Re: [otlkcon-devel] Question about Outlook Connection
Hi again and sorry for the delay. I was using the March 12 beta snapshot on XP and Outlook 2007. I never changed the Qop string key to anything than the default (which is empty) on either Darwin Calendar Server or iCal server. What puzzles me (and I've read Cyrus' answers on the calendarserver list) is that I can't get it to work with either Digest or Basic (even with Basic as the ONLY alternative. I must be doing something wrong, likely on the Outlook side. What setup exactly are you using for testing? In which order are these authenication alternatives pursued by the otlkcon plugin? thx, /Emil 31 mar 2008 kl. 19.04 skrev Kervin L. Pierre: Hello Emil, If you're using the latest build of Open Connector you shouldn't have to much issues with basic or digest authentication with Calendar Server. There is an issue with digest authentication and Apple Calendar Server if there is a value in the string child tag of the Digest key tag. Make sure that string is empty in all *.plist files, and you should be ok. Basic authentication, should just work. So if there're issues with that, then somethings wrong. Are you using the Open Connector build? Best regards, Kervin - Original Message Your efforts are much appreciated. However, I cannot for the life of me figure out how to get the connector to authenticate against iCal Server or Darwin Calendar Server. Have you - or anyone else - succeeded? Client setup: XP SP2, Outlook 2007. Server setup: iCal Server from OS X Server 10.5.2 or Darwin Calendar Server (latest = build 2263) When Digest authentication is on, I get an Unauthorized error when trying to browse the resource from Outlook. Home URI works in Safari/ Firefox. Error in the caldav log is: [NegotiateCredentialFactory] authGSSServerStep: Invalid token was supplied(No error) [AMP,client] 'Authentication failed: Bad credentials: Invalid token was supplied(No error)' When Digest/Kerberos is off and Basic is on (as edited directly in / etc/caldav/caldavd.plist), I still get Unauthorized 99% of the time. Under some special (poorly understood) circumstances, the default calendar calendar WILL show up and I was once (!) able to add an event to it (as seen by iCal client), although this quickly stopped working... HTH, /Emil 19 mar 2008 kl. 22.27 skrev Kervin L. Pierre: Hi, There seems to be some incompatibility between Apple Calendar Server and the Microsoft HTTP Auth features in certain configurations. I still haven't got Digest Authentication to work yet, and as others have noted, windows sometimes defaults to incompatible authentication schemes. There may be a work around. We've found work arounds for similar issues with the MS HTTP protocol stack and CalDAV servers. In the meantime, having Calendar Server to default to 'Basic' or 'Simple' authentication, maybe over HTTPS for security, might be the best way around this if you'd like to continue test the connector. Best regards, Kervin - Original Message From: Greg Cole To: otlkcon-devel@lists.sourceforge.net Sent: Wednesday, March 19, 2008 1:56:42 PM Subject: Re: [otlkcon-devel] Question about Outlook Connection I was able to get IE 7 to login to our iCal server by disabling the setting Enable Integrated Windows Authentication under tools - internet options - advanced tab - security section. I can find no similar setting for Outlook. Greg Cole System and Database Administrator University of Oregon School of Law 1221 University of Oregon Eugene, OR 97403 (541) 346-3933 On Mar 18, 2008, at 4:25 PM, Chad McDonald wrote: Edwin, Sorry it's taken me awhile to get back to you on this. I had the same issues that you do. From what I can tell it's an issue between Windows and the Apple iCal server implementation of CALDAV. From what I've been gathering it doesn't have much to do with Outlook or the open connector plugin. Try this: Can you login to http(s)://yourcaldavservername:8008 using IE (6 or 7, it doesn't matter) on your test windows machine? I could not. I even tried setting the iCal authentication method to any method in Sever Admin with no luck. Mozilla firefox on windows authenticates and can browse to calendar files on http(s)://mycaldavservername: 8008 just fine. There is something in IE which is also then used by Windows that prevents us from correctly authenticating to an Apple iCal server. What it is I don't know but I know that is why when you try to browse for calendars using the open connector plugin it errors out with authentication failure messages. Hope this helps a little, sorry I don't have better news for you. I'm not sure who needs to update here M$ or Apple or maybe both, but I'm going to report the issue to both parties and hope for the best. I'm copying the Open Connector List on this message as well in case it provides help for any others out
Re: [otlkcon-devel] Question about Outlook Connection
Hello Emil, If you're using the latest build of Open Connector you shouldn't have to much issues with basic or digest authentication with Calendar Server. There is an issue with digest authentication and Apple Calendar Server if there is a value in the string child tag of the Digest key tag. Make sure that string is empty in all *.plist files, and you should be ok. Basic authentication, should just work. So if there're issues with that, then somethings wrong. Are you using the Open Connector build? Best regards, Kervin - Original Message Your efforts are much appreciated. However, I cannot for the life of me figure out how to get the connector to authenticate against iCal Server or Darwin Calendar Server. Have you - or anyone else - succeeded? Client setup: XP SP2, Outlook 2007. Server setup: iCal Server from OS X Server 10.5.2 or Darwin Calendar Server (latest = build 2263) When Digest authentication is on, I get an Unauthorized error when trying to browse the resource from Outlook. Home URI works in Safari/ Firefox. Error in the caldav log is: [NegotiateCredentialFactory] authGSSServerStep: Invalid token was supplied(No error) [AMP,client] 'Authentication failed: Bad credentials: Invalid token was supplied(No error)' When Digest/Kerberos is off and Basic is on (as edited directly in / etc/caldav/caldavd.plist), I still get Unauthorized 99% of the time. Under some special (poorly understood) circumstances, the default calendar calendar WILL show up and I was once (!) able to add an event to it (as seen by iCal client), although this quickly stopped working... HTH, /Emil 19 mar 2008 kl. 22.27 skrev Kervin L. Pierre: Hi, There seems to be some incompatibility between Apple Calendar Server and the Microsoft HTTP Auth features in certain configurations. I still haven't got Digest Authentication to work yet, and as others have noted, windows sometimes defaults to incompatible authentication schemes. There may be a work around. We've found work arounds for similar issues with the MS HTTP protocol stack and CalDAV servers. In the meantime, having Calendar Server to default to 'Basic' or 'Simple' authentication, maybe over HTTPS for security, might be the best way around this if you'd like to continue test the connector. Best regards, Kervin - Original Message From: Greg Cole To: otlkcon-devel@lists.sourceforge.net Sent: Wednesday, March 19, 2008 1:56:42 PM Subject: Re: [otlkcon-devel] Question about Outlook Connection I was able to get IE 7 to login to our iCal server by disabling the setting Enable Integrated Windows Authentication under tools - internet options - advanced tab - security section. I can find no similar setting for Outlook. Greg Cole System and Database Administrator University of Oregon School of Law 1221 University of Oregon Eugene, OR 97403 (541) 346-3933 On Mar 18, 2008, at 4:25 PM, Chad McDonald wrote: Edwin, Sorry it's taken me awhile to get back to you on this. I had the same issues that you do. From what I can tell it's an issue between Windows and the Apple iCal server implementation of CALDAV. From what I've been gathering it doesn't have much to do with Outlook or the open connector plugin. Try this: Can you login to http(s)://yourcaldavservername:8008 using IE (6 or 7, it doesn't matter) on your test windows machine? I could not. I even tried setting the iCal authentication method to any method in Sever Admin with no luck. Mozilla firefox on windows authenticates and can browse to calendar files on http(s)://mycaldavservername: 8008 just fine. There is something in IE which is also then used by Windows that prevents us from correctly authenticating to an Apple iCal server. What it is I don't know but I know that is why when you try to browse for calendars using the open connector plugin it errors out with authentication failure messages. Hope this helps a little, sorry I don't have better news for you. I'm not sure who needs to update here M$ or Apple or maybe both, but I'm going to report the issue to both parties and hope for the best. I'm copying the Open Connector List on this message as well in case it provides help for any others out there struggling to make this work with Apple's iCal server. Hope you don't mind. Chad McDonald Compucraft Service Consultant 616.454.3442 [EMAIL PROTECTED] http://www.compucraft.net On Mar 12, 2008, at 11:55 PM, Edwin Bien wrote: Hello Chad Please forgive me for emailing you but I am looking for assistance with outlook connectivity to iCal server. I see from your posting on the list you experienced authentication issues. I am having similar issues. Our configuration is leopard server with open directory enabled. I get “not authorised” errors. Were you able to resolve
Re: [otlkcon-devel] Question about Outlook Connection
I was able to get IE 7 to login to our iCal server by disabling the setting Enable Integrated Windows Authentication under tools - internet options - advanced tab - security section. I can find no similar setting for Outlook. Greg Cole System and Database Administrator University of Oregon School of Law 1221 University of Oregon Eugene, OR 97403 (541) 346-3933 On Mar 18, 2008, at 4:25 PM, Chad McDonald wrote: Edwin, Sorry it's taken me awhile to get back to you on this. I had the same issues that you do. From what I can tell it's an issue between Windows and the Apple iCal server implementation of CALDAV. From what I've been gathering it doesn't have much to do with Outlook or the open connector plugin. Try this: Can you login to http(s)://yourcaldavservername:8008 using IE (6 or 7, it doesn't matter) on your test windows machine? I could not. I even tried setting the iCal authentication method to any method in Sever Admin with no luck. Mozilla firefox on windows authenticates and can browse to calendar files on http(s)://mycaldavservername: 8008 just fine. There is something in IE which is also then used by Windows that prevents us from correctly authenticating to an Apple iCal server. What it is I don't know but I know that is why when you try to browse for calendars using the open connector plugin it errors out with authentication failure messages. Hope this helps a little, sorry I don't have better news for you. I'm not sure who needs to update here M$ or Apple or maybe both, but I'm going to report the issue to both parties and hope for the best. I'm copying the Open Connector List on this message as well in case it provides help for any others out there struggling to make this work with Apple's iCal server. Hope you don't mind. Chad McDonald Compucraft Service Consultant 616.454.3442 [EMAIL PROTECTED] http://www.compucraft.net cc_logo-sm.jpg On Mar 12, 2008, at 11:55 PM, Edwin Bien wrote: Hello Chad Please forgive me for emailing you but I am looking for assistance with outlook connectivity to iCal server. I see from your posting on the list you experienced authentication issues. I am having similar issues. Our configuration is leopard server with open directory enabled. I get “not authorised” errors. Were you able to resolve this issue and if so may I ask what your resolution was? Again Sorry for the intrusion Edwin Edwin Bien IT Support ZOO 82 Wentworth Ave Kingston ACT 2604 Australia Phone: (02) 6260 8777 Fax (02) 6260 8778 email: [EMAIL PROTECTED] www.zoogroup.com.au NOTICE – The information transmitted is for use of the intended recipient only and may contain confidential or legally privileged material. If you are not the intended addressee, please notify the sender immediately and delete all records of the message from your computer. Any reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this message without the prior written consent of the sender are strictly prohibited. The contents of this communication represent the sender's personal views and opinions, which do not necessarily reflect those of ZOO. - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/___ otlkcon-devel mailing list otlkcon-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/otlkcon-devel - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ otlkcon-devel mailing list otlkcon-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/otlkcon-devel
Re: [otlkcon-devel] Question about Outlook Connection
Hi, There seems to be some incompatibility between Apple Calendar Server and the Microsoft HTTP Auth features in certain configurations. I still haven't got Digest Authentication to work yet, and as others have noted, windows sometimes defaults to incompatible authentication schemes. There may be a work around. We've found work arounds for similar issues with the MS HTTP protocol stack and CalDAV servers. In the meantime, having Calendar Server to default to 'Basic' or 'Simple' authentication, maybe over HTTPS for security, might be the best way around this if you'd like to continue test the connector. Best regards, Kervin - Original Message From: Greg Cole [EMAIL PROTECTED] To: otlkcon-devel@lists.sourceforge.net Sent: Wednesday, March 19, 2008 1:56:42 PM Subject: Re: [otlkcon-devel] Question about Outlook Connection I was able to get IE 7 to login to our iCal server by disabling the setting Enable Integrated Windows Authentication under tools - internet options - advanced tab - security section. I can find no similar setting for Outlook. Greg Cole System and Database Administrator University of Oregon School of Law 1221 University of Oregon Eugene, OR 97403 (541) 346-3933 On Mar 18, 2008, at 4:25 PM, Chad McDonald wrote: Edwin, Sorry it's taken me awhile to get back to you on this. I had the same issues that you do. From what I can tell it's an issue between Windows and the Apple iCal server implementation of CALDAV. From what I've been gathering it doesn't have much to do with Outlook or the open connector plugin. Try this: Can you login to http(s)://yourcaldavservername:8008 using IE (6 or 7, it doesn't matter) on your test windows machine? I could not. I even tried setting the iCal authentication method to any method in Sever Admin with no luck. Mozilla firefox on windows authenticates and can browse to calendar files on http(s)://mycaldavservername: 8008 just fine. There is something in IE which is also then used by Windows that prevents us from correctly authenticating to an Apple iCal server. What it is I don't know but I know that is why when you try to browse for calendars using the open connector plugin it errors out with authentication failure messages. Hope this helps a little, sorry I don't have better news for you. I'm not sure who needs to update here M$ or Apple or maybe both, but I'm going to report the issue to both parties and hope for the best. I'm copying the Open Connector List on this message as well in case it provides help for any others out there struggling to make this work with Apple's iCal server. Hope you don't mind. Chad McDonald Compucraft Service Consultant 616.454.3442 [EMAIL PROTECTED] http://www.compucraft.net On Mar 12, 2008, at 11:55 PM, Edwin Bien wrote: Hello Chad Please forgive me for emailing you but I am looking for assistance with outlook connectivity to iCal server. I see from your posting on the list you experienced authentication issues. I am having similar issues. Our configuration is leopard server with open directory enabled. I get “not authorised” errors. Were you able to resolve this issue and if so may I ask what your resolution was? Again Sorry for the intrusion Edwin Edwin Bien IT Support ZOO 82 Wentworth Ave Kingston ACT 2604 Australia Phone: (02) 6260 8777 Fax (02) 6260 8778 email: [EMAIL PROTECTED] www.zoogroup.com.au NOTICE – The information transmitted is for use of the intended recipient only and may contain confidential or legally privileged material. If you are not the intended addressee, please notify the sender immediately and delete all records of the message from your computer. Any reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this message without the prior written consent of the sender are strictly prohibited. The contents of this communication represent the sender's personal views and opinions, which do not necessarily reflect those of ZOO. - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/___ otlkcon-devel mailing list otlkcon-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/otlkcon-devel - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ otlkcon-devel mailing list otlkcon-devel@lists.sourceforge.net
Re: [otlkcon-devel] Question about Outlook Connection
Edwin,Sorry it's taken me awhile to get back to you on this. I had the same issues that you do. From what I can tell it's an issue between Windows and the Apple iCal server implementation of CALDAV. From what I've been gathering it doesn't have much to do with Outlook or the open connector plugin. Try this:Can you login to http(s)://yourcaldavservername:8008 using IE (6 or 7, it doesn't matter) on your test windows machine? I could not. I even tried setting the iCal authentication method to "any method" in Sever Admin with no luck. Mozilla firefox on windowsauthenticatesand can browse to calendar files on http(s)://mycaldavservername:8008 just fine. There is something in IE which is also then used by Windows that prevents us from correctly authenticating to an Apple iCal server. What it is I don't know but I know that is why when you try to "browse" for calendars using the open connector plugin it errors out with authentication failure messages. Hope this helps a little, sorry I don't have better news for you. I'm not sure who needs to update here M$ or Apple or maybe both, but I'm going to report the issue to both parties and hope for the best.I'm copying the Open Connector List on this message as well in case it provides help for any others out there struggling to make this work with Apple's iCal server. Hope you don't mind. Chad McDonaldCompucraft Service Consultant616.454.3442[EMAIL PROTECTED]http://www.compucraft.net On Mar 12, 2008, at 11:55 PM, Edwin Bien wrote: Hello Chad Please forgive me for emailing you but I am looking for assistance with outlook connectivity to iCal server. I see from your posting on the list you experienced authentication issues. I am having similar issues. Our configuration is leopard server with open directory enabled. I get “not authorised” errors. Were you able to resolve this issue and if so may I ask what your resolution was? Again Sorry for the intrusion EdwinEdwin Bien IT Support ZOO 82 Wentworth Ave Kingston ACT 2604 Australia Phone: (02) 6260 8777 Fax (02) 6260 8778 email: [EMAIL PROTECTED] www.zoogroup.com.au NOTICE – The information transmitted is for use of the intended recipient only and may contain confidential or legally privileged material. If you are not the intended addressee, please notify the sender immediately and delete all records of the message from your computer. Any reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this message without the prior written consent of the sender are strictly prohibited. The contents of this communication represent the sender's personal views and opinions, which do not necessarily reflect those of ZOO. - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/___ otlkcon-devel mailing list otlkcon-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/otlkcon-devel
