Re: carddav with DIGEST-MD5

2014-07-24 Thread Ken Murchison
I would probably have to see the protocol exchange to in order to understand what is happening. On 07/23/2014 06:59 PM, Johan Hattne wrote: Thanks Ken, I’ll keep that in mind. In this particular case (and with your earlier patch applied) it appears that http_auth() in cyrus-imap’s httpd.c

Re: carddav with DIGEST-MD5

2014-07-24 Thread Johan Hattne
What format would you like that in (and how do I produce that)? On Jul 24, 2014, at 10:48, Ken Murchison mu...@andrew.cmu.edu wrote: I would probably have to see the protocol exchange to in order to understand what is happening. On 07/23/2014 06:59 PM, Johan Hattne wrote: Thanks Ken,

Re: carddav with DIGEST-MD5

2014-07-24 Thread Ken Murchison
Actually, let me do some testing of my own with Apple Contacts and see if I can replicate the problem. On 07/24/2014 10:57 AM, Johan Hattne wrote: What format would you like that in (and how do I produce that)? On Jul 24, 2014, at 10:48, Ken Murchison mu...@andrew.cmu.edu wrote: I would

Re: carddav with DIGEST-MD5

2014-07-23 Thread Ken Murchison
Hi Johan, I believe this issue is fixed by the following commit: http://git.cyrusimap.org/cyrus-sasl/commit/?id=76ce885a44e7cb511ba54ceae46349036abb9cc8 BTW, which CardDAV client is using Digest? On 07/22/2014 01:48 PM, Johan Hattne wrote: While PLAIN authentication works fine, I had the

Re: carddav with DIGEST-MD5

2014-07-23 Thread Johan Hattne
Hi Ken; That fixes the crash but results in a “401 Unauthorized”. I’ll look into that a bit more at the next opportunity. This is using Contacts (8.0 1371) on an up-to-date OS X 10.9.4. It also works on the iPhone (iOS 7.1.2). // Johan On Jul 23, 2014, at 10:55, Ken Murchison

Re: carddav with DIGEST-MD5

2014-07-23 Thread Ken Murchison
I had issues with the Apple clients and Digest. Unless you really need Digest, I'd recommend using TLS + Basic. On 07/23/2014 01:27 PM, Johan Hattne wrote: Hi Ken; That fixes the crash but results in a “401 Unauthorized”. I’ll look into that a bit more at the next opportunity. This is

Re: carddav with DIGEST-MD5

2014-07-23 Thread Johan Hattne
Thanks Ken, I’ll keep that in mind. In this particular case (and with your earlier patch applied) it appears that http_auth() in cyrus-imap’s httpd.c returns SASL_CONTINUE. The comment around line 3272 says “Need another step to complete authentication”, but the caller (response_header(),

carddav with DIGEST-MD5

2014-07-22 Thread Johan Hattne
While PLAIN authentication works fine, I had the https daemon crash during DIGEST-MD5 authentication. The crash turned out to be a divide error in libdigestmd5 from cyrus-sasl. In particular (in cyrus-sasl’s plugins/digestmd5.c): /* Create an initial cache entry for non-persistent HTTP