July 2013 - calendarserver-users - lists.macosforge.org

delete a event form the postgresql db
by Sirko Mann 26 Jul '13

26 Jul '13

Hi List, we have another problem with our caldav server. I have to remove an event from the calendar of a co-worker. He gets a warning: The server responded with an error. Access to "event" in "calendar" in account "servername" in not permitted. The server responded: "403" to operation CalDAVWriteEntityQueueableOperation. He tried to remove the event, but the problem is, he can not find this event in his calendar. I made a dump of the caldav database and imported this in a sandbox. I'm able to find: caldav=# select resource_id, calendar_resource_id from calendar_object where icalendar_text like '%string%'; resource_id | calendar_resource_id -------------+---------------------- 159174 | 92159 (1 row) caldav=# How can I remove this from the database without break anything? Thanks, Sirko ------------------------------------------------------------------------------------------------ Datameer GmbH, Grosse Ulrichstrasse 7-9, D-06108 Halle (Saale), Amtsgericht Stendal, HRB: 10348, Geschäftsführer: Stefan Groschupf

2 3

Error connecting to SSL site: ERR_SSL_VERSION_OR_CIPHER_MISMATCH
by Ryan Leonard 23 Jul '13

23 Jul '13

I've setup a new CalendarServer install on a CentOS VPS(still running from the source tree, ./run). Everything works over HTTP, but I tried to access the site over SSL/HTTPS, using a trusted certificate(notself-signed), and am getting an error, ERR_SSL_VERSION_OR_CIPHER_MISMATCH, in Chrome on Ubuntu Linux, and ssl_error_no_cypher_overlap in Firefox, also on Ubuntu Linux. I'm not getting any error messages in the consoleor error logwith the failed SSL connection. Is there anything more I could try, or any informationI should include that could help? I haven't found anything related to this problem online. Ryan Leonard caldavd-test.plist (snip, [site] is my domain namethat is included in the cert name)  <key>SSLCertificate</key>  <string>conf/certs/[site].pem</string>  <key>SSLAuthorityChain</key> <string>conf/certs/caChain.pem</string>  <key>SSLPrivateKey</key>  <string>conf/certs/[site].pem</string>

1 0

Re: [CalendarServer-users] DCS Rhel6 install: Address family not supported by protocol
by James Rowe 16 Jul '13

16 Jul '13

Thank you for the advice! Setting the BindAddress explicitly to the server's IPv4 address fixed the issue. I also went ahead and made a ticket for this on the website as you asked. For anyone curious, the caldavd.plist file looked like this with the BindAddress set <key>BindAddresses</key> <array> <string>192.168.105.57</string> </array>

1 0

DCS Rhel6 install: Address family not supported by protocol
by James Rowe 15 Jul '13

15 Jul '13

I'm currently working on installing Darwin calendar server on a live rhel-6 server for an internal network and I'm struggling to get it working properly. I'm unsure what this is caused by and since I was unable to find anyone with a similar problem, I decided it best to come and ask on the mailing list. After building and installing DCS 4.2 on the server, I ran the start command as /usr/bin/caldavd -u caldavd -g caldavd -XL so I can see the output straight on the terminal. caldavd is the owner of all the files in the configuration directories. It then loads like I would expect it to, spitting out some information about no database update needed, memcached started properly, and some other things that I don't really think is relevant, but I can provide these logs if needed. The problem comes into play when I attempt to browse to port 8008 from a remote machine. Using the hostname of the server and port 8008 on my machine produces the following error and sends back a 500 error (note that I added the host is %s line to the code to help me resolve the issue) 2013-07-09 16:41:26-0600 [-] [caldav-0] [HTTPChannel,1,::ffff:192.168.105.109] [twext.web2.server#info] GET / HTTP/1.1 2013-07-09 16:41:26-0600 [-] [caldav-0] [HTTPChannel,1,::ffff:192.168.105.109] [twext.web2.channel.http#warn] host is IPv6Address(TCP, '::ffff:192.168.105.57', 8008) 2013-07-09 16:41:26-0600 [-] [caldav-0] [HTTPChannel,1,::ffff:192.168.105.109] Unhandled error in Deferred: 2013-07-09 16:41:26-0600 [-] [caldav-0] [HTTPChannel,1,::ffff:192.168.105.109] Unhandled Error 2013-07-09 16:41:26-0600 [-] [caldav-0] Traceback (most recent call last): 2013-07-09 16:41:26-0600 [-] [caldav-0] Failure: twisted.internet.error.ConnectError: An error occurred while connecting: 13: Permission denied. 2013-07-09 16:41:26-0600 [-] [caldav-0] 2013-07-09 16:41:26-0600 [-] [caldav-0] [HTTPChannel,1,::ffff:192.168.105.109] [twext.web2.server#info] Exception rendering: 2013-07-09 16:41:26-0600 [-] [caldav-0] [HTTPChannel,1,::ffff:192.168.105.109] [twext.web2.server#error] [Failure instance: Traceback: <class 'socket.error'>: Address family not supported by protocol 2013-07-09 16:41:26-0600 [-] [caldav-0] /usr/lib64/python2.6/site-packages/twext/web2/channel/http.py:819:lineReceived 2013-07-09 16:41:26-0600 [-] [caldav-0] /usr/lib64/python2.6/site-packages/twext/web2/channel/http.py:1155:lineReceived 2013-07-09 16:41:26-0600 [-] [caldav-0] /usr/lib64/python2.6/site-packages/twext/web2/channel/http.py:259:lineReceived 2013-07-09 16:41:26-0600 [-] [caldav-0] /usr/lib64/python2.6/site-packages/twext/web2/channel/http.py:537:processRequest 2013-07-09 16:41:26-0600 [-] [caldav-0] --- <exception caught here> --- 2013-07-09 16:41:26-0600 [-] [caldav-0] /usr/lib64/python2.6/site-packages/twext/web2/server.py:366:process 2013-07-09 16:41:26-0600 [-] [caldav-0] /usr/lib64/python2.6/site-packages/twext/web2/server.py:328:_fixupURLParts 2013-07-09 16:41:26-0600 [-] [caldav-0] /usr/lib64/python2.6/site-packages/twext/web2/channel/http.py:644:getHostInfo 2013-07-09 16:41:26-0600 [-] [caldav-0] /usr/lib64/python2.6/site-packages/twext/web2/channel/http.py:137:_cachedGetHostByAddr 2013-07-09 16:41:26-0600 [-] [caldav-0] ] What it seems to be to me is that the server is trying to bind to an IPv6 address and my os on the server is responding "Permission denied" (Could that be an SELinux thing? I'm not too familiar with IPv6). As another step in debugging this, I decided to use lynx on the machine and visit localhost:8008, to which I found that twext served the page that I expected and posted the following into the log. 2013-07-09 16:46:40-0600 [-] [caldav-0] [HTTPChannel,2,::1] [twext.web2.server#info] GET / HTTP/1.0 2013-07-09 16:46:40-0600 [-] [caldav-0] [HTTPChannel,2,::1] [twext.web2.channel.http#warn] host is IPv6Address(TCP, '::1', 8008) For reference, my caldavd.plist file contains an empty server name which says to me that it should use the hostname. Explicitly adding the hostname didn't change anything nor did explicitly adding the IPv4 address of the server. Also, I did open the port in iptables before you ask. I have successfully served data through that port by a simple python -m SimpleHTTPServer 8008 and I could access that from my browser on another machine. Any advice on how to allow a remote computer the ability to visit that page would be greatly appreciated! I'm almost at wits end with trying to figure out why the host is an IPv6Address and why I'm unable to connect. James

3 2

Can we use minus addressing instead of plus addressing with iMIP ?
by Amol Kulkarni 05 Jul '13

05 Jul '13

Hello, My mail server does not support plus addressing but it does support minus addressing. Eg. abuse+6f5d8566-87e8-4a26-87b0-6e545fcf7f3d(a)darwin.int - This does not work. But, abuse-6f5d8566-87e8-4a26-87b0-6e545fcf7f3d(a)darwin.int This works - i.e mail is delivered to the abuse(a)darwin.int account. Is there any configuration in dcs to tell it to use the '-' character instead of '+' ? Thanks in advance, Amol

2 1

iMIP mail sending failure
by Amol Kulkarni 04 Jul '13

04 Jul '13

Hello, I'm very new to calendar server and trying to install & configure it on CentOS 6. I could get it working with Thunderbird but the iMIP configuration for sending mail out from server is not working. First a little bit about how I setup the calendar server. I followed the quickstart document to run it using a non-root user. Only change is that instead of checking out the trunk I checkout the 4.2 release - so that I would get a stable version. So I'm running 4.2 release with postgres. I've configured iMIP configuration options for sending and receiving but whenever I configure a meeting with external attendee, I get following error in log : 2013-07-03 11:14:23+0530 [-] [caldav-0] [PooledMemCacheProtocol,client] [twistedcaldav.scheduling.scheduler#error] Unknown calendar user address: mailto:abuse@gmail.int 2013-07-03 11:14:23+0530 [-] [caldav-0] [PooledMemCacheProtocol,client] [twistedcaldav.scheduling.scheduler.ScheduleResponseQueue#error] Error during POST for mailto:abuse@gmail.int: Unknown recipient I know I'm missing some configuration but cannot figure it out. Please help. I'm pasting entire caldavd-dev.plist below. The calendar server is running on ip 192.168.0.19 and mail server is on 192.168.0.18. There is no log about connection on the mail server. Thanks in advance, Amol. <?xml version="1.0" encoding="UTF-8"?>  <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" " http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict>   <key>ServerHostName</key> <string>192.168.0.19</string>   <key>EnableCalDAV</key> <true/>  <key>EnableCardDAV</key> <true/>  <key>HTTPPort</key> <integer>8008</integer>   <key>SSLPort</key> <integer>8443</integer>  <key>EnableSSL</key> <true/>  <key>RedirectHTTPToHTTPS</key> <false/>   <key>BindAddresses</key> <array> </array>  <key>BindHTTPPorts</key> <array> <integer>8008</integer> <integer>8800</integer> </array>  <key>BindSSLPorts</key> <array> <integer>8443</integer> <integer>8843</integer> </array>   <key>ServerRoot</key> <string>./data</string>    <key>DataRoot</key> <string>Data</string>  <key>DatabaseRoot</key> <string>Database</string>  <key>DocumentRoot</key> <string>Documents</string>  <key>ConfigRoot</key> <string>./conf</string>  <key>RunRoot</key> <string>Logs/state</string>  <key>Aliases</key> <dict>  </dict>   <key>UserQuota</key> <integer>104857600</integer>   <key>MaxCollectionsPerHome</key> <integer>50</integer>   <key>MaxResourcesPerCollection</key> <integer>10000</integer>  <key>MaxResourceSize</key> <integer>1048576</integer>    <key>MaxAttendeesPerInstance</key> <integer>100</integer>   <key>MaxAllowedInstances</key> <integer>3000</integer>   <key>DirectoryService</key> <dict> <key>type</key> <string>twistedcaldav.directory.xmlfile.XMLDirectoryService</string> <key>params</key> <dict> <key>xmlFile</key> <string>./conf/auth/accounts-test.xml</string> </dict> </dict>      <key>ResourceService</key> <dict> <key>Enabled</key> <true/> <key>type</key> <string>twistedcaldav.directory.xmlfile.XMLDirectoryService</string> <key>params</key> <dict> <key>xmlFile</key> <string>./conf/auth/resources-test.xml</string> </dict> </dict>  <key>AugmentService</key> <dict> <key>type</key> <string>twistedcaldav.directory.augment.AugmentXMLDB</string> <key>params</key> <dict> <key>xmlFiles</key> <array> <string>./conf/auth/augments-test.xml</string> </array> </dict> </dict>      <key>ProxyDBService</key> <dict> <key>type</key> <string>twistedcaldav.directory.calendaruserproxy.ProxySqliteDB</string> <key>params</key> <dict> <key>dbpath</key> <string>proxies.sqlite</string> </dict> </dict>   <key>ProxyLoadFromFile</key> <string>./conf/auth/proxies-test.xml</string>   <key>AdminPrincipals</key> <array> <string>/principals/__uids__/admin/</string> </array>  <key>ReadPrincipals</key> <array>  </array>  <key>EnableProxyPrincipals</key> <true/>   <key>EnableAnonymousReadRoot</key> <true/>  <key>EnableAnonymousReadNav</key> <false/>  <key>EnablePrincipalListings</key> <true/>  <key>EnableMonolithicCalendars</key> <true/>  <key>Authentication</key> <dict>  <key>Basic</key> <dict> <key>Enabled</key> <true/> </dict>  <key>Digest</key> <dict> <key>Enabled</key> <true/> <key>Algorithm</key> <string>md5</string> <key>Qop</key> <string></string> </dict>  <key>Kerberos</key> <dict> <key>Enabled</key> <true/> <key>ServicePrincipal</key> <string></string> </dict>  <key>Wiki</key> <dict> <key>Enabled</key> <true/> <key>Cookie</key> <string>sessionID</string> <key>URL</key> <string>http://127.0.0.1/RPC2</string> <key>UserMethod</key> <string>userForSession</string> <key>WikiMethod</key> <string>accessLevelForUserWikiCalendar</string> </dict> </dict>   <key>LogRoot</key> <string>Logs</string>  <key>AccessLogFile</key> <string>access.log</string> <key>RotateAccessLog</key> <false/>  <key>ErrorLogFile</key> <string>error.log</string>  <key>DefaultLogLevel</key> <string>debug</string>   <key>LogLevels</key> <dict>  </dict>  <key>PIDFile</key> <string>caldavd.pid</string>   <key>AccountingCategories</key> <dict> <key>iTIP</key> <false/> <key>HTTP</key> <false/> </dict>  <key>AccountingPrincipals</key> <array>  </array>   <key>SSLCertificate</key> <string>twistedcaldav/test/data/server.pem</string>  <key>SSLAuthorityChain</key> <string></string>  <key>SSLPrivateKey</key> <string>twistedcaldav/test/data/server.pem</string>  <key>UserName</key> <string></string> <key>GroupName</key> <string></string> <key>ProcessType</key> <string>Combined</string> <key>MultiProcess</key> <dict> <key>ProcessCount</key> <integer>2</integer>  </dict>  <key>Notifications</key> <dict>  <key>CoalesceSeconds</key> <integer>3</integer> <key>InternalNotificationHost</key> <string>localhost</string> <key>InternalNotificationPort</key> <integer>62309</integer> <key>Services</key> <dict> <key>AMPNotifier</key> <dict> <key>Service</key> <string>calendarserver.push.amppush.AMPPushNotifierService</string> <key>Enabled</key> <true/> <key>Port</key> <integer>62311</integer> <key>EnableStaggering</key> <false/> <key>StaggerSeconds</key> <integer>3</integer> </dict> <key>SimpleLineNotifier</key> <dict>  <key>Service</key> <string>twistedcaldav.notify.SimpleLineNotifierService</string> <key>Enabled</key> <false/> <key>Port</key> <integer>62308</integer> </dict> <key>XMPPNotifier</key> <dict>  <key>Service</key> <string>twistedcaldav.notify.XMPPNotifierService</string> <key>Enabled</key> <false/>  <key>Host</key> <string>xmpp.host.name</string> <key>Port</key> <integer>5222</integer>  <key>JID</key> <string>jid(a)xmpp.host.name/resource</string> <key>Password</key> <string>password_goes_here</string>  <key>ServiceAddress</key> <string>pubsub.xmpp.host.name</string>  <key>CalDAV</key> <dict> <key>APSBundleID</key> <string></string> <key>SubscriptionURL</key> <string></string> </dict> <key>CardDAV</key> <dict> <key>APSBundleID</key> <string></string> <key>SubscriptionURL</key> <string></string> </dict> <key>NodeConfiguration</key> <dict> <key>pubsub#deliver_payloads</key> <string>1</string> <key>pubsub#persist_items</key> <string>1</string> </dict>  <key>KeepAliveSeconds</key> <integer>120</integer>  <key>HeartbeatMinutes</key> <integer>30</integer>  <key>AllowedJIDs</key> <array>  </array> </dict> </dict> </dict>  <key>Scheduling</key> <dict>  <key>CalDAV</key> <dict> <key>EmailDomain</key> <string></string> <key>HTTPDomain</key> <string></string> <key>AddressPatterns</key> <array> </array> <key>OldDraftCompatibility</key> <true/> <key>ScheduleTagCompatibility</key> <true/> <key>EnablePrivateComments</key> <true/> </dict>  <key>iSchedule</key> <dict> <key>Enabled</key> <false/> <key>AddressPatterns</key> <array> </array> <key>Servers</key> <string>servertoserver-test.xml</string> </dict>  <key>iMIP</key> <dict> <key>Enabled</key> <false/> <key>MailGatewayServer</key> <string>localhost</string> <key>MailGatewayPort</key> <integer>62310</integer> <key>Sending</key> <dict> <key>Server</key> <string>192.168.0.18</string> <key>Port</key> <integer>25</integer> <key>UseSSL</key> <false/> <key>Username</key> <string>abuse(a)darwin.int</string> <key>Password</key> <string>mailjol@123</string> <key>Address</key> <string>abuse(a)darwin.int</string>  <key>SupressionDays</key> <integer>7</integer>  </dict> <key>Receiving</key> <dict> <key>Server</key> <string>192.168.0.18</string> <key>Port</key> <integer>143</integer> <key>Type</key> <string>imap</string>  <key>UseSSL</key> <false/> <key>Username</key> <string>abuse(a)darwin.int</string> <key>Password</key> <string>mailjol@123</string> <key>PollingSeconds</key> <integer>30</integer> </dict> <key>AddressPatterns</key> <array> <string>.*</string> </array> </dict>  <key>Options</key> <dict> <key>AllowGroupAsOrganizer</key> <false/> <key>AllowLocationAsOrganizer</key> <false/> <key>AllowResourceAsOrganizer</key> <false/> <key>AttendeeRefreshBatch</key> <integer>0</integer> <key>V1Compatibility</key>  <false/> <key>AutoSchedule</key> <dict> <key>Enabled</key> <true/> <key>Always</key> <false/>  <key>DefaultMode</key> <string>automatic</string> </dict> </dict> </dict>  <key>FreeBusyURL</key> <dict> <key>Enabled</key> <true/> <key>TimePeriod</key> <integer>14</integer> <key>AnonymousAccess</key> <false/> </dict>   <key>EnableDropBox</key> <true/>  <key>EnablePrivateEvents</key> <true/>  <key>EnableTimezoneService</key> <true/>  <key>EnableBatchUpload</key> <true/>  <key>Sharing</key> <dict> <key>Enabled</key> <true/> <key>AllowExternalUsers</key> <false/> <key>Calendars</key> <dict> <key>Enabled</key> <true/> </dict> <key>AddressBooks</key> <dict> <key>Enabled</key> <true/> </dict> </dict>   <key>EnableSACLs</key> <false/>  <key>EnableReadOnlyServer</key> <false/>  <key>EnableWebAdmin</key> <true/>  <key>ResponseCompression</key> <false/>  <key>HTTPRetryAfter</key> <integer>180</integer>  <key>ControlSocket</key> <string>caldavd.sock</string>  <key>Memcached</key> <dict> <key>MaxClients</key> <integer>5</integer> <key>memcached</key> <string>memcached</string>  <key>Options</key> <array>   </array> </dict>  <key>EnableResponseCache</key> <true/> <key>ResponseCacheTimeout</key> <integer>30</integer>   <key>Postgres</key> <dict> <key>Options</key> <array>     </array> </dict>  <key>QueryCaching</key> <dict> <key>Enabled</key> <true/> <key>MemcachedPool</key> <string>Default</string> <key>ExpireSeconds</key> <integer>3600</integer> </dict>  <key>GroupCaching</key> <dict> <key>Enabled</key> <true/> <key>EnableUpdater</key> <true/> <key>MemcachedPool</key> <string>Default</string> <key>UpdateSeconds</key> <integer>300</integer> <key>ExpireSeconds</key> <integer>3600</integer> <key>LockSeconds</key> <integer>300</integer> <key>UseExternalProxies</key> <false/> </dict>  <key>MaxPrincipalSearchReportResults</key> <integer>500</integer>  <key>Twisted</key> <dict> <key>twistd</key> <string>../Twisted/bin/twistd</string> </dict> <key>Localization</key> <dict> <key>TranslationsDirectory</key> <string>locales</string> <key>LocalesDirectory</key> <string>locales</string> <key>Language</key> <string>English</string> </dict> </dict> </plist>

2 2

"write only" when syncing iPhone with old version of calendarserver running on NAS
by Eric Laurenz 03 Jul '13

03 Jul '13

Hi all, I want to stop sharing my calendar google and the guys behind. So I tried to setup a calendar server on my NAS (WD My Book Live). Though, after hours of searching and trying, I got to a point where I need help. Baseline: The NAS runs a Debian Lenny (5.0). I don't want to mess around with it too much, so upgrading is not an option. I used the calendarserver package for Lenny, i.e. 1.2.dfsg-8. A bit outdated, I admit, though I wouldn't know how to install a newer version w/o a precooked Debian package. Clients are: TB+Lighting and iPhone iOS 6.1.3. After some effort I managed to set up the server, disable http and get all traffic through ssl. The NAS is behind a router that forwards the ssl port. TB+Lighting works fine. Problem: With the iPhone it seems as I had only write access to the calendar. On it don't get any other entry but those added with the iPhone itself. With the other clients I can read the entries made through the iPhone just like all other entries. Disabling ssl and passing all traffic cleartext didn't change anything. To make sure it wasn't the iPhone, I set up calendarserver (2.4.dfsg-7) on Ubuntu 12.04 LTS. Here everything works fine. However, I can't use my notebook as a server ... I attached the config files and the error log for the following actions: 1. restart the server, 2. try to sync with iPhone (failed), 3. sync with TB+Lightning (works). Thanks in advance and all the best, Eric

1 0