November 2007 - calendarserver-users

Kerberos Issue / Principals / Authentication
by Doug O'Connor 17 Jul '08

17 Jul '08

Hello, I'm having trouble getting Kerberos to run, it breaks when I do the ./ run script (could not start kerberos). All the directories under the XML service seem to set up okay, but access is denied even to admin/ admin logons from iCal 3.0 and anything else, and I suspect the Kerberos failure to be the issue. Please advise? BTW, logging in using Firefox to browse the directories works fine, it accepts the account uid/pwds from the accounts.xml file (which I've configured for use in the caldavd-dev.plist) in a pull-down dialogue box. It's using WebDAV/CalDAV clients that won't work for authentication. I get any mode of access denied or error 403 messages. When I check the server log output, it can't find principals for even "admin." After "No principal found for admin" it attempts to clone the __uids__/admin of resource <DirectoryPrincipalUIDPrivisioningResources....>. I tried manually building PyKerberos, and it referred me to do things in the kerberos.app that didn't work for me. The Edit-->Edit Realms didn't do anything, which means that Kerberos app isn't running right either. I could be wildly confused on this whole thing, so I apologize if I'm missing anything obvious here. The important thing is that I can't get anybody to authenticate when using a WebDAV/CalDAV client. Thanks, Doug O'Connor 111 East Avenue, Apt. 331 Rochester, NY 14604 301.437.8715 music(a)dougoconnor.com http://www.dougoconnor.com

4 7

Re: [CalendarServer-users] delegation help?
by Joe Auty 06 Apr '08

06 Apr '08

Makes perfect sense, thanks! My only questions are what does the auto-schedule flag do, and how did you discover this? Is there a source of documentation I was not aware of? On Nov 9, 2007, at 5:34 AM, Damion Theobald wrote: > Hi, > > I have setup some delegation with my setup. I edited the account.xml > file > and have added the entry like this > > <location> > <uid>1stdelegate</uid> > <password>password</password> > <name>1stdelegate</name> > <auto-schedule/> > <proxies> > <member type="users">uid1</member> > <member type="users">uid2</member> > <member type="users">uid3</member> > </proxies> > </location> > <location> > <uid>2nddelegate</uid> > <password>password</password> > <name>2nddelegate</name> > <auto-schedule/> > <proxies> > <member type="users">uid1</member> > <member type="users">uid2</member> > <member type="users">uid3</member> > <member type="users">uid4</member> > </proxies> > </location> > > In this instance uid1, uid2, uid3, would be able to delegate to, > '1stdelegate', and '2nddelegate', but uid4 would only be able to > delegate to > '2nddelegate' > > > >> -----Original Message----- >> From: calendarserver-users-bounces(a)lists.macosforge.org >> [mailto:calendarserver-users-bounces@lists.macosforge.org] On >> Behalf Of >> Joe Auty >> Sent: 09 November 2007 06:29 >> To: calendarserver-users(a)lists.macosforge.org >> Subject: [CalendarServer-users] delegation help? >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Hello, >> >> I've setup the Darwin Calendar Server and it appears to be working >> fine in terms of reading and writing to user calendars. I would like >> to setup delegation, but I'm a little bit confused as to how this >> works. Would setting up the sudoers.plist file be required? If so, >> could somebody kindly explain how this would work? I tried adding my >> user/pass to this file, this produced error messages such as the >> following: >> >> Cannot authenticate proxy user without X-Authorize-As header >> >> I'm not using Kerberos or Open Directory right now, just the XML >> files >> for the time being... What does happen in iCal when I go to Manage >> Access to my Account and I enter a username for another user defined >> in the accounts-test.xml file is a "cannot find user" error dialog. >> >> Is there any place I can find a quick tutorial on delegate control, >> or >> am I already very close? >> >> >> >> >> >> >> >> - ----------- >> Joe Auty >> NetMusician: web publishing software for musicians >> http://www.netmusician.org >> joe(a)netmusician.org >> >> >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1.4.7 (Darwin) >> >> iD8DBQFHM/4+CgdfeCwsL5ERAjxtAJ46jeozGVgpfxnVInI0Eqch6QTQFACggOL2 >> D2agCRLRUXEwoqCgyzb60p4= >> =PeoF >> -----END PGP SIGNATURE----- >> _______________________________________________ >> calendarserver-users mailing list >> calendarserver-users(a)lists.macosforge.org >> http://lists.macosforge.org/mailman/listinfo/calendarserver-users > >

7 21

ACL from iCal on Leopard?
by Leonard Budney 10 Feb '08

10 Feb '08

Hello! I've set up calendar server successfully and created a personal calendar. I've also created a user for my wife, and tried to give her access to my calendar, but without success. In iCal on Leopard 9a559, I went to preferences-->accounts-- >delegation and clicked "refresh," but the "accounts I can access" list is empty. Then I clicked "edit" near "manage access to my account," and then clicked the (+) on the popup window, typed my wife's user name and clicked "done." iCal responded, "cannot enable access to your account: 'julie' was not found." One thing I noticed was that clicking "search again" and "done" repeatedly did not produce ANY requests to the calendar server. I'd have thought iCal would connect to the server to ask about user "julie," but apparently not. How can I give her access to my calendar, either through the client or by editing config files on the server? Thanks! Len. ---- The urge to save humanity is almost always a false-face for the urge to rule it. --H. L. Mencken

3 3

No virtual host found for iCal service
by Jacco Rens 04 Dec '07

04 Dec '07

Hi, I'm trying to get iCal server running on a Mac OS X 10.5.0 server machine, but iCal server barfs only the following error: No virtual host found for iCal service More information about configuring the iCal Service and connecting this server to a directory server can be found in the Help menu. My machine is an open directory master, so that should not be the prob. It has also an FQDN, and can resolve itself. I don't know what kind of vhost iCal is looking for, APache, postfix or something else!? Any knowlegde where to look at? I only modified the BindAddresses in caldavd.plist so far. here's caldavd.plist: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd "> <plist version="1.0"> <dict> <key>AccessLogFile</key> <string>/var/log/caldavd/access.log</string> <key>AdminPrincipals</key> <array/> <key>Authentication</key> <dict> <key>Basic</key> <dict> <key>Enabled</key> <false/> </dict> <key>Digest</key> <dict> <key>Algorithm</key> <string>md5</string> <key>Enabled</key> <true/> <key>Qop</key> <string></string> </dict> <key>Kerberos</key> <dict> <key>Enabled</key> <false/> <key>ServicePrincipal</key> <string></string> </dict> </dict> <key>BindAddresses</key> <array> <string>192.168.20.2</string> </array> <key>BindHTTPPorts</key> <array/> <key>BindSSLPorts</key> <array/> <key>ControlSocket</key> <string>/var/run/caldavd.sock</string> <key>DataRoot</key> <string>/var/run/caldavd</string> <key>DirectoryService</key> <dict> <key>params</key> <dict> <key>node</key> <string>/Search</string> <key>requireComputerRecord</key> <true/> </dict> <key>type</key> < string >twistedcaldav.directory.appleopendirectory.OpenDirectoryService</ string> </dict> <key>DocumentRoot</key> <string>/Library/CalendarServer/Documents</string> <key>EnableDropBox</key> <true/> <key>EnableNotifications</key> <true/> <key>EnableProxyPrincipals</key> <true/> <key>EnableSACLs</key> <true/> <key>ErrorLogFile</key> <string>/var/log/caldavd/error.log</string> <key>GroupName</key> <string>calendar</string> <key>HTTPPort</key> <integer>8008</integer> <key>MaximumAttachmentSize</key> <integer>1048576</integer> <key>MultiProcess</key> <dict> <key>ProcessCount</key> <integer>0</integer> </dict> <key>PIDFile</key> <string>/var/run/caldavd.pid</string> <key>ProcessType</key> <string>Combined</string> <key>ResponseCompression</key> <true/> <key>RotateAccessLog</key> <false/> <key>SSLAuthorityChain</key> <string></string> <key>SSLCertificate</key> <string>/etc/certificates/home.jaccorens.com.crt</string> <key>SSLPort</key> <integer>8443</integer> <key>SSLPrivateKey</key> <string>/etc/certificates/home.jaccorens.com.key</string> <key>ServerHostName</key> <string>home.jaccorens.com</string> <key>ServerStatsFile</key> <string>/var/run/caldavd/stats.plist</string> <key>SudoersFile</key> <string>/etc/caldavd/sudoers.plist</string> <key>UserName</key> <string>calendar</string> <key>UserQuota</key> <integer>104857600</integer> <key>Verbose</key> <false/> </dict> </plist>

3 2

E-mail Alarms for delegated calendar
by Damion Q Theobald 03 Dec '07

03 Dec '07

Hi, I am running the calendar server successfully on a Linux server and have setup a calendar for one user that is delegated by another user. I am however now trying to get the delegated calendar to setup an, alarm e-mail, before an event but it is not working. The e-mail alarms are working correctly for calendars owned by the user but not for the calendar that they are a delegate to. Any ideas? Regards Damion

2 1

Plone Improvement Proposal (PLIP) re event handling and CalDAV: invitation
by Graham Perrin 30 Nov '07

30 Nov '07

With apologies for cross-posting: I have been invited to draft a Plone Improvement Proposal regarding: * Plone CMS handling of event objects * CalDAV. For further information please visit <http://omnium.freeman-centre.ac.uk/~gjp22/2007/11/24/plip-caldav.html>

2 1

Lost newbie: Can't access via IP address although localhost works
by Steven Chan 29 Nov '07

29 Nov '07

Hi, folks, Newbie warning: you may need to speak slooowly to be understood, as my UNIX skills are still nascent... ;-) I've installed Calendar Server from today's trunk on Leopard desktop client 10.5.1 (not OS X Server). It compiled fine and runs without errors. I haven't altered the default caldavd-dev.plist. My Leopard client is connected to a D-Link 624 via DHCP, where it's been given an IP of 192.168.0.102. What works: -------------- I can connect to it via iCal 3.0.1 (1205) using admin/admin against http://localhost:8008 . I've been able to create a couple of new CalDAV calendars using my local iCal client and the admin/admin account. I can also connect via Firefox 2.x against http://localhost:8008 and https://localhost:8443 . So far so good. Substituting 127.0.0.1 for in both test cases work as expected, too. What doesn't work: ---------------------- My local network IP address is 192.168.0.102. I cannot access the Calendar Server via http://192.168.0.102:8008. I can ping this address using Network Utility running locally as well as from other Macs. This fails locally in Firefox with the following error: "Firefox can't establish a connection to the server at 192.168.0.102:8008." This fails locally in iCal with the following error: "Account information not found. Connection to the server 192.168.0.102 was refused." Can anyone shed some light on why requests to localhost work but requests to my explicit IP fail? Regards, Steven

3 5

How to install as system service?
by Stonewall Ballard 29 Nov '07

29 Nov '07

I want to run CalendarServer on a non-server Leopard Mac. I've built it and it works fine when run from my account. I didn't see any instructions on installing it as a system service, but the run file has an installation switch, so I installed it to /, which puts parts in various, sensible places. In the contrib directory, there is a launchd/calendarserver.plist file, which has different paths to the parts. I edited it and put it in the right place, but it didn't work. I couldn't find any log of why that was, so I tried running "sudo /usr/local/bin/caldavd -X" from a terminal window, and got an error: "/usr/local/bin/twistd: Wrong number of arguments". I can't tell from the caldavd or the twistd file why this might be. I get this same error when running caldavd from my build directory, but not if I run "run". I hope that an installer (or a MacPort) will be available soon, but I'd like to know if this is supposed to work. The differences between the launchd plist and the run install paths make me worry that this is just incomplete. I also noted that somewhere it says to use user & group "calendar", but I have not created those yet, if it matters. I'm just testing caldavd with sudo. Can someone please tell me how to install and run CalendarServer as a system service? Thanks very much. - Stoney -- Stonewall Ballard stoney(a)sb.org http://stoney.sb.org/

6 7

Problems to setup Calendar Server
by Håkan Axelsson 27 Nov '07

27 Nov '07

2 4

tutorial
by jean 18 Nov '07

18 Nov '07

hello, is there a good tutorial on how to configure ical server ? i have found : http://trac.macosforge.org/projects/calendarserver/wiki/DirectoryService but i would like to find a more complete and more explicated tutorial. jean

2 1