Package: desktopcouch Version: 0.6.6-1 Severity: normal First, note that CouchDB seems to only support the "Basic" HTTP authentication method:
$ FUTON_URL="http://username:passw...@localhost:`/usr/lib/desktopcouch/desktopcouch-get-port`/util/"; $ curl --digest "$FUTON_URL" {"error":"unauthorized","reason":"Authentication required."} $ curl --ntlm "$FUTON_URL" {"error":"unauthorized","reason":"Authentication required."} $ curl --negotiate "$FUTON_URL" {"error":"unauthorized","reason":"Authentication required."} $ curl --basic "$FUTON_URL" <!DOCTYPE html> [...] Then see that there's no WWW-Authenticate header telling which authentication method to use: $ wget -S "http://localhost:`/usr/lib/desktopcouch/desktopcouch-get-port`/util/"; -O - --2010-10-14 04:01:37-- http://localhost:42837/util/ Resolving localhost... ::1, 127.0.0.1 Connecting to localhost|::1|:42837... failed: Connection refused. Connecting to localhost|127.0.0.1|:42837... connected. HTTP request sent, awaiting response... HTTP/1.0 401 Unauthorized Server: CouchDB/0.11.0 (Erlang OTP/R14B) Date: Thu, 14 Oct 2010 08:01:37 GMT Content-Type: text/plain;charset=utf-8 Content-Length: 61 Connection: Keep-Alive Cache-Control: must-revalidate Authorization failed. zsh: exit 6 wget -S "http://localhost:`/usr/lib/desktopcouch/desktopcouch-get-port`/util/ Here's what it looks like in a few clients: Chromium: warning message about possible trickery, then "unauthorized" IceWeasel: warning message about no authorization requested by server, then "unauthorized" curl: fails unless you pass --basic wget: fails unless you pass --auth-no-challenge Midory: fails because it only tries ipv6. But if you use 127.0.0.1 instead of localhost, it says "unauthorized". I'm pretty sure all it would take to fix this is to get desktopcouch to send the WWW-Authentication: Basic [...] header Thank you all, - Jason -- System Information: Debian Release: squeeze/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages desktopcouch depends on: ii couchdb 0.11.0-2.1 RESTful document oriented database ii python 2.6.6-3 interactive high-level object-orie ii python-avahi 0.6.27-2 Python utility package for Avahi ii python-couchdb 0.6-1 library for working with Apache Co ii python-dbus 0.83.1-1 simple interprocess messaging syst ii python-gnomekeyring 2.30.0-3 Python bindings for the GNOME keyr ii python-gobject 2.21.4+is.2.21.3-1 Python bindings for the GObject li ii python-gtk2 2.17.0-4 Python bindings for the GTK+ widge ii python-oauth 1.0.1-2 Python library implementing of the ii python-simplejson 2.1.1-1 simple, fast, extensible JSON enco ii python-support 1.0.10 automated rebuilding support for P ii python-twisted-core 10.1.0-3 Event-based framework for internet ii python-xdg 0.19-2 Python library to access freedeskt desktopcouch recommends no packages. desktopcouch suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
