Multiple "catagories" in ical server

Hi - What would be the best way to implement "categories" with ical server. Since switching to ical we have used separate calendars to implement categories (unlike other calendars that let you assign a category to events in a single calendar) Now that we have ical server, I would like a group to be able to access and edit these multiple calendars.
These calendars do not use user names but things like:"appointment", "office", etc...
How would this be setup most efficiently with ical server?
Thanks

Dear Experts,
please tell me is it ok or i need to change something else?
this example is for only one listener, and i put both SID details in same LISTENER, or i need to change the listener name for another server. it is very confusing...
ADMIN_RESTRICTIONS_LISTENER = on
LISTENER =
(ADDRESS_LIST =
        (ADDRESS =
          (PROTOCOL = IPC)
          (KEY = PM1.WORLD)
        (ADDRESS=
          (PROTOCOL = IPC)
          (KEY = PM1)
        (ADDRESS =
          (COMMUNITY = SAP.WORLD)
          (PROTOCOL = TCP)
          (HOST = 10.11.230.12)
          (PORT = 1527))
LISTENER =
(ADDRESS_LIST =
        (ADDRESS =
          (PROTOCOL = IPC)
          (KEY =PE2.WORLD)
        (ADDRESS=
          (PROTOCOL = IPC)
          (KEY = PE2)
        (ADDRESS =
          (COMMUNITY = SAP.WORLD)
          (PROTOCOL = TCP)
          (HOST = 10.11.230.12)
          (PORT = 1528))
SID_LIST_LISTENER =
(SID_LIST =
    (SID_DESC =
      (SID_NAME = PM1)
      (ORACLE_HOME = /oracle/PM1/102_64)
STARTUP_WAIT_TIME_LISTENER = 0
CONNECT_TIMEOUT_LISTENER = 10
TRACE_LEVEL_LISTENER = ON
SID_LIST_LISTENER =
(SID_LIST =
    (SID_DESC =
      (SID_NAME = PE2)
      (ORACLE_HOME = /oracle/PE2/102_64)
Rishi

Similar Messages

Ical server/client suddenly stopped working together

Hi
I have 10.6.1 server with a group calendar served on a wiki. There are multiple users using 10.6.1 macbook, using ical to display/edit the group calendar. Server has a correctly configured FQDN. Apart from some niggles (will come to later), all has been fine for the last 2 weeks - all 10.6 clients have been able to connect without problems (to FQDN:8008/principals/wikis/groupadministration ). I do not have SSL. Today, one of the clients could no longer update the group calendar or refresh it (for changes from other people).
The following is in the client system log:
iCal[278] Exception in -[CalDAVAccountRefreshQueueableOperation refreshWithExceptionHandling] :: * -[NSCFString rawInterval]: unrecognized selector sent to instance 0x165437f0
In the server caldavd error log:
[caldav-8009] [-] [twistedcaldav.method.propfind#error] Error reading property ('DAV:', 'current-user-privilege-set') for resource /calendars/_uids_/wiki-groupadministration/inbox/: <StatusResponse 401 Access denied while reading property {DAV:}current-user-privilege-set.>
Web access still works for this user.
There have been no changes to any set up and the user in question had no problems in the last 2 weeks, until today. I understand it just "stopped working" this morning - user can offer no further help.
In other niggles (possibly unrelated but if anyone can help):
* I have an older client, running 10.5.8 with no wish to upgrade to 10.6, as there are some software compatibility issues (Adobe CS2, Parallels 3) and no budge to update software. ical has never been able to connect to the ical server reliably - after the first update/sync, no further updates are possible.
* It is not possible to disable alarms to the group calendar in ical. Option-i, uncheck the box, and 30 seconds later the box is checked again. Each user has their own "personal" calendar in the group calendar, and some users like to have alarms. It is not possible to disable those alarms for other users.
Hope someone can help. All in all, I am not particularly impressed with SL server.

Hello all,
since yesterday I'm having the same problem. the server was even not touched the last days.
Thank you
Horst

ICal Server - Can't log in with Kerberos?

Hello, I have been struggling the past few days getting ical server properly installed and configured to incorporate into our environment (just installed 10.6 server). I am very new to Kerberos, in fact never heard of it before getting into this, but would like to possibly use it as an authentication option. I have my master open directory installed and running, it says Kerberos is running, ldap as well as password server, all running. I created some test users in the LDAPv3/127.0.0.1 directory with open directory password types. I have opened ticket viewer and assigned tickets to these test users. In my Ical settings in server admin, I have authentication type set to kerberos. When I try to add an account via my ical client on my workstation (also 10.6 just installed), it searches and I get the message:
"Ical found the CALDAV server "servername" but couldn't log in with the user name "username". Make sure the user name and password you entered are correct, then try again"
If I click next and go to the calendar server options screen I select Ical server template, the port changes to 8443 I believe and I change it back to the default of 8008, and click use kerberos v5 for authentication, and uncheck Use SSL as I have that off. I then get the message of:
"Authentication failed. The server does not support Kerberos authentication."
Now, if I go completely backward, and change my iCal server authentication type to Digest, or Any Method, I can log in using any of my local user names and passwords and any open directory password users. This is great because it shows me the system is working, and I can get in, however what I don't quite understand is if I log in with a different/various usernames and passwords, I get a separate calendar for each login. When watching the apple demo video of Ical server here http://www.youtube.com/watch?v=7bzMTpLv-EE&feature=related , it seems there is one calendar, and multiple users are logging in using different logins, but accessing the same calendar.
So I guess my main questions are, why isn't Kerberos working, and how do I get it to work, am I missing something? And how do I get Ical server to operate the way it is in the video, so people log in with different various logins but are able to see the same "work" calendar as shown in the video.
I appreciate any help/insight. Thank you.

One additional piece of information that I don't know if it is a bug or if anyone else has this problem, but when I am logged in with a user, and access my address panel via my ical client, none of my locations, resources, people, or groups show up, every category is empty. However, if I start to type a search for a location name or user that I know the name of that I have added, THEN it will show up and I can click/select it. Almost behaving completely backwards, any ideas why these are not showing up without using the search??? Thank you again.

Reasons why iCal Server can't be my company's calendar server

I want to believe. I don't want to use Exchange. But after testing iCal server and iCal 3 for a few days, I've found it's not going to cut it for us- a 60 person creative agency. Here's why:
-There's no concept of "blocks time". So, let's say I don't want the office to know that I'm going to a job interview, but I do need to block out the time so nobody tries to schedule me to a meeting. In other systems, I can make a private event, and have it block time. In iCal, locally stored events (which are therefore private), are invisible to the network. I can't have my time reserved without announcing why. Sneaky code phrases are possible, but shouldn't be needed.
Similarly, I can't define if an "all day" event keeps me busy or not. I'd be inclined to list a week's vacation as an all day event starting on Monday and ending on Friday. But for co-workers to see that I'm gone in scheduling, I have to list it as an event from 8A on Monday to 5P on Friday.
-There isn't any group support. Perhaps I have a project team of the same 6 people. There's no way to group those 6 under a heading, and check their meeting availability all at once- you can only invite individuals. The Address Panel has 3 of the 4 headings of Directory.app, but no Groups. Every time this project team gets together, I have to add the same people.
I would think I could make a group in Address Book, but that's not working.
-Delegation is all or nothing. I can't delegate that co-workers can see one of my public calendars, but not the other.
-The Availability Panel can't show what events are blocking someone's time. You have to have them turned on in the iCal view to know that.
Please, please tell me there are just things I don't get about iCal3/iCal server, and if I just did things differently, I'd be OK. Is there something I'm missing, or is this really how it works?
(This was also submitted to apple.com/feedback, and [email protected])

Maximilian Reiss wrote:
Hi - haven`t looked yet at point 1 and 4, but also dislike point 2 and 3. Actually, afaik point 2 (individual delegation) is just a iCal (client) GUI limitation. I think the server would support it.
Group support regarding the client side is more or less there, just not in the new address panel. If you type the group name in the invitee field while editing an event you get the group.
I hope you filed bugreports for that at bugreport.apple.com
OK, here's another one. Window: Address Panel magically changes format for reasons I can't see. When I started this thread, I was in "Open Directory Lookup" mode of Address Panel. When you're here, you're only pulling addresses from OD.
When I returned to playing with iCal this morning, Address Panel was bringing back Address Book entries. When it's this way, yes, you can have a group defined in Address Book, and use that group as a shortcut to invite multiple people.
During the process of experimenting, Address Panel somehow reverted to Open Directory lookups. I'm not clear what controls this behavior.
So, yes, you can use Window: Address Book to pull up AddressBook.app, and drag a group from there into your invitee window. But is there a more integrated way (where leaving iCal isn't required) to invite a local group?

ICal Server mail notification generates malformed Reply-To header

When a mail notification (invitation) for an event is sent by iCal Server running on Snow Leopard Server to an outside email address, an apparently malformed "Reply-To" header similar to
[email protected]
is always inserted into the message. As the above address is not a valid one, the recipient is unable to reply to the event invitation. The "From" and "Return-Path" headers always indicate the correct email address "[email protected]".
Has anyone encountered this issue, or more importantly, know of a solution?

Remember - email addresses are technically only the @domain.com address. The suffix information is only a user of that domain.
ALL email sent regardless of who or how it is addressed before the @ is technically irrelevant to the end client (outlook, thunderbird, etc..)
Email is really only a DNS operation. The @domain.com is resolved somewhere in the cloud (no one really wants a boring DNS resolution lesson here....) to your domain server. In your public DNS records there are MX records which tell anyone trying to send email to your DOMAIN (not users) what mail servers you have, where they can be located, and in what priority they are used (if multiple mail servers are used.)
Once the email finds its way to your email server, it internally resolves the info before the @ to it's user directory (AD, OD, whatever) and then the mail server processes the message and sends it along to the user if it validates. But it still arrives at your mail server regardless if it is correct or not.
You can try this test yourself... (as long as copy all undeliverable mail to: is enabled in your server admin)
Send an email to some made up email address... [email protected].
It will still be resolved to your email server and "delivered" to your "copy undeliverable email to:" address. Even though it is not a valid user of your domain.
So, what does all that crap have to do with the topic? When you hit reply to an third party ical invite (because internal ical users don't use email for invites) - everything in front of the @domain.com is irrelevant in the reply process. And this applies to all email clients. The message is resolved and sent back to your @domain.com email server. So when you see the icalserver+blah blah blah [email protected] it is a correct address and all email clients only see the info after the @ for routing and send it to your email server.
It is once it hits the Mac Server does the magic happen. In the setup of ical, you specify an ical email address for this specific third party email invite function. Hence, the [email protected] address.
Mac email server has built in support for sub-addressing and this is where everything AFTER the "+" is resolved internally in the ical server.app. iCal uses this information to process the invite.
So, in closing... it has to be a Mac server for this function to work.
Hope I didn't stray to far from your question.
Scott

Leopard iCal Server, iPhone & MobileMe - best way to set up?

Hi there, hoping someone can help with this scenario:
In our office (approx. 30 people running Leopard), we connect to an iCal Server in order to have a shared CalDAV diary.
Currently, everyone logs in as the same CalDAV account. Within this account there are several separate calendars, one for each job number.
"332 Blah Blah Road"
"333 Etc Etc Street"
Our boss (and three others) have just bought new iPhone 3Gs and want to be able to:
a) have any shared calendar changes pushed to their iPhones when they are away from the office.
b) be able to make changes to shared calendars on the move and push them back to the iCal Server.
Would we need to get MobileMe (or several accounts) to do this? Apology for the ignorance, I have tried to look for information on this and got nowhere.
Can anyone suggest a way of getting this scenario to work? What are we doing wrong, or would we need an Exchange Server to achieve what we want?
Please feel free to patronise and start from basics!
Many thanks!
Message was edited by: Nicholas Wharton

Hi Nicholas,
In case it's not too late for you, I'd add the following "information bits":
- MobileMe is great for a single person. Getting multiple MobileMe's to talk to eachother may be possible, but MObileMe is clearly NOT advertised as for the small business.
That said, I still advocate all our team members to have MobileMe, just as a super-simple way to show/share images, for an added layer of backup redundancy, making transformation to newer laptops easier etc. etc.
Whilst some argue it is "too expensive", "can be had for free" etc., I am of the opinion 99 USD/y is a very small price to pay for the simplicity and comfort.
For GROUPWARE appslications (sharing calendars, contacts...), I would strongly recommend to look into KERIO Mail Server instead. It runs perfectly on our XServe, handles Outlook & Blackberry clients as well (there's always gonna be someone clinging on to a Berry-Device or using a PC until they understand how much better the Mac side is ). A 30-day demo is available, very easy to install and just make sure you don't get a conflict with your ports, as Kerio Webmail starts on port 80 (I disabled it, only allowing SSL connections) and your OS X Mailserver might run on it. Also perhaps an idea to deactivate your OS X Mail-Server in case you're using it on an XServe, if at all possible, otherwise make sure there are no port comflicts.
Hope this helps somewhat.
Jonas

ICal Server setup help !!!

Hello All,
I would like to share my experience with setting up the iCal server and all the hick ups I had to get it finally working. At least what worked for me. Check the basics before you start.
This is all done from after installing the server in Advanced setup or so to say normal installation as it was under Tiger. I'm trying to summarize what I have done. It took me a lot of hours do. So if I mis something feel free to reply with the missing things. Maybe together we can setup a working manual for all others that have problems with the setup and lack documentation from Apple.
1) Make sure your DNS is setup properly and working. Test it with:
type: “named-checkconf” in de root account of the terminal. Nothing should happen thats OK
type: “named-checkzone” in de root account of the terminal make sure you use the complete path and bare in mind that Apple changed the DNS setup again pointing to something like var/named/zones/db.example.come.zone.apple. The serial of the DNS should load and you should receive a OK. Make sure that your server IP is also mentioned in the system preferences/network DNS so you can use for example the server.example.com in server admin.
2) Either use SSL or don't when you want to use, use it everywhere otherwise it something will slip trough and want work. Without SSL it appears to work easier in the setup from local iCal client to server. But SSL is of course more secure. I want talk about Kerberos because I'm not able to get that to work yet.
3) Make sure you set it up from an "Open directory", "Local directory" should/could work to but I haven't test that yet and I seriously doubt it would work properly.
That being said I now can share my setup with you (switch your firewall of during setup it's easier to troubleshoot, switch it on again if everything works. If it stops working after the firewall is on again, well you know where to look for the problem :-)):
1) After setting up the Open Directory Master I switched on SSL and created a own certificate for my server. I didn't protected the certificate with a password as it gives a lot of extra problems with setting things it up. You can than select the certificate under Server Admin/Open Directory click on setting and click the tab LDAP. There you can select it.
2) Make sure your webserver is running and you have a working website where you can go to. Under Server Admin make sure that under the selection Sites that your FQDN is filled out. Being something like www.example.com and not example.com. The second one could cause iCal web part to not work accordingly at least that is my experience. After that choose security and make sure SSL is on and your certificate is selected. The rest of the website settings is pretty basic I didn't changed to much. I do know that I switched on some extra modules. Being bonjour_module, authzsvnmodule, davsvnmodule. This prevented further in the installation the 210 error when I went to the Calendar under my webbrowser. I wouldn't know which of the 3 is doing the trick I only know that after this it worked for me.
3) Pffffff OK go to the iCal Server settings under the Server Admin. The settings are straight forward but again make sure SSL is on and your certificate is selected. And look at your host name which should be someting like server.example.com. If you are not able to get DNS setup properly you could try your machines example.local name. But that again could give troubles when you want to use local iCal client outside the door on a laptop for example.
These where all the server admin setting. Now go to the Workgroup Manager and selected the group/groups you want to have Calendaring switched on and choose the way people are able to logon. This you can do by going to the group select the default website and services you want to give. Then select under Allow the way people can logon to this website or iCal services.
When that's done you should have everything up and running on the server site. So now go to a local iCal client and go to preferences/accounts/server setting. Click the + on the left bottom site and fill out a name and password leave the server option for now to auto. This way and when everything is setup properly you should get something like https://server.example.com:8443/principals/_uids_/14A0DD22-86CA-4F55-96D9-9CB461640D52/. The end number should refer to your name and password account so the number want be the same as in this example. Well if it works you are one of the lucky people and you are able to setup a shared Calendar from there. It would help a lot if you have more than one machine to test. Because it didn't worked on my MacBook Pro getting a famous error "iCal unexpected secure name resolution" But it did worked on my wifes iMac. So the server settings are OK. Now the good part when it's not working is that you can go to your webbrowser and type or copy the following: https://www.example.com:8443/principals/users/shortname (naturally use your own server name and user name). There you can see details of the principals settings. Including youre uids number. This number is unique for your name and password. Copy this number. Then go back to iCal switch of the auto find in iCal client under preferences/accounts/server settings. The first part of the link is https://server.example.com:8443/principals/uids/(Now paste you number here). Hit enter and see what happens. It the name server is not working for you than use for example iso server the name mail if you have it setup in the DNS is should work. It did worked for me and it gave me a nice shared calendar which you can name for yourself. Every group member should be able to see this agenda once hooked up to it via iCal client and prefences/accounts/server settings.
If you go to your website or www.example.com/groups you should see youre shared group. Sorry I only tried it with one group sofar. If you make changes to the calendar from the webbrowser it will show up after a refresh in your iCal client and visa versa. The only thing I still have problems with is the events for more days. They show up on the web as events but when I click them they produce a unwanted error. But when it's based on a single day than it work perfectly.
Hopefully you have a working iCal server to now. If you find something interesting or you think I left some important things out. Please reply and fill out the blanks.
I just hope that it will save some time for the new once setting this up.

Thank you for sharing your experiences. I am looking at setting up an iCal server myself for our business. However, our situation is a bit different. Could you also share what kind of workgroup you set it up for? And maybe help me answer a few questions below. Thanks in advance!
First a little background. We are a small management company. We have individual clients that we manage. We need to have access to their calendars to schedule events, etc. The thing is that we would be the only ones looking at everyone else's calendars at once so that we can coordinate our own schedules so that we can be where it is most important but still not lose track of other activities.
1. What kind of machine are you running the iCal Server on? Xserve? MacPro?
2. Is it possible to view multiple users' calendars within a single calendar view?
3. Does setting up this kind of calendar server sound like the setup for our situation where only we, the management, will be able to view all calendars?
4. How difficult will this set up be on our clients and their machines since we have little control over their personal machines? (The majority of our clients are all Mac users. There may be one PC user.)

I'm not a File Server tech-iCal Server setup decision? Was using NUTD

I've read thru the iCal Server Admin pdf multiple times. There is a ton of server related knowledge required to successfully set iCal Server up.
I don't have it (the knowledge) and don't have time to dedicate to learning it.
My company used to use Now Up To Date Server. Those folks actually did a great job of making it simple compared to iCal Server. NUTD did not work with iCal.
So I was hoping to be able to setup the iCal Server without a ton of back-office knowledge required.
*Can anyone suggest some help as to how I can get this working without having to becoming a Server Tech?*

I feel you pain. Wish Apple would just buy NUTD. I have subscribed to your question and am seeking answers myself. If I find anything I will try to share with you. This software is so un-Apple.

ICal server with alternate LDAP

Hi,
In the (very, very brief) documentation for iCal Server, it says:
To run iCal service, you need:
User names and passwords stored in a Mac OS X version 10.5 Open Directory system,
an Active Directory system (using the Active Directory plug-in for Mac OS X version
10.5 Open Directory), or an OpenLDAP directory with schema to support iCal service
Now, this sounds great. However, everywhere I look it says no, you need to have Open Directory, and not only that, but you have to have Open Directory on a Leopard Server.
What is the deal with this? We have an OD on a 10.4 server. That server is not getting upgraded - it is just not going to happen. My network administrator is ripping his hair out for days now trying to get LDAP data migrated to the 10.5 server with absolutely no success - most users do not transfer over directly, and doing the "export from Workgroup Manager" method completely destroys our users' records (attributes dropped, all inactive users become active!) It's a disaster!
If this thing supports any LDAP server with the right schema, why can't we just get an idea of what that schema would be and add it to our 10.4 Open Directory? OpenLDAP is OpenLDAP isn't it? I really understand what the issue is here, but either the documentation is flat out lying or there's some secret that no one's decided to actually write down yet. Which is it?

Well, schema modifications were exactly what I had in mind. I went of instructions in the ical source and that seemed to go pretty well - I can now start iCal services and get a clean log file out of it. I'm not saying it's working 100% yet (can grant users access to create calendars but they get an error "No Calendar Home Error" when they do - in the logs it seems to complain about not authenticating properly). I'm still pretty confident this can be done, it just seems that any of the automatic tools in Server Admin are pretty much worthless to us - so we have to learn how to emulate what it would be doing were it functional. We've even managed to get the wiki server up and running to - again, it just takes some patience to get things moving right. Once we do have a complete setup, I'll post the instructions somewhere. I'm sorry, but It's crap that this can't work - they just choose not to tell us how or provide any relevant patches. Upgrading an LDAP schema is not impossible. Used to have to do it once in a while back in the day before there was anything like Active Directory.
We would gladly just move the directory to 10.5 but it just does not seem to be possible without redoing all the information manually - as you have suggested. Now, that would be all well and good if we were a tiny little workgroup but we're talking about a whole company with hundreds of users here. It would be a major support nightmare for them all to lose their passwords or worse, for 2/3 of the accounts to disappear, which is the scenario with any of the automatic migration methods. Manual entry is technically possible but it would take quite a long time and it would also require reconfiguring many computers which aren't located anywhere near us anymore. The transportation and overtime costs alone are staggering. This is not the ease of use that Apple so heavily promotes for themselves. Upgrading the server to 10.5 would most surely knock out a lot of custom services that are running on the 10.4 server (things like ruby on rails that were set up manually - and are tied into so many other things that would take months to get tested and moved).
Really, I just think Apple needs to step up here and make their products interoperate better. How can it be so impossible to move users from an older server *of their making* to a newer one - they didn't consider this at all while developing the new version, that people may want to ... you know, expand to multiple servers? They didn't even consider that people might have an old, but perfectly functional, 10.4 server that they might want to keep around? It just doesn't make sense to me. Sadly, I feel in the Windows world this would have gone a lot better - I don't remember having nearly as many issues interoperating with Windows NT and Windows 2000 servers - at least, not with transferring accounts. Also, upgrading and migrating Tiger clients to Leopard is not nearly so impossible - in fact, it's remarkably simple. Granted the level of complexity is far greater, but I should think they'd be able to handle it - otherwise I think we should investigate more stable and long-term oriented server architechtures.

10.6.4 iCal Server recently stopped updating 10.5 iCal clients

Mac mini OS X Server 10.6.4, iCal server has wiki groups with multiple calendars.
Recently our 10.5.8 clients stopped reading/writing events to our 10.6 iCal server. Only the first calendar (the original auto-created when the group was created) is updated, the remaining calendars show 0 events. FWIW: the client's .caldav folder doesn't show the ETag Cache.plist for the calendars that don't show up.
This error is in the server log:
[twistedcaldav.method.propfind#error] Error reading property ('DAV:', 'current-user-privilege-set') for resource /calendars/_uids_/wiki-.../: <StatusResponse 401 Access denied while reading property {DAV:}current-user-privilege-set.>
I created new accounts on a 10.6 and a 10.5 client, the 10.6 is OK, the 10.5 has the same issues as our existing clients (which started having the issue at the same time).
Can this have anything to do with the principal.py issue when we lost group calendars? I still have the modified principal.py installed & updates haven't changed it.

No solution, gave the 10.5 user an Intel Mac running Snow Leopard.

ICal Server Utility...any point?

I've got our calendar server up and running. Its an OD replica from our primary OD master. Workgroup manager shows all my users and groups.
Since we have multiple boardrooms which need to be bookable I am trying to use the iCal Server Utility. To setup locations and resources, I had to authenticate using my OD admin password instead of my admin user account which I though was weird. And obviously had to change the authentication to password instead of kerberos in the preferences.
So I have my 3 boardrooms setup in the iCal server utility, so now what do I do to book a boardroom?The ical server admin .pdf isn't exactly clear.
On my laptop I have my ical account all setup and seems to be working fine. I can invite people and even groups which is great. But how do I book the boardroom? It certainly isn't listed in invitees when I try to type in 'boardroom' nothing auto completes.
I have also added our video camera as a bookable resource but this also doesn't show up under invitees?
Documentation is light on the ground and the built in 'ical server utility' is no help either. Anyone have any experience?

New problem. I see the the Locations created previously on both the Replica and the OD Master using the iCal Server Utility. But I can't add the permissions using:
sudo calendarservermanageprincipals --add-write-proxy groups:groupname locations:mediaroomdownstairs
I get
Invalid principal ID: locations:mediaroomdownstairs
So I thought I would just delete both locations and try it again. But I get Permission Denied error in the iCal Server Utility. Tried it on both the OD Replica running the iCal server and on the OD Master since I have to authenticate as the diradmin I thought it might stored on there.
So then using the tips listed here:
http://discussions.apple.com/thread.jspa?messageID=10403050
Opened up Workgroup Manager and in Preferences I turned on 'Show all records', and went to the 'bullseye' tab. From the drop down I can see my Resource (Video Camera) that I added in iCal Server Utility this morning but under Places there are no listings of the two meeting rooms. I tried this on both the OD Master and the Replica running the iCal server.
So that explains why I get the invalid principals. But the question is, how do I either delete the old records when I can't find them on either server, or modify them to allow read and write proxies.
Please help as its driving me crazy.

ICal server not working after restore

Short version:
I did a clean install on my server. Restored the users & groups and the Library/CalendarServer folder.
I CAN browse my calendar data by going to http://[mydomain]:8008/ in Safari, even drilling right down to individual events.
But iCal, while it seems to login correctly and I don't get any errors, doesn't show any calendars.
Here's the long story with a bit more detail...
1. got my new server (yay!)
2. calendar server was working great
3. three users had multiple calendars, and we shared them with eachother
4. for reasons unrelated to iCal, I decided to do a clean install.
5. first I did an "ASR" backup using terminal - to an external hard drive
6. reinstalled Mac OS X Server version 10.5 (forgot to run software update at this point)
7. re-entered the users and groups manually, but I was careful to make sure they had the same UID's
8. used cp command to copy the collaboration folder back from the backup, as well as the CalendarServer folder.
9. after much difficulty, finally got the wiki server working again
10. iCal clients could still browse their own calendars (I guess they are cached locally), but were unable to connect to the server (login errors).
11. realized that I hadn't run software update. I ran it. now running 10.5.3
12. minor glitch with wikis is now solved... yay!
13. calendars disappear from all iCal clients when they attempt to connect to server... doh!
14. and here I am.

The current permission on /Library/CalendarServer/Documents are as follows.
drwxr-x---@ 2 _calendar admin 68 Jun 30 23:38 Documents
WebDAV:{DAV:}acl 136
Here's the error log when I restart iCal server.
I put the whole error messages below.
2008-07-02 22:46:21+0900 [-] [caldav-8009] [-] "Directory service <OpenDirectoryService '/Search': '/Search'> has no GUID; generating service GUID from realm name."
2008-07-02 22:46:21+0900 [-] [caldav-8009] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[users@058167af-ace8-519a-ac3d-e166498db024(/Search->/Local /Default)] FFFFEEEE-DDDD-CCCC-BBBB-AAAA00000000(root) 'System Administrator'>
2008-07-02 22:46:21+0900 [-] [caldav-8009] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[users@058167af-ace8-519a-ac3d-e166498db024(/Search->/LDAPv 3/127.0.0.1)] AC15322C-17CF-4D75-B373-2A7F6870FB30(root) 'System Administrator'>
2008-07-02 22:46:21+0900 [-] [caldav-8009] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[users@058167af-ace8-519a-ac3d-e166498db024(/Search->/Local /Default)] 085BBC63-F7F4-4C66-851B-97BA5670DA12(yoshi) 'Yoshi Sawada'>
2008-07-02 22:46:21+0900 [-] [caldav-8009] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[users@058167af-ace8-519a-ac3d-e166498db024(/Search->/LDAPv 3/127.0.0.1)] ECD1F7F7-64D5-4188-BB5A-2F5FDC63CADB(yoshi) 'Yoshi Sawada'>
2008-07-02 22:46:21+0900 [-] [caldav-8009] [OpenDirectoryService] Reloading groups record cache
2008-07-02 22:46:21+0900 [-] [caldav-8010] [-] "Directory service <OpenDirectoryService '/Search': '/Search'> has no GUID; generating service GUID from realm name."
2008-07-02 22:46:21+0900 [-] [caldav-8010] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[users@058167af-ace8-519a-ac3d-e166498db024(/Search->/Local /Default)] FFFFEEEE-DDDD-CCCC-BBBB-AAAA00000000(root) 'System Administrator'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[users@058167af-ace8-519a-ac3d-e166498db024(/Search->/LDAPv 3/127.0.0.1)] AC15322C-17CF-4D75-B373-2A7F6870FB30(root) 'System Administrator'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[users@058167af-ace8-519a-ac3d-e166498db024(/Search->/Local /Default)] 085BBC63-F7F4-4C66-851B-97BA5670DA12(yoshi) 'Yoshi Sawada'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[users@058167af-ace8-519a-ac3d-e166498db024(/Search->/LDAPv 3/127.0.0.1)] ECD1F7F7-64D5-4188-BB5A-2F5FDC63CADB(yoshi) 'Yoshi Sawada'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [OpenDirectoryService] Reloading groups record cache
2008-07-02 22:46:21+0900 [-] [caldav-8009] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/Search->/Loca l/Default)] ABCDEFAB-CDEF-ABCD-EFAB-CDEF00000050(admin) 'Administrators'>
2008-07-02 22:46:21+0900 [-] [caldav-8009] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/Search->/LDAP v3/127.0.0.1)] 43992045-BA1E-4682-AA5A-B31399286CB1(admin) 'Open Directory Administrators'>
2008-07-02 22:46:21+0900 [-] [caldav-8009] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/Search->/Loca l/Default)] ABCDEFAB-CDEF-ABCD-EFAB-CDEF00000014(staff) 'Users'>
2008-07-02 22:46:21+0900 [-] [caldav-8009] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/Search->/LDAP v3/127.0.0.1)] 7C4DCA43-EB34-407A-B91D-466416929AFD(staff) 'Open Directory Users'>
2008-07-02 22:46:21+0900 [-] [caldav-8009] [OpenDirectoryService] Reloading locations record cache
2008-07-02 22:46:21+0900 [-] [caldav-8010] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/Search->/Loca l/Default)] ABCDEFAB-CDEF-ABCD-EFAB-CDEF00000050(admin) 'Administrators'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/Search->/LDAP v3/127.0.0.1)] 43992045-BA1E-4682-AA5A-B31399286CB1(admin) 'Open Directory Administrators'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/Search->/Loca l/Default)] ABCDEFAB-CDEF-ABCD-EFAB-CDEF00000014(staff) 'Users'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[groups@058167af-ace8-519a-ac3d-e166498db024(/Search->/LDAP v3/127.0.0.1)] 7C4DCA43-EB34-407A-B91D-466416929AFD(staff) 'Open Directory Users'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [OpenDirectoryService] Reloading locations record cache
2008-07-02 22:46:21+0900 [-] [caldav-8009] [OpenDirectoryService] Reloading resources record cache
2008-07-02 22:46:21+0900 [-] [caldav-8010] [OpenDirectoryService] Reloading resources record cache
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Configuring SudoDirectoryService with file: /etc/caldavd/sudoers.plist
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Setting up document root at: /Library/CalendarServer/Documents
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Setting up principal collection: <class 'twistedcaldav.directory.principal.DirectoryPrincipalProvisioningResource'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [startup] Configuring SudoDirectoryService with file: /etc/caldavd/sudoers.plist
2008-07-02 22:46:21+0900 [-] [caldav-8010] [startup] Setting up document root at: /Library/CalendarServer/Documents
2008-07-02 22:46:21+0900 [-] [caldav-8010] [startup] Setting up principal collection: <class 'twistedcaldav.directory.principal.DirectoryPrincipalProvisioningResource'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [startup] Setting up calendar collection: <class 'twistedcaldav.static.CalendarHomeProvisioningFile'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [startup] Setting up root resource: <class 'twistedcaldav.root.RootResource'>
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Setting up calendar collection: <class 'twistedcaldav.static.CalendarHomeProvisioningFile'>
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Setting up root resource: <class 'twistedcaldav.root.RootResource'>
2008-07-02 22:46:21+0900 [-] [caldav-8010] [startup] Setting up default ACEs on root resource
2008-07-02 22:46:21+0900 [-] [caldav-8010] [-] Setting up AdminPrincipals
2008-07-02 22:46:21+0900 [-] [caldav-8010] [-] Setting root ACL
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Setting up default ACEs on root resource
2008-07-02 22:46:21+0900 [-] [caldav-8009] [-] Setting up AdminPrincipals
2008-07-02 22:46:21+0900 [-] [caldav-8009] [-] Setting root ACL
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Setting up Timezone Cache
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Configuring authentication for realm: /Search
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Setting up scheme: kerberos
2008-07-02 22:46:21+0900 [-] [caldav-8010] [startup] Setting up Timezone Cache
2008-07-02 22:46:21+0900 [-] [caldav-8010] [startup] Configuring authentication for realm: /Search
2008-07-02 22:46:21+0900 [-] [caldav-8010] [startup] Setting up scheme: kerberos
2008-07-02 22:46:21+0900 [-] [caldav-8010] [KerberosCredentialFactoryBase] getServerPrincipalDetails: ('Principal not found in keytab', -1)
2008-07-02 22:46:21+0900 [-] [caldav-8010] [startup] Could not start Kerberos
2008-07-02 22:46:21+0900 [-] [caldav-8010] [startup] Setting up scheme: digest
2008-07-02 22:46:21+0900 [-] [caldav-8009] [KerberosCredentialFactoryBase] getServerPrincipalDetails: ('Principal not found in keytab', -1)
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Could not start Kerberos
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Setting up scheme: digest
2008-07-02 22:46:21+0900 [-] [caldav-8009] [-] Configuring authentication wrapper
2008-07-02 22:46:21+0900 [-] [caldav-8009] [-] Setting up service
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Configuring log observer: <twistedcaldav.logging.AMPCommonAccessLoggingObserver object at 0x146c6b0>
2008-07-02 22:46:21+0900 [-] [caldav-8009] [startup] Adding server at 127.0.0.1:8009
2008-07-02 22:46:21+0900 [-] [caldav-8009] [-] twisted.web2.channel.http.HTTPFactory starting on 8009
2008-07-02 22:46:21+0900 [-] [caldav-8009] [-] Starting factory <twisted.web2.channel.http.HTTPFactory instance at 0x14687b0>
2008-07-02 22:46:21+0900 [twistedcaldav.logging.AMPLoggingFactory] AMPLoggingProtocol connection established (HOST:UNIXSocket('/var/run/caldavd.sock') PEER:UNIXSocket(''))
2008-07-02 22:46:21+0900 [-] [caldav-8009] [-] set uid/gid 93/93
2008-07-02 22:46:21+0900 [-] [caldav-8009] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('/var/run/caldavd.sock'))
2008-07-02 22:46:22+0900 [-] [caldav-8010] [-] Configuring authentication wrapper
2008-07-02 22:46:22+0900 [-] [caldav-8010] [-] Setting up service
2008-07-02 22:46:22+0900 [-] [caldav-8010] [startup] Configuring log observer: <twistedcaldav.logging.AMPCommonAccessLoggingObserver object at 0x146c6b0>
2008-07-02 22:46:22+0900 [-] [caldav-8010] [startup] Adding server at 127.0.0.1:8010
2008-07-02 22:46:22+0900 [-] [caldav-8010] [-] twisted.web2.channel.http.HTTPFactory starting on 8010
2008-07-02 22:46:22+0900 [-] [caldav-8010] [-] Starting factory <twisted.web2.channel.http.HTTPFactory instance at 0x14687b0>
2008-07-02 22:46:22+0900 [-] [caldav-8010] [-] set uid/gid 93/93
2008-07-02 22:46:22+0900 [twistedcaldav.logging.AMPLoggingFactory] AMPLoggingProtocol connection established (HOST:UNIXSocket('/var/run/caldavd.sock') PEER:UNIXSocket(''))
2008-07-02 22:46:22+0900 [-] [caldav-8010] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('/var/run/caldavd.sock'))
2008-07-02 22:51:35+0900 [-] [caldav-8009] [-] AMP connection established (HOST:UNIXSocket(None) PEER:UNIXSocket('/var/run/caldavd-pydir.sock'))
2008-07-02 22:51:35+0900 [-] [caldav-8009] [OpenDirectoryService] Faulting record yoshi into users record cache
2008-07-02 22:51:35+0900 [-] [caldav-8009] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[users@058167af-ace8-519a-ac3d-e166498db024(/Search->/Local /Default)] 085BBC63-F7F4-4C66-851B-97BA5670DA12(yoshi) 'Yoshi Sawada'>
2008-07-02 22:51:35+0900 [-] [caldav-8009] [OpenDirectoryService] Record disabled due to conflict: <OpenDirectoryRecord[users@058167af-ace8-519a-ac3d-e166498db024(/Search->/LDAPv 3/127.0.0.1)] ECD1F7F7-64D5-4188-BB5A-2F5FDC63CADB(yoshi) 'Yoshi Sawada'>
2008-07-02 22:51:35+0900 [-] [caldav-8009] [AMP,client] Could not find the principal resource for user id: yoshi

How do I put a newly invited event into my iCal server calendar?

Hi There,
We recently bought a mac-mini server which is running Snow Leopard Server for our office, and we have configured the server (using iCal Server 2) to store everybody's calendars.
Everyone is using iCal to access there calendars off the server and the basics are working ok (sharing etc).
An issue arises when someone attempts to create an event and invite another user in the office, the invitation is sent correctly but when the user receives the invitation and tries to add it to there calendar it is added to there local calendar, not the server calendar.
So my question is how do I make it so any newly added event is put into my server calendar, not one of my local calendars?
thanks for any help.

Bear with me because my system is Italian, but we'll work it out together: iCAL will provide you with myriads of calendars, even those of football team schedules in Oklahoma.
In my system, I go into iCAL, click on the menu at the top "Calendario" ("Calendar" obviously) and study the roll-down menu. I found "Trova iscrizioni" which might simply be something like "find calendars" "find entries". In any case, it is the item at the bottom of the roll-down "Calendar" menu.
Be prepared for a bit of scrolling, unless there is an index I missed.

How do I select multiple events in iCal 8.0?

In OSX Mavericks, I used to be able to select multiple events in iCal in the event list view. I could select the initial event in the span of events to be selected. Then hold Shift while selecting the final even in the span of events. As a result, all of the events in that span would be selected.
in OSX Yosemite, this is no longer possible. There appears to be no list view, and holding the Shift button does not allow me to select a span of events.
What is the best way to select a span of events, say as much as 30 events?
Thank you.

Empty Caches
1. Safari > Preference > Advanced
    Checkmark the box for "Show Develop menu in menu bar".
    "Develop" menu will appear in the Safari menu bar.
    Click Develop and select "Empty Caches" from the dropdown.
2. Quit Safari if open.
    Option click the "Go" menu in the Finder menu bar.
    Select "Library" and then "Caches".
    Look for the folder 'com.apple.Safari"
    Right click "com.apple.Safari" and select "Move to Trash"
    Relaunch Safari.

How to have iCal Server share one or more calendars?

Hello everybody.
I'm really new to iCal Server, and I'd like to be able to create and share one or more calendars for a couple of users. I'm running Mac Mini with OSX SL Server 10.6.5 and have iMacs with the same OS.
Any how-to or such, to read and step-by-step configure the stuff?
I'm already looking at the Apple PDF (from Resources) but I'm stuck where it tells me to create the SRV record: I don't know which fields to fill in with the infos provided.
Any help will be much appreciated!
Thanks,
F.

Yes, it is Flavio.
There are other threads that claim you can disregard the manual in this respect. I tried disregarding it. It'll seem to work. Then within days users will complain of intermittent (1) "calendar not found", (2) "lack of permissions", and (3) "conflicts with client-side versus server-side" errors.
Creating the SRV is essential in this, because it's registering the iCal service with DNS, and DNS is telling the client how to involve the server in the service. To be technically accurate, the server does have a default response when the SRV doesn't exist, so, yes, it will work at times..., but it's hard to explain this to your users when they're asking you about clicking through error dialogs every five minutes. "What do I do here? Should I be worried about this?" You'll be pulling your hair out. I was. Once I had the SRV up, though, the errors have entirely disappeared.
In addition to the things in my last post, having Push Notifications working is also wonderful. Follow the steps in the manual, but basically it involves turning Push on before starting up iCal.
Lastly, there's the question of moving users' old calendars (which are client-based) over to the iCal server (which is server-based): You can't just import-then-export, or you'll find other, nagging errors (basically of type "3", above). As far as I've been able to tell, if the user's calendar contains events where they're not the organizer (and it will), you'll get errors because the user has now assumed an event they don't own. The errors you'll get are basically the server asking, "Who owns this thing? I don't get it."
Sadly, the only way around this is I've found is for the end-user to context-click on each old event and move it to the new calendar. When the calendar options there are ghosted, they'll know they have an event they don't own.
But once you get past this point, it works beautifully. Users get really excited, because they now see the wonderful opportunities they now have. And that makes you feel it was worth it (especially when you think of how much they'd be spending on Exchange).

Multiple "catagories" in ical server

Similar Messages

Maybe you are looking for