[kronolith] Kronolith / sabredav: No basic authentication headers found
lst_hoe02 at kwsoft.de
lst_hoe02 at kwsoft.de
Mon May 11 19:27:06 UTC 2015
Zitat von Jan Schneider <jan at horde.org>:
> Zitat von lst_hoe02 at kwsoft.de:
>
>> Zitat von lst_hoe02 at kwsoft.de:
>>
>>> Hello,
>>>
>>> we use Horde/Kronolith for CalDAV calender access from multiple
>>> clients. In a network trace we can see that Horde refuses CalDAV
>>> access with cookies set with Sabre DAV Exception and "No basic
>>> authentication headers found". This lead to
>>> http://tuxd00d.com/blog/sabredav-no-basic-authentication-headers-were-found/ but the problem is said to occur only with CGI/FastCGI which we don't use. We have Ubuntu 12.04 with Apache and PHP5 as module with the latest Horde/Kronolith and all other is working fine. Any idea how to debug/solve
>>> this?
>>>
>>> Thanks
>>>
>>> Andreas
>>
>> Hm, found this in horde/.htaccess
>>
>> # IMPORTANT: DO NOT EDIT THIS FILE!
>> # It will be overwritten with any future upgrade.
>>
>> allow from all
>>
>> <IfModule mod_rewrite.c>
>> RewriteEngine On
>> RewriteRule .* - [env=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
>> RewriteCond %{REQUEST_FILENAME} !-d
>> RewriteCond %{REQUEST_FILENAME} !-f
>> RewriteRule ^(.*)$ rampage.php [QSA,L]
>> </IfModule>
>>
>>
>> so the missing header should not be the problem, no?
>>
>> Ayn idea how to solve this? We have slow access because of
>> additional round trips and hundreds of unused sessions on the
>> server because of constant re-authentication.
>
> And *are* the headers actually missing, i.e. can those client not
> authenticate at all?
>
In fact they can authenticate, but they have to authenticate at every
request because the cookie ist not accepted. So we have a constant
re-authentication without session reuse :-(
Regards
Andreas
More information about the kronolith
mailing list