Administrace komentářů

Zdravim,
po nedavno uvazovani nad sitovim diskem: Sdileny disk ve Windows a Linuxu. WebDAV? jsem se rozhodl pro WebDAV.

Nyni resim problem s nastavenim. Prosel jsem hromadu navodu, ale porad to nejde. Z Linuxu (Ubuntu 12.10) se bez problemu pripojim integrovanym klintem v Nautilu. Pripojeni z Google Chrome 23 taky OK. Na Androidu 4.1 zadam adresu v prohlizeci, vyplnim heslo a funguje.

Problem je (necekane ) ve Windows a o ty mi hlavne jde. V Linuxu stejne pouzivam SFTP.
Vyzaduju funkcnost ve Windows 7 (32b i 64b), ale velmi rad bych funkcnost ve Windows XP a novejsich.
V XP mi to nejde vubec. Ve Win7 x64 se mi parkrat podarilo prihlasit z Internet Exploreru 8. Pri pripojeni jako sitoveho disku/slozky vzdy narazim na problem, nekdy to po chvili napise "zadana slozka je pravdepodobne neplatna, zvolte jinou slozku" a nekdy se zepta na jmeno a heslo - zadavam spravne, ale porad se pta znova a nakonec se nepripoji.

Musim mit SSL, jinak bych rovnou mohl pouzit nesifrovane FTP, ktere Windows umi.

Mam nastaveny port 8080, 443 mam na OpenVPN. To by ale vadit nemelo.

Muj system:

root@server:/etc/apache2/sites-enabled# lsb_release -a
No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 12.04.1 LTS
Release:	12.04
Codename:	precise
root@server:/etc/apache2/sites-enabled# uname -a
Linux eu 3.2.0-32-generic #51-Ubuntu SMP Wed Sep 26 21:33:09 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux
root@server:/etc/apache2/sites-enabled# dpkg -l | grep apache2
ii  apache2                            2.2.22-1ubuntu1.2                          Apache HTTP Server metapackage
...
root@server:/etc/apache2/sites-enabled# 

Povolene moduly v Apachi:

root@server:/etc/apache2/sites-enabled# ls /etc/apache2/mods-enabled/
alias.conf          authz_groupfile.load  dav_fs.conf   dir.load          negotiation.load  reqtimeout.conf  ssl.load
alias.load          authz_host.load       dav_fs.load   env.load          php5.conf         reqtimeout.load  status.conf
auth_basic.load     authz_user.load       dav.load      headers.load      php5.load         rewrite.load     status.load
auth_digest.load    autoindex.conf        deflate.conf  mime.conf         proxy.conf        setenvif.conf    userdir.conf
authn_file.load     autoindex.load        deflate.load  mime.load         proxy_http.load   setenvif.load    userdir.load
authz_default.load  cgi.load              dir.conf      negotiation.conf  proxy.load        ssl.conf
root@server:/etc/apache2/sites-enabled#

A nastaveni VirtualHostu:

root@server:/etc/apache2/sites-enabled# cat /etc/apache2/sites-enabled/webdav_ssl 
<VirtualHost *:8080>
    ServerName example.net
    ServerAlias example.net webdav.example.net *.example.net
    DocumentRoot /var/www/
    ErrorLog /var/log/apache2/error_webdav
    LogLevel warn
    CustomLog /var/log/apache2/access_webdav combined
    Options Indexes FollowSymLinks MultiViews
    ServerSignature off
    DocumentRoot /media/data/webdav

    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/pyload.crt
    SSLCertificateKeyFile /etc/ssl/private/pyload.key

###    SSLProtocol all
###    SSLCipherSuite HIGH:MEDIUM

    #windows username (domain\\user) fix:
    # http://goo.gl/P6Rbc
    # http://goo.gl/Ff9QP
#    BrowserMatch "^WebDAVFS/1.[012]" redirect-carefully
#    BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully
#    BrowserMatch "Microsoft-WebDAV-MiniRedir/5.1.2600" redirect-carefully
#    BrowserMatch "^WebDrive" redirect-carefully
#    BrowserMatch "^WebDAVFS" redirect-carefully
#    Header add MS-Author-Via "DAV"
#    EncodingEngine on
#    NormalizeUsername on

    RemoveHandler .php .phtml .php3
    RemoveType .php .phtml .php3
    php_flag engine off
  
    Alias /webdav "/media/data/webdav"
    <Location /webdav>
        Dav On
	
	#Windows 7 WILL NOT connect to webdav servers using Basic Authentication.
	#AuthType Basic
        #AuthName "webdav"
        #AuthUserFile /etc/apache2/.htbasic_WEBDAV
        #Require valid-user

	AuthType Digest
        AuthName "webdav"
        AuthDigestDomain /webdav https://example.net:8080/webdav
        AuthDigestProvider file
        AuthUserFile /etc/apache2/.htdigest_WEBDAV
        Require valid-user
	
	#allows browsers to upgrade to stronger encryption
###	SSLRequire %{SSL_CIPHER_USEKEYSIZE} >= 128
	
	#allow only HTTPS, not HTTP
	SSLRequireSSL
	
	Options Indexes MultiViews
	Order allow,deny
	allow from all
    </Location>    

</VirtualHost>
root@server:/etc/apache2/sites-enabled#

root@server:/# cat /etc/apache2/.htdigest_WEBDAV 
pokus:webdav:f62b99c6affad73f4857c36c072ff3ce
example.net\pokus:webdav:d5db743b782ce0e5667b95a3c736d1f2
root@server:/#

Test pripojeni (funguje dobre):

martin@martin:~$ cadaver https://example.net:8080/webdav/
WARNING: Untrusted server certificate presented for `example.net':
Issued to: CZ, GK0x##########OE
Issued by: Secure Digital Certificate Signing, StartCom Ltd., IL
Certificate is valid from Sun, 30 Dec 2012 18:01:31 GMT to Wed, 01 Jan 2014 00:20:45 GMT
Do you wish to accept the certificate? (y/n) y
Authentication required for webdav on server `example.net':
Username: pokus
Password: 
dav:/webdav/> ls
Listing collection `/webdav/': succeeded.
Coll:   a                                      0  pro 31 03:37
Coll:   mmmmmmmmmmmmmmm                        0  pro 31 04:29
        11.jpg                             18396  pro 31 03:37
dav:/webdav/> close
Connection to `example.net' closed.
dav:!> 
martin@martin:~$ 

A vypis z logu (gvfs je Nautilus (gnome) klient v Ubuntu):

root@server:/# tail -n 25 /var/log/apache2/access_webdav 
192.168.1.11 - - [31/Dec/2012:15:37:27 +0100] "GET /icons/folder.gif HTTP/1.1" 304 390 "https://example.net:8080/webdav/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11"
192.168.1.11 - - [31/Dec/2012:15:37:27 +0100] "GET /icons/image2.gif HTTP/1.1" 304 390 "https://example.net:8080/webdav/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11"
192.168.1.11 - - [31/Dec/2012:15:39:34 +0100] "OPTIONS /webdav HTTP/1.1" 401 2638 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
192.168.1.11 - - [31/Dec/2012:15:39:34 +0100] "OPTIONS /webdav HTTP/1.1" 401 2638 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
192.168.1.11 - - [31/Dec/2012:15:39:34 +0100] "OPTIONS / HTTP/1.1" 200 2041 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
192.168.1.11 - - [31/Dec/2012:15:39:34 +0100] "PROPFIND / HTTP/1.1" 405 570 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
192.168.1.11 - - [31/Dec/2012:15:40:37 +0100] "OPTIONS /webdav HTTP/1.1" 401 3216 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:40:37 +0100] "OPTIONS /webdav HTTP/1.1" 200 549 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:40:37 +0100] "PROPFIND /webdav HTTP/1.1" 207 788 "-" "gvfs/1.14.0"
192.168.1.11 - - [31/Dec/2012:15:40:37 +0100] "OPTIONS / HTTP/1.1" 200 277 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:40:37 +0100] "PROPFIND /webdav HTTP/1.1" 207 980 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:40:38 +0100] "PROPFIND /webdav HTTP/1.1" 207 980 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:40:38 +0100] "PROPFIND /webdav/mmmmmmmmmmmmmmm HTTP/1.1" 207 996 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:40:38 +0100] "PROPFIND /webdav/a HTTP/1.1" 207 980 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:40:38 +0100] "PROPFIND /webdav HTTP/1.1" 207 1140 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:40:38 +0100] "PROPFIND /webdav HTTP/1.1" 207 980 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:40:38 +0100] "PROPFIND /webdav HTTP/1.1" 207 788 "-" "gvfs/1.14.0"
192.168.1.11 - - [31/Dec/2012:15:40:58 +0100] "OPTIONS /webdav/ HTTP/1.1" 401 3222 "-" "cadaver/0.23.3 neon/0.29.6"
192.168.1.11 - pokus [31/Dec/2012:15:41:03 +0100] "OPTIONS /webdav/ HTTP/1.1" 200 694 "-" "cadaver/0.23.3 neon/0.29.6"
192.168.1.11 - pokus [31/Dec/2012:15:41:03 +0100] "PROPFIND /webdav/ HTTP/1.1" 207 1098 "-" "cadaver/0.23.3 neon/0.29.6"
192.168.1.11 - pokus [31/Dec/2012:15:41:05 +0100] "PROPFIND /webdav/ HTTP/1.1" 207 2714 "-" "cadaver/0.23.3 neon/0.29.6"
192.168.1.11 - pokus [31/Dec/2012:15:43:14 +0100] "PROPFIND /webdav/a HTTP/1.1" 207 3312 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:43:14 +0100] "PROPFIND /webdav/mmmmmmmmmmmmmmm HTTP/1.1" 207 996 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:43:14 +0100] "PROPFIND /webdav/a HTTP/1.1" 207 980 "-" "gvfs/1.14.0"
192.168.1.11 - pokus [31/Dec/2012:15:43:14 +0100] "PROPFIND /webdav/mmmmmmmmmmmmmmm HTTP/1.1" 207 996 "-" "gvfs/1.14.0"
root@server:/# 

Podle informaci, co jsem nasel na Internetu vyzaduje Windows 7 Digest autentizaci, ale Win XP umi jen Basic. Take jsem resil problem s uzivatelskymi jmeny ve Windows. Windows je vyzaduji ve formatu "domena\uzivatel". Podle tohoto navodu jsem vytvoril na zkousku 2 uzivatele.

Jeste jsem uvazoval o pouziti OwnCloud, ktery by mel WebDAV umet. Jenze v navodu maji upravy Windows registru a to je pro me neprijatelne.

Co presne potrebuji:
pripojit si na cizim PC s Windows svuj disk (nereste prosim bezpecnost cizich PC) bez administratorskych prav.
Tento disk *musi* byt dostupny pro praci napr. ve Wordu, abych mohl pres soubor->ulozit hned ukladat. Proto nemuzu mit WinSCP (musim vzdy soubor lokalne zkopirovat).
Na svem notebooku pouzivam Sambu pres OpenVPN, nebo primo SFTP. V LAN taky Sambu.

Muzete mi nekdo poradit?