Custom Authentication to membership provider for webdav?

KeithHutch — Fri, 03 Oct 2008 22:32:11 GMT

I need to allow users to be able to mount a webdav share running on IIS 7.0 where each user only sees and has access to their folder. I have done this using windows accounts and it works where user Test1 can only read/write their Test1 folder. Test2 can only read/write Test2, etc. The authoring rules work perfect, life is good.

The problem is I don't want to use a windows account - Neither Basic or Windows. I would prefer to use the membership provider that is present in my web.config which links to my SQL 2005 database which the rest of my web site uses (forms authentication). The webdav portion will be on it's own separate website with it's own separate subdomain and IP.

I have quite a few ideas on how to accomplish this but I need help.

1. Use a Custom Membership Provider like this one:

Custom Basic Authentication for IIS

This way when a user tries to mount https://webdav.site.com/Test1 they get a prompt and enter their credentials and mount the webdav share. The webdav module running on IIS 7.0 just sees that someone is authenticated and doesn't care how, only that their authenticated and send them to the folder defined in the authoring rules.

2. Use a custom HTTP Module

HTTP Basic Authentication without Active Directory

You have a HttpModule that does the authentication ahead of the webdav module. The only problem I see is from reading this post:

WebDav and Forms Authorization in IIS7

anilr says that webdav module will ignore any code run in App_code or Bin folders unless you set the variable "runManagedModulesForWebDavRequests=true". The only problem I see with this is I have no idea how to set this variable runManagedModulesForWebDavRequests because there is only 1 google result and it's the above link! Even MSDN has no results for this flag...

I also read this post where robmcm touches a bit on what needs to happen in the HttpModule but am confused on how to accomplish it without further clarification.

Anonymous PUT in WebDAV

anilr, if your out there could you please comment on how this can be accomplished? I'm sure Robert McMurray (robmcm) would also know if this is possible or help push me further in the right direction...

Once I figure out how to accomplish this, I will gladly share it with the community as I'm sure others have struggled with this problem.

Cheers,

Keith

Search results matching tag 'runManagedModulesForWebDavRequests'

Custom Authentication to membership provider for webdav?