Ticket #151 (new Defect)
Extra WWW-Authenticate header when doing MOVE with Kerberos
| Reported by: | wsanchez@… | Owned by: | cdaboo@… |
|---|---|---|---|
| Priority: | 3: Important | Milestone: | CalendarServer-3.x |
| Component: | Calendar Server | Severity: | Other |
| Keywords: | Cc: |
Description
11/7/06 10:50 AM Cyrus Daboo:
So I think I have almost all of the kinks out of iCal for Kerberos authentication. One problem I am running in to, however, is when I try to rename a calendar (using the MOVE method) from Untitled_2 to test, in this example. My tcpflow is below. As you can see, I do an unauth move and get a nego back. When I try to resend the request with a token, I get a 401 and two WWW-Authenticate headers, one with a token, and one without. This behavior is new to me and I was wondering if you knew anything about why this is happening. When I look at the server output, I see:
% MOVE /calendars/users/junk/Untitled_2/ HTTP/1.1 % 'Invalid authentication details: <MOVE /calendars/users/junk/Untitled_2/ (1,1)>'
Thanks, H
tcpflow output:
017.203.012.041.50745-017.203.013.066.08008: MOVE /calendars/users/junk/Untitled_2/ HTTP/1.1 User-Agent: DAVKit/2.0 (10.5; wrbt) iCal 3.0 Destination: /calendars/users/junk/test/ Content-Length: 79 Connection: keep-alive Host: chimchim2.apple.com:8008 017.203.012.041.50745-017.203.013.066.08008: <DAV:set><DAV:prop><DAV:displayname>test</DAV:displayname></DAV:prop></DAV:set> 017.203.013.066.08008-017.203.012.041.50745: HTTP/1.1 401 Unauthorized Content-Length: 141 Server: Twisted/2.4.0+rUnknown TwistedWeb/[twisted.web2, version 0.2.0 (SVN rUnknown)] TwistedCalDAV/? DAV: 1, access-control, calendar-access, calendar-schedule Date: Mon, 06 Nov 2006 19:49:46 GMT Content-Type: text/html WWW-Authenticate: negotiate <html><head><title>Unauthorized</title></head><body><h1>Unauthorized</h1><p>You are not authorized to access this resource.</p></body></html> 017.203.012.041.50746-017.203.013.066.08008: MOVE /calendars/users/junk/Untitled_2/ HTTP/1.1 User-Agent: DAVKit/2.0 (10.5; wrbt) iCal 3.0 Authorization: negotiate XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX Destination: /calendars/users/junk/test/ Content-Length: 79 Connection: keep-alive Host: chimchim2.apple.com:8008 017.203.012.041.50746-017.203.013.066.08008: <DAV:set><DAV:prop><DAV:displayname>test</DAV:displayname></DAV:prop></DAV:set> 017.203.013.066.08008-017.203.012.041.50746: HTTP/1.1 401 Unauthorized Content-Length: 141 Server: Twisted/2.4.0+rUnknown TwistedWeb/[twisted.web2, version 0.2.0 (SVN rUnknown)] TwistedCalDAV/? DAV: 1, access-control, calendar-access, calendar-schedule Date: Mon, 06 Nov 2006 19:51:48 GMT Content-Type: text/html WWW-Authenticate: negotiate WWW-Authenticate: negotiate XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX <html><head><title>Unauthorized</title></head><body><h1>Unauthorized</h1><p>You are not authorized to access this resource.</p></body></html>
Change History
Note: See
TracTickets for help on using
tickets.