I have written some code which works fine when talking to the localhost client but fails to authenticate on remote hosts.

The BOINC Manager can connect correctly to all remote hosts used in my testing and everything looks good in Wireshark.

My code correctly asks for and receives a nonce.

<boinc_gui_rpc_reply>
<nonce>1359966854.594078</nonce>
</boinc_gui_rpc_reply>

I send back:

<boinc_gui_rpc_request>\n
<auth2>\n
<nonce_hash>d0fb98c4df3bc5567e27da518e462836</nonce_hash>\n
</auth2>\n
</boinc_gui_rpc_request>\n\003

The reply on a remote host is always <unauthorized/>.

I've tried several ways to create the nonce_hash, none allow me to authenticate:

$nonce_hash = hash("md5",$nonce.$password);
$nonce_hash = md5($nonce.$password);
$nonce_hash = strtolower(md5($nonce.$password));

My source for this is http://boinc.berkeley.edu/trac/wiki/GuiRpcProtocol.



What am I missing on the hashing? I am sure it is something obvious.


Thanks
Janos of TSBT
http://www.tsbt.co.uk