Broken DIGEST-MD5 client support again. sasl

Fri, 13 Nov 2009 11:10:06 +0100

author
Tobias Markmann <tm@ayena.de>
date
Fri, 13 Nov 2009 11:10:06 +0100
branch
sasl
changeset 2185
1182e7ae2964
parent 2184
1fd38975addd
child 2186
9657276387af

Broken DIGEST-MD5 client support again.

util/sasl/digest-md5.lua file | annotate | diff | comparison | revisions
--- a/util/sasl/digest-md5.lua	Fri Nov 13 10:54:17 2009 +0100
+++ b/util/sasl/digest-md5.lua	Fri Nov 13 11:10:06 2009 +0100
@@ -173,11 +173,11 @@
 			local password, state = self.profile.plain(response["username"], self.realm)
 			if state == nil then return "failure", "not-authorized"
 			elseif state == false then return "failure", "account-disabled" end
-			Y = md5(response["username"]..":"..self.realm..":"..password);
+			Y = md5(response["username"]..":"..response["realm"]..":"..password);
 		elseif self.profile["digest-md5"] then
 			--local Y, state = self.profile["digest-md5"](response["username"], self.realm, response["charset"])
 		elseif self.profile["digest-md5-test"] then
-		
+			-- TODO
 		end
 		--local password_encoding, Y = self.credentials_handler("DIGEST-MD5", response["username"], self.realm, response["realm"], decoder);
 		--if Y == nil then return "failure", "not-authorized"

mercurial