How to fix OS X Server Calendar 403 Error

I tested with iOS, and it seems to be working just fine.

Hi Linc, thanks for the advice. Here are my results:

1. This is a brand spanking new install of Mavericks, so there was no old data or cache to delete. However, after adding the calendar account via the Settings for Everyone profile on http://server/mydevices, I did delete the account. Adding it back manually seems to work without issue. This leads me to believe there is something wrong with the Settings for Everyone profile. I have attempted to recreate it by turning it off in Profile Manager in Server app, then turning it back on, but that doesn't seem to help.
2. The calendar is completely blank, no items, no invitations.
3. This seems to deal with data issues. As my calendar is completely empty, I don't think any of this applies.

Having gone over these items, it looks like I have a bad user settings profile. How do I confirm that?

Here's another update:

I didn't have Websites turned on in Server app. Turning them on resulted in a different error:

The server responded with an error.

http://<server domain here>/principals/__uids__/<my uid here>/ is not a location that supports this request.

This seems to indicate that the Settings for Everyone profile does not add the port 8443. When I open the following URL in Safari, it does not return an error, indicating that it works:

http://<server domain here>:8443/principals/__uids__/<my uid here>/ is not a location that supports this request.

I'm now more and more convinced that Mavericks/OS X Server 3.1.2 has a profile manager bug that corrupts the Settings for Everyone profile.

A quick further update: I realized I should be using https when checking the URL, so the following URL:

https://<server domain here>:8443/principals/__uids__/<my uid here>/ is not a location that supports this request.

resulted in a whole bunch of Principal Details. This says to me its working on the server just fine, but the profile package is not configuring Calendar correctly. I opened the mobile settings file of the profile, and it had all the right info there:

[...]

<dict><key>PayloadType</key><string>com.apple.caldav.account</string><key>Payloa dVersion</key><integer>1</integer><key>PayloadIdentifier</key><string>com.apple. mdm.{{hostname here}}.{{my UID here}}.alacarte.caldav.3e72d8c9-c3f8-40ef-92d5-ac50caa32075</string><key>Payloa dUUID</key><string>3e72d8c9-c3f8-40ef-92d5-ac50caa32075</string><key>PayloadEnab led</key><true/><key>PayloadDisplayName</key><string>Calendar ({{hostname here}} Calendar)</string><key>CalDAVPort</key><integer>8443</integer><key>CalDAVAccoun tDescription</key><string>{{hostname here}} Calendar</string><key>CalDAVHostName</key><string>{{hostname here}}</string><key>CalDAVUseSSL</key><true/><key>CalDAVUsername</key><string>{ {my user shortname here}}</string><key>CalDAVPrincipalURL</key><string>/principals/__uids__/{{my UID here}}</string><key>IdentificationUUID</key><string>3875472d-7494-4238-a7fd-ffc 4bf0429da</string></dict>

[...]

So since everything looks good here, it follows that the Profile setup process is not creating the PLIST for this calendar correctly. I opened ~/Libaray/Calendars/{{my UID here}}/Info.plist, and found this:

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>AccountIsEnabledForCalendar</key>

<false/>

<key>AccountIsEnabledForReminders</key>

<false/>

<key>AutoDiscovery</key>

<false/>

<key>AutoScheduleSupport</key>

<false/>

<key>CalendarProxySupport</key>

<false/>

<key>CalendarServerPrivateEventsSupport</key>

<false/>

<key>CalendarUserAddresses</key>

<array/>

<key>Color</key>

<string>#808080FF</string>

<key>Delegate</key>

<false/>

<key>Enabled</key>

<true/>

<key>ExpandPropertyReportSupport</key>

<false/>

<key>Expanded</key>

<true/>

<key>InboxAvailabilitySupport</key>

<false/>

<key>KeepOffline</key>

<false/>

<key>Kerberos</key>

<false/>

<key>Key</key>

<string>{{my UID here}}</string>

<key>Login</key>

<string>{{my short name here}}</string>

<key>ManagedAttachmentSupported</key>

<false/>

<key>Order</key>

<integer>6</integer>

<key>PrincipalURL</key>

<string>http://{{my hostname here}}/principals/__uids__/{{my UID here}}</string>

<key>PrivateCommentsSupport</key>

<false/>

<key>PushDisabled</key>

<false/>

<key>RefreshDate</key>

<date>2014-09-02T21:41:41Z</date>

<key>RefreshInterval</key>

<integer>900</integer>

<key>RequestCompressionSupported</key>

<false/>

<key>ShareDefaultAlarmSettings</key>

<true/>

<key>SupportsDefaultAlarms</key>

<true/>

<key>SupportsSharing</key>

<false/>

<key>SupportsSubscriptionCalendars</key>

<false/>

<key>Title</key>

<string>{{my hostname here}} Calendar</string>

<key>Type</key>

<string>CalDAV</string>

<key>Writable</key>

<true/>

<key>isInSeparateWindow</key>

<false/>

<key>isManuallyConfigured</key>

<false/>

</dict>

</plist>

Its clear that the URL is not using the secure method, which would account for the server rejecting the access.

Now, if you compare that to the PLIST file created when manually adding the Calendar account:

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>AccountIsEnabledForCalendar</key>

<true/>

<key>AccountIsEnabledForReminders</key>

<false/>

<key>AutoDiscovery</key>

<false/>

<key>AutoScheduleSupport</key>

<true/>

<key>CalendarHomePath</key>

<string>/calendars/__uids__/{{my UID here}}/</string>

<key>CalendarProxySupport</key>

<true/>

<key>CalendarServerPrivateEventsSupport</key>

<true/>

<key>CalendarUserAddresses</key>

<array>

<string>/principals/users/admin/</string>

<string>urn:uuid:{{my UID here}}</string>

<string>/principals/users/{{my alt shortname 1 here}}/</string>

<string>mailto:{{my email here}}</string>

<string>/principals/users/{{my alt shortname 2 here}}/</string>

<string>/principals/users/{{my alt shortname 3 here}}/</string>

<string>/principals/users/{{my short name here}}/</string>

<string>/principals/__uids__/{{my UID here}}/</string>

</array>

<key>Color</key>

<string>#808080FF</string>

<key>DefaultCalendarPath</key>

<string>/calendars/__uids__/{{my UID here}}/calendar</string>

<key>Delegate</key>

<false/>

<key>DropBoxPath</key>

<string>/calendars/__uids__/{{my UID here}}/dropbox/</string>

<key>Enabled</key>

<true/>

<key>ExpandPropertyReportSupport</key>

<true/>

<key>Expanded</key>

<true/>

<key>FullName</key>

<string>{{my name here}}</string>

<key>InboxAvailabilitySupport</key>

<true/>

<key>InboxPath</key>

<string>/calendars/__uids__/{{my UID here}}/inbox/</string>

<key>KeepOffline</key>

<false/>

<key>Kerberos</key>

<false/>

<key>Key</key>

<string>94DAE212-2950-46D0-AA41-C95801A74339</string>

<key>Login</key>

<string>{{my short name here}}</string>

<key>ManagedAttachmentSupported</key>

<true/>

<key>NotificationCollectionCTag</key>

<string>7_5</string>

<key>NotificationCollectionPath</key>

<string>/calendars/__uids__/{{my UID here}}/notification/</string>

<key>Order</key>

<integer>5</integer>

<key>OutboxPath</key>

<string>/calendars/__uids__/{{my UID here}}/outbox/</string>

<key>PrincipalURL</key>

<string>https://{{hostname here}}/principals/__uids__/{{my UID here}}/</string>

<key>PrivateCommentsSupport</key>

<true/>

<key>PushDisabled</key>

<false/>

<key>PushKey</key>

<string>/CalDAV/{{hostname here}}/{{my UID here}}/</string>

<key>PushTransports</key>

<dict>

<key>APSD</key>

<dict>

<key>apsbundleid</key>

<string>com.apple.calendar.XServer.acefc1fe-6f45-4f12-8a16-e3d8c30fd082</string >

<key>env</key>

<string>PRODUCTION</string>

<key>refresh-interval</key>

<string>172800</string>

<key>subscription-url</key>

<string>https://{{hostname here}}:8443/apns</string>

</dict>

</dict>

<key>RefreshDate</key>

<date>2014-09-02T22:47:53Z</date>

<key>RefreshInterval</key>

<integer>900</integer>

<key>RequestCompressionSupported</key>

<false/>

<key>ShareDefaultAlarmSettings</key>

<true/>

<key>SupportsDefaultAlarms</key>

<true/>

<key>SupportsSharing</key>

<true/>

<key>SupportsSubscriptionCalendars</key>

<false/>

<key>Title</key>

<string>{{hostname here}}</string>

<key>Type</key>

<string>CalDAV</string>

<key>Writable</key>

<true/>

<key>inboxCTag</key>

<string>6_4</string>

<key>isInSeparateWindow</key>

<false/>

<key>isManuallyConfigured</key>

<false/>

</dict>

</plist>

As you can see, there's a lot that's different.

As you can see, the payload does have SSL set, and the mobileconfig file reflected this, so this isn't an issue on the server side that I can tell. Not to mention that it doesn't allow me to change the payload, because it's managed by the Server app. I am grateful for you input in this 🙂 just so far we seem to be hitting up on the same dead ends.

I have some more error logs to show:

I tried completely removing all profiles that were installed, and starting over with the trust profile, then the settings for everyone. The trust profile installed without a hitch, but now the settings for everyone errors out:

Profile installation failed.

The profile "Settings for everyone (com.apple.mdm.{{hostname here}}.{{payload? UID here}}.alacarte)" could not be installed due to an unexpected error.

<InternalError:1>

And the following is logged in console when this happens:

9/3/14 11:55:36.360 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [Got error on refresh, but not rectifying principal because it was manually configured: Error Domain=CoreDAVHTTPStatusErrorDomain Code=403 "The operation couldn’t be completed. (CoreDAVHTTPStatusErrorDomain error 403.)" UserInfo=0x7fadf34f8e90 {CoreDAVHTTPHeaders=<CFBasicHash 0x7fadf34f9fb0 [0x7fff7240bf00]>{type = immutable dict, count = 16,

entries =>

0 : X-Frame-Options = <CFString 0x7fadf36d8400 [0x7fff7240bf00]>{contents = "SameOrigin"}

1 : Vary = <CFString 0x7fadf36dfc50 [0x7fff7240bf00]>{contents = "negotiate,accept-language,User-Agent"}

2 : Keep-Alive = <CFString 0x7fadf360bfd0 [0x7fff7240bf00]>{contents = "timeout=15, max=100"}

3 : Content-Type = <CFString 0x7fff723ffee0 [0x7fff7240bf00]>{contents = "text/html"}

6 : Server = <CFString 0x7fadf36c9880 [0x7fff7240bf00]>{contents = "Apache/2.2.26 (Unix) DAV/2 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y"}

7 : Content-Language = <CFString 0x7fff723ef100 [0x7fff7240bf00]>{contents = "en"}

9 : TCN = <CFString 0x7fadf3672630 [0x7fff7240bf00]>{contents = "choice"}

12 : Cache-Control = <CFString 0x7fadf36a0640 [0x7fff7240bf00]>{contents = "no-cache"}

13 : MS-Author-Via = <CFString 0x7fadf36c7870 [0x7fff7240bf00]>{contents = "DAV"}

14 : Date = <CFString 0x7fadf36fbe90 [0x7fff7240bf00]>{contents = "Wed, 03 Sep 2014 18:55:36 GMT"}

15 : Content-Length = <CFString 0x7fadf36c2990 [0x7fff7240bf00]>{contents = "1585"}

17 : Connection = <CFString 0x7fadf36c0b60 [0x7fff7240bf00]>{contents = "Keep-Alive"}

18 : Content-Location = <CFString 0x7fadf36e57f0 [0x7fff7240bf00]>{contents = "websitesoff403.html.en"}

20 : Etag = <CFString 0x7fadf36d13b0 [0x7fff7240bf00]>{contents = ""631-502046ad4a9c0;502046ae3ec00""}

21 : Accept-Ranges = <CFString 0x7fadf36d22f0 [0x7fff7240bf00]>{contents = "bytes"}

22 : Last-Modified = <CFString 0x7fadf36c1bb0 [0x7fff7240bf00]>{contents = "Mon, 01 Sep 2014 17:34:39 GMT"}

}

}]

9/3/14 11:55:36.365 AM CalendarAgent[233]: Account refresh finished with an error

com.apple.message.domain: com.apple.calendar.account_refresh

com.apple.message.signature: signature

com.apple.message.result: failure

Sender_Mach_UUID: 2FD3C03A-82F7-365A-8D0E-F5FE944D4016

9/3/14 11:55:36.366 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [Account refresh failed with error: Error Domain=CoreDAVHTTPStatusErrorDomain Code=403 "The operation couldn’t be completed. (CoreDAVHTTPStatusErrorDomain error 403.)" UserInfo=0x7fadf36cc2b0 {AccountName={{ hostname here }} Calendar, CalDAVErrFromRefresh=YES, CoreDAVHTTPHeaders=<CFBasicHash 0x7fadf34f9fb0 [0x7fff7240bf00]>{type = immutable dict, count = 16,

entries =>

0 : X-Frame-Options = <CFString 0x7fadf36d8400 [0x7fff7240bf00]>{contents = "SameOrigin"}

1 : Vary = <CFString 0x7fadf36dfc50 [0x7fff7240bf00]>{contents = "negotiate,accept-language,User-Agent"}

2 : Keep-Alive = <CFString 0x7fadf360bfd0 [0x7fff7240bf00]>{contents = "timeout=15, max=100"}

3 : Content-Type = <CFString 0x7fff723ffee0 [0x7fff7240bf00]>{contents = "text/html"}

6 : Server = <CFString 0x7fadf36c9880 [0x7fff7240bf00]>{contents = "Apache/2.2.26 (Unix) DAV/2 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y"}

7 : Content-Language = <CFString 0x7fff723ef100 [0x7fff7240bf00]>{contents = "en"}

9 : TCN = <CFString 0x7fadf3672630 [0x7fff7240bf00]>{contents = "choice"}

12 : Cache-Control = <CFString 0x7fadf36a0640 [0x7fff7240bf00]>{contents = "no-cache"}

13 : MS-Author-Via = <CFString 0x7fadf36c7870 [0x7fff7240bf00]>{contents = "DAV"}

14 : Date = <CFString 0x7fadf36fbe90 [0x7fff7240bf00]>{contents = "Wed, 03 Sep 2014 18:55:36 GMT"}

15 : Content-Length = <CFString 0x7fadf36c2990 [0x7fff7240bf00]>{contents = "1585"}

17 : Connection = <CFString 0x7fadf36c0b60 [0x7fff7240bf00]>{contents = "Keep-Alive"}

18 : Content-Location = <CFString 0x7fadf36e57f0 [0x7fff7240bf00]>{contents = "websitesoff403.html.en"}

20 : Etag = <CFString 0x7fadf36d13b0 [0x7fff7240bf00]>{contents = ""631-502046ad4a9c0;502046ae3ec00""}

21 : Accept-Ranges = <CFString 0x7fadf36d22f0 [0x7fff7240bf00]>{contents = "bytes"}

22 : Last-Modified = <CFString 0x7fadf36c1bb0 [0x7fff7240bf00]>{contents = "Mon, 01 Sep 2014 17:34:39 GMT"}

}

}]

9/3/14 11:55:36.406 AM secd[246]: securityd_xpc_dictionary_handler mdmclient[400] add The operation couldn’t be completed. (OSStatus error -25243 - NoAccessForItem)

9/3/14 11:55:36.407 AM mdmclient[400]: SecOSStatusWith error:[-25243] The operation couldn’t be completed. (OSStatus error -25243 - Remote error : The operation couldn‚Äôt be completed. (OSStatus error -25243 - NoAccessForItem))

9/3/14 11:55:36.407 AM mdmclient[400]: [Warning] IMSetKeychainData: -25243 -- Could not store data for service: Jabber account: {{my short name here}}@{{ hostname here }} accessGroup: InternetAccounts

9/3/14 11:55:36.407 AM mdmclient[400]: [Warning] IMSetKeychainPassword: Could not store password (error: -25243)

9/3/14 11:55:36.430 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [Adding [<CalDAVAccountRefreshQueueableOperation: 0x7fadf37658b0; Sequence: 0>] to failed operations.]

9/3/14 11:55:36.449 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [Got error on refresh, but not rectifying principal because it was manually configured: Error Domain=CoreDAVHTTPStatusErrorDomain Code=403 "The operation couldn’t be completed. (CoreDAVHTTPStatusErrorDomain error 403.)" UserInfo=0x7fadf599d0a0 {CoreDAVHTTPHeaders=<CFBasicHash 0x7fadf599cb80 [0x7fff7240bf00]>{type = immutable dict, count = 16,

entries =>

0 : X-Frame-Options = <CFString 0x7fadf597e3d0 [0x7fff7240bf00]>{contents = "SameOrigin"}

1 : Vary = <CFString 0x7fadf590a020 [0x7fff7240bf00]>{contents = "negotiate,accept-language,User-Agent"}

2 : Keep-Alive = <CFString 0x7fadf597da10 [0x7fff7240bf00]>{contents = "timeout=15, max=99"}

3 : Content-Type = <CFString 0x7fff723ffee0 [0x7fff7240bf00]>{contents = "text/html"}

6 : Server = <CFString 0x7fadf5980720 [0x7fff7240bf00]>{contents = "Apache/2.2.26 (Unix) DAV/2 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y"}

7 : Content-Language = <CFString 0x7fff723ef100 [0x7fff7240bf00]>{contents = "en"}

9 : TCN = <CFString 0x7fadf5980660 [0x7fff7240bf00]>{contents = "choice"}

12 : Cache-Control = <CFString 0x7fadf5924660 [0x7fff7240bf00]>{contents = "no-cache"}

13 : MS-Author-Via = <CFString 0x7fadf5924640 [0x7fff7240bf00]>{contents = "DAV"}

14 : Date = <CFString 0x7fadf597d660 [0x7fff7240bf00]>{contents = "Wed, 03 Sep 2014 18:55:36 GMT"}

15 : Content-Length = <CFString 0x7fadf5933a10 [0x7fff7240bf00]>{contents = "1585"}

17 : Connection = <CFString 0x7fadf597e860 [0x7fff7240bf00]>{contents = "Keep-Alive"}

18 : Content-Location = <CFString 0x7fadf597b8d0 [0x7fff7240bf00]>{contents = "websitesoff403.html.en"}

20 : Etag = <CFString 0x7fadf5976890 [0x7fff7240bf00]>{contents = ""631-502046ad4a9c0;502046ae3ec00""}

21 : Accept-Ranges = <CFString 0x7fadf5980780 [0x7fff7240bf00]>{contents = "bytes"}

22 : Last-Modified = <CFString 0x7fadf5980610 [0x7fff7240bf00]>{contents = "Mon, 01 Sep 2014 17:34:39 GMT"}

}

}]

9/3/14 11:55:36.454 AM CalendarAgent[233]: Account refresh finished with an error

com.apple.message.domain: com.apple.calendar.account_refresh

com.apple.message.signature: signature

com.apple.message.result: failure

Sender_Mach_UUID: 2FD3C03A-82F7-365A-8D0E-F5FE944D4016

9/3/14 11:55:36.456 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [Account refresh failed with error: Error Domain=CoreDAVHTTPStatusErrorDomain Code=403 "The operation couldn’t be completed. (CoreDAVHTTPStatusErrorDomain error 403.)" UserInfo=0x7fadf597dff0 {AccountName={{ hostname here }} Calendar, CalDAVErrFromRefresh=YES, CoreDAVHTTPHeaders=<CFBasicHash 0x7fadf599cb80 [0x7fff7240bf00]>{type = immutable dict, count = 16,

entries =>

0 : X-Frame-Options = <CFString 0x7fadf597e3d0 [0x7fff7240bf00]>{contents = "SameOrigin"}

1 : Vary = <CFString 0x7fadf590a020 [0x7fff7240bf00]>{contents = "negotiate,accept-language,User-Agent"}

2 : Keep-Alive = <CFString 0x7fadf597da10 [0x7fff7240bf00]>{contents = "timeout=15, max=99"}

3 : Content-Type = <CFString 0x7fff723ffee0 [0x7fff7240bf00]>{contents = "text/html"}

6 : Server = <CFString 0x7fadf5980720 [0x7fff7240bf00]>{contents = "Apache/2.2.26 (Unix) DAV/2 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y"}

7 : Content-Language = <CFString 0x7fff723ef100 [0x7fff7240bf00]>{contents = "en"}

9 : TCN = <CFString 0x7fadf5980660 [0x7fff7240bf00]>{contents = "choice"}

12 : Cache-Control = <CFString 0x7fadf5924660 [0x7fff7240bf00]>{contents = "no-cache"}

13 : MS-Author-Via = <CFString 0x7fadf5924640 [0x7fff7240bf00]>{contents = "DAV"}

14 : Date = <CFString 0x7fadf597d660 [0x7fff7240bf00]>{contents = "Wed, 03 Sep 2014 18:55:36 GMT"}

15 : Content-Length = <CFString 0x7fadf5933a10 [0x7fff7240bf00]>{contents = "1585"}

17 : Connection = <CFString 0x7fadf597e860 [0x7fff7240bf00]>{contents = "Keep-Alive"}

18 : Content-Location = <CFString 0x7fadf597b8d0 [0x7fff7240bf00]>{contents = "websitesoff403.html.en"}

20 : Etag = <CFString 0x7fadf5976890 [0x7fff7240bf00]>{contents = ""631-502046ad4a9c0;502046ae3ec00""}

21 : Accept-Ranges = <CFString 0x7fadf5980780 [0x7fff7240bf00]>{contents = "bytes"}

22 : Last-Modified = <CFString 0x7fadf5980610 [0x7fff7240bf00]>{contents = "Mon, 01 Sep 2014 17:34:39 GMT"}

}

}]

9/3/14 11:55:36.463 AM secd[246]: securityd_xpc_dictionary_handler mdmclient[400] add The operation couldn’t be completed. (OSStatus error -25243 - NoAccessForItem)

9/3/14 11:55:36.464 AM mdmclient[400]: SecOSStatusWith error:[-25243] The operation couldn’t be completed. (OSStatus error -25243 - Remote error : The operation couldn‚Äôt be completed. (OSStatus error -25243 - NoAccessForItem))

9/3/14 11:55:36.464 AM mdmclient[400]: [Warning] IMSetKeychainData: -25243 -- Could not store data for service: Jabber account: {{my short name here}}@{{ hostname here }} accessGroup: InternetAccounts

9/3/14 11:55:36.464 AM mdmclient[400]: [Warning] IMSetKeychainPassword: Could not store password (error: -25243)

9/3/14 11:55:36.474 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [CalDAVOperationQueue tried to reorder operation <CalDAVAccountRefreshQueueableOperation: 0x7fadf37658b0; Sequence: 0> but it was not at the front of the queue.]

9/3/14 11:55:36.528 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [Got error on refresh, but not rectifying principal because it was manually configured: Error Domain=CoreDAVHTTPStatusErrorDomain Code=403 "The operation couldn’t be completed. (CoreDAVHTTPStatusErrorDomain error 403.)" UserInfo=0x7fadf5b2f4f0 {CoreDAVHTTPHeaders=<CFBasicHash 0x7fadf34b5850 [0x7fff7240bf00]>{type = immutable dict, count = 16,

entries =>

0 : X-Frame-Options = <CFString 0x7fadf34f3b60 [0x7fff7240bf00]>{contents = "SameOrigin"}

1 : Vary = <CFString 0x7fadf34db590 [0x7fff7240bf00]>{contents = "negotiate,accept-language,User-Agent"}

2 : Keep-Alive = <CFString 0x7fadf34f9fb0 [0x7fff7240bf00]>{contents = "timeout=15, max=98"}

3 : Content-Type = <CFString 0x7fff723ffee0 [0x7fff7240bf00]>{contents = "text/html"}

6 : Server = <CFString 0x7fadf34e85e0 [0x7fff7240bf00]>{contents = "Apache/2.2.26 (Unix) DAV/2 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y"}

7 : Content-Language = <CFString 0x7fff723ef100 [0x7fff7240bf00]>{contents = "en"}

9 : TCN = <CFString 0x7fadf34ef9c0 [0x7fff7240bf00]>{contents = "choice"}

12 : Cache-Control = <CFString 0x7fadf5b41070 [0x7fff7240bf00]>{contents = "no-cache"}

13 : MS-Author-Via = <CFString 0x7fadf34ee830 [0x7fff7240bf00]>{contents = "DAV"}

14 : Date = <CFString 0x7fadf5932b90 [0x7fff7240bf00]>{contents = "Wed, 03 Sep 2014 18:55:36 GMT"}

15 : Content-Length = <CFString 0x7fadf5b3fe50 [0x7fff7240bf00]>{contents = "1585"}

17 : Connection = <CFString 0x7fadf34efd50 [0x7fff7240bf00]>{contents = "Keep-Alive"}

18 : Content-Location = <CFString 0x7fadf34fa050 [0x7fff7240bf00]>{contents = "websitesoff403.html.en"}

20 : Etag = <CFString 0x7fadf34eed80 [0x7fff7240bf00]>{contents = ""631-502046ad4a9c0;502046ae3ec00""}

21 : Accept-Ranges = <CFString 0x7fadf34f79c0 [0x7fff7240bf00]>{contents = "bytes"}

22 : Last-Modified = <CFString 0x7fadf5b402e0 [0x7fff7240bf00]>{contents = "Mon, 01 Sep 2014 17:34:39 GMT"}

}

}]

9/3/14 11:55:36.530 AM CalendarAgent[233]: Account refresh finished with an error

com.apple.message.domain: com.apple.calendar.account_refresh

com.apple.message.signature: signature

com.apple.message.result: failure

Sender_Mach_UUID: 2FD3C03A-82F7-365A-8D0E-F5FE944D4016

9/3/14 11:55:36.530 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [Account refresh failed with error: Error Domain=CoreDAVHTTPStatusErrorDomain Code=403 "The operation couldn’t be completed. (CoreDAVHTTPStatusErrorDomain error 403.)" UserInfo=0x7fadf36c30b0 {AccountName={{ hostname here }} Calendar, CalDAVErrFromRefresh=YES, CoreDAVHTTPHeaders=<CFBasicHash 0x7fadf34b5850 [0x7fff7240bf00]>{type = immutable dict, count = 16,

entries =>

0 : X-Frame-Options = <CFString 0x7fadf34f3b60 [0x7fff7240bf00]>{contents = "SameOrigin"}

1 : Vary = <CFString 0x7fadf34db590 [0x7fff7240bf00]>{contents = "negotiate,accept-language,User-Agent"}

2 : Keep-Alive = <CFString 0x7fadf34f9fb0 [0x7fff7240bf00]>{contents = "timeout=15, max=98"}

3 : Content-Type = <CFString 0x7fff723ffee0 [0x7fff7240bf00]>{contents = "text/html"}

6 : Server = <CFString 0x7fadf34e85e0 [0x7fff7240bf00]>{contents = "Apache/2.2.26 (Unix) DAV/2 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y"}

7 : Content-Language = <CFString 0x7fff723ef100 [0x7fff7240bf00]>{contents = "en"}

9 : TCN = <CFString 0x7fadf34ef9c0 [0x7fff7240bf00]>{contents = "choice"}

12 : Cache-Control = <CFString 0x7fadf5b41070 [0x7fff7240bf00]>{contents = "no-cache"}

13 : MS-Author-Via = <CFString 0x7fadf34ee830 [0x7fff7240bf00]>{contents = "DAV"}

14 : Date = <CFString 0x7fadf5932b90 [0x7fff7240bf00]>{contents = "Wed, 03 Sep 2014 18:55:36 GMT"}

15 : Content-Length = <CFString 0x7fadf5b3fe50 [0x7fff7240bf00]>{contents = "1585"}

17 : Connection = <CFString 0x7fadf34efd50 [0x7fff7240bf00]>{contents = "Keep-Alive"}

18 : Content-Location = <CFString 0x7fadf34fa050 [0x7fff7240bf00]>{contents = "websitesoff403.html.en"}

20 : Etag = <CFString 0x7fadf34eed80 [0x7fff7240bf00]>{contents = ""631-502046ad4a9c0;502046ae3ec00""}

21 : Accept-Ranges = <CFString 0x7fadf34f79c0 [0x7fff7240bf00]>{contents = "bytes"}

22 : Last-Modified = <CFString 0x7fadf5b402e0 [0x7fff7240bf00]>{contents = "Mon, 01 Sep 2014 17:34:39 GMT"}

}

}]

9/3/14 11:55:36.547 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [Adding [<CalDAVAccountRefreshQueueableOperation: 0x7fadf59336a0; Sequence: 0>] to failed operations.]

9/3/14 11:55:36.572 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [Got error on refresh, but not rectifying principal because it was manually configured: Error Domain=CoreDAVHTTPStatusErrorDomain Code=403 "The operation couldn’t be completed. (CoreDAVHTTPStatusErrorDomain error 403.)" UserInfo=0x7fadf37ede90 {CoreDAVHTTPHeaders=<CFBasicHash 0x7fadf5849ae0 [0x7fff7240bf00]>{type = immutable dict, count = 16,

entries =>

0 : X-Frame-Options = <CFString 0x7fadf584f8e0 [0x7fff7240bf00]>{contents = "SameOrigin"}

1 : Vary = <CFString 0x7fadf581af80 [0x7fff7240bf00]>{contents = "negotiate,accept-language,User-Agent"}

2 : Keep-Alive = <CFString 0x7fadf5871e80 [0x7fff7240bf00]>{contents = "timeout=15, max=97"}

3 : Content-Type = <CFString 0x7fff723ffee0 [0x7fff7240bf00]>{contents = "text/html"}

6 : Server = <CFString 0x7fadf37e3900 [0x7fff7240bf00]>{contents = "Apache/2.2.26 (Unix) DAV/2 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y"}

7 : Content-Language = <CFString 0x7fff723ef100 [0x7fff7240bf00]>{contents = "en"}

9 : TCN = <CFString 0x7fadf37dad70 [0x7fff7240bf00]>{contents = "choice"}

12 : Cache-Control = <CFString 0x7fadf37cd360 [0x7fff7240bf00]>{contents = "no-cache"}

13 : MS-Author-Via = <CFString 0x7fadf5838e40 [0x7fff7240bf00]>{contents = "DAV"}

14 : Date = <CFString 0x7fadf585a870 [0x7fff7240bf00]>{contents = "Wed, 03 Sep 2014 18:55:36 GMT"}

15 : Content-Length = <CFString 0x7fadf373bb40 [0x7fff7240bf00]>{contents = "1585"}

17 : Connection = <CFString 0x7fadf580dad0 [0x7fff7240bf00]>{contents = "Keep-Alive"}

18 : Content-Location = <CFString 0x7fadf5825050 [0x7fff7240bf00]>{contents = "websitesoff403.html.en"}

20 : Etag = <CFString 0x7fadf584b0e0 [0x7fff7240bf00]>{contents = ""631-502046ad4a9c0;502046ae3ec00""}

21 : Accept-Ranges = <CFString 0x7fadf37ea9e0 [0x7fff7240bf00]>{contents = "bytes"}

22 : Last-Modified = <CFString 0x7fadf584e800 [0x7fff7240bf00]>{contents = "Mon, 01 Sep 2014 17:34:39 GMT"}

}

}]

9/3/14 11:55:36.576 AM CalendarAgent[233]: Account refresh finished with an error

com.apple.message.domain: com.apple.calendar.account_refresh

com.apple.message.signature: signature

com.apple.message.result: failure

Sender_Mach_UUID: 2FD3C03A-82F7-365A-8D0E-F5FE944D4016

9/3/14 11:55:36.578 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [Account refresh failed with error: Error Domain=CoreDAVHTTPStatusErrorDomain Code=403 "The operation couldn’t be completed. (CoreDAVHTTPStatusErrorDomain error 403.)" UserInfo=0x7fadf586cea0 {AccountName={{ hostname here }} Calendar, CalDAVErrFromRefresh=YES, CoreDAVHTTPHeaders=<CFBasicHash 0x7fadf5849ae0 [0x7fff7240bf00]>{type = immutable dict, count = 16,

entries =>

0 : X-Frame-Options = <CFString 0x7fadf584f8e0 [0x7fff7240bf00]>{contents = "SameOrigin"}

1 : Vary = <CFString 0x7fadf581af80 [0x7fff7240bf00]>{contents = "negotiate,accept-language,User-Agent"}

2 : Keep-Alive = <CFString 0x7fadf5871e80 [0x7fff7240bf00]>{contents = "timeout=15, max=97"}

3 : Content-Type = <CFString 0x7fff723ffee0 [0x7fff7240bf00]>{contents = "text/html"}

6 : Server = <CFString 0x7fadf37e3900 [0x7fff7240bf00]>{contents = "Apache/2.2.26 (Unix) DAV/2 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y"}

7 : Content-Language = <CFString 0x7fff723ef100 [0x7fff7240bf00]>{contents = "en"}

9 : TCN = <CFString 0x7fadf37dad70 [0x7fff7240bf00]>{contents = "choice"}

12 : Cache-Control = <CFString 0x7fadf37cd360 [0x7fff7240bf00]>{contents = "no-cache"}

13 : MS-Author-Via = <CFString 0x7fadf5838e40 [0x7fff7240bf00]>{contents = "DAV"}

14 : Date = <CFString 0x7fadf585a870 [0x7fff7240bf00]>{contents = "Wed, 03 Sep 2014 18:55:36 GMT"}

15 : Content-Length = <CFString 0x7fadf373bb40 [0x7fff7240bf00]>{contents = "1585"}

17 : Connection = <CFString 0x7fadf580dad0 [0x7fff7240bf00]>{contents = "Keep-Alive"}

18 : Content-Location = <CFString 0x7fadf5825050 [0x7fff7240bf00]>{contents = "websitesoff403.html.en"}

20 : Etag = <CFString 0x7fadf584b0e0 [0x7fff7240bf00]>{contents = ""631-502046ad4a9c0;502046ae3ec00""}

21 : Accept-Ranges = <CFString 0x7fadf37ea9e0 [0x7fff7240bf00]>{contents = "bytes"}

22 : Last-Modified = <CFString 0x7fadf584e800 [0x7fff7240bf00]>{contents = "Mon, 01 Sep 2014 17:34:39 GMT"}

}

}]

9/3/14 11:55:36.589 AM CalendarAgent[233]: [com.apple.calendar.store.log.caldav.queue] [CalDAVOperationQueue tried to reorder operation <CalDAVAccountRefreshQueueableOperation: 0x7fadf59336a0; Sequence: 0> but it was not at the front of the queue.]

9/3/14 11:55:37.565 AM mdmclient[400]: 0x7fe56866f5a0 got exception creating tables and indexes (error 1: trigger after_delete_message already exists), current retries 2

9/3/14 11:55:38.643 AM mdmclient[400]: 0x7fe56a99dd20 got exception creating tables and indexes (error 1: trigger after_delete_message already exists), current retries 1

9/3/14 11:55:40.728 AM mdmclient[400]: 0x7fe5684b5260 got exception creating tables and indexes (error 1: trigger after_delete_message already exists), current retries 0

9/3/14 11:55:40.730 AM mdmclient[400]: [+[MFLibrary executeBlock:isWriter:useTransaction:isPrivileged:]] Error 1 creating tables and indexes

9/3/14 11:55:40.730 AM mdmclient[400]: *** ERROR *** [Agent:1025] Unknown exception: checking for existence of object

9/3/14 11:55:40.732 AM com.apple.preferences.configurationprofiles.remoteservice[336]: *** ERROR *** [CPInstallerUI:1025] XPC_SendMessageSync: Connection was interrupted

9/3/14 11:55:40.740 AM com.apple.launchd.peruser.1025[173]: (com.apple.mdmclient.agent[400]) Exited with code: 1

9/3/14 11:55:41.172 AM com.apple.preferences.configurationprofiles.remoteservice[336]: *** ERROR *** [CPInstallerUI:1025] Profile installation (Settings for Everyone (com.apple.mdm.{{ hostname here }}.{{payload? UID here}}.alacarte)) (XPC message interrupted <InternalError:1>)

9/3/14 11:55:41.173 AM WindowServer[99]: _CGXGetWindowOrderingGroup: Operation on a window 0xb7 requiring rights 0x5 by caller System Preferences

9/3/14 11:55:41.534 AM WindowServer[99]: window bb is already attached to window 54

Another update:

@Linc: what you said earlier about enabling SSH on the calendar -- I went into Calendar Properties and enabled SSH on the calendar in question, and it worked! That's the good news. 🙂

Now, why is Mavericks not installing these as SSH when Profile Manager is clearly pushing them out as such? I have tried 3 different installation mediums (10.9.4 USB disk made with Diskmaker X, 10.9.2 USB disk made with Diskmaker 3.x, and a Netinstall image made with and hosted on OS X Server 10.3.2). All had the same result.

Could this have anything to do with my Trusted Cert (which is a single-domain RapidSSL cert from NameCheap) being different from my Code Signing Cert (which is self-issued)?

Yes, sorry about that SSH typo. Yea, I'm realizing that now as well. 🙂 I just did another COMPLETE fresh install on both server and client, and same result on clean setup with no data from Time Machine. I'm giving it one last shot using another clean Netinstall instead of my USB drive. I have little hope, but we'll see.

Have you tried Server 4 at all? Not asking for details because of the NDA, but does it appear to be more stable?

Thanks!

~Mike