On 2002-Apr-04 at 02:24:41 -0800, Bardur Arantsson wrote:

> I have put together a patch for supporting "Basic" HTTP Proxy 
> Authentication. The patch changes the interpretatio of the RSYNC_PROXY
> environment variable so that the syntax
>
> user:[EMAIL PROTECTED]:port
> 
> may be used instead of just
> 
> proxy.foo:port
>
> (the old syntax is of course still supported).

There is a problem with the way this syntax is being handled by the
patch. It's because of the way it detects the "@" that separates
user:pass and host:port. It fails because the username and/or password
could have[0] an "@" in them.

This is basically a problem if some user whould like to use (e.g.)
radius realms[2], in order that the username becomes something like
[EMAIL PROTECTED]

> The patch has only been tested lightly, but it should(TM) 
> work.

Yeah. Actually the guys from Gentoo are including this patch in the
rsync 2.5.6 package.

(Note: Please CC to me, as I'm not subscribed to the list)

[0] RFC 2617 (HTTP Autentication) defines the userid field as TEXT[1]
excluding ":".
[1] RFC 2616 (HTTP) defines TEXT as any OCTECT (any 8-bit sequence of
data) except CLTs, but including LWS.
[2] RFC 2138 (Radius) defines a field as "[EMAIL PROTECTED]"
-- 
Alvaro Figueroa

-- 
To unsubscribe or change options: http://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html

Reply via email to