[CalendarServer-users] Problems with XMLDirectoryService

[Ed Poe]

I have a server built from SVN running on debian etch (with python 2.5  
from sid).  It's configured to use XMLDirectoryService.  Client  
software is iCal 3.0.3 (1244) on 10.5.3.

Although users can log in and edit their own calendars, free/busy  
doesn't work ("Availability is not supported on the server for this  
account) and delegates for resources don't work ("Delegation is not  
supported on the server for this account".  Also following  
instructions I've found in the archives I'm unable to set up iCal to  
access shared calendars ("Access is denied at https://<server>:8443/ 
calendars/groups/<group>/calendar with this login and password."),  
although I'm not positive that iCal is supposed to be able to do this  
anyway as the documentation is lacking (as has been discussed on this  
list).  The cert is self-signed, but the CA is imported into the  
keychain and it works fine in Safari and Mail.app so I don't think  
it's an https problem, and I have the same issue with http anyway.  I  
do get this message in the error_log:

2008-06-12 12:02:05-0400 [-] [caldav-8009]  [AMP,client]  
[twisted.web2.dav.resource#info] Authentication failed: Incorrect  
credentials for  
< 
XMLDirectoryRecord 
[users at 55a7b2a7-2238-57a0-8539-652e8aad9fdf(Calendar)]  
bf6c39d3-5267-5bfc-8df1-39d7d1591e80(ed) 'Ed Poe'>

Is this just a subtle syntax error in my accounts.xml file, or is  
something else going on?  I've tried deleting data files on the server  
(both the sqlite data and the contents of the CalendarServer/Documents  
directory).  If I use a web browser I can see that the principals all  
exist.

<accounts realm="Calendar">
<user>
<guid>f1f8ce95-2482-5c41-9c47-952ec8394056</guid>
<uid>admin</uid>
<password>XXXX</password>
<name>Super User</name>
<cuaddr>mailto:root at mydomain</cuaddr>
</user>
<user>
<uid>ed</uid>
<guid>bf6c39d3-5267-5bfc-8df1-39d7d1591e80</guid>
<password>XXXX</password>
<name>Ed Poe</name>
<cuaddr>mailto:nobody at nowhere.int</cuaddr>
</user>
<user>
<uid>kate</uid>
<guid>673a4166-e05b-5908-8066-60756837fe74</guid>
<password>XXXX</password>
<name>her name</name>
<cuaddr>mailto:nobody at nowhere.int</cuaddr>
</user>
<group>
<uid>groupname</uid>
<guid>1b8539c4-074f-5bd2-ba3d-963049bfb044</guid>
<password>XXXX</password>
<name>our group</name>
<members>
<member type="users">ed</member>
<member type="users">kate</member>
</members>
</group>
<resource>
<uid>car</uid>
<guid>a8b27dba-8cf6-513e-a7cf-b940ffed94fe</guid>
<password>XXXX</password>
<name>Honda del Sol VTEC</name>
<auto-schedule/>
<proxies>
<member type="users">ed</member>
<member type="users">kate</member>
</proxies>
</resource>
</accounts>