[CalendarServer-users] Working with Group Calendars

[Tyler Keating]

Good news.  I did a clean install of the CalendarServer and libraries  
and this fixed the problem.  I will be sure to try this first next time.

- Tyler Keating

On 28-Feb-07, at 4:37 PM, Tyler Keating wrote:

> Cyrus,
>
>>> I'm having trouble accessing group calendars.  So far I've  
>>> implemented a
>>> custom directory service tied to my application, but when a  
>>> member tries
>>> to access their group's calendar, I get a "403 Forbidden"  
>>> response.  The
>>> custom directory service is properly returning the set of members  
>>> for the
>>> group and then the DirectoryRecords for each member in the  
>>> group.  I've
>>> verified that the groupMembers() method in principal.py returns the
>>> proper DirectoryPrincipalResources of the members as well.  I  
>>> don't know
>>> if it's an issue with the directory service, but I thought I'd  
>>> mention it
>>> anyway.
>>>
>>> Can someone please explain what I'm missing?
>>
>> To check whether principals and group memberships are setup  
>> properly, use a browser and view the /principals hierarchy there.  
>> When you click on a principal the server will generate an HTML  
>> page with some (really) useful information on it. So check that  
>> your groups do appear under /principals and that their membership  
>> looks right. Also check the regular principals that are members of  
>> a group to verify they show themselves as belonging to it.
>>
>> If the principal all look OK, then next thing to check is the ACLs  
>> on the resources you are trying to access. For that you may need  
>> to probe with a WebDAV client that allows you to inspect the ACL  
>> property (you will likely need to do that as the admin user).
>
> As always, I really appreciate your quick response.  I think I'm on  
> the right track now at least, but unfortunately, I haven't figured  
> this one out on my own.  For example, when I try to view my group  
> principal in the browser, I get the following error (or vice versa  
> on the user principal):
>
> Unhandled Error
>         Traceback (most recent call last):
>           File "/Users/admin/Developer/Collaboration/Twisted/ 
> twisted/internet/defer.py", line 191, in addCallback
>             callbackKeywords=kw)
>           File "/Users/admin/Developer/Collaboration/Twisted/ 
> twisted/internet/defer.py", line 182, in addCallbacks
>             self._runCallbacks()
>           File "/Users/admin/Developer/Collaboration/Twisted/ 
> twisted/internet/defer.py", line 317, in _runCallbacks
>             self.result = callback(self.result, *args, **kw)
>           File "/Users/admin/Developer/Collaboration/Twisted/ 
> twisted/internet/defer.py", line 663, in unwindGenerator
>             return _deferGenerator(f(*args, **kwargs))
>         --- <exception caught here> ---
>           File "/Users/admin/Developer/Collaboration/Twisted/ 
> twisted/internet/defer.py", line 623, in _deferGenerator
>             result = g.next()
>           File "/Users/admin/Developer/Collaboration/CalendarServer/ 
> twistedcaldav/extensions.py", line 269, in gotProperties
>             property = property.getResult()
>           File "/Users/admin/Developer/Collaboration/Twisted/ 
> twisted/internet/defer.py", line 609, in getResult
>             self.result.raiseException()
>           File "/Users/admin/Developer/Collaboration/Twisted/ 
> twisted/python/failure.py", line 259, in raiseException
>             raise self.type, self.value, self.tb
>         exceptions.AssertionError: Not an element:  
> <DirectoryPrincipalResource: /Users/admin/Developer/Collaboration/ 
> CalendarServer/data/principals/users/keating>
>
> I'll keep looking into it on my own, but thought I'd throw this  
> error message back to you first, in case the problem becomes  
> apparent and you've got a quick answer.  Plus the ACLs all look  
> okay, but I have no experience with ACLs.  Which ACE does a group's  
> member fall under?
>
> Thanks,
> - Tyler Keating
>
> _______________________________________________
> calendarserver-users mailing list
> calendarserver-users at lists.macosforge.org
> http://lists.macosforge.org/mailman/listinfo/calendarserver-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.macosforge.org/pipermail/calendarserver-users/attachments/20070301/dab7aaaf/attachment.html