RE: AW: WebDAV with Windows Vista
"Kevin Wiggen" <[email protected]>
| Newsgroups | gmane.ietf.webdav |
|---|---|
| Message-ID | <03E7D3E231BB7B4A915A6581D4296CC603C5CBC9@NSNOVPS00411.nacio.xythos.com> |
Fun with Vista. I am running Ultimate on my MAC!!!! :)
Mount with http://zerg/testser
One thread seems to do the options to /
OPTIONS / HTTP/1.1
translate: f
User-Agent: Microsoft-WebDAV-MiniRedir/6.0.6000
Host: zerg
Content-Length: 0
Connection: Keep-Alive
To this my server sends 401. The client sends the exact same OPTONS request 8 times, every time Xythos responds:
HTTP/1.1 401 Unauthorized
Server: Apache-Coyote/1.1
WWW-Authenticate: BASIC realm="zerg"
WWW-Authenticate: Digest realm="zerg", stale=false, nonce="a9f913cb2047d78006409618d3c41f77", qop="auth", algorithm="MD5"
Cache-Control: no-cache
Pragma: no-cache
Date: Thu, 15 Mar 2007 15:52:29 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 187
<html><title>Error 401</title><body>
Error: 401
<BR><H1>Forbidden</H1><BR>That action is not authorized. Please ensure that you are authenticated.<BR>
<p><p></p></p>
</body></html>
Finally a OPTIONS comes in that sends security:
OPTIONS / HTTP/1.1
translate: f
User-Agent: Microsoft-WebDAV-MiniRedir/6.0.6000
Host: zerg
Authorization: Digest username="testuser",realm="zerg",nonce="3e55e2b07924328e3e8c8c1510153347",uri="/",cnonce="11b27b4c6344cb7fc960b188486eb50e",nc=00000001,algorithm=MD5,response="2795d64e41bdac842e366f80292f33d6",qop="auth"
Connection: Keep-Alive
Content-Length: 0
And we respond with a 207:
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: XythosSessionID1=[B@8ab08f-1143118060; Expires=Fri, 16-Mar-2007 15:52:37 GMT; Path=/
DAV: 1,2, access-control, ticket, version-control
MS-Author-Via: DAV
Allow: OPTIONS, PROPFIND, PROPPATCH, LOCK, UNLOCK, DELETE, GET, HEAD, MOVE, COPY, ACL, SEARCH
DASL: <DAV:basicsearch>
Accept-Ranges: bytes
Xythos-WFS-Version: Xythos WebFile Server 6.0.43.2
Content-Type: text/html
Content-Length: 0
Date: Thu, 15 Mar 2007 15:52:36 GMT
Then in a different thread (or at least socket connection) the PROPFINDS start coming
PROPFIND /testuser HTTP/1.1
Content-Length: 0
Depth: 0
translate: f
User-Agent: Microsoft-WebDAV-MiniRedir/6.0.6000
Host: zerg
Connection: Keep-Alive
2 of these before it actually sends the security across (so we are 401)
PROPFIND /testuser HTTP/1.1
Content-Length: 0
Depth: 0
translate: f
User-Agent: Microsoft-WebDAV-MiniRedir/6.0.6000
Host: zerg
Connection: Keep-Alive
Authorization: Digest username="testuser",realm="zerg",nonce="fd1c548507916a8357033e683637ecb8",uri="/testuser",cnonce="09531995e94a0c4854bf26b2d8b94588",nc=00000001,algorithm=MD5,response="5f7a62f219add0be995bca7d6d3e21b5",qop="auth"
To which we give the 207
HTTP/1.1 207 Multi-Status
Server: Apache-Coyote/1.1
Set-Cookie: XythosSessionID1=[B@8ab08f-1143118060; Expires=Fri, 16-Mar-2007 15:52:37 GMT; Path=/
Date: Thu, 15 Mar 2007 15:52:36 GMT
Content-Type: text/xml;charset=UTF-8
Content-Length: 1227
<?xml version="1.0" encoding="utf-8" ?>
<D:multistatus xmlns:D="DAV:" xmlns:XS="http://www.w3.org/2001/XMLSchema" xmlns:XSI="http://www.w3.org/2001/XMLSchema-instance" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" xmlns:b="urn:uuid:c2f41010-65b3-11d1-a29f-00aa00c14882/" >
<D:response xmlns:ns-1="http://www.xythos.com/namespaces/StorageServer">
<D:href>http://zerg/testuser/</D:href>
<D:propstat>
<D:prop>
<D:creationdate b:dt="dateTime.tz">2007-02-13T00:54:06Z</D:creationdate>
<D:lockdiscovery></D:lockdiscovery>
<D:displayname><![CDATA[testuser]]></D:displayname>
<D:resourcetype><D:collection/></D:resourcetype>
<D:getlastmodified b:dt="dateTime.rfc1123">Wed, 21 Feb 2007 21:45:08 GMT</D:getlastmodified>
<D:supportedlock><D:lockentry><D:lockscope><D:exclusive/></D:lockscope><D:locktype><D:write/></D:locktype></D:lockentry><D:lockentry><D:lockscope><D:shared/></D:lockscope><D:locktype><D:write/></D:locktype></D:lockentry></D:supportedlock>
<ns-1:sharefromstestuser_x0040_1_x003a_1001 XSI:type="XS:string"><![CDATA[]]></ns-1:sharefromstestuser_x0040_1_x003a_1001>
</D:prop>
<D:status>HTTP/1.1 200 OK</D:status>
</D:propstat>
</D:response>
</D:multistatus>
It then does a PROPFIND to /
PROPFIND / HTTP/1.1
Content-Length: 0
Depth: 0
translate: f
User-Agent: Microsoft-WebDAV-MiniRedir/6.0.6000
Host: zerg
Connection: Keep-Alive
Cookie: XythosSessionID1=[B@8ab08f-1143118060
Well 2 actually which you must 207 (its very similar to what we do above)
It then does a series of PROPFINDS to / and /testuser which we 207 like we do above.
The mount exists. I have seen the problem where I am attempting to mount a location like /testuser/foo/bar where the user does NOT have the security set to PROPFIND / AND /testuser AND /testuser/foo AND /testuser/foo/bar. If this is the case as the server does not send a nice 207 to the client for ANY of those parent directories including / the mount FAILS. This is what my posts to the newsgroups spoke about. I can give a LOT of reasons why a client would not be able to do this, and discussed this with MS but have not been given a response on if/when this would be fixed.
Interesting that when I tried
\\zerg\testuser it never sent an OPTIONS or a PROPFIND to /. I am not sure if this is because it somehow has the OPTIONS cached. I killed all of my IE windows (even though that doesn't mean as much in Vista) and my windows explorer windows and tried again and only saw a PROPFIND to /testuser
Interesting to note that this other model must run on port 80 or 443, at least \\zerg:9999\testuser did not work.
I then created a folder /foo/bar/fee to which testuser only has access to the fee folder and NOT its parents (this fails with the http://zerg/testuser/foo/bar/fee mount as explained above).
I then tried \\zerg\foo\bar\fee and even before I hit return (after I typed \\zerg\foo\) it does a PROPFIND to /foo (which my server 404s due to security). It then does a series of PROPFINDs to / and /foo before it fails without mounting. So I am not sure what this other syntax does except for not doing the OPTIONS request with a different socket, the PROPFIND requests seem to be the same. I guess getting rid of the OPTIONS to / is something :)
I also read the posts you spoke about and it SCARES me when MS employees (at least people pretending to be MS employees) state:
>>> Having said that, there shouldn't be any need to install WebFolders since
>>> the WebDAV redirector has replaced all functionality provided by the
>>> WebFolders. The only thing that WebDAV redirector doesn't support (that
>>> WebFolders DID support) was being able to access WebDAV servers that don't
>>> support OPTIONS at their root.
This is NOT true. While the OPTIONS to root is a problem, the client also needs to PROPFIND all parent directories which in many cases (security, not having the webdav mount point at root, etc) is not true. I didn't take the time to point this out to Walter as I am late and now need to run to work.
Hope this helps,
Kevin
-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of [email protected]
Sent: Thursday, March 15, 2007 3:55 AM
To: Konstantin Breu
Cc: Kevin Wiggen; [email protected]
Subject: Re: AW: WebDAV with Windows Vista
Hi,
I looked around on the web a bit and found a workaround that might work:
http://www.schiller.cc/blog/2007/01/29/bug-in-vistas-webdav-implementation
The steps:
1. Go to "Add a Network Location..."
2. Insert your webdav ressource in the following format:
"\\mywebdav.server@SSL\dav", insert (if applicable) your username by
"Connect using a different username" - and now, your shared folder
should appear :)
Hope it helps :)
Regards,
Erik
----- Oorspronkelijk bericht -----
Van: Konstantin Breu <[email protected]>
Datum: donderdag, maart 15, 2007 10:24 am
Onderwerp: AW: WebDAV with Windows Vista
>
> Hello,
>
> > http://www.vista64.net/forums/vista-general/21946-webdav-web-
> folder-clie
> > nt-msdaipp-dll-supported-vista.html
>
> I have posted there now, too:
> http://www.vista64.net/forums/vista-general/48154-webdav-support.html
> I tried all workarounds posted in the forum in different topics.
> None of
> them worked with my test client...
>
> My first tests were with Vista Business - there I did not see any
> clientserver requests when trying to get the network resource
> connection to the
> webdav site. This was different with Vista Ultimate. There the
> client did
> requests, but then still could not create the connection. I've done
> the test
> now also with the webdav function offered by Apache Tomcat. It's
> just the
> same. It works when the client is running at Windows XP, it does
> not work
> with client running Vista...
>
> Btw, they have a similar "Windows client workaround" like my webdav
> server:http://issues.apache.org/bugzilla/show_bug.cgi?id=40160
>
> Well now... according to the answers in this list it works at some
> Vistaclients of some persons. But when looking to the webdav
> questions at
> http://www.vista64.net it does not work at every client. I will try
> now to
> get better information from Microsoft support (to get some answer
> like "we
> know the problem, it will be fixed with patch xyz"). Is anyone in
> this list
> interested in that? Then I will post it here.
>
> Cheers,
> Konstantin
>
>
>
> -----Ursprüngliche Nachricht-----
> Von: [email protected] [mailto:w3c-dist-auth-
> [email protected]] Im
> Auftrag von Kevin Wiggen
> Gesendet: Dienstag, 13. März 2007 18:37
> An: Konstantin Breu; [email protected]
> Betreff: RE: WebDAV with Windows Vista
>
>
> Basically MS removed the "webfolders" client in Vista and now only has
> the mini-redirector (XP had BOTH and different version depending on
> whether Office was installed).
>
> http://www.vista64.net/forums/vista-general/21946-webdav-web-folder-
> client-msdaipp-dll-supported-vista.html
>
> There are 2 shortcomings of the redirector spoken about here (note
> thatthis is just to get the client to connect, once its connected I
> cannotspeak to other problems):
>
> 1) The client requires the ability to OPTION / (not always true)
> 2) The client will try to walk the chain from / to the mount point
> (there are many reasons the client couldn't do this including
> security).
>
> However if I try to mount /Kevin on a server (and have access to do
> so),it will connect.
>
> Also interesting that some of my follow-up comments were deleted from
> the forum. I guess someone didn't like the extended information I
> gave:)
>
> Kevin
>
> -----Original Message-----
> From: [email protected] [mailto:w3c-dist-auth-
> [email protected]]On Behalf Of Konstantin Breu
> Sent: Tuesday, March 13, 2007 6:46 AM
> To: [email protected]
> Subject: WebDAV with Windows Vista
>
>
> Hello,
>
> @Mac/Linux users: I am sorry for asking **windows** specific questions
> here.
> Just stop reading... ;-)
>
> I have a WebDAV server (J2EE based), there is no problem to use it
> withWindows Explorer (via Network Resource), Internet Explorer (via
> openpage as
> Web folder), Office 2003/2007 when using Windows XP SP2.
>
> But so far I did not have any success when trying the same with
> WindowsVista. Windows Explorer cannot create the connection (but it
> is doing
> requests to the server), Internet Explorer only offers to open it
> as web
> page (GET). Office 2007 also only does GET, when I try to access the
> folders
> an files in the file open dialog. If I enter there a folder address
> (http://.....), it then does a GET against that address, and opens
> thatas
> "document" in Word etc...
>
> My question to the list: is there somebody, who was able to use
> WindowsExplorer/Internet Explorer/Office 2007 (or an older version)
> withWindows
> Vista as WebDAV client? Are there special settings for the client
> side,or
> additional installations, which I have to do? Or are there some
> additional
> requirements for the server, which Vista needs? (for example
> support of
> some
> Properties, Http headers, Authentication method,...) You could also
> sendme
> communication logs, if your server works with Vista, and you do not
> knowwhy.... ;)
>
> If there is somebody, who has the same problem: you can also drop
> me a
> line,
> then I could give you some hints when I have found out more... Of
> courseI
> also searched in the internet for information... I found
> descriptions of
> such problems, some people were describing workarounds, but so far
> theseworkarounds did not help me...
>
> I will also get into contact with Microsoft support, but this will
> takesome
> longer time, as I or my chief will have to pay for it. I will also do
> tests
> with other clients (for example WebDrive), and other servers (for
> example
> Slide, Tomcat), to see how they are working when the client OS is
> Vista...
>
> Cheers,
> Konstantin
>
> P.S. I was testing so far with Vista Business, but I have access to
> allversions.
>
>
>
>
>
>
>