February 2008 - calendarserver-users

Kerberos Issue / Principals / Authentication
by Doug O'Connor 17 Jul '08

17 Jul '08

Hello, I'm having trouble getting Kerberos to run, it breaks when I do the ./ run script (could not start kerberos). All the directories under the XML service seem to set up okay, but access is denied even to admin/ admin logons from iCal 3.0 and anything else, and I suspect the Kerberos failure to be the issue. Please advise? BTW, logging in using Firefox to browse the directories works fine, it accepts the account uid/pwds from the accounts.xml file (which I've configured for use in the caldavd-dev.plist) in a pull-down dialogue box. It's using WebDAV/CalDAV clients that won't work for authentication. I get any mode of access denied or error 403 messages. When I check the server log output, it can't find principals for even "admin." After "No principal found for admin" it attempts to clone the __uids__/admin of resource <DirectoryPrincipalUIDPrivisioningResources....>. I tried manually building PyKerberos, and it referred me to do things in the kerberos.app that didn't work for me. The Edit-->Edit Realms didn't do anything, which means that Kerberos app isn't running right either. I could be wildly confused on this whole thing, so I apologize if I'm missing anything obvious here. The important thing is that I can't get anybody to authenticate when using a WebDAV/CalDAV client. Thanks, Doug O'Connor 111 East Avenue, Apt. 331 Rochester, NY 14604 301.437.8715 music(a)dougoconnor.com http://www.dougoconnor.com

4 7

Re: [CalendarServer-users] delegation help?
by Joe Auty 06 Apr '08

06 Apr '08

Makes perfect sense, thanks! My only questions are what does the auto-schedule flag do, and how did you discover this? Is there a source of documentation I was not aware of? On Nov 9, 2007, at 5:34 AM, Damion Theobald wrote: > Hi, > > I have setup some delegation with my setup. I edited the account.xml > file > and have added the entry like this > > <location> > <uid>1stdelegate</uid> > <password>password</password> > <name>1stdelegate</name> > <auto-schedule/> > <proxies> > <member type="users">uid1</member> > <member type="users">uid2</member> > <member type="users">uid3</member> > </proxies> > </location> > <location> > <uid>2nddelegate</uid> > <password>password</password> > <name>2nddelegate</name> > <auto-schedule/> > <proxies> > <member type="users">uid1</member> > <member type="users">uid2</member> > <member type="users">uid3</member> > <member type="users">uid4</member> > </proxies> > </location> > > In this instance uid1, uid2, uid3, would be able to delegate to, > '1stdelegate', and '2nddelegate', but uid4 would only be able to > delegate to > '2nddelegate' > > > >> -----Original Message----- >> From: calendarserver-users-bounces(a)lists.macosforge.org >> [mailto:calendarserver-users-bounces@lists.macosforge.org] On >> Behalf Of >> Joe Auty >> Sent: 09 November 2007 06:29 >> To: calendarserver-users(a)lists.macosforge.org >> Subject: [CalendarServer-users] delegation help? >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Hello, >> >> I've setup the Darwin Calendar Server and it appears to be working >> fine in terms of reading and writing to user calendars. I would like >> to setup delegation, but I'm a little bit confused as to how this >> works. Would setting up the sudoers.plist file be required? If so, >> could somebody kindly explain how this would work? I tried adding my >> user/pass to this file, this produced error messages such as the >> following: >> >> Cannot authenticate proxy user without X-Authorize-As header >> >> I'm not using Kerberos or Open Directory right now, just the XML >> files >> for the time being... What does happen in iCal when I go to Manage >> Access to my Account and I enter a username for another user defined >> in the accounts-test.xml file is a "cannot find user" error dialog. >> >> Is there any place I can find a quick tutorial on delegate control, >> or >> am I already very close? >> >> >> >> >> >> >> >> - ----------- >> Joe Auty >> NetMusician: web publishing software for musicians >> http://www.netmusician.org >> joe(a)netmusician.org >> >> >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1.4.7 (Darwin) >> >> iD8DBQFHM/4+CgdfeCwsL5ERAjxtAJ46jeozGVgpfxnVInI0Eqch6QTQFACggOL2 >> D2agCRLRUXEwoqCgyzb60p4= >> =PeoF >> -----END PGP SIGNATURE----- >> _______________________________________________ >> calendarserver-users mailing list >> calendarserver-users(a)lists.macosforge.org >> http://lists.macosforge.org/mailman/listinfo/calendarserver-users > >

7 21

Installing on Leopard client
by Scott Buchanan 06 Mar '08

06 Mar '08

Hi, Are there a clear set of instructions on how to install and configure Calendarserver on a Leopard client? I can download, build and run the daemon from the source directory with the test accounts, etc. but when I go to (./run -i / ) install it as a system daemon and install the launchd plist I'm not sure where things are. For example the installed version of twistd always complains about not enough parameters but if I point back to the source directory version all is OK. I'm sure this is path/pythonpath issue but I don't know enough about twistd and python to puzzle this out. So my original question, Are there a clear set of instructions on how to install and configure Calendarserver on a Leopard client? Thanks, ________________________________________________________ Scott Buchanan DSB Associates e-mail: dscottbuch(a)mac.com 4-D Neuroimaging Tel: (858) 759-9496 Fax: (858) 759-0825 ________________________________________________________

3 4

iCal server perfomance issues.
by Silas Thomas 04 Mar '08

04 Mar '08

We've implemented iCal here and are having some performance issues. iCal server stats: 162 accounts, 65 calendars, 100 groups, 3000+ events, disk usage is 30kb on Intel Xserve Leopard server. We have all users calendars delegated to all other users, and about half of those users viewing all others calendars. We have a good DNS and resolution. When a user opens their iCal it may take up to 20 minutes to an hour or more for their calendar to sync, and the server pegs out at near 100% cpu usage for all the python processes _Calendar user. Not to mention that it takes forever for iCal to display the available calendars for access in the preferences. All machines are leopard and bound to the OD, single server setup. Has anyone experienced anything similar, and what did you do to correct the problem? Thanks!! Silas Thomas International Affairs Information Technology Consultant 541-346-1790 silas(a)uoregon.edu

3 6

Apple's Calendarserver now available in Debian
by Guido Günther 28 Feb '08

28 Feb '08

Hi, the Debian packages of Calendarserver 1.2 development branch just entered the Debian archive. It's in the experimental distribution so by adding: deb http://ftp.debian.org/debian/ experimental main and running: apt-get -t experimental python-twisted-calendarserver calendarserver you should get everything that's needed. Please have a look at: /usr/share/doc/calendarserver/README.Debian on howto get things going. Cheers, -- Guido

1 0

'Authentication failed: Invalid nonce value: ...'
by jdtanner 27 Feb '08

27 Feb '08

Hi all, I've managed to get a server up and running using accounts.xml, but my users are being prompted to input their username and password every 20 mins or so (they are using the latest Sunbird nightly and have their passwords stored in password manager). Any ideas why the server would be throwing a 'Authentication failed: Invalid nonce value: ...' error? Cheers, John -- View this message in context: http://www.nabble.com/%27Authentication-failed%3A-Invalid-nonce-value%3A-..… Sent from the Calendar Server - Users mailing list archive at Nabble.com.

1 0

Import ics to group calendar
by David Watts 26 Feb '08

26 Feb '08

Hi All, Is there any documentation and/or utilities to import an exported ical ics file into a ical server group calendar? This is on Leopard server 10.5.2 with a group setup with wiki and calendar sharing. I want to take an existing ical calendar and allow everyone in the group to view and edit this calendar. Thanks for any suggestions Dave

1 0

sporadically dropped events
by fano.de Team 26 Feb '08

26 Feb '08

hi I have successfully set up caldav server on my 10.5.2 powermac. my local calendar (1500+ items) was exported then reimported into a fresh empty caldav calendar. I assume all events were written to the caldav database dir which I verfied here and there. now something strange happens to another client which has read the calendar from the server: some events are invisible/lost sporadically. first I thought it must have to do with umlauts in the calendar name, ut with a renamed calendar it's virtually the same. when I tried to track the problem I first put the concerning calendar into another ical client on another 10.5.2 machine. lost events are identically to the other clients. they are only visible in the importing/publishing client. my second calendar (less events than the other) works fine on all clients. now I am completely stuck because I can't find the problem. any ideas/hints? should I send someone my (defective?) calendar? best regards, eberhard

2 1

CalendarServer 1.1 and Account information not found - HTTP/1.1 500 Internal Server Error
by Jaco Engelbrecht 26 Feb '08

26 Feb '08

Hi, I am trying to get Calendar Server 1.1 (http://svn.calendarserver.org/repository/calendarserver/CalendarServer/tags… - also checked out trunk - same problem) to work on FreeBSD 6. When setting up my iCal account on MacOSX Leopard 10.5.1 using iCal, I get - "Account information not found - Request for http://<myhost>: 8008/principals/users/admin/ failed. The server responded with "HTTP/ 1.1 500 Internal Server Error": 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Log opened. 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] twistd 2.5.0+rUnknown (/usr/local/bin/python 2.4.4) starting up 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] reactor class: <class 'twisted.internet.selectreactor.SelectReactor'> 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Configuring directory service of type: twistedcaldav.directory.xmlfile.XMLDirectoryService 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Configuring SudoDirectoryService with file: conf/sudoers.plist 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Setting up document root at: twistedcaldav/test/data/ 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Setting up principal collection: <class 'twistedcaldav .directory.principal.DirectoryPrincipalProvisioningResource'> 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Setting up calendar collection: <class 'twistedcaldav.static.CalendarHomeProvisioningFile'> 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Setting up root resource: <class 'twistedcaldav.root.RootResource'> 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Setting up default ACEs on root resource 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Setting up AdminPrincipals 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Added /principals/ __uids__/admin/ as admin principal 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Setting root ACL 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Configuring authentication for realm: Test Realm 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Setting up scheme: kerberos 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Kerberos support not available 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Setting up scheme: digest 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Setting up scheme: basic 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Configuring authentication wrapper 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Setting up service 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Configuring log observer: <twistedcaldav.logging.AMPCommonAccessLoggingObserver object at 0x8ad9c0c> 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Adding server at :8008 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Adding SSL server at : 8443 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] twisted.web2.channel.http.HTTPFactory starting on 8008 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] Starting factory <twisted.web2.channel.http.HTTPFactory instance at 0x8ad9cac> 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] twisted.web2.channel.http.HTTPFactory starting on 8443 2008-02-23 15:34:01+0200 [twistedcaldav.logging.AMPLoggingFactory] AMPLoggingProtocol connection established (HOST:UNIXSocket('logs/ caldavd.sock') PEER:UNIXSocket('')) 2008-02-23 15:34:01+0200 [-] [caldav-8008] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('logs/caldavd.sock')) 2008-02-23 15:34:08+0200 [-] [caldav-8008] [HTTPChannel, 0,78.86.167.16] "Directory service <SudoDirectoryService 'Test Realm': FilePath('/data/src/new/CalendarServer-1.1/conf/sudoers.plist')> has no GUID; generating service GUID from realm name." 2008-02-23 15:34:08+0200 [-] [caldav-8008] [HTTPChannel, 0,78.86.167.16] PROPFIND /principals/users/admin/ HTTP/1.1 2008-02-23 15:34:08+0200 [-] [caldav-8008] [HTTPChannel, 0,78.86.167.16] Exception rendering: 2008-02-23 15:34:08+0200 [-] [caldav-8008] [HTTPChannel, 0,78.86.167.16] Unhandled Error 2008-02-23 15:34:08+0200 [-] [caldav-8008] Traceback (most recent call last): 2008-02-23 15:34:08+0200 [-] [caldav-8008] File "/data/src/new/ Twisted/twisted/web2/static.py", line 124, in renderHTTP 2008-02-23 15:34:08+0200 [-] [caldav-8008] d = maybeDeferred(super(StaticRenderMixin, self).renderHTTP, request) 2008-02-23 15:34:08+0200 [-] [caldav-8008] File "/data/src/new/ Twisted/twisted/internet/defer.py", line 107, in maybeDeferred 2008-02-23 15:34:08+0200 [-] [caldav-8008] result = f(*args, **kw) 2008-02-23 15:34:08+0200 [-] [caldav-8008] File "/data/src/new/ Twisted/twisted/web2/resource.py", line 88, in renderHTTP 2008-02-23 15:34:08+0200 [-] [caldav-8008] return method(request) 2008-02-23 15:34:08+0200 [-] [caldav-8008] File "/data/src/new/ Twisted/twisted/internet/defer.py", line 677, in unwindGenerator 2008-02-23 15:34:08+0200 [-] [caldav-8008] return _deferGenerator(f(*args, **kwargs), Deferred()) 2008-02-23 15:34:08+0200 [-] [caldav-8008] --- <exception caught here> --- 2008-02-23 15:34:08+0200 [-] [caldav-8008] File "/data/src/new/ Twisted/twisted/internet/defer.py", line 576, in _deferGenerator 2008-02-23 15:34:08+0200 [-] [caldav-8008] result = g.next() 2008-02-23 15:34:08+0200 [-] [caldav-8008] File "/data/src/new/ Twisted/twisted/web2/dav/method/propfind.py", line 55, in http_PROPFIND 2008-02-23 15:34:08+0200 [-] [caldav-8008] x.getResult() 2008-02-23 15:34:08+0200 [-] [caldav-8008] File "/data/src/new/ Twisted/twisted/internet/defer.py", line 555, in getResult 2008-02-23 15:34:08+0200 [-] [caldav-8008] self.result.raiseException() 2008-02-23 15:34:08+0200 [-] [caldav-8008] File "/data/src/new/ Twisted/twisted/python/failure.py", line 303, in raiseException 2008-02-23 15:34:08+0200 [-] [caldav-8008] raise self.type, self.value, self.tb 2008-02-23 15:34:08+0200 [-] [caldav-8008] exceptions.AttributeError: 'pysqlite2.dbapi2.Connection' object has no attribute 'execute' 2008-02-23 15:34:08+0200 [-] [caldav-8008] Any ideas? Is it a problem with CalendarServer or Twisted? Jaco -- bje(a)serendipity.org.za the faculty of making fortunate discoveries

3 3

authentication errors
by John McAdams 25 Feb '08

25 Feb '08

Hi List, Anybody have this error before? Mac OS 10.5.2 Server, Mac OS 10.5.2 Client. Server Error This account (Revolucion) appears to be offline because of a network or server problem. Request for "test" in "calendar" in account "Revolucion" failed. The server responded with "HTTP/1.1 500 Internal Server Error" to operation CalDAVWriteEntityQueuableOperation. Would you like to go online now? This was trying to create an event in a calendar on the server. Best regards, -- jmca

2 1