Logs & Settings Action Plan for Mobile Devices Sign in with SkypeShield Credentials

Owned by Agat Support
Last updated: Oct 10, 2022
2 min read

1. Change the LAC Log Level 

  1. Backup the Lync_Access_Control.xml file 
  2. Change the log severity level to debug and enable dumps: 
    • Change the <logging> tag in Lync_Access_Control.xml: 
      1. In <main> tag configure <severity>debug</severity> 
      2. In <dumps> tag change <enabled>true</enabled> 
  3. Save changes 

2. Change the DMZ Bastion and Authentication Extender Log Level 

  1. Backup the bastion.xml file 
  2. Change the log severity level to debug and enable dumps: 
    • Change the <logging> tag in bastion.xml: 
      1. In <main> tag configure <severity>debug</severity> 
      2. In <dumps> tag change <enabled>true</enabled> 
  3. Save changes 
3. Restart the Bastion Service on the DMZ Bastion and Authentication Extender 
  1. Open PowerShell 
  2. Execute: Restart-Service bastion 

4. Replicate the issue 

5. Collect the log LAC_<poolname>_<date>.log and the Dumps folder from the relevant date 

6. Collect the log KCD.<poolname>.<date>.log and the AuthConsumer.<poolname>.<date>.log from the relevant date 

7. Collect the log Bastion.<date>.log and the dumps folder from the relevant date

8. Collect the Lync_Access_Control.xml 

9. Revert back to the old Lync_Access_Control.xml 

10. Revert back to the old Bastion.xml 

11. Restart the Bastion Service 

  1. Open PowerShell 
  2. Execute: Restart-Service bastion 

12. Export Access Portal Logs 

  1. Open the Access Portal WebUI 
  2. Browse to /admin/logfiles 
  3. Change the log level to DEBUG 
  4. Replicate the issue 
  5. Click on Export 
  6. Send AGAT Support the AccessPortal.log file. 
The following files are expected to be delivered following this plan: 
  1. Access Portal logs and settings 
  2. LAC_<poolname>_<date>.log from the relevant time frame in Debug mode from DMZ Reverse Proxy 
  3. LAC Traffic dumps from the relevant time frame from DMZ Reverse Proxy 
  4. Lync_Access_Control.xml from DMZ Reverse Proxy 
  5. Bastion.<date>.log  folder from the relevant date from DMZ Reverse Proxy 
  6. Bastion Traffic  dumps folder from the relevant date from DMZ Reverse Proxy 
  7. Bastion.<date>.log  folder from the relevant date from Authentication Extender 
  8. Bastion Traffic  dumps folder from the relevant date Authentication Extender 
  9. KCD.<poolname>.<date>.log  from the relevant date  from Authentication Extender 
  10. the AuthConsumer.<poolname>.<date>.log from the relevant date  from Authentication Extender 
  11. Skype for Business Client logs 

Default file location could be found here.


Please include the following information:
a. Time frames of issue
b. Users involved (SIP Address, AD username, UPN, etc.)