?
Solved

WebDav access/permissions using Active Directory

Posted on 2009-02-15
11
Medium Priority
?
905 Views
Last Modified: 2015-01-05
Having security access permision issues when I disable the anonymous account for our webDAV directory (yes its a virtual site & Yes we have adjusted permissions at the root site level).  If anonymous is enabled then any user can browse our site and (http://www.vosinc.com/vosapps) and download or upload content.  When logon anonymously is disabled and any of the other method of security in IIS is enabled (in an attempt to control access), the logon box is presented, one enters AD credentials and access is denied after going through this cycle 3 times, the first 2 times just cause the logon box to reappear.

Configuration of system Server 2003, IIS 6.0, seperate Active Directory controller
WebDAV; Virtual directory, files of directory on a 3rd server (domain member), Access permissions have been granted to this file directory on 3rd server

What else can I try
0
Comment
Question by:9SS
  • 5
  • 4
10 Comments
 
LVL 19

Expert Comment

by:lamaslany
ID: 23645768
Have you set the NTFS permissions on the folder(s) users are to upload to/download from?
0
 

Author Comment

by:9SS
ID: 23645860
Yes, I have adjust file folder and directory permissions, I added individual users and the domain users group. I double checked users accounts making sure they in fact were members of the Domain users group.  Again if I enable Anonymous then no problems but if I attempt to enable any other level of security be it local or domain controlled nobody can access this portion of the site.  BTW we are not attempting to access this locally, we are in fact access or attemoting to access this via the internet using only IE at this point.
0
 
LVL 19

Expert Comment

by:lamaslany
ID: 23645892
Can you confirm what type(s) of authentication you have allowed users to use for their login?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:9SS
ID: 23646020
NTLM
0
 
LVL 19

Expert Comment

by:lamaslany
ID: 23646042
Have you tried Basic?  (might be an idea to issue a selfcert to encrypt the credentials - and the data come to that!)
0
 
LVL 19

Expert Comment

by:lamaslany
ID: 23646062
PS:  Have you tried WFetch to watch the session?
0
 

Author Comment

by:9SS
ID: 23715728
First off I have tried this and it still does not work, however even if Basic (clear text) did work it offers no real security and while I can generate a cert I do not understand how that will encrypt the Logon credentials while they are being transmitted.  
0
 

Author Comment

by:9SS
ID: 23715738
I have not tried WFetch, I'll give it a spin and C what it turns up
0
 

Author Comment

by:9SS
ID: 24417321
The only way I found to fix this problem, regardless of activie Directory
1) Create an identical account to the one on the Active Direxctory Server on the local member server.
2) Grant this user admin rights
3) Create the Webdav virtual directory and Browse to a physical directory
3) Set the website permissions by right clicking the website in IIS and selecting permissions in ISS, then browse for the local users account, select the user(s).  You can double check these permissions on the actual root folder via windows explorer. grant this user "Full Control" righhts to the site.

Now the system actually lets the user login, via  the windows file explorer however, if you attempt to use an actaull application like Dreamweaver configured for webdav you can not logon.
0
 

Accepted Solution

by:
ee_auto earned 0 total points
ID: 25343192
Question PAQ'd, 500 points refunded, and stored in the solution database.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Online collaboration is quickly becoming embedded in the workplace, and its benefits are tangible. See what the current landscape looks like and what the future holds for collaboration tools and the future of work.
Files go missing when using DFS (Distributed File System) Replication and how to recover them and fix it.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Suggested Courses

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question