[CalendarServer-users] Kerberos Issue / Principals / Authentication

[toddinsb]

Cyrus Daboo-3 wrote:
> 
> Hi Jindan,
> 
> --On November 5, 2007 8:29:03 PM -0800 Jindan Zhou <jindan at gmail.com>
> wrote:
> 
>> Okay, I apologize for the misinformation: my firewall was not shut down.
>> Once I did shut it down, I have no problem access the server.
>> Now a side question: with iptables do I only open port 8008 and 8443? or
>> should I instead open a range of ports? if so what range should I open?
> 
> You need only open those two ports. The server does internally communicate 
> on some other ports when its running on a multi-cpu/multi-core machine
> with 
> its load balancer option, but those are all on the localhost interface and 
> should not be impacted by the firewall.
> 
> -- 
> Cyrus Daboo
> 
> _______________________________________________
> calendarserver-users mailing list
> calendarserver-users at lists.macosforge.org
> http://lists.macosforge.org/mailman/listinfo/calendarserver-users
> 
> 

I was just reviewing this post and it looks like you got a bit  off track
because the original post is a request for a Kerberos issue fix but refers
to an error: "No principal found for admin".  This error is unrelated to the
problem at hand as disabling kerberos (as noted above) in caldavd.plist
doesn't fix this
problem.  This problem is related to the following block in caldavd.plist:

 <!-- Principals with "DAV:all" access (relative URLs)-->                                
 <key>AdminPrincipals</key>                                                                                                                                                
 <array>                                                                                                                                                                   
   <string>/principals/__uids__/admin/</string>                                                                                                                             
 </array>                                                                                                                                                                  

Commenting out this code will stop the "No principal found for admin" error
from occurring and doesn't seem to affect the server.

-- 
View this message in context: http://www.nabble.com/Kerberos-Issue---Principals---Authentication-tp13519406p18503279.html
Sent from the Calendar Server - Users mailing list archive at Nabble.com.