357.296|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405357.296|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405357.296|sip |1|00|TLS-DSK authentication

405357.326|sip |1|00|TLS-DSK: Setting of Client Certificate failed due to (33558530)


error:02001002:system library:fopen:No such file or directory

405357.326|sip |1|00|TLS-DSK: Setting of Client Private key failed due to (537346050)


error:20074002:BIO routines:FILE_CTRL:system lib

405357.326|utilm|4|00|uBLFUnCompressed: File /ffs0/Config/Local/WebTicket/0/private.key doesn't


exist or is empty

405357.326|sip |3|00|getUserCertInfo: sip.usr[natalie.carlisle@couleecap.org] result[-1] validUntil[0]

405357.326|sip |2|00|[ParseMessageHeader]:[540],SIPURI=[natalie.carlisle@couleecap.org]

405357.326|sip |2|00|[ParseMessageHeader]:[555] Calling UC Fetch through Service FrameWork

405357.326|sip |3|00|TLS-DSK

405357.326|sip |1|00|CStkAuth::ParseAuthenticateHeader bTlsDskParseResult[0] bNtlmParseResult[0]


m_credType[2] m_bIsOnlyTlsDsk[1]

405357.326|sip |*|00|Sending User Cert fetch Request: OnlyTlsDsk[1]

405357.330|sip |1|00|Dialog 'id006c3927' State 'Trying'->'Terminated'

405357.330|sip |2|00|CStkDialog::CStkDialog SetAddressLocal Config 'Natalie Carlisle'


<natalie.carlisle@couleecap.org:0>

405357.330|sip |2|00|CStkDialog::CStkDialog AddressLocal set to Config

405357.330|sip |3|00|CStkDialog::SetAddressLocal localTag set to ''

405357.330|sip |3|00|CStkDialog::SetAddressLocal new address added of 1

405357.330|sip |2|00|CStkDialog::CStkDialog TAG 'B20F3421-F2060B60' generated


405357.330|sip |2|00|CStkDialog::CStkDialog local addr 'Natalie Carlisle'
<natalie.carlisle@couleecap.org:0> Tag 'B20F3421-F2060B60'

405357.330|sip |2|00|CStkDialog::CStkDialog exit 0x30cd918 local list size 1

405357.330|sip |2|00|CStkDialogList::CreateDialogObject localTarg usr 'natalie.carlisle'

405357.330|sip |2|00|[svcUserCert]:[8360]: SipUri[natalie.carlisle@couleecap.org]


User[natalie.carlisle@couleecap.org],Dom[],STS[https://webdir0B.online.lync.com:443/CertProv/CertPro
visioningService.svc] Expiry[-1]

405357.330|auth |2|00|Request(-1)auth,(102)AuthServiceUCMsgKey,(-1)pps,(14),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137164,0)IndicationLevel:(200)

405357.331|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(205)AuthSvcAOServiceRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(-1)

405357.331|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(-1)

405357.331|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405357.331|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405357.331|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405357.331|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405357.331|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405357.331|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405357.331|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey
Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405357.331|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137164,1)IndicationCode:(0)

405357.331|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405357.331|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405357.331|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405357.332|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405357.332|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405357.332|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137164,1)IndicationCode:(0)

405357.332|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405357.332|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405357.342|auth |2|00|SM Module: SM created Ref(14711766)

405357.342|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))
405357.342|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405357.342|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405357.342|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405357.342|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405357.342|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405357.342|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137164,0)IndicationLevel:
(200)

405357.342|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405357.342|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405357.342|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405357.342|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405357.342|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405357.342|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137164,1)IndicationCode:(0)

405357.342|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405357.342|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137164,1)IndicationCode:(100)SM Started

405357.917|nisvc|2|00|

****************************HTTP SEND**************************
405357.917|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405357.917|nisvc|2|00|ErrorBuffer::

405357.917|nisvc|2|00|

****************************HTTP SEND**************************

405357.921|nisvc|2|00|<\ni03:1,time taken(58)>

405357.921|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405357.928|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405357.928|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405357.928|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405357.928|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405357.928|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405357.928|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405357.928|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137165,0)IndicationLevel:
(200)

405357.928|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405357.928|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405358.448|nisvc|2|00|

****************************HTTP SEND**************************

405358.448|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)
405358.448|nisvc|2|00|ErrorBuffer::

405358.448|nisvc|2|00|

****************************HTTP SEND**************************

405358.454|nisvc|2|00|<\ni00:1,time taken(52)>

405358.454|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405358.458|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405358.458|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405358.458|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405358.458|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405358.458|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405358.458|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405358.458|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405358.458|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405358.458|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405358.458|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405358.458|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405358.459|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405358.459|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey
Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405358.459|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405358.459|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405358.459|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405358.460|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(1327496712)

405358.460|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137165,1)IndicationCode:(200)Got User Type

405358.460|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405358.460|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405358.470|auth |2|00|SM Module: SM created Ref(14711879)

405358.470|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405358.470|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405358.470|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405358.470|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405358.470|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)
405358.470|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405358.470|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405358.470|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405358.470|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405358.470|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405358.470|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405358.470|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405358.470|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405358.470|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405358.470|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137165,0)IndicationLevel:
(200)

405358.470|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405358.470|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405358.470|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405358.470|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405358.470|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405358.470|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137165,1)IndicationCode:(0)

405358.471|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started


,TransactionID(1327496712)

405358.471|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137165,1)IndicationCode:(100)SM Started

405359.086|nisvc|2|00|

****************************HTTP SEND**************************

405359.086|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405359.086|nisvc|2|00|ErrorBuffer::

405359.086|nisvc|2|00|

****************************HTTP SEND**************************

405359.092|nisvc|2|00|<\ni01:1,time taken(62)>

405359.092|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405359.093|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778387","not_before":"1527774487","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405359.093|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405359.093|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405359.093|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405359.093|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405359.093|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)
405359.093|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405359.093|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405359.093|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405359.093|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405359.093|auth |3|00|auth's Timer,Running(1),Start(1943740)

405359.093|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405359.093|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405359.093|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405359.093|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405359.093|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405359.095|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405359.095|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405359.095|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405359.105|auth |2|00|SM Module: SM created Ref(14711942)

405359.105|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((336),
(1)kBaseEventInit,Ticks(0))
405359.105|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405359.105|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405359.105|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405359.106|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405359.106|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405359.106|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137166,0)IndicationLevel:
(200)

405359.106|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405359.106|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((337),
(5),Ticks(0))

405359.106|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405359.106|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405359.106|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405359.106|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137166,1)IndicationCode:(200)Got OAUTH2 Token

405359.106|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405359.106|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137166,1)IndicationCode:(100)SM Started

405359.645|nisvc|2|00|

****************************HTTP SEND**************************
405359.645|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405359.645|nisvc|2|00|ErrorBuffer::

405359.645|nisvc|2|00|

****************************HTTP SEND**************************

405359.651|nisvc|2|00|<\ni02:1,time taken(55)>

405359.651|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405359.653|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405359.653|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405359.653|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405359.653|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405359.653|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405359.653|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405359.653|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405359.653|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405359.653|auth |3|00|auth's Timer,Running(1),Start(1943180)

405359.653|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405359.653|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((349),
(5),Ticks(0))

405359.653|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)
405359.654|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405359.654|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405359.655|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405359.655|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405359.655|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405359.665|auth |2|00|SM Module: SM created Ref(14711998)

405359.665|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405359.665|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405359.666|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405359.666|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405359.666|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405359.666|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405359.666|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405359.666|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405359.666|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405359.666|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))
405359.740|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405359.740|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405359.740|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405359.740|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:48:07.000Z] WTEnd[2018-05-


31T15:02:19.954Z]

405359.740|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405359.740|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:59:26Z]

405359.740|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405359.740|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405359.740|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137167,0)IndicationLevel:
(200)

405359.740|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405359.740|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405359.741|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405359.741|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405359.741|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1327496712)

405359.741|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137167,1)IndicationCode:(200)Got WT

405359.741|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405359.741|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137167,1)IndicationCode:(100)SM Started

405400.224|nisvc|2|00|
****************************HTTP SEND**************************

405400.224|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405400.224|nisvc|2|00|ErrorBuffer::

405400.224|nisvc|2|00|

****************************HTTP SEND**************************

405400.231|nisvc|2|00|<\ni03:1,time taken(49)>

405400.231|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405400.232|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405400.232|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405400.232|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405400.232|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405400.232|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405400.232|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405400.232|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405400.232|auth |4|00|Retry Cnt [0] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405400.232|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405400.232|auth |3|00|auth's Timer,Running(1),Start(10000)

405400.232|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405400.232|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405410.228|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137177,0)IndicationLevel:(200)

405410.228|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe07cbe,0xb5723de8,10000,4)

405410.228|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405410.228|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405410.228|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405410.228|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405410.228|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405410.229|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405410.229|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again


,TransactionID(1327496712)

405410.229|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405410.229|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d81c38):Ctx((349),(-
1),Ticks(0))

405410.229|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405410.231|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405410.231|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405410.231|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405410.232|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405410.232|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405410.232|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405410.232|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405410.232|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405410.232|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405410.232|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405410.232|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137177,1)IndicationCode:(509)Retry Request
Again

405410.232|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)
405410.232|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:
(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405410.232|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405410.232|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405410.233|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405410.233|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137177,1)IndicationCode:(0)

405410.233|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405410.233|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405410.243|auth |2|00|SM Module: SM created Ref(14713056)

405410.243|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405410.243|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405410.243|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405410.243|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405410.243|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405410.243|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405410.243|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137177,0)IndicationLevel:
(200)

405410.243|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405410.243|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405410.243|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405410.243|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405410.243|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405410.243|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137177,1)IndicationCode:(0)

405410.243|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405410.243|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137177,1)IndicationCode:(100)SM Started

405410.243|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405410.243|auth |3|00|auth's Timer,Running(0),Start(1932600)

405410.702|nisvc|2|00|

****************************HTTP SEND**************************

405410.702|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405410.702|nisvc|2|00|ErrorBuffer::

405410.702|nisvc|2|00|

****************************HTTP SEND**************************
405410.708|nisvc|2|00|<\ni00:1,time taken(47)>

405410.708|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405410.713|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405410.713|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405410.713|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405410.713|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405410.713|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405410.713|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405410.713|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137178,0)IndicationLevel:
(200)

405410.713|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405410.713|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405411.221|nisvc|2|00|

****************************HTTP SEND**************************

405411.221|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405411.221|nisvc|2|00|ErrorBuffer::

405411.221|nisvc|2|00|

****************************HTTP SEND**************************

405411.227|nisvc|2|00|<\ni01:1,time taken(51)>
405411.227|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405411.231|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405411.231|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405411.231|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405411.231|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405411.231|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405411.231|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405411.231|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405411.231|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405411.231|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405411.231|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405411.231|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405411.233|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405411.233|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405411.233|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)
405411.233|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when
User Mode = 0

405411.234|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405411.234|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(1327496712)

405411.234|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137178,1)IndicationCode:(200)Got User Type

405411.234|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405411.234|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405411.244|auth |2|00|SM Module: SM created Ref(14713156)

405411.244|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405411.244|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405411.244|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((501),(5),Ticks(0))

405411.244|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405411.244|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405411.244|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405411.244|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405411.244|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405411.244|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)
405411.244|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405411.244|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405411.244|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405411.244|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405411.244|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405411.244|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137178,0)IndicationLevel:
(200)

405411.244|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405411.244|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((512),(5),Ticks(0))

405411.244|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405411.244|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405411.245|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405411.245|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137178,1)IndicationCode:(0)

405411.245|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405411.245|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137178,1)IndicationCode:(100)SM Started

405411.909|nisvc|2|00|

****************************HTTP SEND**************************
405411.909|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),
HttpResCode(200), curlRetCode(0) retVal(0)

405411.909|nisvc|2|00|ErrorBuffer::

405411.909|nisvc|2|00|

****************************HTTP SEND**************************

405411.910|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405411.910|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778400","not_before":"1527774500","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405411.910|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405411.910|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405411.910|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405411.910|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405411.910|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405411.910|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405411.910|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405411.910|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405411.911|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405411.911|auth |3|00|auth's Timer,Running(1),Start(1930930)

405411.911|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)
405411.911|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((511),(5),Ticks(0))

405411.911|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405411.911|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405411.911|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405411.912|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405411.912|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405411.912|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405411.918|nisvc|2|00|<\ni02:1,time taken(68)>

405411.922|auth |2|00|SM Module: SM created Ref(14713224)

405411.923|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405411.923|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405411.923|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405411.923|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405411.923|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405411.923|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405411.923|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137179,0)IndicationLevel:
(200)

405411.923|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405411.923|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((337),
(5),Ticks(0))

405411.923|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405411.923|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405411.923|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405411.923|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137179,1)IndicationCode:(200)Got OAUTH2 Token

405411.923|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405411.923|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137179,1)IndicationCode:(100)SM Started

405412.703|nisvc|2|00|

****************************HTTP SEND**************************

405412.703|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405412.703|nisvc|2|00|ErrorBuffer::

405412.703|nisvc|2|00|

****************************HTTP SEND**************************
405412.709|nisvc|2|00|<\ni03:1,time taken(79)>

405412.709|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405412.711|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405412.711|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405412.711|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405412.711|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405412.711|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405412.711|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405412.711|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405412.711|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405412.711|auth |3|00|auth's Timer,Running(1),Start(1930130)

405412.711|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405412.711|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((349),
(5),Ticks(0))

405412.711|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405412.711|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405412.711|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405412.713|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405412.713|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey
Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405412.713|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405412.713|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405412.713|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405412.713|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405412.713|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405412.713|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405412.713|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405412.713|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405412.713|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405412.713|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405412.713|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405412.713|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405412.713|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405412.713|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405412.713|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405412.786|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405412.786|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))
405412.786|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405412.787|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:48:20.000Z] WTEnd[2018-05-


31T14:46:56.325Z]

405412.787|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405412.787|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:59:39Z]

405412.787|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405412.787|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405412.787|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137180,0)IndicationLevel:
(200)

405412.787|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405412.787|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405412.787|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405412.787|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405412.787|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1327496712)

405412.787|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137180,1)IndicationCode:(200)Got WT

405412.787|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405412.787|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137180,1)IndicationCode:(100)SM Started

405413.221|nisvc|2|00|

****************************HTTP SEND**************************
405413.221|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405413.221|nisvc|2|00|ErrorBuffer::

405413.221|nisvc|2|00|

****************************HTTP SEND**************************

405413.227|nisvc|2|00|<\ni00:1,time taken(44)>

405413.227|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405413.227|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405413.227|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405413.227|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405413.227|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405413.227|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405413.228|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405413.228|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405413.228|auth |4|00|Retry Cnt [1] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert
https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405413.228|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405413.228|auth |3|00|auth's Timer,Running(1),Start(10000)

405413.228|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405413.228|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405423.218|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137190,0)IndicationLevel:(200)

405423.218|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe07cbe,0xb5723de8,10000,4)

405423.218|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405423.218|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405423.218|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405423.218|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405423.218|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405423.219|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405423.219|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)
405423.219|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405423.219|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb13ca798):Ctx((349),(-
1),Ticks(0))

405423.219|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405423.221|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405423.221|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb138ff60):Ctx((511),(-
1),Ticks(0))

405423.221|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405423.221|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405423.221|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405423.221|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405423.222|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405423.222|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405423.222|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405423.222|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405423.222|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137190,1)IndicationCode:(509)Retry Request
Again

405423.222|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)
405423.222|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:
(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405423.222|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405423.222|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405423.222|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405423.222|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137190,1)IndicationCode:(0)

405423.222|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405423.222|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405423.232|auth |2|00|SM Module: SM created Ref(14714355)

405423.232|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405423.232|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405423.233|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405423.233|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405423.233|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405423.233|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405423.233|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137190,0)IndicationLevel:
(200)

405423.233|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405423.233|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405423.233|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405423.233|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405423.233|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405423.233|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137190,1)IndicationCode:(0)

405423.233|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405423.233|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137190,1)IndicationCode:(100)SM Started

405423.233|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405423.233|auth |3|00|auth's Timer,Running(0),Start(1919620)

405423.731|nisvc|2|00|

****************************HTTP SEND**************************

405423.731|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405423.731|nisvc|2|00|ErrorBuffer::

405423.731|nisvc|2|00|

****************************HTTP SEND**************************
405423.737|nisvc|2|00|<\ni01:1,time taken(50)>

405423.737|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405423.742|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405423.742|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405423.742|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405423.742|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405423.742|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405423.743|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405423.743|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137191,0)IndicationLevel:
(200)

405423.743|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405423.743|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405424.246|nisvc|2|00|

****************************HTTP SEND**************************

405424.246|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405424.246|nisvc|2|00|ErrorBuffer::

405424.246|nisvc|2|00|

****************************HTTP SEND**************************

405424.252|nisvc|2|00|<\ni02:1,time taken(51)>
405424.253|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405424.256|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405424.256|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405424.256|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405424.256|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405424.256|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405424.256|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405424.256|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405424.256|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405424.256|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405424.257|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405424.257|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405424.258|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405424.258|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405424.258|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)
405424.258|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when
User Mode = 0

405424.258|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405424.258|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(1327496712)

405424.258|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137191,1)IndicationCode:(200)Got User Type

405424.259|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405424.259|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405424.269|auth |2|00|SM Module: SM created Ref(14714459)

405424.269|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405424.269|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405424.269|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405424.269|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405424.269|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405424.269|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405424.269|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405424.269|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405424.269|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)
405424.269|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405424.269|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405424.269|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405424.269|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405424.269|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405424.269|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137191,0)IndicationLevel:
(200)

405424.269|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405424.269|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405424.269|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405424.269|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405424.269|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405424.269|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137191,1)IndicationCode:(0)

405424.269|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405424.269|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137191,1)IndicationCode:(100)SM Started

405424.887|nisvc|2|00|

****************************HTTP SEND**************************
405424.887|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),
HttpResCode(200), curlRetCode(0) retVal(0)

405424.887|nisvc|2|00|ErrorBuffer::

405424.887|nisvc|2|00|

****************************HTTP SEND**************************

405424.893|nisvc|2|00|<\ni03:1,time taken(62)>

405424.894|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405424.894|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3600","ext_ex
pires_in":"0","expires_on":"1527778413","not_before":"1527774513","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405424.894|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405424.894|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405424.894|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405424.894|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405424.894|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405424.894|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405424.895|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405424.895|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405424.895|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)


405424.895|auth |3|00|auth's Timer,Running(1),Start(1917960)

405424.895|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405424.895|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405424.895|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405424.895|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405424.895|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405424.896|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405424.896|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405424.896|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405424.907|auth |2|00|SM Module: SM created Ref(14714522)

405424.907|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405424.907|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405424.907|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405424.907|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405424.907|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]
405424.907|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405424.907|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137192,0)IndicationLevel:
(200)

405424.907|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405424.907|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(5),Ticks(0))

405424.907|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405424.907|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405424.907|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405424.907|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137192,1)IndicationCode:(200)Got OAUTH2 Token

405424.907|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405424.907|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137192,1)IndicationCode:(100)SM Started

405425.446|nisvc|2|00|

****************************HTTP SEND**************************

405425.446|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405425.446|nisvc|2|00|ErrorBuffer::

405425.446|nisvc|2|00|

****************************HTTP SEND**************************
405425.452|nisvc|2|00|<\ni00:1,time taken(55)>

405425.452|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405425.453|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405425.453|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405425.453|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405425.453|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405425.454|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405425.454|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405425.454|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405425.454|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405425.454|auth |3|00|auth's Timer,Running(1),Start(1917400)

405425.454|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405425.454|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(5),Ticks(0))

405425.454|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405425.454|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405425.454|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405425.455|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)
405425.455|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:
(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405425.456|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405425.456|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405425.456|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405425.456|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405425.456|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405425.456|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405425.456|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405425.456|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405425.456|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405425.456|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405425.456|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405425.456|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405425.456|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405425.456|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405425.456|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405425.528|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)
405425.528|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405425.528|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405425.528|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:48:33.000Z] WTEnd[2018-05-


31T15:05:08.855Z]

405425.528|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405425.528|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T14:59:51Z]

405425.528|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405425.528|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405425.528|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137192,0)IndicationLevel:
(200)

405425.528|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405425.528|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405425.528|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405425.528|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405425.528|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1327496712)

405425.528|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137192,1)IndicationCode:(200)Got WT

405425.529|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405425.529|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137192,1)IndicationCode:(100)SM Started

405425.980|nisvc|2|00|
****************************HTTP SEND**************************

405425.980|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405425.980|nisvc|2|00|ErrorBuffer::

405425.980|nisvc|2|00|

****************************HTTP SEND**************************

405425.986|nisvc|2|00|<\ni01:1,time taken(45)>

405425.986|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405425.986|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405425.986|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405425.986|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405425.986|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405425.986|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405425.986|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405425.986|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405425.986|auth |4|00|Retry Cnt [2] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405425.986|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405425.986|auth |3|00|auth's Timer,Running(1),Start(10000)

405425.986|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405425.986|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405429.025|sip |5|00|SSL_get_error nLen -1 errno 104 nError 5 =


(0)error:00000000:lib(0):func(0):reason(0)

405429.025|sip |4|00|TLS Listen Thread Exit

405429.026|sip |1|00|MsgSipTcpSocketStatus socket 212 status 0 m_bIsReconnectNeeded 0

405429.026|sip |2|00|CTcpSocket::OnSocketStatus socket 212(0xb629dbe8) bStatus 0

405429.026|sip |3|00|CTcpSocket::~CTcpSocket socket 212 entry for 0xb629dbe8

405429.026|sip |3|00|CTcpSocket::~CTcpSocket socket 212(0xb629dbe8) SSL_shutdown rc=-1, ltf(1)

405429.026|sip |3|00|CTcpSocket::~CTcpSocket socket 212(0xb629dbe8) close

405429.026|sip |3|00|CTcpSocket::~CTcpSocket Got lock

405432.002|sip |3|00|New Connection Accepted

405432.002|sip |1|00|socket accepted 195

405432.002|sip |3|00|Waiting for a New Connection 0xb263ed04 0xb263ec78

405432.006|sip |2|00|CTcpSocket::CTcpSocket entry m_bIsTcpPersistentConnection 0, Inbound 1


Timeout 240 this 0xb6266588

405432.006|sip |1|00|Task name tTCPListen195

405432.006|sip |1|00|MsgSipTcpAccept

405432.007|sip |3|00|Creating recv Thread


405432.007|sip |3|00|Waiting on recv Thread

405432.007|sip |1|00|socket recv error error=0

405432.007|sip |1|00|ListenThread socket 195 thread exiting

405432.007|sip |1|00|MsgSipTcpSocketStatus socket 195 status 0 m_bIsReconnectNeeded 0

405432.007|sip |2|00|CTcpSocket::OnSocketStatus socket 195(0xb6266588) bStatus 0

405432.007|sip |3|00|CTcpSocket::~CTcpSocket socket 195 entry for 0xb6266588

405432.007|sip |3|00|CTcpSocket::~CTcpSocket socket 195(0xb6266588) close

405432.007|hw |5|00|Task ended without calling rtosTaskEnd() name=tTCPListen195

405435.978|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137203,0)IndicationLevel:(200)

405435.978|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe07cbe,0xb5723de8,10000,4)

405435.978|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405435.978|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405435.978|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405435.978|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405435.978|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405435.979|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405435.979|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405435.979|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405435.979|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),(-
1),Ticks(0))

405435.979|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405435.981|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405435.981|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405435.981|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405435.982|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405435.982|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405435.982|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405435.982|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405435.982|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405435.982|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405435.982|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405435.982|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137203,1)IndicationCode:(509)Retry Request
Again

405435.982|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405435.982|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405435.982|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0
405435.982|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405435.982|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405435.982|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137203,1)IndicationCode:(0)

405435.983|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405435.983|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405435.993|auth |2|00|SM Module: SM created Ref(14715631)

405435.993|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405435.993|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405435.993|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405435.993|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405435.993|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405435.993|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405435.993|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137203,0)IndicationLevel:
(200)

405435.993|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405435.993|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405435.993|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)


405435.993|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405435.993|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405435.993|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137203,1)IndicationCode:(0)

405435.993|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405435.993|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137203,1)IndicationCode:(100)SM Started

405435.993|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405435.993|auth |3|00|auth's Timer,Running(0),Start(1906870)

405436.564|nisvc|2|00|

****************************HTTP SEND**************************

405436.564|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405436.564|nisvc|2|00|ErrorBuffer::

405436.564|nisvc|2|00|

****************************HTTP SEND**************************

405436.570|nisvc|2|00|<\ni02:1,time taken(58)>

405436.570|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405436.575|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]
405436.575|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405436.575|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405436.575|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405436.575|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405436.575|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405436.575|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137203,0)IndicationLevel:
(200)

405436.575|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405436.575|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405437.106|nisvc|2|00|

****************************HTTP SEND**************************

405437.106|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405437.106|nisvc|2|00|ErrorBuffer::

405437.106|nisvc|2|00|

****************************HTTP SEND**************************

405437.112|nisvc|2|00|<\ni03:1,time taken(54)>

405437.113|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405437.116|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405437.116|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)
405437.116|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405437.116|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405437.116|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405437.116|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405437.116|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405437.117|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405437.117|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405437.117|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405437.117|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405437.118|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405437.118|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405437.118|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405437.118|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405437.118|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405437.119|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type


,TransactionID(1327496712)

405437.119|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137204,1)IndicationCode:(200)Got User Type

405437.119|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405437.119|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405437.129|auth |2|00|SM Module: SM created Ref(14715745)

405437.129|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405437.129|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405437.129|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405437.129|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405437.129|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405437.129|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405437.129|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405437.129|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405437.129|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405437.129|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405437.129|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405437.129|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token
405437.129|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-
55444fa5ccd3

405437.129|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405437.129|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137204,0)IndicationLevel:
(200)

405437.129|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405437.129|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405437.129|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405437.129|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405437.129|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405437.129|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137204,1)IndicationCode:(0)

405437.130|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405437.130|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137204,1)IndicationCode:(100)SM Started

405437.720|nisvc|2|00|

****************************HTTP SEND**************************

405437.720|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405437.720|nisvc|2|00|ErrorBuffer::

405437.720|nisvc|2|00|
****************************HTTP SEND**************************

405437.726|nisvc|2|00|<\ni00:1,time taken(59)>

405437.726|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405437.727|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778426","not_before":"1527774526","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405437.727|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405437.727|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405437.727|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405437.727|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405437.727|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405437.727|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405437.727|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405437.727|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405437.727|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405437.727|auth |3|00|auth's Timer,Running(1),Start(1905140)

405437.727|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405437.727|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405437.727|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey
Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405437.728|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405437.728|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405437.729|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405437.729|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405437.729|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405437.740|auth |2|00|SM Module: SM created Ref(14715806)

405437.740|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405437.740|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405437.740|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405437.740|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405437.740|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405437.740|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405437.740|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137205,0)IndicationLevel:
(200)

405437.740|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)
405437.740|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(5),Ticks(0))

405437.740|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405437.740|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405437.740|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405437.740|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137205,1)IndicationCode:(200)Got OAUTH2 Token

405437.740|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405437.740|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137205,1)IndicationCode:(100)SM Started

405438.267|nisvc|2|00|

****************************HTTP SEND**************************

405438.267|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405438.267|nisvc|2|00|ErrorBuffer::

405438.267|nisvc|2|00|

****************************HTTP SEND**************************

405438.275|nisvc|2|00|<\ni01:1,time taken(53)>

405438.275|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))
405438.277|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]
messageLen[5399]

405438.277|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405438.277|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405438.277|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405438.277|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405438.277|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405438.277|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405438.277|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405438.277|auth |3|00|auth's Timer,Running(1),Start(1904590)

405438.277|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405438.277|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(5),Ticks(0))

405438.277|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405438.277|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405438.277|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405438.279|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405438.279|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)
405438.279|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:
(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405438.279|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405438.279|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405438.279|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405438.279|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405438.279|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405438.279|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405438.279|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405438.279|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405438.279|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405438.279|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405438.279|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405438.279|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405438.279|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405438.279|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405438.352|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405438.352|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405438.352|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))
405438.352|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:48:46.000Z] WTEnd[2018-05-
31T15:03:51.675Z]

405438.352|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405438.352|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T15:00:04Z]

405438.352|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405438.352|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405438.353|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137205,0)IndicationLevel:
(200)

405438.353|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405438.353|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405438.353|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405438.353|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405438.353|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1327496712)

405438.353|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137205,1)IndicationCode:(200)Got WT

405438.353|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405438.353|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137205,1)IndicationCode:(100)SM Started

405438.791|nisvc|2|00|

****************************HTTP SEND**************************
405438.791|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405438.791|nisvc|2|00|ErrorBuffer::

405438.791|nisvc|2|00|

****************************HTTP SEND**************************

405438.798|nisvc|2|00|<\ni02:1,time taken(44)>

405438.798|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405438.799|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405438.799|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405438.799|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405438.799|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405438.799|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405438.799|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405438.799|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405438.799|auth |4|00|Retry Cnt [3] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert
https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405438.799|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405438.799|auth |3|00|auth's Timer,Running(1),Start(10000)

405438.799|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405438.799|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405448.798|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137216,0)IndicationLevel:(200)

405448.798|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe07cbe,0xb5723de8,10000,4)

405448.798|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405448.799|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405448.799|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405448.799|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405448.799|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405448.799|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405448.799|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405448.799|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(7)kBaseEventStop,Ticks(0))
405448.799|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),(-
1),Ticks(0))

405448.799|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405448.801|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405448.801|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405448.801|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405448.802|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405448.802|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405448.802|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405448.802|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405448.802|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405448.802|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405448.802|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405448.802|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137216,1)IndicationCode:(509)Retry Request
Again

405448.802|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405448.802|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)
,TransactionID(1327496712)

405448.802|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405448.802|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405448.802|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405448.802|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137216,1)IndicationCode:(0)

405448.803|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405448.803|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405448.813|auth |2|00|SM Module: SM created Ref(14716913)

405448.813|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405448.813|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405448.813|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405448.813|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405448.813|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405448.813|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405448.813|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137216,0)IndicationLevel:
(200)

405448.813|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)
405448.813|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405448.813|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405448.813|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405448.813|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405448.813|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137216,1)IndicationCode:(0)

405448.813|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405448.813|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137216,1)IndicationCode:(100)SM Started

405448.813|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405448.813|auth |3|00|auth's Timer,Running(0),Start(1894060)

405449.539|nisvc|2|00|

****************************HTTP SEND**************************

405449.539|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405449.539|nisvc|2|00|ErrorBuffer::

405449.539|nisvc|2|00|

****************************HTTP SEND**************************

405449.545|nisvc|2|00|<\ni03:1,time taken(73)>
405449.545|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405449.550|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405449.550|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405449.550|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405449.550|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405449.550|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405449.550|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405449.550|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137216,0)IndicationLevel:
(200)

405449.550|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405449.550|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405450.252|nisvc|2|00|

****************************HTTP SEND**************************

405450.252|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405450.252|nisvc|2|00|ErrorBuffer::

405450.252|nisvc|2|00|

****************************HTTP SEND**************************

405450.259|nisvc|2|00|<\ni00:1,time taken(71)>

405450.259|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))
405450.262|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]
messageLen[13120]

405450.262|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405450.262|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405450.262|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405450.262|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405450.262|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405450.262|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405450.262|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405450.262|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405450.263|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405450.263|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405450.264|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405450.264|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405450.264|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405450.264|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405450.264|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)


405450.264|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(1327496712)

405450.264|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137217,1)IndicationCode:(200)Got User Type

405450.264|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405450.264|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405450.275|auth |2|00|SM Module: SM created Ref(14717059)

405450.275|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405450.275|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405450.275|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405450.275|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405450.275|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405450.275|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405450.275|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405450.275|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405450.275|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405450.275|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))
405450.275|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405450.275|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405450.275|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405450.275|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405450.275|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137217,0)IndicationLevel:
(200)

405450.275|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405450.275|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405450.275|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405450.275|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405450.275|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405450.275|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137217,1)IndicationCode:(0)

405450.275|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405450.275|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137217,1)IndicationCode:(100)SM Started

405451.151|nisvc|2|00|

****************************HTTP SEND**************************
405451.151|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),
HttpResCode(200), curlRetCode(0) retVal(0)

405451.151|nisvc|2|00|ErrorBuffer::

405451.151|nisvc|2|00|

****************************HTTP SEND**************************

405451.159|nisvc|2|00|<\ni01:1,time taken(89)>

405451.159|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405451.160|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778439","not_before":"1527774539","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405451.160|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405451.160|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405451.160|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405451.160|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405451.160|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405451.160|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405451.160|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405451.160|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405451.160|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405451.160|auth |3|00|auth's Timer,Running(1),Start(1891710)


405451.160|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405451.160|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405451.160|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405451.160|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405451.160|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405451.162|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405451.162|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405451.162|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405451.172|auth |2|00|SM Module: SM created Ref(14717149)

405451.172|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405451.172|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405451.172|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405451.172|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405451.173|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405451.173|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405451.173|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137218,0)IndicationLevel:
(200)

405451.173|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405451.173|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(5),Ticks(0))

405451.173|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405451.173|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405451.173|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405451.173|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137218,1)IndicationCode:(200)Got OAUTH2 Token

405451.173|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405451.173|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137218,1)IndicationCode:(100)SM Started

405451.938|nisvc|2|00|

****************************HTTP SEND**************************

405451.938|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405451.938|nisvc|2|00|ErrorBuffer::

405451.938|nisvc|2|00|

****************************HTTP SEND**************************
405451.944|nisvc|2|00|<\ni02:1,time taken(77)>

405451.944|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405451.946|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405451.946|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405451.946|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405451.946|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405451.946|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405451.946|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405451.946|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405451.946|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405451.946|auth |3|00|auth's Timer,Running(1),Start(1890930)

405451.946|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405451.946|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(5),Ticks(0))

405451.946|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405451.947|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405451.947|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405451.948|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405451.948|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey
Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405451.948|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405451.948|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405451.948|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405451.948|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405451.948|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405451.948|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405451.948|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405451.948|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405451.949|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405451.949|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405451.949|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405451.949|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405451.949|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405451.949|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405451.949|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405452.021|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405452.021|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))
405452.021|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405452.022|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:48:59.000Z] WTEnd[2018-05-


31T15:07:58.438Z]

405452.022|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405452.022|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T15:00:18Z]

405452.022|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405452.022|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405452.022|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137219,0)IndicationLevel:
(200)

405452.022|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405452.022|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405452.022|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405452.022|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405452.022|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1327496712)

405452.022|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137219,1)IndicationCode:(200)Got WT

405452.022|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405452.022|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137219,1)IndicationCode:(100)SM Started

405452.520|nisvc|2|00|

****************************HTTP SEND**************************
405452.520|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405452.520|nisvc|2|00|ErrorBuffer::

405452.520|nisvc|2|00|

****************************HTTP SEND**************************

405452.526|nisvc|2|00|<\ni03:1,time taken(50)>

405452.526|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405452.527|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405452.527|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405452.527|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405452.527|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405452.527|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405452.527|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405452.527|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405452.527|auth |4|00|Retry Cnt [4] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert
https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405452.527|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405452.527|auth |3|00|auth's Timer,Running(1),Start(10000)

405452.527|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405452.527|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405502.518|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137229,0)IndicationLevel:(200)

405502.518|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe07cbe,0xb5723de8,10000,4)

405502.518|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405502.518|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405502.518|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405502.518|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405502.519|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405502.519|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405502.519|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)
405502.519|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405502.519|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb138fad0):Ctx((349),(-
1),Ticks(0))

405502.519|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405502.521|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405502.521|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405502.521|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405502.521|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405502.521|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405502.521|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405502.522|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405502.522|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405502.522|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405502.522|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405502.522|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137229,1)IndicationCode:(509)Retry Request
Again

405502.522|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)
405502.522|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:
(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405502.522|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405502.522|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405502.522|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405502.522|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137229,1)IndicationCode:(0)

405502.522|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405502.522|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405502.533|auth |2|00|SM Module: SM created Ref(14718285)

405502.533|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405502.533|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405502.533|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405502.533|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405502.533|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405502.533|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405502.533|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137229,0)IndicationLevel:
(200)

405502.533|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405502.533|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405502.533|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405502.533|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405502.533|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405502.533|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137229,1)IndicationCode:(0)

405502.533|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405502.533|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137229,1)IndicationCode:(100)SM Started

405502.533|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405502.533|auth |3|00|auth's Timer,Running(0),Start(1880350)

405502.995|nisvc|2|00|

****************************HTTP SEND**************************

405502.995|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405502.995|nisvc|2|00|ErrorBuffer::

405502.995|nisvc|2|00|

****************************HTTP SEND**************************
405503.001|nisvc|2|00|<\ni00:1,time taken(47)>

405503.001|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405503.005|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405503.005|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405503.005|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405503.005|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405503.005|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405503.005|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405503.005|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137230,0)IndicationLevel:
(200)

405503.006|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405503.006|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405503.446|nisvc|2|00|

****************************HTTP SEND**************************

405503.447|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405503.447|nisvc|2|00|ErrorBuffer::

405503.447|nisvc|2|00|

****************************HTTP SEND**************************

405503.454|nisvc|2|00|<\ni01:1,time taken(45)>
405503.454|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405503.458|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405503.458|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405503.458|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405503.458|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405503.458|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405503.458|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405503.458|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405503.458|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405503.458|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405503.458|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405503.458|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405503.460|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405503.460|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(1327496712)

405503.460|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)
405503.460|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when
User Mode = 0

405503.460|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405503.460|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(1327496712)

405503.460|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137230,1)IndicationCode:(200)Got User Type

405503.460|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405503.460|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405503.470|auth |2|00|SM Module: SM created Ref(14718379)

405503.470|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405503.470|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405503.470|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405503.470|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405503.470|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405503.470|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405503.470|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405503.470|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405503.470|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)
405503.471|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405503.471|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405503.471|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405503.471|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405503.471|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405503.471|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137230,0)IndicationLevel:
(200)

405503.471|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405503.471|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405503.471|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405503.471|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405503.471|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(1327496712)

405503.471|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137230,1)IndicationCode:(0)

405503.471|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405503.471|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137230,1)IndicationCode:(100)SM Started

405504.095|nisvc|2|00|

****************************HTTP SEND**************************
405504.095|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),
HttpResCode(200), curlRetCode(0) retVal(0)

405504.095|nisvc|2|00|ErrorBuffer::

405504.095|nisvc|2|00|

****************************HTTP SEND**************************

405504.102|nisvc|2|00|<\ni02:1,time taken(63)>

405504.102|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405504.103|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778452","not_before":"1527774552","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405504.103|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405504.103|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405504.103|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405504.103|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405504.103|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405504.103|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405504.103|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405504.103|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405504.103|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)


405504.103|auth |3|00|auth's Timer,Running(1),Start(1878780)

405504.103|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405504.103|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405504.103|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405504.103|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405504.103|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405504.104|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405504.105|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405504.105|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(1327496712)

405504.115|auth |2|00|SM Module: SM created Ref(14718443)

405504.115|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405504.115|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405504.115|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405504.115|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405504.115|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]
405504.115|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405504.115|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137231,0)IndicationLevel:
(200)

405504.115|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405504.115|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((337),
(5),Ticks(0))

405504.115|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405504.115|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405504.116|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(1327496712)

405504.116|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137231,1)IndicationCode:(200)Got OAUTH2 Token

405504.116|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405504.116|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137231,1)IndicationCode:(100)SM Started

405504.655|nisvc|2|00|

****************************HTTP SEND**************************

405504.655|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405504.655|nisvc|2|00|ErrorBuffer::

405504.655|nisvc|2|00|

****************************HTTP SEND**************************
405504.662|nisvc|2|00|<\ni03:1,time taken(55)>

405504.662|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405504.663|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405504.663|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405504.663|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405504.663|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405504.663|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405504.663|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405504.663|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405504.663|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405504.664|auth |3|00|auth's Timer,Running(1),Start(1878220)

405504.664|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405504.664|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((349),
(5),Ticks(0))

405504.664|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405504.664|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405504.664|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405504.665|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)
405504.665|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:
(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(1327496712)

405504.665|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(1327496712)

405504.665|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(5),Ticks(0))

405504.665|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405504.665|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405504.666|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405504.666|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405504.666|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405504.666|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405504.666|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405504.666|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405504.666|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405504.666|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405504.666|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405504.666|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405504.666|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405504.739|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)
405504.739|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405504.739|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405504.739|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:49:12.000Z] WTEnd[2018-05-


31T15:05:41.127Z]

405504.739|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405504.739|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T15:00:31Z]

405504.739|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405504.739|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405504.739|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137232,0)IndicationLevel:
(200)

405504.739|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405504.739|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),(5),Ticks(0))

405504.739|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405504.739|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405504.739|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(1327496712)

405504.739|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137232,1)IndicationCode:(200)Got WT

405504.739|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(1327496712)

405504.739|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137232,1)IndicationCode:(100)SM Started

405505.353|nisvc|2|00|
****************************HTTP SEND**************************

405505.353|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405505.353|nisvc|2|00|ErrorBuffer::

405505.353|nisvc|2|00|

****************************HTTP SEND**************************

405505.360|nisvc|2|00|<\ni00:1,time taken(62)>

405505.360|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405505.360|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405505.360|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405505.360|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405505.360|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405505.360|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405505.360|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405505.360|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405505.360|auth |4|00|Retry Cnt [5] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405505.360|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(4)

405505.360|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(4),Ticks(0))

405505.360|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(4),Ticks(0))

405505.360|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(-1),Ticks(0))

405505.360|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(1327496712)

405505.361|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405505.361|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405505.361|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(1327496712)

405505.361|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),
(7)kBaseEventStop,Ticks(0))

405505.361|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb1d7bd90):Ctx((355),(-1),Ticks(0))

405505.361|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405505.364|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405505.364|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137f8b8):Ctx((349),(-
1),Ticks(0))
405505.364|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405505.364|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405505.364|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405505.364|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405505.364|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405505.364|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405505.364|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405505.364|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(1327496712)

405505.365|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)pps,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137232,1)IndicationCode:(400)Failed to Get UC

405505.365|sip |1|00|SipGotNewUserCert: pstNewUserCert[0xb511cad4]

405505.365|sip |3|00|TLS-DSK:soWebTicketCbFunc: the event type is 1

405505.365|sip |4|00|TLS-DSK:soWebTicketCbFunc: SoWebTicketCb_ResponseError event triggered


from the soWebTicket

405505.365|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(400)Failed to Get UC

,TransactionID(1327496712)

405505.365|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,1327496712,1526137232,1)IndicationCode:(400)Failed to Get UC

405543.796|so |4|00|SNTP: sync failed with all servers, trying again[0]

405557.809|dect |4|00|Dect Feature disabled! Will not pair

405557.809|dect |4|00|Dect Feature disabled! Will not pair

405622.209|btoe |4|00|PC Port is Down, Stop Pairing

405622.209|dect |4|00|PC port is not up, so not starting pc port pairing

405622.209|btoe |4|00|PC Port is Down, Stop Pairing


405622.209|dect |4|00|PC port is not up, so not starting pc port pairing

405622.210|btoe |4|00|stopCall ppsBtoe.hSoCall handle is NULL

405622.210|btoe |4|00|PC Port is Down. Inform to APP UI

405622.211|btoe |5|00|4 Request Not Handled

405625.409|dect |4|00|Dect Feature disabled! Will not pair

405625.409|dect |4|00|Dect Feature disabled! Will not pair

405627.199|sip |3|00|NoCall::TimeOut500ms 'Registering' m_nExpire == 0 RegisterCall -> Schedule


Register listSize 0 lTimeout 0

405627.199|sip |1|00|Schedule 'Register' nEvent 0 busyFlag 0 num events waiting 0

405627.199|sip |2|00|new UA Client Non-INVITE trans state 'callingTrying', timeout=0 (0xb62665a8)

405627.199|sip |3|00|RegClient:RegClient expire 66 overlap 0

405627.199|sip |2|00|SendCommand: reqDest 'couleecap.org' isLync 0 isGRUU 0 isIP 0


useEffectiveProxy 1

405627.199|sip |1|00|SendCommand: isLync 0 isGRUU 0 isIP 0 useEffectiveProxy 1

405627.199|sip |1|00|CreateFailOverProxyList : Reg to Domain 'couleecap.org' nPort 0, lkup 6

405627.199|sip |1|00|CreateFailOverProxyList : Domain is in user part

405627.199|sip |1|00|CreateFailOverProxyList : For REGISTER Request nPort 0

405627.199|sip |2|00|CreateFailOverProxyList resetting pps watchdog for 200000mSec in auto


discovery

405627.199|sip |1|00|CreateFailOverProxyList WAD:


ClientInternal[sippoolBLU0B05.infra.lync.com:443], ClientExternal[sipfed0B.online.lync.com:443]

405627.264|sip |1|00|doDnsListLookup(tls): doDnsSrvLookupForARecordList for


'sipfed0B.online.lync.com' port 443 returned 1 results

405627.264|sip |1|00|doDnsListLookup(tls): result 0 '52.112.64.203' port 443 isInBound 0

405627.264|sip |3|00|CreateFailOverProxyList WAD : Redirect list 'Auto Discovery'


'sipfed0B.online.lync.com' IP 1 is '52.112.64.203' on tls port 443

405627.264|sip |2|00|CreateFailOverProxyList : Exit 'Auto Discovery' lookup with 1 IP Addresses

405627.264|sip |2|00|CreateFailOverProxyList : IP 1 is '52.112.64.203' on tls port 443

405627.264|sip |1|00|CTrans:: SendCommand | this=0xb62665a8, bVQMonMessage=0, m_pCall-


>m_pUser->m_bOBFailOverReRegOn=0, m_pCall->m_pUser->m_bVQMonFailoverEnabled=1

405627.264|sip |1|00|CTcp::Send(TLS) entry for address 52.112.64.203 port 443 can Connect 1
canFailOver 0
405627.264|sip |1|00|CTcp::Send(TLS) address 52.112.64.203 port 443 can Connect 1

405627.264|sip |2|00|CTcpSocket::CTcpSocket entry m_bIsTcpPersistentConnection 0, Inbound 0


Timeout 120 this 0xb629dbe8

405627.264|sip |3|00|Open socket 217(0xb629dbe8)

405627.264|sip |1|00|SetRemoteAddress set SND BUF to 64000 OK

405627.264|sip |1|00|SetRemoteAddress set SEND TIMEOUT to 100ms OK

405627.264|sip |3|00|SetRemoteAddress OK on try 1 nPort 58548 0xb629dbe8

405627.265|sip |3|00|CTcpSocket::ConnectThreadLocal. Trying to connect IP 52.112.64.203:443

405627.265|sip |1|00|Task name tTCPCnt217

405627.265|sip |1|00|CTcp::Send(TLS) exit for address 52.112.64.203 port 443 can Connect 1 status 1
canFailOver 0 FoundSocket 0

405627.326|sip |3|00|connectNonBlock is successful

405627.327|sip |1|00|MsgSipTcpSocketStatus socket 217 status 1 m_bIsReconnectNeeded 0

405627.327|sip |2|00|CTcpSocket::OnSocketStatus socket 217(0xb629dbe8) bStatus 1

405627.327|sip |1|00|[CTcpSocket::MakeTlsConnection] TLS Protocol = 1

405627.530|sip |2|00|MakeTlsConnection: SSL_connect OK : TLS Handshake completed successfully

405627.530|sip |1|00|[TLS] hostname we are connected to is: 'sipfed0B.online.lync.com' IP


'52.112.64.203' port 443

405627.530|sip |3|00|[TLS] Validating Subject Alternative Name(s) (SAN) and Common Name (CN)
against the following:

405627.530|sip |3|00|[TLS] Hostname: couleecap.org

405627.530|sip |3|00|[TLS] Outbound Proxy: couleecap.org

405627.530|sip |3|00|[TLS] Hostname connection: sipfed0B.online.lync.com

405627.530|sip |1|00|[TLS] Comparing certificate SAN type DNS: 'sipfed.online.lync.com'

405627.530|sip |1|00|[TLS] Comparing certificate SAN type DNS: '*.online.lync.com'

405627.530|sip |3|00|[TLS] Allowing Server certificate with Specifc SN/SAN

405627.530|sip |3|00|[TLS] Validating certificate SAN of type DNS with '*.online.lync.com'

405627.530|sip |3|00|[TLS] Server Certificate SAN or CN validation success. SSL verify result 0

405627.530|sip |1|00|MakeTlsConnection: post_connection_checks passed

405627.530|sip |1|00|CTcpSocket::SendData TLS queuedTxData = 0 TotalLen 16 loop count 1


maxQueueDepth 40000
405627.531|sip |1|00|CTcpSocket::SendData TLS Sent 16 loop count 1

405627.531|sip |3|00|MakeTlsConnection: connection succeeded

405627.532|sip |1|00|CTcpSocket::SendData TLS queuedTxData = 101 TotalLen 989 loop count 1


maxQueueDepth 40000

405627.532|sip |1|00|CTcpSocket::SendData TLS Sent 989 loop count 1

405627.700|sip |1|00|MsgSipTcpPacket

405627.700|sip |3|00|CTcpSocket::OnRecvData

405627.701|sip |1|00|SipOnCommand: response 401,REGISTER

405627.701|sip |1|00|SipOnCommand: response 401,REGISTER matches user 1 of 1 'natalie.carlisle'

405627.701|sip |3|00|UA Client Non-INVITE REGISTER trans state 'callingTrying'->'completed' by 401


resp 10 timeout(0xb62665a8)

405627.701|sip |2|00|[CTrans::ResponseProcess] REGISTER NonInv reTrans ALREADY stopped in


'completed' state at retryCount 0 code 401, timeout=10 (0xb62665a8)

405627.701|sip |3|00|401 challenge received

405627.701|sip |2|00|SipCallState is not Idle, So send Re-INVITE

405627.701|sip |2|00|new UA Client Non-INVITE trans state 'callingTrying', timeout=0 (0xb1417578)

405627.702|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405627.702|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405627.702|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405627.702|sip |2|00|CStkAuth::ParseAuthenticateHeader: TLS-DSK parsing enabled

405627.702|sip |1|00|TLS-DSK authentication

405627.732|sip |1|00|TLS-DSK: Setting of Client Certificate failed due to (33558530)


error:02001002:system library:fopen:No such file or directory

405627.732|sip |1|00|TLS-DSK: Setting of Client Private key failed due to (537346050)


error:20074002:BIO routines:FILE_CTRL:system lib

405627.732|utilm|4|00|uBLFUnCompressed: File /ffs0/Config/Local/WebTicket/0/private.key doesn't


exist or is empty

405627.732|sip |3|00|getUserCertInfo: sip.usr[natalie.carlisle@couleecap.org] result[-1] validUntil[0]

405627.732|sip |2|00|[ParseMessageHeader]:[540],SIPURI=[natalie.carlisle@couleecap.org]

405627.732|sip |2|00|[ParseMessageHeader]:[555] Calling UC Fetch through Service FrameWork


405627.732|sip |3|00|TLS-DSK

405627.732|sip |1|00|CStkAuth::ParseAuthenticateHeader bTlsDskParseResult[0] bNtlmParseResult[0]


m_credType[2] m_bIsOnlyTlsDsk[1]

405627.732|sip |*|00|Sending User Cert fetch Request: OnlyTlsDsk[1]

405627.736|sip |1|00|Dialog 'id0340ddcb' State 'Trying'->'Terminated'

405627.736|sip |2|00|CStkDialog::CStkDialog SetAddressLocal Config 'Natalie Carlisle'


<natalie.carlisle@couleecap.org:0>

405627.736|sip |2|00|CStkDialog::CStkDialog AddressLocal set to Config

405627.736|sip |3|00|CStkDialog::SetAddressLocal localTag set to ''

405627.736|sip |3|00|CStkDialog::SetAddressLocal new address added of 1

405627.736|sip |2|00|CStkDialog::CStkDialog TAG '133E18F5-83DDC864' generated

405627.736|sip |2|00|CStkDialog::CStkDialog local addr 'Natalie Carlisle'


<natalie.carlisle@couleecap.org:0> Tag '133E18F5-83DDC864'

405627.736|sip |2|00|CStkDialog::CStkDialog exit 0x30cdc94 local list size 1

405627.736|sip |2|00|CStkDialogList::CreateDialogObject localTarg usr 'natalie.carlisle'

405627.736|sip |2|00|[svcUserCert]:[8360]: SipUri[natalie.carlisle@couleecap.org]


User[natalie.carlisle@couleecap.org],Dom[],STS[https://webdir0B.online.lync.com:443/CertProv/CertPro
visioningService.svc] Expiry[-1]

405627.736|auth |2|00|Request(-1)auth,(102)AuthServiceUCMsgKey,(-1)pps,(14),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137315,0)IndicationLevel:(200)

405627.737|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(205)AuthSvcAOServiceRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(-1)

405627.737|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(-1)

405627.737|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405627.737|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)


405627.737|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405627.737|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405627.737|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405627.737|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405627.737|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)

405627.737|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137315,1)IndicationCode:(0)

405627.737|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405627.738|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405627.738|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405627.738|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405627.738|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)
405627.738|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137315,1)IndicationCode:(0)

405627.738|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405627.738|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405627.748|auth |2|00|SM Module: SM created Ref(14726807)

405627.749|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405627.749|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405627.749|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405627.749|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405627.749|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405627.749|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405627.749|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137315,0)IndicationLevel:
(200)

405627.749|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405627.749|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405627.749|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405627.749|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405627.749|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)
405627.749|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137315,1)IndicationCode:(0)

405627.749|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405627.749|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137315,1)IndicationCode:(100)SM Started

405628.625|nisvc|2|00|

****************************HTTP SEND**************************

405628.625|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405628.625|nisvc|2|00|ErrorBuffer::

405628.625|nisvc|2|00|

****************************HTTP SEND**************************

405628.631|nisvc|2|00|<\ni01:1,time taken(88)>

405628.631|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405628.635|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405628.636|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405628.636|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405628.636|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405628.636|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]
405628.636|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405628.636|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137315,0)IndicationLevel:
(200)

405628.636|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405628.636|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405629.103|nisvc|2|00|

****************************HTTP SEND**************************

405629.103|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405629.103|nisvc|2|00|ErrorBuffer::

405629.103|nisvc|2|00|

****************************HTTP SEND**************************

405629.110|nisvc|2|00|<\ni02:1,time taken(48)>

405629.110|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405629.114|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405629.114|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405629.114|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405629.114|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405629.114|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405629.114|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405629.114|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405629.114|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))
405629.114|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:
(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405629.114|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405629.114|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405629.115|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405629.115|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405629.115|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405629.115|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405629.115|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405629.115|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(499000074)

405629.115|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137316,1)IndicationCode:(200)Got User Type

405629.115|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)
405629.115|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:
(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405629.126|auth |2|00|SM Module: SM created Ref(14726944)

405629.126|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405629.126|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405629.126|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405629.126|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405629.126|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405629.126|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405629.126|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405629.126|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405629.126|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405629.126|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405629.126|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405629.126|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405629.126|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405629.126|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405629.126|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137316,0)IndicationLevel:
(200)

405629.126|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)
405629.126|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405629.126|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405629.126|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405629.126|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)

405629.126|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137316,1)IndicationCode:(0)

405629.126|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405629.126|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137316,1)IndicationCode:(100)SM Started

405629.661|nisvc|2|00|

****************************HTTP SEND**************************

405629.661|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405629.661|nisvc|2|00|ErrorBuffer::

405629.661|nisvc|2|00|

****************************HTTP SEND**************************

405629.668|nisvc|2|00|<\ni03:1,time taken(54)>

405629.668|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405629.669|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778538","not_before":"1527774638","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405629.669|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405629.669|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405629.669|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405629.669|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405629.669|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405629.669|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405629.669|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405629.669|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405629.669|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405629.669|auth |3|00|auth's Timer,Running(1),Start(1793210)

405629.669|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405629.669|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405629.669|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405629.669|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405629.669|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405629.670|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token


,TransactionID(499000074)

405629.670|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405629.671|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405629.681|auth |2|00|SM Module: SM created Ref(14727000)

405629.681|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405629.681|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405629.681|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405629.681|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405629.681|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405629.681|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405629.681|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137317,0)IndicationLevel:
(200)

405629.681|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405629.681|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((337),
(5),Ticks(0))

405629.681|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405629.681|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405629.681|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)
405629.681|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137317,1)IndicationCode:(200)Got OAUTH2 Token

405629.682|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405629.682|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137317,1)IndicationCode:(100)SM Started

405630.477|nisvc|2|00|

****************************HTTP SEND**************************

405630.477|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405630.477|nisvc|2|00|ErrorBuffer::

405630.477|nisvc|2|00|

****************************HTTP SEND**************************

405630.484|nisvc|2|00|<\ni00:1,time taken(80)>

405630.484|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405630.485|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5398]

405630.485|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405630.485|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405630.485|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405630.485|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)
405630.485|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405630.485|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405630.485|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405630.485|auth |3|00|auth's Timer,Running(1),Start(1792400)

405630.485|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405630.485|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((349),
(5),Ticks(0))

405630.485|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405630.485|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405630.486|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405630.487|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405630.487|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405630.487|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405630.497|auth |2|00|SM Module: SM created Ref(14727081)

405630.497|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405630.497|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)
405630.497|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405630.497|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405630.498|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405630.498|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405630.498|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405630.498|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405630.498|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405630.498|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405630.569|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405630.569|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405630.569|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405630.570|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:50:38.000Z] WTEnd[2018-05-


31T14:56:20.881Z]

405630.570|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405630.570|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T15:01:56Z]

405630.570|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405630.570|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405630.570|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137317,0)IndicationLevel:
(200)

405630.570|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405630.570|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),(5),Ticks(0))

405630.570|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405630.570|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405630.570|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(499000074)

405630.570|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137317,1)IndicationCode:(200)Got WT

405630.570|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405630.570|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137317,1)IndicationCode:(100)SM Started

405631.046|nisvc|2|00|

****************************HTTP SEND**************************

405631.046|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405631.046|nisvc|2|00|ErrorBuffer::

405631.046|nisvc|2|00|

****************************HTTP SEND**************************

405631.052|nisvc|2|00|<\ni01:1,time taken(48)>

405631.052|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405631.052|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det
405631.052|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is
outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405631.052|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405631.052|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405631.052|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405631.052|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405631.052|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405631.052|auth |4|00|Retry Cnt [0] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405631.052|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405631.052|auth |3|00|auth's Timer,Running(1),Start(10000)

405631.052|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405631.052|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405641.048|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137328,0)IndicationLevel:(200)

405641.048|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe0b7a9,0xb5723de8,10000,4)
405641.048|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405641.048|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405641.048|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405641.048|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405641.048|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405641.048|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405641.049|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405641.049|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405641.049|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((349),(-
1),Ticks(0))

405641.049|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405641.051|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405641.051|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405641.051|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405641.051|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405641.051|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405641.052|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405641.052|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)
405641.052|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when
User Mode = 0

405641.052|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405641.052|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405641.052|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137328,1)IndicationCode:(509)Retry Request Again

405641.052|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405641.052|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405641.052|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405641.052|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405641.052|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)

405641.052|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137328,1)IndicationCode:(0)

405641.052|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405641.052|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey
Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405641.063|auth |2|00|SM Module: SM created Ref(14728138)

405641.063|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405641.063|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405641.063|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405641.063|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405641.063|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405641.063|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405641.063|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137328,0)IndicationLevel:
(200)

405641.063|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405641.063|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405641.063|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405641.063|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405641.063|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)

405641.063|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137328,1)IndicationCode:(0)

405641.063|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405641.063|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137328,1)IndicationCode:(100)SM Started
405641.063|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405641.063|auth |3|00|auth's Timer,Running(0),Start(1781830)

405641.504|nisvc|2|00|

****************************HTTP SEND**************************

405641.504|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405641.504|nisvc|2|00|ErrorBuffer::

405641.504|nisvc|2|00|

****************************HTTP SEND**************************

405641.511|nisvc|2|00|<\ni02:1,time taken(45)>

405641.511|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405641.515|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405641.515|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405641.515|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405641.515|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405641.515|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405641.515|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405641.515|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137328,0)IndicationLevel:
(200)

405641.516|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405641.516|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))
405642.046|nisvc|2|00|

****************************HTTP SEND**************************

405642.046|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405642.046|nisvc|2|00|ErrorBuffer::

405642.046|nisvc|2|00|

****************************HTTP SEND**************************

405642.052|nisvc|2|00|<\ni03:1,time taken(54)>

405642.052|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405642.056|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405642.056|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405642.056|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405642.056|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405642.056|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405642.056|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405642.056|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405642.056|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405642.057|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405642.057|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)


405642.057|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405642.058|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405642.058|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405642.058|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405642.058|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405642.058|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405642.058|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(499000074)

405642.058|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137329,1)IndicationCode:(200)Got User Type

405642.059|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405642.059|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405642.069|auth |2|00|SM Module: SM created Ref(14728239)


405642.069|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405642.069|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405642.069|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((501),
(5),Ticks(0))

405642.069|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405642.069|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405642.069|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405642.069|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405642.069|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405642.069|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405642.069|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405642.069|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405642.069|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405642.069|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405642.069|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405642.069|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137329,0)IndicationLevel:
(200)

405642.069|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405642.069|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((512),
(5),Ticks(0))

405642.069|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405642.069|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405642.069|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)

405642.069|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137329,1)IndicationCode:(0)

405642.069|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405642.069|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137329,1)IndicationCode:(100)SM Started

405642.730|nisvc|2|00|

****************************HTTP SEND**************************

405642.730|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405642.730|nisvc|2|00|ErrorBuffer::

405642.730|nisvc|2|00|

****************************HTTP SEND**************************

405642.736|nisvc|2|00|<\ni00:1,time taken(66)>

405642.737|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405642.737|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778551","not_before":"1527774651","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs
405642.737|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,
EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405642.737|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405642.737|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405642.737|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405642.737|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405642.737|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405642.737|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405642.738|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405642.738|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405642.738|auth |3|00|auth's Timer,Running(1),Start(1780160)

405642.738|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405642.738|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(5),Ticks(0))

405642.738|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405642.738|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405642.738|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405642.739|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405642.739|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token


,TransactionID(499000074)

405642.739|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405642.750|auth |2|00|SM Module: SM created Ref(14728307)

405642.750|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405642.750|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405642.750|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405642.750|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405642.750|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405642.750|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405642.750|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137330,0)IndicationLevel:
(200)

405642.750|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405642.750|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((337),
(5),Ticks(0))

405642.750|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405642.750|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405642.750|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405642.750|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137330,1)IndicationCode:(200)Got OAUTH2 Token

405642.751|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started


,TransactionID(499000074)

405642.751|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137330,1)IndicationCode:(100)SM Started

405643.595|nisvc|2|00|

****************************HTTP SEND**************************

405643.595|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405643.595|nisvc|2|00|ErrorBuffer::

405643.595|nisvc|2|00|

****************************HTTP SEND**************************

405643.601|nisvc|2|00|<\ni01:1,time taken(85)>

405643.601|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405643.602|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405643.602|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405643.602|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405643.602|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405643.602|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405643.602|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405643.602|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405643.602|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405643.602|auth |3|00|auth's Timer,Running(1),Start(1779290)


405643.602|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405643.602|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((349),
(5),Ticks(0))

405643.603|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405643.603|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405643.603|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405643.604|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405643.604|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405643.604|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405643.604|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405643.604|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405643.605|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405643.605|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405643.605|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405643.605|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)
405643.605|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405643.605|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405643.605|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405643.605|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405643.605|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405643.605|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405643.605|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405643.605|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405643.677|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405643.677|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405643.677|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405643.678|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:50:51.000Z] WTEnd[2018-05-


31T14:42:22.088Z]

405643.678|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405643.678|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T15:02:09Z]

405643.678|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405643.678|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405643.678|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137331,0)IndicationLevel:
(200)

405643.678|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405643.678|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),(5),Ticks(0))

405643.678|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405643.678|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405643.678|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(499000074)

405643.678|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137331,1)IndicationCode:(200)Got WT

405643.678|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405643.678|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137331,1)IndicationCode:(100)SM Started

405644.163|nisvc|2|00|

****************************HTTP SEND**************************

405644.163|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405644.163|nisvc|2|00|ErrorBuffer::

405644.163|nisvc|2|00|

****************************HTTP SEND**************************

405644.170|nisvc|2|00|<\ni02:1,time taken(49)>

405644.170|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405644.170|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det
405644.170|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is
outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405644.170|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405644.170|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405644.170|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405644.171|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405644.171|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405644.171|auth |4|00|Retry Cnt [1] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405644.171|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405644.171|auth |3|00|auth's Timer,Running(1),Start(10000)

405644.171|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405644.171|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405654.168|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137341,0)IndicationLevel:(200)

405654.168|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe0b7a9,0xb5723de8,10000,4)
405654.168|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405654.168|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405654.168|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405654.168|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405654.168|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405654.168|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405654.169|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405654.169|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405654.169|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131d098):Ctx((349),(-
1),Ticks(0))

405654.169|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405654.171|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405654.171|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),(-
1),Ticks(0))

405654.172|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405654.172|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405654.172|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405654.172|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405654.172|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)
405654.172|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when
User Mode = 0

405654.172|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405654.172|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405654.172|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137341,1)IndicationCode:(509)Retry Request Again

405654.172|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405654.172|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405654.172|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405654.172|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405654.173|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)

405654.173|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137341,1)IndicationCode:(0)

405654.173|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405654.173|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey
Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405654.183|auth |2|00|SM Module: SM created Ref(14729450)

405654.183|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405654.183|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405654.183|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405654.183|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405654.183|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405654.183|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405654.183|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137341,0)IndicationLevel:
(200)

405654.183|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405654.183|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405654.183|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405654.183|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405654.183|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)

405654.183|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137341,1)IndicationCode:(0)

405654.183|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405654.183|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137341,1)IndicationCode:(100)SM Started
405654.183|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405654.183|auth |3|00|auth's Timer,Running(0),Start(1768720)

405654.654|nisvc|2|00|

****************************HTTP SEND**************************

405654.654|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405654.654|nisvc|2|00|ErrorBuffer::

405654.654|nisvc|2|00|

****************************HTTP SEND**************************

405654.661|nisvc|2|00|<\ni03:1,time taken(48)>

405654.661|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405654.665|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405654.665|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405654.665|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405654.666|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405654.666|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405654.666|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405654.666|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137342,0)IndicationLevel:
(200)

405654.666|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405654.666|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))
405655.121|nisvc|2|00|

****************************HTTP SEND**************************

405655.121|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405655.121|nisvc|2|00|ErrorBuffer::

405655.121|nisvc|2|00|

****************************HTTP SEND**************************

405655.127|nisvc|2|00|<\ni00:1,time taken(46)>

405655.128|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405655.131|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405655.131|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405655.131|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405655.131|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405655.131|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405655.131|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405655.131|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405655.132|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405655.132|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405655.132|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)


405655.132|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405655.133|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405655.133|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405655.133|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405655.133|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405655.133|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405655.133|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(499000074)

405655.133|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137342,1)IndicationCode:(200)Got User Type

405655.133|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405655.134|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405655.144|auth |2|00|SM Module: SM created Ref(14729546)


405655.144|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405655.144|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405655.144|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((501),
(5),Ticks(0))

405655.144|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405655.144|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405655.144|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405655.144|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405655.144|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405655.144|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405655.144|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405655.144|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405655.144|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405655.144|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405655.144|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405655.144|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137342,0)IndicationLevel:
(200)

405655.144|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405655.144|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((512),
(5),Ticks(0))

405655.144|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405655.144|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405655.144|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)

405655.144|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137342,1)IndicationCode:(0)

405655.144|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405655.144|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137342,1)IndicationCode:(100)SM Started

405655.770|nisvc|2|00|

****************************HTTP SEND**************************

405655.770|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405655.771|nisvc|2|00|ErrorBuffer::

405655.771|nisvc|2|00|

****************************HTTP SEND**************************

405655.776|nisvc|2|00|<\ni01:1,time taken(63)>

405655.776|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405655.777|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778564","not_before":"1527774664","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs
405655.777|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,
EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405655.777|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405655.777|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405655.777|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405655.777|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405655.777|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405655.777|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405655.777|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405655.777|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405655.777|auth |3|00|auth's Timer,Running(1),Start(1767130)

405655.777|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405655.777|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(5),Ticks(0))

405655.777|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405655.778|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405655.778|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405655.779|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405655.779|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token


,TransactionID(499000074)

405655.779|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405655.789|auth |2|00|SM Module: SM created Ref(14729611)

405655.789|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405655.789|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405655.789|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405655.789|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405655.789|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405655.789|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405655.789|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137343,0)IndicationLevel:
(200)

405655.789|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405655.789|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((337),
(5),Ticks(0))

405655.790|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405655.790|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405655.790|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405655.790|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137343,1)IndicationCode:(200)Got OAUTH2 Token

405655.790|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started


,TransactionID(499000074)

405655.790|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137343,1)IndicationCode:(100)SM Started

405656.597|nisvc|2|00|

****************************HTTP SEND**************************

405656.597|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405656.597|nisvc|2|00|ErrorBuffer::

405656.597|nisvc|2|00|

****************************HTTP SEND**************************

405656.603|nisvc|2|00|<\ni02:1,time taken(81)>

405656.603|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405656.605|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405656.605|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405656.605|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405656.605|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405656.605|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405656.605|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405656.605|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405656.605|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405656.605|auth |3|00|auth's Timer,Running(1),Start(1766300)


405656.605|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405656.605|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((349),
(5),Ticks(0))

405656.605|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405656.605|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405656.606|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405656.607|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405656.607|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405656.607|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405656.607|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405656.607|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405656.607|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405656.607|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405656.607|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405656.607|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)
405656.607|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405656.607|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405656.607|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405656.607|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405656.607|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405656.607|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405656.607|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405656.607|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405656.681|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405656.681|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405656.681|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405656.681|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:51:04.000Z] WTEnd[2018-05-


31T15:01:58.898Z]

405656.681|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405656.681|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T15:02:22Z]

405656.681|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405656.681|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405656.681|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137344,0)IndicationLevel:
(200)

405656.681|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405656.681|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),(5),Ticks(0))

405656.681|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405656.681|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405656.681|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(499000074)

405656.681|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137344,1)IndicationCode:(200)Got WT

405656.682|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405656.682|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137344,1)IndicationCode:(100)SM Started

405657.157|nisvc|2|00|

****************************HTTP SEND**************************

405657.157|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405657.157|nisvc|2|00|ErrorBuffer::

405657.157|nisvc|2|00|

****************************HTTP SEND**************************

405657.164|nisvc|2|00|<\ni03:1,time taken(48)>

405657.164|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405657.165|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det
405657.165|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is
outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405657.165|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405657.165|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405657.165|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405657.165|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405657.165|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405657.165|auth |4|00|Retry Cnt [2] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405657.165|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405657.165|auth |3|00|auth's Timer,Running(1),Start(10000)

405657.165|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405657.165|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405659.434|sip |5|00|SSL_get_error nLen -1 errno 104 nError 5 =


(0)error:00000000:lib(0):func(0):reason(0)

405659.434|sip |4|00|TLS Listen Thread Exit

405659.434|sip |1|00|MsgSipTcpSocketStatus socket 217 status 0 m_bIsReconnectNeeded 0


405659.434|sip |2|00|CTcpSocket::OnSocketStatus socket 217(0xb629dbe8) bStatus 0

405659.434|sip |3|00|CTcpSocket::~CTcpSocket socket 217 entry for 0xb629dbe8

405659.434|sip |3|00|CTcpSocket::~CTcpSocket socket 217(0xb629dbe8) SSL_shutdown rc=-1, ltf(1)

405659.434|sip |3|00|CTcpSocket::~CTcpSocket socket 217(0xb629dbe8) close

405659.434|sip |3|00|CTcpSocket::~CTcpSocket Got lock

405707.158|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137354,0)IndicationLevel:(200)

405707.158|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe0b7a9,0xb5723de8,10000,4)

405707.158|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405707.158|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405707.158|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405707.158|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405707.158|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405707.159|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405707.159|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405707.159|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405707.159|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7bd90):Ctx((349),(-
1),Ticks(0))

405707.159|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405707.161|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405707.161|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7b910):Ctx((511),(-
1),Ticks(0))
405707.161|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405707.161|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405707.161|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405707.161|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405707.162|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405707.162|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405707.162|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405707.162|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405707.162|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137354,1)IndicationCode:(509)Retry Request Again

405707.162|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405707.162|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405707.162|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405707.162|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405707.162|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)
,TransactionID(499000074)

405707.162|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137354,1)IndicationCode:(0)

405707.162|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405707.162|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405707.172|auth |2|00|SM Module: SM created Ref(14730749)

405707.172|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405707.172|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405707.172|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405707.172|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405707.172|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405707.173|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405707.173|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137354,0)IndicationLevel:
(200)

405707.173|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405707.173|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405707.173|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405707.173|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405707.173|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)
,TransactionID(499000074)

405707.173|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137354,1)IndicationCode:(0)

405707.173|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405707.173|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137354,1)IndicationCode:(100)SM Started

405707.173|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405707.173|auth |3|00|auth's Timer,Running(0),Start(1755740)

405707.650|nisvc|2|00|

****************************HTTP SEND**************************

405707.650|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405707.650|nisvc|2|00|ErrorBuffer::

405707.650|nisvc|2|00|

****************************HTTP SEND**************************

405707.657|nisvc|2|00|<\ni00:1,time taken(48)>

405707.657|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405707.661|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405707.661|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405707.661|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))
405707.661|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405707.661|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405707.661|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405707.661|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137355,0)IndicationLevel:
(200)

405707.661|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405707.661|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405708.116|nisvc|2|00|

****************************HTTP SEND**************************

405708.116|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405708.116|nisvc|2|00|ErrorBuffer::

405708.116|nisvc|2|00|

****************************HTTP SEND**************************

405708.123|nisvc|2|00|<\ni01:1,time taken(46)>

405708.123|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405708.127|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405708.127|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405708.127|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405708.127|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))
405708.127|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405708.127|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405708.127|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405708.127|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405708.127|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405708.128|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405708.128|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405708.129|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405708.129|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405708.129|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405708.129|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405708.129|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405708.129|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(499000074)

405708.129|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137355,1)IndicationCode:(200)Got User Type
405708.129|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405708.129|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405708.140|auth |2|00|SM Module: SM created Ref(14730846)

405708.140|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405708.140|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405708.140|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((501),
(5),Ticks(0))

405708.140|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405708.140|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405708.140|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405708.140|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405708.140|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405708.140|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405708.140|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405708.140|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405708.140|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405708.140|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405708.140|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]
405708.140|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137355,0)IndicationLevel:
(200)

405708.140|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405708.140|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((512),
(5),Ticks(0))

405708.140|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405708.140|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405708.140|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)

405708.140|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137355,1)IndicationCode:(0)

405708.140|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405708.140|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137355,1)IndicationCode:(100)SM Started

405709.015|nisvc|2|00|

****************************HTTP SEND**************************

405709.015|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405709.015|nisvc|2|00|ErrorBuffer::

405709.015|nisvc|2|00|

****************************HTTP SEND**************************

405709.022|nisvc|2|00|<\ni02:1,time taken(88)>
405709.022|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405709.023|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]


curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3600","ext_ex
pires_in":"0","expires_on":"1527778577","not_before":"1527774677","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405709.023|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405709.023|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405709.023|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405709.023|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405709.023|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405709.023|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405709.023|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405709.023|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405709.023|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405709.023|auth |3|00|auth's Timer,Running(1),Start(1753890)

405709.023|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405709.023|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((511),
(5),Ticks(0))

405709.023|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405709.023|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405709.023|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405709.025|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:
(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405709.025|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405709.025|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405709.035|auth |2|00|SM Module: SM created Ref(14730935)

405709.035|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405709.035|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405709.035|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405709.035|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405709.035|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405709.035|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405709.035|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137356,0)IndicationLevel:
(200)

405709.036|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405709.036|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((337),
(5),Ticks(0))

405709.036|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405709.036|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405709.036|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey
Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405709.036|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137356,1)IndicationCode:(200)Got OAUTH2 Token

405709.036|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405709.036|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137356,1)IndicationCode:(100)SM Started

405709.559|nisvc|2|00|

****************************HTTP SEND**************************

405709.559|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405709.559|nisvc|2|00|ErrorBuffer::

405709.559|nisvc|2|00|

****************************HTTP SEND**************************

405709.566|nisvc|2|00|<\ni03:1,time taken(53)>

405709.566|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405709.567|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405709.567|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405709.567|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405709.567|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((347),
(1)kBaseEventInit,Ticks(0))
405709.567|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)

405709.567|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405709.567|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405709.568|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405709.568|auth |3|00|auth's Timer,Running(1),Start(1753350)

405709.568|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405709.568|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((349),
(5),Ticks(0))

405709.568|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405709.568|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405709.568|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405709.569|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405709.569|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405709.570|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405709.570|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405709.570|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(6)kBaseEventRestart,Ticks(0))
405709.570|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)

405709.570|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405709.570|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405709.570|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405709.570|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405709.570|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405709.570|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405709.570|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405709.570|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405709.570|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405709.570|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405709.570|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405709.643|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405709.643|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405709.643|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405709.643|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:51:17.000Z] WTEnd[2018-05-


31T14:48:02.993Z]

405709.643|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405709.643|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T15:02:35Z]

405709.643|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405709.643|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405709.643|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137356,0)IndicationLevel:
(200)

405709.643|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405709.643|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),(5),Ticks(0))

405709.643|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405709.643|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405709.643|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(499000074)

405709.643|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137356,1)IndicationCode:(200)Got WT

405709.643|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405709.643|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137356,1)IndicationCode:(100)SM Started

405710.097|nisvc|2|00|

****************************HTTP SEND**************************

405710.097|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405710.097|nisvc|2|00|ErrorBuffer::

405710.097|nisvc|2|00|

****************************HTTP SEND**************************

405710.103|nisvc|2|00|<\ni00:1,time taken(46)>
405710.103|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405710.103|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405710.103|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405710.103|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405710.103|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405710.103|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405710.103|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405710.103|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405710.104|auth |4|00|Retry Cnt [3] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405710.104|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)


405710.104|auth |3|00|auth's Timer,Running(1),Start(10000)

405710.104|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405710.104|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405720.098|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137367,0)IndicationLevel:(200)

405720.098|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe0b7a9,0xb5723de8,10000,4)

405720.098|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405720.098|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405720.098|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405720.098|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405720.098|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405720.098|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405720.099|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405720.099|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405720.099|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb1d7b910):Ctx((349),(-
1),Ticks(0))

405720.099|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405720.101|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405720.101|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1d7bd90):Ctx((511),(-
1),Ticks(0))

405720.101|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405720.101|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405720.101|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405720.101|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405720.102|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405720.102|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405720.102|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405720.102|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405720.102|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137367,1)IndicationCode:(509)Retry Request Again

405720.102|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405720.102|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405720.102|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405720.102|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405720.102|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)
405720.102|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137367,1)IndicationCode:(0)

405720.102|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405720.102|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405720.112|auth |2|00|SM Module: SM created Ref(14732043)

405720.112|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405720.112|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405720.113|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405720.113|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405720.113|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405720.113|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405720.113|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137367,0)IndicationLevel:
(200)

405720.113|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405720.113|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405720.113|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405720.113|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405720.113|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)
405720.113|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137367,1)IndicationCode:(0)

405720.113|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405720.113|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137367,1)IndicationCode:(100)SM Started

405720.113|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405720.113|auth |3|00|auth's Timer,Running(0),Start(1742810)

405720.590|nisvc|2|00|

****************************HTTP SEND**************************

405720.590|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405720.590|nisvc|2|00|ErrorBuffer::

405720.590|nisvc|2|00|

****************************HTTP SEND**************************

405720.598|nisvc|2|00|<\ni01:1,time taken(48)>

405720.598|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405720.602|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405720.602|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405720.602|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405720.602|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))
405720.602|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405720.602|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405720.602|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137367,0)IndicationLevel:
(200)

405720.602|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405720.602|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405721.048|nisvc|2|00|

****************************HTTP SEND**************************

405721.048|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405721.048|nisvc|2|00|ErrorBuffer::

405721.048|nisvc|2|00|

****************************HTTP SEND**************************

405721.050|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405721.054|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405721.054|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405721.054|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405721.054|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405721.054|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405721.054|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405721.054|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))
405721.054|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405721.054|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405721.054|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405721.054|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405721.059|nisvc|2|00|<\ni02:1,time taken(46)>

405721.060|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405721.060|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405721.060|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405721.060|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405721.061|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405721.061|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(499000074)

405721.061|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137368,1)IndicationCode:(200)Got User Type

405721.061|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)
,TransactionID(499000074)

405721.061|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405721.071|auth |2|00|SM Module: SM created Ref(14732139)

405721.071|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405721.071|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405721.071|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405721.071|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405721.071|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405721.071|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405721.071|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405721.071|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405721.071|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405721.071|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405721.071|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405721.071|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405721.071|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405721.071|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405721.071|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137368,0)IndicationLevel:
(200)
405721.071|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405721.071|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405721.072|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405721.072|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405721.072|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)

405721.072|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137368,1)IndicationCode:(0)

405721.072|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405721.072|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137368,1)IndicationCode:(100)SM Started

405721.695|nisvc|2|00|

****************************HTTP SEND**************************

405721.695|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405721.695|nisvc|2|00|ErrorBuffer::

405721.695|nisvc|2|00|

****************************HTTP SEND**************************

405721.702|nisvc|2|00|<\ni03:1,time taken(63)>

405721.703|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))
405721.703|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]
curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778590","not_before":"1527774690","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405721.703|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405721.703|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405721.704|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405721.704|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405721.704|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405721.704|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405721.704|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405721.704|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405721.704|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405721.704|auth |3|00|auth's Timer,Running(1),Start(1741220)

405721.704|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405721.704|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405721.704|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405721.704|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405721.704|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405721.705|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey
Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405721.705|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405721.705|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405721.716|auth |2|00|SM Module: SM created Ref(14732203)

405721.716|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405721.716|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405721.716|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405721.716|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405721.716|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405721.716|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405721.716|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137369,0)IndicationLevel:
(200)

405721.716|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405721.716|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((337),
(5),Ticks(0))

405721.716|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405721.716|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405721.716|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token


,TransactionID(499000074)

405721.716|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137369,1)IndicationCode:(200)Got OAUTH2 Token

405721.716|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405721.716|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137369,1)IndicationCode:(100)SM Started

405722.250|nisvc|2|00|

****************************HTTP SEND**************************

405722.250|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405722.250|nisvc|2|00|ErrorBuffer::

405722.250|nisvc|2|00|

****************************HTTP SEND**************************

405722.256|nisvc|2|00|<\ni00:1,time taken(54)>

405722.256|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405722.257|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405722.257|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405722.257|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405722.257|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405722.257|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)
405722.257|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405722.257|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405722.257|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405722.257|auth |3|00|auth's Timer,Running(1),Start(1740670)

405722.257|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405722.257|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((349),
(5),Ticks(0))

405722.257|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405722.258|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405722.258|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405722.259|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405722.259|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405722.259|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405722.260|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405722.260|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405722.260|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)
405722.260|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405722.260|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405722.260|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405722.260|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405722.260|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405722.260|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405722.260|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405722.260|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405722.260|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405722.260|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405722.260|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405722.331|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405722.331|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405722.331|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405722.331|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:51:30.000Z] WTEnd[2018-05-


31T15:04:49.734Z]

405722.331|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405722.331|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T15:02:48Z]

405722.332|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405722.332|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405722.332|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137369,0)IndicationLevel:
(200)

405722.332|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405722.332|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),(5),Ticks(0))

405722.332|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405722.332|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405722.332|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(499000074)

405722.332|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137369,1)IndicationCode:(200)Got WT

405722.332|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405722.332|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137369,1)IndicationCode:(100)SM Started

405722.786|nisvc|2|00|

****************************HTTP SEND**************************

405722.786|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405722.786|nisvc|2|00|ErrorBuffer::

405722.786|nisvc|2|00|

****************************HTTP SEND**************************

405722.794|nisvc|2|00|<\ni01:1,time taken(46)>
405722.794|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405722.794|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405722.795|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405722.795|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405722.795|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405722.795|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405722.795|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405722.795|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405722.795|auth |4|00|Retry Cnt [4] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405722.795|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)


405722.795|auth |3|00|auth's Timer,Running(1),Start(10000)

405722.795|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(5)

405722.795|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405732.788|auth |2|00|Request(-1)auth,(3)ServiceTimerMsgKey,(-1),(-1),
(Expiry,TransactionId,Time,Type):(-1,-1,1526137380,0)IndicationLevel:(200)

405732.788|auth |2|00|TimerId:(AuthServiceUCStateMachine(-1),CbData,ModuleP,MMS,State),
(0xe0b7a9,0xb5723de8,10000,4)

405732.788|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(2)kBaseEventTimeout,Ticks(0))

405732.788|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventTimeout),rO(5)

405732.788|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405732.789|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405732.789|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405732.789|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405732.789|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405732.789|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405732.789|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb137fc68):Ctx((349),(-
1),Ticks(0))

405732.789|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405732.791|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405732.791|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405732.791|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405732.791|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405732.791|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405732.792|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405732.792|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405732.792|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405732.792|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405732.792|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405732.792|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137380,1)IndicationCode:(509)Retry Request Again

405732.792|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405732.792|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405732.792|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405732.792|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405732.792|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)
405732.792|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137380,1)IndicationCode:(0)

405732.792|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405732.792|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405732.803|auth |2|00|SM Module: SM created Ref(14733312)

405732.803|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((334),
(1)kBaseEventInit,Ticks(0))

405732.803|auth |2|00|S/E(sSAuthSvcUTS0,kBaseEventInit),rO(305)

405732.803|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405732.803|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(1)kBaseEventInit,Ticks(0))

405732.803|auth |2|00|[prepareAndSendRequest]:[4413]:[1]:
[https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex]

405732.803|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405732.803|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137380,0)IndicationLevel:
(200)

405732.803|auth |2|00|S/E(sSAuthSvcGetServers,kBaseEventInit),rO(5)

405732.803|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),(5),Ticks(0))

405732.803|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405732.803|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405732.803|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)
405732.803|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137380,1)IndicationCode:(0)

405732.803|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405732.803|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137380,1)IndicationCode:(100)SM Started

405732.803|auth |3|00|auth's Ticked,Reason(Timer),Count/Size(0/1),Stop? (No)

405732.803|auth |3|00|auth's Timer,Running(0),Start(1730130)

405733.266|nisvc|2|00|

****************************HTTP SEND**************************

405733.266|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0B.online.lync.com:443/CertProv/CertProvisioningService.svc/mex),
HttpResCode(200), curlRetCode(0) retVal(0)

405733.266|nisvc|2|00|ErrorBuffer::

405733.266|nisvc|2|00|

****************************HTTP SEND**************************

405733.272|nisvc|2|00|<\ni02:1,time taken(47)>

405733.272|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((315),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405733.277|auth |2|00|m_RetVal[0] eReqRspID[1] curlReturn[0] HttpRspCode[200]


messageLen[13440]

405733.277|auth |2|00|S/E(sSAuthSvcGetServers,kEAuthOnRecvDataResponse),rO(3)

405733.277|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))

405733.277|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(1)kBaseEventInit,Ticks(0))
405733.277|auth |2|00|[prepareAndSendRequest]:[4413]:[3]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex]

405733.277|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405733.277|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137380,0)IndicationLevel:
(200)

405733.277|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kBaseEventInit),rO(5)

405733.277|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),(5),Ticks(0))

405733.796|nisvc|2|00|

****************************HTTP SEND**************************

405733.796|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/mex), HttpResCode(200),
curlRetCode(0) retVal(0)

405733.796|nisvc|2|00|ErrorBuffer::

405733.796|nisvc|2|00|

****************************HTTP SEND**************************

405733.803|nisvc|2|00|<\ni03:1,time taken(53)>

405733.803|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((318),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405733.807|auth |2|00|m_RetVal[0] eReqRspID[3] curlReturn[0] HttpRspCode[200]


messageLen[13120]

405733.807|auth |2|00|S/E(sSAuthSvcGetTokenProvider,kEAuthOnRecvDataResponse),rO(3)

405733.807|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405733.807|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(1)kBaseEventInit,Ticks(0))

405733.807|auth |2|00|S/E(sSAuthSvcUTEnd,kBaseEventInit),rO(3)

405733.807|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))
405733.807|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(3),Ticks(0))

405733.807|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405733.807|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(105)AuthServiceUTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405733.807|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405733.807|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405733.810|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(105)AuthServiceUTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405733.810|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got User Type

,TransactionID(499000074)

405733.810|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(208)AuthSvcAODBAddKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405733.810|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False] DB will be update when


User Mode = 0

405733.810|auth |2|00|Silent Add Notifier, CallerService(AuthServiceCallerSnooper)

405733.810|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(105)AuthServiceUTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got User Type

,TransactionID(499000074)

405733.810|auth |2|00|Response(-1)auth,(105)AuthServiceUTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137381,1)IndicationCode:(200)Got User Type

405733.810|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(0)
,TransactionID(499000074)

405733.810|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405733.820|auth |2|00|SM Module: SM created Ref(14733414)

405733.821|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(1)kBaseEventInit,Ticks(0))

405733.821|auth |2|00|S/E(sSOAuth2S0,kBaseEventInit),rO(5)

405733.821|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(5),Ticks(0))

405733.821|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((501),
(501)kEOAuth2OAuth2Start,Ticks(0))

405733.821|auth |2|00|S/E(sSOAuth2S0,kEOAuth2OAuth2Start),rO(6)

405733.821|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405733.821|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405733.821|auth |2|00|OAuth2 SOAuth2RenewAccessToken, Device Pairing Detected, Fetch using


Refresh Token

405733.821|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(511)

405733.821|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405733.821|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(1)kBaseEventInit,Ticks(0))

405733.821|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken, fetching access token


using refresh token

405733.821|auth |2|00|prepareOAuth2TokenRefreshReqBody: ClientID:131c22db-3591-4fc8-a305-


55444fa5ccd3

405733.821|auth |2|00|[OAuth2PrepareAndSendRequest]:[1399]:[6]:
[https://login.windows.net/common/oauth2/token]

405733.821|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137381,0)IndicationLevel:
(200)
405733.821|auth |2|00|S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kBaseEventInit),rO(5)

405733.821|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(5),Ticks(0))

405733.821|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405733.821|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405733.821|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(0)

,TransactionID(499000074)

405733.821|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137381,1)IndicationCode:(0)

405733.821|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405733.821|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137381,1)IndicationCode:(100)SM Started

405734.450|nisvc|2|00|

****************************HTTP SEND**************************

405734.450|nisvc|2|00|HTTP SEND:: DestUrl(https://login.windows.net/common/oauth2/token),


HttpResCode(200), curlRetCode(0) retVal(0)

405734.450|nisvc|2|00|ErrorBuffer::

405734.450|nisvc|2|00|

****************************HTTP SEND**************************

405734.456|nisvc|2|00|<\ni00:1,time taken(63)>

405734.457|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((512),
(301)kEAuthOnRecvDataResponse,Ticks(0))
405734.457|auth |4|00|[OAuth2ParseAndSaveRequiredInfo]:[1556] eReqRspID[6] m_RetVal[0]
curlReturn[0] HttpRspCode[200]
csStrippedResponse[{"token_type":"Bearer","scope":"user_impersonation","expires_in":"3599","ext_ex
pires_in":"0","expires_on":"1527778602","not_before":"1527774702","resource":"https://webdir0B.onl
ine.lync.com","access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImlCakwxUmNxemhpeTR
mcHhJeGRacW9oTTJZayIsImtpZCI6ImlCakwxUmNxemhpeTRmcHhJeGRacW9oTTJZayJ9.eyJhdWQiOiJodH
RwczovL3dlYmRpcjBCLm9ubGluZS5seW5jLmNvbSIs

405734.457|auth |2|00|OAuth2 SOAuth2RenewAccessTokenWithRefreshToken,


EAuthOnRecvDataResponse : access token (and refresh token) are received and updated

405734.457|auth |2|00|
S/E(sSOAuth2RenewAccessTokenWithRefreshToken,kEAuthOnRecvDataResponse),rO(3)

405734.457|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405734.457|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((510),
(1)kBaseEventInit,Ticks(0))

405734.457|auth |2|00|S/E(sSOAuth2End,kBaseEventInit),rO(3)

405734.457|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405734.457|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(1)kBaseEventInit,Ticks(0))

405734.457|auth |2|00|OAuth2 SOAuth2RenewAccessToken, starting the timer to refresh the access


token

405734.457|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405734.457|auth |3|00|auth's Timer,Running(1),Start(1728480)

405734.458|auth |2|00|S/E(sSOAuth2RenewAccessToken,kBaseEventInit),rO(5)

405734.458|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(5),Ticks(0))

405734.458|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(106)AuthServiceOAuthMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405734.458|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405734.458|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405734.459|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(106)AuthServiceOAuthMsgKey:


(212)AuthSvcAODBDBIndKey
Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405734.459|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got OAUTH2 Token

,TransactionID(499000074)

405734.459|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(0)

,TransactionID(499000074)

405734.470|auth |2|00|SM Module: SM created Ref(14733479)

405734.470|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((336),
(1)kBaseEventInit,Ticks(0))

405734.470|auth |2|00|S/E(sSAuthSvcWTS0,kBaseEventInit),rO(316)

405734.470|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405734.470|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((337),
(1)kBaseEventInit,Ticks(0))

405734.470|auth |2|00|[prepareAndSendRequest]:[4413]:[17]:
[https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth]

405734.470|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7

405734.470|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137381,0)IndicationLevel:
(200)

405734.470|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kBaseEventInit),rO(5)

405734.470|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((337),
(5),Ticks(0))

405734.470|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405734.470|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405734.470|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(106)AuthServiceOAuthMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got OAUTH2 Token


,TransactionID(499000074)

405734.470|auth |2|00|Response(-1)auth,(106)AuthServiceOAuthMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137381,1)IndicationCode:(200)Got OAUTH2 Token

405734.470|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405734.470|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137381,1)IndicationCode:(100)SM Started

405734.993|nisvc|2|00|

****************************HTTP SEND**************************

405734.993|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth), HttpResCode(200),
curlRetCode(0) retVal(0)

405734.993|nisvc|2|00|ErrorBuffer::

405734.993|nisvc|2|00|

****************************HTTP SEND**************************

405735.000|nisvc|2|00|<\ni01:1,time taken(53)>

405735.000|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((337),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405735.001|auth |2|00|m_RetVal[0] eReqRspID[17] curlReturn[0] HttpRspCode[200]


messageLen[5399]

405735.001|auth |2|00|S/E(sSAuthSvcGetWTUsingOAuthToken,kEAuthOnRecvDataResponse),rO(3)

405735.002|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405735.002|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((347),
(1)kBaseEventInit,Ticks(0))

405735.002|auth |2|00|S/E(sSAuthSvcWTEnd,kBaseEventInit),rO(3)
405735.002|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405735.002|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((349),
(1)kBaseEventInit,Ticks(0))

405735.002|auth |3|00|auth's Ticked,Reason(Internal),Count/Size(0/1),Stop? (No)

405735.002|auth |3|00|auth's Timer,Running(1),Start(1727930)

405735.002|auth |2|00|S/E(sSAuthSvcRenewWT,kBaseEventInit),rO(5)

405735.002|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((349),
(5),Ticks(0))

405735.002|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(101)AuthServiceWTMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405735.002|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405735.002|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405735.004|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(101)AuthServiceWTMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405735.004|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(211)AuthSvcAODBIEIndKey

Caller Service(-1):IndicationCode(200)Got WT

,TransactionID(499000074)

405735.004|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(214)AuthSvcAOFsmRequestKey

Caller Service(-1):IndicationCode(509)Retry Request Again

,TransactionID(499000074)

405735.004|auth |3|00|SM Module: SM Already


Exists(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(5),Ticks(0))

405735.004|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(6)kBaseEventRestart,Ticks(0))

405735.004|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventRestart),rO(3)
405735.004|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405735.004|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((344),
(1)kBaseEventInit,Ticks(0))

405735.004|auth |2|00|S/E(sSAuthSvcUCS0,kBaseEventInit),rO(3)

405735.004|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405735.004|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((317),
(1)kBaseEventInit,Ticks(0))

405735.004|auth |2|00|S/E(sTAuthSvcSSIOrPinExt,kBaseEventInit),rO(308)

405735.004|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405735.004|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((330),
(1)kBaseEventInit,Ticks(0))

405735.004|auth |2|00|S/E(sSAuthSvcGeneratePrivateKey,kBaseEventInit),rO(3)

405735.004|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405735.004|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((331),
(1)kBaseEventInit,Ticks(0))

405735.077|auth |2|00|S/E(sSAuthSvcGenerateCSR,kBaseEventInit),rO(3)

405735.077|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405735.077|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(1)kBaseEventInit,Ticks(0))

405735.077|auth |2|00|authSvcGetWTExpiry, WTStart[2018-05-31T13:51:42.000Z] WTEnd[2018-05-


31T14:51:56.476Z]

405735.077|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT may not valid

405735.077|auth |2|00|CAuthSvcSmCtxt::preparePublishCertRequest, WT Req Time [2018-05-


12T15:03:01Z]

405735.078|auth |2|00|[prepareAndSendRequest]:[4413]:[5]:
[https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1]

405735.078|cfg |5|00|Prm|Parameter feature.validate.peer.cert requested type 0 but is of type 7


405735.078|nisvc|2|00|Request(-1)nisvc,(701)NIServiceHttpReqMsgKey,(-1)auth,
(702)NIServiceHttpResMsgKey,(Expiry,TransactionId,Time,Type):(-1,-1,1526137382,0)IndicationLevel:
(200)

405735.078|auth |2|00|S/E(sSAuthSvcCertPublish,kBaseEventInit),rO(5)

405735.078|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),(5),Ticks(0))

405735.078|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405735.078|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405735.078|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(101)AuthServiceWTMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(200)Got WT

,TransactionID(499000074)

405735.078|auth |2|00|Response(-1)auth,(101)AuthServiceWTMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137382,1)IndicationCode:(200)Got WT

405735.078|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(100)SM Started

,TransactionID(499000074)

405735.078|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137382,1)IndicationCode:(100)SM Started

405735.578|nisvc|2|00|

****************************HTTP SEND**************************

405735.578|nisvc|2|00|HTTP SEND::
DestUrl(https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1
), HttpResCode(500), curlRetCode(0) retVal(0)

405735.578|nisvc|2|00|ErrorBuffer::

405735.578|nisvc|2|00|

****************************HTTP SEND**************************

405735.584|nisvc|2|00|<\ni02:1,time taken(50)>
405735.584|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((332),
(301)kEAuthOnRecvDataResponse,Ticks(0))

405735.585|auth |4|00|m_RetVal[-1] eReqRspID[5] csStrippedResponse[<s:Envelope


xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action
s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action></s:Header><s:B
ody><s:Fault><faultcode xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
wssecurity-secext-1.0.xsd">a:InvalidSecurity</faultcode><faultstring xml:lang="en-US">Timestamp is
outside of allowed time skew range.</faultstring><det

405735.585|auth |4|00|parseSoapError: csFaultCode[a:InvalidSecurity] csReasonText[Timestamp is


outside of allowed time skew range.] csDetailErrorValue[28041] csInternalErrorCode[]
csInternalErrorText[Timestamp is outside of allowed time skew range.]

405735.585|auth |4|00|parseErrorCodeDetails: m_uiMsDaigErrorCode[500]

405735.585|auth |2|00|m_RetVal[-1] eReqRspID[5] curlReturn[0] HttpRspCode[500] messageLen[884]

405735.585|auth |2|00|S/E(sSAuthSvcCertPublish,kEAuthOnRecvDataResponse),rO(4)

405735.585|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405735.585|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(1)kBaseEventInit,Ticks(0))

405735.585|auth |4|00|Retry Cnt [5] pHD(-1)

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://webdir0b.online.lync.com/CertProv/CertProvisioningService.svc/WebTicket_Proof_SHA1

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/cert

https://login.windows.net/common/oauth2/authorize

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc/OAuth

https://webdir0b.online.lync.com/WebTicket/WebTicketService.svc

https://login.windows.net/common/oauth2/authorize

http://nexus.mi

405735.585|auth |2|00|S/E(sSAuthSvcUCError,kBaseEventInit),rO(4)
405735.585|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(4),Ticks(0))

405735.585|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(4),Ticks(0))

405735.585|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(-1),Ticks(0))

405735.585|auth |2|00|Policy Dest:(203)AuthServicePolicyFsmKey:(102)AuthServiceUCMsgKey:


(215)AuthSvcAOFsmReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(499000074)

405735.585|auth |2|00|Silent Indication, CallerService(AuthServiceCallerSnooper)

405735.586|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405735.586|auth |2|00|Policy Dest:(202)AuthServicePolicyDBKey:(102)AuthServiceUCMsgKey:


(212)AuthSvcAODBDBIndKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(499000074)

405735.586|auth |2|00|<SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),
(7)kBaseEventStop,Ticks(0))

405735.586|auth |2|00|<\SM>(311)AuthServiceUCStateMachine(0xb131c910):Ctx((355),(-1),Ticks(0))

405735.586|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405735.589|auth |2|00|<SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((349),
(7)kBaseEventStop,Ticks(0))

405735.589|auth |2|00|<\SM>(308)AuthServiceWTUsingOAuthStateMachine(0xb131c518):Ctx((349),(-
1),Ticks(0))

405735.589|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405735.589|auth |2|00|<SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),
(7)kBaseEventStop,Ticks(0))

405735.589|auth |2|00|<\SM>(305)AuthServiceOAuthStateMachine(0xb1320c60):Ctx((511),(-
1),Ticks(0))

405735.589|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]

405735.589|auth |2|00|<SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),
(7)kBaseEventStop,Ticks(0))

405735.589|auth |2|00|<\SM>(304)AuthServiceUTStateMachine(0xb1382e90):Ctx((345),(-1),Ticks(0))

405735.589|auth |2|00|CAuthSvcUpdateTokenNotifier:: UserMode = [False]


405735.589|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:
(206)AuthSvcAOServiceReplyKey

Caller Service(-1):IndicationCode(400)Failed to Get UC

,TransactionID(499000074)

405735.589|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)pps,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137382,1)IndicationCode:(400)Failed to Get UC

405735.591|sip |1|00|SipGotNewUserCert: pstNewUserCert[0xb511cad4]

405735.591|sip |3|00|TLS-DSK:soWebTicketCbFunc: the event type is 1

405735.591|sip |4|00|TLS-DSK:soWebTicketCbFunc: SoWebTicketCb_ResponseError event triggered


from the soWebTicket

405735.591|auth |2|00|Policy Dest:(201)AuthServicePolicyServiceKey:(102)AuthServiceUCMsgKey:


(206)AuthSvcAOServiceReplyKey

Caller Service(144)AuthServiceCallerSnooper:IndicationCode(400)Failed to Get UC

,TransactionID(499000074)

405735.591|auth |2|00|Response(-1)auth,(102)AuthServiceUCMsgKey,(-1)lyncStatus,(14),
(Expiry,TransactionId,Time,Type):(-1,499000074,1526137382,1)IndicationCode:(400)Failed to Get UC

405751.757|so |4|00|SNTP: sync failed with all servers, trying again[0]

Вам также может понравиться