[CalendarServer-users] Calendar Users from AD

[Chris Scrofani]

Hi David, thanks for the advice.

Do you know if Kerberos is enabled by default in Win2003 AD servers?  I 
can't seem to find it in Windows...

Thanks,
Chris

David Reid wrote:
> Hi Chris,
>
> On Nov 15, 2007, at 9:34 PM, Chris Scrofani wrote:
>
>> Hello All,
>>
>> I have a OS X 10.5.1 server, which is set up in Workgroup mode.  I 
>> simply want to enable file sharing, calendaring, and get my list of 
>> users from my existing Active Directory domain.
>>
>> I have set up the server as an Open Directory master, and it is also 
>> successfully connected to my Active Directory domain.  I imported all 
>> of my users from the AD domain into a local group, and was able to 
>> assign that group privileges to read/write to a shared network 
>> folder.  File sharing seems to be set up perfectly at this point.
>>
>> What I am having trouble with is getting those same AD accounts 
>> working with iCal server.  If I look in the Users section of Server 
>> Preferences, there is only one account in there, my Administrator 
>> account.  I tested a CalDAV connection from iCal.app and was 
>> successfully able to connect using this one Administrator account.  
>> None of the other accounts from the AD seemed to work though, so I 
>> tried importing an individual account from the AD into the Users 
>> section of Server Preferences.  This seems to create the necessary 
>> conditions needed for the account to access iCal server, except that 
>> whenever I try to use that account to connect with iCal.app, it gives 
>> me the error "Your password was rejected by the server 192.168.*.* 
>> for the login *****".  I surely am not typing the password wrong, 
>> since I tried it with a couple of different accounts and I use the 
>> same passwords every day.
>
> The calendar server defaults to using HTTP Digest authentication, 
> which is not supported by Active Directory.  Turn on kerberos in iCal 
> (it's on in the server by default) or optionally enable Basic 
> authentication (and disable digest) in the caldavd plist.
>
> -David
>