10.6 webdav followup

I was asking for basic setup information for webdav a while back and got some helpful information (mostly the pointer to the Web Tech Admin guide which I had somehow not seen).
I have now set up several realms, one for each afp share that I have set up.
Currently, If I enter: https://domain.com, I can type in a username and password, and I will get a dav folder which shows the contents of /Library/WebServer/Documents/. Works just fine.
If I enter: https://domain.com/Documents, or https://domain.com/documents, I get this:
There was an error connecting to the server "domain.com." Check the server name . . .
When I look at each shared folder in the finder, the www user has read/write access, which sounds correct. I'm not finding anything in the interface that allows me to either un-share the normal web documents folder or make these other folders viewable. I'm likely missing something silly, because that was what was holding me up getting this far.
Also, I'm guessing that the realms gui is saving the standard dav.conf file somewhere? I've found where this should be for 10.6 Client, but not for 10.6 Server.
Thanks for any help, Ian
p.s. - Here's the previous post if you're interested: http://discussions.apple.com/thread.jspa?messageID=12306517

Currently, If I enter: https://domain.com, I can type in a username and password, and I will get a dav folder which shows the contents of /Library/WebServer/Documents/. Works just fine.
If I enter: https://domain.com/Documents, or https://domain.com/documents, I get this:
There was an error connecting to the server "domain.com." Check the server name . . .
if domain.com has the site root of /Library/WebServer/Documents
Then domain.com/documents would load /Library/WebServer/Documents/Documents
This folder probably does not exist.
Your site root should probably point to the folder you use an an AFP sharepoint.

Similar Messages

C: drive filling up after using WebDAV ("Remote dr...

Hi,
the C: drive on my E55 had very low free space at some point. I started the file manager and the memory details reported "32 MB" for "Other files". I looked around on C: using the file manager, but didn't found anything. I removed and reinstalled some apps, but it wasn't any better after this. I tried to find a setting which could be responsible for storing many stuff on C:, without luck.
Then I installed X-plore and set it to show me all files (hidden and system files). I found a "rsfw_cache" directory with a lot of big files without sensible names in it. I just deleted it.
Then I found out that it was created again and a large file was in there. I opened the file and saw a picture that I had taken with the camera and uploaded to the WebDAV server. I uploaded another picture which also showed up in this directory.
So it looks like even just uploading a file results in a local copy in a hidden cache directory which is not removed automatically, and even can't be removed on user request or with the file manager. So I gues that just _using_ the remote drive will break the device at some point, because it wouldn't even be possible to receive text messages when C: is full. Major bug, I think (at least I would handle it like a major bug, and I work as a developer for a quite complex firmware for an embedded device).
I don't know what firmware versions or models are affected. This is an E55 with firmware 034.001. Is this a known bug that will be fixed in the next firmware? Will there be a new firmware version at all, as the E55 seems to be discontinued now?
Another question: "Other files" still shows 14 MB. X-plore states that there are only 4,5 MB used on C:. Can some people with the knowledge tell me where the remaining 10 MB could be located and post some info what directories can be safely removed without losing non-recoverable data (temporary files, cache files etc.)? I already deleted the cache in the internal web browser and in Opera mobile.

At this point I think you should get Applejack...
http://www.versiontracker.com/dyn/moreinfo/macosx/19596
After installing, reboot holding down CMD+s, (+s), then when the DOS like prompt shows, type in...
applejack AUTO
Then let it do all 5 of it's things.
At least it'll eliminate some questions if it doesn't fix it.
The 5 things it does are...
Correct any Disk problems.
Repair Permissions.
Clear out Cache Files.
Repair/check several plist files.
Dump the VM files for a fresh start.
Also, open Console in Utilities, and watch for clues if yhat doesn't help.

Improved user experience transferring from APF to webDAV volume

We've all experienced how files that we drag from our Desktops and drop on folders on the same volume are "received" at their destination and "lost" at their origin. They move.
Users in my organization desire a similar experience when dragging files from their Desktops to folders NOT on the same volume, particularly remote volumes; or ones mounted using a different protocol, like http (webDAV to be exact)--whether on same volume or not. They prefer not having to dispose of needlessly remnant files on their Desktops.
I'm responsible for providing a solution that delivers this experience. I suspect this will require an Applescript.
I have written one that is basically functional. It calls a handler within a folder action to delete files still selected after copying of them to the attached folder completes.
I include my script below. My interest in posting here is twofold.
First: maybe someone can help me make this script work better. I'm still learning, and I haven't gotten it to handle important cases properly.
Second: I wonder whether this has not already been done. I've looked at MacScripter, Applescriptsource, Apple Discussions, and certain individual scripters' sites; but keywords I've come up with haven't gotten me results.
In advance and for any assistance, thanks!
Here is my script. I know it fails if I get an overwrite dialog as a copy operation begins.
If in the Finder, deselection occurs or selection is changed as script runs, no files or wrong files get deleted. I've also had the script delete a file that never got copied to its destination when a permissions dialog came up.
I'd rather no one actually run this script. Just examine it.
The script gets attached to a webDAV site's icon that appears on the Desktop once connection is made. This seems to work like a folder; hence my use of folder actions.
That icon goes away if I disconnect, but I would need the script to work every time connection is made. There are probably other issues.
on adding folder items to this_folder after receiving these_items
call()
end adding folder items to
on call()
tell application "Finder"
activate
set fileList to selection
repeat with theFile in fileList
delete theFile
end repeat
end tell
end call

This OS behavior is there for a reason.
Good question. Thanks for noticing my post at all much less thinking critically on the subject.
webDAV site is to hold users' working folders. In our case, there will be a lot of dragging from Home folders (including Desktop) to webDAV.
The experience will naturally be compared with that of dragging files to the usual place for working files: a local AFP volume. Since drags to webDAV are going to fail by comparison on speed, I'd like to deliver comparability of the "move" experience.
What if your users want to copy (not move) an item to
a network volume?
As for dragging to other volumes, only the webDAV site would have the folder action. I should have made it clear: I'm talking about getting this functionality only in the case of users accessing their webDAV-hosted working folders.
I can understand readers thinking my aim was to change OS behavior. My fault, the vagueness on this point.
Anyway, Cyclosaurus, don't get me wrong. It relieves me know about the command-drag feature--that's great!

Authentication to XML DB via WebDAV and SSO

Hi,
Is there any way to be authentified by XML DB via WebDAV and SSO ?
If the access to our infrastructure of database servers is controled by SSO, once I'm authentified by OID (SSO), is it possible to pass that authentification to XML DB through standard port 8080 ?
Thank you for your help

This is planned for a future (not 10g) release

Guide to setting up WebDAV for Windows XP clients

I've recently set up an XServe as a Windows domain controller, and was looking to WebDAV as an easy way of setting up remote access to certain shared files. However, it was not as straightforward as it seems - Windows is somewhat fickle about WebDAV and the Mac OS X manual states that "Microsoft platforms use an authentication mechanism that may make it difficult or impossible to mount WebDAV volumes from Mac OS X" (Web Technologies PDF manual, p. 45). After a great deal of scouting on the internet, I managed to get it working and thought I'd better share my method, since it's not all that straightforward. It's been mentioned on the Apple Forums before, but I don't think it was resolved. Much of this information comes from Mac OS X Hints but is updated in accordance with my experiences. (Some line breaks may be inserted by accident - make sure that lines are correct or you could have syntax errors). By default, Windows XP uses NTLM authentication for WebDAV access - you know this when it keeps popping back up with a password box, with the username in the form domain\username. This circumvents that, although I'm a little sketchy on the details - this is a compiled guide, based on my admittedly humble understanding of the authentication protocols.
1. Enable mod_encoding and mod_headers in the Modules panel of the Web service in 'Server Admin'.
2. Make a backup copy of your httpd.conf file (the main Apache configuration file):
% cd /private/etc/httpd
% sudo cp httpd.conf httpd.conf.backup
Uncomment the following two lines in httpd.conf:
AddModule mod_headers.c
AddModule mod_encoding.c
3. (The following from benoitc's macosxhints.com article.) Paste the following in at the end of /private/etc/httpd/httpd.conf:
# Set DAVLockDB for webdav support
DAVLockDB /private/var/run/davlocks/DAVLockDB
# Fix header for webdav
BrowserMatch "^WebDAVFS/1.[012]" redirect-carefully
BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully
BrowserMatch "Microsoft-WebDAV-MiniRedir/5.1.2600" redirect-carefully
BrowserMatch "^WebDrive" redirect-carefully
BrowserMatch "^WebDAVFS" redirect-carefully
<IfModule mod_headers.c>
Header add MS-Author-Via "DAV"
</IfModule>
<IfModule mod_encoding.c>
EncodingEngine on
NormalizeUsername on
</IfModule>
4. Create the folder you want to share with WebDAV:
% sudo mkdir /Library/WebServer/Documents/dav
% sudo chmod -R 775 /Library/WebServer/Documents/dav
Open httpd.conf again and zoom down to the end of the file and add this text (make sure you're consistent if you change the folder name to something else):
Alias /dav /Library/WebServer/Documents/dav
<Location /dav>
DAV On
AuthType Basic
AuthName "WebDAV Restricted"
AuthUserFile /private/etc/httpd/passwords/webdav.access
require valid-user
Order allow,deny
Allow from all
</Location>
5. Create the password file and the user:
% sudo mkdir /private/etc/httpd/passwords
% sudo htpasswd -c /private/etc/httpd/passwords/webdav.access davuser
Provide a password when prompted.
6. Restart apache:
% sudo apachectl graceful
This is all you need to do on the OS X box. However, I found that this alone didn't work - I was trying to use 'basic' authentication (I tend to start easy, get that working, then add complexity/security later), which has been turned off by default in Windows XP Service Pack 2. XP also does not seem to support SSL encryption for WebDAV access.
7. To get the above to work with Windows XP Service Pack 2, back up the Windows registry and add the following DWORD key with regedit.exe:
HKEYLOCALMACHINE\SYSTEM \CurrentControlSet\Services \WebClient\Parameters\UseBasicAuth
Set the value to "1", close regedit.exe and reboot your PC.
8. Open Internet Explorer, select Open... from the File menu, enter http://ip.address.of.server/dav and tick the 'Open as Web Folder' option.Press OK and enter the username and password you set up with in step 5.
All improvements/comments are welcome - good luck!
XServe Mac OS X (10.4.4)

Well it says "System Requirements: Windows XP or later"
So I assume that means that it would be installed on the Windows partition.
It also says "If you do not have any Boot Camp drivers installed, it will install version 2.1 drivers onto your already installed Windows OS." So doesn't that mean I could use the download instead of the disk to install the drivers? Or is there more to it?

Secured WebDAV Mounted Volume Authorization Issues

I use a secure WebDAV mounted volume from myDisk.se and up until the latest Security Update have had zero issues being able to manipulate files and folders as I would on a normal volume. However, since the installation of the Security Update (2009-004 (PowerPC) 1.0) I find weird things happening with this mounted volume:
1) I am able to mount the secured WebDAV share using my security credentials.
2) I can create a default "untitled" folder but when I try to change its name, the WebDAV authorization dialog pops up and despite entering the same credentials (why, I am not sure as the volume has already been properly credentialed in order to be mounted), access is denied.
3) Trying to create a file within a folder on the mounted WebDAV volume I previously created pre-update causes the same authorization issue.
I have no other WebDAV shares I can try to mount from any other companies so I am not sure if this is a myDisk issue or one borne from the Security Update. I am not a .Mac/MobileMe user and that info is not filled out in System Preferences. The internal hard drive has been meticulously maintained with Disk and Permissions repair being run both before and after each and every software update installed. Likewise, the volume's structure is also checked both before and after and shows no need for repairs.
Any ideas? Perhaps there is a corrupted file somewhere that's affecting the authorizations needed by this third-party WebDAV volume?
The machine that has this problem is the last model iBook G4/1.33GHz 12" display, 1.5GB RAM, and a 100GB 5400rpm HD which replaced the stock OEM 40GB 4200rpm drive about one year ago.
I'm not willing to do an Archive and Install at this point as the loss of the WebDAV access to my online volume is not critical. Inconvenient as heck but not to the point where I'm willing (or able) stop my normal work to spend the hours it will take to get WebDAV access back.
Thanks in advance for any insights.

same problem here with webdav, I can't mount my idisk from university network on Mac Pro 10.5.3 (although it mounts fine from home network on both ibook and PMG5 10.5.3). Everything was fine with 10.5.2 and I already re-installed 10.5.3 combo. Other bugs as well with .Mac prefs (keeps crashing, sometimes it shows the available space on idisk but still no mounting, with error -35 or -8086), but .Mac sync is OK
Jun 11 12:34:21 webdavfs_agent[579]: mounting as authenticated user
Jun 11 12:34:22 kernel[0]: webdav server: http://idisk.mac.com/[username]/: connection is dead
Jun 11 12:34:22 KernelEventAgent[75]: tid 00000000 received VQ_DEAD event (32)
Jun 11 12:34:22 kernel[0]: webdav_sendmsg: sock_connect() = 61
Jun 11 12:34:22 KernelEventAgent[75]: tid 00000000 type 'webdav', mounted on '/Volumes/[username]', from 'http://idisk.mac.com/[username]/', dead
Jun 11 12:34:22 kernel[0]: webdav_sendmsg: sock_connect() = 61
Jun 11 12:34:22 KernelEventAgent[75]: tid 00000000 found 1 filesystem(s) with problem(s)
Jun 11 12:34:22 kernel[0]: webdav_sendmsg: sock_connect() = 61
Jun 11 12:34:52: --- last message repeated 1 time ---

Unable to edit Excel file via WebDAV in IE

LS,
Aim
To be able to open an Excel file in Oracle Portal via IE for editing (ergo, if changed it needs to be saved in the same location where it resides = database)
What have we done so far
OraDAV has been implemented (basic manner), a pagegroup has been created in Oracle Portal for security, next we stored some Excel files for test purposes.
Opening and editing using Windows Explorer (when testing) works fine, but opening from browser (Internet Explorer) opens Excel-file in read-only mode!
Workaround
Create windows shortcuts to Excel files in the OraDAV Webfolder, shortcuts are then placed in a public Windows-share which is running on a workstation.
Accessing these shortcuts from both Windows Explorer and Internet Explorer works fine then.
But...
Unfortunately, implementing a windows share on a server is considered to be not an option by the network security team, and it's also not an option to continue using a workstation for that purpose.
What does Metalink say (we created TAR for this)
CLARIFICATION
====================
This issue happens on WEBDAV.
Using=>Windows Explorer it works fine.
Using=>Internet Explorer it does not do as the customer aspected.
Webdav:
Using=>Windows Explorer
going to folder
http://<machine>:7778/dav_portal/.../QA1.XLS
double clicked QA1.XLS and this opens in Microsoft Excel.
After made modifications the file is saved correctly without any issue.
Using=>Internet Explorer
Calling the
URL:http://<machine>:7778/.../QA1.XLS
the file QA1.XLS opens within Internet Explorer the Microsoft Excel plugin.
Problem is it the file opened in read-only mode and when you click save it wants to save
in local drive.
ISSUE VERIFICATION
===================
Verified the issue by the OWC session.
RESEARCH
=========
TESTCASE
I have tested the same issue on 9.0.2.3 and 10.1.2 portal versions.
They are all behaving the same.
CAUSE DETERMINATION
====================
This is intended behaviour.
CAUSE JUSTIFICATION
====================
Details => http://www.webdav.org
http://portalstudio.oracle.com/pls/ops/docs/FOLDER/COMMUNITY/OTN_CONTENT/MAINPAGE/PUBLISH_CONTMGMT/TECHNOTE_WEBDAV.HTML
What does Portal documentation say
Source: Oracle9iAS Portal Release 2 âTechnical Overview
An Oracle White Paper; April 2002; Page 17
=======================================================
Integrating with the desktop
File-type item content can also be published to the portal repository via the Webbased Distributed Authoring and Versioning (WebDAV) protocol. Using a WebDAV client such as Windows Explorer, a portal page group can be mapped as a Web Folder. Users can then simply drag and drop content, files, and folders between portal pages and the desktop. File-type items can also be opened, edited, and saved directly from WebDAV desktop applications like MS Office 2000.
Thus...
Even though Metalink is implying it is not possible, one would think it IS possible, since IE is also a valid WebDAV client.
Bottom line
Does anyone know how to set up Portal in combination with WebDAV to ensure editing of Excel files will happen via Internet Explorer AND changes will be saved back onto the original location
Thanks, Patrick

hi patrick,
this problem is not solvable on the serverside since this is a desktop integration problem. since you want to use excel as your editor you have to use excel's client side software.
oracle drive purely addresses desktop integration and is not meant to be a server side component. it is a webdav client and for that only ensures that the communication between the client and the portal server has as much useful functionality as possible.
the only other option that i see is downloading the document to the client, update it and copy it back up to the portal server, which is cumbersome.
all webdav clients are client side software that is either shipped with the OS (MS webfolders) or needs to be installed on the client (oracle drive).
you could check if there is software availble that is an excel plug-in for internet explorer which at the same time talks webdav to portal. not sure if this exists ?
regards,
christian

EFS Encrypted Files over home workgroup network via WebDAV avoiding Active Directory fixing Access Denied errors

This is for information to help others
KEYWORDS:
- Sharing EFS encrypted files over a personal lan wlan wifi ap network
- Access denied on create new file / new fold on encrypted EFS network file share remote mapped folder
- transfer encryption keys / certificates
- set trusted delegation for user + computer for EFS encrypted files via
Kerberos
- Windows Active Directory vs network file share
- Setting up WinDAV server on Windows 7 Pro / Ultimate
It has been a long painful road to discover this information.
I hope sharing it helps you.
Using EFS on Windows 7 pro / ultimate is easy and works great. See
here and
here
So too is opening + editing encrypted files over a peer-to-peer Windows 7 network.
HOWEVER, creating a new file / new folder over a peer-to-peer Windows 7 network
won't work (unless you follow below steps).
Typically, it is only discovered as an issue when a home user wants to use synchronisation software between their home computers which happens to have a few folders encrypted using windows EFS. I had this issue trying to use GoodSync.
Typically an "Access Denied" error messages is thrown when a \\clientpc tries to create new folder / new file in an encrypted folder on a remote file share \\fileserver.
Why such a EFS drama when a network is involved?
Assume a home peer-to-peer network with 2pc: \\fileserver and \\clientpc
When a \\clientpc tries to create a new file or new folder on a \\fileserver (remote computer) it fails. In a terribly simplified explanation it is because the process on \\fileserver that is answering the network requests is a process working for a user on
another machine (\\clientpc) and that \\fileserver process doesn't have access to an encryption certificate (as it isn't a user). Active Directory gets around this by using kerberos so the process can impersonate a \\fileserver user and then use their certificate
(on behalf of the clienpc's data request).
This behaviour is confusing, as a \\clientpc can open or edit an existing efs encrypted file or folder, just can't create a new file or folder. The reason editing + opening an encrypted file over a network file share is possible is because the encrypted
file / folder already has an encryption certificate, so it is clear which certificate is required to open/edit the file. Creating a new file/folder requires a certificate to be assigned and a process doesn't have a profile or certificates assigned.
Solutions
There are two main approaches to solve this:
     1) SOLVE by setting up an Active Directory (efs files accessed through file shares)
          EFS operations occur on the computer storing the files.
          EFS files are decrypted then transmitted in plaintext to the client's computer
          This makes use of kerberos to impersonate a local user (and use their certificate for encrypt + decrypt)
     2) SOLVE by setting up WebDAV (efs files accessed through web folders)
           EFS operations occur on the client's local computer
           EFS files remain encrypted during transmission to the client's local computer where it is decrypted
           This avoids active directory domains, roaming or remote user profiles and having to be trusted for delegation.
           BUT it is a pain to set up, and most online WebDAV server setup sources are not for home peer-to-peer networks or contain details on how to setup WebDAV for EFS file provision
         READ BELOW as this does
Create new encrypted file / folder on a network file share - via Active Directory
It is easily possible to sort this out on a domain based (corporate) active directory network. It is well documented. See
here. However, the problem is on a normal Windows 7 install (ie home peer-to-peer) to set up the server as part of an active directory domain is complicated, it is time consuming it is bulky, adds burden to operation of \\fileserver computer
and adds network complexity, and is generally a pain for a home user. Don't. Use a WebDAV.
Although this info is NOT for setting up EFS on an active directory domain [server],
for those interested here is the gist:
Use the Active Directory Users and Computers snap-in to configure delegation options for both users and computers. To trust a computer for delegation, open the computer’s Properties sheet and select Trusted for delegation. To allow a user
account to be delegated, open the user’s Properties sheet. On the Account tab, under Account Options, clear the The account is sensitive and cannot be delegated check box. Do not select The account is trusted for delegation. This property is not used with
EFS.
NB: decrypted data is transmitted over the network in plaintext so reduce risk by enabling IP Security to use Encapsulating Security Payload (ESP)—which will encrypt transmitted data,
Create new encrypted file / folder on a network file share - via WebDAV
For home users it is possible to make it all work.
Even better, the functionality is built into windows (pro + ultimate) so you don't need any external software and it doesn't cost anything. However, there are a few hotfixes you have to apply to make it work (see below).
Setting up a wifi AP (for those less technical):
   a) START ... CMD
   b) type (no quotes): "netsh wlan set hostednetwork mode=allow ssid=MyPersonalWifi key=12345 keyUsage=persistent"
   c) type (no quotes): "netsh wlan start hostednetwork"
Set up a WebDAV server on Windows 7 Pro / Ultimate
-----ON THE FILESERVER------
   1 click START and type "Turn Windows Features On or Off" and open the link
       a) scroll down to "Internet Information Services" and expand it.
       b) put a tick in: "Web Management Tools" \ "IIS Management Console"
       c) put a tick in: "World Wide Web Services" \ "Common HTTP Features" \ "WebDAV Publishing"
       d) put a tick in: "World Wide Web Services" \ "Security" \ "Basic Authentication"
       e) put a tick in: "World Wide Web Services" \ "Security" \ "Windows Authentication"
       f) click ok
       g) run HOTFIX - ONLY if NOT running Windows 7 / windows 8
KB892211 here ONLY for XP + Server 2003 (made in 2005)
KB907306 here ONLY for Vista, XP, Server 2008, Server 2003 (made in 2007)
2 Click START and type "Internet Information Services (IIS) Manager"
3 in IIS, on the left under "connections" click your computer, then click "WebDAV Authoring Rules", then click "Open Feature"
       a) on the right side, under Actions, click "Enable WebDAV"
4 in IIS, on the left under "connections" click your computer, then click "Authentication", then click "Open Feature"
       a) on the "Anonymous Authentication" and click "Disable"
       b) on the "Windows Authentication" and click "Enable"
      NB: Some Win 7 will not connect to a webDAV user using Basic Authentication.
        It can be by changing registry key:
           [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WebClient\Parameters]
           BasicAuthLevel=2
       c) on the "Windows Authentication" click "Advanced Settings"
           set Extended Protection to "Required"
       NB: Extended protection enhances the windows authentication with 2 security mechanisms to reduce "man in the middle" attacks
5 in IIS, on the left under "connections" click your computer, then click "Authorization Rules", then click "Open Feature"
       a) on the right side, under Actions, click "Add Allow Rule"
       b) set this to "all users". This will control who can view the "Default Site" through a web browser
       NB: It is possible to specify a group (eg Administrators is popular) or a user account. However, if not set to "all users" this will require the specified group/user account to be used for logged in with on the
clientpc.
       NB: Any user account specified here has to exist on the server. It has a bug in that it usernames specified here are not validated on input.
6 in IIS, on the left under "connections" click your computer, then click "Directory Browsing", then click "Open Feature"
       a) on the right side, under Actions, click "Enable"
HOTFIX - double escaping
7 in IIS, on the left under "connections" click your computer, then click "Request Filtering", then click "Open Feature"
       a) on the right side, under Actions, click "Edit Feature Settings"
       b) tick the box "Allow double escaping"
     *THIS IS VERY IMPORTANT* if your filenames or foldernames contain characters like "+" or "&"
     These folders will appears blank with no subdirectories, or these files will not be readable unless this is ticked
     This is safe btw. Unchecked (default) it filters out requests that might possibly be misinterpreted by buggy code (eg double decode or build url's via string-concat without proper encoding). But any bug would need to be in IIS basic
file serving and this has been rigorously tested by microsoft, so very unlikely. Its safe to "Allow double escaping".
8 in IIS, on the left under "connections" right click "Default Web Site", then click "Add Virtual Directory"
       a) set the Alias to something sensible eg "D_Drive", set the physical path
       b) it is essential you click "connect as" and set
this to a local user (on fileserver),
       if left as "pass through authentication" a client won't be able to create a new file or folder in an encrypted efs folder (on fileserver)
             NB: the user account selected here must have the required EFS certificates installed.
                        See
here and
here
        NB: Sharing the root of a drive as an active directory (eg D:\ as "D_Drive") often can't be opened on clientpcs.
      This is due to windows setting all drive roots as hidden "administrative shares". Grrr.
       The work around is on the \\fileserver create an NTFS symbollic link
          e.g. to share the entire contents of "D:\",
                on fileserver browse to site path (iis default this to c:\inetpub\wwwroot)
                in cmd in this folder create an NTFS symbolic link to "D:\"
                so in cmd type "cd c:\inetpub\wwwroot"
                then in cmd type "mklink /D D_Drive D:\"
        NB: WebDAV will open this using a \\fileserver local user account, so double check local NTFS permissions for the local account (clients will login using)
         NB: If clientpc can see files but gets error on opening them, on clientpc click START, type "Manage Network Passwords", delete any "windows credentials" for the fileserver being used, restart
clientpc
9 in IIS, on the left under "connections" click on "WebDAV Authoring Rules", then click "Open Feature"
       a) click "Add authoring rules". Control access to this folder by selecting "all users" or "specified groups" or "specified users", then control whether they can read/write/source
       b) if some exist review existing allow or deny.
           Take care to not only review the "allow access to" settings
           but also review "permissions" (read/write/source)
       NB: this can be set here for all added virtual directories, or can be set under each virtual directory
10 Open your firewall software and/or your router. Make an exception for port 80 and 443
       a) In Windows Firewall with Advanced Security click Inbound Rules, click New Rule
             choose Port, enter "80, 443" (no speech marks), follow through to completion. Repeat for outbound.
          NB: take care over your choice to untick "Public", this can cause issues if no gateway is specified on the network (ie computer-to-computer with no router). See "Other problems+fixes"
below, specifically "Cant find server due to network location"
       b) Repeat firewall exceptions on each client computer you expect to access the webDAV web folders on
HOTFIX - MAJOR ISSUE - fix KB959439
11 To fully understand this read "WebDAV HOTFIX: RAW DATA TRANSFERS" below
      a) On Windows 7 you need only change one tiny registry value:
           - click START, type "regedit", open link
           -browse to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MRxDAV\Parameters]
           -on the EDIT menu click NEW, then click DWORD Value
           -Type "DisableEFSOnWebDav" to name it (no speech marks)
           -on the EDIT menu, click MODIFY, type 1, then click OK
           -You MUST now restart this computer for the registry change to take effect.
      b) On Windows Server 2008 / Vista / XP you'll FIRST need to
download Windows6.0-KB959439 here. Then do the above step.
         NB microsoft will ask for your email. They don't care about licence key legality, it is more to keep you updated if they modify that hotfix
12 To test on local machine (eg \\fileserver) and deliberately bypass the firewall.
      a) make sure WebClient Service is running
            (click START, type "services" and open, scroll down to WebClient and check its status)
      b) Open your internet software. Go to address "http://localhost:80" or "http://localhost:80"
            It should show the default "IIS7" image.
            If not, as firewall and port blocking are bypassed (using localhost) it must be a webDAV server setting. Check "Authorization Rules" are set to "Allow All Users"
      c) for one of the "virtual directories" you added (8), add its "alias" onto "http://localhost/"
                e.g. http://localhost/D_drive
            If nothing is listed, check "Directory Browsing" is enabled
13 To test on local machine or a networked client and deliberately try and access through the firewall or port opening of your router.
      a) make sure WebClient Service is running
            (click START, type "services" and open, scroll down to WebClient and check its status)
      b) open your internet software. Go to address "http://<computer>:80" or "http://<computer>:80".
              eg if your server's computer name is "fileserver" go to "http://fileserver:80"
              It should show the default "IIS7" image. If not, check firewall and port blocking.
              Any issue ie if (12) works but (13) doesn't, will indicate a possible firewall issue or router port blocking issue.
     c) for one of the "virtual directories" you added (8), add its "alias" onto "http://<computername>:80/"
               eg if alias is "C_driver" and your server's computer name is "fileserver" go to "http://fileserver:80/C_drive"
               A directory listing of files should appear.
--- ON EACH CLIENT ----
HOTFIX - improve upload + download speeds
14 Click START and type "Internet Options" and open the link
      a) click the "Connections" tab at the top
      b) click the "LAN Settings" button at the bottom right
      c) untick "Automatically detect settings"
HOTFIX - remove 50mb file limit
15 On Windows 7 you need only change one tiny registry value:
      a) click START, type "regedit", open link
    b) browse to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WebClient\Parameters]
       c) click on "FileSizeLimitInBytes"
       d) on the EDIT menu, click MODIFY, type "ffffffff", then click OK (no quotes)
HOTFIX - remove prompt for user+pass on opening an office or pdf document via WebDAV
16 On each clientpc click START, type "Internet Options" and open it
         a) click on "Security" (top) and then "Custom level" (bottom)
         b) scroll right to the bottom and under "User Authentication" select "Automatic logon with current username and password"
         SUCH an easy fix. SUCH an annoying problem on a clientpc
   NB: this is only an issue if the file is opened through windows explorer. If opened through the "open" dialogue of the software itself, it doesn't happen. This is as a WebDAV mapped drive is consdered a "web folder" by windows
explorer.
TEST SETUP
17 On the client use the normal "map network drive"
            e.g. server= "http://fileserver:80/C_drive", tick reconnect at logon
            e.g. CMD: net use * "http://fileserver:80/C_drive"
         If it doens't work check "WebDAV Authoring Rules" and check NTFS permissions for these folders. Check that on the filserver the elected impersonation user that the client is logging in with (clientpc
"manage network passwords") has NTFS permissions.
18 Test that EFS is now working over the network
       a) On a clientpc, map network drive to http://fileserver/
       b) navigate to a folder you know on the \\flieserver is encrypted with EFS
       c) create a new folder, create a new file.
           IF it throws an error, check carefully you mapped to the WebDAV and not file share
              i.e. mapped to "http://fileserver" not "\\fileserver"
           Check that on clientpc the required efs certificate is installed. Then check carefully on clientpc what user account you specified during the map drive process. Then check on the \\fileserver this
account exists and has the required EFS certificate installed for use. If necessary, on clientpc click START, type "Manage Network Passwords" and delete the windows credentials currently in the vault.
       d) on clientpc (through a webDAV mapped folder) open an encrypted file, edit it, save it, close it. On the \\fileserver now check that file is readable and not gobble-de-goup
       e) on clientpc copy an encrypted efs file into a folder (a webDAV mapped folder) you know is not encrypted on \\fileserver. Now check on the \\fileserver computer that the file is readable and not gobble-de-goup (ie the
clientpc decrypted it then copied it).
        If this fails, it is likely one in IIS setting on fileserver one of the shared virtual directories is set to: "pass through authentication" when it should be set to "connect as"
        If this is not readable check step (11) and that you restarted the \\fileserver computer.
19 Test that clients don't get the VERY annoying prompt when opening an Office or PDF doc
      a) on clientpc in windows explorer browse to a mapped folder you know is encrypted and open an office file and then PDF.
            If a prompt for user+pass then check hotfix (16)
20 Consider setting up a recycling bin for this mapped drive, so files are sent to recycling bin not permanently deleted
      a) see the last comment at the very bottom of
this page:
Points to consider:
   - NB: WebDAV runs on \\fileserver under a local user account, so double check local NTFS permissions for that local account and adjust file permissions accordingly. If the local account doesn't have permission, the webDAV / web folder share won't
either.
- CONSIDER: IP Security (IPSec) or Secure Sockets Layer (SSL) to protect files during transport.
MORE INFO: HOTFIX: RAW DATA TRANSFERS
More info on step (11) above.
Because files remain encrypted during the file transfer and are decrypted by EFS locally, both uploads to and downloads from Web folders are raw data transfers. This is an advantage as if data is intercepted it is useless. This is a massive disadvantage as
it can cause unexpected results. IT MUST BE FIXED or you could be in deep deep water!
Consider using \\clientpc to access a webfolder on \\fileserver and copying an encrypted EFS file (over the network) to a web folder on \\fileserver that is not encrypted.
Doing this locally would automatically decrypt the file first then copy the decrypted file to the non-encrypted folder.
Doing this over the network to a web folder will copy the raw data, ie skip the decryption stage and result in the encrypted EFS file being raw copied to the non-encrypted folder. When viewed locally this file will not be recognised as encrypted (no encryption
file flag, not green in windows explorer) but it will be un-readable as its contents are still encrypted. It is now not possible to locally read this file. It can only be viewed on the \\clientpc
There is a fix:
      It is implimented above, see (11) above
      Microsoft's support page on this is excellent and short. Read "problem description" of "this microsoft webpage"
Other problems + fixes
PROBLEM: Can't find server due to network location.
     This one took me a long time to track down to "network location".
     Win 7 uses network locations "Home" / "Work" / "Public".
     If no gateway is specified in the IP address, the network is set to '"unidentified" and so receives "Public" settings.
     This is a disaster for remote file share access as typically "network discovery" and "file sharing" are disabled under "Public"
     FIX = either set IP address manually and specify a gateway
     FIX = or force "unidentified" network locations to assume "home" or "work" settings -
read here or
here
     FIX = or change the "Public" "advanced network settings" to turn on "network discovery" and "file sharing" and "Password Protected Sharing". This is safe as it will require a windows
login to gain file access.
PROBLEM: Deleting files on network drive permanently deletes them, there is no recycling bin
       By changing the location of "My Contacts" or similar to the root directory of your mapped drive, it will be added to recycling bin locations
      Read
here (i've posted a batch script to automatically make the required reg files)
I really hope this helps people. I hope the keywords + long title give it the best chance of being picked up in web searches.

What probably happens is that processes are using those mounts. And that those processes are not killed before the mounts are unmounted. Is there anything that uses those mounts?

Encrypted, sparse disk image stored on WebDAV server: problems mounting

My goal is to have secure, encrypted storage to back up my computer to a remote site. The remote site is an internet hosting provider who provides a lot of disk space and bandwidth, and also serves up WebDAV, for a very small price.
I have created a 100GB sparse disk image, with encryption, and stored it on the remote server. I then mount the directory containing the sparseimage (which is itself password protected using .htaccess) using WebDAV. My plan is now to mount the disk image, and use rsync to copy changes on my computer to the disk image.
This worked perfectly when I tested with a small sparseimage. It was interesting how the OS seems to buffer the changes in chunks: rsync appears to be copying a lot of files super fast, then it stalls as network bandwith suddenly throttles up for a while, and they take turns this way.
Unfortunately, after copying a few hundred MBs into the image, I am now having trouble.
First, when I try to mount the disk image, I see an enormous amount of data start transferring over the network. It literally saturates my broadband connection for at least an hour (I haven't been able to go longer yet). It seems to first download at top speed for a while, then switches to uploading at top speed for awhile. During this time, I notice that a mount_webdav process is consuming large perentages of CPU. However I can't see anything else going on at this point -- the disk image isn't mounted yet, all this thrashing seems to be from the process of the image trying to mount.
So first question: is this normal? Does anyonw know what actually happens when you issue "hdiutil attach" on encrypted sparse images? Does it have to touch and read through everything in the image once or twice? Maybe this is just a Bad Idea™
Second: the webdav server always ends up getting disconnected during this process before the image actually gets mounted. Do you think I'm trying to do something that tests, and exceeds, the limits of WebDAV?
Thanks a million for any help!
PowerBook, 1.33 GHz G4, Aluminum, 17" Mac OS X (10.4.8) The remote server is Debian

A follow up to my MS word document. I found that I created the file in MS word 2000, and I used the Apple File Security for OS 9 to encrypt it. I can't remember the password, and I do not find anything in the key chain listing.
I have Pages 08, but I don't think I can use it if I can't remember the password to unlock this old document. Is there a program to decrypt this without a password?
Thanks,
DaisyMay

How To: Setup WebDAV and Apache2 for Private iCal Publishing

Notes:
This tutorial will not cover the installation of Apache2 or the required modules.
These paths apply to Ubuntu Server, but should work with many Linux distros.
There are other ways to configure your DAV directory. I have chosen to use a sub domain.
For simplicity, I am using Basic HTTP Auth. *THIS IS NOT SECURE!!!* Do not rely on Basic HTTP Auth for true security. For more details: http://httpd.apache.org/docs/2.0/mod/mod_dav.html#page-header
The following commands assume that you will be using sudo or logged in as root.
1. Enable mod_dav and moddavfs: *a2enmod dav_fs*
2. Create a directory for your DAV: *mkdir /var/www/dav*
3. Create a sub domain site: *vim /etc/apache2/sites-available/dav*
4. Enter the following:
NameVirtualHost *
<VirtualHost *>
DocumentRoot /var/www/dav
DirectoryIndex index.php index.html
ServerName dav.yourdomain.com
</VirtualHost>
DavLockDB /usr/local/apache2/var/DavLock
<Location />
Dav On
Order Deny,Allow
AuthType Basic
AuthName "DAV"
AuthUserFile /var/www/user.passwd
Require valid-user
</Location>
5. Create the user.passwd file:
*cd /var/www/*
*htpasswd -c user.passwd*
+Enter username and password when prompted+
6. Reload Apache's config: */etc/init.d/apache2 reload*
You can now publish your calendars to: dav.yourdomain.com.
Enjoy!
-David

How do you set up a webdav?
Lion doesnt know webdav! No Versions... forget the webda(v).
How does look your config?
DNS is correct?
Check with:
hostinfo (IP)
hostinfo (dnsname)
nslookup (IP)
nslookup (dnsname)
Does the user/group exist? can you log in over an other protocoll? like afp?
More informations please...

WebDAV: Excel 2013 truncates the encoded URL at # (%23)

(originally posted in Open Spec forum, but was asked to repost here)
We encountered a problem on our existing WebDAV server with Office 2013. When a file name contains a number sign (aka hash, aka pound sign), Excel truncates the URL at that sign. Note that the URL is properly encoded, i.e. "#" is replaced
with %23.
Word and Powerpoint behave properly and have no issues opening files via URLs containing %23. E.g, for the URL http://server/otcsdav/nodes/1500722/doc1%23end.docx, Word first calls OPTIONS on otcsdav/nodes/1500722, then HEAD otcsdav/nodes/1500722/doc1%23end.docx,
then eventually a GET. The file opens successfully as "doc1#end.docx", gets locked, edited, updated and unlocked.
Excel, however, truncates the URL (http://server/otcsdav/nodes/1500722/excel1%23end.xls), and sends HEAD for /otcsdav/nodes/1500722/excel1, which, of course, returns 404.
Funny enough, double-encoding (i.e. to %2523) seems to work for Excel, but breaks everything else. I.e, with url = "otcsdav/nodes/1500722/excel1%2523end.xls" Excel sends HEAD for "/otcsdav/nodes/1500722/excel1%23end.xls", while Word will
send HEAD for the URL verbatim, i.e. "/otcsdav/nodes/1500722/doc1%2523end.docx"
Does anyone know it it's an Excel bug? is there anything we can do to circumvent this?
P.S.1 Excel 2010 works just fine, the issue first appeared in Excel 2013.
P.S.2 I know that Sharepoint doesn't support "#" in filenames. Our server is NOT Sharepoint, and "#" doesn't seem to be disallowed in WebDAV protocol.

Hi Maria,
This forum is used to discuss questions about Excel for developers, most probably the issue is related to code.
According to your description, it seems the issue doesn't meet the topic. It might be related to how the server analysis the URL and find the corresponding file.
I have moved this thread to "Where is the forum for" forum.
Thanks for your understanding.
Regards,
George.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Issues with WebDav over SSL via Terminal Server when Accessing SharePoint 2013

Hi All,
We have deployed a terminal server from which multiple users access and heavily use SharePoint 2013 (hosted on a separate server). The SharePoint site is published to the internet and is operating over an SSL certificate. Over the last few months we have
been encountering a randomly occurring issue where all the users become unable to use Open with Explorer or mapped drives to access the site. During this time they can still access the site through the browser OK and download files etc. This issue sometimes
reoccurs every few days, although at points it hasn't occurred for a couple of weeks before resurfacing.
Current Terminal Server Config
TS 2008 R2 Enterprise
Site added to Trusted Sites. (have checked during broken time and still recognized as trusted)
Using IE 11, site added as compatibility view
Registries updated as below
reg add HKLM\SYSTEM\CurrentControlSet\Services\WebClient\Parameters /v AuthForwardServerList /t REG_MULTI_SZ /d "*.clientsite.com"
reg add HKLM\SYSTEM\CurrentControlSet\Services\WebClient\Parameters /v BasicAuthLevel /t REG_DWORD /d 2 /f
reg add HKCU\Software\Microsoft\Office\14.0\Common\Internet /v BasicAuthLevel /t REG_DWORD /d 2 /f
registry added for tabprocgrowth added to 2
My test result are below:
Restarting the SharePoint server or the terminal server will resolve the behaviour
until the issue occurs again.
Users on the terminal server can still open the
ttps://clientsite2.harrierhc.com
URL (this url is bound to the same UCC cert) with open with explorer during this time.
While users are unable to access the ttps://clientsite.harrierhc.com
URL, if they access the same site from WebDAV with a separate binding (e.g. ttp://clientsite the behaviour works fine.
All other users not on the terminal server can still use the open with explorer behaviour during this time.
IIS reset on the SP Server & restarting the web client service on the terminal server have no impact
Reimporting the IIS certs have no impact
There are numerous errors in both server’s event logs but none at the time of the issue instigation.
Clearing the IE cached certificates has no impact
Going to IE properties for the site and clicking the ‘Install Certificate’ has no impact
Any ideas or suggestions would be much appreciated. If you need any more info let me know. (sorry for the ttps:// links cant be posted until my account is verified?
Thanks again

Hiya,
are there any load balancers involved?

Synced WebDAV/CalDAV calendars

Does anyone know whether or not the 2.01 update fixes the problem where subscribed/synced calendars in iCal using WebDAV/CalDAV are not shown or synced with MobileMe and iPhone? I have Google calendars and work WebDAV calendars that I can't get to sync through MobileMe.

It does not appear to be supported yet on MobileMe/iCal.
There is a product called BusySync that I tried which does sync your Google Calendar(s) with iCal. It is fully editable in iCal and updates are automatically synced with Google. Best part is that it looks like a local calendar in iCal so it is also synced with MobileMe, and subsequently iPhone/iTouch, and MobileMe on Windows. BusySync is not expensive, but I am still looking for a free solution.
I wish Apple would get their act together. If they offer native CalDAV support in iCal 3.x then they should mirror that functionality in MobileMe.

Will not allow me to add caldav account (Calendar couldn't log in to the CalDAV server "webdav.skedge.me"error message)or I get the not a secure server message with the option to continue...but then it sticks it wont continue

I WISH I HAD NOT UPGRADED...THIS IS A NIGHTMARE. I need to sync my appointment scheduler that is embedded in my website to my ical (which was easily done through publishing with the previous version) since I have upgraded I dont have the option to publish...but can add the cal DAV account, which I tried to do but I get a "Calendar couldn't log in to the CalDAV server “webdav.skedge.me”." error message if I go through edit ccount> add other account in system prefereneces otherwise I get a not secure server warning that will not continue when I select continue if I simply try to add an account using the + sign options at the bottom left of the systems preference pop up window
found a potenital fix (that I think would work if I could understand how to do what they are telling me to do) it said to configure webdav sharing for active directory accounts...tried to follow the instructions...could not understand them (very techy instructions).
FYI to any one that may find it in thier heart to answer this...I AM NOT COMPUTER LITERATE I am a veterinarian not a computer programer...so please but things in terms I can understand...i dont know what root access or server admin means...I dont know how to edit config files or even open directories with terminal ...i dont know what pico is or how to open it on my computer. Thanks
If know one can help can someone please tell me how to un-upgrade..this *****!
thanks
Catherine

Check the date and time in the clock on your computer: (double) click the clock icon on the Windows Taskbar.
* https://support.mozilla.com/kb/Secure+Connection+Failed
You can retrieve the certificate and check who issued the certificate and other details like when it is valid.
* Click the link at the bottom of the error page: "I Understand the Risks"
Let Firefox retrieve the certificate: "Add Exception" -> "Get Certificate".
* Click the "View..." button to inspect the certificate and check who is the issuer.

Most full featured word processor? (table editing, google docs) and webdav on the ipad

Hi All,
So I have had a frustrating time trying to add rows to a table in a word processing document on Google Docs. Are there any word processors that support this? Quickoffice and Documents to Go do not as of this writing. (May 26th, 2011.) at least not that I can determine.
Does Office2HD support this feature? Do any of the word processors?
My current thoughts/what Apple needs to do/
Currently I am thinking about buying Pages and then using Goodreader to open the file in pages, and then saving the pages document to idisk/webdav and then moving it to google docs from idisk/webdav using Goodreader (though it appears you can use Readdledocs too.)
According to the makers of Docsportal, if Pages supported Open With, I could Open With Docsportal and it would be uploaded. Alternatively, Docsportal could simply add idisk or webdav support, but I can understand why they are waiting for Apple to get their act together.
Currently, I have discovered that Quickoffice does support mounting quickoffice as a drive as does goodreader. Docs2Go does not support this feature. This is a nice way to get files in and out. The Mac will support WebDAV for the Mac filesystem as of Lion allowing programs like goodreader or readdledocs to connect to it.
--Sam

I viewed the Office2HD Help file and it seems to support table creation.
http://www.bytesquared.com/products/office/ipad/basic.asp?product=office2pro#ins ert_table
I will post back once I am able to edit a table.
Office2HD as mentioned elsewhere in this forum supports Google Docs.
It does also support WebDAV (mounting as an external drive.) The help file mentions that it now allows you to navigate using the cursor or arrow keys.

10.6 webdav followup

Similar Messages

Maybe you are looking for