Fix for JM-1109

git-svn-id: http://svn.igniterealtime.org/svn/repos/openfire/trunk@9056 b35dd754-fafc-0310-a699-88a17e54d16e

src/java/org/jivesoftware/openfire/net/SASLAuthentication.java

@@ -218,6 +218,12 @@ public class SASLAuthentication {
                                     token = new byte[0];
                                 }
                             }
+                            if (mechanism.equals("DIGEST-MD5")) {
+                                // RFC2831 (DIGEST-MD5) says the client MAY provide an initial response on subsequent
+                                // authentication. Java SASL does not (currently) support this and thows an exception
+                                // if we try.  This violates the RFC, so we just strip any initial token.
+                                token = new byte[0];
+                            }
                             byte[] challenge = ss.evaluateResponse(token);
                             if (ss.isComplete()) {
                                 authenticationSuccessful(session, ss.getAuthorizationID(),