[jdev] auth code failes

Norman Rasmussen norman at rasmussen.co.za
Thu Sep 11 04:53:41 CDT 2008


On Thu, Sep 11, 2008 at 12:31 AM, Ovidiu Craciun <Ovidiu.Craciun at philips.com
> wrote:

> Any idea what I am missing, why the code is working for one user and not
> for the other? Thanks! O.


My guess is that the wrong password is being sent for the second user.

btw, those strings can easily be decoded by running `fold -w 79 | openssl
base64 -d` (and pasting in the base64 data)

Once you decode the values it's easy to see that user1=jabber_client_sub and
user2=JabberTest_1

The response values is defined in section 2.1.2.1 of rfc2831, so I suggest
you double check that first.

If you want an easy way to check the clients have the correct password, then
disable digest-md5, and/or force PLAIN.  This will make the base64 decoded
data contain the password directly, which is obviously _VERY_ unsafe for a
non-encrypted connection, but it does make debugging much easier.

-- 
- Norman Rasmussen
- Email: norman at rasmussen.co.za
- Home page: http://norman.rasmussen.co.za/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.jabber.org/jdev/attachments/20080911/f391094c/attachment-0002.htm>


More information about the JDev mailing list