PROPFIND requests from a Microsoft-WebDAV-MiniRedir/6.0.6002 user agent on Apache server where Samba is also running

13,238

Sounds like you've got Windows clients trying to use WebDAV instead of SMB.

lifting the following from one of my answers a couple months ago:

In Network Connections, Advanced menu -> Advanced Settings, make sure the "Web Client" provider is below the normal options in the provider order.

webclient

Or just disable the Web Client service.

Share:
13,238

Related videos on Youtube

Marco Bizzarri
Author by

Marco Bizzarri

Updated on September 18, 2022

Comments

  • Marco Bizzarri
    Marco Bizzarri almost 2 years

    Ok, here is the context. We've a server which is inside our network; on the server there is a Samba configured, providing access to a number of shares; there is also and Apache server providing other services (among them is also WebDav, but for svn folders, so they are different folders).

    In the past months, I've seen that some windows machines would try to access (with PROPFIND) the same paths which they were accessing via SMB. Just to be clear, someone issuing a

    PROPFIND /share/directory/file
    

    where I knew that client would access

    \\server\share\directory\file
    

    Since WebDAV is not enabled on those directories, the result at the moment is a 405 status (method not allowed).

    In the recent weeks, I've seen a surge of PROPFINDs from a few machines; virus-scan didn't detect any problem on them, and they seem to behave normally.

    How can I disable the PROPFIND from those machines? Is this a signal of some known problem? How can I further investigate them?