Problems with authorisation to ejabberd servers

[Etan Reisner]

On Wed, Feb 27, 2008 at 04:11:48AM -0500, Evan Schoenberg wrote:
>
> On Feb 27, 2008, at 3:51 AM, Evan Schoenberg wrote:
>
> >The base 64 string being sent:
> >dXNlcm5hbWU9InNoYWRvd2ZpcmViaXJkIixyZWFsbT0idHVmZi5vcmcudWsiLG5vbmNlPSJzcERTRmZWN2cvWTR2WkNHZXA5WVJqRzhFZGdlUkhoUXFORmxlR1IxIixjbm9uY2U9IllPdGJ4SEM3d01qenROa3IzMW5QeDJTbmRIVUU5Y3Z2NXhyeDFzMS9jcW89IixuYz0wMDAwMDAwMSxxb3A9YXV0aCxkaWdlc3QtdXJpPSJ4bXBwL2JpZ2dlZWsudHVmZi5vcmcudWsiLHJlc3BvbnNlPWNiOTJlNmQ4MDQ4MjNhYjE4ZDBhNzE5ZWM2N2U1MmY5
> >decodes to:
> >username="shadowfirebird",realm="tuff.org.uk",nonce="spDSFfV7g/
> >Y4vZCGep9YRjG8EdgeRHhQqNFleGR1
> >",cnonce="YOtbxHC7wMjztNkr31nPx2SndHUE9cvv5xrx1s1/
> >cqo=",nc=00000001,qop=auth,digest-uri="xmpp/
> >biggeek.tuff.org.uk",response=cb92e6d804823ab18d0a719ec67e52f9
> >
> >So tuff.org.uk is indeed the realm being used.
> >
>
> Correction; sorry for the spam.  Do please try using tuff.org.uk as
> Etan suggested.  That realm= may not be what's being used to generate
> the replies.
>
> -Evan

Right, the realm is in fact tuff.org.uk (as it should be given my reading
of the code, that is our code always uses the jid domain as the realm, I
have no idea if that is correct or not) but the digest-uri is not (whether
that matters or not I have no idea), and we use the SRV host in the
initial sasl client setup (I have no idea, (noticing a pattern here?) what
sasl does with that though).

    -Etan