Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Neon skipping Negotiate authentication challenges #102

Closed
aph3rson opened this issue Jan 18, 2023 · 3 comments
Closed

Neon skipping Negotiate authentication challenges #102

aph3rson opened this issue Jan 18, 2023 · 3 comments

Comments

@aph3rson
Copy link

Describe the bug
I'm configuring a new device with my previous configuration, and there seems to be a feature regression. Neon (within davfs2) looks to be skipping Negotiate authentication challenges on my new device. Specifically, on the impacted environment, Neon looks to be ignoring the Negotiate challenge in the WWW-Authenticate header. Here's a short snippet of logging output.

Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Reading 381 bytes of response body.
Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Got 381 bytes.
Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Running post_send hooks
Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Post-send (#0), code is 401 (want 401), WWW-Authenticate is Negotiate, Basic realm="Corporate Login"
Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Got challenge (code 401).
Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Got 'Basic' challenge.
Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Trying Basic challenge...
Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Basic auth scope is: /mnt/

Interestingly enough, my previous device is not impacted by this - it seems to be performing Kerberos auth just fine. It's running a different version of neon/different OS, but I'm not sure if that's the issue at-hand here. Here's a snippet from those logs, note how the Negotiate challenge is tried first (truncated because it's a real token and davfs2 works thereafter):

Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Reading 381 bytes of response body.
Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Got 381 bytes.
Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Running post_send hooks
Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: ah_post_send (#0), code is 401 (want 401), WWW-Authenticate is Negotiate, Basic realm="ANT (Windows) Login"
Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: auth: Got challenge (code 401).
Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: auth: Got 'Negotiate' challenge.
Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: auth: Got 'Basic' challenge.
Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: auth: Trying Negotiate challenge...
Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: gssapi: init_sec_context OK. (major=1)
Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: gssapi: Output token: [YIIKvwYJKoZIhvcSAQIC...

davfs2 has informed its users that it does not set Kerberos-specific settings, and that all transport-related behavior is within neon. It can provide credentials to neon, but neither environment is configured to do so.

Impacted Environment

  • neon version: 0.32.2-1
  • OS: Ubuntu 22.04
  • SSL library version: OpenSSL 3.0.2 15 Mar 2022

Unimpacted Environment

  • neon version: 0.30.2-4
  • OS: Ubuntu 20.04
  • SSL library version: OpenSSL 1.1.1f 31 Mar 2020

To Reproduce

  1. Install Ubuntu 22.04
  2. Install davfs2 and libneon27
  3. Configure Ubuntu for Kerberos logon with sssd
  4. Connect davfs2 to a webdav endpoint using Kerberos authentication
  5. Observe that davfs2 is unable to perform Kerberos authentication

Debugging output

Full unimpacted device log output Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: davfs2 1.5.5 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: /sbin/mount.davfs https://webdav.corp.example.com/mnt/ /home/CORP.EXAMPLE.COM/aph3rson/Drive -o rw,noexec,nosuid,nodev,conf=/etc/davfs2/corporate.conf,uid=630783448,gid=600260513,file_mode=600,dir_mode=700,user Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Configuration: Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: url: https://webdav.corp.example.com/mnt/ Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: mount point: /home/CORP.EXAMPLE.COM/aph3rson/Drive Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: dav_user: davfs2 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: dav_group: davfs2 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: conf: /etc/davfs2/corporate.conf Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: user: 1 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: netdev: 1 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: grpid: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: mopts: 0xc0ed000e Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: kernel_fs: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: buf_size: 0 KiB Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: uid: 630783448 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: gid: 600260513 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: dir_mode: 040700 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: file_mode: 0100600 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: scheme: https Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: host: webdav.corp.example.com Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: port: 443 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: path: /mnt/ Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: trust_ca_cert: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: trust_server_cert: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: secrets: /home/CORP.EXAMPLE.COM/aph3rson/.davfs2/secrets Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: clicert: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: p_host: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: p_port: 8080 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: useproxy: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: askauth: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: locks: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: lock_owner: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: lock_timeout: 1800 s Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: lock_refresh: 60 s Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: expect100: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: if_match_bug: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: drop_weak_etags: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: n_cookies: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: precheck: 1 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: ignore_dav_header: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: use_compression: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: follow_redirect: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: connect_timeout: 10 s Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: read_timeout: 30 s Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: retry: 30 s Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: max_retry: 300 s Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: s_charset: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: header: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: sys_cache: /var/cache/davfs2 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: cache_dir: /home/CORP.EXAMPLE.COM/aph3rson/.davfs2/cache Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: backup_dir: lost+found Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: cache_size: 50 MiB Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: table_size: 1024 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: dir_refresh: 60 s Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: file_refresh: 1 s Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: delay_upload: 10 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: gui_optimize: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: minimize_mem: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: debug: 0xf Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: neon_debug: 0x1b Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: mounts in: /proc/mounts Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: uid ok Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: gid ok Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: memeber of group davfs2 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Secrets: Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: username: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: cl_username: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: password: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: p_user: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: p_passwd: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: clicert_pw: (null) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: PID file: /var/run/mount.davfs/home-CORP.EXAMPLE.COM-aph3rson-Drive.pid Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: changing persona: euid 630783448, gid 130 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Initializing webdav Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: HTTP session to https://webdav.corp.example.com:443 begins. Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Initializing cache Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Alignment of dav_node: 16 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Checking cache directory Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: /home/CORP.EXAMPLE.COM/aph3rson/.davfs2/cache/webdav.corp.example.com-mnt+home-CORP.EXAMPLE.COM-aph3rson-Drive+aph3rson Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: (nil)->0x55809973f7a0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Reading stored cache data Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f7a0->0x55809973f6d0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809973f610 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099713d50 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x5580997195d0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809973b2e0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099749260 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x5580997493a0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099749500 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099749740 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x5580997497e0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099749a10 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099749ad0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099749c30 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099749e70 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974a0b0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974a170 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974a3a0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974a440 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974a680 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974a800 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974a9a0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974ab80 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974ac40 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099750b80 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099750de0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099750ee0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099751080 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099751220 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x5580997513c0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974ca50 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974cbf0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974cd90 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974cf30 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974d0d0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974d270 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974d410 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974d670 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974d770 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974d910 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974dab0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974dc50 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974deb0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974dfb0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974e150 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974e380 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974e530 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974e630 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974e7d0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974e970 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974eab0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974ebf0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974ede0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974ee80 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974efc0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974f100 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974f240 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974f410 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974f540 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974f5e0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974f720 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974f860 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974f9a0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974fae0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974fc20 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974fe10 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974feb0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809974fff0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099750130 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099750270 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099750440 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x5580997504e0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099750620 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099750760 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x5580997508a0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099759570 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099759710 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099759940 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099759a40 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099759be0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099759d80 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x558099759f20 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809975a0c0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: new node: 0x55809973f6d0->0x55809975a2f0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: ah_create, for WWW-Authenticate Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Running pre_send hooks Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Sending request headers: OPTIONS /mnt/ HTTP/1.1 User-Agent: davfs2/1.5.5 neon/0.30.2 Keep-Alive: Connection: TE, Keep-Alive TE: trailers Host: webdav.corp.example.com Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Sending request-line and headers: Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Doing DNS lookup on webdav.corp.example.com... Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: req: Connecting to 10.187.230.67:443 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Request sent; retry is 0. Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [status-line] < HTTP/1.1 200 OK Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Server: Server Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [server], Value: [Server] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Date: Wed, 18 Jan 2023 01:10:27 GMT Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [date], Value: [Wed, 18 Jan 2023 01:10:27 GMT] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Content-Length: 0 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [content-length], Value: [0] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Connection: keep-alive Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [connection], Value: [keep-alive] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Dav: 1, 2 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [dav], Value: [1, 2] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Cache-Control: no-cache Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [cache-control], Value: [no-cache] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Strict-Transport-Security: max-age=631138519 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [strict-transport-security], Value: [max-age=631138519] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] X-Permitted-Cross-Domain-Policies: none Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [x-permitted-cross-domain-policies], Value: [none] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] X-XSS-Protection: 1; mode=block Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [x-xss-protection], Value: [1; mode=block] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Ms-Author-Via: DAV Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [ms-author-via], Value: [DAV] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] X-Request-Id: 756c927d-5e68-4118-8567-15f9338bae58 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [x-request-id], Value: [756c927d-5e68-4118-8567-15f9338bae58] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] X-Download-Options: noopen Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [x-download-options], Value: [noopen] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] X-Runtime: 0.001254 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [x-runtime], Value: [0.001254] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] X-Frame-Options: sameorigin Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [x-frame-options], Value: [sameorigin] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] X-Content-Type-Options: nosniff Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [x-content-type-options], Value: [nosniff] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Allow: OPTIONS,HEAD,GET,PUT,POST,DELETE,PROPFIND,PROPPATCH,MKCOL,COPY,MOVE Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [allow], Value: [OPTIONS,HEAD,GET,PUT,POST,DELETE,PROPFIND,PROPPATCH,MKCOL,COPY,MOVE] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Access-Control-Allow-Credentials: true Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [access-control-allow-credentials], Value: [true] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Access-Control-Allow-Methods: OPTIONS,GET,PATCH,DELETE Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [access-control-allow-methods], Value: [OPTIONS,GET,PATCH,DELETE] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Access-Control-Allow-Headers: X-Requested-With,Content-type,Accept,Origin Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [access-control-allow-headers], Value: [X-Requested-With,Content-type,Accept,Origin] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Access-Control-Max-Age: 200 Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [access-control-max-age], Value: [200] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Status: 200 OK Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [status], Value: [200 OK] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Strict-Transport-Security: max-age=31536000; includeSubDomains Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [strict-transport-security], Value: [max-age=31536000; includeSubDomains] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] X-Robots-Tag: noindex, nofollow Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Header Name: [x-robots-tag], Value: [noindex, nofollow] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: [hdr] Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: End of headers. Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Running post_headers hooks Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Running post_send hooks Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: ah_post_send (#0), code is 200 (want 401), WWW-Authenticate is (none) Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Request ends, status 200 class 2xx, error line: 200 OK Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Running destroy hooks. Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Request ends. Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: ah_create, for WWW-Authenticate Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Running pre_send hooks Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Sending request headers: PROPFIND /mnt/ HTTP/1.1 User-Agent: davfs2/1.5.5 neon/0.30.2 Connection: TE TE: trailers Host: webdav.corp.example.com Depth: 1 Content-Length: 257 Content-Type: application/xml Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Sending request-line and headers: Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Sending request body: Jan 17 17:10:27 old-pc-hostname mount.davfs[70265]: Request sent; retry is 1. Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [status-line] < HTTP/1.1 401 Unauthorized Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] Server: Server Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Header Name: [server], Value: [Server] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] Date: Wed, 18 Jan 2023 01:10:27 GMT Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Header Name: [date], Value: [Wed, 18 Jan 2023 01:10:27 GMT] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] Content-Type: text/html; charset=iso-8859-1 Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Header Name: [content-type], Value: [text/html; charset=iso-8859-1] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] Content-Length: 381 Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Header Name: [content-length], Value: [381] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] Connection: keep-alive Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Header Name: [connection], Value: [keep-alive] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] Access-Control-Allow-Credentials: true Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Header Name: [access-control-allow-credentials], Value: [true] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] Access-Control-Allow-Methods: OPTIONS,GET,PATCH,DELETE Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Header Name: [access-control-allow-methods], Value: [OPTIONS,GET,PATCH,DELETE] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] Access-Control-Allow-Headers: X-Requested-With,Content-type,Accept,Origin Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Header Name: [access-control-allow-headers], Value: [X-Requested-With,Content-type,Accept,Origin] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] Access-Control-Max-Age: 200 Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Header Name: [access-control-max-age], Value: [200] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] WWW-Authenticate: Negotiate Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Header Name: [www-authenticate], Value: [Negotiate] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] WWW-Authenticate: Basic realm="Corporate Login" Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Header Name: [www-authenticate], Value: [Basic realm="Corporate Login"] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: [hdr] Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: End of headers. Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Running post_headers hooks Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Reading 381 bytes of response body. Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Got 381 bytes. Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: Running post_send hooks Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: ah_post_send (#0), code is 401 (want 401), WWW-Authenticate is Negotiate, Basic realm="Corporate Login" Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: auth: Got challenge (code 401). Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: auth: Got 'Negotiate' challenge. Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: auth: Got 'Basic' challenge. Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: auth: Trying Negotiate challenge... Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: gssapi: init_sec_context OK. (major=1) Jan 17 17:10:28 old-pc-hostname mount.davfs[70265]: gssapi: Output token: [YIIKvwYJKoZIhvcSAQIC... ```
Full impacted device log output Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: davfs2 1.6.1 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: /sbin/mount.davfs https://webdav.corp.example.com/mnt/ /home/CORP.EXAMPLE.COM/aph3rson/Drive -o rw,noexec,nosuid,nodev,conf=/etc/davfs2/corporate.conf,uid=630783448,gid=600260513,file_mode=600,dir_mode=700,user Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Configuration: Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: url: https://webdav.corp.example.com/mnt/ Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: mount point: /home/CORP.EXAMPLE.COM/aph3rson/Drive Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: dav_user: davfs2 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: dav_group: davfs2 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: conf: /etc/davfs2/corporate-drive.conf Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: user: 1 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: netdev: 1 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: grpid: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: mopts: 0xc0ed000e Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: buf_size: 0 KiB Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: uid: 630783448 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: gid: 600260513 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: dir_mode: 040700 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: file_mode: 0100600 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: scheme: https Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: host: webdav.corp.example.com Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: port: 443 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: path: /mnt/ Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: trust_ca_cert: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: trust_server_cert: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: secrets: /home/CORP.EXAMPLE.COM/aph3rson/.davfs2/secrets Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: clicert: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: p_host: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: p_port: 8080 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: useproxy: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: askauth: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: locks: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: lock_owner: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: lock_timeout: 1800 s Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: lock_refresh: 60 s Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: expect100: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: if_match_bug: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: drop_weak_etags: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: n_cookies: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: precheck: 1 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: ignore_dav_header: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: use_compression: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: follow_redirect: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: sharepoint_href_bug: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: connect_timeout: 10 s Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: read_timeout: 30 s Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: retry: 30 s Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: max_retry: 300 s Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: s_charset: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: header: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: sys_cache: /var/cache/davfs2 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: cache_dir: /home/CORP.EXAMPLE.COM/aph3rson/.davfs2/cache Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: backup_dir: lost+found Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: cache_size: 50 MiB Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: table_size: 1024 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: dir_refresh: 60 s Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: file_refresh: 1 s Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: delay_upload: 10 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: gui_optimize: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: minimize_mem: 0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: debug: 0xf Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: neon_debug: 0x1b Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: mounts in: /proc/mounts Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: uid ok Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: gid ok Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: memeber of group davfs2 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Secrets: Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: username: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: cl_username: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: password: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: p_user: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: p_passwd: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: clicert_pw: (null) Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: PID file: /var/run/mount.davfs/home-CORP.EXAMPLE.COM-aph3rson-Drive.pid Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: changing persona: euid 630783448, gid 140 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Initializing webdav Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: HTTP session to https://webdav.corp.example.com:443 begins. Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Initializing cache Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Alignment of dav_node: 16 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Checking cache directory Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: /home/CORP.EXAMPLE.COM/aph3rson/.davfs2/cache/webdav.corp.example.com-mnt+home-CORP.EXAMPLE.COM-aph3rson-Drive+aph3rson Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: new node: (nil)->0x561b8ffec1d0 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Reading stored cache data Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: new node: 0x561b8ffec1d0->0x561b8ffec130 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: auth: Create for WWW-Authenticate Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Running pre_send hooks Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Sending request headers: OPTIONS /mnt/ HTTP/1.1 User-Agent: davfs2/1.6.1 neon/0.32.2 Keep-Alive: Connection: TE, Keep-Alive TE: trailers Host: webdav.corp.example.com Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Sending request-line and headers: Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Doing DNS lookup on webdav.corp.example.com... Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: req: Connecting to 10.187.230.67:443 Jan 17 17:11:42 my.fqdn.host.name mount.davfs[42476]: Request sent; retry is 0. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [status-line] < HTTP/1.1 200 OK Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Server: Server Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [server], Value: [Server] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Date: Wed, 18 Jan 2023 01:11:43 GMT Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [date], Value: [Wed, 18 Jan 2023 01:11:43 GMT] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Content-Length: 0 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [content-length], Value: [0] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Connection: keep-alive Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [connection], Value: [keep-alive] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Dav: 1, 2 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [dav], Value: [1, 2] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Cache-Control: no-cache Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [cache-control], Value: [no-cache] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Strict-Transport-Security: max-age=631138519 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [strict-transport-security], Value: [max-age=631138519] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] X-Permitted-Cross-Domain-Policies: none Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [x-permitted-cross-domain-policies], Value: [none] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] X-XSS-Protection: 1; mode=block Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [x-xss-protection], Value: [1; mode=block] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Ms-Author-Via: DAV Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [ms-author-via], Value: [DAV] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] X-Request-Id: d72a5137-b2c8-4746-831f-045992af09c5 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [x-request-id], Value: [d72a5137-b2c8-4746-831f-045992af09c5] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] X-Download-Options: noopen Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [x-download-options], Value: [noopen] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] X-Runtime: 0.001755 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [x-runtime], Value: [0.001755] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] X-Frame-Options: sameorigin Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [x-frame-options], Value: [sameorigin] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] X-Content-Type-Options: nosniff Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [x-content-type-options], Value: [nosniff] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Allow: OPTIONS,HEAD,GET,PUT,POST,DELETE,PROPFIND,PROPPATCH,MKCOL,COPY,MOVE Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [allow], Value: [OPTIONS,HEAD,GET,PUT,POST,DELETE,PROPFIND,PROPPATCH,MKCOL,COPY,MOVE] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Allow-Credentials: true Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-allow-credentials], Value: [true] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Allow-Methods: OPTIONS,GET,PATCH,DELETE Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-allow-methods], Value: [OPTIONS,GET,PATCH,DELETE] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Allow-Headers: X-Requested-With,Content-type,Accept,Origin Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-allow-headers], Value: [X-Requested-With,Content-type,Accept,Origin] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Max-Age: 200 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-max-age], Value: [200] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Status: 200 OK Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [status], Value: [200 OK] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Strict-Transport-Security: max-age=31536000; includeSubDomains Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [strict-transport-security], Value: [max-age=31536000; includeSubDomains] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] X-Robots-Tag: noindex, nofollow Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [x-robots-tag], Value: [noindex, nofollow] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: End of headers. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Running post_headers hooks Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Running post_send hooks Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Post-send (#0), code is 200 (want 401), WWW-Authenticate is (none) Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Request ends, status 200 class 2xx, error line: 200 OK Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Running destroy hooks. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Request ends. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Create for WWW-Authenticate Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Running pre_send hooks Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Sending request headers: PROPFIND /mnt/ HTTP/1.1 User-Agent: davfs2/1.6.1 neon/0.32.2 Connection: TE TE: trailers Host: webdav.corp.example.com Depth: 1 Content-Length: 257 Content-Type: application/xml Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Sending request-line and headers: Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Sending request body: Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Request sent; retry is 1. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [status-line] < HTTP/1.1 401 Unauthorized Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Server: Server Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [server], Value: [Server] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Date: Wed, 18 Jan 2023 01:11:43 GMT Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [date], Value: [Wed, 18 Jan 2023 01:11:43 GMT] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Content-Type: text/html; charset=iso-8859-1 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [content-type], Value: [text/html; charset=iso-8859-1] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Content-Length: 381 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [content-length], Value: [381] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Connection: keep-alive Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [connection], Value: [keep-alive] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Allow-Credentials: true Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-allow-credentials], Value: [true] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Allow-Methods: OPTIONS,GET,PATCH,DELETE Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-allow-methods], Value: [OPTIONS,GET,PATCH,DELETE] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Allow-Headers: X-Requested-With,Content-type,Accept,Origin Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-allow-headers], Value: [X-Requested-With,Content-type,Accept,Origin] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Max-Age: 200 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-max-age], Value: [200] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] WWW-Authenticate: Negotiate Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [www-authenticate], Value: [Negotiate] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] WWW-Authenticate: Basic realm="Corporate Login" Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [www-authenticate], Value: [Basic realm="Corporate Login"] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: End of headers. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Running post_headers hooks Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Reading 381 bytes of response body. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Got 381 bytes. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Running post_send hooks Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Post-send (#0), code is 401 (want 401), WWW-Authenticate is Negotiate, Basic realm="Corporate Login" Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Got challenge (code 401). Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Got 'Basic' challenge. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Trying Basic challenge... Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Basic auth scope is: /mnt/ Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Accepted Basic challenge. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Running pre_send hooks Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Sending 'Basic' response. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: '/mnt/' is inside auth domain: 1. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Sending request headers: PROPFIND /mnt/ HTTP/1.1 User-Agent: davfs2/1.6.1 neon/0.32.2 Connection: TE TE: trailers Host: webdav.corp.example.com Depth: 1 Content-Length: 257 Content-Type: application/xml Authorization: Basic Ohgr848bVg== Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Sending request-line and headers: Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Sending request body: Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Request sent; retry is 1. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [status-line] < HTTP/1.1 401 Unauthorized Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Server: Server Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [server], Value: [Server] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Date: Wed, 18 Jan 2023 01:11:43 GMT Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [date], Value: [Wed, 18 Jan 2023 01:11:43 GMT] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Content-Type: text/html; charset=iso-8859-1 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [content-type], Value: [text/html; charset=iso-8859-1] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Content-Length: 381 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [content-length], Value: [381] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Connection: keep-alive Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [connection], Value: [keep-alive] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Allow-Credentials: true Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-allow-credentials], Value: [true] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Allow-Methods: OPTIONS,GET,PATCH,DELETE Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-allow-methods], Value: [OPTIONS,GET,PATCH,DELETE] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Allow-Headers: X-Requested-With,Content-type,Accept,Origin Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-allow-headers], Value: [X-Requested-With,Content-type,Accept,Origin] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Access-Control-Max-Age: 200 Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [access-control-max-age], Value: [200] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] WWW-Authenticate: Basic realm="Corporate Login" Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Header Name: [www-authenticate], Value: [Basic realm="Corporate Login"] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: [hdr] Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: End of headers. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Running post_headers hooks Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Reading 381 bytes of response body. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Got 381 bytes. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Running post_send hooks Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Post-send (#1), code is 401 (want 401), WWW-Authenticate is Basic realm="Corporate Login" Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Got challenge (code 401). Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Got 'Basic' challenge. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: Trying Basic challenge... Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: authentication failure: Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Corporate Login Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: auth: No challenges accepted. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Request ends, status 401 class 4xx, error line: Could not authenticate to server: rejected Basic challenge Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Running destroy hooks. Jan 17 17:11:43 my.fqdn.host.name mount.davfs[42476]: Request ends. ```
@aph3rson
Copy link
Author

edit: This appears to be a downstream packaging issue, at least in Ubuntu (and possibly Debian). The built package in 20.04 has GSSAPI support built-in, the package in 22.04 does not.

Example from 20.04:

me@carbon:/tmp$ strings ./usr/lib/x86_64-linux-gnu/libneon.so.27 | grep gss
gss_display_status
gss_release_buffer
gss_init_sec_context
gss_delete_sec_context
gss_import_name
gss_release_name
libgssapi_krb5.so.2
gssapi_krb5_2_MIT
gssapi: Output token: [%s]
gssapi: No output token.
gssapi: Continuation token [%s]
gssapi: Reset incomplete context.
gssapi: init_sec_context OK. (major=%d)
gssapi: No token in Negotiate response!
gssapi: Negotiate response token [%s]
gssapi: gss_import_name failed.

vs. from 22.04:

me@carbon:/tmp$ strings /usr/lib/x86_64-linux-gnu/libneon.so.27 | grep gss
me@carbon:/tmp$

old vs. new also suggests the same thing, note checking for krb5-config... none in the new build output.

We'll raise this with the OS maintainers.

@mswilson mswilson mentioned this issue Jan 18, 2023
Closed
@aph3rson
Copy link
Author

Launchpad bug report: #2003266

notroj added a commit that referenced this issue Jan 19, 2023
@notroj
Fail configure if --with-gssapi is used but GSSAPI library detection
65e0227 
fails [fixes #102, issue #52]

* macros/neon.m4 (NEON_GSSAPI): Fail if --with-gssapi is passed
  but library detection fails. Use NE_*_SUPPORT.

* configure.in: Report GSSAPI library detection result.
@notroj
Copy link
Owner

notroj commented Jan 19, 2023

Thanks for the report and @mswilson for the analysis.

I'll adjust the configure script to fail if --with-gssapi is used but library detection fails.

@notroj notroj closed this as completed in 4fdcff4 Jan 19, 2023
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@aph3rson @notroj