[Pkg-zope-developers] Bug#357461: python2.4-schoolbell: schoolbell sends malformed HTTP header

[Jérémy Bobbio]

package schoolbell
reassign 357461 zope3 3.2.1-4
forwarded 357461 http://www.zope.org/Collectors/Zope3-dev/682
thanks

On Fri, Mar 17, 2006 at 03:14:12PM +0100, Nicolas Evrard wrote:
> While zope3 sends these headers:
> 
> nicoe at purple ~ % wget -S http://192.168.1.3:7180/persons/nev/calendar.ics
> --14:57:06--  http://192.168.1.3:7180/persons/nev/calendar.ics
>            => `calendar.ics.1'
> Connexion vers 192.168.1.3:7180...connecté.
> requête HTTP transmise, en attente de la réponse...
>   HTTP/1.0 401 Unauthorized
>   Content-Length: 2484
>   Connection: Keep-Alive
>   X-Powered-By: Zope (www.zope.org), Python (www.python.org)
>   Date: Fri, 17 Mar 2006 13:57:15 GMT
>   Content-Type: text/html;charset=utf-8
>   WWW-Authenticate: basic realm=zope
>   Server: zope.server.http (HTTP)
> ÉCHEC d'autorisation.
> 
> Notice the " missing around the word zope.
> 
> Well, I've read the rfc it seems the " are mandatory.

To quote RFC 2617 [1]:

  The authentication parameter realm is defined for all authentication
   schemes:

      realm       = "realm" "=" realm-value
      realm-value = quoted-string

[1] http://www.ietf.org/rfc/rfc2617.txt

The problem lies in Zope3, and have been reported upstream.

-- 
Jérémy
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-zope-developers/attachments/20060801/490893d1/attachment.pgp