wilde: doc/raw-howtos anonymous-ics-export.txt,NONE,1.1

[cvs at kolab.org]

Author: wilde

Update of /kolabrepository/doc/raw-howtos
In directory doto:/tmp/cvs-serv32143

Added Files:
	anonymous-ics-export.txt 
Log Message:
Minimal documentation for the new anonymous ICS export.


--- NEW FILE: anonymous-ics-export.txt ---
------------------------------------------------------------------------
                      The anonymous ICS Calendar
------------------------------------------------------------------------
Sascha Wilde <wilde at intevation.de>


Since 2009/10/12 the CVS kolab_2_2_branch contains a new feature,
allowing the anonymous (read: no authentication required) export of
dedicated calendars as ics files.


Concept:

A dedicated "proxy" user is created and the id and password of this
user is made known to certain parts of the webclient.

The proxy user is granted read access to one or more calendar by
regular Kolab users.

An ics file with the exported events from one of the calendars
accessible for the proxy user can be downloaded anonymously from the
kolab server.


Usage:

1. Create an new user account e.g. "proxy at example.com" with password
   "secret".

2. In /kolab/etc/kolab/templates/webclient-kolab-conf.template the
   lines
     $conf['ics']['default_user'] = 'proxy@@@@postfix-mydomain@@@';
     $conf['ics']['default_pass'] = 'proxy';
   must be uncommented and filled with the correct credentials a
   chosen in 1.

3. Grant list/read access for some calendar folders to the user
   "proxy at example.com".  For example the user foo at example.com gives
   the proxy user access to his default calendar "Calendar"

4. Now anyone can retrieve the events from the users foo at example.com's
   calendar by downloading:
     http://kolab.example.com/public-cal/ics?c=user/foo/Calendar
   the url follows the pattern:
     http://KOLABSERVER/public-cal/ics?c=user/USERNAME/CALENDARNAME


Security considerations:

One should note, that the data from calendars shared to the proxy user
is freely, world wide readable unless the access to the Kolab
Webclient server is restricted by other means.