0N/A<!
DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
0N/A<
TITLE>Apache module mod_dav</
TITLE>
2362N/A<!-- Background white, links blue (unvisited), navy (visited), red (active) --> 0N/A<
H1 ALIGN="CENTER">Module mod_dav</
H1>
0N/AThis module provides class 1 and class 2
0N/ADistributed Authoring and Versioning') functionality for Apache.
2362N/AThis extension to the HTTP protocol allows creating, moving,
2362N/Acopying, and deleting resources and collections on a remote web
0N/A<
LI><
A HREF="#DAV">Dav</
A>
0N/A<
LI><
A HREF="#DAVLockDB">DavLockDB</
A>
0N/A<
LI><
A HREF="#DAVMinTimeout">DavMinTimeout</
A>
0N/A<
LI><
A HREF="#DAVDepthInfinity">DavDepthInfinity</
A>
0N/A<
LI><
A HREF="#LimitXMLRequestBody">LimitXMLRequestBody</
A>
0N/ATo enable mod_dav, add the following to a container in your <
CODE>
httpd.conf</
CODE> file:<
P>
0N/A<
CODE>Dav On</
CODE><
P>
0N/AAlso, specify a valid filename for the DAV lock database by adding the following to the global section in your <
CODE>
httpd.conf</
CODE> file:<
P>
0N/A<
CODE>DavLockDB /
tmp/
DavLock </
CODE><
EM>(Any web-server writeable filename, without an extension)</
EM><
P>
0N/A<
H2><
A NAME="DAV">Dav</
A></
H2>
0N/A><
STRONG>Syntax:</
STRONG></
A> Dav <on | off><
BR>
0N/A><
STRONG>Default:</
STRONG></
A>
0N/A <
CODE>Dav off</
CODE><
BR>
0N/A><
STRONG>Context:</
STRONG></
A> directory<
BR>
0N/A><
STRONG>Status:</
STRONG></
A> extension<
BR>
0N/A><
STRONG>Module:</
STRONG></
A> mod_dav<
BR>
><
STRONG>Compatibility:</
STRONG></
A> Apache 1.3.4 and above<
P>
Use the <
CODE>Dav</
CODE> directive to enable the WebDAV HTTP methods
directive to limit access to DAV-enabled locations.<
P>
<
TABLE WIDTH="70%" BORDER=0 BGCOLOR="#E0E0F0" CELLSPACING=0 CELLPADDING=10>
<
STRONG>Example</
STRONG>:<
BR><
BR>
<Location /foo><
BR>
<LimitExcept GET HEAD OPTIONS><
BR>
require user admin<
BR>
</LimitExcept><
BR>
<
H2><
A NAME="DavLockDB">DavLockDB</
A></
H2>
><
STRONG>Syntax:</
STRONG></
A> DavLockDB <Full path to lock database><
BR>
><
STRONG>Default:</
STRONG></
A>
><
STRONG>Context:</
STRONG></
A> server config, virtual host<
BR>
><
STRONG>Status:</
STRONG></
A> extension<
BR>
><
STRONG>Module:</
STRONG></
A> mod_dav<
BR>
><
STRONG>Compatibility:</
STRONG></
A> Apache 1.3.4 and above<
P>
Use the <
CODE>DavLockDB</
CODE> directive to specify the full path to the
lock database, excluding an extension. The default (file system)
implementation of mod_dav uses a SDBM database to track user locks.
used from the server to display all locks in a lock database.<
P>
<
TABLE WIDTH="70%" BORDER=0 BGCOLOR="#E0E0F0" CELLSPACING=0 CELLPADDING=10>
<
STRONG>Example</
STRONG>:<
BR><
BR>
<
H2><
A NAME="DavMinTimeout">DavMinTimeout</
A></
H2>
><
STRONG>Syntax:</
STRONG></
A> DavMinTimeout <seconds><
BR>
><
STRONG>Default:</
STRONG></
A>
<
CODE>DavMinTimeout 0</
CODE><
BR>
><
STRONG>Context:</
STRONG></
A> directory<
BR>
><
STRONG>Status:</
STRONG></
A> extension<
BR>
><
STRONG>Module:</
STRONG></
A> mod_dav<
BR>
><
STRONG>Compatibility:</
STRONG></
A> Apache 1.3.4 and above<
P>
When a client requests a DAV resource lock, it can also specify a time
when the lock will be automatically removed by the server. This value
is only a request, and the server can ignore it or inform the client
of an arbitrary value.<
P>
Use the <
CODE>DavMinTimeout</
CODE> directive to specify, in seconds,
the minimum lock timeout to return to a client. Microsoft Web Folders
defaults to a timeout of 120 seconds; the <
CODE>DavMinTimeout</
CODE>
can override this to a higher value (like 600 seconds) to reduce the chance
of the client losing the lock due to network latency.<
P>
<
TABLE WIDTH="70%" BORDER=0 BGCOLOR="#E0E0F0" CELLSPACING=0 CELLPADDING=10>
<
STRONG>Example</
STRONG>:<
BR><
BR>
<
CODE><Location /MSWord><
BR>
<
H2><
A NAME="DavDepthInfinity">DavDepthInfinity</
A></
H2>
><
STRONG>Syntax:</
STRONG></
A> DavDepthInfinity <on | off><
BR>
><
STRONG>Default:</
STRONG></
A>
<
CODE>DavDepthInfinity off</
CODE><
BR>
><
STRONG>Context:</
STRONG></
A> directory<
BR>
><
STRONG>Status:</
STRONG></
A> extension<
BR>
><
STRONG>Module:</
STRONG></
A> mod_dav<
BR>
><
STRONG>Compatibility:</
STRONG></
A> Apache 1.3.4 and above<
P>
Use the <
CODE>DavDepthInfinity</
CODE> directive to allow the processing
of PROPFIND requests containing the header 'Depth: Infinity'.
Because this type of request could constitute a denial-of-service attack,
by default it is not allowed.
<
H2><
A NAME="LimitXMLRequestBody">LimitXMLRequestBody</
A></
H2>
><
STRONG>Syntax:</
STRONG></
A> LimitXMLRequestBody <size in bytes><
BR>
><
STRONG>Default:</
STRONG></
A>
<
CODE>LimitXMLRequestBody 1000000</
CODE><
BR>
><
STRONG>Context:</
STRONG></
A> directory<
BR>
><
STRONG>Status:</
STRONG></
A> extension<
BR>
><
STRONG>Module:</
STRONG></
A> mod_dav<
BR>
><
STRONG>Compatibility:</
STRONG></
A> Apache 1.3.4 and above<
P>
Use the <
CODE>LimitXMLRequestBody</
CODE> directive to limit the
size of an XML request which mod_dav will attempt to parse. Specify
a size greater than zero.