am trying to bind calendarserver to LDAP. The relevant config part is below. Problem: calendarserver does not respond any more (when trying to use a browser, I will get a timeout).
When trying:
su caldavd -p -c "calendarserver_manage_principals --list-principals users“
i will get:
Traceback (most recent call last):
File "/usr/bin/calendarserver_manage_principals", line 32, in <module>
main()
File "/usr/lib/python2.7/dist-packages/calendarserver/tools/principals.py", line 250, in main
config.directory = getDirectory()
File "/usr/lib/python2.7/dist-packages/calendarserver/tools/util.py", line 143, in getDirectory
directory = BaseDirectoryService(config.DirectoryService.params)
File "/usr/lib/python2.7/dist-packages/twistedcaldav/directory/ldapdirectory.py", line 231, in __init__
attrSet.add(attr)
TypeError: unhashable type: 'list'
I double-checked the ldap credentials (the password given below is just a placeholder).
Does anybody have an idea how I can debug this? Thanks for your help!
=== caldav.plist ===
<!-- OpenLDAP Directory Service -->
<key>DirectoryService</key>
<dict>
<key>type</key>
<string>twistedcaldav.directory.ldapdirectory.LdapDirectoryService</string>
<key>params</key>
<dict>
<key>recordTypes</key>
<array>
<string>users</string>
<string>groups</string>
</array>
<key>cacheTimeout</key>
<integer>10</integer>
<key>uri</key>
<string>ldap://127.0.0.1:389/</string> <!-- your ldap server url -->
<key>tls</key>
<false/>
<key>tlsCACertFile</key>
<string></string>
<key>tlsCACertDir</key>
<string></string>
<key>tlsRequireCert</key>
<string>never</string>
<key>credentials</key>
<dict>
<key>dn</key>
<string>cn=admin,dc=company,dc=com</string> <!-- dn to auth as -->
<key>password</key>
<string>12345</string> <!-- password to auth with -->
</dict>
<key>rdnSchema</key>
<dict>
<key>base</key>
<string>dc=company,dc=com</string> <!-- your base dn -->
<key>guidAttr</key>
<string>uid</string> <!-- LDAP attribute used for GUIDs -->
<key>users</key>
<dict>
<key>rdn</key>
<string>ou=people</string> <!-- dn for users (relative to base dn) -->
<key>mapping</key>
<dict>
<key>recordName</key>
<string>uid</string>
<key>fullName</key>
<string>cn</string>
<key>emailAddresses</key>
<array>
<string>mail</string>
</array>
<key>firstName</key>
<string>sn</string>
<key>lastName</key>
<string>givenName</string>
</dict>
</dict>
<key>groups</key>
<dict>
<key>rdn</key>
<string>ou=groups</string> <!-- dn for groups (relative to base dn) -->
<key>mapping</key>
<dict>
<key>recordName</key>
<string>cn</string>
<key>fullName</key>
<string>cn</string>
<key>emailAddresses</key>
<array>
<string>mail</string>
</array>
<key>firstName</key>
<string></string>
<key>lastName</key>
<string></string>
</dict>
</dict>
</dict>
<key>groupSchema</key>
<dict>
<key>membersAttr</key>
<string>uniqueMember</string> <!-- LDAP attribute which indicates members of a group -->
<key>nestedGroupsAttr</key>
<string></string>
<key>memberIdAttr</key>
<string></string>
</dict>
<key>resourceSchema</key>
<dict>
<key>resourceInfoAttr</key>
<string></string>
<key>autoScheduleAttr</key>
<string></string>
<key>autoScheduleEnabledValue</key>
<string></string>
<key>proxyAttr</key>
<string></string>
<key>readOnlyProxyAttr</key>
<string></string>
</dict>
</dict>
</dict>