[horde] CalDav-Problems with differing auth-usernames and Horde-usernames

[Piper Andreas]

Hello,

in my Horde-setup (Horde-5.1.1, Imp-6.1.2, Kronolith-4.1.1,
Horde_Dav-1.0.0) it is not possible to access the CalDav-URLs. The
reason seems to be, that I am using differing usernames for
authentication and inside Horde. My authentication usernames are of form
'user', whereas inside horde the usernames are of form 'user at domain'. I
have set up an 'authusername'-hook for this, as described in
horde/config/hooks.php.dist.

I already posted a bug-report (http://bugs.horde.org/ticket/12385). Here
is the description of the problem:

If I access a caldav-URL (with the browser), I get the (xml-)message
'User user at domain does not exist'. This is related to the
authentication-routine getPrincipalByPath($path)  in
'Horde/Dav/Principals.php', where the horde-username from the URL is
used as auth-username. It can be fixed by converting the username to
auth-username inside this routine.

This fix leads to the new error message 'User did not have the required
privileges ({DAV:}read) for path "..."', as the authentication in the
browser has been done using the auth-username, which is used in the
routine 'getCurrentUserPrincipal()' in 'Sabre/DAVACL/Plugin.php' to set
the principal-path, which should instead contain the horde-username.
This  can be fixed likewise by converting the given username to
horde-username inside the routine.

I posted a working patch with the bug-report.

Is my observation correct, or do I misunderstand the concept of
authentication usernames versus Horde usernames completely?

Thanks for any answer,
Andreas
-- 
________________________________________________________________________
Dr. Andreas Piper, Hochschulrechenzentrum der Philipps-Univ. Marburg
          Hans-Meerwein-Straße, 35032 Marburg, Germany
Phone: +49 6421 28-23521  Fax: -26994  E-Mail: piper at HRZ.Uni-Marburg.DE