Password Authentication Issue with Apple Music After Setting Library Password

[HJH0924]

Hello OwnTone Team,

I have encountered an issue with the OwnTone server where the password authentication is not functioning as expected, particularly with Apple Music.

Environment:

• Host OS: Ubuntu 23.10, Ubuntu22.04
• Client OS: macOS Sonoma 14.4.1

Steps to Reproduce:

1. I compiled the OwnTone server from source with the following steps:

   sudo apt-get update
   sudo apt-get install \
   build-essential git autotools-dev autoconf automake libtool gettext gawk \
   gperf bison flex libconfuse-dev libunistring-dev libsqlite3-dev \
   libavcodec-dev libavformat-dev libavfilter-dev libswscale-dev libavutil-dev \
   libasound2-dev libxml2-dev libgcrypt20-dev libavahi-client-dev zlib1g-dev \
   libevent-dev libplist-dev libsodium-dev libjson-c-dev libwebsockets-dev \
   libcurl4-openssl-dev libprotobuf-c-dev -y
   git clone https://github.com/owntone/owntone-server.git 
   cd owntone-server
   autoreconf -i
   ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-install-user
   make
   sudo make install

   And then set a password in /etc/owntone.conf under the library section and started the OwnTone service:

   systemctl start owntone.service

2. iTunes and Apple Music clients were able to connect to my OwnTone server without entering a password, even though a password was set.

3. I also compiled the OwnTone server from a release package with the following steps:

   sudo apt-get update
   sudo apt-get install \
   build-essential git autotools-dev autoconf automake libtool gettext gawk \
   gperf bison flex libconfuse-dev libunistring-dev libsqlite3-dev \
   libavcodec-dev libavformat-dev libavfilter-dev libswscale-dev libavutil-dev \
   libasound2-dev libxml2-dev libgcrypt20-dev libavahi-client-dev zlib1g-dev \
   libevent-dev libplist-dev libsodium-dev libjson-c-dev libwebsockets-dev \
   libcurl4-openssl-dev libprotobuf-c-dev -y
   wget https://github.com/owntone/owntone-server/releases/download/28.9/owntone-28.9.tar.xz 
   tar -xvf owntone-28.9.tar.xz
   cd owntone-28.9
   autoreconf -i
   ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-install-user
   make
   sudo make install

   And then set a password in /etc/owntone.conf under the library section and started the OwnTone service.

Results:

• After setting a password, the iTunes client prompts for the password and connects normally.
• However, when using Apple Music, it prompts for a password but then displays an error message indicating the password is incorrect, even though the correct password was entered. Apple Music can connect without issues when no password is set.

Expected Behavior:

• Both iTunes and Apple Music clients should be able to connect to the OwnTone server after entering the correct password.

Observed Behavior:

• The Apple Music client fails to connect after entering the correct password, indicating a potential issue with password handling or authentication.

Additional Information:

• I have ensured that the password is set correctly in the configuration file.
• The issue does not occur with the iTunes client, suggesting it may be specific to Apple Music's implementation.

I would appreciate any guidance or assistance in resolving this issue. Thank you for your time and support.

Best regards!

[ejurgensen]

Thanks for the report. I don't have a Mac, so it's going to be hard to debug. @hacketiwack can you reproduce this issue? Remember to set "trusted_networks" to something that won't permit password-less connection, e.g. "localhost" or "none".

[hacketiwack]

I will check that in a few days as I don't have access to my setup right now.