Calendar/Contacts won't push

All of the Apple push functionality is done via an AppleID account not specifically/directly related to certificates for authentication to the services on the server.

Apple also recommends that a dedicated (new) AppleID be made specifically for push functionality, don't use an existing and/or personal AppleID for this.

Also the certificates for that AppleID used for push have to be renewed each year. You can set the AppleID in server app at:

Server | Server | Settings

And review the certificates on this website

https://identity.apple.com/pweb/

This may not be the direct issue in your case but in case you have not reviewed this side of setup.

iCal doesn't give much feedback, so I like to test somthing like this direct from Safari

Look in iCal prefs at the account's server settings, you might see something like:

Server Address: dc.mydomain.com

Server Path: /principals/__uids__/1B8B7CCB-3DE9-45BC-B385-AB847E750C7B/

Port: 8443

Add them all together into a single URL starting with https and try it in safari

https://dc.mydomain.com/principals/__uids__/1B8B7CCB-3DE9-45BC-B385-AB847E750C7B :8443

You should be challenged for your user/pass, then it will return some caldav details.

If this works, then you have good DNS, connectivity and you know authentication works

If their is a certificate issue, auth issue, etc - you'll see it in safari :-)

try to export/import a user. reset their password when done.

forget the export/import process.

How to handle this depends on what services those users utilize.

Sure would be better to 'fix' it... but its simple enough to recreate the users, so why not just do that.

Would be better for you to move your users to Local Network so they are all together and would have access to all services.

Home folders are retained when you delete a user.

The user's mailbox would be deleted, so you'll need to do something to retain it.

Get your users GUID.

For the local directory

dscl . -list /Users GeneratedUID

For a shared directory

dscl /LDAPv3/127.0.0.1 -list /Users GeneratedUID

Go to the mailstore and rename the user's guid folder to something temporary, like their username (bob)

Delete user, recreate as a Local Network user.

Lookup their new GUID (with command above) and rename the mailbox to their new GUID.

This process isn't for everyone.. it wouldn't retain other service data (wiki, ical, etc) so you'll need to determine if its right for you.

That's strange... they should all (Calendar, Contact, Mail, Mgmt, Alerts) be created at one time.

If you only have one you could try (this is just a suggestion, don't have directly confirmed info for this) revoking the original and then reissuing them. Or for less drastic step try to renew first and see if others are created.

If you don't see the user in the Server app, then you may need to delete it with dscl

it does something like this

sudo dscl .

cd Users

ls (to see a list of users)

delete username (change to the user you want to delete)

the user isn't listed with:

dscl /Search -list Users

????