]> granicus.if.org Git - ejabberd/commit
Fix issue with ejabberd_xmlrpc user auth and SCRAM
authorSteven Lehrburger <lehrburger@gmail.com>
Tue, 18 Sep 2012 08:02:47 +0000 (08:02 +0000)
committerBadlop <badlop@process-one.net>
Mon, 4 Feb 2013 11:57:56 +0000 (12:57 +0100)
commit426f1107c526caaad1d1dd1438f4a935fab9fc63
tree1f21160167d7a27b12d7a14d74f1deea4c29b9c0
parent2704378d43035474c5f3d8a656b81c7bc28b5ff9
Fix issue with ejabberd_xmlrpc user auth and SCRAM

After enabling SCRAM password hashing and SSL in ejabberd, XMLRPC ejabberdctl commands were resulting in errors like this:

W(<0.2623.0>:ejabberd_xmlrpc:328) : Error -118
A problem '{error,invalid_account_data}' occurred executing the command user_sessions_info with arguments

It seems that this because ejabberd_commands was using a different authentication check than everything else, which wasn't properly taking account for potential password hashing. (Note I'm not really sure what AccountPassMD5 is doing, but it seems to be different than the ejabberd_auth_internal's SCRAM hasing.)
src/ejabberd_commands.erl