[Akonadi] [Bug 344874] username/password not being sent in header

[Thaodan]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #19 from Thaodan  ---
Is there a way to always send auth headers?

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Akonadi] [Bug 344874] username/password not being sent in header

[Lukasz]

https://bugs.kde.org/show_bug.cgi?id=344874

Lukasz  changed:

   What|Removed |Added

 CC|dolo...@outlook.com |

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Akonadi] [Bug 344874] username/password not being sent in header

[Thaodan]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #18 from Thaodan  ---
I tried the demo instance and this one works.
But still some requests  are send without login parameters and return 401 (as
expected).

Should I set nextcloud to ignore unauthiated requests or something?

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Akonadi] [Bug 344874] username/password not being sent in header

[Christophe Giboudeaux]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #17 from Christophe Giboudeaux  ---
also no issue on demo.nextcloud.com, I see the test event I just created on the
recent activities tab

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Akonadi] [Bug 344874] username/password not being sent in header

[Christophe Giboudeaux]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #16 from Christophe Giboudeaux  ---
> I'm having the same issue with my nextcloud server.

I tried adding a dav resource pointing to demo.owncloud.com a couple days ago
without seeing any issue. I could create an event and a contact without
anything complaining.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Akonadi] [Bug 344874] username/password not being sent in header

[Thaodan]

https://bugs.kde.org/show_bug.cgi?id=344874

Thaodan  changed:

   What|Removed |Added

 CC||theodorstormgr...@gmail.com

--- Comment #15 from Thaodan  ---
Are there any updates on this?
I'm having the same issue with my nextcloud server.
Accessing the ressource via dolphin works.
The caldav ressource works but not the carddav ressulting in the error below:

 {webdav} {"Exception":"Sabre\\DAV\\Exception\\NotAuthenticated","Message":"No
public access to this resource., No 'Authorization: Basic' header found. Either
the client didn't send one, or the server is misconfigured, No 'Authorization:
Bearer' header found. Either the client didn't send one, or the server is
mis-configured, No 'Authorization: Basic' header found. Either the client
didn't send one, or the server is
misconfigured","Code":0,"Trace":[{"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->","args":[{"absoluteUrl":"https:\/\/cloud.thaodan.de\/remote.php\/dav\/addressbooks\/users\/9\/kontakte\/","__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"\/usr\/share\/webapps\/nextcloud\/3rdparty\/sabre\/event\/lib\/EventEmitterTrait.php","line":105,"function":"call_user_func_array","args":[[{"autoRequireLogin":true,"__class__":"Sabre\\DAV\\Auth\\Plugin"},"beforeMethod"],[{"absoluteUrl":"https:\/\/cloud.thaodan.de\/remote.php\/dav\/addressbooks\/users\/9\/kontakte\/","__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]]},{"file":"\/usr\/share\/webapps\/nextcloud\/3rdparty\/sabre\/dav\/lib\/DAV\/Server.php","line":466,"function":"emit","class":"Sabre\\Event\\EventEmitter","type":"->","args":["beforeMethod",[{"absoluteUrl":"https:\/\/cloud.thaodan.de\/remote.php\/dav\/addressbooks\/users\/9\/kontakte\/","__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]]},{"file":"\/usr\/share\/webapps\/nextcloud\/3rdparty\/sabre\/dav\/lib\/DAV\/Server.php","line":254,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->","args":[{"absoluteUrl":"https:\/\/cloud.thaodan.de\/remote.php\/dav\/addressbooks\/users\/9\/kontakte\/","__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"\/usr\/share\/webapps\/nextcloud\/apps\/dav\/lib\/Server.php","line":316,"function":"exec","class":"Sabre\\DAV\\Server","type":"->","args":[]},{"file":"\/usr\/share\/webapps\/nextcloud\/apps\/dav\/appinfo\/v2\/remote.php","line":35,"function":"exec","class":"OCA\\DAV\\Server","type":"->","args":[]},{"file":"\/usr\/share\/webapps\/nextcloud\/remote.php","line":163,"args":["\/usr\/share\/webapps\/nextcloud\/apps\/dav\/appinfo\/v2\/remote.php"],"function":"require_once"}],"File":"\/usr\/share\/webapps\/nextcloud\/3rdparty\/sabre\/dav\/lib\/DAV\/Auth\/Plugin.php","Line":168,"CustomMessage":"--"}

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Akonadi] [Bug 344874] username/password not being sent in header

[Arthur Schiwon]

https://bugs.kde.org/show_bug.cgi?id=344874

Arthur Schiwon  changed:

   What|Removed |Added

 CC||bli...@arthur-schiwon.de

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Akonadi] [Bug 344874] username/password not being sent in header

[Richard Bos]

https://bugs.kde.org/show_bug.cgi?id=344874

Richard Bos  changed:

   What|Removed |Added

 CC||richard@xs4all.nl

--- Comment #14 from Richard Bos  ---
Is this big https://github.com/nextcloud/server/issues/5326 related?

I opened the bug report at nextcloud, but they refer to KDE.

The message I get in logfiles is:
  No 'Authorization: Basic' header found. Either the client didn't send one, or
the server is misconfigured in logfile

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Akonadi] [Bug 344874] username/password not being sent in header

[Lukasz via KDE Bugzilla]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #13 from Lukasz  ---
Created attachment 98278
  --> https://bugs.kde.org/attachment.cgi?id=98278=edit
journal log

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[Lukasz via KDE Bugzilla]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #12 from Lukasz  ---
Created attachment 98277
  --> https://bugs.kde.org/attachment.cgi?id=98277=edit
nginx access.log

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[Lukasz via KDE Bugzilla]

https://bugs.kde.org/show_bug.cgi?id=344874

Lukasz  changed:

   What|Removed |Added

 CC||dolo...@outlook.com

--- Comment #11 from Lukasz  ---
I have exactly the same issue using nginx, but I recall it used to work few
months ago. And it works with my Android phone with DAVdroid.

I am running Akonadi 15.12.3 on Arch Linux.

I enclose log from nginx and journal.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[Grégory Oestreicher via KDE Bugzilla]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #10 from Grégory Oestreicher  ---
Good news I guess :) Do you have the link to the thread that mention this
problem?

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[Olaf Titz via KDE Bugzilla]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #9 from Olaf Titz  ---
There is a recurring issue in support fora related to owncloud and iOS/Android
CalDAV sync apps. I still don't understand it completely, but it seems to be
related to two or three potential reasons. All of them have to do with the fact
that PROPFIND is treated differently from GET (at least by Apache).
1. Sure: a number of misconfigurations of Apache can cause Apache and/or
Owncloud to misunderstand the initial PROPFIND request. There is plenty of
documentation about that. (Everything here applies not to owncloud exclusively
but to all Apache/PHP-based DAV services.)
2. Confirmed: When the requested resource is not known (wrong URL), Apache
responds 405 instead of 404 to PROPFIND, so the end user gets a misleading
technical error message instead of a plain "URL not found".
3. Speculative: it looks like Apache responds 405 instead of 401 too in certain
circumstances, but I'm not exactly sure what causes this. This is what really
can cause breakage to the authorization protocol.

The DAVdroid app has an option to always send an Authorization header with the
first request to work around these kind of problems (at least the #3 one) and
the recommendation could be that Akonadi get such an option too.

(Now I don't have the problem any more since I fixed my setup on all three
sides (owncloud, android, akonadi) but getting it right everywhere was much
harder than it should be...)

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[Grégory Oestreicher via KDE Bugzilla]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #8 from Grégory Oestreicher  ---
(In reply to Olaf Titz from comment #7)
> Akonadi always sends the first PROPFIND request without authorization
> headers, as gets logged by Apache.

OK, but this is how it's supposed to work: first request is made without the
Authorization header to ensure that authentication is needed, but the second
one should have it. Is that not the case?

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[Olaf Titz via KDE Bugzilla]

https://bugs.kde.org/show_bug.cgi?id=344874

Olaf Titz  changed:

   What|Removed |Added

 CC||o...@bigred.inka.de

--- Comment #7 from Olaf Titz  ---
Broken for me too. I have a password consisting only of ASCII letters and
digits.
Akonadi always sends the first PROPFIND request without authorization headers,
as gets logged by Apache.
this is the version: akonadi (1.12.1-0ubuntu1.1) trusty

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[Grégory Oestreicher]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #6 from Grégory Oestreicher g...@kamago.net ---
I'm pretty certain that the resource still sends the passwords :)

Does your password contain non-ASCII characters? There's a problem in KIO with
HTTP authentication in this scenario.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[Simone Lazzaris]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #5 from Simone Lazzaris sim...@omni.it ---
For the record, I'm using archlinux, akonadi version is 15.08.0-2.

A previous (before last update, can't remember exact number) version worked
without this issue.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[Simone Lazzaris]

https://bugs.kde.org/show_bug.cgi?id=344874

Simone Lazzaris sim...@omni.it changed:

   What|Removed |Added

 CC||sim...@omni.it

--- Comment #4 from Simone Lazzaris sim...@omni.it ---
I'm seeing the same behaviour here: we use owncloud to share calendars and it
seems that ALL requests are made without username/password.
Since the connection is encrypted (https) it is a bit difficult to send a
wireshark dump, but I clearly see on the apache side that all PROPFIND requests
are made without credentials: I only see 401 requests.

Simulating the same request via curl, but providing the credential, it works.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[Grégory Oestreicher]

https://bugs.kde.org/show_bug.cgi?id=344874

Grégory Oestreicher g...@kamago.net changed:

   What|Removed |Added

 CC||g...@kamago.net

--- Comment #3 from Grégory Oestreicher g...@kamago.net ---
Hey,

Actually KIO does a first round-trip without the username / password, as is
recommended and unless a previous authentication with this web site succeeded.

Do you mean that the username / password are never added or they're not present
in the first request?

Cheers,
Grégory

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[auxsvr]

https://bugs.kde.org/show_bug.cgi?id=344874

aux...@gmail.com changed:

   What|Removed |Added

 CC||aux...@gmail.com

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[EMR_Kde]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #1 from EMR_Kde emre...@gmail.com ---
Created attachment 91434
  -- https://bugs.kde.org/attachment.cgi?id=91434action=edit
From the davmail server running on localhost, client/server sniff/debug

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs

[Akonadi] [Bug 344874] username/password not being sent in header

[EMR_Kde]

https://bugs.kde.org/show_bug.cgi?id=344874

--- Comment #2 from EMR_Kde emre...@gmail.com ---
Created attachment 91435
  -- https://bugs.kde.org/attachment.cgi?id=91435action=edit
From wireshark sniffing on loopback port 1080

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Kdepim-bugs mailing list
Kdepim-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdepim-bugs