February 2009 - calendarserver-users

Fwd: [CalendarServer-dev] HTTPS-Problem
by Georg Troska 19 Feb '09

19 Feb '09

Hi, ok maybe this is a better forum to ask this question Anfang der weitergeleiteten E-Mail: > Von: Georg Troska <georg.troska(a)uni-dortmund.de> > Datum: 18. Februar 2009 15:08:13 MEZ > An: calendarserver-dev(a)lists.macosforge.org > Betreff: [CalendarServer-dev] HTTPS-Problem > > Hi, > > I have problems to get HTTPS running on the calendarserver. (Ubuntu- > Intrepid) > HTTP works fine now, but using HTTPS gives me an error-message in > iCal: > > "The account inforation could not be found - Unexpected error at the > secure name resoltion (Error -9813). The servername <name> is maybe > incorrect " > > (This is translated from german) > > I'm sure that HTTPS is running as I can reach it in the Browser - > authentication is running as well > > Thanks Georg > > > _______________________________________________ > calendarserver-dev mailing list > calendarserver-dev(a)lists.macosforge.org > http://lists.macosforge.org/mailman/listinfo.cgi/calendarserver-dev meanwhile I found out, that I have a logentry in /var/log/system.log on my client: --- Feb 18 21:14:01 regulus iCal[97893]: SMA: -[DAVRequest(Private) translateSSLError:]: { -9813 } Feb 18 21:14:01 regulus iCal[97893]: [DAVRequest _readStreamEvent]: SecTrustEvaluate failed. Failing with error: (null) --- putting this into google made me a bit nervous when I read this: http://www.zimbra.com/forums/administrators/16397-caldav-issue-leopard.html is it true that iCal cannot handle "selfmade SSL-Certs"? How can I put the cert on "always trust"? I hope you can help. Thanks a lot Georg

2 4

Re: [CalendarServer-users] Fwd: [CalendarServer-dev] HTTPS-Problem
by Cyrille Colin 18 Feb '09

18 Feb '09

Yes private key and cert are concated in one file tools is make-ssl-cert. Its a quick way to build a self-signed certificate couple. ----- Message d'origine ----- De: Georg Troska <georg.troska(a)uni-dortmund.de> Env: mercredi 18 février 2009 23:27 À: Cyrille Colin <colin(a)univ-metz.fr> Cc: calendarserver-users(a)lists.macosforge.org Objet: Re: [CalendarServer-users] Fwd: [CalendarServer-dev] HTTPS-Problem Hi, Are you sure private and public keys are stored in the same file? Georg Am 18.02.2009 um 22:19 schrieb Cyrille Colin: > hi, > Self-signed certs works for me. > I create it with > createmake-ssl-cert /usr/share/ssl-cert/ssleay.cnf /calendar/certs/ > calendar.pem > and set .plist : > >  > <key>SSLCertificate</key> > <string>/calendar/certs/calendar.pem</string> > >  > <key>SSLPrivateKey</key> > <string>/calendar/certs/calendar.pem</string> > > hope this help. > > On mer., 2009-02-18 at 21:18 +0100, Georg Troska wrote: >> Hi, >> >> >> ok maybe this is a better forum to ask this question >> >> Anfang der weitergeleiteten E-Mail: >> >>> Von: Georg Troska <georg.troska(a)uni-dortmund.de> >>> Datum: 18. Februar 2009 15:08:13 MEZ >>> An: calendarserver-dev(a)lists.macosforge.org >>> Betreff: [CalendarServer-dev] HTTPS-Problem >>> >>> >>> Hi, >>> >>> I have problems to get HTTPS running on the calendarserver. >>> (Ubuntu-Intrepid) >>> HTTP works fine now, but using HTTPS gives me an error-message in >>> iCal: >>> >>> "The account inforation could not be found - Unexpected error at the >>> secure name resoltion (Error -9813). The servername <name> is maybe >>> incorrect " >>> >>> (This is translated from german) >>> >>> I'm sure that HTTPS is running as I can reach it in the Browser - >>> authentication is running as well >>> >>> Thanks Georg >>> >>> >>> _______________________________________________ >>> calendarserver-dev mailing list >>> calendarserver-dev(a)lists.macosforge.org >>> http://lists.macosforge.org/mailman/listinfo.cgi/calendarserver-dev >>> >> >> >> meanwhile I found out, that I have a logentry in /var/log/system.log >> on my client: >> --- >> Feb 18 21:14:01 regulus iCal[97893]: SMA: -[DAVRequest(Private) >> translateSSLError:]: { -9813 } >> Feb 18 21:14:01 regulus iCal[97893]: [DAVRequest _readStreamEvent]: >> SecTrustEvaluate failed. Failing with error: (null) >> --- >> >> >> putting this into google made me a bit nervous when I read >> this: http://www.zimbra.com/forums/administrators/16397-caldav-issue-leopard.html >> >> >> is it true that iCal cannot handle "selfmade SSL-Certs"? How can I >> put >> the cert on "always trust"? >> >> >> I hope you can help. Thanks a lot >> Georg >> >> >> >> >> >> _______________________________________________ >> calendarserver-users mailing list >> calendarserver-users(a)lists.macosforge.org >> http://lists.macosforge.org/mailman/listinfo.cgi/calendarserver-users > Georg Troska Experimentelle Physik IV TU Dortmund +49 231 755 3501

1 0

Read-Only Calendar
by Georg Troska 17 Feb '09

17 Feb '09

Hi, I have still problems in restricting the access to calendars. I found a lot of information here: https://trac.calendarserver.org/browser/CalendarServer/trunk/doc/Extensions… And I tried my luck on the CalDavClientLibrary If I set the auth-system to clear-text I'm able to login as admin user, but the I recieve something like: {DAV:}current-user-privilege-set: 401 what means "not allowed to" if I understand correctly I enabled admin as AdminPrincipal: <key>AdminPrincipals</key> <array> <string>/principals/users/admin/</string> </array> added it to the accounts.xml adding it to the sudoers.plist makes me lots of errors <dict> <key>username</key> <string>admin</string> <key>password</key> <string>admin</string> </dict> I cannot login with the CalDAV-Tool anymore thanks for any comment Georg

1 0

Limitations on number events?
by Sean McAvoy 17 Feb '09

17 Feb '09

Hello, are there limitations on the amount of events each user can have? I have several users with 1000+ events that seems to cause the server to fail, returning null: iCal[5423]: CalDAV CalDAVCalendarRefreshOperation failed: status 'HTTP/1.1 207 Multi-Status' request:\n <?xml version="1.0" encoding="utf-8"?> <x0:propfind xmlns:x0="DAV:"> <x0:prop> <x0:getetag/> <x0:resourcetype/> </x0:prop> </x0:propfind> ... response: (null)

4 12

Importing data failure
by Sean McAvoy 17 Feb '09

17 Feb '09

I've experienced an issue when importing a users calendar into Calendar Server. Client is iCal on 10.5.6. Importing fails with a 403: ==== snip ==== 2/17/09 01:00 iCal[1861] CalDAV CalDAVWriteEntityQueueableOperation failed: status 'HTTP/1.1 403 Forbidden' request: BEGIN:VCALENDAR VERSION:2.0 PRODID:-//Apple Inc.//iCal 3.0//EN CALSCALE:GREGORIAN BEGIN:VEVENT SEQUENCE:0 DTSTART:20050117T100000Z STATUS:CONFIRMED DTSTAMP:20050113T082300Z SUMMARY:WG Chairs meeting ATTENDEE;CN="***";CUTYPE=INDIVIDUAL;PARTSTAT=ACCEPTED;ROLE= REQ-PARTICIPANT:mailto:**** DTEND:20050117T150000Z DESCRIPTION:The meeting will take place at the \"Exchange Avenue\" meeti ng area. This is located on the third floor above Departures 1. Once ins ide the terminal\, follow the signs Departures 1 and 2 and Panorama terr ace. This will lead to the third floor\, above Departures 1.\n\n \nFor th ose driving to Schiphol\, car park P1 is the most convenient and is with in a short walk of the Terminal building.\n\n\nThe proposed agenda follo ws:\n\n\n1.) Welcome/Introduction\n2.) ****\n3.) RIPE *****\n4.) RIPE Meeting Day Tickets\n5.) Policy Development Process - WG Chair Duties\nnote: the PDP draft document can be accessed at:**** ****\n6.) AOB\n UID:29b#ab13#19e3d771&0065b3ds.. TRANSP:OPAQUE ORGANIZER:mailto:*** CREATED:20090217T115747Z END:VEVENT END:VCALENDAR ... response: HTTP/1.1 403 Forbidden Date: Tue, 17 Feb 2009 12:00:06 GMT Dav: 1, access-control, calendar-access, calendar-schedule, calendar- auto-schedule, calendar-availability, inbox-availability, calendar- proxy, calendarserver-private-events, calendarserver-private-comments, calendarserver-principal-property-search Content-Type: text/xml Content-Length: 136 Server: Twisted/2.5.0+rUnknown TwistedWeb/[twisted.web2, version 0.2.0 (SVN rUnknown)] TwistedCalDAV/trunk (r3669) <?xml version='1.0' encoding='UTF-8'?> <error xmlns='DAV:'> <valid-calendar-data xmlns='urn:ietf:params:xml:ns:caldav'/> </error> ==== snip ==== here's the server side: ==== snip ==== 2009-02-17 13:00:06+0100 [-] [caldav-8009] [-] [twisted.web2.dav.fileop#info] Writing to file /export/CalendarServer/ twistedcaldav/test/d ata/calendars/__uids__/0F/89/0F894EC9-2ECB-409B-9D9D-80E1EF00E23F/ calendar/29b#100a161#1cf62020&0065b3ds...ics 2009-02-17 13:00:06+0100 [-] [caldav-8009] [AMP,client] [twistedcaldav.extensions#info] PUT /calendars/__uids__/ 0F894EC9-2ECB-409B-9D9D-8 0E1EF00E23F/calendar/29b#ab13#19e3d771&0065b3ds...ics HTTP/1.1 2009-02-17 13:00:06+0100 [-] [caldav-8009] [-] [twistedcaldav.method.put_common#error] u'error: illegal escape sequence: \'\\"\'' ==== snip ==== There is then an option to revert to server which I press then I get: Request (CalDAVRevertEntityQueueableOperation) for calendar failed (code 1). logs from the client side: ==== snip ==== 2/17/09 01:17 iCal[1861] CalDAVOperationQueue tried to dequeue operation <CalDAVRefreshDelegateListQueueableOperation: 0x16a59e80> but it was not at the front of the queue. 2/17/09 01:17 [0x0-0x64064].com.apple.iCal[1861] 13:17:07.255 [iCal: 1861] ERROR (DAV): <[Request 0x302fe0] GET /calendars/__uids__/ 0F894EC9-2ECB-409B-9D9D-80E1EF00E23F/calendar/ 29b#ab13#19e3d771&0065b3ds...ics (for <DAVSession 0x16a49360 http://osx7.ripe.net:8008/ >)>: can't get URL from request object 2/17/09 01:17 [0x0-0x64064].com.apple.iCal[1861] 13:17:07.255 [iCal: 1861] ERROR (DAV): <[Request 0x302fe0] GET /calendars/__uids__/ 0F894EC9-2ECB-409B-9D9D-80E1EF00E23F/calendar/ 29b#ab13#19e3d771&0065b3ds...ics (for <DAVSession 0x16a49360 http://osx7.ripe.net:8008/ >)>: can't get URL from request object 2/17/09 01:17 iCal[1861] Exception in - [CalDAVAccountRefreshQueueableOperation refreshWithExceptionHandling] :: *** -[NSCFDictionary setObject:forKey:]: attempt to insert nil key 2/17/09 01:17 iCal[1861] Exception in - [CalDAVAccountRefreshQueueableOperation refreshWithExceptionHandling] :: *** -[NSCFDictionary setObject:forKey:]: attempt to insert nil key 2/17/09 01:17 [0x0-0x64064].com.apple.iCal[1861] 13:17:13.164 [iCal: 1861] ERROR (DAV): <[Request 0x16a4b910] GET /calendars/__uids__/ 0F894EC9-2ECB-409B-9D9D-80E1EF00E23F/calendar/ 29b#ab13#19e3d771&0065b3ds...ics (for <DAVSession 0x16a49360 http://osx7.ripe.net:8008/ >)>: can't get URL from request object ==== snip ==== Any suggestions what the problem could be? I have exported the data from Oracle Coporoate time and imported into iCal directly, into sunbird then into ical and into ical local calendar to ical server calendar.

2 2

Access to all calendars
by Georg Troska 17 Feb '09

17 Feb '09

Hi, I have a calendarserver running on Ubuntu Intrepid. For authentication I use kerberos. For the moment I'm using the accout.xml to add my users. The final installation should use the NSS-dir-service. My Problem is, that I have access to all calendars I may write to personal user calendars and to group-calendars. I needn't belog to the group What do I do wrong? Georg

4 10

Update not working plz help
by arun chhetri 16 Feb '09

16 Feb '09

hi list,, I am on the final stage of writing the CalDav web client but seem to have some problem in updating the resource. I am trying to update a calendar event these are the logs on client side PUT /calendars/__uids__/85B395D3-35BB-4A96-8B73-57F6D46A865D/calendar/A6B5F9C8-CFB0-4044-8891-0F362E5B6CAD.ics HTTP/1.1 Host: vdata2.nsm.uh.edu If-Match: "69cb4fe23b7ce583477d9e77929819e7" Authorization: Digest username="vyom2", realm="/Search", nonce="36364441521087291151119358445", uri="/calendars/__uids__/85B395D3-35BB-4A96-8B73-57F6D46A865D/calendar/A6B5F9C8-CFB0-4044-8891-0F362E5B6CAD.ics", response="a2cfc840e7c65d2a9f9a225389ce92c1", algorithm="md5" Content-Length: 106 Content-Type: text/calendar But as a response I get back as 403 Forbidden error HTTP/1.1 403 Forbidden Date: Mon, 16 Feb 2009 23:41:14 GMT DAV: 1, access-control, calendar-access, calendar-schedule, calendar-availability, inbox-availability, calendar-proxy, calendarserver-private-events Content-Type: text/xml Content-Length: 136 Server: Twisted/2.5.0 TwistedWeb/[twisted.web2, version 0.2.0] TwistedCalDAV/1.2 (unknown) But I have used the same username and password for New, Delete and reading an event why does it does this thing in this case,, The server logs show something like this 129.7.228.90 - vyom2 [16/Feb/2009:17:41:13 -0500] "OPTIONS /principals/users/vyom2/ HTTP/1.1" 200 0 "-" "-" [120.1 ms] 129.7.228.90 - vyom2 [16/Feb/2009:17:41:13 -0500] "PROPFIND /principals/users/vyom2/ HTTP/1.1" 207 1862 "-" "-" [83.6 ms] 129.7.228.90 - vyom2 [16/Feb/2009:17:41:13 -0500] "PROPFIND /principals/users/vyom2/ HTTP/1.1" 207 1086 "-" "-" [10.6 ms] 129.7.228.90 - vyom2 [16/Feb/2009:17:41:13 -0500] "GET /calendars/__uids__/85B395D3-35BB-4A96-8B73-57F6D46A865D/calendar/A6B5F9C8-CFB0-4044-8891-0F362E5B6CAD.ics HTTP/1.1" 200 694 "-" "-" [32.1 ms] 129.7.228.90 - vyom2 [16/Feb/2009:17:41:14 -0500] "PUT /calendars/__uids__/85B395D3-35BB-4A96-8B73-57F6D46A865D/calendar/A6B5F9C8-CFB0-4044-8891-0F362E5B6CAD.ics HTTP/1.1" 403 136 "-" "-" [39.1 ms] Please Help, Thanks in Advance Arun Chhetri

1 0

Linux Client Software
by odinm 13 Feb '09

13 Feb '09

This is my first post to the list -- first off, I totally love DCS. I've been using it for about 10 months in my office now ,and it is a real joy to have shared calendars which everyone can edit, rather than shuffle around calendar files only one person could edit. My server had been running on an Ubuntu 7.10 desktop system, and is now on an 8.10 system. Clients include Leopard based Macs -- iCal connects and syncs without a hitch -- 100% reliable. My problem is with linux clients. Here are my complaints: Sunbird (0.8 & 0.9): very hard to configure and never gives a useful error message. Once Sunbird is working, it takes about 5-10 minutes to load a calendar. This is annoying in usage, but infuriating when trying to configure Sunbird -- one is never sure if the config is wrong, or it is just Sunbird being molasses slow as usual. Chandler: Because of a dependency issue, attempting to delete the interfering file on the Ubuntu 8.10 system means removal of open office. I need both. Mulberry: It runs on the 8.10 system but is incredibly difficult to understand. The directions for configuring mulberry say to choose "new account" from the "accounts" preference panel. I've looked through every menu and have not found any such or similar thing. So I haven't been able to try out Mulberry yet. It looks pretty ugly on Ubuntu, but at this point, aesthetics don't matter to me one bit. If it works, I'd use it and love it. So my question: What Linux client should I use? Is Chandler worth the nightmare of keeping two separate libraries installed so I can run a calender and open office? Does Mulberry work and if so, how is configed? Does Sunbird give problems with large calendars for other people? If no, how do you tweak it to make it work? Thank you, Odin

2 1

Internal server error/users not found
by W. Brewster Brownville 09 Feb '09

09 Feb '09

Hi all. Completely new to this list. I only subscribed to plumb the depths of your knowledge of iCal - but will be glad to help anyone in the future...but first, to MY problem. :-) What began as simple authentication issues on an iCal server has turned into a bit of a meltdown. DNS is working, OD is working. It began with certain users not authenticating, so I made some changes to the authentication method (from Kerb to Digest). That didn't help. I made some permissions modifications (per another forum) to the / Library/CalendarServer/Documents folder (I made _calendar the owner, it was "admin" previously). That didn't help, and I still get errors. Now, NONE of the users are authenticating (even new, "test" users) and I'm getting a "HTTP/1.1 500 Internal Server Error" when trying to add an iCal account on a client machine. The iCal server logs seem to think any given user dont exist as a user, though they are bound to the directory and my account exists in WGM and calendaring is enabled. Anyone have any ideas? When I try to access the server via the web URL, I get an error message directing me to the logs. This is the predominant log message: > 2009-02-08 20:38:54-0500 [-] caldav-8009 exceptions.AssertionError: > Parent <DirectoryPrincipalProvisioningResource: /Library/ > CalendarServer/Documents/principals> of > <DirectoryPrincipalUIDProvisioningResource: /Library/CalendarServer/ > Documents/principals/__uids__> does not exist which appears to stem from some records being disabled, as per the following: > 2009-02-09 15:29:43-0500 [-] [caldav-8012] [OpenDirectoryService] > Record disabled due to conflict: > <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/ > Search->/Local/Default)] ABCDEFAB-CDEF-ABCD-EFAB-CDEF00000050(admin) > 'Administrators'> > 2009-02-09 15:29:43-0500 [-] [caldav-8012] [OpenDirectoryService] > Record disabled due to conflict: > <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/ > Search->/LDAPv3/127.0.0.1)] > 0F717F0B-7BF7-47D1-9C5E-772A39BAC25E(admin) 'Open Directory > Administrators'> > 2009-02-09 15:29:43-0500 [-] [caldav-8012] [OpenDirectoryService] > Record disabled due to conflict: > <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/ > Search->/Local/Default)] ABCDEFAB-CDEF-ABCD-EFAB-CDEF00000014(staff) > 'Users'> > 2009-02-09 15:29:43-0500 [-] [caldav-8012] [OpenDirectoryService] > Record disabled due to conflict: > <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/ > Search->/LDAPv3/127.0.0.1)] 8D7FE4FC-7773-492F- > BADF-13F56883F349(staff) 'Open Directory Users'> > 2009-02-09 15:29:43-0500 [-] [caldav-8012] [OpenDirectoryService] > Reloading locations record cache > 2009-02-09 15:29:43-0500 [-] [caldav-8010] [OpenDirectoryService] > Record disabled due to conflict: > <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/ > Search->/Local/Default)] ABCDEFAB-CDEF-ABCD-EFAB-CDEF00000050(admin) > 'Administrators'> > 2009-02-09 15:29:43-0500 [-] [caldav-8010] [OpenDirectoryService] > Record disabled due to conflict: > <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/ > Search->/LDAPv3/127.0.0.1)] > 0F717F0B-7BF7-47D1-9C5E-772A39BAC25E(admin) 'Open Directory > Administrators'> > 2009-02-09 15:29:43-0500 [-] [caldav-8010] [OpenDirectoryService] > Record disabled due to conflict: > <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/ > Search->/Local/Default)] ABCDEFAB-CDEF-ABCD-EFAB-CDEF00000014(staff) > 'Users'> > 2009-02-09 15:29:43-0500 [-] [caldav-8010] [OpenDirectoryService] > Record disabled due to conflict: > <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/ > Search->/LDAPv3/127.0.0.1)] 8D7FE4FC-7773-492F- > BADF-13F56883F349(staff) 'Open Directory Users'> > >

2 1

Mac OS X Server
by Louis ROMERO 06 Feb '09

06 Feb '09

Hello, I have a 10.5.5 Mac OS X Server and the iCal Server is on. I have a problem, that happend twice, so I guess there is something. On time, the CPU was at 100%, taken by the User, but I couldn't see what was wrong in Activity Monitor or top, because the step of measures was to large : I found that there were several small Python processes that were launched and stopped constantly ! I tried to know where they came from. I stopped services one after another, and found out it was iCal : 10% CPU after that. Today, I had the same problem. The only thing I did today with iCal Servr was augmenting a LDAP record in the OpenDirectory. I just chose the calendar to be synced with. Where dos this come from ? Thanks, -- Louis Romero  Arcank

3 4