December 2007 - calendarserver-users

Kerberos Issue / Principals / Authentication
by Doug O'Connor 17 Jul '08

17 Jul '08

Hello, I'm having trouble getting Kerberos to run, it breaks when I do the ./ run script (could not start kerberos). All the directories under the XML service seem to set up okay, but access is denied even to admin/ admin logons from iCal 3.0 and anything else, and I suspect the Kerberos failure to be the issue. Please advise? BTW, logging in using Firefox to browse the directories works fine, it accepts the account uid/pwds from the accounts.xml file (which I've configured for use in the caldavd-dev.plist) in a pull-down dialogue box. It's using WebDAV/CalDAV clients that won't work for authentication. I get any mode of access denied or error 403 messages. When I check the server log output, it can't find principals for even "admin." After "No principal found for admin" it attempts to clone the __uids__/admin of resource <DirectoryPrincipalUIDPrivisioningResources....>. I tried manually building PyKerberos, and it referred me to do things in the kerberos.app that didn't work for me. The Edit-->Edit Realms didn't do anything, which means that Kerberos app isn't running right either. I could be wildly confused on this whole thing, so I apologize if I'm missing anything obvious here. The important thing is that I can't get anybody to authenticate when using a WebDAV/CalDAV client. Thanks, Doug O'Connor 111 East Avenue, Apt. 331 Rochester, NY 14604 301.437.8715 music(a)dougoconnor.com http://www.dougoconnor.com

4 7

Re: [CalendarServer-users] delegation help?
by Joe Auty 06 Apr '08

06 Apr '08

Makes perfect sense, thanks! My only questions are what does the auto-schedule flag do, and how did you discover this? Is there a source of documentation I was not aware of? On Nov 9, 2007, at 5:34 AM, Damion Theobald wrote: > Hi, > > I have setup some delegation with my setup. I edited the account.xml > file > and have added the entry like this > > <location> > <uid>1stdelegate</uid> > <password>password</password> > <name>1stdelegate</name> > <auto-schedule/> > <proxies> > <member type="users">uid1</member> > <member type="users">uid2</member> > <member type="users">uid3</member> > </proxies> > </location> > <location> > <uid>2nddelegate</uid> > <password>password</password> > <name>2nddelegate</name> > <auto-schedule/> > <proxies> > <member type="users">uid1</member> > <member type="users">uid2</member> > <member type="users">uid3</member> > <member type="users">uid4</member> > </proxies> > </location> > > In this instance uid1, uid2, uid3, would be able to delegate to, > '1stdelegate', and '2nddelegate', but uid4 would only be able to > delegate to > '2nddelegate' > > > >> -----Original Message----- >> From: calendarserver-users-bounces(a)lists.macosforge.org >> [mailto:calendarserver-users-bounces@lists.macosforge.org] On >> Behalf Of >> Joe Auty >> Sent: 09 November 2007 06:29 >> To: calendarserver-users(a)lists.macosforge.org >> Subject: [CalendarServer-users] delegation help? >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Hello, >> >> I've setup the Darwin Calendar Server and it appears to be working >> fine in terms of reading and writing to user calendars. I would like >> to setup delegation, but I'm a little bit confused as to how this >> works. Would setting up the sudoers.plist file be required? If so, >> could somebody kindly explain how this would work? I tried adding my >> user/pass to this file, this produced error messages such as the >> following: >> >> Cannot authenticate proxy user without X-Authorize-As header >> >> I'm not using Kerberos or Open Directory right now, just the XML >> files >> for the time being... What does happen in iCal when I go to Manage >> Access to my Account and I enter a username for another user defined >> in the accounts-test.xml file is a "cannot find user" error dialog. >> >> Is there any place I can find a quick tutorial on delegate control, >> or >> am I already very close? >> >> >> >> >> >> >> >> - ----------- >> Joe Auty >> NetMusician: web publishing software for musicians >> http://www.netmusician.org >> joe(a)netmusician.org >> >> >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1.4.7 (Darwin) >> >> iD8DBQFHM/4+CgdfeCwsL5ERAjxtAJ46jeozGVgpfxnVInI0Eqch6QTQFACggOL2 >> D2agCRLRUXEwoqCgyzb60p4= >> =PeoF >> -----END PGP SIGNATURE----- >> _______________________________________________ >> calendarserver-users mailing list >> calendarserver-users(a)lists.macosforge.org >> http://lists.macosforge.org/mailman/listinfo/calendarserver-users > >

7 21

ACL from iCal on Leopard?
by Leonard Budney 10 Feb '08

10 Feb '08

Hello! I've set up calendar server successfully and created a personal calendar. I've also created a user for my wife, and tried to give her access to my calendar, but without success. In iCal on Leopard 9a559, I went to preferences-->accounts-- >delegation and clicked "refresh," but the "accounts I can access" list is empty. Then I clicked "edit" near "manage access to my account," and then clicked the (+) on the popup window, typed my wife's user name and clicked "done." iCal responded, "cannot enable access to your account: 'julie' was not found." One thing I noticed was that clicking "search again" and "done" repeatedly did not produce ANY requests to the calendar server. I'd have thought iCal would connect to the server to ask about user "julie," but apparently not. How can I give her access to my calendar, either through the client or by editing config files on the server? Thanks! Len. ---- The urge to save humanity is almost always a false-face for the urge to rule it. --H. L. Mencken

3 3

Re: [CalendarServer-users] moving calendars
by John McAdams 30 Dec '07

30 Dec '07

I was able to move my calendar to a new host. I used "tar cvf" to archive the old calendar. The archive was moved using the Mac OS Finder to a USB drive. Then a Remote Access copy to the new computer on a different network. I unpacked the archive on the new host. My calendar had already been established on the new host. I put the old .ics files into my calendar/username folder. I ran "ls -l@" and all the old xattrs were present. The username and group had changed however, so I set them back to _calendar:_calendar. I refreshed the calendar on the client and the appointments appeared. This is great. Moving and restoring files is simple if all the attributes are intact. Next I'd like to set up some rsync scripts for backup. If anybody has some sample scripts please post. Best regards, -- jmca On Dec 20, 2007, at 10:23 AM, Cyrus Daboo wrote: > Hi John, > > --On December 20, 2007 1:36:56 AM -0500 John McAdams <johnemac(a)tekserve.com > > wrote: > >>> Are you using OS X server with an OpenDirectory accounting system, >>> or the open source server with xml files for accounts? >> >> OS X Server. The pre-production server was connected to an OD >> Master. All >> the user accounts have calendar enabled on the OD Master. We will >> use the >> same OD Master in production. > > OK, in all likelihood you should not have a problem if you switch > the ip/hostname. However, you will probably need to restart that > machine and/or possibly re-bind it to the OD master if you used > authenticated binding. > > Let me know if you run into any problems with this. > >>> >>> >>> If using OS X and you change the hostname, you may need to re-enable >>> calendaring for each user for the new host. >>> >>> If using XML accounts, then you should not need to change anything. >>> >>> -- >>> Cyrus Daboo >>> >>> >> >> I was wondering about the xattr on the files. When I run ls -l@ I see >> some webdav acls. I'd like to learn more about backing up and >> restoring >> the files and repairing their permissions in case something goes >> wrong. > > For backup/restore you definitely need to make sure any tool you use > is capable of backing up the xattrs. Most command line tools have > been enhanced to support that (tar for example). > > WRT repairs - right now we do not have any specific tools for doing > that. You can manually list or change xattr's using the xattr > command line utility, though a recent change we did to the server > where we store compressed values in xattrs, will mean you cannot > easily do this. However, we do have our own version of the xattr > tool on theopen source site that includes an option to deal with the > compression. > > Obviously we are keen to know what sort of admin tools are going to > be required in use, so if you run into a need for anything please > let us know. In the short term at least, we can probably help out > with a python script to fix things up if needed. > > -- > Cyrus Daboo > >

2 1

Unix admins guide to setting up caldav on the mac?
by Nickolas Gray 28 Dec '07

28 Dec '07

Hi, I am unclear as how to setup the CalDav as a daemon? I take it has something to do with "lauchd" which appears to be some sort of init program. Is there a guide specifically telling you how to start CalDav when the system starts. Also is there any other documentation specific to CalendarServer and a small setup that would be useful for a small office or a as a family calendar server. Nick

2 2

moving calendars
by John McAdams 20 Dec '07

20 Dec '07

Hi List, I'm moving from a pre-production to a production server. Any tips on moving the calendars? The IP and host name are changing. Best regards, -- jmca

2 1

User invitation with a new setup
by Guillaume Gautreau 14 Dec '07

14 Dec '07

Hi, I'm currently testing the darwin calendar server. I installed and ran this server successfully and started to test it. I could manage calendars for users created by default : user01 to user99. I'm currently using the xmldirectory service in order to test the server. But I currently can not invite any user to an event. Using iCal on Mac OS X for example, suscribing to calendars as user01, I can not invite any user as user02. Users are not recognized by the system, and I don't know the reason. Are the accounts managed by darwin calendar server ? Thanks for helping me -- Guillaume Gautreau Responsable projets SI Bureau P-417 Tel : +33 (0)1.64.15.33.22 Ecole des ponts 6 et 8 avenue Blaise Pascal - Cité Descartes Champs-sur-Marne - 77455 Marne la Vallée cedex 2 Ce message a été signé numériquement avec GnuPG.

1 0

attendee lookup
by Greg Philpott 14 Dec '07

14 Dec '07

We just installed the calserver on linux and are using the xml version. we have set up a few test accounts and they seem to work fine. You can book meetings, see the other persons calendar conflicts in the availability view in ical for example. The key issue we have is that when using ical 3 on 10.5 and we enter an attendee, the only way it will work is if I enter the users email address and not their name. Is there any way to get the dcs to behave like using ical and a local address book? Is there a way to set it up so that when a user enters a few letters of a user's name in the attendee box it looks it up and presents the full name? Or better yet have dcs present its dcs addresses in ical so you can drag them onto the calendar? While dsc works, it is not convenient to have to know a user's email address and have to enter it completely in the attendee list before dcs tells you if it is a valid user. Finally is there a front end console that makes it easier to create and edit user xml files? I am sure we are doing something wrong just not sure what. Greg

3 3

Re: [CalendarServer-users] Darwin Calendar Server on Linux - Howto
by Cyrus Daboo 14 Dec '07

14 Dec '07

Hi Florian, --On December 13, 2007 12:38:26 PM +0100 Florian Sonnenschein <Florian.Sonnenschein(a)eum.de> wrote: > src/kerberos.c:19:27: error: Python/Python.h: Datei oder Verzeichnis > nicht gefunden Change that line in the file so that the include file is just "Python.h" and not "Python/Python.h". We need to figure out a better way to deal with the different include paths of OS X and linux. -- Cyrus Daboo

3 2

small company setup
by Terry Barnum 13 Dec '07

13 Dec '07

I've installed DCS on Tiger Server and have it working with the default settings. I can log in via Sunbird and create a calendar with the admin account, but I'm ashamed to say that I'm having a hard time wrapping my head around the structure and the setup needed for my small company of 20 Panther and Tiger users. For the last nine years we've been using Now up to Date, which has worked relatively well for the types of scheduling we do (we're a video post production facility). The setup is pretty basic: about 40 categories that represent edit bays, camera packages, conference rooms, etc. as well as about a dozen people's schedules. We don't use meeting scheduling and it's not tied into email or contacts. Everyone can make changes to anyone else's events (something I'd like to change) and can see all categories. I'm eager to play with DCS and edit the default XML and plist files, but I'm stumbling on the setup of locations, resources and group memberships. I've looked through the email archives and followed the links on the site, which are all quite helpful, but just not quite simple enough for a calendar newbie like myself. Is there any kind of write up or How-to for someone in my situation? Thanks, -Terry

1 0