[#JM-1109] Imporper SASL DIGEST-MD5 handeling

Openfire

Imporper SASL DIGEST-MD5 handeling

Created: 09/05/07 09:27 AM Updated: 01/16/08 12:49 PM

Component/s:

Core

Affects Version/s:

None

Fix Version/s:

None

Time Tracking:

Not Specified

Support Plan Customer Issue:	No
Acceptance Test - Add?:	No

Description

« Hide

When using the DIGEST-MD5 mechanism, a client may choose to attempt a "subsequent authentication" by using previous authentication information as a shortcut. Java's SASL implementation does not support this, and when a client supplies an initial token an exception is thrown. This violates RFC 2831, since the server needs to respond with a challenge not an error in this case.

All

Comments

Work Log

Change History

Subversion Commits

Sort Order:

Ascending order - Click to sort in descending order

[ Permlink | « Hide ]

Jay - 09/05/07 09:30 AM

r9056 should fix this issue in trunk. If we can get a few people to verify this with gaim/pidgin its easy enough to backport to other branches/versions if needed.

[ Permlink | « Hide ]

Guus der Kinderen - 11/19/07 07:00 AM

Two of my users (one using Adium, the other using Pidgin itself) are reporting that this fix works for them.