[Pidgin] #5213: cyrus-SASL support breaks XMPP DIGEST-MD5 auth for jabberd2 with gSASL

Pidgin trac at pidgin.im
Thu Mar 20 13:12:52 EDT 2008


#5213: cyrus-SASL support breaks XMPP DIGEST-MD5 auth for jabberd2 with gSASL
---------------------+------------------------------------------------------
  Reporter:  marty   |       Owner:  deryni   
      Type:  defect  |      Status:  new      
  Priority:  minor   |   Milestone:           
 Component:  XMPP    |     Version:  2.4.0    
Resolution:          |    Keywords:  SASL auth
   Pending:  0       |  
---------------------+------------------------------------------------------
Comment (by deryni):

 "This directive, if present, specifies that the server supports UTF-8
 encoding for the username and password." That says supports, not requires,
 it especially makes no claims about what the response data should look
 like, if you read farther down to where the response data is explained the
 rfc says (for username) "The user's name in the specified realm, encoded
 according to the value of the "charset" directive." which (also according
 to the rfc "should [only] send this directive ... if the server has
 indicated it supports UTF-8" "should" not "must" and further it states
 that "if [it is] not present, the username and password must be encoded in
 ISO 8859-1 (of which US-ASCII is a subset)" so I still maintain that
 rejecting a response without the charset directive is broken, and that
 with a US-ASCII-only password it should work just fine.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/5213#comment:23>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list