This issue is the disappearance of OpenDirectory because macOS Server is gone.
Any advice on how to reconfigure using local authentication with the local
directory, hopefully using the same principals? I have exports and backups of
everything.
> 2023-01-01T12:08:36-0500 [directoryproxy]
> [twext.who.opendirectory._service.DirectoryRecord#error] Digest auth for user
> ‘username' failed with code 5100 (Error Domain=com.apple.OpenDirectory
> Code=5100 "Could not verify credentials because directory server does not
> support the requested authentication method."
> UserInfo={NSLocalizedDescription=Could not verify credentials because
> directory server does not support the requested authentication method.,
> NSLocalizedFailureReason=Could not verify credentials because directory
> server does not support the requested authentication method.});
I see that authentication in calendarserver.plist is reconfigurable:
> <!--
> Directory service
>
> A directory service provides information about principals (eg.
> users, groups, locations and resources) to the server.
>
> A variety of directory services are available for use.
> -->
>
> <!-- Open Directory Service (Mac OS X) -->
> <key>DirectoryService</key>
> <dict>
> <key>type</key>
> <string>opendirectory</string>
> On Jan 1, 2023, at 9:12 AM, Steven Smith <steve.t.sm...@gmail.com> wrote:
>
> I just migrated my server to Ventura, including a still-going-strong instance
> of ccs-calendarserver with APNS.
>
> All went smoothly, except for the issue that ccs-calendarserver is under
> Ventura is rejecting authentication to local accounts.
>
> I am confident that this is a new issue with macOS Ventura authentication and
> the ccs-calendarserver code base because all other authentications (a mail
> server with dovecot+postfix, etc.) work as previously under macOS 12.
>
> I’d appreciate any pointers to troubleshoot or fix this issue:
> Code lines that handle local account authentication in
> https://github.com/apple/ccs-calendarserver
> Changes in Ventura security requirements, e.g. I may have to change to TLS
> settings in the nginx proxy than handles calls to ccs-calendarserver:
> https://github.com/macports/macports-ports/blob/master/net/calendar-contacts-server/files/nginx.conf
> Where to find the macOS-level authentication error logs
>
> Thanks much!
>
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ calendarserver-users mailing list calendarserver-users@lists.macosforge.org https://lists.macosforge.org/mailman/listinfo/calendarserver-users
