debian/0000755000000000000000000000000012051442503007162 5ustar debian/compat0000644000000000000000000000000212032047331010357 0ustar 8 debian/calendarserver.examples0000644000000000000000000000040511764356201013732 0ustar conf/sudoers.plist conf/servers.xml conf/servertoserver.dtd conf/servers.dtd conf/auth/proxies.dtd conf/auth/augments-default.xml conf/auth/augments.dtd conf/auth/accounts.xml conf/auth/accounts.dtd conf/resources.xml conf/caldavd.plist conf/servertoserver.xml debian/patches/0000755000000000000000000000000012051442503010611 5ustar debian/patches/manpages.patch0000644000000000000000000000313211764356201013435 0ustar Fixes problems with manpages --- a/doc/calendarserver_manage_principals.8 +++ b/doc/calendarserver_manage_principals.8 @@ -36,7 +36,7 @@ .Op Fl -remove-proxy Ar principal .Op Fl -set-auto-schedule Ar true|false .Op Fl -get-auto-schedule -.Op Fl -add Ar locations|resources full-name [record-name] [GUID] +.Op Fl -add Ar locations|resources full-name\: [record-name] [GUID] .Op Fl -remove .Ar principal .Op principal ... --- a/doc/calendarserver_monitor_notifications.8 +++ b/doc/calendarserver_monitor_notifications.8 @@ -33,7 +33,7 @@ .Ar username .Sh DESCRIPTION .Nm -is a tool for making sure XMPP push notifications are working properly. Given a username and password it will connect to the calendar server and determine which pubsub node(s) correspond to that user's calendar home, as well as those of any user which has delegated calendar access. Next it will subscribe to those nodes and await notifications, printing them to stdout. An administrator can monitor the push notifications for another user by passing the --admin option. Exit by hitting Control-C. +is a tool for making sure XMPP push notifications are working properly. Given a username and password it will connect to the calendar server and determine which pubsub node(s) correspond to that user's calendar home, as well as those of any user which has delegated calendar access. Next it will subscribe to those nodes and await notifications, printing them to stdout. An administrator can monitor the push notifications for another user by passing the \-\-admin option. Exit by hitting Control-C. .Pp .Sh OPTIONS .Bl -tag -width flag debian/patches/python-all-build-bug-fix.patch0000644000000000000000000000061312012776211016360 0ustar Fix for building package for both python 2.6 and python 2.7. Thanks to Fredrik Unger for providing this patch. See http://bugs.debian.org/684996 for more information on this. --- a/setup.py +++ b/setup.py @@ -37,6 +37,7 @@ if root == ".": excludes.append("data") + excludes.append("debian") for exclude in excludes: if exclude in dirs: debian/patches/nssdirectory.patch0000644000000000000000000002662311764356201014404 0ustar Name Service Switch (NSS) directory backend See http://trac.calendarserver.org/ticket/271 for more details --- a/conf/caldavd.plist +++ b/conf/caldavd.plist @@ -158,6 +158,39 @@ 400 + + + + + + + HTTPPort - 80 + 8008 @@ -78,23 +81,26 @@ ServerRoot - /var/db/caldavd + /var/lib/caldavd + UseDatabase + + DataRoot - Data + /var/lib/caldavd DocumentRoot - Documents + /var/spool/caldavd ConfigRoot @@ -102,7 +108,7 @@ RunRoot - /var/run + /var/run/caldavd Aliases @@ -173,7 +179,7 @@ params xmlFile - accounts.xml + /etc/caldavd/accounts.xml @@ -194,6 +200,140 @@ --> + + + + + ResourceService + + Enabled + + type + twistedcaldav.directory.xmlfile.XMLDirectoryService + + params + + xmlFile + /etc/caldavd/resources.xml + + + SSLCertificate - + /etc/ssl/certs/ssl-cert-snakeoil.pem SSLAuthorityChain @@ -322,7 +462,7 @@ SSLPrivateKey - + /etc/ssl/private/ssl-cert-snakeoil.key UserName - daemon + caldavd GroupName - daemon + caldavd ProcessType Combined @@ -413,7 +553,7 @@ Servers - servertoserver.xml + /etc/caldavd/servertoserver.xml @@ -505,6 +645,19 @@ EnableWebAdmin + + Memcached + + Pools + + Default + + ServerEnabled + + + + + --- a/setup.py +++ b/setup.py @@ -142,7 +142,10 @@ "bin/calendarserver_monitor_notifications", "bin/calendarserver_bootstrap_database", ], - data_files = [ ("caldavd", ["conf/caldavd.plist"]), ], + data_files = [ ("/etc/caldavd", ["conf/caldavd.plist", "conf/sudoers.plist", + "conf/auth/accounts.xml", "conf/auth/accounts.dtd", + "conf/servertoserver.xml", "conf/servertoserver.dtd", + "conf/resources.xml"]) ], ext_modules = extensions, py_modules = [], ) debian/patches/series0000644000000000000000000000023712034633570012037 0ustar python-all-build-bug-fix.patch manpages.patch linux-xattr-fix.patch conf.patch nssdirectory.patch secure-python-path.patch py-ssize-t-fix.patch zoneinfo.patch debian/patches/linux-xattr-fix.patch0000644000000000000000000001673411764356201014741 0ustar Replaces hardcoded "WebDAV:" prefix with "user." prefix when setting extended attributes in various files as this is required in Linux. In some files, this situation is alread handled by using "WebDAV:" or "user." depending on the platform. See http://trac.calendarserver.org/ticket/337 for more information. --- a/calendarserver/tools/anonymize.py +++ b/calendarserver/tools/anonymize.py @@ -37,12 +37,12 @@ from pycalendar.attribute import PyCalendarAttribute COPY_CAL_XATTRS = ( - 'WebDAV:{DAV:}resourcetype', - 'WebDAV:{urn:ietf:params:xml:ns:caldav}calendar-timezone', - 'WebDAV:{http:%2F%2Fapple.com%2Fns%2Fical%2F}calendar-color', - 'WebDAV:{http:%2F%2Fapple.com%2Fns%2Fical%2F}calendar-order', + 'user.{DAV:}resourcetype', + 'user.{urn:ietf:params:xml:ns:caldav}calendar-timezone', + 'user.{http:%2F%2Fapple.com%2Fns%2Fical%2F}calendar-color', + 'user.{http:%2F%2Fapple.com%2Fns%2Fical%2F}calendar-order', ) -COPY_EVENT_XATTRS = ('WebDAV:{DAV:}getcontenttype',) +COPY_EVENT_XATTRS = ('user.{DAV:}getcontenttype',) def usage(e=None): @@ -236,19 +236,19 @@ # Set new etag xml = "\r\n%s\r\n" % (hashlib.md5(data).hexdigest(),) - xattr.setxattr(destResource, "WebDAV:{http:%2F%2Ftwistedmatrix.com%2Fxml_namespace%2Fdav%2F}getcontentmd5", zlib.compress(xml)) + xattr.setxattr(destResource, "user.{http:%2F%2Ftwistedmatrix.com%2Fxml_namespace%2Fdav%2F}getcontentmd5", zlib.compress(xml)) resources += 1 # Store new ctag on calendar xml = "\r\n%s\r\n" % (str(datetime.datetime.now()),) - xattr.setxattr(destCal, "WebDAV:{http:%2F%2Fcalendarserver.org%2Fns%2F}getctag", zlib.compress(xml)) + xattr.setxattr(destCal, "user.{http:%2F%2Fcalendarserver.org%2Fns%2F}getctag", zlib.compress(xml)) # Calendar home quota xml = "\r\n%d\r\n" % (quotaUsed,) - xattr.setxattr(destHome, "WebDAV:{http:%2F%2Ftwistedmatrix.com%2Fxml_namespace%2Fdav%2Fprivate%2F}quota-used", zlib.compress(xml)) + xattr.setxattr(destHome, "user.{http:%2F%2Ftwistedmatrix.com%2Fxml_namespace%2Fdav%2Fprivate%2F}quota-used", zlib.compress(xml)) # Inbox free busy calendars list destInbox = os.path.join(destHome, "inbox") @@ -259,7 +259,7 @@ xml += "/calendars/__uids__/%s/%s/\n" % (record['guid'], freeBusy) xml += "\n" xattr.setxattr(destInbox, - "WebDAV:{urn:ietf:params:xml:ns:caldav}calendar-free-busy-set", + "user.{urn:ietf:params:xml:ns:caldav}calendar-free-busy-set", zlib.compress(xml) ) --- a/calendarserver/tools/doublequotefix.py +++ b/calendarserver/tools/doublequotefix.py @@ -56,14 +56,14 @@ def updateEtag(path, caldata): x = xattr.xattr(path) - x["WebDAV:{http:%2F%2Ftwistedmatrix.com%2Fxml_namespace%2Fdav%2F}getcontentmd5"] = """ + x["user.{http:%2F%2Ftwistedmatrix.com%2Fxml_namespace%2Fdav%2F}getcontentmd5"] = """ %s """ % (hashlib.md5(caldata).hexdigest(),) def updateCtag(path): x = xattr.xattr(path) - x["WebDAV:{http:%2F%2Fcalendarserver.org%2Fns%2F}getctag"] = """ + x["user.{http:%2F%2Fcalendarserver.org%2Fns%2F}getctag"] = """ %s """ % (str(datetime.datetime.now()),) --- a/calendarserver/tools/fixcalendardata.py +++ b/calendarserver/tools/fixcalendardata.py @@ -65,14 +65,14 @@ def updateEtag(path, caldata): x = xattr.xattr(path) - x["WebDAV:{http:%2F%2Ftwistedmatrix.com%2Fxml_namespace%2Fdav%2F}getcontentmd5"] = """ + x["user.{http:%2F%2Ftwistedmatrix.com%2Fxml_namespace%2Fdav%2F}getcontentmd5"] = """ %s """ % (hashlib.md5(caldata).hexdigest(),) def updateCtag(path): x = xattr.xattr(path) - x["WebDAV:{http:%2F%2Fcalendarserver.org%2Fns%2F}getctag"] = """ + x["user.{http:%2F%2Fcalendarserver.org%2Fns%2F}getctag"] = """ %s """ % (str(datetime.datetime.now()),) @@ -106,7 +106,7 @@ for item in os.listdir(calendarHome): calendarPath = os.path.join(calendarHome, item) x = xattr.xattr(calendarPath) - if x.has_key("WebDAV:{http:%2F%2Fcalendarserver.org%2Fns%2F}getctag"): + if x.has_key("user.{http:%2F%2Fcalendarserver.org%2Fns%2F}getctag"): scanCalendar(basePath, calendarPath, scanFile, doFix) def scanCalendar(basePath, calendarPath, scanFile, doFix): --- a/contrib/tools/fix_calendar +++ b/contrib/tools/fix_calendar @@ -44,14 +44,14 @@ # First fix the resourcetype & getctag on the calendar x = xattr.xattr(path) - x["WebDAV:{DAV:}resourcetype"] = """ + x["user.{DAV:}resourcetype"] = """ """ - x["WebDAV:{http:%2F%2Fcalendarserver.org%2Fns%2F}getctag"] = """ + x["user.{http:%2F%2Fcalendarserver.org%2Fns%2F}getctag"] = """ Dummy Value """ @@ -63,13 +63,13 @@ # getcontenttype x = xattr.xattr(fullpath) - x["WebDAV:{DAV:}getcontenttype"] = """ + x["user.{DAV:}getcontenttype"] = """ text/calendar """ # md5 data = open(fullpath).read() - x["WebDAV:{http:%2F%2Ftwistedmatrix.com%2Fxml_namespace%2Fdav%2F}getcontentmd5"] = """ + x["user.{http:%2F%2Ftwistedmatrix.com%2Fxml_namespace%2Fdav%2F}getcontentmd5"] = """ %s """ % (hashlib.md5(data).hexdigest(),) --- a/twistedcaldav/test/data/makelargefbset.py +++ b/twistedcaldav/test/data/makelargefbset.py @@ -45,7 +45,7 @@ inboxname = os.path.join(path, "inbox") attrs = xattr.xattr(inboxname) - attrs["WebDAV:{urn:ietf:params:xml:ns:caldav}calendar-free-busy-set"] = """ + attrs["user.{urn:ietf:params:xml:ns:caldav}calendar-free-busy-set"] = """ /calendars/users/user%02d/calendar/ /calendars/users/user%02d/calendar.1000/ debian/patches/py-ssize-t-fix.patch0000644000000000000000000000162712012776211014453 0ustar The second call to PyArg_ParseTuple in sendmsg.c passed an int* where a Py_ssize_t* should be passed. See http://bugs.debian.org/678525 for more information. --- a/twext/python/sendmsg.c +++ b/twext/python/sendmsg.c @@ -217,7 +217,8 @@ /* Unpack the tuples into the control message. */ struct cmsghdr *control_message = CMSG_FIRSTHDR(&message_header); while ( (item = PyIter_Next(iterator)) ) { - int data_len, type, level; + int type, level; + Py_ssize_t data_len; size_t data_size; unsigned char *data, *cmsg_data; @@ -247,7 +248,7 @@ free(message_header.msg_control); PyErr_Format(PyExc_OverflowError, - "CMSG_LEN(%d) > SOCKLEN_MAX", data_len); + "CMSG_LEN(%zd) > SOCKLEN_MAX", data_len); return NULL; } debian/upgrade-nss-data-directories.py0000644000000000000000000001321411764356201015217 0ustar #!/usr/bin/python import os import shutil import pwd import grp import plistlib import copy import StringIO from uuid import UUID, uuid5 def main(): # Init params defaultConfigFile = "/etc/caldavd/caldavd.plist.upgrade.nss.tmp" defaultConfig = { "DirectoryService": { "type": "twistedcaldav.directory.xmlfile.XMLDirectoryService", }, "DocumentRoot": "/Library/CalendarServer/Documents", } serviceDefaultParams = { "twistedcaldav.directory.nss.NssDirectoryService": { "realmName": "Test Realm", "groupPrefix": "caldavd-", "firstValidUid": 1000, "lastValidUid": 65533, "firstValidGid": 1000, "lastValidGid": 65533, } } recordType_users = "users" recordType_groups = "groups" nssServiceBaseGUID = "8EFFFAF1-5221-4813-B971-58506B963573" # Function to generate uuid from name def uuidFromName(namespace, name): """ Generate a version 5 (SHA-1) UUID from a namespace UUID and a name. See http://www.ietf.org/rfc/rfc4122.txt, section 4.3. @param namespace: a UUID denoting the namespace of the generated UUID. @param name: a byte string to generate the UUID from. """ # We don't want Unicode here; convert to UTF-8 if type(name) is unicode: name = name.encode("utf-8") return str(uuid5(UUID(namespace), name)) # Function to update config def _update_config(configElement, defaultConfigElement): for key, value in defaultConfigElement.iteritems(): if key not in configElement: configElement[key] = copy.deepcopy(value) elif isinstance(configElement[key], dict) and \ isinstance(value, dict): _update_config(configElement[key], value) # Function to move individual user/group directory def _move_directory(nssServiceGUID, documentRoot, recordType, shortName): guid = uuidFromName(nssServiceGUID, "%s:%s" % (recordType, shortName)) olddir = os.path.join(documentRoot, "calendars", "__uids__", shortName) newdir = os.path.join(documentRoot, "calendars", "__uids__", guid) print "Moving directory for %s '%s' (GUID: %s) ..." % \ (recordType[:-1], shortName, guid) if (not os.path.isdir(olddir)): print "Old data directory '%s' does not exist. Nothing to move." % \ (olddir) return if (os.path.isdir(newdir)): print "New data directory '%s' already exists. Aborting move." % \ (newdir) return shutil.move(olddir, newdir) print "Data directory successfully moved from '%s' to '%s'." % \ (olddir, newdir) # Begin print ("Moving caldavd directories of NSS users and groups as the " "directory names in calendarserver 2.x are based on UUID " "rather than username/groupname as in calendarserver 1.x " "(See Debian Bug#610124 for more info) ...\n") # Check if config file exists. if not os.path.isfile(defaultConfigFile): print "Caldavd config file %s does not exist. Exiting." % \ (defaultConfigFile) return # Load configuration file configPlist = plistlib.readPlist(defaultConfigFile) # Update default configuration s = StringIO.StringIO() plistlib.writePlist(defaultConfig, s) defaultConfigPlist = plistlib.readPlistFromString(s.getvalue()) _update_config(configPlist, defaultConfigPlist) # If NSS is not the default directory service, exit if configPlist.DirectoryService.type != \ "twistedcaldav.directory.nss.NssDirectoryService": print "Directory service NssDirectoryService is not configured in " \ "%s. Exiting." % (defaultConfigFile) return # Update with service default params s = StringIO.StringIO() plistlib.writePlist( {"params": serviceDefaultParams[ "twistedcaldav.directory.nss.NssDirectoryService"]}, s ) nssServiceDefaultParamsPlist = plistlib.readPlistFromString(s.getvalue()) _update_config(configPlist.DirectoryService, nssServiceDefaultParamsPlist) # Generate serviceGUID nssServiceGUID = uuidFromName( nssServiceBaseGUID, configPlist.DirectoryService.params.realmName ) print "NSS Directory Service GUID - %s\n" % (nssServiceGUID) # Move users' data directories print "Moving data directories of users ..." users = pwd.getpwall() for user in users: if user[2] >= configPlist.DirectoryService.params.firstValidUid and \ user[2] <= configPlist.DirectoryService.params.lastValidUid: _move_directory( nssServiceGUID, configPlist.DocumentRoot, recordType_users, user[0] ) print # Move groups' data directories print "Moving data directories of groups ..." groups = grp.getgrall() for group in groups: if group[2] >= configPlist.DirectoryService.params.firstValidGid and \ group[2] <= configPlist.DirectoryService.params.lastValidGid and \ group[0].startswith(configPlist.DirectoryService.params.groupPrefix): _move_directory( nssServiceGUID, configPlist.DocumentRoot, recordType_groups, group[0].replace( configPlist.DirectoryService.params.groupPrefix,'',1 ) ) print if __name__ == "__main__": main() debian/rules0000755000000000000000000000036512012776211010251 0ustar #!/usr/bin/make -f # -*- makefile -*- # Uncomment this to turn on verbose mode. #export DH_VERBOSE=1 %: dh $@ --with python2 override_dh_installpam: dh_installpam --name=caldav override_dh_clean: dh_clean rm -f calendarserver/version.py debian/copyright0000644000000000000000000000177411764356201011137 0ustar Format: http://dep.debian.net/deps/dep5 Upstream-Name: calendarserver Source: http://www.calendarserver.org/ Files: * Copyright: 2005-2012 Apple Inc. License: Apache-2.0 Files: debian/* Copyright: 2006-2010 Guido Guenther 2010-2012 Rahul Amaram License: Apache-2.0 License: Apache-2.0 Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. . On Debian systems, the complete text of the Apache version 2.0 license can be found in "/usr/share/common-licenses/Apache-2.0". debian/calendarserver.TODO0000644000000000000000000000002311764356201012655 0ustar * fix apidoc build debian/changelog0000644000000000000000000003404112051442503011036 0ustar calendarserver (3.2+dfsg-5) unstable; urgency=low * Updated zoneinfo patch to tzdata 2012j -- Rahul Amaram Wed, 14 Nov 2012 16:03:02 +0530 calendarserver (3.2+dfsg-4) unstable; urgency=low * Added a new patch for updating zoneinfo to tzdata 2012f -- Rahul Amaram Wed, 03 Oct 2012 00:21:01 +0530 calendarserver (3.2+dfsg-3) unstable; urgency=low * Lowered Debian compat to 8 so that calendarserver could be unblocked -- Rahul Amaram Sat, 29 Sep 2012 20:02:32 +0530 calendarserver (3.2+dfsg-2) unstable; urgency=low * The second call to PyArg_ParseTuple in sendmsg.c passed an int* where a Py_ssize_t* should be passed. This has been fixed. (Closes: #678525) * Added option "EnableSSL" to conf/caldavd.plist. This has to be set to true for calendarserver to listen on SSL port. (Closes: #681170) * Changed source dependency from python-dev to python-all-dev as now a fix for building package for both python 2.6 and python 2.7 is provided. (Thanks to Fredrik Unger for providing the fix) (Closes: #684996) * Updated calendarserver.README.Debian * Bumped Debian compat to 9 -- Rahul Amaram Tue, 14 Aug 2012 22:08:02 +0530 calendarserver (3.2+dfsg-1) unstable; urgency=low * New upstream release * Moved from using cdbs to dh sequencer * Modified calenderserver init.d script based on /etc/init.d/skeleton script * Removed ldapdirectory.patch as the OpenLDAP directory service has been merged upstream * Moved package to section "net" as calendarserver is more service than library (Closes: #665859) * Changed Architecture of calendarserver package to any as the package now includes compiled architecture dependent Python extensions * Unowned files are no longer left on the system upon purging (Closes: #668731) -- Rahul Amaram Tue, 29 May 2012 18:12:12 +0530 calendarserver (2.4.dfsg-7.1) unstable; urgency=low * Non-maintainer upload. * Fixes init script start action fails if already running (Closes: #666737). -- Thomas Goirand Mon, 30 Apr 2012 02:43:40 +0000 calendarserver (2.4.dfsg-7) unstable; urgency=low * Recompile for python 2.7 support (Closes: Bug#646598) * Added init.d status support. Thanks to Peter Eisentraut for the patch (Closes: Bug#652832) * Supply hints for backup of calendar data in face of extended attributes. Thanks to Martin Stigge for providing this tip (Closes: Bug#653961) -- Rahul Amaram Wed, 14 Mar 2012 11:20:00 +0530 calendarserver (2.4.dfsg-6) unstable; urgency=low * Changed DataRoot from /var/run/caldavd/ to /var/lib/caldavd/ (Closes: Bug#611165) -- Rahul Amaram Mon, 31 Jan 2011 17:09:50 +0530 calendarserver (2.4.dfsg-5) unstable; urgency=high * Backing up configuration file in calendarserver.preinst was happening only during upgrade. This has been modified to happen during install as well where the configuration file had not been purged during the previous uninstallation. -- Rahul Amaram Wed, 19 Jan 2011 14:24:14 +0530 calendarserver (2.4.dfsg-4) unstable; urgency=high * Moved the code for upgrading data directories of NSS users and groups into a separate file and executing this file from postinst as it cannot be assumed that python would be configured when preinst is called (inspite of adding python to Pre-Depends) * Moved ${python:Depends} and python-plist from Pre-Depends to Depends -- Rahul Amaram Fri, 31 Dec 2010 14:58:23 +0530 calendarserver (2.4.dfsg-3) unstable; urgency=low * Added calendarserver.preinst script for moving data directories of NSS users and groups * Moved ${python:Depends} from Depends to Pre-Depends. Added python-plist to Pre-Depends. * Added python-ldap as recommended package (Closes: #600799) * Moved python-pydirector from suggested package to recommended package * Added information about disabling of group calendaring in calendarserver 2.x in NEWS (Closes: #600999) -- Rahul Amaram Fri, 17 Dec 2010 00:00:00 +0530 calendarserver (2.4.dfsg-2.1) unstable; urgency=high * Non-maintainer upload. * Do not set PYTHONPATH env var, not needed (Closes: #605166, #605157) * Prevent setup.py from automagically setting #PYTHONPATH in an insecure way -- Dmitrijs Ledkovs Fri, 03 Dec 2010 21:28:40 +0000 calendarserver (2.4.dfsg-2) unstable; urgency=low * Removed Uploaders field in debian/changelog * Changed build dependency python-dev to python * Updated standards version to 3.9.1 * $remote_fs dependency has been added in init.d * Added NSS directory service backend * Added sample configuration for LDAP directory backend * Added PAM configuration file -- Rahul Amaram Wed, 25 Aug 2010 15:23:37 +0530 calendarserver (2.4.dfsg-1) experimental; urgency=low * New upstream release (Closes: #579610) * add LDAP directory backend * remove NSS directory backend (will be added soon) * add patch for linux xattr fix. Related Calendarserver ticket: http://trac.calendarserver.org/ticket/337 -- Rahul Amaram Wed, 28 Jul 2010 13:57:56 +0530 calendarserver (1.2.dfsg-9) unstable; urgency=low [ Guido Günther ] * [e933bae] Orphan package * [aa801ee] use lower case http in the principals name since this is what iCal expects. clients don't break. (Closes: #514931) - thanks to Arthur P Prokosch for pointing this out and testing that other * [2de5e32] We need both principals in the servers's keytab. (Closes: #514931) [ Christoph Goehre ] * [080f99a] remove package depends 'python-xml' python-xml was merged into the python core package and removed from unstable on 16th August 2009 -- Guido Günther Sun, 16 May 2010 15:15:51 +0200 calendarserver (1.2.dfsg-8) unstable; urgency=low * [8b63fa5] fix basic auth via apache directoryService (Closes: #503727) - thanks to Thomas Viehmann for the patch * [a9f92f3] minor fix: tabs vs. spaces -- Guido Günther Thu, 06 Nov 2008 09:57:56 +0100 calendarserver (1.2.dfsg-7) experimental; urgency=low * [972f1c3] add more info about the name service switch backend and warn about ldap server search limits (Closes: #499963) * [45cc01f] add Ticket207-2.patch fixes "Events more than 356 days from creation are ignored" (Closes: #489188) - Patch by Peter Mogensen -- Guido Guenther Thu, 02 Oct 2008 13:18:01 +0200 calendarserver (1.2.dfsg-6) unstable; urgency=low * [cf51d29] allow dh_installinit to start/stop the daemon * [f2450f8] don't start calendarserver by default * [67f428c] don't fail when trying to stop a not running daemon * [b3386ab] bump standards version * [da9254c] add README.source -- Guido Guenther Fri, 08 Aug 2008 11:58:23 +0200 calendarserver (1.2.dfsg-5) unstable; urgency=low * [b52ad1f] remove dependency on python-plistlib, it's included in included in python2.5 and in Debian's python2.4 -- Guido Guenther Fri, 08 Aug 2008 10:36:43 +0200 calendarserver (1.2.dfsg-4) unstable; urgency=low * [41eff3c] nss backend: use shortname for groups and users. The groupPrefix makes sure these don't overlap. This way we don't have to use random uids for the calendars on disk which makes administration a lot easier. * [1d6701b] depend on python-openssl instead of the transitional package python-pyopenssl * [d90a173] refer to /usr/share/common-licenses/Apache-2.0 instead of shipping the whole license * [1937567] update upstream URL -- Guido Guenther Sun, 22 Jun 2008 21:05:39 +0200 calendarserver (1.2.dfsg-3) unstable; urgency=low [ Guido Guenther ] * upload to unstable - we no longer conflict on twisted * [31d2b55] drop dependency on ctypes - it's already included in python2.5 * [652da62] Mention XFS (Closes: #483987) - thanks to Peter Mann * [29edb85] add Homepage: * [0c5bcee] redirect stderr to /dev/null on daemon restart This is a temporary workaround until the twisted deprecation warnings got fixed. [ Noel Köthe ] * [1c03474] xs- prefix from Vcs fields -- Guido Guenther Thu, 19 Jun 2008 17:05:15 +0200 calendarserver (1.2.dfsg-2) experimental; urgency=low [ Guido Guenther ] * fix epydoc errors * use a python-twisted-calendarserver that doesn't ship the whole twisted [ Noel Köthe ] * bind the caldavd only to localhost as described in README.Debian -- Guido Guenther Mon, 05 May 2008 17:28:58 +0200 calendarserver (1.2.dfsg-1) unstable; urgency=low [ Guido Guenther ] * New upstream 1.2 * add NSS directory backend * bump python-twisted-calendarserver dependency to one that has the patches for 1.2 * README.Debian: use non SSL port [ Noel Köthe ] * README.Debian: * s/sudoers.xml/sudoers.plist/ * correcting path * update TODO -- Guido Guenther Sun, 27 Apr 2008 10:36:57 +0200 calendarserver (1.2.dfsg~dev020221-5) unstable; urgency=low * first upload to unstable * tighten dependencies and drop suggests superflous suggests * switch to Python 2.5 * README.Debian: add URI for group calendars -- Guido Guenther Sun, 20 Apr 2008 13:59:04 +0200 calendarserver (1.2.dfsg~dev020221-4) experimental; urgency=low * update README.Debian on SPNEGO/Kerberos * fix snakeoil certificate paths -- Guido Guenther Sun, 16 Mar 2008 12:48:34 +0100 calendarserver (1.2.dfsg~dev020221-3) experimental; urgency=low * repackage upstream branch and remove RFCs too make the document dfsg clean * add license of bin/xattr -- Guido Guenther Wed, 27 Feb 2008 10:31:48 +0100 calendarserver (1.2~dev020221-2) experimental; urgency=low * disable the api-doc generation until it works with newer epydoc -- Guido Guenther Tue, 26 Feb 2008 11:01:00 +0100 calendarserver (1.2~dev020221-1) experimental; urgency=low * first upload to experimental (Closes: #384644) * switch to upstreams 1.2 development branch * drop krb5 patch, applied upstream * refreh paths.diff * README.Debian: add calendar URI * depend on renamed python-twisted-calendarserver package -- Guido Guenther Thu, 21 Feb 2008 17:54:56 +0100 calendarserver (0.0.svn1755-1) experimental; urgency=low * UNRELEASED * New Upstream SVN Snapshot * update dependencies * drop opendirectory-dummy.patch, not needed anymore, can be disabled via the config file * drop caldavd-kerberos.patch, not needed anymore. Kerberos can be enabled via config file now * update paths.diff to new layout and config options * new fix-krb-service.diff: fix kerberos service names * calendarserver.init: daemon switches users itself, new commandline options * set process count to avoid pydirector for now -- Guido Guenther Thu, 09 Aug 2007 10:24:46 +0200 calendarserver (0.0.svn209-2) calendarserver; urgency=low * create /var/run/caldavd (needed inc ase /var/run is on a tmpfs) * drop dependencies on python-dateutil and python-zopeinterface since these are indirect dependencies of python-vobject and twisted-calendarserver respectively. * build the api documentation -- Guido Guenther Mon, 2 Oct 2006 11:03:27 +0200 calendarserver (0.0.svn209-1) calendarserver; urgency=low * New Upstream Version * depend on newer pykerberos * depend on newer twisted-calendarserver -- Guido Guenther Wed, 27 Sep 2006 12:34:28 +0200 calendarserver (0.0.svn197-1) calendarserver; urgency=low * New Upstream Version * depend on newer twisted * twiddle path patch to apply again -- Guido Guenther Tue, 26 Sep 2006 10:21:00 +0200 calendarserver (0.0.svn188-1) unstable; urgency=low * New upstream version 0.0.svn188 * bump dependencies on python-vobject * depend on python-xml * adjust patch path to look for twisted unter /usr/lib/caldavd since we ship our own twisted version in this subdir now. This way we don't have to conflict with the twisted shipped in Debian. * depend on twisted-calendarserver (which was formerly python-twisted-acl-branch) -- Guido Guenther Mon, 25 Sep 2006 18:33:19 +0200 calendarserver (0.0.svn142-3) unstable; urgency=low * add a sample diff for kerberos authentication -- Guido Guenther Tue, 19 Sep 2006 10:06:53 +0200 calendarserver (0.0.svn142-2) unstable; urgency=low * depend on python-plistlib -- Guido Guenther Mon, 18 Sep 2006 19:54:24 +0200 calendarserver (0.0.svn142-1) unstable; urgency=low * new SVN version (only patches merged into twisted) * depend on more recent twisted-acl-branch -- Guido Guenther Mon, 18 Sep 2006 17:06:15 +0200 calendarserver (0.0.svn135-2) unstable; urgency=low * really drop upstream-patches/ * fix restart target in init script, use LSB logging * add LSB header -- Guido Guenther Mon, 18 Sep 2006 16:00:45 +0200 calendarserver (0.0.svn135-1) unstable; urgency=low * New upstream svn version * no need to rename patches to upstream-patches, upstream changed that to lib-patches * depend on newer twisted-acl-branch and newer pykerberos * remove superflous heimdal-dev from build-depends * dropped patches (applied upstream): * bashism * move-patch-dir * linux-xattr * use snake-oil certificates for SSL -- Guido Guenther Fri, 15 Sep 2006 18:38:10 +0200 calendarserver (0.0.svn62-1) unstable; urgency=low * Initial release * Add dummies for OpenDirectory interaction from: http://svn.macosforge.org/projects/calendarserver/browser/PyOpenDirectory until we have a proper port -- Guido Guenther Wed, 6 Sep 2006 13:45:40 +0200 debian/calendarserver.dirs0000644000000000000000000000006211764356201013054 0ustar var/lib/caldavd var/spool/caldavd var/log/caldavd debian/calendarserver.NEWS0000644000000000000000000000043411764356201012672 0ustar calendarserver (2.4.dfsg-3) unstable; urgency=low Group calendaring has been disabled in calendarserver 2.x. For more information on this, see http://trac.calendarserver.org/ticket/330. -- Rahul Amaram Fri, 17 Dec 2010 00:00:00 +0530 debian/calendarserver.caldav.pam0000644000000000000000000000012111764356155014125 0ustar #%PAM-1.0 @include common-auth @include common-account @include common-session debian/calendarserver.README.Debian0000644000000000000000000001547212012776211014236 0ustar Calendar and Contacts Server for Debian ======================================= Database Setup ============== Calendar and Contacts Server can currently use either files or postgresql for storing users' calendars and addressbooks. Files ----- Since calendarserver uses extended attributes you must mount the filesystem that contains the calendars and addressbooks (/var/spool/caldavd by default) with extended attributes enabled. On ext2/ext3 filesystems use the user_xattr mount option, XFS has extended attributes enabled by default. To use files for storage, you have to ensure that UseDatabase is set to false in /etc/caldavd/caldavd.plist as below (this is also the default setting with which caldavd.plist is installed): UseDatabase While backing up the calendars and addressbooks when using files for stroage, it should be kept in mind that calendarserver uses extended attributes for the document root. Therefore the user should use a program that supports backing up extened attributes as well. "bsdtar" supports archiving extended attributes (default behaviour if bsdtar is run as root). If you are using rsync to copy the calendars, you will have to explicity pass the "-X" option to rsync (even if you are transferring in archive mode using --archive/-a). PostgreSQL ---------- You will have to first create a caldav user and database before configuring calendarserver. # su - postgres # createuser caldav --pwprompt --no-createdb --no-createrole --no-superuser Enter password for new role: Enter it again: # createdb --owner=caldav caldav Now, import the calendarserver schema. # psql -f /usr/share/pyshared/txdav/common/datastore/sql_schema/current.sql caldav Configure postgres details in caldavd.plist as below (ensure that you comment out UseDatabase option): DBType postgres DSN 127.0.0.1:caldav:caldav:password:: where password is the password that you have set for postgres caldav user above. Basic Setup =========== You have to add a /etc/caldavd/accounts.xml to tell caldavd about your accounts and users. See /usr/share/doc/calendarserver/examples/accounts.xml for an example. Likewise you have to add a /etc/caldavd/sudoers.plist. Both files have to be present, otherwise the calendarserver will not work. The URI to your CalDAV calendar will typically look like: http://:8008/calendars/users//calendar/ where is the hostname or the IP of the server on which calendarserver is installed and is the username of a calendarserver user as specified in accounts.xml. Similarly, the URI to your CardDAV addressbook will look like: http://:8008/addressbooks/users//addressbook/ Loadbalancing ============= In order to enable laod balancing onto different processors/cores you need to set the ProcessCount in /etc/caldavd/caldavd.plist accordingly. Enabling SPNEGO/Kerberos ======================== To make SPNEGO/Kerberos authentication work you have to add service principals for HTTP/caldavd.example.com@EXAMPLE.COM and http/caldavd.example.com@EXAMPLE.COM to your servers keytab /etc/krb5.keytab (replace caldavd.example.com by the fqdn of your caldav server and EXAMPLE.COM by your Kerberos realm). The uppercase http variant is used by most clients like iceowl and icedove with iceowl-extension while the lowercase version is used by iCal. The keytab must be readable for user caldavd which can be achieved by: chgrp caldavd /etc/krb5.keytab chmod 0640 /etc/krb5.keytab Now you have to specify the name of a ServicePrincipal in /etc/caldavd/caldavd.plist: Kerberos Enabled ServicePrincipal http/caldavd.example.com@EXAMPLE.COM Note: if you use iceowl/iceowl-extension the network.negotiate-auth.trusted-uris in iceowl/icedove must match on your calendarservers uri otherwise SPNEGO will not work. A good choice is "https://". Nameservice Switch Backend ========================== If you don't want to manage accounts in a separate XML file you can use the names service switch backend. Details on how to set this up can be found at: http://honk.sigxcpu.org/con/Apple_Calendarser_with_Name_Service_Switch_directory_backend.html Note that in order to function properly "getent passwd" must list all users that should be able to access the calendarserver. This might not be the case if you hit the search limit of your LDAP server. Also note that the username and groupname (without the prefix) shouldn't be the same else calendarserver might get confused. PAM authentication is supported (python-pam needs to be installed). The pam service name is "caldav". Basic Authentication should be enabled and Digest Authentication should be disabled for PAM authentication to work. It is suggested to use PAM authentication in conjunction with SSL (https) so that the password is not sent in plain text. For PAM authentication against local unix passwords, the user "caldavd" should be added to the "shadow" group. -- Guido Guenther Thu, 30 Apr 2008 16:17:56 +0100 LDAP Directory Backend ====================== LDAP Directory service has been merged upstream in calendarserver 3.0 (python-ldap package has to be installed for using this directory service). Information on configurating LDAP can be found at: http://trac.calendarserver.org/wiki/ConfiguringLDAP Possible authentication methods are "LDAP" (default) and "PAM" (python-pam needs to be installed). The pam service name is "caldav". For PAM/LDAP authentication, Basic Authentication should be enabled and Digest Authentication should be disabled (as shown below). It is suggested to use PAM/LDAP authentication in conjunction with SSL (https) so that the password is not sent in plain text. For PAM authentication against local unix passwords, the user "caldavd" should be added to the "shadow" group. Basic Enabled Digest Enabled Algorithm md5 Qop For LDAP anonymous binding, the dn and password entries should be present in the configuration file but their values should be empty. -- Rahul Amaram Tue, 24 Aug 2010 22:05:00 +0530 FAQ === Calendar and Contacts Server FAQ is maintained at: http://trac.calendarserver.org/wiki/FAQ debian/calendarserver.docs0000644000000000000000000000000711764356155013052 0ustar README debian/watch0000644000000000000000000000006711764356201010227 0ustar # Compulsory line, this is a version 3 file version=3 debian/calendarserver.init0000644000000000000000000001012611764356201013060 0ustar #!/bin/sh ### BEGIN INIT INFO # Provides: calendarserver # Required-Start: $network $remote_fs # Required-Stop: $network $remote_fs # Default-Start: 2 3 4 5 # Default-Stop: 0 1 6 # Short-Description: Calendar and Contacts Server # Description: The open source Calendar and Contacts Server project # is a standards-compliant server implementing the # CalDAV and CardDAV protocols ### END INIT INFO # Author: Rahul Amaram # Do NOT "set -e" # PATH should only include /usr/* if it runs after the mountnfs.sh script PATH=/sbin:/usr/sbin:/bin:/usr/bin DESC=calendarserver NAME=caldavd DAEMON=/usr/bin/caldavd RUNDIR=/var/run/caldavd PIDFILE=$RUNDIR/$NAME.pid SCRIPTNAME=/etc/init.d/calendarserver USER=caldavd GROUP=caldavd # Exit if the package is not installed [ -x "$DAEMON" ] || exit 0 # Read configuration variable file if it is present [ -r /etc/default/calendarserver ] && . /etc/default/calendarserver # Load the VERBOSE setting and other rcS variables . /lib/init/vars.sh # Define LSB log_* functions. # Depend on lsb-base (>= 3.2-14) to ensure that this file is present # and status_of_proc is working. . /lib/lsb/init-functions # # Function that checks whether to start the daemon or not # do_checkstart() { if [ ! "$start_calendarserver" = "yes" ]; then log_warning_msg "Not starting calendarserver, disabled via /etc/default/calendarserver" exit 0 fi } # # Function that starts the daemon/service # do_start() { # Return # 0 if daemon has been started # 1 if daemon was already running # 2 if daemon could not be started start-stop-daemon --start --quiet --pidfile $PIDFILE --startas $DAEMON --test > /dev/null \ || return 1 mkdir -p $RUNDIR chown $USER:$GROUP $RUNDIR start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \ $DAEMON_OPTS \ || return 2 } # # Function that stops the daemon/service # do_stop() { # Return # 0 if daemon has been stopped # 1 if daemon was already stopped # 2 if daemon could not be stopped # other if a failure occurred start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE \ --exec /usr/bin/python RETVAL="$?" [ "$RETVAL" = 2 ] && return 2 # Many daemons don't delete their pidfiles when they exit. rm -f $PIDFILE return "$RETVAL" } case "$1" in start) do_checkstart [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC " "$NAME" do_start case "$?" in 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;; 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;; esac ;; stop) [ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME" do_stop case "$?" in 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;; 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;; esac ;; status) status_of_proc -p $PIDFILE "$DAEMON" "$NAME" && exit 0 || exit $? ;; #reload|force-reload) # # If do_reload() is not implemented then leave this commented out # and leave 'force-reload' as an alias for 'restart'. # #log_daemon_msg "Reloading $DESC" "$NAME" #do_reload #log_end_msg $? #;; restart|force-reload) # # If the "reload" option is implemented then remove the # 'force-reload' alias # do_checkstart log_daemon_msg "Restarting $DESC" "$NAME" do_stop case "$?" in 0|1) do_start case "$?" in 0) log_end_msg 0 ;; 1) log_end_msg 1 ;; # Old process is still running *) log_end_msg 1 ;; # Failed to start esac ;; *) # Failed to stop log_end_msg 1 ;; esac ;; *) echo "Usage: $SCRIPTNAME {start|stop|status|restart|force-reload}" >&2 exit 3 ;; esac : debian/control0000644000000000000000000000246112012776211010573 0ustar Source: calendarserver Section: net Priority: optional Maintainer: Rahul Amaram Build-Depends: debhelper (>= 9), python-all-dev (>= 2.6.6-3~) Standards-Version: 3.9.3 Homepage: http://www.calendarserver.org/ Vcs-Svn: http://svn.calendarserver.org/repository/calendarserver/CalendarServer/ Vcs-Browser: http://trac.calendarserver.org/browser/CalendarServer X-Python-Version: >= 2.6 Package: calendarserver Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends}, ${python:Depends}, memcached, python-zope.interface, python-openssl (>= 0.9), python-kerberos (>= 1.1+svn4241), python-xattr (>= 0.5), python-pysqlite2, python-pygresql (>= 4.0), python-dateutil, python-pycalendar, python-sqlparse (>= 0.1.2), python-twisted-core (>= 11.0.0), python-twisted-conch (>= 11.0.0), python-twisted-mail (>= 11.0.0), python-twisted-web (>= 11.0.0), python-twisted-words (>= 11.0.0), python-plist, ssl-cert, adduser, lsb-base Recommends: python-pam, python-ldap (>= 2.3.13) Description: Apple's Calendar and Contacts Server The open source Calendar and Contacts Server project is a standards-compliant server implementing the CalDAV and CardDAV protocols. It provides a shared location on the network allowing multiple users to store and edit calendaring and contact information. debian/calendarserver.postinst0000644000000000000000000000531611764356201014005 0ustar #!/bin/sh # postinst script for calendarserver # # see: dh_installdeb(1) set -e # summary of how this script can be called: # * `configure' # * `abort-upgrade' # * `abort-remove' `in-favour' # # * `abort-remove' # * `abort-deconfigure' `in-favour' # `removing' # # for details, see http://www.debian.org/doc/debian-policy/ or # the debian-policy package case "$1" in configure) if ! getent passwd caldavd >/dev/null 2>&1; then adduser --system --home /var/spool/caldavd --no-create-home \ --gecos "calendarserver daemon" --group --disabled-password \ caldavd fi adduser caldavd ssl-cert for dir in /var/lib/caldavd /var/spool/caldavd /var/log/caldavd; do if [ -d $dir ]; then if ! dpkg-statoverride --list $dir >/dev/null 2>&1; then chown caldavd: $dir fi fi done for x in calendaruserproxy.sqlite resourceinfo.sqlite mailgatewaytokens.sqlite tasks; do if [ -e /var/run/caldavd/$x ]; then echo -n "Moving /var/run/caldavd/$x to /var/lib/caldavd/$x (See Debian Bug#611165 for more info) ... " if [ ! -e /var/lib/caldavd/$x ]; then mv /var/run/caldavd/$x /var/lib/caldavd/$x echo "Done." else echo "Aborted as /var/lib/caldavd/$x already exists." fi fi done for file in calendaruserproxy.sqlite resourceinfo.sqlite mailgatewaytokens.sqlite; do if [ -f /var/lib/caldavd/$file ]; then if ! dpkg-statoverride --list /var/lib/caldavd/$file >/dev/null 2>&1; then chown caldavd: /var/lib/caldavd/$file chmod 640 /var/lib/caldavd/$file fi fi done # Upgrade NSS users and groups data directories (See Debian Bug#610124) if [ -f /etc/caldavd/caldavd.plist.upgrade.nss.tmp ]; then python /usr/share/doc/calendarserver/scripts/upgrade-nss-data-directories.py rm -f /etc/caldavd/caldavd.plist.upgrade.nss.tmp fi ;; abort-upgrade|abort-remove|abort-deconfigure) ;; *) echo "postinst called with unknown argument \`$1'" >&2 exit 1 ;; esac # dh_installdeb will replace this with shell code automatically # generated by other debhelper scripts. #DEBHELPER# exit 0 debian/calendarserver.default0000644000000000000000000000037011764356155013551 0ustar # Defaults for calendarserver initscript (/etc/init.d/calendarserver) # This is a POSIX shell fragment # uncomment to start calendarserver on system startup #start_calendarserver=yes # options to pass to calendarserver on startup #DAEMON_OPTS="" debian/calendarserver.install0000644000000000000000000000011411764356201013557 0ustar debian/upgrade-nss-data-directories.py usr/share/doc/calendarserver/scripts debian/calendarserver.manpages0000644000000000000000000000057511764356201013717 0ustar doc/calendarserver_command_gateway.8 doc/calendarserver_monitor_notifications.8 doc/calendarserver_purge_events.8 doc/carddavd.8 doc/calendarserver_export.8 doc/calendarserver_migrate_resources.8 doc/calendarserver_purge_principals.8 doc/calendarserver_manage_principals.8 doc/calendarserver_bootstrap_database.8 doc/calendarserver_purge_attachments.8 doc/caldavd.8 doc/caladmin.8 debian/calendarserver.preinst0000644000000000000000000000207311764356201013603 0ustar #!/bin/sh # preinst script for calendarserver # # see: dh_installdeb(1) set -e # summary of how this script can be called: # * `install' # * `install' # * `upgrade' # * `abort-upgrade' # for details, see http://www.debian.org/doc/debian-policy/ or # the debian-policy package case "$1" in install|upgrade) # Backup configuration file for upgrading NSS users and groups data directories in postinst if [ "`echo $2 | cut -d - -f 1`" = "1.2.dfsg" ]; then if [ -f /etc/caldavd/caldavd.plist -a ! -e /etc/caldavd/caldavd.plist.upgrade.nss.tmp ]; then cp -a /etc/caldavd/caldavd.plist /etc/caldavd/caldavd.plist.upgrade.nss.tmp fi fi ;; abort-upgrade) ;; *) echo "preinst called with unknown argument \`$1'" >&2 exit 1 ;; esac # dh_installdeb will replace this with shell code automatically # generated by other debhelper scripts. #DEBHELPER# exit 0 debian/source/0000755000000000000000000000000011764356201010473 5ustar debian/source/format0000644000000000000000000000001411764356201011701 0ustar 3.0 (quilt)