Search code examples
xpageslotus-dominowebdav

Webdav for Xpages and Domino only works giving anonymous full access rights

I have installed webdav for Domino and made the required changes in the webdavconfig.nsf.

If I give designer rights to anonymous users, I can access and update the word documuments in the database through Internet Explorer and MS Word, but if I change them back to no rights, i cant. Of course I want to edit them with my own credentials.

What am I doing wrong?

OS windows 10

URL which works anonymous (????? are hidden)

webdavs://dev.?????.nl/webdav/domino/eod.docx

https://dev.?????.nl/development/webdab.nsf

https://dev.?????.nl/webdav/domino/

Any help would be appreciated!

Solution

  • I wrote that application.

    You are in the tricky land of authentication. Domino supports: Basic, FormBased, Cookie based (LTPA) SPENEGO and SAML. The later 3 need configuration work.

    What happens when you use WebDAV is that no longer your browser, but a local library (belonging to Explorer or Office) talks to Domino. You can "manually" try that using File - Open and paste the URL to the document (the one with https://, not webdavs://).

    The only thing that happens with a webdavs:// url: a little helper checks, based on extension in the registry, what app is needed (Word, Excel, OpenOffice) and then calls that app with the https:// url as parameter. Like starting e.g. Excel from the command line:

    excel.exe https://someserver/path/spreadshit.xls

    By default Windows now uses NTLM or Kerberos authentication, neither of them supported by Domino (There used to be a proxy translating NTML to LTPA by a 3rd party). So no credential reaches Domino. Hence you need anonymous access rights.

    For older versions of Windows I described what you need to do to get Basic Auth going.

    Never came around to check what setting you would need on Windows 8 or 10 to allow basic auth there. Also, in theory, SAML or SPENEGO SSO might do the trick.

    If you got Mac or Linux, you could check them first.

    So the challenge isn't with the webDAV plugin as such, but in finding a common authentication ground between the OS and Domino. Hope that clarifies it a little.

    Let us know how it goes!