Tickets :: Comment on [#12385] DAV-Principals mix auth-username and horde-username

* Your Email Address
* Spam protection	Enter the letters below: \ /.___. .. ..___ >< [__ \|__\|\| \|[__ / \\| \| \|\|/\\|\|
Comment	> In my horde-setup (Horde-5.1.1, IMP-6.1.1, Horde_Dav-1.0.0) I am > using horde-usernames of form 'user@domain' and auth-usernames of > form 'user'. > > This leads to problems with CalDav-access: if I access a caldav-URL > with the browser, I get the (xml-)message 'User user@domain does not > exist'. This is related to the authentication-routine > getPrincipalByPath($path) in 'Horde/Dav/Principals.php', where the > horde-username from the URL is used as auth-username. It can be fixed > by converting the username to auth-username (see attached patch). > > This leads to the new error message 'User did not have the required > privileges ({DAV:}read) for path "..."', as the authentication in the > browser has been done using the auth-username, which is used in the > routine 'getCurrentUserPrincipal()' in 'Sabre/DAVACL/Plugin.php' to > set the principal-path, which should contain the horde-username. This > can be fixed likewise by converting the username to horde-username > (see second patch). > > Is my observation and the fixing correct, or do I miss something here? > > Thanks for your help, > regards, > Andreas >
Attachment
Watch this ticket