The header i get is:
"Digest
username=\"testuser\",realm=\"\",nonce=\"...\",uri=\"/\",cnonce=\"...\",nc=00000001,response=\"...\",qop=\"auth\",opaque=\"...\""

(replaced actual hashes with "..."). Note the empty realm.

The chlg_buf[0].pvBuffer that gets fed to s_pSecFn->InitializeSecurityContext()
by Curl_sasl_create_digest_http_message() is:
"realm=\"test_at_example.com\",qop=\"auth\",nonce=\"...\",opaque=\"...\"

So InitializeSecurityContext() does get the realm reported by the server, but
neglects to set it on the request it generates.

-- 
O< ascii ribbon - stop html email! - www.asciiribbon.org

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html