Re: [CalendarServer-users] Digest authentication
Hello Cyrus, It seems to be.... <!-- Digest challenge/response --> <key>Digest</key> <dict> <key>Enabled</key> <true/> <key>Algorithm</key> <string>md5</string> <key>Qop</key> <string></string> </dict> Best regards, Kervin ----- Original Message ----
From: Cyrus Daboo <cdaboo@apple.com> To: Kervin L. Pierre <kervin@adevsoft.com>; calendarserver-users@lists.macosforge.org Sent: Monday, March 31, 2008 11:47:01 AM Subject: Re: [CalendarServer-users] Digest authentication
Hi Kervin,
--On March 30, 2008 12:19:43 PM -0700 "Kervin L. Pierre" wrote:
I'm working on getting my application's digest authentication to work with calendar server. I noticed that Evolution users had, at least at one point, the same issue we're facing... https://bugs.launchpad.net/ubuntu/+source/evolution/+bug/160190
Does Evolution currently work with calendar server + digest authentication?
Specifically the error is raised in 'digest.py'. Calendar server complains that the nonce count value is more than it expected...
2008-03-30 10:46:31-0700 [-] [caldav-8008] [HTTPChannel,1,208.54.95.252] PROPFI ND /calendars/users/kervin/calendar/ HTTP/1.1 2008-03-30 10:46:31-0700 [-] [caldav-8008] [HTTPChannel,1,208.54.95.252] 'Authe ntication failed: nonce-count value out of sequence: 2 should be one more than 0 ' Can anyone shed some light on this?
Make sure the value is empty for the "Qop" item in the digest auth section of the caldavd.plist file you are using. That will disable the client-nonce value checks.
-- Cyrus Daboo
Hi Kervin, --On March 31, 2008 9:01:49 AM -0700 "Kervin L. Pierre" <kervin@adevsoft.com> wrote:
Hello Cyrus,
It seems to be....
<!-- Digest challenge/response --> <key>Digest</key> <dict> <key>Enabled</key> <true/> <key>Algorithm</key> <string>md5</string> <key>Qop</key> <string></string> </dict>
Ok, then the server should be sending you a WWW-Authenticate headed for Digest that does NOT contains a "qop=..." option in it. Can you check what you are sending back to the server? The client should NOT be sending back a "qop=..." if the server did not send one. -- Cyrus Daboo
participants (2)
-
Cyrus Daboo
-
Kervin L. Pierre