Who got caldav and carddav push running successful on lion server?

Question

Hello everybody,
I am running OS X Server since 10.5 server which I upgraded to 10.6 server in the past without problems, upgrading 10.6 to 10.7 was is a mess and none of my serveral upgrades attempts were leading into a "stable" lion server so I ended up with manual upgrading my data into a clean install of lion server.
After data migration most of my services are working as usual (some profilemanager quirks but that don't bother me for now).
Only when it comes to push for calendar and addressbook services I am getting frustrated!
Push mail is running fine for my iDevices (Push is listed on my iPhone and iPad and Mac) but for caldav and carddav my caldavd error.logs are throwing error messages like this if I access iCal or addressbook via Mac or iDevice (no Push available on iPhone or iPad neither on my Mac).
Those for caldav
2011-09-23 11:29:18+0200 [-] [caldav-0]  [-] [twistedcaldav.notify.Notifier#warn] Could not create node /CalDAV/myserver.fqdn/FEF253F7-9A6C-4242-A990-88960832BF5F/
2011-09-23 11:29:18+0200 [-] [notifications] 2011-09-23 11:29:18+0200 [XmlStream,client] [twistedcaldav.notify.XMPPNotifier#error] PubSub node configuration error: <error code='403' type='auth'><forbidden xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'/></error>
2011-09-23 11:29:18+0200 [-] [notifications] 2011-09-23 11:29:18+0200 [XmlStream,client] [twistedcaldav.notify.XMPPNotifier#error] PubSub node configuration error: <error code='403' type='auth'><forbidden xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'/></error>
and those for carddav
2011-09-23 11:24:35+0200 [-] [caldav-1]  [-] [twistedcaldav.notify.Notifier#warn] Could not create node /CardDAV/myserver.fqdn/FEF253F7-9A6C-4242-A990-88960832BF5F/
2011-09-23 11:24:35+0200 [-] [notifications] 2011-09-23 11:24:35+0200 [XmlStream,client] [twistedcaldav.notify.XMPPNotifier#error] PubSub node configuration error: <error code='403' type='auth'><forbidden xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'/></error>
2011-09-23 11:24:35+0200 [-] [notifications] 2011-09-23 11:24:35+0200 [XmlStream,client] [twistedcaldav.notify.XMPPNotifier#error] PubSub node configuration error: <error code='403' type='auth'><forbidden xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'/></error>
I tried several thing (changing serveradmin settings, plist and other configuration files, checking passwords, renew apple push certificates etc.) but that changed nothing, so if one got those push services running correctly I would appreciate if one could share his configuration so I can compare it with mine.
I think those files and output are interesting for the configuration, if some other files are important please note them.
If one feel afraid to post his configuration for security reasons etc. please ask for my email address
Output of terminal command:
sudo serveradmin settings calendar
sudo serveradmin settings addressbook
sudo serveradmin settings notification
sudo serveradmin jabber
plist and other configuration files of interest
/etc/caldavd/caldavd.plist
/etc/jabberd/*
/etc/jabberd_notification/*
Best regards,
Eldrik

Answer 1

This error...  <error code='403' type='auth'><forbidden xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'/></error> ...looks like the XMPP notification server is not allowing the calendar server's XMPP account (or "JID") to create/configure pubsub nodes.  The XMPP notification server keeps a list of privileged JIDs in /Library/Preferences/com.apple.NotificationServer.plist.
First, check to see that calendar server is configured to use the "com.apple.notificationuser@<your hostname>" account by running this command in terminal:
sudo serveradmin settings calendar:Notifications:Services:XMPPNotifier:JID
You should see something like:
calendar:Notifications:Services:XMPPNotifier:JID = "[email protected]"
Next, see who is in the notification server's "privileged users" list via:
serveradmin settings notification:privilegedUsers
You should see something like:
notification:privilegedUsers:_array_index:0 = "_notification_user"
notification:privilegedUsers:_array_index:1 = "com.apple.notificationuser"
If you don't see "com.apple.notificationuser", you'll need to edit /Library/Preferences/com.apple.NotificationServer.plist and add it to the "privilegedUsers" array like:
  <key>privilegedUsers</key>
          <array>
     <string>_notification_user</string>
     <string>com.apple.notificationuser</string>
          </array>
Then I would recommend rebooting the server so that you are sure the notification server is restarted and re-reads the plist.