[CalendarServer-users] Kerberos and install on OmniOS (illumos)

[Olaf Marzocchi]

I’m trying right now and I will report about it, but I would like to mention separately that I’m having timeout problems with the CVS server:

> svn: E000145: Error retrieving REPORT (145): Connection timed out


I have a reliable and fast connection here (The Netherlands) and I’m downloading repos from other servers without issues, only CalendarServer appears to cut the connection too easily: at least four times during the first pull of the main CalendarServer repo.

Olaf




> Il giorno 05/nov/2014, alle ore 23:11, Andre LaBranche <dre at apple.com> ha scritto:
> 
>> On Nov 5, 2014, at 1:55 PM, Olaf Marzocchi <lists at marzocchi.net <mailto:lists at marzocchi.net>> wrote:
>> 
>> Dear Andre,
>> I checked out today the latest version (revision 14134) and i tried the compilation again but the issue is the same.
>> I suppose you haven’t updated the source code with the “right flags”. If you provide me with them, I will try the compilation and report back.
> 
> I haven’t had a chance to do this, and really it’s a question for OmniOS and / or Kerberos hackers.
> 
> It would probably be easier to simply disable kerberos support in Calendar Server if you don’t need it. To do this:
> 
> 1) Edit requirements-stable.txt to comment out the line that declares the dependency on PyKerberos. 
> 
> # -e svn+http://svn.calendarserver.org/repository/calendarserver/PyKerberos/trunk@13420#egg=kerberos <svn+http://svn.calendarserver.org/repository/calendarserver/PyKerberos/trunk@13420#egg=kerberos>
> 
> 2) Run ./bin/develop again
> 
> 3) Make sure none of your server config plists try to activate Kerberos by setting the Authentication --> Kerberos --> Enabled key to false.
> 
>       <!-- Kerberos/SPNEGO -->
>       <key>Kerberos</key>
>       <dict>
>         <key>Enabled</key>
>         <false/>
>       </dict>
> 
> 4) Start server with ./bin/run -n
> 
> At startup, the server logs about the configured authentication backends with the “calendarserver.tap.util" prefix, at log level “info”. In the below log snippet, my server has 4 authentication styles enabled, and kerberos is disabled.
> 
> 2014-11-05 14:06:42-0800 [-] [calendarserver.tap.util#info] Setting up scheme: basic
> 2014-11-05 14:06:42-0800 [-] [calendarserver.tap.util#info] Setting up scheme: clientcertificate
> 2014-11-05 14:06:42-0800 [-] [calendarserver.tap.util#info] Setting up scheme: digest
> 2014-11-05 14:06:42-0800 [-] [calendarserver.tap.util#info] Setting up scheme: wiki
> 
> Please let me know if this works for you. There is a fair chance that you will hit another roadblock after clearing this one :)
> 
> Cheers,
> -dre

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.macosforge.org/pipermail/calendarserver-users/attachments/20141109/74e6ce45/attachment.html>