Previous Next

• 06-28-2008, 7:05 PM

  rmmason Joined on 08-04-2007, 4:21 PM Sheffield (UK) Posts 2

  WebDav and Forms Authorization in IIS7 Reply Contact Could anyone let me know if webdav supports forms authorization. Essentially I am interested in using the in-built support for WebDav in MS Office to allow users of a system we are proposing to edit word documents. My concerns are that WebDav may not support forms authorization although everything I have read about the new features of IIS7 lead me to believe that this should work at the moment. I am also a little concerned about the fact that I think I have read that WebDav on IIS7 does not support the locking of files and this may lead to user overwriting the changes of another user. Does anyone know of an acceptable solution to this? I was wondering if you could get at the WebDav request using the IIS pipeline before it reaches WebDav and implement some custom file locking routine at that point? I have also heard that WebDav support in XP is a little bit flaky. Is this something I should be concerned about or in the simple scenario outlined above should I be OK. Many thanks for any help or suggestions in advance. Ross Mason Inflecto Systems www.inflecto.co.uk

  Tags: permissionsIIS7Authorization RulesWebDAV

• 06-30-2008, 2:07 PM

  In reply to

  anilr Joined on 05-23-2006, 10:13 PM Redmond, WA Posts 1,090

  Re: WebDav and Forms Authorization in IIS7 Reply Contact By default, no managed modules are run for webdav requests - this is because of the fact that you can upload managed modules to bin/app_code directories or  global.asax using webdav and if any of those uploads breaks your site, webdav would also be broken if that code ran on webdav requests also.  You can change this behavior by setting runManagedModulesForWebDavRequests attribute to true in the system.webServer/modules section. That is about the server side - on the client side, I am not aware of any webdav client which supports forms auth - and sending a form to authenticate for webdav may be against webdav protocol.  XP webdav redirector does have certain limitations regarding not being able to map root of a website etc.  Robert should be able to fill in on more. Anil Ruia Senior Software Design Engineer IIS Core Server

• 06-30-2008, 2:23 PM

  In reply to

  rmmason Joined on 08-04-2007, 4:21 PM Sheffield (UK) Posts 2

  Re: WebDav and Forms Authorization in IIS7 Reply Contact Thanks for the reply. MS Office would be the client in this instance. I was hoping that by opening the document from a link from in a website working on the same url as the WebDav server where the user is already logged on using forms authorisation that office would also use the same session but it makes sense that this is not the case. Could you confirm that this is not the case? Also can you think of any solution to my problem of being able to deliver a word document to the client machine and allow the user to save it back to the server using the standard save button in office? I know this is possible in Sharepoint but we need similar functionality without using Sharepoint and need to ensure the user is authenticated.     Ross Mason Inflecto Systems www.inflecto.co.uk

• 06-30-2008, 2:28 PM

  In reply to

  anilr Joined on 05-23-2006, 10:13 PM Redmond, WA Posts 1,090

  Re: WebDav and Forms Authorization in IIS7 Reply Contact It is possible that if office is already authenticated with the correct credentials, it may use the same when doing the webdav requests - I haven't tested it, you may have to test and see - but, definitely the case where it needs to authenticate when making the webdav request will not work as getting redirect to the forms login page as response to webdav request will probably not be handled by office. Anil Ruia Senior Software Design Engineer IIS Core Server