========================== Calypso - CalDAV Server

The Calypso Project is a free and open-source CalDAV calendar server.

Initial setup

Calypso runs as a regular user, all data are stored in ~/.config/calypso. Either generate SSL keys, or use the default self-signed keys, then:

$ mkdir -p ~/.config/calypso/calendars $ chmod og-rwx ~/.config/calypso $ touch ~/.config/calypso/htpasswd $ cat > ~/.config/calypso/config << EOF [server] certificate=/etc/ssl/certs/ssl-cert-snakeoil.pem key=/etc/ssl/private/ssl-cert-snakeoil.pem

[acl] type=htpasswd encryption=bcrypt filename=$HOME/.config/calypso/htpasswd EOF

Running calypso

Then run calypso:

$ python ./calypso.py

To capture logs, you can run in the foreground with debugging:

$ python ./calypso.py -fg >calypso.log 2>&1

Creating users and calendars

To add a new user:

$ htpasswd -B $HOME/.config/calypso/htpasswd USER

To add a new database:

$ mkdir -p ~/.config/calypso/calendars/private/test $ cd ~/.config/calypso/calendars/private/test $ git init $ cat > .calypso-collection << EOF [collection] is-calendar = 1 EOF $ git add .calypso-collection $ git commit -m'initialize new calendar'

The new calendar should now be visible as https://USER:PASSWORD@localhost:5233/private/test.

You can add files to the directory at any time; calypso will check the directory mtime at each operation and update its internal state from that on disk automatically when the directory changes.

Importing files

Given a set of files with VCALENDAR or VCARD entries, you can import them with:

$ calypso --import private/test <filenames...>

This will update any changed entries and add any new ones.

Kerberos via GSSAPI support

For Kerberos authentication generate a keytab on your KDC and put the exported keytab on your calypso server into /etc/krb.keytab so it looks like:

ktutil -k /etc/krb5.keytab list

/etc/krb5.keytab:

Vno Type Principal Aliases 1 aes256-cts-hmac-sha1-96 HTTP/foo.example.com@EXAMPLE.COM 1 des3-cbc-sha1 HTTP/foo.example.com@EXAMPLE.COM 1 arcfour-hmac-md5 HTTP/foo.example.com@EXAMPLE.COM

the put the service name to use into ~/.config/calypso/config:

[server] servicename=HTTP@foo.example.com

and install the pykerberos module. You should then be able to authenticate via Kerberos using GSSAPI.