iCHAT trouble with XMPP DIGEST-MD5 login

Question

I am working on XMPP server development and trying to get ichat work with our server. The authentication mechanism used is DIGEST-MD5.

At login, the client seems to close the connection as soon as it receives the challenge from the server. I would like to understand whats happening on ichat side and why it doesn't respond.

Any pointers would really help.

Thanks.

Answer 1

Did you implement DIGEST-MD5 yourself, or are you using a 3rd-party SASL library?

If you're using someone else's library, you might not have told it what realm to offer -- that's the most common mistake.

If you wrote your own, re-read RFC 2831 really carefully, and debug print the base64 decode of your challenge. You probably made a syntax error that you thought wasn't important, e.g., not escaping a double quote in a qdstr-val.

Finally, start implementing SCRAM, because that's likely to be mandatory in RFC 3920bis.