[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Cannot get DIGEST with URL Authentication to work

Hi folks,

Is there somebody out there who uses DIGEST authentication combined with
URL authentication?

I have been trying to get it working for hours with no success.

The standard way works nicely but when I add the user and password to
the URL I cannot make it working.

I assume that the problem is closely related to wkSaveAuth, which
overrides dsAuth after do_oper() was called. My understanding is that
the following things happen when executing test_digest_auth_1() of the
attached RPGUnit test program:

a) The program calls http_url_get_raw() with the following URL:

http://admin@' + Job_getTcpIpAddr() + ':8080/digest/

b) setUrlAuth() guesses to use BASIC authentication and moves dsAuth to
   wkSaveAuth.

c) interpret_auth() retrieves the server authentication from the
   response chain and populates dsAuth.

d) After do_oper() wkSaveAuth is moved to dsAuth because wkSaveAuth does
   not equal to *BLANKS because some values of dsAuth are set to *OFF in
   interpret_auth(). The content of wkSaveAuth is: '000'

e) The program calls http_setAuth() to switch to DIGEST authentication.

f) Because of e) dsAuth contains '200' when setUrlAuth() is called the
   second time. The former values set by interpret_auth() were lost
   because of d) and hence setUrlAuth() again set BASIC authentication.

Procedure test_digest_auth_2() follows a different approach which does
not work either.

The only procedure that works for DIGEST authentication is
test_digest_auth_3() which does not use URL authentication.

Any thoughts?

Regards,

Thomas.

Attachment: URL_Auth_Digest.zip
Description: Zip archive

-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------