[CalendarServer-users] Calendarserver + LDAP

[Oliver Werner]

Hi I want to use calendarserver on Debian,

I configured my caldavd.plist:

<key>DirectoryService</key>
    <dict>
      <key>type</key>
      <string>twistedcaldav.directory.ldapdirectory.LdapDirectoryService</string>

      <key>params</key>
      <dict>
        <key>restrictEnabledRecords</key>
        <false/>
        <key>restrictToGroup</key>
        <string>Kontrast</string>
        <key>cacheTimeout</key>
        <integer>30</integer>
        <key>uri</key>
        <string>ldap://my.server.com</string>
        <key>tls</key>
        <false/>
        <key>tlsCACertFile</key>
        <string></string>
        <key>tlsCACertDir</key>
        <string></string>
        <key>tlsRequireCert</key>
        <string>never</string>
        <key>credentials</key>
        <dict>
          <key>dn</key>
          <string>cn=my,dc=bind,dc=user</string>
          <key>password</key>
          <string>SECRET</string>
        </dict>
        <key>authMethod</key>
        <string>LDAP</string>
        <key>rdnSchema</key>
        <dict>
          <key>base</key>
          <string>dc=my,dc=base</string>
          <key>guidAttr</key>
          <string>entryUUID</string>
          <key>users</key>
          <dict>
            <key>rdn</key>
            <string>ou=Users</string>
            <key>attr</key>
            <string>uid</string>
            <key>emailSuffix</key>
            <string>kontrast.de</string>
            <key>filter</key>
            <string>(myfilter=1)</string>
            <key>loginEnabledAttr</key>
            <string></string>
            <key>loginEnabledValue</key>
            <string></string>
            <key>mapping</key>
            <dict>
              <key>recordName</key>
              <string>uid</string>
              <key>fullName</key>
              <string>cn</string>
              <key>emailAddresses</key>
              <string>mail</string>
              <key>firstName</key>
              <string>givenName</string>
              <key>lastName</key>
              <string>sn</string>
            </dict>
          </dict>
	<key>groups</key>
          <dict>
            <key>rdn</key>
            <string>ou=Groups</string>
            <key>attr</key>
            <string>cn</string>
            <key>emailSuffix</key>
            <string>kontrast.de</string>
            <key>filter</key>
            <string></string>
            <key>mapping</key>
            <dict>
              <key>recordName</key>
              <string>cn</string>
              <key>fullName</key>
              <string>cn</string>
              <key>emailAddresses</key>
              <string>mail</string>
              <key>firstName</key>
              <string>givenName</string>
              <key>lastName</key>
              <string>sn</string>
            </dict>
          </dict>
        </dict>
        <key>groupSchema</key>
        <dict>
          <key>membersAttr</key>
          <string>member</string>
          <key>nestedGroupsAttr</key>
          <string></string>
          <key>memberIdAttr</key>
          <string></string>
        </dict>
 	  <key>resourceSchema</key>
        <dict>
          <key>resourceInfoAttr</key>
          <string></string>
          <key>autoScheduleAttr</key>
          <string></string>
          <key>autoScheduleEnabledValue</key>
          <string>yes</string>
          <key>proxyAttr</key>
          <string></string>
          <key>readOnlyProxyAttr</key>
          <string></string>
        </dict>
      </dict>
    </dict>



and with calendarserver_manage_principals --list-principals users

I got my LDAP-Users.

When configure the Calendar-Client (e.g. iCal) Programm says Calandarserver deny my user.

In /var/log/caldavd/error.log I saw the error:

Faulting record for attribute 'shortname' with value 'users:oliver.werner'
Could not find the principal resource for user id: users:oliver.werner


anyone can help my?




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/calendarserver-users/attachments/20130527/709d6eca/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1995 bytes
Desc: not available
URL: <http://lists.macosforge.org/pipermail/calendarserver-users/attachments/20130527/709d6eca/attachment.p7s>