<div dir="ltr"><div class="gmail_quote">On Thu, Sep 18, 2008 at 4:01 PM, Eric Will <span dir="ltr"><<a href="mailto:rakaur@malkier.net">rakaur@malkier.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> <div class="Ih2E3d">I was wrong again. Other clients are sending SOMETHING, I just don't<br></div> know what. It's not an md5 hexdigest. I'm unsure if it's<br> base64-encoded, or just random numbers/letters. I've been scanning the<br> SASL DIGEST-MD5 RFC and I can't come to a conclusion. I don't think<br> cnonce is required to be encoded as anything except as part of the<br> 'response'. Perhaps Psi is botching the computation for that.<br> <div><div></div><div class="Wj3C7c"></div></div></blockquote><div><br></div><div>cnonce should be an opaque blob as far as clients are concerned, (my guess is psi is pulling random bytes and base64 encoding them)</div><div> <br></div><div>Any chance we can get a log with a known (to us), password?</div><div> </div></div>-- <br>- Norman Rasmussen<br> - Email: <a href="mailto:norman@rasmussen.co.za">norman@rasmussen.co.za</a><br> - Home page: <a href="http://norman.rasmussen.co.za/">http://norman.rasmussen.co.za/</a><br> </div>