[Tickets #12385] DAV-Principals mix auth-username and horde-username

[noreply at bugs.horde.org]

BITTE NICHT AUF DIESE NACHRICHT ANTWORTEN. NACHRICHTEN AN DIESE  
E-MAIL-ADRESSE WERDEN NICHT GELESEN.

Ticket-URL: http://bugs.horde.org/ticket/12385
------------------------------------------------------------------------------
  Ticket           | 12385
  Erstellt Von     | piper at hrz.uni-marburg.de
  Zusammenfassung  | DAV-Principals mix auth-username and horde-username
  Warteschlange    | Horde Framework Packages
  Version          | FRAMEWORK_4
  Typ              | Bug
  Status           | Unconfirmed
  Priorität        | 3. High
  Milestone        |
  Patch            | 1
  Zuständige       |
------------------------------------------------------------------------------


piper at hrz.uni-marburg.de (2013-06-21 09:15) hat geschrieben:

In my horde-setup (Horde-5.1.1, IMP-6.1.1, Horde_Dav-1.0.0) I am using  
horde-usernames of form 'user at domain' and auth-usernames of form 'user'.

This leads to problems with CalDav-access: if I access a caldav-URL  
with the browser, I get the (xml-)message 'User user at domain does not  
exist'. This is related to the authentication-routine  
getPrincipalByPath($path)  in 'Horde/Dav/Principals.php', where the  
horde-username from the URL is used as auth-username. It can be fixed  
by converting the username to auth-username (see attached patch).

This leads to the new error message 'User did not have the required  
privileges ({DAV:}read) for path "..."', as the authentication in the  
browser has been done using the auth-username, which is used in the  
routine 'getCurrentUserPrincipal()' in 'Sabre/DAVACL/Plugin.php' to  
set the principal-path, which should contain the horde-username. This  
can be fixed likewise by converting the username to horde-username  
(see second patch).

Is my observation and the fixing correct, or do I miss something here?

Thanks for your help,
regards,
Andreas




piper at hrz.uni-marburg.de (2013-06-21 09:15) hat hochgeladen:  
Horde_Dav_Principals.php.patch

http://bugs.horde.org/h/services/download/?module=whups&actionID=download_file&file=Horde_Dav_Principals.php.patch&ticket=12385&fn=%2FHorde_Dav_Principals.php.patch