EzDoum

Lighttpd에 인증을 digest 사용시 IE 오동작 문제?

	글쓴이: EzDoum 글쓴날: 2012년 09월 23일 오전 12:17
	Lighttpd에 인증을 digest 사용시 IE7/8/9 에서 맞는 암호 저장을 해도 계속 암호 인증창이 뜬다. 출장 다녀와서 디버깅좀 해봐야겠음. cnonce가 원인인가?? http://en.wikipedia.org/wiki/Digest_access_authentication [수정] 관련 링크 [분류: 보안 ]

	EzDoum 2012년 10월 23일 오후 08:56 [ 이글에 답장 | 본문에 답장 | 책갈피 ]
	lighttpd http_auth.c 에 인증 관련 필드에 " 표가 들어 가는 경우 값을 잘못 파싱해서 오류가 발생한 건임. 오픈 소스 커뮤니티에 첫번째 패치를 보낼 수 있는 건 수가 생겼네. ㅎㅎ 아래는 관련 테스트 HTTP 요청과 auth 로그 # 크롬에서 정상인 경우 GET /info/info.js?1350990461_5889%22 HTTP/1.1 Host: 192.168.100.73:8080 Connection: keep-alive Authorization: Digest username="ADMIN", realm="WEB Remote Viewer", nonce="5d7306344f7ea9deca7ad4703e98fddb", uri="/info/info.js?1350990461_5889%22", response="c8a8680ee49d413b7db9845afe2e97c9", qop=auth, nc=000000f3, cnonce="aa8c235adf74f0fb" User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.94 Safari/537.4 Accept: */* Referer: http://192.168.100.73:8080/html/setup_cam_title.htm Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 HTTP/1.1 200 OK Content-Type: text/javascript Accept-Ranges: bytes ETag: "4273925772" Last-Modified: Tue, 23 Oct 2012 10:44:59 GMT Content-Length: 942 Date: Tue, 23 Oct 2012 11:07:20 GMT Server: lighttpd/1.4.31 2012-10-23 20:05:06: (http_auth.c.1016) username ADMIN 2012-10-23 20:05:06: (http_auth.c.1017) realm WEB Remote Viewer 2012-10-23 20:05:06: (http_auth.c.1018) nonce 5d7306344f7ea9deca7ad4703e98fddb 2012-10-23 20:05:06: (http_auth.c.1019) uri /info/info.js?1350990328_26279%22 2012-10-23 20:05:06: (http_auth.c.1020) algorithm 2012-10-23 20:05:06: (http_auth.c.1021) qop auth 2012-10-23 20:05:06: (http_auth.c.1022) cnonce 342ffccc217b4b2d 2012-10-23 20:05:06: (http_auth.c.1023) nc 000000cc 2012-10-23 20:05:06: (http_auth.c.1024) response 04f80318af4d6020c8918baead8f956c 2012-10-23 20:05:06: (http_auth.c.1172) digest: auth ok # IE에서 비정상인 경우 GET /info/info.js?20106" HTTP/1.1 Accept: */* Referer: http://192.168.100.73:8080/ Accept-Language: ko UA-CPU: x86 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB7.4; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 1.1.4322; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E) Host: 192.168.100.73:8080 Connection: Keep-Alive Authorization: Digest username="ADMIN",realm="WEB Remote Viewer",nonce="6eb826b6daa2f776060cc5a2466dc21c",uri="/info/info.js?20106\"",cnonce="e84559ccbe04b8e807b4835a4471d892",nc=00000004,response="162b559b7192d4020413f49f4e54d48d",qop="auth" HTTP/1.1 401 Unauthorized WWW-Authenticate: Digest realm="WEB Remote Viewer", nonce="a101868c4b3a327b5a4752f1ff3ee543", qop="auth" Content-Type: text/html Content-Length: 351 Date: Tue, 23 Oct 2012 11:09:44 GMT Server: lighttpd/1.4.31 2012-10-23 20:09:44: (http_auth.c.1016) username ADMIN 2012-10-23 20:09:44: (http_auth.c.1017) realm WEB Remote Viewer 2012-10-23 20:09:44: (http_auth.c.1018) nonce 6eb826b6daa2f776060cc5a2466dc21c 2012-10-23 20:09:44: (http_auth.c.1019) uri /info/info.js?20106\ 2012-10-23 20:09:44: (http_auth.c.1020) algorithm 2012-10-23 20:09:44: (http_auth.c.1021) qop auth 2012-10-23 20:09:44: (http_auth.c.1022) cnonce e84559ccbe04b8e807b4835a4471d892 2012-10-23 20:09:44: (http_auth.c.1023) nc 00000004 2012-10-23 20:09:44: (http_auth.c.1024) response 162b559b7192d4020413f49f4e54d48d 2012-10-23 20:09:44: (http_auth.c.1145) digest: digest mismatch 698b14b3dbd6bcabed14979d10a16c95 162b559b7192d4020413f49f4e54d48d 2012-10-23 20:09:44: (http_auth.c.1149) digest: auth failed for ADMIN : wrong password, IP: 192.168.100.71 [수정]

답장 쓰기

	글을 올리시려면 로그인 (사용자 등록) 하셔야 합니다.