Hello,

I am experiencing strange auth retry behaviour with Nokia Ovi service:

It used md5 authentication and *not* sent back the next nouce once
authentication accpeted; thus, client has to retry at least one
time for each new session. However the real testing shows we have to retry at
least 3 times by default.

Request 0 with a wrong nounce  -- rejected with 407 and a new nounce
Retry 1 with the returned nouce from a new session -- same as above
Retry 2 same as above
Retry 3 reusing the last session (smart retry) -- accepted wit no nouce returned

It first looks to me Ovi does not accept out-of session retries, so I tries 
with 
newsessionforretry=false, it then failed at all:

Retry 1 reusing last session -- rejected with 401
Retry 2 reusing last session -- rejected with 401
Retry 3 (smart retry) with a new session -- rejected with 407
...
Aborts unitl retry limit reached.

It seems that Ovi requires at least a first new session retry and a following
in-session retry to work, with our default behaviour it happens to work with 3
retries.

Is this the best we can do?
-- 
Regards,

Chen Congwu
Moblin China Development


_______________________________________________
os-libsynthesis mailing list
[email protected]
http://lists.synthesis.ch/mailman/listinfo/os-libsynthesis

Reply via email to