Tickets :: Comment on [#12385] DAV-Principals mix auth-username and horde-username

* Your Email Address
* Spam protection	Enter the letters below: .___. __. __ .___..___ _/ (__ / ` \| [__ ./__..__)\__. \| \|
Comment	>> In my horde-setup (Horde-5.1.1, IMP-6.1.1, Horde_Dav-1.0.0) I am >> using horde-usernames of form 'user@domain' and auth-usernames of >> form 'user'. >> >> This leads to problems with CalDav-access: if I access a caldav-URL >> with the browser, I get the (xml-)message 'User user@domain does not >> exist'. This is related to the authentication-routine >> getPrincipalByPath($path) in 'Horde/Dav/Principals.php', where the >> horde-username from the URL is used as auth-username. It can be fixed >> by converting the username to auth-username (see attached patch). >> >> This leads to the new error message 'User did not have the required >> privileges ({DAV:}read) for path "..."', as the authentication in the >> browser has been done using the auth-username, which is used in the >> routine 'getCurrentUserPrincipal()' in 'Sabre/DAVACL/Plugin.php' to >> set the principal-path, which should contain the horde-username. This >> can be fixed likewise by converting the username to horde-username >> (see second patch). >> >> Is my observation and the fixing correct, or do I miss something here? >> >> Thanks for your help, >> regards, >> Andreas >> > > > I report that the patch here fix the problem. > > Kinglok, Fong
Attachment
Watch this ticket