maindavfs2 - Support: sr #110181, kerberos support?

 
 

sr #110181: kerberos support?

Submitter:  None
Submitted:  Fri 24 Jan 2020 09:20:58 AM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  In Progress
Privacy:  Public Assigned to:  _71007
Originator Email:  -email is unavailable- Open/Closed:  Open
Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup
   

Mon 27 Jan 2020 06:04:53 PM UTC, comment #2: 

The Neon-library used by davfs2 supports GSSAPI. This should work without any special action by davfs2 provided Kerberos support is configured accordingly on your system. But I have no experience with this. You will have to look for advise from someone else.

The excerpt from the logfile indicates that the server does not request kerberos but HTTP-Basic authentication. You should additionally set "debug http" to see all headers from your client as well as from the server. And it may be necessary to change the server configuration (after checking what is going on on the wire).

Werner

 - <_71007>
Fri 24 Jan 2020 09:54:03 AM UTC, comment #1: 

Hello

to provide more details (redacted), on the Ubuntu host I have this in fstab
(concerning the remove webdav resource):

https://<nextcloud host>/nextcloud/remote.php/dav/files/<myuser> /home/<myuser>/nextcloud davfs user,rw,noauto 0 0

then this concerning dafvs global config:

# grep -v ^# /etc/davfs2/davfs2.conf | uniq
ask_auth        0
debug httpauth

then the user ~/.davfs/davfs.conf and ~/davfs/secrets are all commented out.

This is what I get

$ mount /home/<myuser>/nextcloud
/sbin/mount.davfs: Mounting failed.
Could not authenticate to server: rejected Basic challenge

and this from syslog

Jan 24 10:44:45 lapex-19 mount.davfs: davfs2 1.5.4
Jan 24 10:44:45 lapex-19 mount.davfs: Initializing webdav
Jan 24 10:44:45 lapex-19 mount.davfs: ah_create, for WWW-Authenticate
Jan 24 10:44:45 lapex-19 mount.davfs: ah_post_send (#0), code is 401 (want 401), WWW-Authenticate is Basic realm="Nextcloud", charset="UTF-8"
Jan 24 10:44:45 lapex-19 mount.davfs: auth: Got challenge (code 401).
Jan 24 10:44:45 lapex-19 mount.davfs: auth: Got 'Basic' challenge.
Jan 24 10:44:45 lapex-19 mount.davfs: auth: Trying Basic challenge...
Jan 24 10:44:45 lapex-19 mount.davfs: auth: Accepted Basic challenge.
Jan 24 10:44:45 lapex-19 mount.davfs: auth: Sending 'Basic' response.
Jan 24 10:44:52 lapex-19 mount.davfs: ah_post_send (#1), code is 401 (want 401), WWW-Authenticate is Basic realm="Nextcloud", charset="UTF-8"
Jan 24 10:44:52 lapex-19 mount.davfs: auth: Got challenge (code 401).
Jan 24 10:44:52 lapex-19 mount.davfs: auth: Got 'Basic' challenge.
Jan 24 10:44:52 lapex-19 mount.davfs: auth: Trying Basic challenge...
Jan 24 10:44:52 lapex-19 mount.davfs: authentication failure:
Jan 24 10:44:52 lapex-19 mount.davfs:   Nextcloud
Jan 24 10:44:52 lapex-19 mount.davfs: auth: No challenges accepted.

and as said in the beginning <myuser> has a valid kerberos ticket.

$ klist
Credentials cache: FILE:/tmp/krb5cc_22283
        Principal: myuser@DOMAIN

  Issued                Expires               Principal
Jan 24 09:52:56 2020  Jan 24 19:52:56 2020  krbtgt/DOMAIN@DOMAIN


Anonymous
Fri 24 Jan 2020 09:20:58 AM UTC, original submission:  

Hello

I have an ubuntu 18.04 system which can join a kerberos (heimdal V5) realm (users can get a ticket upon login).

I would like to be able to mount a nextcloud webdav filesystem and as per nextcloud documentation davfs2 is working to that end.
Ref: https://docs.nextcloud.com/server/17/user_manual/files/access_webdav.html

What I would like to do next is to be able to mount the davfs filesystem without having to write the user password in the secret file but instead leveraging the kerberos setup. Does favfs2 support kerberos? If so can you please point me to any relevant documentation? I searched around and the only bit I found is this but it does not show exactly how to achieve that

https://savannah.nongnu.org/support/?108675

Many thanks in advance

 Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by _71007 (Posted a comment)
  • -email is unavailable- added by None (Submitted the item)

    •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2020-01-27 _71007 StatusNone In Progress
        Assigned toNone _71007

    Back to the top

    Copyright © 2024 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.13-7a7b.
    Corresponding source code