[CalendarServer-dev] calendarserver on linux via NssDirectory

[Cyrus Daboo]

Hi Marco,

--On February 23, 2009 3:58:33 PM +0100 Marco Ghidinelli 
<marco.ghidinelli at turboden.net> wrote:

> i've successfully tried calendarserver with accounts.xml users, and now
> i'm trying to integrate it with my activedirectory domain.
>
> getent passwd shows all users account correcly (i use the winbind nss
> "plugin") and the kerberos authentication (from the kinit commandline)
> works.
>
> i create the krb5.keytab file on the (win 2003) kerberos server for the
> principal:
>
> HTTP/muttley.domain.net at DOMAIN.LOCAL
>
> and it is showed correctly with klist -k  /etc/krb5.keytab on the linux
> machine.
>
> the calendarserver configuration is taken from the guido page:
> http://honk.sigxcpu.org/con/Apple_Calendarser_with_Name_Service_Switch_di
> rectory_backend.html
>
> connecting (with firefox) i got always the message:
>
> 9-02-23 15:50:34+0100 [-] [caldav-8008]  [HTTPChannel,3,192.168.0.29] GET
> /calendars/users/marco.ghidinelli/ HTTP/1.1
> 2009-02-23 15:50:34+0100 [-] [caldav-8008]  [HTTPChannel,3,192.168.0.29]
> "Authentication failed: Incorrect credentials for
> <NssUserRecord[users at 27a5f82b-c2bd-5387-8942-a62eb12bb26c(domain.net)]
> marco.ghidinelli(marco.ghidinelli) 'Marco Ghidinelli'>"
>
> with the wrong or with the right password.
>
> tcpdump'ing the port 88 i can't see any packet exchanged from the machine.

Have you enabled Kerberos authentication in the server's caldavd.plist 
file? When the server starts up it ought to print out status information 
about the configured authentication mechanisms. What does it show for 
kerberos?

-- 
Cyrus Daboo