Le 2013-03-21 à 11:38, Andre LaBranche <d...@apple.com> a écrit :

> 
> On Mar 21, 2013, at 8:19 AM, Pascal Robert <prob...@macti.ca> wrote:
> 
>> 
>> Le 2013-03-21 à 11:14, Marko Bauhardt <m...@datameer.com> a écrit :
>> 
>>> Hi Morgen
>>> 
>>>> The entry without a username is normal and is because the request wasn't 
>>>> authenticated (note the 401 HTTP response status).  In response to a 401 
>>>> the user-agent will repeat the request with credentials included and you 
>>>> should then get a 20X response and an access.log entry with the 
>>>> authenticated username.
>>> 
>>> unauthenticated requests means at least one client which is not logged in 
>>> tries to connect to our calendar?
>> 
>> It is normal… Especially by the fact that iCal Server don't support Basic 
>> auth,
> 
> Hi,
> 
> Just a minor comment here; we do support Basic (Authentication --> Basic --> 
> Enabled == True), but its use is discouraged for security reasons. It's only 
> reasonably safe to use Basic over SSL. As of r10129 (in trunk, and going 
> forward) we disallow use of Basic (even if it's enabled) unless the client is 
> connecting over SSL. If you really want Basic over non-SSL, you have to set 
> Authentication --> Basic --> AllowedOverWireUnencrypted == True.

Ah, I didn't know Basic worked with iCal Server (not Calendar Server), I 
thought only Digest and Kerberos was supported.

> -dre
> 
>> so the client must do at least one non-auth request to do the Digest 
>> workflow. This is just like a browser would do.
>> 
>>> so we have to figure out which client is making so many requests to our 
>>> calendar installation.
>>> 
>>> we found also in our logs user names in a UUID style, e.g.: 1234-4321-abcd
>>> Any idea who is sending those usernames?
>> 
>> It's iCal itself who use this, and it's perfectly good. Resources in iCal 
>> Server are accessible by both the username or the UUID. It's not a problem.
>> 
>>> Thanks
>>> Marko
>>> 
>>> 
>>> _______________________________________________
>>> calendarserver-users mailing list
>>> calendarserver-users@lists.macosforge.org
>>> https://lists.macosforge.org/mailman/listinfo/calendarserver-users
>> 
>> _______________________________________________
>> calendarserver-users mailing list
>> calendarserver-users@lists.macosforge.org
>> https://lists.macosforge.org/mailman/listinfo/calendarserver-users
> 

_______________________________________________
calendarserver-users mailing list
calendarserver-users@lists.macosforge.org
https://lists.macosforge.org/mailman/listinfo/calendarserver-users

Reply via email to