July 2012 - calendarserver-dev - lists.macosforge.org

[Calendar and Contacts Server] ConfiguringLDAP added
by Calendar and Contacts Server 12 Jul '12

12 Jul '12

Added page "ConfiguringLDAP" by sagen(a)apple.com from 17.224.21.17* Page URL: <http://trac.calendarserver.org/wiki/ConfiguringLDAP> Content: -------8<------8<------8<------8<------8<------8<------8<------8<-------- By default, Calendar Server fetches users and groups from the configured directory service, and locations and resources from a local XML file. If you would like all four record types to come out of LDAP, modify the caldavd.plist as follows: 1) Disable the resource/location XML service by changing "ResourceService > Enabled" to false: {{{ <key>ResourceService</key> <dict> <key>Enabled</key> <false/> }}} 2) Add a "recordTypes" array to the "DirectoryService > params" dictionary, as well as configuring the DN's and attributes your LDAP server uses. Each record type has an RDN (the dn relative to your base dn), and a mapping of calendar server record field names to LDAP attributes: {{{ <key>DirectoryService</key> <dict> <key>type</key> <string>twistedcaldav.directory.ldapdirectory.LdapDirectoryService</string> <key>params</key> <dict> <key>recordTypes</key> <array> <string>users</string> <string>groups</string> <string>locations</string> <string>resources</string> </array> <key>cacheTimeout</key> <integer>10</integer> <key>uri</key> <string>ldap://ldapserver.example.com/</string>  <key>tls</key> <false/> <key>tlsCACertFile</key> <string></string> <key>tlsCACertDir</key> <string></string> <key>tlsRequireCert</key> <string>never</string> <key>credentials</key> <dict> <key>dn</key> <string>uid=admin,ou=people,o=example.com</string>  <key>password</key> <string>PASSWORD</string>  </dict> <key>rdnSchema</key> <dict> <key>base</key> <string>o=example.com</string>  <key>guidAttr</key> <string>GUID</string>  <key>users</key> <dict> <key>rdn</key> <string>ou=people</string>  <key>mapping</key> <dict> <key>recordName</key> <string>uid</string> <key>fullName</key> <string>cn</string> <key>emailAddresses</key> <array> <string>mail</string> <string>mailAlias</string> </array> <key>firstName</key> <string>givenName</string> <key>lastName</key> <string>sn</string> </dict> </dict> <key>groups</key> <dict> <key>rdn</key> <string>ou=groups</string>  <key>mapping</key> <dict> <key>recordName</key> <string>cn</string> <key>fullName</key> <string>cn</string> <key>emailAddresses</key> <array> <string>mail</string> <string>mailAlias</string> </array> <key>firstName</key> <string></string> <key>lastName</key> <string></string> </dict> </dict> <key>locations</key> <dict> <key>rdn</key> <string>ou=locations</string>  <key>mapping</key> <dict> <key>recordName</key> <string>cn</string> <key>fullName</key> <string>cn</string> <key>emailAddresses</key> <array> </array> <key>firstName</key> <string></string> <key>lastName</key> <string></string> </dict> </dict> <key>resources</key> <dict> <key>rdn</key> <string>ou=resources</string>  <key>mapping</key> <dict> <key>recordName</key> <string>cn</string> <key>fullName</key> <string>cn</string> <key>emailAddresses</key> <array> </array> <key>firstName</key> <string></string> <key>lastName</key> <string></string> </dict> </dict> </dict> <key>groupSchema</key> <dict> <key>membersAttr</key> <string>uniqueMember</string>  <key>nestedGroupsAttr</key> <string></string> <key>memberIdAttr</key> <string></string> </dict> <key>resourceSchema</key> <dict> <key>resourceInfoAttr</key> <string></string> <key>autoScheduleAttr</key> <string></string> <key>autoScheduleEnabledValue</key> <string></string> <key>proxyAttr</key> <string></string> <key>readOnlyProxyAttr</key> <string></string> </dict> </dict> </dict> }}} -------8<------8<------8<------8<------8<------8<------8<------8<-------- * The IP shown here might not mean anything if the user or the server is behind a proxy. -- Calendar and Contacts Server </> HTTP/WebDAV/CalDAV Server This is an automated message. Someone at / added your email address to be notified of changes on ConfiguringLDAP. If it was not you, please report to .

1 0

[Calendar and Contacts Server] FAQ modified
by Calendar and Contacts Server 12 Jul '12

12 Jul '12

Changed page "FAQ" by wsanchez(a)apple.com from 17.224.20.215* Page URL: <http://trac.calendarserver.org/wiki/FAQ> Diff URL: <http://trac.calendarserver.org/wiki/FAQ?action=diff&version=13> Revision 13 -------8<------8<------8<------8<------8<------8<------8<------8<-------- Index: FAQ ========================================================================= --- FAQ (version: 12) +++ FAQ (version: 13) @@ -63,4 +63,4 @@ '''How do I configure Calendar Server to use LDAP for users, groups, locations, and resources?''' -See [ConfiguringLDAP Configuring LDAP] +See [wiki:ConfiguringLDAP Configuring LDAP] -------8<------8<------8<------8<------8<------8<------8<------8<-------- * The IP shown here might not mean anything if the user or the server is behind a proxy. -- Calendar and Contacts Server </> HTTP/WebDAV/CalDAV Server This is an automated message. Someone at / added your email address to be notified of changes on FAQ. If it was not you, please report to .

1 0

[Calendar and Contacts Server] FAQ modified
by Calendar and Contacts Server 12 Jul '12

12 Jul '12

Changed page "FAQ" by wsanchez(a)apple.com from 17.224.20.215* Page URL: <http://trac.calendarserver.org/wiki/FAQ> Diff URL: <http://trac.calendarserver.org/wiki/FAQ?action=diff&version=12> Revision 12 -------8<------8<------8<------8<------8<------8<------8<------8<-------- Index: FAQ ========================================================================= --- FAQ (version: 11) +++ FAQ (version: 12) @@ -63,4 +63,4 @@ '''How do I configure Calendar Server to use LDAP for users, groups, locations, and resources?''' -See ConfiguringLdap +See [ConfiguringLDAP Configuring LDAP] -------8<------8<------8<------8<------8<------8<------8<------8<-------- * The IP shown here might not mean anything if the user or the server is behind a proxy. -- Calendar and Contacts Server </> HTTP/WebDAV/CalDAV Server This is an automated message. Someone at / added your email address to be notified of changes on FAQ. If it was not you, please report to .

1 0

[Calendar and Contacts Server] FAQ modified
by Calendar and Contacts Server 12 Jul '12

12 Jul '12

Changed page "FAQ" by sagen(a)apple.com from 17.224.21.17* Page URL: <http://trac.calendarserver.org/wiki/FAQ> Diff URL: <http://trac.calendarserver.org/wiki/FAQ?action=diff&version=11> Revision 11 -------8<------8<------8<------8<------8<------8<------8<------8<-------- Index: FAQ ========================================================================= --- FAQ (version: 10) +++ FAQ (version: 11) @@ -63,4 +63,4 @@ '''How do I configure Calendar Server to use LDAP for users, groups, locations, and resources?''' -See ConfiguringLDAP +See ConfiguringLdap -------8<------8<------8<------8<------8<------8<------8<------8<-------- * The IP shown here might not mean anything if the user or the server is behind a proxy. -- Calendar and Contacts Server </> HTTP/WebDAV/CalDAV Server This is an automated message. Someone at / added your email address to be notified of changes on FAQ. If it was not you, please report to .

1 0

[Calendar and Contacts Server] FAQ modified
by Calendar and Contacts Server 12 Jul '12

12 Jul '12

Changed page "FAQ" by sagen(a)apple.com from 17.224.21.17* Page URL: <http://trac.calendarserver.org/wiki/FAQ> Diff URL: <http://trac.calendarserver.org/wiki/FAQ?action=diff&version=10> Revision 10 -------8<------8<------8<------8<------8<------8<------8<------8<-------- Index: FAQ ========================================================================= --- FAQ (version: 9) +++ FAQ (version: 10) @@ -57,3 +57,10 @@ {{{Mail gateway didn't find a token in message}}} -- Calendar Server uses "plus addressing" to encode a token into the reply-to address for email invitations. That way, when a reply comes back, the token can be used to look up the appropriate organizer, attendee, and event to update. This special tokenized email address is not only in the reply-to field, but also substituted for the organizer's email address within the embedded icalendar body attached to the invitation. So iMIP-aware clients should direct the reply to the email address including the token. If that token is missing, the iMIP reply is not processed. {{{iMIP injection principal not found: com.apple.calendarserver}}} -- By default, Calendar Server assumes there is a user named com.apple.calendarserver on the system and it uses that account to authenticate requests between the calendar server processes and the mail gateway process. If you're not on an OS X server, you'll need to create a user account for this purpose, and put its username and password into the caldavd.plist as described in the steps above. + + +== Configuring for LDAP == + +'''How do I configure Calendar Server to use LDAP for users, groups, locations, and resources?''' + +See ConfiguringLDAP -------8<------8<------8<------8<------8<------8<------8<------8<-------- * The IP shown here might not mean anything if the user or the server is behind a proxy. -- Calendar and Contacts Server </> HTTP/WebDAV/CalDAV Server This is an automated message. Someone at / added your email address to be notified of changes on FAQ. If it was not you, please report to .

1 0