iCal service

[HodgeHi]

OK.

 

Is anyone else running iCal service for AD users fine?

 

I am in the process of building a small AD-OD domain setup at home. I would like to know if any of you are using AD users and access the ical service to see if it is worth doing or if i am just wasting my time.

 

Hope someone can help. I would love to get this working as it is the last thing i need to do now. Apple want to charge me $$$$$$$$$$$$$ for any support. Google has not helped resolve my issue and i don't really know where to turn for help now

[DMcCoy]

I believe that iCal uses some schema extensions for the user, you may be able to get it working with augmented records or an AD schema extension. My testing with AD schema externsions worked only with limited success as there are no updated guides etc for the 10.5 changes and you need to know far more about the internal workings of the AD ldap classes than I am able to work out

[HodgeHi]

I have tried the Augmented records approach. I have had some-ish success. I can enable i cal service for the AD users (the com.calender_access group is inherited). It lists all the AD users in the logs when the service ist started. It is just that i cannot get them to authenticate. The log keeps saying:

 

2008-09-26 12:00:46+0100 [-] caldav-8009 AMP,client Could not find the principal resource for user id: ADUser

2008-09-26 12:00:52+0100 [-] caldav-8009 http://HTTPChannel,35,127.0.0.1 GetClientAddress(host='127.0.0.1', port=50985)

2008-09-26 12:00:52+0100 [-] caldav-8009 AMP,client result = AmpBox({'_answer': '2d', 'host': '192.168.16.93', 'port': '60565'})

2008-09-26 12:00:52+0100 [-] caldav-8009 AMP,client Unauthenticated users not enabled with the 'calendar' SACL

2008-09-26 12:00:52+0100 [-] caldav-8009 http://HTTPChannel,36,127.0.0.1 GetClientAddress(host='127.0.0.1', port=50986)

2008-09-26 12:00:52+0100 [-] caldav-8009 AMP,client result = AmpBox({'_answer': '2e', 'host': '192.168.16.93', 'port': '60566'})

2008-09-26 12:00:52+0100 [-] caldav-8009 OpenDirectoryService Faulting record ADUser into users record cache

2008-09-26 12:00:52+0100 [-] caldav-8009 OpenDirectoryService Record (users) AD User is not enabled for calendaring but may be used in ACLs

2008-09-26 12:00:52+0100 [-] caldav-8009 OpenDirectoryService Added record /Active Directory/domain.com) 674FD9B8-4878-4059-BF28-AC7BBD47E1FD(AD User) 'AD User'> to OD record cache

2008-09-26 12:00:52+0100 [-] caldav-8009 AMP,client Could not find the principal resource for user id: ADUser

 

This seems to suggest that it can't find the augmented record for the user. I know the ical service is working as i have created 2 OD users with ical access and they can connect just fine.

 

I have seen the post on the apple forums about editing the caldavd.plist file t enable cleartext. I have tried this but still no luck.