January 2008 - calendarserver-users

Access Control
by Scott Buchanan 12 Jan '08

12 Jan '08

I've looked quickly though the archives for this list (would be nice to be searchable) but didn't find any information on the following. I've gotten the calendarserver set up and running on our Tiger server. All is working will but I noticed that from iCal, on Leopard, that anyone that can edit the calendar can also DELETE the calendar. In our situation I don't need to control editing but I don't want anyone to accidently delete the entire calendar. I tried editing the permissions of the specific calendar folder but even with no write permissions (555) the server (launched by launchd) would still deleting the entire directory. Any suggestion appreciated. ________________________________________________________ Scott Buchanan DSB Associates e-mail: dscottbuch(a)mac.com 4-D Neuroimaging Tel: (858) 759-9496 Fax: (858) 759-0825 ________________________________________________________

1 0

Re: How to install as system service?
by Toby Rush 11 Jan '08

11 Jan '08

I had trouble installing Calendar Server as a system service using launchd, and I thought I'd share my solution with the list in case there are others out there like me that know just enough to be dangerous. This assumes that you have Calendar Server installed and can launch it manually using "./run -d". As suggested on the list in November, I downloaded Lingon (http://lingon.sourceforge.net ) to simplify the process of creating a launchd service. In Lingon, create a new service and set it as a User Daemon. Enter the following information: Name: com.apple.calendarserver What: /Library/CalendarServer/run -d (if you have CalendarServer installed somewhere else, adjust this appropriately) When: Select "Run it when it is loaded by the system (at startup or login)". If you save this and restart your computer... it won't work! The console reports an "unbound variable" error and the service doesn't start. The cause of this, as near as I can tell, is due to what looks like debugging code in the "run" script. Open CalendarServer/run in a text editor (after making a backup!) and search for the following, toward the end of the script: # # Twisted # case "${USER}" in wsanchez) proto="svn+ssh"; ;; *) proto="svn"; ;; esac; svn_uri="${proto}://svn.twistedmatrix.com/svn/Twisted/branches/dav- acl-1608-4"; svn_get "Twisted" "${twisted}" "${svn_uri}" 19773; The problem (I think) is that USER is not defined when the script is run at startup, but the case statement is in there for debugging purposes; we just need proto set to "svn". So you can delete (or comment out) all but the three lines of the above code: proto="svn"; svn_uri="${proto}://svn.twistedmatrix.com/svn/Twisted/branches/dav- acl-1608-4"; svn_get "Twisted" "${twisted}" "${svn_uri}" 19773; There is one more block of code that checks the USER variable and thus needs to be changed: case "${USER}" in cyrusdaboo) base="svn+ssh://cdaboo@svn.osafoundation.org/svn"; ;; *) base="http://svn.osafoundation.org"; ;; esac; svn_uri="${base}/vobject/branches/users/cdaboo/vavailability-173"; svn_get "vObject" "${vobject}" "${svn_uri}" 178; put_setuptools "${vobject}"; In this case, we need only to initialize the "base" variable, so it can be replaced with this: base="http://svn.osafoundation.org"; svn_uri="${base}/vobject/branches/users/cdaboo/vavailability-173"; svn_get "vObject" "${vobject}" "${svn_uri}" 178; put_setuptools "${vobject}"; Now, maybe this messes something up that I don't understand, but making these changes to the script and restarting seems to do the trick. I hope this helps someone else out as well. ************************************************** Toby W. Rush - toby.rush(a)unco.edu Instructor of Music Theory PVA Webmaster & Technical Operations Manager University of Northern Colorado "Omnia voluntaria est." **************************************************

1 0

Reminder - solution for improper GUID's in Linux
by David Szego 11 Jan '08

11 Jan '08

List folks running Linux: If you're getting something like this: Request Error Access to "New Event" in "calendar" in account "Home Calendars" is not permitted. The server responded: "HTTP/1.1 403 Forbidden" to operation CalDAVScheduleEventQueueableOperation. or [CalDAV Outbox POST] Could not find principal for originator: mailto:whoever@domain.com and your accounts.xml looks something like this: <user> <uid>admin</uid> <guid>admin</guid> <password>admin</password> <name>admin</name> <cuaddr>mailto:admin</cuaddr> </user> Looks like you've got the same problem I ran into... improper GUID's. You need full, system-generated GUID's like: <user> <uid>admin</uid> <guid>16f524a3-356e-54ab-9267-e51ce008e511</guid> <password>admin</password> <cuaddr>mailto:root@thinkcreatesolve.com</cuaddr> <name>Admin</name> </user> If you go to the CalDavd in a web browser (probably http://127.0.0.1:8008 on your Linux server itself), click on "Principals", (you might need your admin password), click on "users", and then click on each user's name, You'll see the following: Principal Details Directory Information --------------------- Directory GUID: 4325319e-0d84-5b06-b703-e45634a2818a Realm: The Family Principal Information --------------------- GUID: 16f524a3-356e-54ab-9267-e51ce008e511 Record type: users Short name: admin Full name: Admin Principal UID: 16f524a3-356e-54ab-9267-e51ce008e511 Principal URL: /principals/__uids__/16f524a3-356e-54ab-9267- e51ce008e511/ It's the "Principal Information: GUID:" line that you'll need in your accounts.xml, for each user. Everything should work fine if you do that! Just a helpful reminder, as someone was asking off-list. Best, David Szego.

1 0

Problem with Calendar server
by Jason Pruim 11 Jan '08

11 Jan '08

Okay, so I tried to add some new users to my calendarserver, so that I could actually connect with others then the Admin account :) and now I am getting the error attached at the end of the email. I've tried to put the accounts-test.xml and accounts.xml files back (Even downloaded them from the server) but I haven't had any luck... Anyone care to take a look at it and give me a hint as to where the extra space or the missing semi-colon is? :) (Been burned by both of those in the past) 2008-01-11 08:42:33-0500 [-] [caldav-8008] [HTTPChannel, 1722,192.168.0.101] PROPFIND /calendars/users/admin/inbox/ HTTP/1.1 2008-01-11 08:42:33-0500 [-] [caldav-8008] [HTTPChannel, 1723,192.168.0.101] PROPFIND /calendars/users/admin/inbox/ HTTP/1.1 2008-01-11 08:42:33-0500 [-] [caldav-8008] [HTTPChannel, 1723,192.168.0.101] 'No principal found for UID: admin' 2008-01-11 08:42:33-0500 [-] [caldav-8008] [HTTPChannel, 1723,192.168.0.101] "Attempt to create clone '/usr/local/ CalendarServer/twistedcaldav/test/data/principals/__uids__/admin' of resource <DirectoryPrincipalUIDProvisioningResource: /usr/local/ CalendarServer/twistedcaldav/test/data/principals/__uids__>" 2008-01-11 08:42:34-0500 [-] [caldav-8008] [HTTPChannel, 1723,192.168.0.101] 'No principal found for UID: admin' 2008-01-11 08:42:34-0500 [-] [caldav-8008] [HTTPChannel, 1723,192.168.0.101] "Attempt to create clone '/usr/local/ CalendarServer/twistedcaldav/test/data/principals/__uids__/admin' of resource <DirectoryPrincipalUIDProvisioningResource: /usr/local/ CalendarServer/twistedcaldav/test/data/principals/__uids__>" 2008-01-11 08:42:34-0500 [-] [caldav-8008] [HTTPChannel, 1723,192.168.0.101] 'No principal found for UID: admin' 2008-01-11 08:42:34-0500 [-] [caldav-8008] [HTTPChannel, 1723,192.168.0.101] "Attempt to create clone '/usr/local/ CalendarServer/twistedcaldav/test/data/principals/__uids__/admin' of resource <DirectoryPrincipalUIDProvisioningResource: /usr/local/ CalendarServer/twistedcaldav/test/data/principals/__uids__>" 2008-01-11 08:42:34-0500 [-] [caldav-8008] [HTTPChannel, 1723,192.168.0.101] 'No principal found for UID: admin' 2008-01-11 08:42:34-0500 [-] [caldav-8008] [HTTPChannel, 1723,192.168.0.101] "Attempt to create clone '/usr/local/ CalendarServer/twistedcaldav/test/data/principals/__uids__/admin' of resource <DirectoryPrincipalUIDProvisioningResource: /usr/local/ CalendarServer/twistedcaldav/test/data/principals/__uids__>" 2008-01-11 08:42:40-0500 [-] [caldav-8008] [HTTPChannel, 1724,192.168.0.101] PROPFIND /principals/users/admin HTTP/1.1 2008-01-11 08:42:51-0500 [-] [caldav-8008] [HTTPChannel, 1725,192.168.0.101] "Attempt to create clone '/usr/local/ CalendarServer/twistedcaldav/test/data/principals/users/japruim' of resource <DirectoryPrincipalTypeProvisioningResource: /usr/local/ CalendarServer/twistedcaldav/test/data/principals/users>" -- Jason Pruim Raoset Inc. Technology Manager MQC Specialist 3251 132nd ave Holland, MI, 49424 www.raoset.com japruim(a)raoset.com

1 0

Rép : [CalendarServer-users] using ical with calendar server...
by jean 10 Jan '08

10 Jan '08

and is it possible to install Open Directory on linux (ubuntu) or is it specific to Mac OSX ? I didn' t find any synaptic packet... jean Le 10 janv. 08 à 15:44, Cyrus Daboo a écrit : > Hi jean, > > --On January 10, 2008 9:18:09 AM +0100 jean <jduffas1(a)free.fr> wrote: > >> but if I open the "Adress Panel" no People or Location or Resource >> I made >> in the accounts.xml appears... >> is that normal ? >> does the Adress Panel works only with the open directory ? (it' s >> writen >> on it "Open Directory Lookup"...) > > iCal uses Open Directory exclusively for its CalDAV address > completion and Address Panel data. > > -- > Cyrus Daboo > >

1 0

Calendar Sharing - ACLs?
by Stephen Bowman 10 Jan '08

10 Jan '08

pretty much default caldavd-dev.plist and accounts-test.xml (so there is users01-99, etc.). What I want is user01 to be able to subscribe (or have read only access at least) to user02's calendar, without knowing user02's login credentials. >From what I've read on the mailing list and other places, the only real way to do that right now is by setting webdav ACLs, and that the best client to do that in is mulberry. So, I've installed mulberry, and attempt to edit access controls and I'm getting: 2008-01-10 09:02:01-0500 [-] [caldav-8181] [AMP,client] PROPFIND /principals/users/user01/calendar-proxy-read/ HTTP/1.1 2008-01-10 09:02:01-0500 [-] [caldav-8181] [-] "Error reading property ('DAV:', 'current-user-privilege-set') for resource /principals/users/user01/calendar-proxy-read/: <StatusResponse 401 Access denied while reading property {DAV:}current-user-privilege-set.>" 2008-01-10 09:02:01-0500 [-] [caldav-8181] [-] 401 response while getting property: ('DAV:', 'current-user-privilege-set') 2008-01-10 09:02:01-0500 [-] [caldav-8181] [AMP,client] PROPFIND /principals/users/user01/calendar-proxy-read/ HTTP/1.1 2008-01-10 09:02:01-0500 [-] [caldav-8181] [-] "Error reading property ('DAV:', 'acl') for resource /principals/users/user01/calendar-proxy-read/: <StatusResponse 401 Access denied while reading property {DAV:}acl.>" 2008-01-10 09:02:01-0500 [-] [caldav-8181] [-] 401 response while getting property: ('DAV:', 'acl') 1) Are ACLs the way to solve my problem? Or is there an easier way to support sharing? Would like to use delegation, but as I understand it, that can only be done by setting up an OD server, etc etc. 2) If ACLs are the way, what could be the problem above? File permissions don't seem to be the problem, as everything is caldavd:caldavd and the server is started up by user caldavd.

2 2

using ical with calendar server...
by jean 10 Jan '08

10 Jan '08

hello, my calendar server is configured to work with the accounts.xml file. I can create calendare and synch them weetwen to computers with no problem. but if I open the "Adress Panel" no People or Location or Resource I made in the accounts.xml appears... is that normal ? does the Adress Panel works only with the open directory ? (it' s writen on it "Open Directory Lookup"...) thank you for your help. jean duffas

2 1

How to invite users not in Open Directory?
by Wade Ford 08 Jan '08

08 Jan '08

We have the Calendar Server setup on Leopard Server and its working great when inviting users contained in the Open Directory. However, when entering an outside user's email address all we get is an "Invalid Attendee" warning. Is it possible to invite users via an email address? wade

1 0

: linux installation on ubuntu 7.10
by jean 08 Jan '08

08 Jan '08

I had some problems to manage to install Calendar Server on Ubuntu 7.10, but I managed to, I hope this will help some peoples : I had made a first mistake, I forgot to install "patch". then I had this error : --------------------- xattr/build/lib.linux-i586-2.5/xattr/__init__.py", line 16, in _func 2008-01-07 09:53:09-0500 [-] [caldav-8008] [-] return func(first, *args) 2008-01-07 09:53:09-0500 [-] [caldav-8008] [-] IOError: [Errno 95] Operation not supported: '/home/fit/CalendarServer/twistedcaldav/test/ data' --------------------- mwacker answerd me this : --- This means the directory where you put your darwin calendar datas '/home/fit/CalendarServer/twistedcaldav/test/ data' doesn't support extended attributes (what i called File System meta-data extension in my previous message). This means you didn't follow steps 2.1 or 2.2 correctly from my howto. Explanation : WebDAV protocol (and also CalDAV which is an extension of it) manage meta-data for URI. Darwin Calendar meta-data management relies on File System meta-data, which are optional settings on Linux. This specials settings are described in section 2.1 and 2.2 of my howto. I think you'd better replay the howto carrefully from the begining before posting here. I know it works because other people claimed it. I'll help you more, if needed, after this (even in french if you want ;-). --- then, I could not connect from an other computer on the same network, to the calendar server. the problem : I had made a bad config file,  had to be empty, and not set to 127.0.0.1 as it was. now, evrything work great, but I would like to disconnect the verbose option for loggin, is that possible, and what are the different options ? jean

1 0

Re: [CalendarServer-users] installing on Ubuntu, error...
by mwacker＠linagora.com 07 Jan '08

07 Jan '08

Hi, I'm the humble author of the Linux Howto Tuto you mentioned. I can't correctly help you since your problem seems to be a twisted configuration realted (As far as i can read the log). I don't think it's even Linux related (the only non trivial part of the howto is correct File System configuration, with meta-data extensions). I hope some python/twisted specialist on this list (i'm not) will easily find what's your problem. If not, i plan to upgrade my own ubuntu to 7.10 in short delay and i'll update the howto, if needed. > hi ! > > trying to install Calendar Server on Ubuntu 7.10 > > I used this tutorial : > http://trac.calendarserver.org/projects/calendarserver/wiki/QuickStart > > and this one : > http://www.mail-archive.com/calendarserver-users@lists.macosforge.org/msg00… > > when doing ./run -s everything seems to be ok. > > then when doing ./run I got this error, any idea ? > > thank you. > > jean duffas > > > > > fit@fit-PC:~/CalendarServer$ ./run > Traceback (most recent call last): > File "/home/fit/Twisted/twisted/application/app.py", line 354, in > parseOptions > usage.Options.parseOptions(self, options) > File "/home/fit/Twisted/twisted/python/usage.py", line 184, in > parseOptions > for (cmd, short, parser, doc) in self.subCommands: > File "/home/fit/Twisted/twisted/application/app.py", line 364, in > subCommands > for plug in plugins: > File "/home/fit/Twisted/twisted/plugin.py", line 186, in getPlugins > allDropins = getCache(package) > --- <exception caught here> --- > File "/home/fit/Twisted/twisted/plugin.py", line 151, in getCache > provider = pluginModule.load() > File "/home/fit/Twisted/twisted/python/modules.py", line 378, in load > return self.pathEntry.pythonPath.moduleLoader(self.name) > File "/home/fit/Twisted/twisted/python/modules.py", line 614, in > moduleLoader > return self._moduleLoader(modname) > File "/home/fit/Twisted/twisted/python/reflect.py", line 361, in > namedAny > topLevelPackage = __import__(trialname) > File "/home/fit/CalendarServer/twisted/plugins/caldav.py", line 1, > in <module> > from twistedcaldav.tap import CalDAVServiceMaker > File "/home/fit/CalendarServer/twistedcaldav/tap.py", line 45, in > <module> > from twistedcaldav.resource import CalDAVResource > File "/home/fit/CalendarServer/twistedcaldav/resource.py", line 35, > in <module> > from twisted.web2.dav.idav import IDAVPrincipalCollectionResource > exceptions.ImportError: cannot import name > IDAVPrincipalCollectionResource > Traceback (most recent call last): > File "/home/fit/Twisted/twisted/python/usage.py", line 373, in __str__ > return self.getSynopsis() + '\n' + self.getUsage(width=None) > File "/home/fit/Twisted/twisted/python/usage.py", line 407, in > getUsage > for (cmd, short, parser, desc) in self.subCommands: > File "/home/fit/Twisted/twisted/application/app.py", line 364, in > subCommands > for plug in plugins: > File "/home/fit/Twisted/twisted/plugin.py", line 186, in getPlugins > allDropins = getCache(package) > --- <exception caught here> --- > File "/home/fit/Twisted/twisted/plugin.py", line 151, in getCache > provider = pluginModule.load() > File "/home/fit/Twisted/twisted/python/modules.py", line 378, in load > return self.pathEntry.pythonPath.moduleLoader(self.name) > File "/home/fit/Twisted/twisted/python/modules.py", line 614, in > moduleLoader > return self._moduleLoader(modname) > File "/home/fit/Twisted/twisted/python/reflect.py", line 361, in > namedAny > topLevelPackage = __import__(trialname) > File "/home/fit/CalendarServer/twisted/plugins/caldav.py", line 1, > in <module> > from twistedcaldav.tap import CalDAVServiceMaker > File "/home/fit/CalendarServer/twistedcaldav/__init__.py", line 59, > in <module> > import twistedcaldav.customxml > File "/home/fit/CalendarServer/twistedcaldav/customxml.py", line 26, > in <module> > from twisted.web2.dav.resource import twisted_dav_namespace > File "/home/fit/Twisted/twisted/web2/dav/resource.py", line 51, in > <module> > from twisted.web2.http import HTTPError, RedirectResponse, > StatusResponse > File "/home/fit/Twisted/twisted/web2/http.py", line 462, in <module> > components.registerAdapter(compat.makeOldRequestAdapter, > iweb.IRequest, iweb.IOldRequest) > File "/home/fit/Twisted/twisted/python/components.py", line 87, in > registerAdapter > raise ValueError("an adapter (%s) was already registered." % > (factory, )) > exceptions.ValueError: an adapter (<function makeOldRequestAdapter at > 0x84acf0c>) was already registered. > Usage: twistd [options] > Options: > --savestats save the Stats object rather than the text > output of > the profiler. > -o, --no_save do not save state on shutdown > -e, --encrypted The specified tap/aos/xml file is encrypted. > --nothotshot Don't use the 'hotshot' profiler even if it's > available. > -n, --nodaemon don't daemonize > -q, --quiet No-op for backwards compatability. > --originalname Don't try to change the process name > --syslog Log to syslog, not to file > --euid Set only effective user-id rather than real > user-id. > (This option has no effect unless the server > is running > as root, in which case it means not to shed all > privileges after binding ports, retaining the > option to > regain privileges in cases such as spawning > processes. > Use with caution.) > -l, --logfile= log to a specified file, - for stdout > -p, --profile= Run in profile mode, dumping results to > specified file > -f, --file= read the given .tap file [default: twistd.tap] > -y, --python= read an application from within a Python file > (implies > -o) > -x, --xml= Read an application from a .tax file (Marmalade > format). > -s, --source= Read an application from a .tas file (AOT > format). > -d, --rundir= Change to a supplied directory before running > [default: > .] > --report-profile= E-mail address to use when reporting dynamic > execution > profiler stats. This should not be combined > with other > profiling options. This will only take effect > if the > application to be run has an application name. > --prefix= use the given prefix when syslogging > [default: twisted] > --pidfile= Name of the pidfile [default: twistd.pid] > --chroot= Chroot to a supplied directory before running > -u, --uid= The uid to run as. > -g, --gid= The gid to run as. > --help-reactors Display a list of possibly available reactor > names. > --version Print version information and exit. > --spew Print an insanely verbose log of everything > that > happens. Useful when debugging freezes or > locks in > complex code. > -b, --debug run the application in the Python Debugger > (implies > nodaemon), sending SIGUSR2 will drop into > debugger > -r, --reactor= Which reactor to use (see --help-reactors for > a list of > possibilities) > --help Display this help and exit. > Commands: > web2 An HTTP/1.1 web server that can serve from a > filesystem or > application resource. > ftp An FTP server. > telnet A simple, telnet-based remote debugging service. > socks A SOCKSv4 proxy service. > manhole-old An interactive remote debugger service. > portforward A simple port-forwarder. > web A general-purpose web server which can serve from a > filesystem or application resource. > inetd An inetd(8) replacement. > news A news server. > words A modern words server > toc An AIM TOC service. > dns A domain name server. > mail An email service > manhole An interactive remote debugger service accessible > via > telnet and ssh and providing syntax coloring and > basic line > editing functionality. > conch A Conch SSH service. > > /home/fit/Twisted/bin/twistd: Unknown command: caldav > _______________________________________________ > calendarserver-users mailing list > calendarserver-users(a)lists.macosforge.org > http://lists.macosforge.org/mailman/listinfo/calendarserver-users >

3 2