DIGEST-MD5 on HTTP webserver

Nil Croustillac <[email protected]>
Newsgroups gmane.comp.security.cyrus.sasl
Message-ID <CAEUW1oyFiK32BWEekZeaqWdix3VTZeVRUcfVGO1VO5WUEaX1+w@mail.gmail.com>
Hi all,

It's been a while now I am trying to implement the Digest authentication
with the Cyrus SASL library and I don't understand how to proceed.
I am using the version 2.1.25 and only support digest mechanism, here is
the desired behaviour (which doesn't work)
 * initial call from client:
     1. sasl_server_new()
     2. sasl_setprop(http_request)
     3. sasl_server_start()
     4. send the challenge provided by previous function
     5. sasl_dispose
 * second request from client (containing authentication information):
     1. sasl_server_new()
     2. sasl_setprop(http_request)
     3. sasl_server_start("clientin = authentication http header")
     3. I tried instead sasl_server_step but it doesn't work either.
     4. sasl_dispose

I expect the third step to authenticate the user with the `clientin` I
provide - from http request header - but I only get a floating point
exception :(.
Could you please help me with what would be the right process ?

Regards,
Nil.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.