Internal WebDAV for OnlyOffice WORKSPACE

[Denis-Raev]

This issue is unique.

• I have used the search tool and did not find an issue describing my bug.

Operating System of DocumentServer

Docker

Version information

7.5.1.1

Expected Behavior

I was waiting for the OnlyOffice internal WebDAV server described in this documentation to work - https://helpcenter.onlyoffice.com/ru/installation/workspace-configure-webdav.aspx

Actual Behavior

When connecting via Windows an error occurs:
“Error code: 0x800770043
Network name not found.”

When connecting via WEB browser an error occurs:
"HTTP ERROR 405 error - This page is not working right now."

Reproduction Steps

When I try to connect to WebDAV OnlyOffice WORKSPACE Communite Edition at http://ip_portal_address/webdav with credentials from the portal user using Windows, I get the following error:
“Error code: 0x800770043
Network name not found.”

When I try to connect through a Web browser, I get an HTTP ERROR 405 error - This page is not working right now.

Additional information

All accounts tried for authorization from the portal are completely valid (it’s not a matter of matching the login-password pair).

Control panel version: 3.5.0.516
Community Server version: 12.5.2.1848
Document server version: 7.5.1.1

[DenisDeeSign]

Moving this issue to CommunityServer repo, since the issue is not related to DocumentServer.

[Carazyda]

Hello @Denis-Raev have you tried connecting through the client WinSCP? Are there any errors in the logs?

[Carazyda]

For Windows File Explorer you can try this solution:

Open regedit. Find HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Services > WebClient > Parameters. For BasicAuthLevel change value to 2. Reboot your PC.

[Denis-Raev]

Hello @Denis-Raev have you tried connecting through the client WinSCP? Are there any errors in the logs?

When I try to connect via WinSCP I get the following.

[Carazyda]

Please check web.webdav.log for errors. Also describe in more detail how you deployed Onlyoffice Workspace? Are you using a proxy or firewall?

[Denis-Raev]

@Carazyda I don’t find such a log in the container with onlyoffice/communityserver:12.5.2.1848.
Deployed according to the documentation via a script using Docker.
A proxy or firewall is not used on either side (not on the client, not on the server).

[Denis-Raev]

For Windows File Explorer you can try this solution:

Open regedit. Find HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Services > WebClient > Parameters. For BasicAuthLevel change value to 2. Reboot your PC.

Thanks a lot! This helped, but now a new problem has appeared. The directory is empty and nothing can be done in it - there are not enough rights.
The DavWWWRoot directory is loaded.

[Carazyda]

Please check this folder /app/onlyoffice/CommunityServer/logs/ for logs and errors. Maybe there are some errors in web.api.log?

[Denis-Raev]

web.api.log

2023-12-05 07:56:29,331 ERROR [7540] ASC.Api.ApiSetup - method error: http://172.18.0.6/api/2.0/files/@root - Server error System.InvalidOperationException: Недостаточно прав для просмотра папки ---> System.Security.SecurityException: Недостаточно прав для просмотра папки

at ASC.Web.Files.Utils.EntryManager.GetEntries (ASC.Files.Core.IFolderDao folderDao, ASC.Files.Core.IFileDao fileDao, ASC.Files.Core.Folder parent, System.Int32 from, System.Int32 count, ASC.Files.Core.FilterType filter, System.Boolean subjectGroup, System.Guid subjectId, System.String searchText, System.Boolean searchInContent, System.Boolean withSubfolders, ASC.Files.Core.OrderBy orderBy, System.Int32& total) [0x0005c] in :0
at ASC.Web.Files.Services.WCFService.FileStorageServiceController.GetFolderItems (System.String parentId, System.Int32 from, System.Int32 count, ASC.Files.Core.FilterType filter, System.Boolean subjectGroup, System.String ssubject, System.String searchText, System.Boolean searchInContent, System.Boolean withSubfolders, ASC.Files.Core.OrderBy orderBy) [0x000fc] in :0
--- End of inner exception stack trace ---
at ASC.Web.Files.Services.WCFService.FileStorageServiceController.GetFolderItems (System.String parentId, System.Int32 from, System.Int32 count, ASC.Files.Core.FilterType filter, System.Boolean subjectGroup, System.String ssubject, System.String searchText, System.Boolean searchInContent, System.Boolean withSubfolders, ASC.Files.Core.OrderBy orderBy) [0x0013e] in :0
at ASC.Api.Documents.DocumentsApi.ToFolderContentWrapper (System.Object folderId, System.Guid userIdOrGroupId, ASC.Files.Core.FilterType filterType, System.Boolean searchInContent, System.Boolean withSubfolders) [0x00088] in <5cb617d4047848b882447b34c4c0d326>:0
at ASC.Api.Documents.DocumentsApi+<>c__DisplayClass6_0.b__0 (System.Object r) [0x00000] in <5cb617d4047848b882447b34c4c0d326>:0
at System.Linq.Enumerable+SelectEnumerableIterator2[TSource,TResult].GetCount (System.Boolean onlyIfCheap) [0x0001c] in <7bb3b9b46f014210b38257ba21db03a8>:0 at System.Linq.Enumerable.Count[TSource] (System.Collections.Generic.IEnumerable1[T] source) [0x00029] in <7bb3b9b46f014210b38257ba21db03a8>:0
at ASC.Api.Collections.CompiledSmartList1[T].get_Count () [0x00000] in <1e1fef8052a94bf4b064a6bd229ba12b>:0 at ASC.Api.Impl.ApiSmartListResponceFilter.TransformList (ASC.Api.Impl.ApiContext context, ASC.Api.Collections.ISmartList smartList) [0x00006] in <1e1fef8052a94bf4b064a6bd229ba12b>:0 at ASC.Api.Impl.ApiSmartListResponceFilter.FilterResponce (System.Object responce, ASC.Api.Impl.ApiContext context) [0x0007f] in <1e1fef8052a94bf4b064a6bd229ba12b>:0 at ASC.Api.Impl.ApiHttpHandlerBase.<PostProcessResponse>b__40_0 (System.Object current, ASC.Api.Interfaces.IApiResponceFilter apiResponceFilter) [0x00008] in <1e1fef8052a94bf4b064a6bd229ba12b>:0 at System.Linq.Enumerable.Aggregate[TSource,TAccumulate] (System.Collections.Generic.IEnumerable1[T] source, TAccumulate seed, System.Func`3[T1,T2,TResult] func) [0x0002e] in <7bb3b9b46f014210b38257ba21db03a8>:0
at ASC.Api.Impl.ApiHttpHandlerBase.PostProcessResponse (System.Web.HttpContextBase context, System.Object responce) [0x0006e] in <1e1fef8052a94bf4b064a6bd229ba12b>:0
at ASC.Api.Impl.ApiHttpHandler.DoProcess (System.Web.HttpContextBase context) [0x0038d] in <1e1fef8052a94bf4b064a6bd229ba12b>:0

[Denis-Raev]

1. I made changes to the registry as described above.
2. I rebooted.
3. I went into Explorer, right-clicked on “This PC” and clicked “Map network drive...”
4. In the folder field, indicated the address to the internal WebDAV server from OnlyOffice - http://10.168.71.134/webdav
5. I left the “Restore connection when logging in” checkbox checked, and also indicated “Use other credentials.”
6. In the window that appears, enter the credentials to access the portal. By default, it does not accept the email (aka login)-password pair, but it accepts the login-password pair synchronized via LDAP. We log in as the owner/administrator of the portal.
7. The network drive is connected, but it is empty and we see the “DavWWWRoot” directory (we do not see any portal structure).

[Denis-Raev]

Now I have enabled SSL (HTTPS) and now I cannot access WebDAV over HTTP or HTTPS. Now it gives a new error:

Network drive mapping failed due to the following error:

The network has not been logged in.

[Denis-Raev]

The web.webdav.log has the following error:

2023-12-05 07:56:29 - error: requestAPI.getStructDirectory | Request failed with status code 500 | GET /api/2.0/files/@root | undefined | Недостаточно прав для просмотра папки
undefined

[Carazyda]

Try creating a new user via email (without ldap) and using their credentials to connect to WebDAV. Also try connecting to /webdav/isLife

Have you made any changes to the configuration? Maybe they changed ports, configs, machine key?

[Denis-Raev]

Connecting to https://10.168.71.134/webdav/isLife gives the status OK.

No, I didn't make any changes. Out of the box configuration deployed via docker.

[Denis-Raev]

Created a new user not related to LDAP in any way. The problem persists.

Network drive mapping failed due to the following error:
The network has not been logged in.

[Denis-Raev]

Moreover, for the purity of the experiment, I even completely disabled LDAP synchronization - the result was the same.

[Carazyda]

Have you enabled SSL? Please try connecting through your certificate's domain name. Also try connecting to WinSCP through a user created via email.

[Denis-Raev]

Yes, I have enabled SSL. I also tried using a domain name - the result was the same. When I try to connect via WinSCP I get the following error.

[Denis-Raev]

Now I have disabled SSL and logged in as a non-LDAP user. As a result, I log in through Windows Explorer, but into the empty DavWWWRoot directory.

[Denis-Raev]

I'm also logged into WinSCP, but the directory is empty.

[Carazyda]

How did you enable/disable SSL? In Control Panel->Https? Have you tried connecting from the same server or from a different machine? Can you try connecting from Linux?

[Denis-Raev]

1. Enabled SSL through the control panel -> HTTPS.
2. Tried from different hosts - the result is the same.
3. Same behavior on Linux.

[Carazyda]

Please specify what OS is on your server? Can you make us a test account on your server so we can reproduce your error. Send it to [email protected] with a link to this issue and "for technical support 2 lvl".

[exograpix]

Any resolution facing same issue in linux installation, windows server is working ok

[elijahdl]

Hello, I'm also experiencing this issue; I get an empty directory when connecting via the windows WebDAV client and the Nautilus WebDAV client

I'm using the DigitalOcean 1-Click App

Control Panel: 3.5.2.530
Community Server: 12.6.0.1900
Document Server: 8.0.1.1