[CalendarServer-users] Kerberos and install on OmniOS (illumos)
Olaf Marzocchi
lists at marzocchi.net
Sun Nov 9 07:23:09 PST 2014
I’m trying right now and I will report about it, but I would like to mention separately that I’m having timeout problems with the CVS server:
> svn: E000145: Error retrieving REPORT (145): Connection timed out
I have a reliable and fast connection here (The Netherlands) and I’m downloading repos from other servers without issues, only CalendarServer appears to cut the connection too easily: at least four times during the first pull of the main CalendarServer repo.
Olaf
> Il giorno 05/nov/2014, alle ore 23:11, Andre LaBranche <dre at apple.com> ha scritto:
>
>> On Nov 5, 2014, at 1:55 PM, Olaf Marzocchi <lists at marzocchi.net <mailto:lists at marzocchi.net>> wrote:
>>
>> Dear Andre,
>> I checked out today the latest version (revision 14134) and i tried the compilation again but the issue is the same.
>> I suppose you haven’t updated the source code with the “right flags”. If you provide me with them, I will try the compilation and report back.
>
> I haven’t had a chance to do this, and really it’s a question for OmniOS and / or Kerberos hackers.
>
> It would probably be easier to simply disable kerberos support in Calendar Server if you don’t need it. To do this:
>
> 1) Edit requirements-stable.txt to comment out the line that declares the dependency on PyKerberos.
>
> # -e svn+http://svn.calendarserver.org/repository/calendarserver/PyKerberos/trunk@13420#egg=kerberos <svn+http://svn.calendarserver.org/repository/calendarserver/PyKerberos/trunk@13420#egg=kerberos>
>
> 2) Run ./bin/develop again
>
> 3) Make sure none of your server config plists try to activate Kerberos by setting the Authentication --> Kerberos --> Enabled key to false.
>
> <!-- Kerberos/SPNEGO -->
> <key>Kerberos</key>
> <dict>
> <key>Enabled</key>
> <false/>
> </dict>
>
> 4) Start server with ./bin/run -n
>
> At startup, the server logs about the configured authentication backends with the “calendarserver.tap.util" prefix, at log level “info”. In the below log snippet, my server has 4 authentication styles enabled, and kerberos is disabled.
>
> 2014-11-05 14:06:42-0800 [-] [calendarserver.tap.util#info] Setting up scheme: basic
> 2014-11-05 14:06:42-0800 [-] [calendarserver.tap.util#info] Setting up scheme: clientcertificate
> 2014-11-05 14:06:42-0800 [-] [calendarserver.tap.util#info] Setting up scheme: digest
> 2014-11-05 14:06:42-0800 [-] [calendarserver.tap.util#info] Setting up scheme: wiki
>
> Please let me know if this works for you. There is a fair chance that you will hit another roadblock after clearing this one :)
>
> Cheers,
> -dre
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.macosforge.org/pipermail/calendarserver-users/attachments/20141109/74e6ce45/attachment.html>
More information about the calendarserver-users
mailing list