On 05/31/2013 01:28 PM, C. Michael Pilato wrote: > On 05/31/2013 12:06 PM, C. Michael Pilato wrote: >> On 05/31/2013 10:45 AM, Welch, Klaus wrote: >>> On monday I'll check the serf version, remove client side credential, >>> carefully re-check all the build logs. >>> >>> Hopefully something indicates where to look further. >> >> As it turns out, I have been able to reproduce this problem on my laptop >> with a simple Digest auth configuration. I'll debug after some lunch. > > The failure occurs when Serf hits this condition (in its > auth/auth_digest.c:serf__validate_response_digest_auth() function): > > /* Incorrect response-digest in Authentication-Info header. */ > if (strcmp(rspauth, resp_hdr_hex) != 0) { > return SERF_ERROR_AUTHN_FAILED; > } > > Still digging.
After some more debugging, I find that the problem is the URI comparisons in that function. On one side, the HA2 digest contributor has been calculated using the actual URI of the PROPFIND request (.../!svn/rvr/...). On the side of the comparison, a bit of path information is pulled from the Serf connection's host_info structure. All works well for the OPTIONS requests, which both hit the public URI of the repository. But that PROPFIND comes along and the comparisons fail. I'll need to take this up with the Serf developers. -- C. Michael Pilato <cmpil...@collab.net> CollabNet <> www.collab.net <> Enterprise Cloud Development
signature.asc
Description: OpenPGP digital signature