[CalendarServer-dev] calendarserver on linux via NssDirectory

Marco Ghidinelli marco.ghidinelli at turboden.net
Mon Feb 23 06:58:33 PST 2009


hello,

i've successfully tried calendarserver with accounts.xml users, and now 
i'm trying to integrate it with my activedirectory domain.

getent passwd shows all users account correcly (i use the winbind nss 
"plugin") and the kerberos authentication (from the kinit commandline) 
works.

i create the krb5.keytab file on the (win 2003) kerberos server for the 
principal:

HTTP/muttley.domain.net at DOMAIN.LOCAL

and it is showed correctly with klist -k  /etc/krb5.keytab on the linux 
machine.

the calendarserver configuration is taken from the guido page:
http://honk.sigxcpu.org/con/Apple_Calendarser_with_Name_Service_Switch_directory_backend.html

connecting (with firefox) i got always the message:

9-02-23 15:50:34+0100 [-] [caldav-8008]  [HTTPChannel,3,192.168.0.29] 
GET /calendars/users/marco.ghidinelli/ HTTP/1.1
2009-02-23 15:50:34+0100 [-] [caldav-8008]  [HTTPChannel,3,192.168.0.29] 
"Authentication failed: Incorrect credentials for 
<NssUserRecord[users at 27a5f82b-c2bd-5387-8942-a62eb12bb26c(domain.net)] 
marco.ghidinelli(marco.ghidinelli) 'Marco Ghidinelli'>"

with the wrong or with the right password.

tcpdump'ing the port 88 i can't see any packet exchanged from the machine.

any idea?
where i am wrong?





More information about the calendarserver-dev mailing list