DIGEST-MD5 on HTTP webserver

[Nil Croustillac <nilcroustillac@xxxxxxxxx>]

Hi all,

It's been a while now I am trying to implement the Digest authentication with the Cyrus SASL library and I don't understand how to proceed.

I am using the version 2.1.25 and only support digest mechanism, here is the desired behaviour (which doesn't work)

 * initial call from client:

     1. sasl_server_new()
     2. sasl_setprop(http_request)

     3. sasl_server_start()

     4. send the challenge provided by previous function

     5. sasl_dispose

 * second request from client (containing authentication information):

     1. sasl_server_new()

     2. sasl_setprop(http_request)

     3. sasl_server_start("clientin = authentication http header")

     3. I tried instead sasl_server_step but it doesn't work either.

     4. sasl_dispose

I expect the third step to authenticate the user with the `clientin` I provide - from http request header - but I only get a floating point exception :(.

Could you please help me with what would be the right process ?

Regards,

Nil.