December 2012 - calendarserver-users

Users and Groups from AD
by Dennison Williams 12 Jan '13

12 Jan '13

I am currently trying to configure calendarserver to pull users and groups from Microsoft Active Directory and I am having a hard time figuring out the schema that is required for the mapping to the calendar server filed names. The documentation (http://trac.calendarserver.org/wiki/ConfiguringLDAP) does not clarify it for me either. Are the definitions one for one in the RFC (I have not read through that yet)? For example: <key>users</key> <dict> <key>rdn</key> <string></string>  <key>attr</key>  <string>uid</string> <key>emailSuffix</key>  <string></string> <key>filter</key> <string></string>  </dict> Thanks for any help! Dennison Williams

2 3

Can not run calendarserver
by Taiping Tan 27 Dec '12

27 Dec '12

2 3

Re: [CalendarServer-users] Read only access to CardDAV
by Thomas Harvey 17 Dec '12

17 Dec '12

Thanks dre, I realised after asking that it had moved to a postgres backed datastore. Although, I guess we could have 2 cardDAV servers running, one in read only and the other in read-write, but both on the same DB backend? In the read only server, authentication would be valid for all listed in the ou=people branch of the directory, but the read-write server would only allow connection from specific roles...just a thought, or is this completely outrageous? I'll also be sure to check out gaya's branch to see what direction is being taken there, perhaps I can help out with that. Tom On Dec 17, 2012, at 08:32 PM, Andre LaBranche <dre(a)mac.com> wrote: On Dec 14, 2012, at 5:30 AM, Thomas Harvey <harvey.t(a)mac.com> wrote: > I've got myself a nice new CardDAV server setup and I'm working on the user accounts - just through the XML based directory. I would like to have one collection of contacts which has an admin user with read/write access but to also have a subordinate user who can connect to this collection with read only access. I don't particularly need to be able to provide a separate contacts collection for the subordinate user. > > The current thinking is to have a Principal which is listed in the caldavd.plist as a ReadPrincipal and then to symlink the folder for that principal into another location, which is listed as AdminPrincipals - Is this really the best way to do this? Symlinks probably won't help you here; the Calendar Server backend is a postgres database. It used to be a filesystem, but that was a long time ago... Unfortunately I don't think there's currently any support in the server for what you're asking for. There is a 'read only server' switch, but it's global for the entire service. There is some CardDAV sharing stuff in development, but it's not release-quality yet. Here's the branch if you're curious what is being done: http://trac.calendarserver.org/log/CalendarServer/branches/users/gaya/share… Cheers, -dre

2 2

Read only access to CardDAV
by Thomas Harvey 14 Dec '12

14 Dec '12

I've got myself a nice new CardDAV server setup and I'm working on the user accounts - just through the XML based directory. I would like to have one collection of contacts which has an admin user with read/write access but to also have a subordinate user who can connect to this collection with read only access. I don't particularly need to be able to provide a separate contacts collection for the subordinate user. The current thinking is to have a Principal which is listed in the caldavd.plist as a ReadPrincipal and then to symlink the folder for that principal into another location, which is listed as AdminPrincipals - Is this really the best way to do this? Thanks in advance Tom Harvey

1 0

Debian calendarserver 4.1.1 package
by Fredrik Unger 11 Dec '12

11 Dec '12

Hi, After trying to get 4.1.1 to run on Debian some month ago I decided to bite the bullet and also package it. I am not a debian developer, so it is only available from my own repository : https://tree.se/debian/ DISCLAIMER - USE AT YOUR OWN RISK. It might not be ready for production but I'd like some feedback to the quality of the package. Instructions how to install it is also available on https://tree.se/debian/ The release do not support ipv6, i had to disable the patches.py Runtime error in response to not finding a solution to the problem with --reactor=select as described here : http://lists.macosforge.org/pipermail/calendarserver-dev/2012-November/0015… Still a new twisted seems to be in the works. It is available in experimental. Debian bug #689983 already requests better IPv6 support. The changelog is : calendarserver (4.1.1-1) unstable; urgency=low * Updated to new released version v4.1.1 * Disabled patches.py until twisted 12.2.0-1 is released * Applied upstream patch for python-sqlparse 0.1.4 ( http://trac.calendarserver.org/ticket/759 ) * Debianized bootstrapdatabase.py * Added caldavd uid/gid to default file -- Fredrik Unger <debian(a)tree.se> Mon, 10 Dec 2012 16:15:11 +0100 It should be just to install, enable in /etc/default/calendarserver, start, and http://localhost:8008/ should be available. It would be iteresting to get some feedback and cooperation from the people running calendarserver on debian, best practices etc that I can put in the documentation. Currently I am running an old instance of the package on my server, and have limited experience with configuring calendarserver for groups etc. I do use LDAP for my installation and will try to document that too. The package is not extensively tested. Sincerely, Fredrik Unger

1 0

New install questions
by John Morris 06 Dec '12

06 Dec '12

Howdy all, Just finished a test install and am evaluating this as a replacement for the ancient and unmaintained ical (X Window) for a small workplace environment. As usual I began the safe way with a Debian Stable VM and the version in the stable repo. Our network is still using NIS so that was what I wired calendarserver up to. The idea is to connect with Thunderbird+Lightning and Evolution as clients. Didn't take all that much effort to begin to see results but things are getting bogged down in the details. Any user on our network can now have a personal calendar. Read the webpages and such, Googled and there are things that still aren't making sense. 1. Group calendars. See mailing list traffic that implies they have been eliminated but only unanswered questions regarding what should be used as a replacement. At any rate, they don't work for me. I made a group with the right prefix and it appears as a group with the right members when I browse the server with a web browser but any attempt to create a calendar for the group fails. The closest I can see now to a solution is to create a user with a similar name to the group and set the group as a proxy using the command line tool. Is that the right thing to do? 2. The missing svn repo and the brain teaser in the command line admin tool. To get the command line tool, CalDAVClientLibrary, one is supposed to issue a request for an svn checkout. That doesn't work. Google provided an alternate git repo that I could get to work. But I have now tried running that on both the new Debian server hosting calendarserver and my laptop running Fedora 17 and get the same bizarre issue. I can't type a b. [ac-zA-Z0-9] all work just fine, but no b. I'm composing this on the same laptop so I know my b key works. 3. Once I got NSS as a directory service working the XML file appears to have stopped providing anything. I see where you can go either way if you use LDAP, either retaining locations and resources coming from the XML file or taking them from the LDAP server. Do not see any such option with NSS. Are locations and resources just unavailable in my situation or is there a way to push them in via NSS/NIS? Once I get past those I can move on to coming up with an easy way to get the permissions on everything right and in such a way that other people can do it when people come and go and then declare victory and move on.

1 2