[CalendarServer-users] calendarserver on debian via nss and kerberos

[Marco Ghidinelli]

On 03/25/2009 03:46 PM, Guido Günther wrote:

>>
>> i changed the line above, but with or without the change the result is
>> the same:
> Did you allow for non kerberos authentication in your configuration? You
> should can disable kerberos authentication completely for testing.
> Cheers,

hello guido, sorry for the delay.

i disabled the kerberos auth, and (with the verifyCredentials() forced 
to True) i can now login, and see the collection listing and properties.

and now?

i reassume the kerberos situation:

$ kinit -k -t /etc/krb5.keytab http/muttley.domain.local at TURBODEN.LOCAL
$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: http/muttley.domain.local at DOMAIN.LOCAL

Valid starting     Expires            Service principal
03/25/09 18:21:15  03/26/09 04:21:17  krbtgt/DOMAIN.LOCAL at DOMAIN.LOCAL
	renew until 03/26/09 18:21:15
03/25/09 18:21:20  03/26/09 04:21:17  http/muttley.domain.local at DOMAIN.LOCAL
	renew until 03/26/09 18:21:15


Kerberos 4 ticket cache: /tmp/tkt1000
klist: You have no tickets cached

$ kvno http/muttley.turboden.local
http/muttley.domain.local at DOMAIN.LOCAL: kvno = 6
$