martin,
what was the conclusion regarding your stale nonce param patch?
i would do it so that if www or proxy_authorize function returns -4
(stale nonce) then i would call www or proxy_challenge with stale flag
on. it would then cause stale=true to be added to the header.
i don't understand why your patch calls pre_auth, since the request was
already authenticated and it failed due to stale nonce.
-- juha