[jdev] auth code failes

Ovidiu Craciun Ovidiu.Craciun at philips.com
Thu Sep 11 17:43:21 CDT 2008


Thanks for your reply. 

The password is not set wrongly, this is what I checked first, something
else is going on...

 

From: jdev-bounces at jabber.org [mailto:jdev-bounces at jabber.org] On Behalf
Of Norman Rasmussen
Sent: Thursday, September 11, 2008 2:54 AM
To: Jabber/XMPP software development list
Subject: Re: [jdev] auth code failes

 

On Thu, Sep 11, 2008 at 12:31 AM, Ovidiu Craciun
<Ovidiu.Craciun at philips.com> wrote:

	Any idea what I am missing, why the code is working for one user
and not for the other? Thanks! O.


My guess is that the wrong password is being sent for the second user.

btw, those strings can easily be decoded by running `fold -w 79 |
openssl base64 -d` (and pasting in the base64 data)

Once you decode the values it's easy to see that user1=jabber_client_sub
and user2=JabberTest_1

The response values is defined in section 2.1.2.1 of rfc2831, so I
suggest you double check that first.

If you want an easy way to check the clients have the correct password,
then disable digest-md5, and/or force PLAIN.  This will make the base64
decoded data contain the password directly, which is obviously _VERY_
unsafe for a non-encrypted connection, but it does make debugging much
easier.


-- 
- Norman Rasmussen
- Email: norman at rasmussen.co.za
- Home page: http://norman.rasmussen.co.za/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.jabber.org/jdev/attachments/20080911/b993d94e/attachment-0002.htm>


More information about the JDev mailing list