[stunnel-users] using webdav: YES IT WORKS WITH NET USE

[delaage.pierre at free.fr]

Well after some more tests I achieve net use to work:
UseBasicAuth is VITAL on the xp client (reboot)
Accordingly configure apache with basic plain text auth

stunnel routing localhost:80 to remote:443 (as you did)

to pass your credentials use EXACTLY this command line :

net use y: \\localhost\davfolder (with no extra \) YOURPASSWORD
/USER:YOURUSERNAME
(this in the only way to have hhtp credentials sent to the server).

tested on client: xpsp2 + kb892211 + kb911927 (IMPORTANT ALSO, needs reboot) +
stunnel 427 and server apache 2.2.6/Mandriva 2008.
kb907306 replaces 892211, but I have not tested with it (I think it should
work).

If you cannot achieve it to work please let me know the exact error message you
receive from windows.

Again your problem is only related to windows issue, not stunnel.

Pierre

Quoting Jan-Florian Hilgenberg <florianhilgenberg at googlemail.com>:

> yes, i am the admin. have pulled it back to basic auth.
> okay i have installed Webfldrs-KB907306-ENU.exe and checked for its listing
> in systemcontrol -> software (show updates) - it does not appear there! :-(
> add network location:
> it is running directly to the server and through stunnel, too :-)
>
> wtf? i have to install office2003 for such a problem? mh okay, i did so - no
> change in behaviour - mh the failures of net use are changing - now it is a
> systemfailure 67. networkname not found
> syntax: net use x: \\127.0.0.1\user /user:user
>
> thank you - flo
>
>
> 2009/7/18 <delaage.pierre at free.fr>
>
> > A question :
> > Are you the administrator of your web server ?
> > if yes : set up apache with "basic authentication", not digest (this will
> > not be
> > a problem later with ssl) and setup the registry key usebasicauth to 1 on
> > your
> > client.
> > SP3 does NOT contain kb907306 : so install it (you will not damage your
> > system
> > if this patch is already in it).
> > Forget net use for the moment : "add network location" should work first.
> >
> > IMPORTANT : "add network location" supports SSL WITHOUT the need of
> > stunnel, so
> > try to setup directly a "location" pointing to "
> > https://yourserver/yourfolder".
> > of course you will need to install first your own certificate with
> > "internet
> > explorer", so that windows can use it to connect to your ssl server.
> >
> > Something else : check this http://support.microsoft.com/KB/942392
> > ...ie be sure that your server allow browsing dav space FROM the root url.
> > Moreover, always according to kb942392, to have net use working one must
> > have
> > ...MS office installed!
> >
> > Pierre
> >
> >
> > Quoting Jan-Florian Hilgenberg <florianhilgenberg at googlemail.com>:
> >
> > > ok, i thought that i've sp3 in my virtualbox... but it is installed now -
> > > and all other updates too!
> > > i've tested with digest authentification now - but it isn't running.
> > > the remote server is a debian lenny with apache2.2.
> > > the ssl certificate is validated by Equifax Secure Inc.
> > > ie7:  sure :) and i am confused in the moment the mapping in networkarea
> > as
> > > addition web ressource isn't running. tried it with ssl in the past (was
> > > running) and now without ssl, there appears this log in apache:
> > > [Sat Jul 18 00:30:33 2009] [error] [client ip] user
> > > subdomain.example.de\user
> > > not found: /
> > > for the digest method the same with "realm"
> > > however there is no preview for the files with this method, and that is
> > what
> > > i need :(
> > >
> > > i think i haven't installed kb907306 in the moment(mh ok maybe it is in
> > > servicepack 3 ?), but i don't know what you mean with dbl click feature
> > :-(
> > >
> > > i'm really pleased for your help :-)
> > >
> > > 2009/7/17 <delaage.pierre at free.fr>
> > >
> > > > Next step :
> > > > be sure to have kb892211 (preferred) or more recent kb907306 (suppress
> > dbl
> > > > click
> > > > feature!) installed on your system and retry.
> > > > Yes you have to create the registry key by hand on your client system,
> > > > but you really have to know more about your server authentication
> > process.
> > > > About ie7 : have you been able to browse in your webfolders, via a
> > folder
> > > > view?
> > > >
> > > > Try also adding your web folder to windows explorer by using "Add
> > Network
> > > > location", which is another mechanism than mapping a drive letter, and
> > more
> > > > often works.
> > > >
> > > > See you soon,
> > > > Pierre Delaage
> > > >
> > > >
> > > >
> > > > Quoting Jan-Florian Hilgenberg <florianhilgenberg at googlemail.com>:
> > > >
> > > > > wow thank you, some really good tips :)
> > > > > i tested it with ie 7 and it is running fine.
> > > > > then i've set the regkey, is it right that i have to create it by
> > myself?
> > > > > rebooted - and no, there is the same error :-(
> > > > > the gui for the net use command ( explorer/tools/ map networkdrive)
> > isn't
> > > > > running, too!
> > > > >
> > > > > i really hope, that any body could help me
> > > > > thank you
> > > > >
> > > > >
> > > > > 2009/7/17 <delaage.pierre at free.fr>
> > > > >
> > > > > > Hello,
> > > > > > There are many things to check on Windows configuration before
> > > > > > checking potential issues in stunnel.
> > > > > >
> > > > > > At first you should check what is the HTTP authentication mechanism
> > > > used by
> > > > > > your
> > > > > > webdav server :
> > > > > > if this server is using "basic plain text authentication", this
> > WILL
> > > > NOT BE
> > > > > > supported by the windows "webdav redirector" (the system component
> > that
> > > > > > allows
> > > > > > you to map a webdav folder to a virtual system drive)...unless you
> > set
> > > > up
> > > > > > this
> > > > > > registry key :
> > > > > >
> > > > > >
> > > > [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWebClientParameters]
> > > > > > "UseBasicAuth"=dword:00000001
> > > > > >
> > > > > > Check this page for some MS explanations:
> > > > > >
> > http://technet.microsoft.com/en-us/library/cc787023%28WS.10%29.aspx
> > > > > >
> > > > > > Something else to check : try to open your webdav location by using
> > > > > > "internet
> > > > > > explorer 6 or 7"/file-open/check "web folder" checkbox. let us know
> > > > whether
> > > > > > it
> > > > > > works.
> > > > > > Try also by "Explorer/Tools/Map network drive", but it is very
> > painful
> > > > by
> > > > > > asking
> > > > > > many times for credentials.
> > > > > >
> > > > > > Yours sincerely,
> > > > > > Pierre Delaage
> > > > > >
> > > > > > Selon Jan-Florian Hilgenberg <florianhilgenberg at googlemail.com>:
> > > > > >
> > > > > >
> > > > > > > hi - i want to use webdav through stunnel to provide a
> > drive(letter).
> > > > > > > system: winxp sp3
> > > > > > > net use http://127.0.0.1/dirname /user:someuser
> > > > > > > offers a systemfailure 64... stunnel log said SSL_connect:
> > 1408F06B:
> > > > > > > error:1408F06B:SSL routines:SSL3_GET_RECORD:bad decompression
> > > > > > > but a connection with firefox is running fine.
> > > > > > > i am doing try&error for about a week and i am sick now :(
> > > > > > > i hope you can help me - thank you
> > > > > > >
> > > > > > > client=yes
> > > > > > > verify=0
> > > > > > > [psuedo-https]
> > > > > > > accept  = 80
> > > > > > > connect = ssl.studenten-wg-halle.de:443
> > > > > > > TIMEOUTclose =
> > > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > >
> > > >
> > > >
> > >
> >
> >
> >
>