Enhanced Authentication Failed with Reason Code 135 (Not Authorized). about emqx HOT 9 CLOSED

@qzhuyan Thank you for your efforts! I applied your patch and successfully passed the enhanced authentication.

from emqx.

glad it works!
We have merged the fix to the master branch.

from emqx.

nonce in client finial doesn't match.

expecting:

LXJbjM+4lQHAvt|ZAn%=P0POHT2^e<yVdL&YQm

get:

LXJbjM+4lQHAv*t|ZAn%=P0POHT2^e<yVdL&YQm

from emqx.

Hi @qzhuyan, Thank you for your response. The log information I shared earlier has "*" character being deleted while doing copy paste. I have included the complete log file along with the Wireshark captured packages in the attached zip folder.
auth_test.zip

from emqx.

@ting-ms could you share your rumqttc branch will be helpful for me to trouble shoot.
So far I could just see the proof is wrong but don't know why.

from emqx.

@ting-ms I guess I found the issue.

could you patch the emqx with this patch? just put the *.beam file under patches dir and restart emqx.
for how to patch refer to https://docs.emqx.com/en/enterprise/v4.4/advanced/patches.html

remember to unzip first!
esasl_scram.beam.zip

from emqx.

@qzhuyan I have do the test again with the patch you provided, the issue persists. Please refer to the attached file for package information and the EMQX log.
auth_test_0415.zip

How can I check whether the patch has been successfully applied?

from emqx.

@ting-ms really appreciate your test. I compiled the rustbase_scram and played with it and find it could not interop with the scram module (even with the patched one) in EMQX,
I have narrowed the scope and investigating it.

from emqx.

@ting-ms I managed to make it to work with rustbase_scram
from API to API testing, it looks fine, but I want to ensure it works end to end.

esasl_scram.beam.zip
could you try above patch? remember to unzip first!

to ensure the patch is loaded, you could run the following command:

emqx eval 'c:m(esasl_scram)'

it should print that the Object file points to the patched file

from emqx.