Opened 14 years ago

Closed 14 years ago

Last modified 12 years ago

#760 closed defect (wontfix)

Webif wget problem

Reported by: Bruty Owned by: Bruty
Priority: major Component: General
Severity: medium Keywords:
Cc: Sensitive: no

Description

Hello I have problem when using wget command
root@dm800:/tmp# wget -O /tmp/oscam.test http://user:pass@127.0.0.1:
8060/readers.html
Connecting to 127.0.0.1:6666 (127.0.01:6666)
wget: server returned error: HTTP/1.0 401 Unauthorized

With webbrowser is OK...

config:

mpcs.conf

[webif]
httpport = 6666
httpuser = user
httppwd = pass
httprefresh = 4
httpallowed = 127.0.0.1,192.168.1.1
httphideidleclients = 0
httpreadonly = 0

Change History (4)

in reply to:  description comment:1 by Bruty, 14 years ago

Owner: set to Bruty

Hello I have problem when using wget command
root@dm800:/tmp# wget -O /tmp/oscam.test http://user:pass@127.0.0.1:6666/readers.html
Connecting to 127.0.0.1:6666 (127.0.01:6666)
wget: server returned error: HTTP/1.0 401 Unauthorized

With webbrowser is OK...

config:

mpcs.conf

[webif]
httpport = 6666
httpuser = user
httppwd = pass
httprefresh = 4
httpallowed = 127.0.0.1,192.168.1.1
httphideidleclients = 0
httpreadonly = 0

comment:2 by Admin, 14 years ago

Resolution: wontfix
Status: newclosed

This is a bug in wget: https://bugs.launchpad.net/ubuntu/+source/wget/+bug/530036 Wget does not correctly handle the qop-value and thus sends wrong authentification (it calculates the authentication for a more insecure authentification method). This seems to be long-known issue as some people had problems 4 years ago. http://forums.whirlpool.net.au/archive/545865
Changing this in oscam would not be complicated (basically, lines 348-352 in oscam-http-helpers.c need to be taken out if the client doesn't send qop=auth). However this would affect the security of all users and thus won't be fixed.
Please contact wget authors to get a fix or use curl instead.

comment:3 by M0ng0, 12 years ago

i use a dreambox with icvs image and i dont have curl. What can i do?

comment:4 by Admin, 12 years ago

Install the curl pacakge via opkg or download a ipk manually and install it (for example from http://dreamboxupdate.com/ ).

Note: See TracTickets for help on using tickets.