Problem with Proxy and Skype for Business

[boonkeatgan]

Hi All,

We having issue with the Skype for Business. Once the computer goes into sleep mode, after wake up, it will prompt for login username and password and even if we enter the correct credential, it do not allow us to login.

To resolve this, we will need to launch the safari, it will prompted for the error "kCFErrorDomainCFNetwork error 310" initially. But after enter any URL, it can surf to any website. Then the skype is back to normal. This is quite annoying as the user need to launch and browse to resolve the Skype issues.

After some finding on other mac (which has no issue with the skype), the working mac has com.apple.configureLocalKDC services running. How can i configure or deploy this service to others mac?

Appreciate if anyone with similar problem and have solution to this.

[Josh_Smith]

Hi @boonkeatgan , this sounds like you have an authenticated proxy that needs a valid Kerberos ticket to authenticate and allow the Skype traffic out. Authenticating to a website may be renewing the Kerberos ticket, which allows Skype to start working again.

To verify a missing kerberos ticket is your problem you can use the following commands in terminal:

klist
This will display the user's Kerberos tickets. If you don't have any, you will see this: klist: krb5_cc_get_principal: No credentials cache file found

kdestroy -a
This will remove your kerberos tickets, similar to what is happening when the Mac sleeps for too long. If Kerberos is causing this issue this should break Skype (might have to quit and relaunch Skype to see it fail).

If Kerberos is your problem, look into NoMAD, a popular utility that can keep your kerberos tickets valid (among other useful functions). https://nomad.menu

[boonkeatgan]

@Josh.Smith Thank you for the reply.

There are krbtgt/domain name in the klist and it is still showing within valid period.

For your info, I also installed the nomad. Anything need to configure on the nomad?