[OpenAFS] AFS and WebDAV

Noel Burton-Krahn noel@bkbox.com
Wed, 14 Jan 2004 10:38:27 -0800


Hi Leif,

I've found that IE's DAV client completely ignores cookies.  I handled that
by reusing a krb5 ticket from repeated "Authentication: " headers.

--Noel


----- Original Message -----
From: "Leif Johansson" <leifj@it.su.se>
To: "Mark Montague" <markmont@umich.edu>
Cc: "John Rudd" <jrudd@ucsc.edu>; <openafs-info@openafs.org>
Sent: Wednesday, January 14, 2004 10:19 AM
Subject: Re: [OpenAFS] AFS and WebDAV


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Mark Montague wrote:
> | On Wed, 14 Jan 2004, John Rudd wrote:
> |
> |
> |>Has anyone set up a WebDAV server on top of AFS?  Especially if you're
> |>then using that for a file sharing mechanism (like windows "web
> |>folders", MacOS X "Connect" in Finder, etc.).  Do you have any thoughts
> |>about how to make it work in a way that preserves user identity in the
> |>access and such?
> |
> |
> | Yes, we're using mod_dav-1.0.3-1.3.6 on top of Apache 1.3.29 with
> | cosign-1.1.3 to provide the authentication.  This combination
> | has the potential to preserve the user identity, but we have not
> | pursued this yet -- right now, our Apache server runs with a
> | special AFS user identity and tokens are automatically renewed
> | by a script we wrote.  Cosign will obtain AFS tokens for each
> | specific authenticated user (and switch between them appropriately)
> | but as I said we do not have this set up yet here.
> |
> | We restrict access to DAV to HTTPS only.
> |
> | We're not using DAV for filesharing, just for updating web pages
> | on the server.  A variety of DAV clients are in use.
> |
>
> I am curious - have you found any problems with cookie-support in WebDAV
> clients? I have tried similar setups with pubcookie but WebDAV clients
> are not required to implement cookies which gets in the way of using
> many WebISO mechanisms with webdav. Also redirects are tricky to get
> right since you are typically editing text/plain and not text/html -
> most redirection is done using meta-tags...
>
> I'm interested in hearing more details about your setup.
>
> Cheers Leif
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.7 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFABYhJ8Jx8FtbMZncRAgg3AKDCa3YWwvDB0szyxevVLQp9cia4qgCgpFFI
> /Yns0385aPg49jUuQux81hM=
> =UXCc
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>
>