Well after some more tests I achieve net use to work: UseBasicAuth is VITAL on the xp client (reboot) Accordingly configure apache with basic plain text auth
stunnel routing localhost:80 to remote:443 (as you did)
to pass your credentials use EXACTLY this command line :
net use y: \localhost\davfolder (with no extra ) YOURPASSWORD /USER:YOURUSERNAME (this in the only way to have hhtp credentials sent to the server).
tested on client: xpsp2 + kb892211 + kb911927 (IMPORTANT ALSO, needs reboot) + stunnel 427 and server apache 2.2.6/Mandriva 2008. kb907306 replaces 892211, but I have not tested with it (I think it should work).
If you cannot achieve it to work please let me know the exact error message you receive from windows.
Again your problem is only related to windows issue, not stunnel.
Pierre
Quoting Jan-Florian Hilgenberg florianhilgenberg@googlemail.com:
yes, i am the admin. have pulled it back to basic auth. okay i have installed Webfldrs-KB907306-ENU.exe and checked for its listing in systemcontrol -> software (show updates) - it does not appear there! :-( add network location: it is running directly to the server and through stunnel, too :-)
wtf? i have to install office2003 for such a problem? mh okay, i did so - no change in behaviour - mh the failures of net use are changing - now it is a systemfailure 67. networkname not found syntax: net use x: \127.0.0.1\user /user:user
thank you - flo
2009/7/18 delaage.pierre@free.fr
A question : Are you the administrator of your web server ? if yes : set up apache with "basic authentication", not digest (this will not be a problem later with ssl) and setup the registry key usebasicauth to 1 on your client. SP3 does NOT contain kb907306 : so install it (you will not damage your system if this patch is already in it). Forget net use for the moment : "add network location" should work first.
IMPORTANT : "add network location" supports SSL WITHOUT the need of stunnel, so try to setup directly a "location" pointing to " https://yourserver/yourfolder". of course you will need to install first your own certificate with "internet explorer", so that windows can use it to connect to your ssl server.
Something else : check this http://support.microsoft.com/KB/942392 ...ie be sure that your server allow browsing dav space FROM the root url. Moreover, always according to kb942392, to have net use working one must have ...MS office installed!
Pierre
Quoting Jan-Florian Hilgenberg florianhilgenberg@googlemail.com:
ok, i thought that i've sp3 in my virtualbox... but it is installed now - and all other updates too! i've tested with digest authentification now - but it isn't running. the remote server is a debian lenny with apache2.2. the ssl certificate is validated by Equifax Secure Inc. ie7: sure :) and i am confused in the moment the mapping in networkarea
as
addition web ressource isn't running. tried it with ssl in the past (was running) and now without ssl, there appears this log in apache: [Sat Jul 18 00:30:33 2009] [error] [client ip] user subdomain.example.de\user not found: / for the digest method the same with "realm" however there is no preview for the files with this method, and that is
what
i need :(
i think i haven't installed kb907306 in the moment(mh ok maybe it is in servicepack 3 ?), but i don't know what you mean with dbl click feature
:-(
i'm really pleased for your help :-)
2009/7/17 delaage.pierre@free.fr
Next step : be sure to have kb892211 (preferred) or more recent kb907306 (suppress
dbl
click feature!) installed on your system and retry. Yes you have to create the registry key by hand on your client system, but you really have to know more about your server authentication
process.
About ie7 : have you been able to browse in your webfolders, via a
folder
view?
Try also adding your web folder to windows explorer by using "Add
Network
location", which is another mechanism than mapping a drive letter, and
more
often works.
See you soon, Pierre Delaage
Quoting Jan-Florian Hilgenberg florianhilgenberg@googlemail.com:
wow thank you, some really good tips :) i tested it with ie 7 and it is running fine. then i've set the regkey, is it right that i have to create it by
myself?
rebooted - and no, there is the same error :-( the gui for the net use command ( explorer/tools/ map networkdrive)
isn't
running, too!
i really hope, that any body could help me thank you
2009/7/17 delaage.pierre@free.fr
Hello, There are many things to check on Windows configuration before checking potential issues in stunnel.
At first you should check what is the HTTP authentication mechanism
used by
your webdav server : if this server is using "basic plain text authentication", this
WILL
NOT BE
supported by the windows "webdav redirector" (the system component
that
allows you to map a webdav folder to a virtual system drive)...unless you
set
up
this registry key :
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWebClientParameters]
"UseBasicAuth"=dword:00000001
Check this page for some MS explanations:
http://technet.microsoft.com/en-us/library/cc787023%28WS.10%29.aspx
Something else to check : try to open your webdav location by using "internet explorer 6 or 7"/file-open/check "web folder" checkbox. let us know
whether
it works. Try also by "Explorer/Tools/Map network drive", but it is very
painful
by
asking many times for credentials.
Yours sincerely, Pierre Delaage
Selon Jan-Florian Hilgenberg florianhilgenberg@googlemail.com:
> hi - i want to use webdav through stunnel to provide a
drive(letter).
> system: winxp sp3 > net use http://127.0.0.1/dirname /user:someuser > offers a systemfailure 64... stunnel log said SSL_connect:
1408F06B:
> error:1408F06B:SSL routines:SSL3_GET_RECORD:bad decompression > but a connection with firefox is running fine. > i am doing try&error for about a week and i am sick now :( > i hope you can help me - thank you > > client=yes > verify=0 > [psuedo-https] > accept = 80 > connect = ssl.studenten-wg-halle.de:443 > TIMEOUTclose = >
-
delaage.pierre＠free.fr