Well after some more tests I achieve net use to work: UseBasicAuth is VITAL on the xp client (reboot) Accordingly configure apache with basic plain text auth stunnel routing localhost:80 to remote:443 (as you did) to pass your credentials use EXACTLY this command line : net use y: \\localhost\davfolder (with no extra \) YOURPASSWORD /USER:YOURUSERNAME (this in the only way to have hhtp credentials sent to the server). tested on client: xpsp2 + kb892211 + kb911927 (IMPORTANT ALSO, needs reboot) + stunnel 427 and server apache 2.2.6/Mandriva 2008. kb907306 replaces 892211, but I have not tested with it (I think it should work). If you cannot achieve it to work please let me know the exact error message you receive from windows. Again your problem is only related to windows issue, not stunnel. Pierre Quoting Jan-Florian Hilgenberg <[email protected]>:

yes, i am the admin. have pulled it back to basic auth. okay i have installed Webfldrs-KB907306-ENU.exe and checked for its listing in systemcontrol -> software (show updates) - it does not appear there! :-( add network location: it is running directly to the server and through stunnel, too :-)

wtf? i have to install office2003 for such a problem? mh okay, i did so - no change in behaviour - mh the failures of net use are changing - now it is a systemfailure 67. networkname not found syntax: net use x: \\127.0.0.1\user /user:user

thank you - flo

2009/7/18 <[email protected]>

...

A question : Are you the administrator of your web server ? if yes : set up apache with "basic authentication", not digest (this will not be a problem later with ssl) and setup the registry key usebasicauth to 1 on your client. SP3 does NOT contain kb907306 : so install it (you will not damage your system if this patch is already in it). Forget net use for the moment : "add network location" should work first.

IMPORTANT : "add network location" supports SSL WITHOUT the need of stunnel, so try to setup directly a "location" pointing to " https://yourserver/yourfolder". of course you will need to install first your own certificate with "internet explorer", so that windows can use it to connect to your ssl server.

Something else : check this http://support.microsoft.com/KB/942392 ...ie be sure that your server allow browsing dav space FROM the root url. Moreover, always according to kb942392, to have net use working one must have ...MS office installed!

Pierre

Quoting Jan-Florian Hilgenberg <[email protected]>:

...

ok, i thought that i've sp3 in my virtualbox... but it is installed now - and all other updates too! i've tested with digest authentification now - but it isn't running. the remote server is a debian lenny with apache2.2. the ssl certificate is validated by Equifax Secure Inc. ie7: sure :) and i am confused in the moment the mapping in networkarea as addition web ressource isn't running. tried it with ssl in the past (was running) and now without ssl, there appears this log in apache: [Sat Jul 18 00:30:33 2009] [error] [client ip] user subdomain.example.de\user not found: / for the digest method the same with "realm" however there is no preview for the files with this method, and that is what i need :(

i think i haven't installed kb907306 in the moment(mh ok maybe it is in servicepack 3 ?), but i don't know what you mean with dbl click feature :-(

i'm really pleased for your help :-)

2009/7/17 <[email protected]>

...

Next step : be sure to have kb892211 (preferred) or more recent kb907306 (suppress dbl click feature!) installed on your system and retry. Yes you have to create the registry key by hand on your client system, but you really have to know more about your server authentication process. About ie7 : have you been able to browse in your webfolders, via a folder view?

Try also adding your web folder to windows explorer by using "Add Network location", which is another mechanism than mapping a drive letter, and more often works.

See you soon, Pierre Delaage

Quoting Jan-Florian Hilgenberg <[email protected]>:

...

wow thank you, some really good tips :) i tested it with ie 7 and it is running fine. then i've set the regkey, is it right that i have to create it by myself? rebooted - and no, there is the same error :-( the gui for the net use command ( explorer/tools/ map networkdrive) isn't running, too!

i really hope, that any body could help me thank you

2009/7/17 <[email protected]>

...

Hello, There are many things to check on Windows configuration before checking potential issues in stunnel.

At first you should check what is the HTTP authentication mechanism used by your webdav server : if this server is using "basic plain text authentication", this WILL NOT BE supported by the windows "webdav redirector" (the system component that allows you to map a webdav folder to a virtual system drive)...unless you set up this registry key :

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWebClientParameters]

...

"UseBasicAuth"=dword:00000001

Check this page for some MS explanations:

http://technet.microsoft.com/en-us/library/cc787023%28WS.10%29.aspx

...

Something else to check : try to open your webdav location by using "internet explorer 6 or 7"/file-open/check "web folder" checkbox. let us know

whether

...

it works. Try also by "Explorer/Tools/Map network drive", but it is very painful by asking many times for credentials.

Yours sincerely, Pierre Delaage

Selon Jan-Florian Hilgenberg <[email protected]>:

> hi - i want to use webdav through stunnel to provide a drive(letter). > system: winxp sp3 > net use http://127.0.0.1/dirname /user:someuser > offers a systemfailure 64... stunnel log said SSL_connect: 1408F06B: > error:1408F06B:SSL routines:SSL3_GET_RECORD:bad decompression > but a connection with firefox is running fine. > i am doing try&error for about a week and i am sick now :( > i hope you can help me - thank you > > client=yes > verify=0 > [psuedo-https] > accept = 80 > connect = ssl.studenten-wg-halle.de:443 > TIMEOUTclose = >