httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Shaun T. Erickson" <...@ste-land.com>
Subject DAV/SSL: DAV over SSL fails & logs to wrong VH.
Date Sun, 30 Jun 2002 14:19:02 GMT
(Apache 2.0.39, with the mod_dav & mod_ssl that came with it, on an up 
to date Red Hat Linux 7.2.)

I apologize, profusely, for the length of this, but I wanted to include 
everything that seemed relevant to the problem.

I have a number of NBVHs, that I would like to be able to publish to via 
DAV, over an SSL connection. Using information I gleaned from the list, 
I learned that you can have one (and only one) SSL virtual host, when 
using NBVHs, and I set it up as described.

Here are the settings for my first NBVH (and incidentally, the inital 
one I am trying to publish to via DAV/SSL) (the others after it are 
clones of this, with appropriate info modified per site):

NameVirtualHost 64.7.3.120:80

<VirtualHost www.ste-land.com:80>
    ServerAdmin   webmaster@ste-land.com
    DocumentRoot  /opt/www/sites/www.ste-land.com
    ServerName    www.ste-land.com
    ServerAlias   ste-land.com
    ErrorLog      /opt/www/logs/www.ste-land.com/error_log
    CustomLog     /opt/www/logs/www.ste-land.com/access_log combined
    Alias /usage/ /opt/www/usage/www.ste-land.com/
</VirtualHost>

Here is the settings for my SSLVH:

<VirtualHost _default_:443>
DocumentRoot    "/opt/www/sites/secure.ste-land.com"
ServerName      secure.ste-land.com:443
ServerAdmin     webmaster@ste-land.com
ErrorLog        /opt/www/logs/secure.ste-land.com/error_log
CustomLog       /opt/www/logs/secure.ste-land.com/access_log combined
Alias           /usage/ /opt/www/usage/secure.ste-land.com/
Alias           /ste-land /opt/www/sites/www.ste-land.com
<Location /ste-land>
    DAV          On
    ForceType    text/plain
    Require      user ste
    AuthName     www.ste-land.com
    AuthType     basic
    AuthUserFile /opt/www/auth/www.ste-land.com/.htpasswd
</Location>
(the rest of it is basically the defaults from the file)
</VirtualHost>

When I access http:/www.ste-land.com, with a browser, it works fine and 
logs to the correct location, as do my other NBVHs.

When I access https://secure.ste-land.com, with a browser, it made me 
authenticate (successfully), and I saw it's main page. It logs this to 
/opt/apache2/logs/ssl_request_log:

[30/Jun/2002:09:39:01 -0400] 68.36.18.109 SSLv3 RC4-MD5 "GET / HTTP/1.1" 411

and this to /opt/www/logs/secure.ste-land.com/access_log:

68.36.18.109 - - [30/Jun/2002:09:39:01 -0400] "GET / HTTP/1.1" 200 411 
"-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"

This is, I think, correct (I'm new to all of this, btw, but willing to 
learn!)

HOWEVER, when I attempt to access https://secure.ste-land.com/ste-land 
from Dreamweaver MX, via DAV, it fails. I get a pop-up stating: 
"Retrieving remote folder information for /ste-land/." followed 
immediately by another one, stating: "The desired action could not be 
completed because it was not allowed by the server. (HTTP Error 405)". 
The only thing that gets logged on the server, for the attempt, gets 
logged to the wrong place (/opt/www/logs/www.ste-land.com/access_log), 
and it's:

68.36.18.109 - - [30/Jun/2002:10:00:58 -0400] "PROPFIND 
/ste-land/_notes/ HTTP/1.1" 405 738 "-" "Dreamweaver-WebDAV-SCM1.02"
68.36.18.109 - - [30/Jun/2002:10:00:59 -0400] "PROPFIND /ste-land/ 
HTTP/1.1" 405 738 "-" "Dreamweaver-WebDAV-SCM1.02"

If I try to access that same url with a browser, it makes me 
authenticate (good), and then in IE6 it displays the home page of the 
www.ste-land.com site. That's correct, in that that is where DAV should 
be forcing me to go. It is rendering the html though, which it should 
not. When I try the same thing in Netscape6, it again makes me 
authenticate, takes me to the same place, and (because of the ForceType 
directive) it displays the page as text (i.e., I see the source, with no 
rendering).

As for logging, when I access the DAV location with the browsers, I get 
this in /opt/apache2/logs/ssl_request_log:

[30/Jun/2002:10:11:14 -0400] 68.36.18.109 SSLv3 RC4-MD5 "GET /ste-land 
HTTP/1.1" 1047
[30/Jun/2002:10:11:21 -0400] 68.36.18.109 SSLv3 RC4-MD5 "GET /ste-land 
HTTP/1.1" 368
[30/Jun/2002:10:11:21 -0400] 68.36.18.109 SSLv3 RC4-MD5 "GET /ste-land/ 
HTTP/1.1" 0
[30/Jun/2002:10:11:21 -0400] 68.36.18.109 SSLv3 RC4-MD5 "GET 
/ste-land/images/ste-land1.png HTTP/1.1" 0

and this in /opt/www/logs/secure.ste-land.com/access_log:

68.36.18.109 - - [30/Jun/2002:10:11:14 -0400] "GET /ste-land HTTP/1.1" 
401 1047 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET 
CLR 1.0.3705)"
68.36.18.109 - ste [30/Jun/2002:10:11:21 -0400] "GET /ste-land HTTP/1.1" 
301 368 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 
1.0.3705)"
68.36.18.109 - ste [30/Jun/2002:10:11:21 -0400] "GET /ste-land/ 
HTTP/1.1" 304 0 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; 
.NET CLR 1.0.3705)"
68.36.18.109 - ste [30/Jun/2002:10:11:21 -0400] "GET 
/ste-land/images/ste-land1.png HTTP/1.1" 304 0 
"https://secure.ste-land.com/ste-land/" "Mozilla/4.0 (compatible; MSIE 
6.0; Windows NT 5.1; .NET CLR 1.0.3705)"

This appears correct.

So, any advice on why DAV is failing, and why the attempt is logged to 
the wrong place, would be greatly appreciated. Again, I apologize for 
the length of this, but I wanted to include anything that seemed relevant.

    -ste



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message