You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by ChiaTzung Liu <Ch...@zyxel.com.tw> on 2009/01/15 11:03:21 UTC
[users@httpd] A question about webdav
Hi..
I set my configuration of apache as following (one the part about
webdav)...
===========================================
DAVLockDB /tmp/lockdb
<Directory "/i-data/md0/*">
Options All
Order allow,deny
Allow from all
Dav on
</Directory>
===========================================
It is VERY simple, right? But when I access it, apache will ask me
username and password.
Why? For example, I have a folder "/i-data/md0/music", and its
permission is 0777.
And I also establish a link http://ip/music to point
"/i-data/md0/music".
Now, if I access http://ip/music by my web browser, it's ok. However, I
will be asked to enter username and password when I access it by WebDav.
Anyone can help me? Thx.
RE: [users@httpd] A question about webdav
Posted by ChiaTzung Liu <Ch...@zyxel.com.tw>.
Thanks for your help.
Actually, I found the answer after I mailing this question.
The point is "/i-data/md0" is a softlink and point to "/i-data/aed390a8". But I set AliasMatch "^(?i)/music(.*)" "/i-data/ aed390a8/music$1" in my httpd.conf.
In addition, I only set <Directory "/i-data/md0/*">, not set <Directory "/i-data/ aed390a8/*">. So apache can't find any setting about the path /i-data/ aed390a8/music.
But why apache will ask me input username and password under this condition? I still can't realize it now. But this problem was solved, Thanks for your help.
-----Original Message-----
From: André Warnier [mailto:aw@ice-sa.com]
Sent: Friday, January 16, 2009 5:17 AM
To: users@httpd.apache.org
Subject: Re: [users@httpd] A question about webdav
Hi.
One does not really know where to start.. ;-)
Maybe you should provide some basic details about the Operating System
under which you are trying this, the version of Apache you are using,
and what "http://ip/" really means. Is "ip" the IP address of your host ?
Some notes :
1) I do not believe that <Directory "/i-data/md0/*"> is correct. It
should probably just be <Directory "/i-data/md0">.
Or else something like <DirectoryMatch "/i-data/md0/.*">
2) the fact that the disk directory "/i-data/md0/music" has permissions
0777 is not really relevant to the problem as you explain it.
It the disk directory to which Apache would try to write (later, when a
file is being uploaded) or from which it would try to read, did not have
the appropriate permissions, you would get an error message from Apache,
but that would happen later than your current issue.
3) The reason why you get a login dialog has to do with some form of
Apache authentication required for access to that directory.
That may be because another directory (or Location) higher-up in the
hierarchy is requiring such an authentication, and it is "inherited" by
this directory.
But, in the absence of more details about your case, it is difficult to
tell.
4) What do you mean by "accessing this directory via WebDav" ? which
"client" are you really using ? Are you on a Windows workstation,
trying to set up a "web folder" ? is the Apache server hosted on the
same workstation or a separate server ?
5) do you know that enabling Dav on a web server, without really
understanding what you are doing in terms of security and
authentication, can allow someone to download (or overwrite) your whole
filesystem ?
ChiaTzung Liu wrote:
> Hi..
>
>
>
> I set my configuration of apache as following (one the part about
> webdav)...
>
> ===========================================
>
> DAVLockDB /tmp/lockdb
>
> <Directory "/i-data/md0/*">
>
> Options All
>
> Order allow,deny
>
> Allow from all
>
> Dav on
>
> </Directory>
>
> ===========================================
>
>
>
> It is VERY simple, right? But when I access it, apache will ask me
> username and password.
>
>
>
> Why? For example, I have a folder "/i-data/md0/music", and its
> permission is 0777.
>
> And I also establish a link http://ip/music to point
> "/i-data/md0/music".
>
>
>
> Now, if I access http://ip/music by my web browser, it's ok. However, I
> will be asked to enter username and password when I access it by WebDav.
>
>
>
> Anyone can help me? Thx.
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] A question about webdav
Posted by André Warnier <aw...@ice-sa.com>.
Hi.
One does not really know where to start.. ;-)
Maybe you should provide some basic details about the Operating System
under which you are trying this, the version of Apache you are using,
and what "http://ip/" really means. Is "ip" the IP address of your host ?
Some notes :
1) I do not believe that <Directory "/i-data/md0/*"> is correct. It
should probably just be <Directory "/i-data/md0">.
Or else something like <DirectoryMatch "/i-data/md0/.*">
2) the fact that the disk directory "/i-data/md0/music" has permissions
0777 is not really relevant to the problem as you explain it.
It the disk directory to which Apache would try to write (later, when a
file is being uploaded) or from which it would try to read, did not have
the appropriate permissions, you would get an error message from Apache,
but that would happen later than your current issue.
3) The reason why you get a login dialog has to do with some form of
Apache authentication required for access to that directory.
That may be because another directory (or Location) higher-up in the
hierarchy is requiring such an authentication, and it is "inherited" by
this directory.
But, in the absence of more details about your case, it is difficult to
tell.
4) What do you mean by "accessing this directory via WebDav" ? which
"client" are you really using ? Are you on a Windows workstation,
trying to set up a "web folder" ? is the Apache server hosted on the
same workstation or a separate server ?
5) do you know that enabling Dav on a web server, without really
understanding what you are doing in terms of security and
authentication, can allow someone to download (or overwrite) your whole
filesystem ?
ChiaTzung Liu wrote:
> Hi..
>
>
>
> I set my configuration of apache as following (one the part about
> webdav)...
>
> ===========================================
>
> DAVLockDB /tmp/lockdb
>
> <Directory "/i-data/md0/*">
>
> Options All
>
> Order allow,deny
>
> Allow from all
>
> Dav on
>
> </Directory>
>
> ===========================================
>
>
>
> It is VERY simple, right? But when I access it, apache will ask me
> username and password.
>
>
>
> Why? For example, I have a folder "/i-data/md0/music", and its
> permission is 0777.
>
> And I also establish a link http://ip/music to point
> "/i-data/md0/music".
>
>
>
> Now, if I access http://ip/music by my web browser, it's ok. However, I
> will be asked to enter username and password when I access it by WebDav.
>
>
>
> Anyone can help me? Thx.
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org