Windows Sync Client do not accept Username Password if an htaccess password ist set

Desktop
1

Steps to reproduce
1.if an htaccess folder force set

Satisfy any
Order Allow,Deny
Allow from x.x.x.x # own IP
Allow from 127.0.0.1
Require valid-user
AuthUserFile /usr/www/users/filesq/.htpasswd
AuthGroupFile /dev/null
AuthName “Passwortabfrage”
AuthType Basic

  1. The Windows client called the URL https://user:password@url

3.The followingUser and passworrd

The Client said that the login not allowed
Expected behaviour
Tell us what should happen

Actual behaviour
Tell us what happens instead

Client configuration
Client version: 2.2.4
Client operating system: Windows 7

Server configuration
Operating system: Linux
Web server: Apache
Database: Mysql
PHP version: 5.6
ownCloud version (see ownCloud admin page): 9.1.4
Updated from an older ownCloud or fresh install:
Special configurations (external storage, external authentication, reverse proxy, server-side-encryption):

ownCloud log (data/owncloud.log)

Please paste possible errors in the following code block, see


{"reqId":"gYAquhIG+Rymk0TC46F3","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:11:01+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"E1FAcMb3j\/UU+4owc\/Ml","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:11:01+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"B9IaAyiMyjYBiFLEGLTr","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:11:10+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"M\/lhjZZYdey++K8fKJPT","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:11:10+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"2GVKYHBKBMbyIFVWc7xH","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:11:18+00:00","method":"GET","url":"\/","user":"--"}
{"reqId":"tlVjhnp+q82Otcgp2mK+","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:11:18+00:00","method":"GET","url":"\/index.php\/login","user":"--"}
{"reqId":"PHkD0eQf6o8S3p3a46gM","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:11:19+00:00","method":"GET","url":"\/index.php\/core\/js\/oc.js?v=74003426c4a23d67e70a88d789b0cc46","user":"--"}
{"reqId":"jcn\/7NfCghvoRRPDJ262","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:11:24+00:00","method":"POST","url":"\/index.php\/login","user":"--"}
{"reqId":"lRMcVNoh2DeK\/t+e5gCx","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:11:40+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"e1GGRrVrxWjvOeMYD\/7x","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:11:40+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"Kr8\/oHZYsVqBt+FgPbt1","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:12:17+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"GESflMJHnoRfPwHUGQAo","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:12:17+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"3GOwLNs8YztEmx4d6hK3","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:12:30+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"sdtB8Auprl+gZz+U059i","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:12:30+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"Y8lnYPQhyVlu6r1fYFGB","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:12:43+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"773sjDcAS+kJ4hT1gZco","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:12:43+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"DEjckQb7j86W2q\/P7FQT","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:16:37+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"DXIAG8izLV7RP+gMokst","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:16:37+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"E35C3t+JAylIvEuY7YUS","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:27:12+00:00","method":"GET","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"vo4LKFYRnM3cb8rirGSj","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:27:12+00:00","method":"GET","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"De+QSAM4xXvCzC1jWTOO","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:27:14+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"zyqc0IFv8ojmpZ8CJDWt","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:27:14+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"AFoUwTU7b9V9dW\/e5slD","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:27:14+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"OYkatEttcJOn9AkOOgHd","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:27:25+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"SiSgauZW3Q4B\/HUOVKWz","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:27:25+00:00","method":"PROPFIND","url":"\/remote.php\/webdav\/","user":"--"}
{"reqId":"wxNLvQkm\/laRkTXMQj8o","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:30:54+00:00","method":"GET","url":"\/","user":"--"}
{"reqId":"diT3XwYht680zf4od2AJ","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:30:54+00:00","method":"GET","url":"\/index.php\/login","user":"--"}
{"reqId":"YKRJV1XH2bVrJUAzUYRW","remoteAddr":"109.193.56.18","app":"core","message":"Login failed: 'dvfgi' (Remote IP: '109.193.56.18')","level":2,"time":"2017-02-17T07:30:56+00:00","method":"GET","url":"\/index.php\/core\/js\/oc.js?v=74003426c4a23d67e70a88d789b0cc46","user":"--"}
2

This is expected. You can’t use an additional basic auth as ownCloud is also using an own basic auth to authenticate its client.

3

OK, but why the client accept in the first step the URL.

i said the Client as URL : https://user:pass@url.com an the Server said, ok give me the user an a password. but this second step no work. If is not possible sorry

i would saved my cloud this two doors, if one of this break there is an second door.

I see no reason an htaccess auth not function this an sync client

Regard

Erik

4

See:

You can’t have two basic auths (one by apache and one by ownCloud’s WebDAV). If it has worked, it worked by luck, as the behavior of a daisy chained basic auth is undefined.

→ 1.5.3: Basic Authentication Support Broken · Issue #1618 · owncloud/client · GitHub

5

Can you say more detail

6

There are no additional details needed. ownCloud (or better the sync client) won’t work and will never work with an additional Basic Authentication in front of ownCloud.

7

hI; its ok for me, but in every software are bugs. if an bad guy found one, you have a chance to secure your own cloud. the developer of the owncloude sync make a good thing if it make is possible.

8

It is not possible to make this possible in the sync client for the reasons explained above.

9

What you can do to add an additional security layer: make owncloud only accessible via a virtual private network (VPN). The inconvenience is that you have to the VPN before you access owncloud.