[CalendarServer-users] Connecting caldavd with LDAP

[Martin Probst]

hi,

im running calendarserver 2.4 from debian testing repository and try to connect caldavd against an openldap server. This seemingly works, but i dont get authorized via browser/client. Is there any special ldap scheme needed? The Problem seems, that it find a user and some attributes but don query for userPassword or something else?!

Here are some log entries:

2010-11-10 10:34:56+0100 [-] [caldav-8008]  [HTTPChannel,3,192.168.0.14] [twistedcaldav.extensions#info] GET /principals/ HTTP/1.1
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [HTTPChannel,3,192.168.0.14] [twistedcaldav.directory.digest.DigestCredentialsMemcache#debug] Getting Cache Token for '635220539644363328011995293747422815554635198556917449863'
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [HTTPChannel,3,192.168.0.14] [twistedcaldav.memcachepool.MemCachePool#debug] Busied client: <twistedcaldav.memcachepool.PooledMemCacheProtocol instance at 0x201ecb0>
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [HTTPChannel,3,192.168.0.14] [twistedcaldav.memcachepool.MemCachePool#debug] Clients #free: 0, #busy: 1, #pending: 0, #queued: 0
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.memcachepool.MemCachePool#debug] Freed client: <twistedcaldav.memcachepool.PooledMemCacheProtocol instance at 0x201ecb0>
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.memcachepool.MemCachePool#debug] Clients #free: 1, #busy: 0, #pending: 0, #queued: 0
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.directory.ldapdirectory.LdapDirectoryService#debug] Memcache: checking dir|shortname|test
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.directory.ldapdirectory.LdapDirectoryService#debug] Memcache: miss dir|shortname|test
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.directory.ldapdirectory.LdapDirectoryService#debug] Faulting record for attribute 'shortname' with value 'test'
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [LdapDirectoryService] [twistedcaldav.directory.ldapdirectory.LdapDirectoryService#debug] Querying directory for recordTypes ['users'], indexType shortname and indexKey test
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [LdapDirectoryService] [twistedcaldav.directory.ldapdirectory.LdapDirectoryService#info] Retrieving ldap record with base ou=accounts,dc=example,dc=de and filter (&(&(!(objectClass=organizationalUnit))(objectClass=inetOrgPerson))(|(uid=test)(userid=test))).
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.directory.cachingdirectory.DictRecordTypeCache#debug] Memcache: storing dir|shortname|test
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.directory.cachingdirectory.DictRecordTypeCache#debug] Memcache: storing dir|guid|test
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.directory.ldapdirectory.LdapDirectoryService#debug] Found record for attribute 'shortname' with value 'test'
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.directory.sudo.SudoDirectoryService#info] Directory service <SudoDirectoryService 'Test Realm': FilePath('/etc/caldavd/sudoers.plist')> has no GUID; generating service GUID from realm name.
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.directory.digest.DigestCredentialsMemcache#debug] Getting Cache Token for '758317853162220295070118611824224777764394195246480927977'
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.memcachepool.MemCachePool#debug] Busied client: <twistedcaldav.memcachepool.PooledMemCacheProtocol instance at 0x201ecb0>
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.memcachepool.MemCachePool#debug] Clients #free: 0, #busy: 1, #pending: 0, #queued: 0
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.memcachepool.MemCachePool#debug] Freed client: <twistedcaldav.memcachepool.PooledMemCacheProtocol instance at 0x201ecb0>
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.memcachepool.MemCachePool#debug] Clients #free: 1, #busy: 0, #pending: 0, #queued: 0
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.directory.digest.DigestCredentialsMemcache#debug] Setting Cache Token for '758317853162220295070118611824224777764394195246480927977'
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.memcachepool.MemCachePool#debug] Busied client: <twistedcaldav.memcachepool.PooledMemCacheProtocol instance at 0x201ecb0>
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.memcachepool.MemCachePool#debug] Clients #free: 0, #busy: 1, #pending: 0, #queued: 0
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.memcachepool.MemCachePool#debug] Freed client: <twistedcaldav.memcachepool.PooledMemCacheProtocol instance at 0x201ecb0>
2010-11-10 10:34:56+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] [twistedcaldav.memcachepool.MemCachePool#debug] Clients #free: 1, #busy: 0, #pending: 0, #queued: 0


The next strange thing is, that if i re-authorize myself in the browser or client, it do not query the ldap server anymore. Caldavd try to catch the authorization only out of memcached. Any suggestions or hints?

thanks in advance
maddin