October 2007 - calendarserver-users

Kerberos Issue / Principals / Authentication
by Doug O'Connor 17 Jul '08

17 Jul '08

Hello, I'm having trouble getting Kerberos to run, it breaks when I do the ./ run script (could not start kerberos). All the directories under the XML service seem to set up okay, but access is denied even to admin/ admin logons from iCal 3.0 and anything else, and I suspect the Kerberos failure to be the issue. Please advise? BTW, logging in using Firefox to browse the directories works fine, it accepts the account uid/pwds from the accounts.xml file (which I've configured for use in the caldavd-dev.plist) in a pull-down dialogue box. It's using WebDAV/CalDAV clients that won't work for authentication. I get any mode of access denied or error 403 messages. When I check the server log output, it can't find principals for even "admin." After "No principal found for admin" it attempts to clone the __uids__/admin of resource <DirectoryPrincipalUIDPrivisioningResources....>. I tried manually building PyKerberos, and it referred me to do things in the kerberos.app that didn't work for me. The Edit-->Edit Realms didn't do anything, which means that Kerberos app isn't running right either. I could be wildly confused on this whole thing, so I apologize if I'm missing anything obvious here. The important thing is that I can't get anybody to authenticate when using a WebDAV/CalDAV client. Thanks, Doug O'Connor 111 East Avenue, Apt. 331 Rochester, NY 14604 301.437.8715 music(a)dougoconnor.com http://www.dougoconnor.com

4 7

ACL from iCal on Leopard?
by Leonard Budney 10 Feb '08

10 Feb '08

Hello! I've set up calendar server successfully and created a personal calendar. I've also created a user for my wife, and tried to give her access to my calendar, but without success. In iCal on Leopard 9a559, I went to preferences-->accounts-- >delegation and clicked "refresh," but the "accounts I can access" list is empty. Then I clicked "edit" near "manage access to my account," and then clicked the (+) on the popup window, typed my wife's user name and clicked "done." iCal responded, "cannot enable access to your account: 'julie' was not found." One thing I noticed was that clicking "search again" and "done" repeatedly did not produce ANY requests to the calendar server. I'd have thought iCal would connect to the server to ask about user "julie," but apparently not. How can I give her access to my calendar, either through the client or by editing config files on the server? Thanks! Len. ---- The urge to save humanity is almost always a false-face for the urge to rule it. --H. L. Mencken

3 3

Need help with configuration to Open Directory
by Stewart Randall 06 Nov '07

06 Nov '07

Hi all, I would really appreciate some assistance with configuring Calendar Server to work with Open Directory on OS X. I've downloaded and compiled the source which I assume was fine as I didn't receive any errors. I copied caldavd-test.plist -> caldavd- dev.plist and made the following changes...  <key>ServerHostName</key> <string>ferrari.mydomainname.co.uk</string> My fully qualifies hostname as listed in the locally running DNS.  <key>BindAddresses</key> <array> <string>192.168.0.100</string> </array> IP address of the server   Commented this out as I want Open Directory support  <key>DirectoryService</key> <dict> <key>type</key> < string >twistedcaldav.directory.appleopendirectory.OpenDirectoryService</ string> <key>params</key> <dict> <key>node</key> <string>/Search</string> </dict> </dict> Un-commented Open Directory Service config and left as default The remaining config left as is. My environment. OS X Server V 10.4.10 Local DNS server running Open Directory configured as Directory Master and operational. Workgroup manager connects to ferrari.mydomainname.co.u and authenticates to /LDAPv3/127.0.0.1 When I run Calendar Server I receive the following error... 2007-10-28 22:44:38+0000 [-] [caldav-8008] /Library/iCalServer/ CalendarServer/twistedcaldav/authkerb.py:50: RuntimeWarning: Python C API version mismatch for module kerberos: This Python has API version 1013, module kerberos has version 1012. 2007-10-28 22:44:38+0000 [-] [caldav-8008] import kerberos 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] Log opened. 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] twistd 2.5.0+r19773 (/ Library/Frameworks/Python.framework/Versions/2.5/Resources/Python.app/ Contents/MacOS/Python 2.5.0) starting up 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] reactor class: <class 'twisted.internet.selectreactor.SelectReactor'> 2007-10-28 22:44:38+0000 [-] [caldav-8008] [startup] Configuring directory service of type: twistedcaldav.directory.appleopendirectory.OpenDirectoryService 2007-10-28 22:44:38+0000 [-] [caldav-8008] [OpenDirectoryService] Unable to locate virtual host record: Open Directory (node=/Search) has no /Computers records with a virtual hostname: ferrari.mydomainname.co.uk 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] Traceback (most recent call last): 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] File "../Twisted/bin/ twistd", line 21, in <module> 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] run() 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] File "/Library/ Twisted/twisted/scripts/twistd.py", line 27, in run 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] File "/Library/ Twisted/twisted/application/app.py", line 379, in run 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] File "/Library/ Twisted/twisted/scripts/twistd.py", line 23, in runApp 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] File "/Library/ Twisted/twisted/application/app.py", line 157, in run 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] File "/Library/ Twisted/twisted/application/app.py", line 202, in createOrGetApplication 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] File "/Library/ CalendarServer/twistedcaldav/tap.py", line 595, in makeService 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] File "/Library/ CalendarServer/twistedcaldav/tap.py", line 365, in makeService_Slave 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] File "/Library/ iCalServer/CalendarServer/twistedcaldav/directory/ appleopendirectory.py", line 91, in __init__ 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] self._lookupVHostRecord() 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] File "/Library/ iCalServer/CalendarServer/twistedcaldav/directory/ appleopendirectory.py", line 202, in _lookupVHostRecord 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] self._parseComputersRecords(records, vhostname) 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] File "/Library/ iCalServer/CalendarServer/twistedcaldav/directory/ appleopendirectory.py", line 209, in _parseComputersRecords 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] % (self.realmName, vhostname,) 2007-10-28 22:44:38+0000 [-] [caldav-8008] [-] twistedcaldav.directory.appleopendirectory.OpenDirectoryInitError: Open Directory (node=/Search) has no /Computers records with a virtual hostname: ferrari. mydomainname.co.uk Am I missing something obvious in the Calendar Server configuration? Or perhaps I need to add a user to the Open Directory??? I'm totally stumped. Any help would be greatly appreciated. Thanks in advance ~Stewart

4 9

No event locations/delegation...
by James Hill 02 Nov '07

02 Nov '07

Hi! First of all, Calendar Server rocks! I have it installed on Debian (using XML for the directory service) connected to several Mac clients. However, there are a few issues I'm hoping someone could shed some light on before I dig through the code... For now I'm using the default access.xml file with the following addition: <user> <uid>test2</uid> <password>test2</password> <name>Test User 2</name> <cuaddr>mailto:testuser2@example.com</cuaddr> </user> test2 is then added as a proxy to the mercury conference room and the users group. I have created accounts in iCal for both test and test2 (and they are able to add each other to events, accept/decline, etc... which is awesome!). Here are the issues I'm having: 1) The mercury conference room shows up fine when browsing via Safari, but iCal can't seem to find it when I try to add "Location" to an event. As per the defaults, in accounts.xml the <auto-schedule/> entry appears for mercury. 2) In iCal > Accounts > Delegation (for both test and test2), it is impossible to grant anyone access to the current account. Whenever I try to add a user (e.g. test, test2, testuser(a)example.com, etc...) it says that the user was not found. Interestingly, in the Calendar Server logfile there is no activity - it's as though it is not even trying to look up that principle. 3) Related to point 2, there seems to be an autocomplete feature throughout the system, but it never returns anything. I can add attendees to events by typing their email address correctly, but it never makes any suggestions... I'm assuming that some/all of these problems are related to using XML instead of OpenDirectory? If so, perhaps my company could donate some time to fixing them... but it would be nice to get more information about what's broken. Thanks! James Hill Development Manager Economic Modeling Specialists, Inc. www.economicmodeling.com

4 4

Port issue
by Douglas O'Connor 29 Oct '07

29 Oct '07

Hello friends, I'm trying to set up CalendarServer for use at a university, and I have it compiled and running fine on two different MacOSX10.4 machines, one MacBookPro and one G4. However, I can't get either computer to allow external access to port 8008 or 8443. In a browser, localhost:8008 brings up the server database with no problems. And of course, the default port 80 only brings up the "You've installed Apache" page. But any use of my IP: 8008, from the same box or another one, and access is blocked. My firewall in OSX Preferences specifically allows those two ports to be open for CalendarServer, but still they remain mysteriously inaccessible. On a webstat pinging website it came back as "Connection Closed" on that and every other port except the obvious ones (80, 21, 22). I compiled CalendarServer with Subversion 1.4.5, Python 2.4, and basically only worried about getting the client aspects up. I haven't yet been able to get Subversion running with the latest versions of Apache and APR, although I have the latest v's of OpenSSL, libtool, neon, and I assume that the ./run -s took care of any other dependency checkouts. Please excuse me if the answer is pathetically simple, which I'm sure it is. Regardless, I'm stumped. Many thanks, -Doug

3 9

Older iCal works...sometimes
by Douglas O'Connor 29 Oct '07

29 Oct '07

Hello again, I have found that I can still publish to the DCS with the older 10.4 iCal (v2.0), which the online documentation says is not compatible, as long as it is done in the root directory and with the admin/admin uid/pwd. For example, publishing to http://www.servername.edu:8008/ with admin/admin is no problem. It has a problem unpublishing, but the ability to publish and subscribe is there for older versions of iCal. I am wondering if, since it is possible for this to happen on the root dir with the admin guid, can I somehow config DCS to let it happen across the server, in other dir structures? Is there a reason why I wouldn't want this? Normally when I try this, I get: Calendar data does not conform to CalDAV requirements: METHOD property is not allowed in CalDAV iCalendar data. But it seems important that servers be somewhat backwards compatible, so that not everybody has to go out and buy new software in order to take advantage. Additionally, why wouldn't I receive the same error message as an admin/admin publishing to the root dir? Any ideas would be welcome, thank you all very much for helping out. -Doug

5 7

REPORT request and iCal Server
by Pascal Robert 29 Oct '07

29 Oct '07

Hello, I'm trying to talk to iCal Server from a WebObjects app with CalDAV4J (Java API from the Chandler Project). I can connect and get a specific calendar, but I'm trying to do a REPORT request: REPORT /calendars/users/diradmin/calendar/ HTTP/1.1 and I'm getting a 401 HTTP error: HTTP/1.1 401 Unauthorized WWW-Authenticate: digest nonce="174385117913098369521756197356", realm="/Search", algorithm="md5" In the Chandler examples, they are querying "/cosmo/dav/test/ collection", so I guess I'm not querying the good thing or I don't understand the REPORT query. What is the correct URL for a REPORT query ? Thanks.

3 3

Having issues getting the calendar server up and working
by Jason Pruim 29 Oct '07

29 Oct '07

Hi everyone, I e-amield the list awhile back when I ran into a problem getting the calendarserver up and working. Now today, I just go the latest source code, did a ./run -s and then attempted a ./run with this output: 2007-10-26 16:35:38-0400 [-] Log opened. 2007-10-26 16:35:38-0400 [-] twistd 2.5.0+r19773 (/Library/Frameworks/ Python.framework/Versions/2.4/Resources/Python.app/Contents/MacOS/ Python 2.4.4) starting up 2007-10-26 16:35:38-0400 [-] reactor class: <class 'twisted.internet.selectreactor.SelectReactor'> 2007-10-26 16:35:39-0400 [-] 1 processors found, configuring 1 processes. 2007-10-26 16:35:39-0400 [-] twistedcaldav.logging.AMPLoggingFactory starting on "'logs/caldavd.sock'" 2007-10-26 16:35:39-0400 [-] Traceback (most recent call last): 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/bin/twistd", line 21, in ? 2007-10-26 16:35:39-0400 [-] run() 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/scripts/twistd.py", line 27, in run 2007-10-26 16:35:39-0400 [-] app.run(runApp, ServerOptions) 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/application/app.py", line 379, in run 2007-10-26 16:35:39-0400 [-] runApp(config) 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/scripts/twistd.py", line 23, in runApp 2007-10-26 16:35:39-0400 [-] _SomeApplicationRunner(config).run() 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/application/app.py", line 158, in run 2007-10-26 16:35:39-0400 [-] self.postApplication() 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/scripts/_twistd_unix.py", line 213, in postApplication 2007-10-26 16:35:39-0400 [-] startApplication(self.config, self.application) 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/scripts/_twistd_unix.py", line 174, in startApplication 2007-10-26 16:35:39-0400 [-] service.IService (application).privilegedStartService() 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/application/service.py", line 228, in privilegedStartService 2007-10-26 16:35:39-0400 [-] service.privilegedStartService() 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/application/service.py", line 228, in privilegedStartService 2007-10-26 16:35:39-0400 [-] service.privilegedStartService() 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/application/internet.py", line 68, in privilegedStartService 2007-10-26 16:35:39-0400 [-] self._port = self._getPort() 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/application/internet.py", line 86, in _getPort 2007-10-26 16:35:39-0400 [-] return getattr(reactor, 'listen'+self.method)(*self.args, **self.kwargs) 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/internet/posixbase.py", line 432, in listenUNIX 2007-10-26 16:35:39-0400 [-] p.startListening() 2007-10-26 16:35:39-0400 [-] File "/volumes/raider/webserver/ documents/tests/Twisted/twisted/internet/unix.py", line 89, in startListening 2007-10-26 16:35:39-0400 [-] raise CannotListenError, (None, self.port, le) 2007-10-26 16:35:39-0400 [-] twisted.internet.error.CannotListenError: Couldn't listen on any:logs/ caldavd.sock: (22, 'Invalid argument'). Which is the same thing I got earlier (At least it's consistent). Other then copying the caldavd-test.plist to caldavd-dev.plist is there ANYTHING else I need to do to get a test calendar working? If someone could let me know I would greatly appreciate it. Thanks! -- Jason Pruim Raoset Inc. Technology Manager MQC Specialist 3251 132nd ave Holland, MI, 49424 www.raoset.com japruim(a)raoset.com

3 5

resourcetype issue
by Joel Leyh 29 Oct '07

29 Oct '07

Greetings. I installed CalenderServer on Freebsd, and started with two users and a location in the accounts file. I tried connecting to a user calender with Sunbird, but I get an error "The resource at ... is a DAV collection but not a CalDAV calendar". This error is caused when Sunbird doesn't detect "calendar" in the resourcetype property CalServer sends back. I verified that "calendar" wasn't in the resourcetype prop via the web interface. I noticed the location I has set up does in fact have the correct property set. Is this a bug, or am I not doing something correctly? The accounts.xml is basically the default with the names changed. Everything else is default. I'm using rev 1797. Thanks

2 2

discovery
by Brandon Keepers 29 Oct '07

29 Oct '07

In my fumbling around with the Calendar Server and the caldav spec, there's one thing I have yet to find, and I'm not sure if I'm just missing it. Does CalDAV and/or the Calendar Server support discovery? Given a calendar server URL, can I discover all the users and resources on the server? Thanks, Brandon

1 0