Hi Marco,
--On February 23, 2009 3:58:33 PM +0100 Marco Ghidinelli
<marco.ghidine...@turboden.net> wrote:
i've successfully tried calendarserver with accounts.xml users, and now
i'm trying to integrate it with my activedirectory domain.
getent passwd shows all users account correcly (i use the winbind nss
"plugin") and the kerberos authentication (from the kinit commandline)
works.
i create the krb5.keytab file on the (win 2003) kerberos server for the
principal:
HTTP/muttley.domain....@domain.local
and it is showed correctly with klist -k /etc/krb5.keytab on the linux
machine.
the calendarserver configuration is taken from the guido page:
http://honk.sigxcpu.org/con/Apple_Calendarser_with_Name_Service_Switch_di
rectory_backend.html
connecting (with firefox) i got always the message:
9-02-23 15:50:34+0100 [-] [caldav-8008] [HTTPChannel,3,192.168.0.29] GET
/calendars/users/marco.ghidinelli/ HTTP/1.1
2009-02-23 15:50:34+0100 [-] [caldav-8008] [HTTPChannel,3,192.168.0.29]
"Authentication failed: Incorrect credentials for
<nssuserrecord[us...@27a5f82b-c2bd-5387-8942-a62eb12bb26c(domain.net)]
marco.ghidinelli(marco.ghidinelli) 'Marco Ghidinelli'>"
with the wrong or with the right password.
tcpdump'ing the port 88 i can't see any packet exchanged from the machine.
Have you enabled Kerberos authentication in the server's caldavd.plist
file? When the server starts up it ought to print out status information
about the configured authentication mechanisms. What does it show for
kerberos?
--
Cyrus Daboo
_______________________________________________
calendarserver-dev mailing list
calendarserver-dev@lists.macosforge.org
http://lists.macosforge.org/mailman/listinfo.cgi/calendarserver-dev
