On Fri, Aug 10, 2007 at 02:42:25PM +0200, Alexander Sack wrote: > On Fri, Aug 10, 2007 at 02:36:27PM +0200, Guido Guenther wrote: > > On Fri, Aug 10, 2007 at 10:17:56AM +0200, Alexander Sack wrote: > > > tags 437026 + confirmed > > > thanks > > > > > > > > > On Fri, Aug 10, 2007 at 10:01:02AM +0200, Guido Guenther wrote: > > > > Hi, > > > > the auth extension is currently disabled. Please enable it in iceowl to > > > > get SPNEGO/Kerberos to work. Trivial patch attached. Upstream bug is: > > > > https://bugzilla.mozilla.org/show_bug.cgi?id=391493 > > > > Cheers, > > > > -- Guido > > > > > > Yes, will do ... is it known to work? > > It works here. There are issues when the server only allows for Kerberos > > and you don't have a valid ticket: you don't get an error message and > > the calender stays empty. If the server also support plain auth, it > > looks o.k. though. > > You mean if you do not yet have a ticket granting ticket, right? If it > doesn't get you a service-ticket at all, I would consider it not usable.
Calendarserver offers Kerberos only: If you don't have a TGT, you won't get a dialog to acquire one - the calender just stays empty. If you _do_ have a TGT you get a service-ticket as expected. Calenderserver offers Kerberos and alternative authentication mechanisms: If you don't have a TGT, a dialog asks for the password of the "other" authentication mechanism. If you _do_ have a TGT you get a service-ticket as expected. Cheers, -- Guido -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
