11-19-2018, 07:07 PM
I think the MD5-sess "algorithm" could be a problem here, afaik we currently only support the "normal" "MD5" one.
see the differences here:
https://en.wikipedia.org/wiki/Digest_acc...n#Overview
since the calculation of HA1 involves the password, this needs to be done within the kernel
btw. I didn't really troubleshoot if the remaining parts are okay, but it's quite easy to find out with some code snippets like the ones that can be found in test.pl etc (if you know all the parts and "only" the HA1 calculation is incorrect, we know the reason for sure: i.e. it's MD5-sess vs MD5)
see the differences here:
https://en.wikipedia.org/wiki/Digest_acc...n#Overview
Quote:If the algorithm directive's value is "MD5-sess", then HA1 is
HA1 = MD5(MD5(username:realm:password):nonce:cnonce)
since the calculation of HA1 involves the password, this needs to be done within the kernel
btw. I didn't really troubleshoot if the remaining parts are okay, but it's quite easy to find out with some code snippets like the ones that can be found in test.pl etc (if you know all the parts and "only" the HA1 calculation is incorrect, we know the reason for sure: i.e. it's MD5-sess vs MD5)