SOAP AuthRequest/Response Syntax

[hillman]

I'm working on getting the Zimbra Funambol connector working, but am getting an authentication failure when it tries to connect to the back-end Zimbra server using SOAP. It does an AuthRequest and expects to get back an authToken and SessionID, but for some reason, the SOAP response is missing a SessionID. The Zimbra server is running 5.0Beta3. The request looks like this:

<AuthRequest xmlns="urn:zimbraAccount">
<account by="name">hillman</account><password>xxxxxxxx</password>
<prefs><pref name="zimbraPrefTimeZoneId"/></prefs>
</AuthRequest>

And the response that comes back:

<AuthResponse xmlns="urn:zimbraAccount">
<authToken>0_07b4de1326b4.....</authToken>
<lifetime>172800000</lifetime>
<prefs>
<pref name="zimbraPrefTimeZone Id">(GMT -08.00) Pacific Time (US &amp; Canada)</pref>
</prefs>
</AuthResponse>

Am I correct in assuming that if I got an authToken back from the server, that the authrequest succeeded? If so, why no sessionID? All of the documentation I've read suggests that one should be present..

Thanks!

[dkarp]

My guess is that the ZCS server you're authing to doesn't believe that the account is homed there. Check your hostnames.

[hillman]

I tried changing the account string from 'user' to 'user@servername', but that made no difference. I only have one server, so all users are in the same place. Is there anything else that might instruct the SOAP server not to create a session? The Zimbra server is running in 'both' mode for http, but the soap request is coming in via http (I don't know whether it supports https). Will the Zimbra SOAP server refuse to issue a sessionID on an http connection if 'both' mode is on?

[hillman]

The problem turned out to be in the <Soap:Header> that was being passed along with the authRequest. A '<nonotify/> flag was being passed, which, according to the documentation, just means "don't notify about not messages/events in this session", but perhaps it changed somewhere along the line because in my case it was preventing a sessionID from being assigned. Once I removed the <nonotify/>, logins started working.

Hopefully this helps someone else one day because I spent a lot of hours of trial and error figuring that one out..

[ldcl289]

It doesn't work!!
My request don't has a <nonotify/>, in the header is only "<context xmlns="urn:zimbraAccount"/><session/>". I try everything that google tellme and nothing!!