Roland.Kocsis

Q: Calendar delegation not working server 5.0.15

We have El Capitan, Server 5.0.15 installed. Everything worked fine, but now we can't delegate anyone.

 

When I go to Calendar -> Preferences -> Accounts -> Account name -> Delegation, and I click the "You can change who can access...." Edit button, then I click +, I start to type others name, and nothing displayed. I can't add anybody to my delegation list. It worked well until now.

 

Calendar settings and State:

 

calendar:DefaultLogLevel = "warn"

calendar:EnableAPNS = no

calendar:EnableSSL = yes

calendar:DirectoryAddressBook:params:queryUserRecords = no

calendar:DirectoryAddressBook:params:queryPeopleRecords = no

calendar:EnableSearchAddressBook = no

calendar:HTTPPort = 8008

calendar:AccountingCategories:HTTP = no

calendar:AccountingCategories:Implicit Errors = no

calendar:AccountingCategories:iTIP = no

calendar:AccountingCategories:migration = no

calendar:AccountingCategories:AutoScheduling = no

calendar:AccountingCategories:iSchedule = no

calendar:AccountingCategories:iTIP-VFREEBUSY = no

calendar:Authentication:Digest:Enabled = yes

calendar:Authentication:Digest:AllowedOverWireUnencrypted = yes

calendar:Authentication:Kerberos:Enabled = yes

calendar:Authentication:Kerberos:AllowedOverWireUnencrypted = yes

calendar:Authentication:Wiki:Enabled = yes

calendar:Authentication:Basic:Enabled = yes

calendar:Authentication:Basic:AllowedOverWireUnencrypted = no

calendar:EnableCardDAV = no

calendar:Scheduling:iMIP:Sending:UseSSL = yes

calendar:Scheduling:iMIP:Sending:Server = ""

calendar:Scheduling:iMIP:Sending:Address = ""

calendar:Scheduling:iMIP:Sending:Username = ""

calendar:Scheduling:iMIP:Sending:Port = 587

calendar:Scheduling:iMIP:Enabled = no

calendar:Scheduling:iMIP:Receiving:UseSSL = yes

calendar:Scheduling:iMIP:Receiving:Server = ""

calendar:Scheduling:iMIP:Receiving:Type = ""

calendar:Scheduling:iMIP:Receiving:Username = ""

calendar:Scheduling:iMIP:Receiving:Port = 995

calendar:SSLPrivateKey = ""

calendar:LogLevels = _empty_dictionary

calendar:DataRoot = "/Library/Server/Calendar and Contacts/Data"

calendar:ServerRoot = "/Library/Server/Calendar and Contacts"

calendar:SSLCertificate = ""

calendar:EnableCalDAV = yes

calendar:Notifications:Services:APNS:Enabled = no

calendar:SSLPort = 8443

calendar:RedirectHTTPToHTTPS = no

calendar:SSLAuthorityChain = ""

calendar:ServerHostName = "server2015.private"

 

 

calendar:setStateVersion = 1

calendar:calendarState = "RUNNING"

calendar:state = "RUNNING"

calendar:contactsState = "STOPPED"

calendar:readWriteSettingsVersion = 1

Mac mini, OS X El Capitan (10.11.1), Server 5.0.15

Posted on Nov 19, 2015 12:19 AM

Close

Q: Calendar delegation not working server 5.0.15

  • All replies
  • Helpful answers

  • by Linc Davis,

    Linc Davis Linc Davis Nov 19, 2015 4:08 PM in response to Roland.Kocsis
    Level 10 (207,963 points)
    Applications
    Nov 19, 2015 4:08 PM in response to Roland.Kocsis

    Is anything logged on the server when you do that?

  • by Roland.Kocsis,

    Roland.Kocsis Roland.Kocsis Nov 20, 2015 12:38 AM in response to Linc Davis
    Level 1 (0 points)
    Nov 20, 2015 12:38 AM in response to Linc Davis

    Calendar Access log

    31.46.153.166 - - [20/Nov/2015:09:32:05 +0200] "REPORT(DAV:expand-property) /principals/__uids__/D0FE5ADA-7F29-4765-AEA6-38DEBECB606D/calendar-proxy-write/ HTTP/1.1" 401 141 "-" "Mac+OS+X/10.11.1 (15B42) CalendarAgent/361" i=2 or=1 t=24.5 fwd=31.46.153.166 unix=true

    31.46.153.166 - zsanett [20/Nov/2015:09:32:05 +0200] "REPORT(DAV:expand-property) /principals/__uids__/D0FE5ADA-7F29-4765-AEA6-38DEBECB606D/calendar-proxy-write/ HTTP/1.1" 207 339 "-" "Mac+OS+X/10.11.1 (15B42) CalendarAgent/361" i=2 or=1 t=13.8 fwd=31.46.153.166 unix=true

     

    Calendar Error log

    But it was before the test

    2015-11-20 09:29:53+0100 [-] [caldav-1]  [AMP,client] [twistedcaldav.extensions#error] Property {http://calendarserver.org/ns/}record-type was returned by listProperties() but does not exist for resource (<RecordType=user>)D0FE5ADA-7F29-4765-AEA6-38DEBECB606D [calendar-proxy-read].

  • by Linc Davis,

    Linc Davis Linc Davis Nov 20, 2015 8:13 AM in response to Roland.Kocsis
    Level 10 (207,963 points)
    Applications
    Nov 20, 2015 8:13 AM in response to Roland.Kocsis

    sudo serveradmin set calendar:DirectoryAddressBook:params:queryUserRecords = yes

    sudo serveradmin set calendar:DirectoryAddressBook:params:queryPeopleRecords = yes

    sudo serveradmin set calendar:EnableSearchAddressBook = yes

  • by Roland.Kocsis,

    Roland.Kocsis Roland.Kocsis Nov 23, 2015 12:00 AM in response to Linc Davis
    Level 1 (0 points)
    Nov 23, 2015 12:00 AM in response to Linc Davis

    I have made the changes. I checked the settings, stopped and started calendar service from terminal. It didn't solve my problem. Any other suggestions?

  • by Linc Davis,

    Linc Davis Linc Davis Nov 24, 2015 12:32 PM in response to Roland.Kocsis
    Level 10 (207,963 points)
    Applications
    Nov 24, 2015 12:32 PM in response to Roland.Kocsis

    Maybe something in this discussion will help you, although the problem is not the same:

     

    Calendar hang for one user

  • by Roland.Kocsis,

    Roland.Kocsis Roland.Kocsis Nov 25, 2015 12:28 AM in response to Linc Davis
    Level 1 (0 points)
    Nov 25, 2015 12:28 AM in response to Linc Davis

    It's helped a little. I can configure delegation from terminal with the calendarserver_manage_principals command with the action --add-write/read-proxy. I have to restart calendar server and it's working, I can see the delegation in calendar app.

    But in the calendar app I still can't add the delegation (I tested on iMac, MacBook Pro and MacMini too).

  • by Linc Davis,

    Linc Davis Linc Davis Nov 25, 2015 7:32 AM in response to Roland.Kocsis
    Level 10 (207,963 points)
    Applications
    Nov 25, 2015 7:32 AM in response to Roland.Kocsis

    In your place, I would export all the calendars on the clients as ICS files, then wipe the calendar service data completely and start over. If that solution isn't practical for you, or if it doesn't work, you should contact Apple enterprise support.

  • by kaimi,

    kaimi kaimi Nov 25, 2015 8:50 PM in response to Linc Davis
    Level 1 (5 points)
    Nov 25, 2015 8:50 PM in response to Linc Davis

    I have the same issue as Roland. I have verified that Open Directory and Kerberos authentication are working properly. It seems that calendar is not correctly accessing these services and therefore will not allow us to set up delegates.

     

    At this time I am running in a test environment, fortunately I have not deployed yet. If I had my users would be screaming!

     

    Has anybody found a work-around or otherwise successfully resolved this issue?

  • by kaimi,

    kaimi kaimi Nov 28, 2015 3:05 PM in response to kaimi
    Level 1 (5 points)
    Nov 28, 2015 3:05 PM in response to kaimi

    I found a work-around!

     

    Assume that Greg has a calendar on the server and he wants to allow Jane, another server user, to access and modify his calendar. Both Greg and Jane are set up as local network users on the server with short names of greg and jane respectively, and both have access to the calendar service.

     

    Open a Terminal window on the server and enter this command:

    sudo calendarserver_manage_principals --add-write-proxy users:jane --list-proxies users:greg

     

    Authenticate with your administrator's password. The command takes a little while to do it's thing. When it's done it will show you that Jane has read/write access to Greg's calendar.

     

    Stop and restart the calendar service. You must do this in order for the service to recognize the change.

     

    Now on Jane's computer open calendar, then access Calendar: Preferences: Accounts and select the account on the server for Jane. Click the Delegation tab and Greg should be there with read and write access.  Click the selection box for Greg.

  • by Litachao,

    Litachao Litachao Dec 9, 2015 3:37 AM in response to Roland.Kocsis
    Level 1 (10 points)
    Dec 9, 2015 3:37 AM in response to Roland.Kocsis

    I believe that this may be a client-side rather than a server-side problem. With OSX Server 4.1.5, calendar app is able to find server delegates on clients running OSX 10.10.5, but calendar app on clients running 10.11.2 can't find delegates.  

  • by Litachao,

    Litachao Litachao Dec 9, 2015 4:30 AM in response to Litachao
    Level 1 (10 points)
    Dec 9, 2015 4:30 AM in response to Litachao

    I have just tested delegation with BusyCal under 10.11. with OSX Server 4.1.5. It works. Agian. using OSX's calandar.app, it doesn't.

     

    Edit: Well, actually it doesn't work. What BusyCal does do is find server delegates, which calendar.app doesn't, but then it doesn't actually grant the rights.

  • by Chasjazzez,

    Chasjazzez Chasjazzez Dec 30, 2015 10:03 AM in response to kaimi
    Level 1 (0 points)
    Dec 30, 2015 10:03 AM in response to kaimi

    Do you also know the command to delete the proxy ?

  • by kaimi,

    kaimi kaimi Dec 30, 2015 12:36 PM in response to Chasjazzez
    Level 1 (5 points)
    Dec 30, 2015 12:36 PM in response to Chasjazzez

    sudo calendarserver_manage_principals --remove-proxy [principal]

     

    Check the man page for calendarserver_manage_principals on your server for particulars.

  • by Chasjazzez,

    Chasjazzez Chasjazzez Dec 30, 2015 12:56 PM in response to kaimi
    Level 1 (0 points)
    Dec 30, 2015 12:56 PM in response to kaimi

    Thanks!

     

    Best Wishes for the New Year!