Comment 23 for bug 1574653

Revision history for this message
In , David (david-redhat-bugs) wrote :

(In reply to Milan Crha from comment #21)
> Okay, I figured out that the problem with the autodiscover is that it checks
> whether a password is needed

I think you have hit the nail on the head there.

You should never "check whether a password is needed". When you are required to authenticate, you can *try* /usr/bin/ntlm_auth, and if that works then you're good. If it doesn't then you fall back to asking the user for a password. You shouldn't make that decision in advance.

This failure mode in autodiscover presumably already existed if ntlm_auth *has* credentials but they're invalid because your password has changed on the server side?

Perhaps we can just use the standard libsoup authenticator for this now that it's expected to work? Because libsoup *does* tend to get this right, and ask for a password with a callback *if/when* it needs one.