[jdev] auth code failes

Michal 'vorner' Vaner vorner at ucw.cz
Sat Sep 13 10:39:04 CDT 2008


Hello

On Wed, Sep 10, 2008 at 03:31:15PM -0700, Ovidiu Craciun wrote:
> Hi all,
> 
> I am playing around with auth, user registration/unregistration, pub-sub, IM; I use jabber-net and jabber server or openfire alternatively; recently I am facing this problem: same auth code is failing authentication for two different users: user1 and user2. using "Jabber MomentIM" to connect to the server both users (user1 and user2) are successful; user1 was created with "Jabber MomentIM" and user2 was created programmatically (using jabber-net register stantzas).
> 
> Any idea what I am missing, why the code is working for one user and not for the other? Thanks! O.

As far as I remember, the response depends not only on the password and
challenge, but on the username too. So even when with the same password
and challenge, they should have different response.

When I was trying to do some own tests, I „borrowed“ the md5-digest code
from psi (mostly because I used Qt too, but it seemed nice readable).

Have a nice day

-- 
I have a theory that it's impossible to prove anything, but I can't prove it.

Michal 'vorner' Vaner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <https://www.jabber.org/jdev/attachments/20080913/7fea9635/attachment-0002.pgp>


More information about the JDev mailing list