Communcator Web Access R2 (error 0-1-492)
Posted by Mino on March 27, 2009
Apparently there is a bug with CWA and Windows 2008 where the Service Principal Name (SPN) isn’t created for the FQDN of your CWA site. The result is the following error when you attempt to sign in with integrated Windows authentication
Cannot sign in because your computer clock is not set correctly or your
account is invalid (error code: 0-1-492)
The Windows authentication site will fail with the error if your site is running on Windows 2008 Server
HOW TO FIX IT:
· You need to add an SPN matching the FQDN of your internal site (cwa.contoso.com) to the user account you assigned in AD for CWA.
· Open ADSIEDIT and navigate to the OU where your CWA service account is stored.
· Locate the CWA service account (mine is called ‘CWAService’) and right-click then choose Properties.
· Turn on the checkbox to ‘Show only attributes that have values’ and scroll down to an entry called ‘servicePrincipalName’.
· Click the Edit button.
· Type in the SPN using the following format (http/). For example, if your site is called “cwa.contoso.com” then type in “http/cwa.contoso.com”.
NOTE: Do NOT type http://.
· Click OK and you’re done!
Thanks to the following blogs :
http://jasonshave.blogspot.com/2009/01/communcator-web-access-error-0-1-492.html
http://www.confusedamused.com/notebook/cwa-2007-r2-login-fails/
richard said
Additionally, you may also run into troubles if external client wants to access a CWA website, that was created as “internal” type (I noticed different authentication settings in IIS for the website) instead of the “external” type.
Mino said
totally agree , if you chose the Forum based authontication only …then this problem will not be there.
thanks for your feedback
richard said
I know this because I had the same problem after installing CWA and clients couldnt connect from external network
On the other hand I would like to contact you regarding a Cisco to OCS trunk issue, and found a post about this, but cannot find your mail address on this blog.
Vangelis said
Hello i have follow your instructions and i have the same problem…
But take a look..
With Firefox browser i can login just fine..but with IE8 i can’t
Strange things..
If you know something..it will be very helpfull..
Thx
Fix Windows Errors said
Great information, Spent way too much time on your site and not getting my work done
Brandon said
Just wanted to note that we had this issue as well and it was NOT SPN as we had already done this. It ended up being fix from this website:
http://tincupsandstring.typepad.com/convergent-uc-blog/2009/03/cwa-sign-in-error-code-0-1-492.html
Hope that helps someone as we struggled with this for awhile!
Chrissie said
this site has really been an eye opener,i have just got interested in blogging and hopefully i am able to do so.thanks
Baba said
Thanks.
tim said
Hey, just wanted to drop by and say awesome post!
max said
thank you for useful post
Using OCS 2007 R2 CWA with Lync Server 2010 « Microsoft UC Made Easy said
[...] http://theucguy.wordpress.com/2009/03/27/communcator-web-access-r2-error-0-1-492/ [...]