Package: tangerine
Version: 0.3.4-3

Hi again,

this is probably a bug in amarok...

amarok doesn't send a session id for the sound files (and doesn't
support login with password ofc); so as a workaround one can allow
requests without session id if there is no session limit and no
authentication required.

--- a/daap-sharp/src/Server.cs
+++ b/daap-sharp/src/Server.cs
@@ -667,8 +667,10 @@
 
             if (!sessions.ContainsKey (session) && path != "/server-info" && path != "/content-codes" &&
                 path != "/login") {
-                ws.WriteResponse (client, HttpStatusCode.Forbidden, "invalid session id");
-                return true;
+                if (serverInfo.AuthenticationMethod != AuthenticationMethod.None || maxUsers > 0) {
+                    ws.WriteResponse (client, HttpStatusCode.Forbidden, "invalid session id");
+                    return true;
+                }
             }
 
             if (session != 0) {

Reply via email to