You are viewing a plain text version of this content. The canonical link for it is here.
Posted to slide-user@jakarta.apache.org by aaz <z...@interoperate.com> on 2004/05/26 23:47:09 UTC
webdav security
Hi,
Will MS WORD bring up an HTTP login prompt if it needs authentication to a
webdav resource?
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: webdav security
Posted by Julian Reschke <ju...@gmx.de>.
Luke Noel-Storr wrote:
>> Well, not always.
>>
>> With Office2000 on W2000, it actually does protocol discovery, prompts
>> for credentials, and then opens read/write.
>>
>> With Office2003 on W2000, *sometimes* it just opens it read-only (with
>> the content from IE's cache), but sometimes it starts sending OPTIONS
>> requests (both to the document and it's parent collection).
>
>
> That's interesting.
>
> I've tried with several versions of office on windows, and when opening
> a document from a <href> style link, they've always just opened it as
> they would any document linked to from a webpage. Also, when looking
> for a solution to this it seems that everyone else has experienced the
> same thing.
>
> I'd be interested to hear more about this as one of the problems we've
> been having is opening the documents in word so they can be save
> straight back to slide.
As Wiley Jacobs pointed out (thanks!), Microsoft has documented the
behaviour in <http://support.microsoft.com/?kbid=838028>.
This also explains the behaviour I see with O2K + service packs:
"To work around this drawback, a modified approach is introduced in
Office 2000 Service Release 1. Instead of trying to bind by using a
publishing moniker at load time, Office binds to the document by using
the typical read-only URL moniker that is provided by Internet Explorer.
When you want to save the file, Office tries to switch to the publishing
moniker to perform a save back to the server, if the server supports Web
publishing. If re-authentication is required because of the change in
session, you are prompted for credentials on save instead of on open. If
you want to read the file without saving the file, Office avoids the
costly switch-of-context to a publishing moniker. Office also avoids a
server lock on the resource. This is a compromise approach."
I'm still investigating the following questions for O2003, though:
1) When sending the OPTIONS requests for Protocol Discovery and getting
back 401 status codes, the authentication dialog does not appear on some
machines. Office just keeps retrying a few times, then gives up and
opens read-only.
2) For some reason, Office sends OPTIONS requests to both the parent
collection and the actual document. The former seems to be useless and a
waste of time.
Does anybody happen to know more about these issues? Are they possibly
known issues (documented in Microsoft's KB)?
Best regards, Julian
--
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: webdav security
Posted by Luke Noel-Storr <lu...@dsl.pipex.com>.
On 27 May 2004, at 19:06, Julian Reschke wrote:
> Luke Noel-Storr wrote:
>> If you just open via a link then it doesn't open it in word as a
>> document from webdav, it just opens it as it would any other word
>> document linked to from a website (ie: it downloads a temp copy and
>> then opens that read only in Word).
>
> Well, not always.
>
> With Office2000 on W2000, it actually does protocol discovery, prompts
> for credentials, and then opens read/write.
>
> With Office2003 on W2000, *sometimes* it just opens it read-only (with
> the content from IE's cache), but sometimes it starts sending OPTIONS
> requests (both to the document and it's parent collection).
That's interesting.
I've tried with several versions of office on windows, and when opening
a document from a <href> style link, they've always just opened it as
they would any document linked to from a webpage. Also, when looking
for a solution to this it seems that everyone else has experienced the
same thing.
I'd be interested to hear more about this as one of the problems we've
been having is opening the documents in word so they can be save
straight back to slide.
Cheers
Luke.
-----
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: webdav security
Posted by Julian Reschke <ju...@gmx.de>.
Luke Noel-Storr wrote:
> If you just open via a link then it doesn't open it in word as a
> document from webdav, it just opens it as it would any other word
> document linked to from a website (ie: it downloads a temp copy and then
> opens that read only in Word).
Well, not always.
With Office2000 on W2000, it actually does protocol discovery, prompts
for credentials, and then opens read/write.
With Office2003 on W2000, *sometimes* it just opens it read-only (with
the content from IE's cache), but sometimes it starts sending OPTIONS
requests (both to the document and it's parent collection).
> You can use vb/javascript to get it to open in word as a webdav document
> if required (this seems to be the only way). I can post some sample
> code if you like.
Well, right now I'm trying to understand what it's *supposed* to do, and
whether there are any local configurables influencing the behaviour.
Best regards, Julian
--
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: webdav security
Posted by Luke Noel-Storr <lu...@dsl.pipex.com>.
Hi,
I don't have my code to hand; however, you need to have a vbscipt (or
javascript) function something like the following:
Sub openDocument()
Set Word = CreateObject("Word.Application")
Word.Visible = TRUE
Word.Documents.Open("http://my-slide-server/files/my-file.doc")
End Sub
which you need to call in a way something like:
<a href="javascript:openDocument()">open in word</a>
What this does is it creates an instance of Microsoft Word and then
tells it to open your document from the URL provided.
There's a bit of a snag with it though in that you need to edit your
security settings to allow scripting ActiveX components that are not
marked as safe for scripting (it's an option in the tools/security
settings in IE - I don't have a PC to hand to find what the option is).
I think the best way to do this is to add your webdav server to the
list of trusted sites (you may need to un-check the option that only
allows you to add secure sites to the list) and then make sure the
options for trusted sites allow scripting of non-safe ActiveX
components.
Also, this only works in IE.
Hope that helps, I'll be back in work on Tuesday if you need more
details.
Cheers
Luke.
-----
On 30 May 2004, at 01:11, Simone Gianni wrote:
> Luke Noel-Storr wrote:
>
>> If you just open via a link then it doesn't open it in word as a
>> document from webdav, it just opens it as it would any other word
>> document linked to from a website (ie: it downloads a temp copy and
>> then opens that read only in Word).
>>
>> You can use vb/javascript to get it to open in word as a webdav
>> document if required (this seems to be the only way). I can post
>> some sample code if you like.
>>
> Hi Luke,
> I'm very intrested in this. Since webdav uses the common HTTP URLs
> there seems to be no standard way to tell a software that i'm
> referring to a webdav server and not a simple http one. In future,
> maybe, every software will consider an http url as a webdav one, and
> try an OPTION or directly a PUT or a LOCK. In the meanwhile, how do i
> tell MS-WORD to open a file and consider it webdav? If you have vb or
> javascript or a pointer to somewhere could you please post it?
>
> Thanks, ciao,
>
> Simone Gianni
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: webdav security
Posted by Simone Gianni <s....@thebug.it>.
Luke Noel-Storr wrote:
> If you just open via a link then it doesn't open it in word as a
> document from webdav, it just opens it as it would any other word
> document linked to from a website (ie: it downloads a temp copy and
> then opens that read only in Word).
>
> You can use vb/javascript to get it to open in word as a webdav
> document if required (this seems to be the only way). I can post some
> sample code if you like.
>
Hi Luke,
I'm very intrested in this. Since webdav uses the common HTTP URLs there
seems to be no standard way to tell a software that i'm referring to a
webdav server and not a simple http one. In future, maybe, every
software will consider an http url as a webdav one, and try an OPTION or
directly a PUT or a LOCK. In the meanwhile, how do i tell MS-WORD to
open a file and consider it webdav? If you have vb or javascript or a
pointer to somewhere could you please post it?
Thanks, ciao,
Simone Gianni
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: webdav security
Posted by Luke Noel-Storr <lu...@dsl.pipex.com>.
If you just open via a link then it doesn't open it in word as a
document from webdav, it just opens it as it would any other word
document linked to from a website (ie: it downloads a temp copy and
then opens that read only in Word).
You can use vb/javascript to get it to open in word as a webdav
document if required (this seems to be the only way). I can post some
sample code if you like.
Cheers
Luke.
-----
On 27 May 2004, at 10:45, Julian Reschke wrote:
> Luke Noel-Storr wrote:
>
>> How are you opening the document?
>> From a webpage link? From a Web folder? In Word via a URL?
>
> From a web page link.
>
> Both opening from a web folder and via URL from Word both seem to work
> correctly (prompting for credentials and using OPTIONS/PROPFIND/LOCK
> and so on on the actual document).
>
> Best regards, Julian
>
> --
> <green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: webdav security
Posted by Julian Reschke <ju...@gmx.de>.
Luke Noel-Storr wrote:
> How are you opening the document?
>
> From a webpage link? From a Web folder? In Word via a URL?
From a web page link.
Both opening from a web folder and via URL from Word both seem to work
correctly (prompting for credentials and using OPTIONS/PROPFIND/LOCK and
so on on the actual document).
Best regards, Julian
--
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: webdav security
Posted by Luke Noel-Storr <lu...@dsl.pipex.com>.
How are you opening the document?
From a webpage link? From a Web folder? In Word via a URL?
Cheers
Luke.
-----
Julian Reschke wrote:
> Michael Oliver wrote:
>
>> Word 2k or XP yes.
>
>
> Interesting -- I'm just debugging this very issue. In Office 2003, I
> /sometimes/ see OPTIONS requests being made by Office, but no
> authentication dialogue appears. Office then falls back to opening
> read-only. Has anybody else seem this?
>
> Best regards, Julian
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: webdav security
Posted by Julian Reschke <ju...@gmx.de>.
Michael Oliver wrote:
> Word 2k or XP yes.
Interesting -- I'm just debugging this very issue. In Office 2003, I
/sometimes/ see OPTIONS requests being made by Office, but no
authentication dialogue appears. Office then falls back to opening
read-only. Has anybody else seem this?
Best regards, Julian
--
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
RE: webdav security
Posted by Michael Oliver <ol...@matrix-media.com>.
Word 2k or XP yes.
Michael Oliver
CTO
Matrix Intermedia Inc.
3325 N. Nellis Blvd, #1
Las Vegas, NV 89115
Phone:(702)643-7425
Fax:(520)844-1036
-----Original Message-----
From: aaz [mailto:z@interoperate.com]
Sent: Wednesday, May 26, 2004 2:47 PM
To: Slide Users Mailing List
Subject: webdav security
Hi,
Will MS WORD bring up an HTTP login prompt if it needs authentication to
a
webdav resource?
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org