Bug 62091 - dav not working
Summary: dav not working
Status: NEW
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_dav (show other bugs)
Version: 2.4.29
Hardware: PC Linux
: P2 critical (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-02-09 16:21 UTC by boec0025
Modified: 2018-02-26 01:48 UTC (History)
1 user (show)



Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description boec0025 2018-02-09 16:21:54 UTC
okay so i have been running a dav server for about 15 years.  last i was running fc 24 and it was working perfectly.  i recently upgraded to fc 27 and since i have NOT been able to get dav working.  i figured out a missing needed file for dav lock db but now it doesnt work in a new way.  i have it set up SSL (TSL only), with digest authentication.  so i can login fine but when i go to do anything i get this...

Sun Feb 04 05:14:56.416211 2018] [ssl:debug] [pid 1400:tid 139699632559872] ssl_engine_io.c(1103): [client XXXXXXXXXXX:44186] AH02001: Connection closed to child 139 with standard shutdown (server www.XXXXXXXXX.com:443)
[Sun Feb 04 05:15:01.357283 2018] [ssl:info] [pid 1401:tid 139700219983616] [client 66.242.91.23:44188] AH01964: Connection to child 486 established (server www.XXXXXXXXXXX.com:443)
[Sun Feb 04 05:15:01.357473 2018] [ssl:debug] [pid 1401:tid 139700219983616] ssl_engine_kernel.c(2128): [client 66.242.91.23:44188] AH02043: SSL virtual host for servername XXXXXXXXXXX.com found
[Sun Feb 04 05:15:01.364878 2018] [ssl:debug] [pid 1401:tid 139700219983616] ssl_engine_kernel.c(2058): [client 66.242.91.23:44188] AH02041: Protocol: TLSv1.2, Cipher:... (256/256 bits)
[Sun Feb 04 05:15:01.379856 2018] [ssl:debug] [pid 1401:tid 139700219983616] ssl_engine_kernel.c(368): [client XXXXXXXXXX:44188] AH02034: Initial (No.1) HTTPS request received for child 486 (server www.XXXXXXXXXXX.com:443)
[Sun Feb 04 05:15:01.380120 2018] [authz_core:debug] [pid 1401:tid 139700219983616] mod_authz_core.c(809): [client XXXXXXXXXX:44188] AH01626: authorization result of Require user daniel: denied (no authenticated user yet)
[Sun Feb 04 05:15:01.380140 2018] [authz_core:debug] [pid 1401:tid 139700219983616] mod_authz_core.c(809): [client XXXXXXXXXXXXX:44188] AH01626: authorization result of <RequireAny>: denied (no authenticated user yet)
[Sun Feb 04 05:15:01.380299 2018] [authz_core:debug] [pid 1401:tid 139700219983616] mod_authz_core.c(809): [client XXXXXXXXXXXXX:44188] AH01626: authorization result of Require user daniel: granted
[Sun Feb 04 05:15:01.380316 2018] [authz_core:debug] [pid 1401:tid 139700219983616] mod_authz_core.c(809): [client XXXXXXXXXXXXX:44188] AH01626: authorization result of <RequireAny>: granted 

so from what i can tell is that it is allowing me sometimes but not mostly.  thinking this was an authentication issue i removed that and just set it to require all granted and then i could not even go through 2 levels of my directory tree without getting an error.  

further, i THINK this also might be effecting my owncloud site as it is acting at times similar in that it will not proerply load or allow me to upload in a seemingly similar fashion.  

so, to summarize, using dav, i can surf the directories but when i go to upload i get mod_authz_core rejection and when i set it require all granted i cannot even go through the file tree.
Comment 1 boec0025 2018-02-26 01:48:17 UTC
another part to this is that when i set this up with out ssl/tls, so over http, it is just mod_security blocking me which i audited and got to work but every few uploads, it fails.  

when i use the same configuration with tls only over https, it completely fails.  it seems sometimes there is a size component to this because i seem to be albe to upload files a few mbs but anything larger, say 15 mbs is rejected.  

the more i look into this the more i dont get.