WebDAV with Authentication through Zebedee

"Brent Sterling" <[email protected]> Fri, 13 Feb 2004 16:13:45 -0500
Newsgroups gmane.comp.security.zebedee.general
Message-ID <[email protected]>
Hello, 

 

I apologize if this question has been answered before.  I browsed through
the archives but I'm pretty sure the search isn't working so it's quite
possible I missed something while browsing. 

 

I've been a long-time user of Zebedee for tunneling XP's Remote Desktop
feature.  Recently I've been experimenting with using Zebedee for tunneling
a WebDAV connection.  My high level understanding is that WebDAV is
essentially an extension to HTTP.  On the server side Microsoft's IIS
supports WebDAV and it's built into XP on the client side.  

 

I have been able to setup a WebDAV folder in IIS and connect to it through
Zebedee from an XP client using the "Anonymous Login" setting in IIS.
However, when I change the folder security to require Basic Authentication I
cannot connect.  It continually prompts me for a userid and password even
though I'm entering valid credentials.  When I attempted this same scenario
with Zebedee out of the picture and a big hole in my firewall, I was able to
enter valid credentials and login just fine.  

 

In summary:

1)       Zebedee Tunnel - WebDAV Anonymous Login - Works

2)       No Zebedee - WebDAV Basic Authentication - Works

3)       Zebedee Tunnel - WebDAV Basic Authentication - Doesn't Work

 

Because of number 1) I'm fairly sure my basic tunnel setup is fine.  Because
of number 2) I'm fairly sure my WebDAV server and client setup is fine.  I'm
hoping that maybe I just have something configured wrong in Zebedee when
this additional authentication is needed.  

 

My Zebedee configuration is fairly straight-forward:

 

Server:

verbosity 1

server true                     # Yes, it's a server!

detached true                # Convert to daemon if possible

serverport 1234

target myserver

redirect 54321                # WebDav

compression zlib:9         # Allow maximum Zlib compression

keylength 256                # Allow key length up to 256 bits

 

Client Command Line:

zebedee -d -T 1234 80:www.mydomain.com:54321

 

Of course I point the webdav client to http://localhost/sharedfoldername and
the web server is setup to listen to port 54321.  Again it works for
Anonymous but not for Basic Authentication.

 

Any help that could be provided would be greatly appreciated!  Thanks!