6.0.0-beta1
9/24/25

[#5047] Inconsistent authentication behaviour of XML/RPC
Summary Inconsistent authentication behaviour of XML/RPC
Queue Horde Framework Packages
Queue Version HEAD
Type Bug
State Not A Bug
Priority 1. Low
Owners
Requester meyer (at) mesw (dot) de
Created 02/27/2007 (6784 days ago)
Due
Updated 03/16/2007 (6767 days ago)
Assigned 02/27/2007 (6784 days ago)
Resolved 03/16/2007 (6767 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch No

History
03/16/2007 03:13:53 PM Jan Schneider Summary ⇒ Inconsistent authentication behaviour of XML/RPC
 
03/16/2007 03:13:20 PM Jan Schneider State ⇒ Not A Bug
 
02/28/2007 10:03:17 PM Jan Schneider Comment #4 Reply to this comment
Of course, the described behaviour only makes
sense when using IMP login I think (otherwise, you won't be able to
log in via the email address at all, right?).
No, why should the authentication determine how the user names look 
like? Anyway, if your system to allows logging in both, with and 
without the domain part of the username, Horde will break. Use a hook 
to normalize your user names when logging in.
02/28/2007 06:55:48 PM meyer (at) mesw (dot) de Comment #3 Reply to this comment
Interestingly, I remember that this does not happen when logging in 
via the web interface with short names ("joe.user"). All calendars are 
correctly shown. Of course, the described behaviour only makes sense 
when using IMP login I think (otherwise, you won't be able to log in 
via the email address at all, right?).


02/27/2007 11:16:10 PM Jan Schneider Comment #2
State ⇒ Feedback
Reply to this comment
The RPC server uses the same authentication method like other parts of 
Horde, so this should happen with the main interface too.
02/27/2007 09:55:26 AM meyer (at) mesw (dot) de Comment #1
Priority ⇒ 1. Low
Type ⇒ Bug
Summary ⇒ Incosistent authentication behaviour of XML/RPC
Queue ⇒ Horde Framework Packages
State ⇒ Unconfirmed
Reply to this comment
When using XML/RPC to interface with Horde, one must give the full 
email address of the user to authenticate.



However, when one accidentially only gives the login name (say, 
"joe.user" instead of "joe.user@my-server.com"), authentication still 
succeeds but behaviour is incosistent. E.g., in the example 
http://wiki.horde.org/XmlRpcPythonHowTo an incorrect list of calendars 
is returned and retrieving any calendar fails with an "access denied" 
message.



To resolve this, either specifying only the login name should fail 
completely or the behaviour of both login methods should be consistent.


Saved Queries