[CalendarServer-users] GSS-Error

[Georg Troska]

Hi Jonathan,

network.negotiate... is set correctly
I'm also sure it has nothing to do with the the principal that  
authed,  as that is running on a different client. The problem occurs  
only at that client on Mac OS 10.4.

Your "ignorance on Mac clients" might be correct on some features. As  
e.g. the SSL keys must be stored in the keychain and can't be accepted  
by iCal itself. But in that case I'm using sunbird as a client.
And I guess if I am not able to connect through my browser to the  
authed areas of the server server then something different than a  
wrong client calendar configuration is happening. Are there  
differences in the Kerberos-Tools of Mac OS 10.4 and 10.5?

George

Am 01.04.2009 um 17:47 schrieb Jonathan Woodbury:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Please pardon my ignorance with Mac clients, but I wonder if the issue
> might be something like not having network.negotiate-auth.trusted-uris
> in Thunderbird set to either the calendar host URL or something  
> generic
> like 'https://'. I know that by default, Thunderbird has this setting
> set to an empty string, and that it must be properly configured for
> GSSAPI auth to succeed. Perhaps the Mac clients have something  
> similar.
>
> Jonathan
>
> Georg Troska wrote:
>> Hi,
>> I have a calendarserver running and lots of clients (linux and MACOS
>> 10.5) are using it. I have also one client with Mac OS 10.4. I'm  
>> using
>> sunbird here. My authorization method is kerberos and as said its
>> working everywhere, but when trying to use this client i get  
>> messages like:
>>
>> Authentication failed: Bad credentials: Unspecified GSS failure.   
>> Minor
>> code may provide more information(Wrong principal in request)
>>
>> in my caldav log. I can't look into the subdirectors of the
>> caldav-server as well. Can't meens theres no errors, but there are  
>> tons
>> of messages like said before.
>>
>> Any idea why this client is not working?
>>
>> P.S.: Kerberos Auth seems to work I get a user and a host ticket
>>
>> Georg
>>
>> _______________________________________________
>> calendarserver-users mailing list
>> calendarserver-users at lists.macosforge.org
>> http://lists.macosforge.org/mailman/listinfo.cgi/calendarserver-users
>
> - --
> Jonathan Woodbury
> Systems Engineer
> American Research Institute
> 919-228-4965
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFJ04yi7gxy1LLcNgARAq5DAJ41R1E7VVzCgmN54dswLR24IAd8AwCeLdzY
> mI+NvyK7RoTsGpUMOfqeQoY=
> =GNw2
> -----END PGP SIGNATURE-----

Georg Troska
Experimentelle Physik IV
TU Dortmund
+49 231 755 3501