From w3c-dist-auth-request@w3.org  Sat Jul  3 15:10:55 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA12113
	for <webdav-archive@lists.ietf.org>; Sat, 3 Jul 2004 15:10:55 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id EEBDCA120E; Sat,  3 Jul 2004 15:10:51 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 80AB8A120E
	for <w3c-dist-auth@listhub.w3.org>; Sat,  3 Jul 2004 15:10:46 -0400 (EDT)
Received: from mail.gmx.net ([213.165.64.20])
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BgpsU-0005R2-Hk
	for w3c-dist-auth@w3.org; Sat, 03 Jul 2004 15:08:46 -0400
Received: (qmail 5947 invoked by uid 65534); 3 Jul 2004 19:08:14 -0000
Received: from pD9FF02EB.dip.t-dialin.net (EHLO [192.168.0.2]) (217.255.2.235)
  by mail.gmx.net (mp006) with SMTP; 03 Jul 2004 21:08:14 +0200
X-Authenticated: #1915285
Message-ID: <40E70416.7050701@gmx.de>
Date: Sat, 03 Jul 2004 21:08:06 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: WebDAV <w3c-dist-auth@w3.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: lockroot description in rfc2518bis-05
X-Archived-At: http://www.w3.org/mid/40E70416.7050701@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8663
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040703191051.EEBDCA120E@frink.w3.org>
Resent-Date: Sat,  3 Jul 2004 15:10:51 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Hi,

it currently says:

"13.4    lockroot XML Element

    Name:    lockroot
    Namespace:   DAV:
    Purpose: Contains the root URL of the lock, which is the URL of the
             resource that was addressed in the LOCK request.
    Description: The href contains a URL with the address of the root of
             the lock. The server SHOULD include this in all
             lockdiscovery property values and the response to LOCK
             requests.
    Extensibility: MAY be extended with additional child elements or
             attributes which SHOULD be ignored if not recognized.

    <!ELEMENT lockroot (href) >"

That doesn't ensure that in the case of multiple URIs mapped to the same 
resource, the property does indeed contain the URL that was addressed by 
the LOCK request.  Thus, I'd propose the following change:

    Purpose: Contains the root URL of the lock, which is the URL through
             which the resource was addressed in the LOCK request.

Best regards, Julian


-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Sat Jul  3 17:58:17 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA23922
	for <webdav-archive@lists.ietf.org>; Sat, 3 Jul 2004 17:58:16 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 7334EA12CB; Sat,  3 Jul 2004 17:58:18 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id D18BEA06E7
	for <w3c-dist-auth@listhub.w3.org>; Sat,  3 Jul 2004 17:58:16 -0400 (EDT)
Received: from e3.ny.us.ibm.com ([32.97.182.103])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BgsWW-00006c-N8
	for w3c-dist-auth@w3.org; Sat, 03 Jul 2004 17:58:16 -0400
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150])
	by e3.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i63Lvhws705092
	for <w3c-dist-auth@w3.org>; Sat, 3 Jul 2004 17:57:43 -0400
Received: from d01ml261.pok.ibm.com (d01av04.pok.ibm.com [9.56.224.64])
	by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i63LwqUC112364
	for <w3c-dist-auth@w3.org>; Sat, 3 Jul 2004 17:58:52 -0400
In-Reply-To: <40E70416.7050701@gmx.de>
To: WebDAV <w3c-dist-auth@w3.org>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.0.2CF1 June 9, 2003
Message-ID: <OF4E8C51C1.1EDA7A6E-ON85256EC6.00787D40-85256EC6.0078A405@us.ibm.com>
From: Geoffrey M Clemm <geoffrey.clemm@us.ibm.com>
Date: Sat, 3 Jul 2004 17:58:03 -0400
X-MIMETrack: Serialize by Router on D01ML261/01/M/IBM(Release 6.51HF339 | June 21, 2004) at
 07/03/2004 17:56:59,
	Serialize complete at 07/03/2004 17:56:59
Content-Type: multipart/alternative; boundary="=_alternative 0078A40485256EC6_="
Subject: Re: lockroot description in rfc2518bis-05
X-Archived-At: http://www.w3.org/mid/OF4E8C51C1.1EDA7A6E-ON85256EC6.00787D40-85256EC6.0078A405@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8664
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040703215818.7334EA12CB@frink.w3.org>
Resent-Date: Sat,  3 Jul 2004 17:58:18 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 0078A40485256EC6_=
Content-Type: text/plain; charset="US-ASCII"

I agree with this change.

Cheers,
Geoff

Julian wrote on 07/03/2004 03:08:06 PM:

> it currently says:
> 
> "13.4    lockroot XML Element
> 
>     Name:    lockroot
>     Namespace:   DAV:
>     Purpose: Contains the root URL of the lock, which is the URL of the
>              resource that was addressed in the LOCK request.
>     Description: The href contains a URL with the address of the root of
>              the lock. The server SHOULD include this in all
>              lockdiscovery property values and the response to LOCK
>              requests.
>     Extensibility: MAY be extended with additional child elements or
>              attributes which SHOULD be ignored if not recognized.
> 
>     <!ELEMENT lockroot (href) >"
> 
> That doesn't ensure that in the case of multiple URIs mapped to the same 

> resource, the property does indeed contain the URL that was addressed by 

> the LOCK request.  Thus, I'd propose the following change:
> 
>     Purpose: Contains the root URL of the lock, which is the URL through
>              which the resource was addressed in the LOCK request.


--=_alternative 0078A40485256EC6_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2><tt>I agree with this change.</tt></font>
<br>
<br><font size=2><tt>Cheers,</tt></font>
<br><font size=2><tt>Geoff</tt></font>
<br>
<br><font size=2><tt>Julian wrote on 07/03/2004 03:08:06 PM:<br>
<br>
&gt; it currently says:<br>
&gt; <br>
&gt; &quot;13.4 &nbsp; &nbsp;lockroot XML Element<br>
&gt; <br>
&gt; &nbsp; &nbsp; Name: &nbsp; &nbsp;lockroot<br>
&gt; &nbsp; &nbsp; Namespace: &nbsp; DAV:<br>
&gt; &nbsp; &nbsp; Purpose: Contains the root URL of the lock, which is
the URL of the<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;resource that was
addressed in the LOCK request.<br>
&gt; &nbsp; &nbsp; Description: The href contains a URL with the address
of the root of<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;the lock. The server
SHOULD include this in all<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;lockdiscovery property
values and the response to LOCK<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;requests.<br>
&gt; &nbsp; &nbsp; Extensibility: MAY be extended with additional child
elements or<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;attributes which SHOULD
be ignored if not recognized.<br>
&gt; <br>
&gt; &nbsp; &nbsp; &lt;!ELEMENT lockroot (href) &gt;&quot;<br>
&gt; <br>
&gt; That doesn't ensure that in the case of multiple URIs mapped to the
same <br>
&gt; resource, the property does indeed contain the URL that was addressed
by <br>
&gt; the LOCK request. &nbsp;Thus, I'd propose the following change:<br>
&gt; <br>
&gt; &nbsp; &nbsp; Purpose: Contains the root URL of the lock, which is
the URL through<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;which the resource
was addressed in the LOCK request.<br>
<br>
</tt></font>
--=_alternative 0078A40485256EC6_=--



From w3c-dist-auth-request@w3.org  Sat Jul  3 19:15:25 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA27608
	for <webdav-archive@lists.ietf.org>; Sat, 3 Jul 2004 19:15:25 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id D6E2EA0C89; Sat,  3 Jul 2004 19:15:25 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id BC576A0C89
	for <w3c-dist-auth@listhub.w3.org>; Sat,  3 Jul 2004 19:15:24 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BgtjA-00061I-KJ
	for w3c-dist-auth@w3.org; Sat, 03 Jul 2004 19:15:24 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i63NFNfL032098 sender ccjason@us.ibm.com for w3c-dist-auth@w3.org; Sat, 3 Jul 2004 16:15:23 -0700
Received: from e4.ny.us.ibm.com (e4.ny.us.ibm.com [32.97.182.104]) by bandage.seagull.net (8.12.10) with ESMTP id i63NFBZS031855 sender ccjason@us.ibm.com; Sat, 3 Jul 2004 16:15:12 -0700
Received: from northrelay04.pok.ibm.com (northrelay04.pok.ibm.com [9.56.224.206]) by e4.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i63NEivR638316; Sat, 3 Jul 2004 19:14:48 -0400
Received: from d01ml604.pok.ibm.com (d01av04.pok.ibm.com [9.56.224.64]) by northrelay04.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i63NFa25117348; Sat, 3 Jul 2004 19:15:36 -0400
To: <nnw3c-dist-auth___at___w3.org@smallcue.com>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 5.0.11   July 24, 2002
From: Jason Crawford <ccjason@us.ibm.com>
Message-ID: <OF398AA79C.D10DA29B-ON85256EC6.007F162B-85256EC6.007FB220@us.ibm.com>
Date: Sat, 3 Jul 2004 19:14:43 -0400
X-MIMETrack: Serialize by Router on D01ML604/01/M/IBM(Release 6.51HF339 | June 21, 2004) at 07/03/2004 19:14:44, Serialize complete at 07/03/2004 19:14:44
Content-Type: multipart/alternative; boundary="=_alternative 007F326285256EC6_="
Subject: Re: lockroot description in rfc2518bis-05
X-Archived-At: http://www.w3.org/mid/OF398AA79C.D10DA29B-ON85256EC6.007F162B-85256EC6.007FB220@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8665
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040703231525.D6E2EA0C89@frink.w3.org>
Resent-Date: Sat,  3 Jul 2004 19:15:25 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 007F326285256EC6_=
Content-Type: text/plain; charset="us-ascii"

On Saturday, 07/03/2004 at 05:58 AST, Geoffrey M Clemm/Lexington/IBM@IBMUS 
wrote:
> I agree with this change. 

I also agree.

--=_alternative 007F326285256EC6_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="sans-serif">On Saturday, 07/03/2004 at 05:58 AST, Geoffrey M Clemm/Lexington/IBM@IBMUS wrote:<br>
&gt; I agree with this change. </font>
<br>
<br><font size=2 face="sans-serif">I also agree.</font>
<br>
--=_alternative 007F326285256EC6_=--



From w3c-dist-auth-request@w3.org  Sun Jul  4 05:46:06 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA03429
	for <webdav-archive@lists.ietf.org>; Sun, 4 Jul 2004 05:46:06 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 505A2A1862; Sun,  4 Jul 2004 05:46:07 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id EB180A18A9
	for <w3c-dist-auth@listhub.w3.org>; Sun,  4 Jul 2004 05:46:05 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bh3ZV-0000Tp-Kc
	for w3c-dist-auth@w3.org; Sun, 04 Jul 2004 05:46:05 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i649k3fb000327 sender julian.reschke@gmx.de for w3c-dist-auth@w3.org; Sun, 4 Jul 2004 02:46:03 -0700
Received: from mail.gmx.net (imap.gmx.net [213.165.64.20]) by bandage.seagull.net (8.12.10) with SMTP id i649jv8N032681 sender julian.reschke@gmx.de for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Sun, 4 Jul 2004 02:45:58 -0700
Received: (qmail 6641 invoked by uid 65534); 4 Jul 2004 09:45:42 -0000
Received: from pD9535E0F.dip.t-dialin.net (EHLO [192.168.0.2]) (217.83.94.15) by mail.gmx.net (mp005) with SMTP; 04 Jul 2004 11:45:42 +0200
Message-ID: <40E7D1B9.7040701@gmx.de>
Date: Sun, 04 Jul 2004 11:45:29 +0200
From: Julian Reschke <julian.reschke@gmx.de>
MIME-Version: 1.0
To: WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
Cc: Jason Crawford <ccjason@us.ibm.com>,
        Lisa Dusseault <nnlisa___at___osafoundation.org@smallcue.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Subject: Re: Call for consensus on UNLOCK Request-URI being lock root
X-Archived-At: http://www.w3.org/mid/40E7D1B9.7040701@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8666
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040704094607.505A2A1862@frink.w3.org>
Resent-Date: Sun,  4 Jul 2004 05:46:07 -0400 (EDT)


Julian Reschke wrote:

>> On Monday, 06/21/2004 at 10:37 MST, Lisa Dusseault  wrote:
>>  > This would overturn a consensus that had previously been determined at
>>  > a WG meeting that happened together with an interoperability meeting,
>>  > and the consensus was not challenged on the mailing list at that time.
>>  >
>>  > However, given that we have new information -- actual research!
>>  > (thanks) -- it does make sense to reconsider.
>>  >
>>  > WG members please indicate your old, new, and/ or current preference,
>>  > with reasons if they've not already been stated here:
>>  > 1. Should servers accept an UNLOCK request where the Request-URI names
>>  > any resource covered by the lock named in the lock token?
>>  > 2. Or, should servers redirect that UNLOCK request to the root of the
>>  > lock?
>>  > 3. If something else, please explain.
>>
>>
>> No strong preference so just go with what existing servers do.
> 
> 
> What do you mean by "redirect"? Please be more specific.
> ...

Lisa,

could you please define what you mean by "redirect"? Otherwise it won't 
be possible to say something about that option.

The other option we have is...

3. Server should reject the UNLOCK request if it doesn't address the 
directly locked resource.

As stated before, my preference is 1) for the simple reasons that

- this is what RFC2518 seems to say,
- this is what the issues list says as resolution,
- this is what GULP says after having it synced with the issues list and
- last but not least this is what servers indeed implement.

Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Sun Jul  4 17:23:26 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA02135
	for <webdav-archive@lists.ietf.org>; Sun, 4 Jul 2004 17:23:26 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 7AF92A0E3F; Sun,  4 Jul 2004 17:23:26 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 685D0A0E30
	for <w3c-dist-auth@listhub.w3.org>; Sun,  4 Jul 2004 17:23:24 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhESK-0003AH-Ab
	for w3c-dist-auth@w3.org; Sun, 04 Jul 2004 17:23:24 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i64LNMxg020521 sender ccjason@us.ibm.com for w3c-dist-auth@w3.org; Sun, 4 Jul 2004 14:23:22 -0700
Received: from e4.ny.us.ibm.com (e4.ny.us.ibm.com [32.97.182.104]) by bandage.seagull.net (8.12.10) with ESMTP id i64LNFi5020449 sender ccjason@us.ibm.com; Sun, 4 Jul 2004 14:23:15 -0700
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150]) by e4.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i64LMqvR849880; Sun, 4 Jul 2004 17:22:52 -0400
Received: from d01ml604.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i64LO01p086442; Sun, 4 Jul 2004 17:24:01 -0400
To: Julian Reschke <nnjulian.reschke___at___gmx.de@smallcue.com>
Cc: <nnw3c-dist-auth___at___w3.org@smallcue.com>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 5.0.11   July 24, 2002
From: Jason Crawford <ccjason@us.ibm.com>
Message-ID: <OF4E8CD666.4FA761EB-ON85256EC7.0074C44E-85256EC7.007573DB@us.ibm.com>
Date: Sun, 4 Jul 2004 17:22:50 -0400
X-MIMETrack: Serialize by Router on D01ML604/01/M/IBM(Release 6.51HF339 | June 21, 2004) at 07/04/2004 17:22:51, Serialize complete at 07/04/2004 17:22:51
Content-Type: multipart/alternative; boundary="=_alternative 0074FFAA85256EC7_="
Subject: Re: Call for consensus on UNLOCK Request-URI being lock root
X-Archived-At: http://www.w3.org/mid/OF4E8CD666.4FA761EB-ON85256EC7.0074C44E-85256EC7.007573DB@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8667
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040704212326.7AF92A0E3F@frink.w3.org>
Resent-Date: Sun,  4 Jul 2004 17:23:26 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 0074FFAA85256EC7_=
Content-Type: text/plain; charset="us-ascii"

On Wednesday, 06/30/2004 at 08:37 ZE2, Julian Reschke wrote:
> Lisa Dusseault wrote:
> 
> > Yes, I read these today, but it was my interpretation that this 
testing
> > applied to the UNLOCK request.  What about LOCK request to refresh a
> > lock?  Does that also work on resources other than the lock root?  I
> > think servers would probably implement them the same way, but I was
> > curious whether you'd tested it explicitly.
> 
> Sorry. Related to this is
> 
<http://lists.w3.org/Archives/Public/w3c-dist-auth/2004AprJun/0191.html>,
> but that is about URLs in tagged "If" headers (where I found that
> servers do not seem to care).
> 
> Right now I'm saying...
> 
> "4.2.3.1 DAV:locks-refreshed postcondition
> 
> Timers associated with the those locks submitted in the "If" request
> header whose lock root is the resource identified by the Request-URI
> MUST be reset to their original value (or alternatively to the new value
> given in the "Timeout" request header)."
> 
> .basically because it seems nobody asked that question before.
> Assuming we'd find out that servers do not care for LOCK/refresh either,
> would we want to relax the spec text?

I'd relax the server side to accept refresh requests at any resource in 
the scope of the lock.   Unless given a reason though, I'd still encourage 
servers to send the refresh requests to the root of the lock.

J.

--=_alternative 0074FFAA85256EC7_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="sans-serif">On Wednesday, 06/30/2004 at 08:37 ZE2, Julian Reschke wrote:<br>
&gt; Lisa Dusseault wrote:<br>
&gt; <br>
&gt; &gt; Yes, I read these today, but it was my interpretation that this testing<br>
&gt; &gt; applied to the UNLOCK request. &nbsp;What about LOCK request to refresh a<br>
&gt; &gt; lock? &nbsp;Does that also work on resources other than the lock root? &nbsp;I<br>
&gt; &gt; think servers would probably implement them the same way, but I was<br>
&gt; &gt; curious whether you'd tested it explicitly.<br>
&gt; <br>
&gt; Sorry. Related to this is<br>
&gt; &lt;http://lists.w3.org/Archives/Public/w3c-dist-auth/2004AprJun/0191.html&gt;,<br>
&gt; but that is about URLs in tagged &quot;If&quot; headers (where I found that<br>
&gt; servers do not seem to care).<br>
&gt; <br>
&gt; Right now I'm saying...<br>
&gt; <br>
&gt; &quot;4.2.3.1 DAV:locks-refreshed postcondition<br>
&gt; <br>
&gt; Timers associated with the those locks submitted in the &quot;If&quot; request<br>
&gt; header whose lock root is the resource identified by the Request-URI<br>
&gt; MUST be reset to their original value (or alternatively to the new value<br>
&gt; given in the &quot;Timeout&quot; request header).&quot;<br>
&gt; <br>
&gt; .basically because it seems nobody asked that question before.<br>
&gt; Assuming we'd find out that servers do not care for LOCK/refresh either,<br>
&gt; would we want to relax the spec text?</font>
<br>
<br><font size=2 face="sans-serif">I'd relax the server side to accept refresh requests at any resource in the scope of the lock. &nbsp; Unless given a reason though, I'd still encourage servers to send the refresh requests to the root of the lock.</font>
<br>
<br><font size=2 face="sans-serif">J.</font>
<br>
--=_alternative 0074FFAA85256EC7_=--



From w3c-dist-auth-request@w3.org  Sun Jul  4 19:17:13 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA07549
	for <webdav-archive@lists.ietf.org>; Sun, 4 Jul 2004 19:17:12 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 5A75BA05E9; Sun,  4 Jul 2004 19:17:13 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 0CEABA05E9
	for <w3c-dist-auth@listhub.w3.org>; Sun,  4 Jul 2004 19:17:12 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhGER-0004ga-Ty
	for w3c-dist-auth@w3.org; Sun, 04 Jul 2004 19:17:12 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i64NHA9G028684 sender julian.reschke@gmx.de for w3c-dist-auth@w3.org; Sun, 4 Jul 2004 16:17:10 -0700
Received: from mail.gmx.net (mail.gmx.de [213.165.64.20]) by bandage.seagull.net (8.12.10) with SMTP id i64NH70u028626 sender julian.reschke@gmx.de for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Sun, 4 Jul 2004 16:17:08 -0700
Received: (qmail 25665 invoked by uid 65534); 4 Jul 2004 23:16:55 -0000
Received: from pD9E51F96.dip.t-dialin.net (EHLO [192.168.0.2]) (217.229.31.150) by mail.gmx.net (mp017) with SMTP; 05 Jul 2004 01:16:55 +0200
Message-ID: <40E88FE1.20508@gmx.de>
Date: Mon, 05 Jul 2004 01:16:49 +0200
From: Julian Reschke <julian.reschke@gmx.de>
MIME-Version: 1.0
To: Jason Crawford <ccjason@us.ibm.com>
Cc: Julian Reschke <nnjulian.reschke___at___gmx.de@smallcue.com>,
        nnw3c-dist-auth___at___w3.org@smallcue.com
Content-Type: text/plain; charset=us-ascii; format=flowed
Subject: Re: Call for consensus on UNLOCK Request-URI being lock root
X-Archived-At: http://www.w3.org/mid/40E88FE1.20508@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8668
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040704231713.5A75BA05E9@frink.w3.org>
Resent-Date: Sun,  4 Jul 2004 19:17:13 -0400 (EDT)


Jason Crawford wrote:

> I'd relax the server side to accept refresh requests at any resource in 
> the scope of the lock.   Unless given a reason though, I'd still 
> encourage servers to send the refresh requests to the root of the lock.

I guess you mean "clients" in the second sentence.

The problem with this approach is that it makes little sense in a 
specification. If we say that servers SHOULD allow refresh against 
indirectly locked resources, it doesn't make sense to tell clients not 
to use it.

Best regards, Julian


-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Mon Jul  5 11:42:23 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA03884
	for <webdav-archive@lists.ietf.org>; Mon, 5 Jul 2004 11:42:23 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 2B915A1392; Mon,  5 Jul 2004 11:42:22 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 1703AA0B42
	for <w3c-dist-auth@listhub.w3.org>; Mon,  5 Jul 2004 11:42:21 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhVbo-00087b-Pi
	for w3c-dist-auth@w3.org; Mon, 05 Jul 2004 11:42:21 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i65FgIbu000780 sender ccjason@us.ibm.com for w3c-dist-auth@w3.org; Mon, 5 Jul 2004 08:42:18 -0700
Received: from e4.ny.us.ibm.com (e4.ny.us.ibm.com [32.97.182.104]) by bandage.seagull.net (8.12.10) with ESMTP id i65Feg0B032709 sender ccjason@us.ibm.com; Mon, 5 Jul 2004 08:40:43 -0700
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150]) by e4.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i65FeKvR785064; Mon, 5 Jul 2004 11:40:20 -0400
Received: from d01ml604.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i65FfTaH116270; Mon, 5 Jul 2004 11:41:29 -0400
To: Julian Reschke <nnjulian.reschke___at___gmx.de@smallcue.com>
Cc: nnw3c-dist-auth___at___w3.org@smallcue.com
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 5.0.11   July 24, 2002
From: Jason Crawford <ccjason@us.ibm.com>
Message-ID: <OF3D60E98C.F6035EA5-ON85256EC8.00552D86-85256EC8.00561722@us.ibm.com>
Date: Mon, 5 Jul 2004 11:40:15 -0400
X-MIMETrack: Serialize by Router on D01ML604/01/M/IBM(Release 6.51HF339 | June 21, 2004) at 07/05/2004 11:40:20, Serialize complete at 07/05/2004 11:40:20
Content-Type: multipart/alternative; boundary="=_alternative 00560F3C85256EC8_="
Subject: Re: Call for consensus on UNLOCK Request-URI being lock root
X-Archived-At: http://www.w3.org/mid/OF3D60E98C.F6035EA5-ON85256EC8.00552D86-85256EC8.00561722@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8669
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040705154222.2B915A1392@frink.w3.org>
Resent-Date: Mon,  5 Jul 2004 11:42:22 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 00560F3C85256EC8_=
Content-Type: text/plain; charset="us-ascii"

On Monday, 07/05/2004 at 01:16 ZE2, Julian Reschke wrote:
> Jason Crawford wrote:
> 
> > I'd relax the server side to accept refresh requests at any resource 
in
> > the scope of the lock.   Unless given a reason though, I'd still
> > encourage servers to send the refresh requests to the root of the 
lock.
> 
> I guess you mean "clients" in the second sentence.
Correct.

> The problem with this approach is that it makes little sense in a
> specification. If we say that servers SHOULD allow refresh against
> indirectly locked resources, it doesn't make sense to tell clients not
> to use it.
I think it does make sense from the perspective of flexibility, and we've 
done it before, but I don't have a strong preference.  My stronger 
preference is that we move forward. 

J.


--=_alternative 00560F3C85256EC8_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="sans-serif">On Monday, 07/05/2004 at 01:16 ZE2, Julian Reschke wrote:<br>
&gt; Jason Crawford wrote:<br>
&gt; <br>
&gt; &gt; I'd relax the server side to accept refresh requests at any resource in<br>
&gt; &gt; the scope of the lock. &nbsp; Unless given a reason though, I'd still<br>
&gt; &gt; encourage servers to send the refresh requests to the root of the lock.<br>
&gt; <br>
&gt; I guess you mean &quot;clients&quot; in the second sentence.</font>
<br><font size=2 face="sans-serif">Correct.</font>
<br><font size=2 face="sans-serif"><br>
&gt; The problem with this approach is that it makes little sense in a<br>
&gt; specification. If we say that servers SHOULD allow refresh against<br>
&gt; indirectly locked resources, it doesn't make sense to tell clients not<br>
&gt; to use it.</font>
<br><font size=2 face="sans-serif">I think it does make sense from the perspective of flexibility, and we've done it before, but I don't have a strong preference. &nbsp;My stronger preference is that we move forward. &nbsp;</font>
<br>
<br><font size=2 face="sans-serif">J.</font>
<br>
<br>
--=_alternative 00560F3C85256EC8_=--



From w3c-dist-auth-request@w3.org  Tue Jul  6 09:08:35 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA12346
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 09:08:34 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 0344EA0887; Tue,  6 Jul 2004 09:08:35 -0400 (EDT)
X-Original-To: w3c-dist-auth@frink.w3.org
Delivered-To: w3c-dist-auth@frink.w3.org
Received: from websh1.gcsu.edu (mn.gcsu.edu [168.16.211.63])
	by frink.w3.org (Postfix) with ESMTP id 179B2A0887
	for <w3c-dist-auth@frink.w3.org>; Tue,  6 Jul 2004 09:08:31 -0400 (EDT)
Received: from mn.gcsu.edu(168.16.211.63) by websh1.gcsu.edu via csmap 
	 id ab9e939e_cf4d_11d8_982a_00304811f47f_22489;
	Tue, 06 Jul 2004 09:09:12 -0400 (EDT)
Received: from websh1.gcsu.edu (sleepy.gcsu.edu [168.16.213.98])
	by mn.gcsu.edu (Switch-3.1.0/Switch-3.1.0) with ESMTP id i66D8RG5029936;
	Tue, 6 Jul 2004 09:08:28 -0400
Received: from sleepy.gcsu.edu(168.16.213.98) by websh1.gcsu.edu via csmap 
	 id a97809ba_cf4d_11d8_8f92_00304811f47f_14313;
	Tue, 06 Jul 2004 09:09:07 -0400 (EDT)
Mime-Version: 1.0
X-Sender: frank.lowney@gcsu.edu@mail.gcsu.edu
Message-Id: <p06110403bd10512fc23a@[168.16.213.98]>
Date: Tue, 6 Jul 2004 09:08:26 -0400
To: w3c-dist-auth@frink.w3.org
From: Frank Lowney <frank.lowney@gcsu.edu>
Content-Type: text/plain; charset="us-ascii"
Subject: WindowsXP and double login challenges
X-Archived-At: http://www.w3.org/mid/p06110403bd10512fc23a@%5B168.16.213.98%5D
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8670
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706130835.0344EA0887@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 09:08:35 -0400 (EDT)


We are currently working with three WebDAV-enabled servers as follows:

WebSTAR V v.5.3.2 on MacOS X 10.3.4

Apache on MacOS X Server 10.3.4

BEA Weblogic (supporting WebCT Vista) on Solaris.

Using WindowsXP & 'My Network Places,' we and our various clients and other constituencies are consistently seeing a "double login challenge" in all three cases. We don't see this issue on Win2K Pro or MacOS X.

First, can anyone confirm that this is a "Microsoft not following standards again" issue?

Second, can anyone suggest a work around that will unburden WinXP WebDAV users from the necessity of meeting this challenge twice?

Thanks for any light shed on this issue.
-- 
=====================================================================
Dr. Frank Lowney  frank.lowney@gcsu.edu 
    Director, Electronic Instructional Services, a unit of the
    Office of Information and Instructional Technology, 
    Professional Pages: http://www.gcsu.edu/oiit/eis/
    Personal Pages: http://www.faculty.de.gcsu.edu/~flowney
Voice: (478) 445-5260
NOTICE: Please be advised that I am hearing impaired and communicate most effectively via e-mail.  Follow-up summaries of telephone conversations by e-mail are most appreciated.
=====================================================================
We don't make instruction effective, we make effective instruction more accessible.



From w3c-dist-auth-request@w3.org  Tue Jul  6 10:13:05 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA17769
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 10:13:05 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 37A72A2112; Tue,  6 Jul 2004 10:13:03 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id AF05CA0801
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 10:12:57 -0400 (EDT)
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhqfY-00011a-5k
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 10:11:36 -0400
Received: from CNRI.Reston.VA.US (localhost [127.0.0.1])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA17505;
	Tue, 6 Jul 2004 10:11:31 -0400 (EDT)
Message-Id: <200407061411.KAA17505@ietf.org>
Mime-Version: 1.0
Content-Type: Multipart/Mixed; Boundary="NextPart"
To: i-d-announce@ietf.org
Cc: w3c-dist-auth@w3.org
From: Internet-Drafts@ietf.org
Date: Tue, 06 Jul 2004 10:11:31 -0400
Subject: I-D ACTION:draft-ietf-webdav-bind-06.txt
X-Archived-At: http://www.w3.org/mid/200407061411.KAA17505@ietf.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8671
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706141303.37A72A2112@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 10:13:03 -0400 (EDT)


--NextPart

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the WWW Distributed Authoring and Versioning Working Group of the IETF.

	Title		: Binding Extensions to Web Distributed Authoring 
			  and Versioning (WebDAV)
	Author(s)	: G. Clemm, et al.
	Filename	: draft-ietf-webdav-bind-06.txt
	Pages		: 33
	Date		: 2004-7-2
	
This specification defines bindings, and the BIND method for creating 
multiple bindings to the same resource.  Creating a new binding to a 
resource causes at least one new URI to be mapped to that resource.  
Servers are required to insure the integrity of any bindings that they 
allow to be created.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-webdav-bind-06.txt

To remove yourself from the I-D Announcement list, send a message to 
i-d-announce-request@ietf.org with the word unsubscribe in the body of the message.  
You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce 
to change your subscription settings.


Internet-Drafts are also available by anonymous FTP. Login with the username
"anonymous" and a password of your e-mail address. After logging in,
type "cd internet-drafts" and then
	"get draft-ietf-webdav-bind-06.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html 
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt


Internet-Drafts can also be obtained by e-mail.

Send a message to:
	mailserv@ietf.org.
In the body type:
	"FILE /internet-drafts/draft-ietf-webdav-bind-06.txt".
	
NOTE:	The mail server at ietf.org can return the document in
	MIME-encoded form by using the "mpack" utility.  To use this
	feature, insert the command "ENCODING mime" before the "FILE"
	command.  To decode the response(s), you will need "munpack" or
	a MIME-compliant mail reader.  Different MIME-compliant mail readers
	exhibit different behavior, especially when dealing with
	"multipart" MIME messages (i.e. documents which have been split
	up into multiple messages), so check your local documentation on
	how to manipulate these messages.
		
		
Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Multipart/Alternative; Boundary="OtherAccess"

--OtherAccess
Content-Type: Message/External-body;
	access-type="mail-server";
	server="mailserv@ietf.org"

Content-Type: text/plain
Content-ID:	<2004-7-2121630.I-D@ietf.org>

ENCODING mime
FILE /internet-drafts/draft-ietf-webdav-bind-06.txt

--OtherAccess
Content-Type: Message/External-body;
	name="draft-ietf-webdav-bind-06.txt";
	site="ftp.ietf.org";
	access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID:	<2004-7-2121630.I-D@ietf.org>

--OtherAccess--

--NextPart--




From w3c-dist-auth-request@w3.org  Tue Jul  6 10:54:44 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA21236
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 10:54:44 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 2D020A0870; Tue,  6 Jul 2004 10:54:46 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 9DD11A0870
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 10:54:44 -0400 (EDT)
Received: from cats-mx1.ucsc.edu ([128.114.125.34] helo=ucsc.edu)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhrLI-0000rN-DG
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 10:54:44 -0400
Received: from Tycho (dhcp-63-146.cse.ucsc.edu [128.114.63.146])
	by ucsc.edu (8.10.1/8.10.1) with SMTP id i66Eq8d22112
	for <w3c-dist-auth@w3.org>; Tue, 6 Jul 2004 07:52:09 -0700 (PDT)
From: "Jim Whitehead" <ejw@cse.ucsc.edu>
To: "WebDAV" <w3c-dist-auth@w3.org>
Date: Tue, 6 Jul 2004 07:56:17 -0700
Message-ID: <AMEPKEBLDJJCCDEJHAMIEEMDLCAA.ejw@cse.ucsc.edu>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
Importance: Normal
X-UCSC-CATS-MailScanner: Found to be clean
Subject: FW: WindowsXP and double login challenges
X-Archived-At: http://www.w3.org/mid/AMEPKEBLDJJCCDEJHAMIEEMDLCAA.ejw@cse.ucsc.edu
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8672
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706145446.2D020A0870@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 10:54:46 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Accidentally caught by the spam filter.

-Jim

-----Original Message-----
From: w3c-dist-auth-request@w3.org
[mailto:w3c-dist-auth-request@w3.org]On Behalf Of Frank Lowney
Sent: Tuesday, July 06, 2004 6:08 AM
To: w3c-dist-auth@frink.w3.org
Subject: WindowsXP and double login challenges



We are currently working with three WebDAV-enabled servers as follows:

WebSTAR V v.5.3.2 on MacOS X 10.3.4

Apache on MacOS X Server 10.3.4

BEA Weblogic (supporting WebCT Vista) on Solaris.

Using WindowsXP & 'My Network Places,' we and our various clients and other
constituencies are consistently seeing a "double login challenge" in all
three cases. We don't see this issue on Win2K Pro or MacOS X.

First, can anyone confirm that this is a "Microsoft not following standards
again" issue?

Second, can anyone suggest a work around that will unburden WinXP WebDAV
users from the necessity of meeting this challenge twice?

Thanks for any light shed on this issue.
--
=====================================================================
Dr. Frank Lowney  frank.lowney@gcsu.edu
    Director, Electronic Instructional Services, a unit of the
    Office of Information and Instructional Technology,
    Professional Pages: http://www.gcsu.edu/oiit/eis/
    Personal Pages: http://www.faculty.de.gcsu.edu/~flowney
Voice: (478) 445-5260
NOTICE: Please be advised that I am hearing impaired and communicate most
effectively via e-mail.  Follow-up summaries of telephone conversations by
e-mail are most appreciated.
=====================================================================
We don't make instruction effective, we make effective instruction more
accessible.



From w3c-dist-auth-request@w3.org  Tue Jul  6 11:38:35 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA23968
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 11:38:35 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id F32B1A2230; Tue,  6 Jul 2004 11:38:33 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 8D55EA21F8
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 11:38:29 -0400 (EDT)
Received: from betlik.darwin.nasa.gov ([198.123.160.11] helo=dream.darwin.nasa.gov)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bhs1d-0000VW-7g
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 11:38:29 -0400
Received: from cse.ucsc.edu (paperweight.darwin.nasa.gov [198.123.160.27])
	by dream.darwin.nasa.gov ( -- Info omitted by ASANI Solutions, LLC.) with ESMTP id i66FcRL06672
	for <w3c-dist-auth@w3.org>; Tue, 6 Jul 2004 08:38:27 -0700 (PDT)
Message-ID: <40EAC773.3080607@cse.ucsc.edu>
Date: Tue, 06 Jul 2004 08:38:27 -0700
From: Elias Sinderson <elias@cse.ucsc.edu>
User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.0.1) Gecko/20020920 Netscape/7.0
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: WebDAV <w3c-dist-auth@w3.org>
References: <40E70416.7050701@gmx.de>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: lockroot description in rfc2518bis-05
X-Archived-At: http://www.w3.org/mid/40EAC773.3080607@cse.ucsc.edu
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8673
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706153833.F32B1A2230@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 11:38:33 -0400 (EDT)
Content-Transfer-Encoding: 7bit


The proposed change makes sense to me as well.


Cheers,
Elias

Julian Reschke wrote:

>
> Hi,
>
> it currently says:
>
> "13.4    lockroot XML Element
>
>    Name:    lockroot
>    Namespace:   DAV:
>    Purpose: Contains the root URL of the lock, which is the URL of the
>             resource that was addressed in the LOCK request.
>    Description: The href contains a URL with the address of the root of
>             the lock. The server SHOULD include this in all
>             lockdiscovery property values and the response to LOCK
>             requests.
>    Extensibility: MAY be extended with additional child elements or
>             attributes which SHOULD be ignored if not recognized.
>
>    <!ELEMENT lockroot (href) >"
>
> That doesn't ensure that in the case of multiple URIs mapped to the 
> same resource, the property does indeed contain the URL that was 
> addressed by the LOCK request.  Thus, I'd propose the following change:
>
>    Purpose: Contains the root URL of the lock, which is the URL through
>             which the resource was addressed in the LOCK request.
>
> Best regards, Julian
>
>




From w3c-dist-auth-request@w3.org  Tue Jul  6 11:45:05 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA24610
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 11:45:05 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 9D354A2245; Tue,  6 Jul 2004 11:45:07 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id E53C9A2245
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 11:45:05 -0400 (EDT)
Received: from betlik.darwin.nasa.gov ([198.123.160.11] helo=dream.darwin.nasa.gov)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bhs81-00028Q-47
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 11:45:05 -0400
Received: from cse.ucsc.edu (paperweight.darwin.nasa.gov [198.123.160.27])
	by dream.darwin.nasa.gov ( -- Info omitted by ASANI Solutions, LLC.) with ESMTP id i66Fj4L06699
	for <w3c-dist-auth@w3.org>; Tue, 6 Jul 2004 08:45:04 -0700 (PDT)
Message-ID: <40EAC900.3080809@cse.ucsc.edu>
Date: Tue, 06 Jul 2004 08:45:04 -0700
From: Elias Sinderson <elias@cse.ucsc.edu>
Reply-To: w3c-dist-auth@w3.org
User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.0.1) Gecko/20020920 Netscape/7.0
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: w3c-dist-auth@w3.org
References: <OF3D60E98C.F6035EA5-ON85256EC8.00552D86-85256EC8.00561722@us.ibm.com>
Content-Type: multipart/alternative;
 boundary="------------020402080705050606010607"
Subject: Re: Call for consensus on UNLOCK Request-URI being lock root
X-Archived-At: http://www.w3.org/mid/40EAC900.3080809@cse.ucsc.edu
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8674
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706154507.9D354A2245@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 11:45:07 -0400 (EDT)



--------------020402080705050606010607
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Jason Crawford wrote:

> On Monday, 07/05/2004 at 01:16 ZE2, Julian Reschke wrote:
> > The problem with this approach is that it makes little sense in a
> > specification. If we say that servers SHOULD allow refresh against
> > indirectly locked resources, it doesn't make sense to tell clients not
> > to use it.
> I think it does make sense from the perspective of flexibility, and 
> we've done it before, but I don't have a strong preference.  My 
> stronger preference is that we move forward.   

I agree with Jason: servers SHOULD allow refresh against indirectly 
locked resources, thereby allowing for clients the option to refresh the 
lock on a single resource while letting the lock expire on other 
resources. Without supporting this, the client would have to unlock and 
the lock the resource, thereby making it possible for another client to 
lock the resource in the interim.


Cheers,
Elias

--------------020402080705050606010607
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <title></title>
</head>
<body>
Jason Crawford wrote:<br>
<blockquote type="cite"
 cite="midOF3D60E98C.F6035EA5-ON85256EC8.00552D86-85256EC8.00561722@us.ibm.com"> 
  <font size="2" face="sans-serif">On Monday, 07/05/2004 at 01:16 ZE2, Julian
Reschke wrote:<br>
  </font><font size="2" face="sans-serif">&gt; The problem with this approach
is that it makes little sense in a<br>
 &gt; specification. If we say that servers SHOULD allow refresh against<br>
 &gt; indirectly locked resources, it doesn't make sense to tell clients
not<br>
 &gt; to use it.</font> <br>
  <font size="2" face="sans-serif">I think it does make sense from the perspective
of flexibility, and we've done it before, but I don't have a strong preference.
&nbsp;My stronger preference is that we move forward. &nbsp;</font> </blockquote>
I agree with Jason: servers SHOULD allow refresh against indirectly locked
resources, thereby allowing for clients the option to refresh the lock on
a single resource while letting the lock expire on other resources. Without
supporting this, the client would have to unlock and the lock the resource,
thereby making it possible for another client to lock the resource in the
interim.<br>
<br>
<br>
Cheers,<br>
Elias<br>
</body>
</html>

--------------020402080705050606010607--



From w3c-dist-auth-request@w3.org  Tue Jul  6 12:09:31 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA27401
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 12:09:31 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id C4F8BA22C1; Tue,  6 Jul 2004 12:09:32 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 9B307A22BC
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 12:09:31 -0400 (EDT)
Received: from e1.ny.us.ibm.com ([32.97.182.101])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhsVf-0006qN-Il
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 12:09:31 -0400
Received: from northrelay04.pok.ibm.com (northrelay04.pok.ibm.com [9.56.224.206])
	by e1.ny.us.ibm.com (8.12.10/NS PXFA) with ESMTP id i66G90Cc425128
	for <w3c-dist-auth@w3.org>; Tue, 6 Jul 2004 12:09:00 -0400
Received: from d01ml261.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216])
	by northrelay04.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i66G9o4A111612
	for <w3c-dist-auth@w3.org>; Tue, 6 Jul 2004 12:09:51 -0400
In-Reply-To: <40EAC900.3080809@cse.ucsc.edu>
To: w3c-dist-auth@w3.org
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.0.2CF1 June 9, 2003
Message-ID: <OF69FE9935.8787C0DE-ON85256EC9.00582049-85256EC9.0058B664@us.ibm.com>
From: Geoffrey M Clemm <geoffrey.clemm@us.ibm.com>
Date: Tue, 6 Jul 2004 12:09:18 -0400
X-MIMETrack: Serialize by Router on D01ML261/01/M/IBM(Release 6.51HF339 | June 21, 2004) at
 07/06/2004 12:08:11,
	Serialize complete at 07/06/2004 12:08:11
Content-Type: multipart/alternative; boundary="=_alternative 0058B66085256EC9_="
Subject: Re: Call for consensus on UNLOCK Request-URI being lock root
X-Archived-At: http://www.w3.org/mid/OF69FE9935.8787C0DE-ON85256EC9.00582049-85256EC9.0058B664@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8675
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706160932.C4F8BA22C1@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 12:09:32 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 0058B66085256EC9_=
Content-Type: text/plain; charset="US-ASCII"

You cannot create a new exclusive write lock rooted at the indirectly
locked resource, because that would violate the requirement that a
resource can only be locked by one exclusive lock.  So the issue being
discussed is just whether or not the refresh of the lock has to be
applied to the URL of the root of the lock, or whether it can be applied
to the URL of an indirectly locked resource and then be automatically
redirected by the server to the URL of the root of the lock.

Cheers,
Geoff

Elias wrote on 07/06/2004 11:45:04 AM:

> Jason Crawford wrote:
> On Monday, 07/05/2004 at 01:16 ZE2, Julian Reschke wrote:
> > The problem with this approach is that it makes little sense in a
> > specification. If we say that servers SHOULD allow refresh against
> > indirectly locked resources, it doesn't make sense to tell clients not
> > to use it. 

> I think it does make sense from the perspective of flexibility, and 
> we've done it before, but I don't have a strong preference.  My 
> stronger preference is that we move forward. 
> I agree with Jason: servers SHOULD allow refresh against indirectly 
> locked resources, thereby allowing for clients the option to refresh
> the lock on a single resource while letting the lock expire on other
> resources. Without supporting this, the client would have to unlock 
> and the lock the resource, thereby making it possible for another 
> client to lock the resource in the interim.

--=_alternative 0058B66085256EC9_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2><tt>You cannot create a new exclusive write lock rooted
at the indirectly</tt></font>
<br><font size=2><tt>locked resource, because that would violate the requirement
that a</tt></font>
<br><font size=2><tt>resource can only be locked by one exclusive lock.
&nbsp;So the issue being</tt></font>
<br><font size=2><tt>discussed is just whether or not the refresh of the
lock has to be</tt></font>
<br><font size=2><tt>applied to the URL of the root of the lock, or whether
it can be applied</tt></font>
<br><font size=2><tt>to the URL of an indirectly locked resource and then
be automatically</tt></font>
<br><font size=2><tt>redirected by the server to the URL of the root of
the lock.</tt></font>
<br>
<br><font size=2><tt>Cheers,</tt></font>
<br><font size=2><tt>Geoff</tt></font>
<br>
<br><font size=2><tt>Elias wrote on 07/06/2004 11:45:04 AM:<br>
<br>
&gt; Jason Crawford wrote:</tt></font>
<br><font size=2><tt>&gt; On Monday, 07/05/2004 at 01:16 ZE2, Julian Reschke
wrote:<br>
&gt; &gt; The problem with this approach is that it makes little sense
in a<br>
&gt; &gt; specification. If we say that servers SHOULD allow refresh against<br>
&gt; &gt; indirectly locked resources, it doesn't make sense to tell clients
not<br>
&gt; &gt; to use it. </tt></font>
<br><font size=2><tt><br>
&gt; I think it does make sense from the perspective of flexibility, and
<br>
&gt; we've done it before, but I don't have a strong preference. &nbsp;My
<br>
&gt; stronger preference is that we move forward. &nbsp; </tt></font>
<br><font size=2><tt>&gt; I agree with Jason: servers SHOULD allow refresh
against indirectly <br>
&gt; locked resources, thereby allowing for clients the option to refresh<br>
&gt; the lock on a single resource while letting the lock expire on other<br>
&gt; resources. Without supporting this, the client would have to unlock
<br>
&gt; and the lock the resource, thereby making it possible for another
<br>
&gt; client to lock the resource in the interim.<br>
</tt></font>
--=_alternative 0058B66085256EC9_=--



From w3c-dist-auth-request@w3.org  Tue Jul  6 12:49:11 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA01737
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 12:49:11 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 4E0D0A0B36; Tue,  6 Jul 2004 12:49:13 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 33F1BA0B36
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 12:49:12 -0400 (EDT)
Received: from kahuna.osafoundation.org ([204.152.186.98])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bht83-0005mj-Vt
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 12:49:12 -0400
Old-X-Envelope-From: lisa@osafoundation.org
Old-X-Envelope-To: <w3c-dist-auth@w3.org>
Received: from [192.168.101.178] (w002.z065106067.sjc-ca.dsl.cnc.net [65.106.67.2])
	(authenticated bits=0)
	by kahuna.osafoundation.org (8.12.8/8.12.8) with ESMTP id i66GnAJL008333
	(version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO)
	for <w3c-dist-auth@w3.org>; Tue, 6 Jul 2004 09:49:10 -0700
Mime-Version: 1.0 (Apple Message framework v618)
In-Reply-To: <OF4E8C51C1.1EDA7A6E-ON85256EC6.00787D40-85256EC6.0078A405@us.ibm.com>
References: <OF4E8C51C1.1EDA7A6E-ON85256EC6.00787D40-85256EC6.0078A405@us.ibm.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <63444AA3-CF6C-11D8-8333-000A95B2BB72@osafoundation.org>
Content-Transfer-Encoding: 7bit
From: Lisa Dusseault <lisa@osafoundation.org>
Date: Tue, 6 Jul 2004 09:49:03 -0700
To: WebDAV <w3c-dist-auth@w3.org>
X-Mailer: Apple Mail (2.618)
X-Scanned-By: MIMEDefang 2.39
Subject: Re: lockroot description in rfc2518bis-05
X-Archived-At: http://www.w3.org/mid/63444AA3-CF6C-11D8-8333-000A95B2BB72@osafoundation.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8676
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706164913.4E0D0A0B36@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 12:49:13 -0400 (EDT)
Content-Transfer-Encoding: 7bit


OK, will do, this clearly makes it less ambiguous.

Lisa

On Jul 3, 2004, at 2:58 PM, Geoffrey M Clemm wrote:

> I agree with this change.
>
> Cheers,
> Geoff
>
> Julian wrote on 07/03/2004 03:08:06 PM:
>
>> it currently says:
>>
>> "13.4    lockroot XML Element
>>
>>     Name:    lockroot
>>     Namespace:   DAV:
>>     Purpose: Contains the root URL of the lock, which is the URL of 
>> the
>>              resource that was addressed in the LOCK request.
>>     Description: The href contains a URL with the address of the root 
>> of
>>              the lock. The server SHOULD include this in all
>>              lockdiscovery property values and the response to LOCK
>>              requests.
>>     Extensibility: MAY be extended with additional child elements or
>>              attributes which SHOULD be ignored if not recognized.
>>
>>     <!ELEMENT lockroot (href) >"
>>
>> That doesn't ensure that in the case of multiple URIs mapped to the 
>> same
>
>> resource, the property does indeed contain the URL that was addressed 
>> by
>
>> the LOCK request.  Thus, I'd propose the following change:
>>
>>     Purpose: Contains the root URL of the lock, which is the URL 
>> through
>>              which the resource was addressed in the LOCK request.
>



From w3c-dist-auth-request@w3.org  Tue Jul  6 13:47:15 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA06368
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 13:47:14 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 95CB4A059B; Tue,  6 Jul 2004 13:47:13 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 55921A2345
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 13:46:23 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bhtso-0005Ur-IR
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 13:37:30 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i66HbTvu027941 sender lisa@osafoundation.org for w3c-dist-auth@w3.org; Tue, 6 Jul 2004 10:37:29 -0700
Received: from kahuna.osafoundation.org (kahuna.osafoundation.org [204.152.186.98]) by bandage.seagull.net (8.12.10) with ESMTP id i66HbSZP027916 sender lisa@osafoundation.org for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Tue, 6 Jul 2004 10:37:28 -0700
Received: from [192.168.101.178] (w002.z065106067.sjc-ca.dsl.cnc.net [65.106.67.2]) (authenticated bits=0) by kahuna.osafoundation.org (8.12.8/8.12.8) with ESMTP id i66HbOJL014537 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO); Tue, 6 Jul 2004 10:37:24 -0700
Mime-Version: 1.0 (Apple Message framework v618)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <202D1728-CF73-11D8-8333-000A95B2BB72@osafoundation.org>
Cc: WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
From: Lisa Dusseault <lisa@osafoundation.org>
Date: Tue, 6 Jul 2004 10:37:17 -0700
To: Julian Reschke <julian.reschke@gmx.de>
X-Mailer: Apple Mail (2.618)
Subject: Re: Call for consensus on UNLOCK Request-URI being lock root
X-Archived-At: http://www.w3.org/mid/202D1728-CF73-11D8-8333-000A95B2BB72@osafoundation.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8677
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706174713.95CB4A059B@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 13:47:13 -0400 (EDT)


I thought a little more about exactly how the redirect would work and 
there's a number of options, none of them very good.  I think this is 
moot since we seem to prefer #1 accepting the UNLOCK request even on 
the "wrong" URL, but a little discussion anyhow...

The basic idea is that the client gave the wrong URL in the UNLOCK, and 
the server can tell which is the right URL to UNLOCK because of the 
presence of the lock token. So the server is helpful in telling the 
client which URL to UNLOCK in a 3xx response with the lockroot URL in 
the Location header, and this response helps the client understand 
which resource(s)  have been unlocked once the UNLOCK request is 
successful.

But how, exactly, would a redirect work?  According to RFC2616:
  - 301 Moved Permanently would imply that the new URL (the lock root) 
should be used for "any future references".  That's not what we want; 
the original Request-URI could still exist and be used in certain 
circumstances -- it's only this one request the server suggests should 
be redirected.

  - 302 Found would technically work the right way but RFC2616 says that 
"the user agent MUST NOT automatically redirect the request unless it 
can be confirmed by the user".  I'm not sure user agents would follow 
that requirement or wish to.

  - 303 See Other would result in the client sending a GET to the 
lookroot URL, not a UNLOCK request.

  - 307 Temporary Redirect would work for HTTP 1.1 user agents, but like 
302 "the user agent MUST NOT automatically redirect the request unless 
it can be confirmed by the user".

Lisa

On Jul 4, 2004, at 2:45 AM, Julian Reschke wrote:

> Julian Reschke wrote:
>
>>> On Monday, 06/21/2004 at 10:37 MST, Lisa Dusseault  wrote:
>>>  > This would overturn a consensus that had previously been 
>>> determined at
>>>  > a WG meeting that happened together with an interoperability 
>>> meeting,
>>>  > and the consensus was not challenged on the mailing list at that 
>>> time.
>>>  >
>>>  > However, given that we have new information -- actual research!
>>>  > (thanks) -- it does make sense to reconsider.
>>>  >
>>>  > WG members please indicate your old, new, and/ or current 
>>> preference,
>>>  > with reasons if they've not already been stated here:
>>>  > 1. Should servers accept an UNLOCK request where the Request-URI 
>>> names
>>>  > any resource covered by the lock named in the lock token?
>>>  > 2. Or, should servers redirect that UNLOCK request to the root of 
>>> the
>>>  > lock?
>>>  > 3. If something else, please explain.
>>>
>>>
>>> No strong preference so just go with what existing servers do.
>> What do you mean by "redirect"? Please be more specific.
>> ...
>
> Lisa,
>
> could you please define what you mean by "redirect"? Otherwise it 
> won't be possible to say something about that option.
>
> The other option we have is...
>
> 3. Server should reject the UNLOCK request if it doesn't address the 
> directly locked resource.
>
> As stated before, my preference is 1) for the simple reasons that
>
> - this is what RFC2518 seems to say,
> - this is what the issues list says as resolution,
> - this is what GULP says after having it synced with the issues list 
> and
> - last but not least this is what servers indeed implement.
>
> Julian
>
> -- 
> <green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Tue Jul  6 14:26:27 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA09899
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 14:26:26 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 75715A2312; Tue,  6 Jul 2004 14:26:26 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id CD81FA2329
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 14:25:48 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhuOt-000403-KO
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 14:10:39 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i66IAcmV026060 sender julian.reschke@gmx.de for w3c-dist-auth@w3.org; Tue, 6 Jul 2004 11:10:38 -0700
Received: from mail.gmx.net (imap.gmx.net [213.165.64.20]) by bandage.seagull.net (8.12.10) with SMTP id i66IAbvW025927 sender julian.reschke@gmx.de for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Tue, 6 Jul 2004 11:10:37 -0700
Received: (qmail 21536 invoked by uid 65534); 6 Jul 2004 18:10:26 -0000
Received: from mail.greenbytes.de (EHLO [192.168.1.17]) (217.5.201.10) by mail.gmx.net (mp001) with SMTP; 06 Jul 2004 20:10:26 +0200
Message-ID: <40EAEB0F.8070409@gmx.de>
Date: Tue, 06 Jul 2004 20:10:23 +0200
From: Julian Reschke <julian.reschke@gmx.de>
MIME-Version: 1.0
To: WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Subject: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/40EAEB0F.8070409@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8678
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706182626.75715A2312@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 14:26:26 -0400 (EDT)


Hi,

I noticed that RFC2518 historically says little about what a lock 
actually *is*, instead just describes it's behaviour (which of course 
needs to be done is well). The result is that essential information if 
spread across the document; instead of being in a single place. A good 
example for this is if you look at the various places in RFC2518 that 
say something about what a timeout is, what it means to refresh it, when 
the server needs to respect it and so on...

Here's what I wrote for 
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.section.2> 
(which continues to progress nicely)...:

--

2.5  Status of a lock

    Having a URI (the lock token URI) on it's own, a lock is a resource
    in the sense defined by [RFC2396].  In general, this resource does
    not have a HTTP URL, and thus can not be directly manipulated using
    HTTP methods.  Instead, this specification defines the new methods
    LOCK (creating and refreshing locks, see Section 4) and UNLOCK
    (removing locks, see Section 5) that act indirectly on locks.

    A lock has state that can be indirectly observed by using the
    DAV:lockdiscovery property defined in Section 3.2.  At a minimum, the
    state of a lock consists of the items defined in the sections below.
    After lock creation, all parts of the state with the exception of the
    timeout value are immutable.

2.5.1  Lock Access Type

    At present, this specification only defines one lock access type, the
    "write" lock defined in Section xx.

2.5.2  Lock Scope

    A lock has either exclusive or shared scope (see Section 2.1).

2.5.3  Lock Root

    A lock is created as effect of a LOCK (creation) method request.  The
    lock root is the URL to which this request was adressed.

2.5.4  Lock Depth

    A "depth 0" lock only affects the resource to which the LOCK request
    was adressed to (the lock root).  This resource is said to be
    "directly locked" by the lock.

    On the other hand, a "depth infinity" lock on a collection
    additionally affects all members of that collection.  These resources
    are said to be "indirectly locked" by the lock.  A "depth infinity"
    lock on a non-collection resource behaves exactly the same way as a
    "depth 0" lock.

2.5.5  Lock Owner

    Clients can submit information about the lock owner when creating a
    lock.  This information should be sufficient for either directly
    contacting a principal (such as a telephone number or email URI), or
    for discovering the principal (such as the URL of a homepage).

    Owner information is kept with the lock so that it can be returned in
    the DAV:lockdiscovery property upon request.  Note that this
    information is entirely client-controlled, thus a server MUST store
    the information faithfully just like if it appeared in a WebDAV dead
    property (see [RFC2518], section 4).

2.5.6  Lock Timeout

    In general, a lock expires after a certain amount of time.  This time
    can be specified in the LOCK creation request (however servers are
    not required to honor this request).

    If the timeout expires then the lock may be lost.  Specifically, if
    the server wishes to harvest the lock upon time-out, the server
    SHOULD act as if an UNLOCK method was executed by the server on the
    resource using the lock token of the timed-out lock, performed with
    its override authority.  Thus logs should be updated with the
    disposition of the lock, notifications should be sent, etc., just as
    they would be for an UNLOCK request.

    The timers used for timeout expiry can be reset by the client by
    submitting a LOCK refresh request.

    Servers are advised to pay close attention to the values submitted by
    clients, as they will be indicative of the type of activity the
    client intends to perform.  For example, an applet running in a
    browser may need to lock a resource, but because of the instability
    of the environment within which the applet is running, the applet may
    be turned off without warning.  As a result, the applet is likely to
    ask for a relatively small timeout value so that if the applet dies,
    the lock can be quickly harvested.  However, a document management
    system is likely to ask for an extremely long timeout because its
    user may be planning on going off-line.

    A client MUST NOT assume that just because the time-out has expired
    the lock has been lost.  Clients MUST assume that locks may
    arbitrarily disappear at any time, regardless of the value given in
    the Timeout header.  The Timeout header only indicates the behavior
    of the server if "extraordinary" circumstances do not occur.  For
    example, an administrator may remove a lock at any time or the system
    may crash in such a way that it loses the record of the lock's
    existence.

--

Feedback appreciated,

Julian


-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Tue Jul  6 14:27:00 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA09933
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 14:27:00 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 16EE8A207C; Tue,  6 Jul 2004 14:27:00 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id E23D7A2352
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 14:25:53 -0400 (EDT)
Received: from imap.gmx.net ([213.165.64.20] helo=mail.gmx.net)
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BhudE-0005oM-7E
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 14:25:28 -0400
Received: (qmail 5948 invoked by uid 65534); 6 Jul 2004 18:24:56 -0000
Received: from mail.greenbytes.de (EHLO [192.168.1.17]) (217.5.201.10)
  by mail.gmx.net (mp001) with SMTP; 06 Jul 2004 20:24:56 +0200
X-Authenticated: #1915285
Message-ID: <40EAEE70.3030201@gmx.de>
Date: Tue, 06 Jul 2004 20:24:48 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: WebDAV <w3c-dist-auth@w3.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/40EAEE70.3030201@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8679
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706182700.16EE8A207C@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 14:27:00 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Hi,

I noticed that RFC2518 historically says little about what a lock 
actually *is*, instead just describes it's behaviour (which of course 
needs to be done is well). The result is that essential information if 
spread across the document; instead of being in a single place. A good 
example for this is if you look at the various places in RFC2518 that 
say something about what a timeout is, what it means to refresh it, when 
the server needs to respect it and so on...

Here's what I wrote for 
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.section.2> 
(which continues to progress nicely)...:

-- 

2.5  Status of a lock

    Having a URI (the lock token URI) on it's own, a lock is a resource
    in the sense defined by [RFC2396].  In general, this resource does
    not have a HTTP URL, and thus can not be directly manipulated using
    HTTP methods.  Instead, this specification defines the new methods
    LOCK (creating and refreshing locks, see Section 4) and UNLOCK
    (removing locks, see Section 5) that act indirectly on locks.

    A lock has state that can be indirectly observed by using the
    DAV:lockdiscovery property defined in Section 3.2.  At a minimum, the
    state of a lock consists of the items defined in the sections below.
    After lock creation, all parts of the state with the exception of the
    timeout value are immutable.

2.5.1  Lock Access Type

    At present, this specification only defines one lock access type, the
    "write" lock defined in Section xx.

2.5.2  Lock Scope

    A lock has either exclusive or shared scope (see Section 2.1).

2.5.3  Lock Root

    A lock is created as effect of a LOCK (creation) method request.  The
    lock root is the URL to which this request was adressed.

2.5.4  Lock Depth

    A "depth 0" lock only affects the resource to which the LOCK request
    was adressed to (the lock root).  This resource is said to be
    "directly locked" by the lock.

    On the other hand, a "depth infinity" lock on a collection
    additionally affects all members of that collection.  These resources
    are said to be "indirectly locked" by the lock.  A "depth infinity"
    lock on a non-collection resource behaves exactly the same way as a
    "depth 0" lock.

2.5.5  Lock Owner

    Clients can submit information about the lock owner when creating a
    lock.  This information should be sufficient for either directly
    contacting a principal (such as a telephone number or email URI), or
    for discovering the principal (such as the URL of a homepage).

    Owner information is kept with the lock so that it can be returned in
    the DAV:lockdiscovery property upon request.  Note that this
    information is entirely client-controlled, thus a server MUST store
    the information faithfully just like if it appeared in a WebDAV dead
    property (see [RFC2518], section 4).

2.5.6  Lock Timeout

    In general, a lock expires after a certain amount of time.  This time
    can be specified in the LOCK creation request (however servers are
    not required to honor this request).

    If the timeout expires then the lock may be lost.  Specifically, if
    the server wishes to harvest the lock upon time-out, the server
    SHOULD act as if an UNLOCK method was executed by the server on the
    resource using the lock token of the timed-out lock, performed with
    its override authority.  Thus logs should be updated with the
    disposition of the lock, notifications should be sent, etc., just as
    they would be for an UNLOCK request.

    The timers used for timeout expiry can be reset by the client by
    submitting a LOCK refresh request.

    Servers are advised to pay close attention to the values submitted by
    clients, as they will be indicative of the type of activity the
    client intends to perform.  For example, an applet running in a
    browser may need to lock a resource, but because of the instability
    of the environment within which the applet is running, the applet may
    be turned off without warning.  As a result, the applet is likely to
    ask for a relatively small timeout value so that if the applet dies,
    the lock can be quickly harvested.  However, a document management
    system is likely to ask for an extremely long timeout because its
    user may be planning on going off-line.

    A client MUST NOT assume that just because the time-out has expired
    the lock has been lost.  Clients MUST assume that locks may
    arbitrarily disappear at any time, regardless of the value given in
    the Timeout header.  The Timeout header only indicates the behavior
    of the server if "extraordinary" circumstances do not occur.  For
    example, an administrator may remove a lock at any time or the system
    may crash in such a way that it loses the record of the lock's
    existence.

-- 

Feedback appreciated,

Julian


-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Tue Jul  6 15:28:41 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA15928
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 15:28:41 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 82207A239B; Tue,  6 Jul 2004 15:28:42 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 80CFFA239B
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 15:28:40 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhvcO-0000RA-EN
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 15:28:40 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i66JSdIN025442 sender ccjason@us.ibm.com for w3c-dist-auth@w3.org; Tue, 6 Jul 2004 12:28:39 -0700
Received: from e3.ny.us.ibm.com (e3.ny.us.ibm.com [32.97.182.103]) by bandage.seagull.net (8.12.10) with ESMTP id i66JSbfk025364 sender ccjason@us.ibm.com; Tue, 6 Jul 2004 12:28:38 -0700
Received: from northrelay04.pok.ibm.com (northrelay04.pok.ibm.com [9.56.224.206]) by e3.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i66JSQws604960; Tue, 6 Jul 2004 15:28:26 -0400
Received: from d01ml604.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by northrelay04.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i66JTH4A120906; Tue, 6 Jul 2004 15:29:18 -0400
To: Julian Reschke <nnjulian.reschke___at___gmx.de@smallcue.com>
Cc: WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 5.0.11   July 24, 2002
From: Jason Crawford <ccjason@us.ibm.com>
Message-ID: <OF9599C94D.FFCF6C3E-ON85256EC9.0069744B-85256EC9.006AF8E9@us.ibm.com>
Date: Tue, 6 Jul 2004 15:28:20 -0400
X-MIMETrack: Serialize by Router on D01ML604/01/M/IBM(Release 6.51HF339 | June 21, 2004) at 07/06/2004 15:28:24, Serialize complete at 07/06/2004 15:28:24
Content-Type: multipart/alternative; boundary="=_alternative 006A115785256EC9_="
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/OF9599C94D.FFCF6C3E-ON85256EC9.0069744B-85256EC9.006AF8E9@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8680
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706192842.82207A239B@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 15:28:42 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 006A115785256EC9_=
Content-Type: text/plain; charset="us-ascii"

On Tuesday, 07/06/2004 at 08:10 ZE2, Julian Reschke wrote:


> 2.5  Status of a lock
> 
> Having a URI (the lock token URI) on it's own, a lock is a resource
> in the sense defined by [RFC2396].  In general, this resource does
> not have a HTTP URL, and thus can not be directly manipulated using
> HTTP methods.  Instead, this specification defines the new methods
> LOCK (creating and refreshing locks, see Section 4) and UNLOCK
> (removing locks, see Section 5) that act indirectly on locks.

I don't like us calling a lock a resource. 


The other paragraphs you included seem reasonable.


--=_alternative 006A115785256EC9_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="sans-serif">On Tuesday, 07/06/2004 at 08:10 ZE2, Julian Reschke wrote:</font>
<br>
<br><font size=2 face="sans-serif"><br>
&gt; 2.5 &nbsp;Status of a lock<br>
&gt; <br>
&gt; Having a URI (the lock token URI) on it's own, a lock is a resource</font>
<br><font size=2 face="sans-serif">&gt; in the sense defined by [RFC2396]. &nbsp;In general, this resource does<br>
&gt; not have a HTTP URL, and thus can not be directly manipulated using<br>
&gt; HTTP methods. &nbsp;Instead, this specification defines the new methods<br>
&gt; LOCK (creating and refreshing locks, see Section 4) and UNLOCK<br>
&gt; (removing locks, see Section 5) that act indirectly on locks.</font>
<br>
<br><font size=2 face="sans-serif">I don't like us calling a lock a resource. &nbsp;</font>
<br>
<br>
<br><font size=2 face="sans-serif">The other paragraphs you included seem reasonable.</font>
<br>
<br>
--=_alternative 006A115785256EC9_=--



From w3c-dist-auth-request@w3.org  Tue Jul  6 15:38:10 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA16590
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 15:38:10 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id B99E3A2376; Tue,  6 Jul 2004 15:38:11 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 0F336A238E
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 15:38:10 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhvlZ-0002Ua-Nl
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 15:38:09 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i66Jc8Gv030480 sender julian.reschke@gmx.de for w3c-dist-auth@w3.org; Tue, 6 Jul 2004 12:38:08 -0700
Received: from mail.gmx.net (imap.gmx.net [213.165.64.20]) by bandage.seagull.net (8.12.10) with SMTP id i66Jc7s1030375 sender julian.reschke@gmx.de for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Tue, 6 Jul 2004 12:38:07 -0700
Received: (qmail 9149 invoked by uid 65534); 6 Jul 2004 19:37:56 -0000
Received: from pD9FF098B.dip.t-dialin.net (EHLO [192.168.0.2]) (217.255.9.139) by mail.gmx.net (mp011) with SMTP; 06 Jul 2004 21:37:56 +0200
Message-ID: <40EAFF8F.1090002@gmx.de>
Date: Tue, 06 Jul 2004 21:37:51 +0200
From: Julian Reschke <julian.reschke@gmx.de>
MIME-Version: 1.0
To: Jason Crawford <ccjason@us.ibm.com>
Cc: WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/40EAFF8F.1090002@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8681
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706193811.B99E3A2376@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 15:38:11 -0400 (EDT)


Jason Crawford wrote:
> ...
> I don't like us calling a lock a resource.
> ...
> The other paragraphs you included seem reasonable.

I expected pushback on that wording; but I think it really makes things 
clearer. Anything that has a URI *is* a resource (as per RFC2396 
definition). Saying that it is a resource with internal state makes 
talking about it a lot simpler.

So can you explain *why* you don't like that terminology?

Best regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Tue Jul  6 16:20:07 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA19455
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 16:20:07 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id A8C50A0678; Tue,  6 Jul 2004 16:19:46 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 0025BA0678
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 16:19:41 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhwPl-0000lr-RZ
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 16:19:42 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i66KJehK026167 sender ccjason@us.ibm.com for w3c-dist-auth@w3.org; Tue, 6 Jul 2004 13:19:40 -0700
Received: from e1.ny.us.ibm.com (e1.ny.us.ibm.com [32.97.182.101]) by bandage.seagull.net (8.12.10) with ESMTP id i66KJc8q026042 sender ccjason@us.ibm.com; Tue, 6 Jul 2004 13:19:39 -0700
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150]) by e1.ny.us.ibm.com (8.12.10/NS PXFA) with ESMTP id i66KJRCc477046; Tue, 6 Jul 2004 16:19:27 -0400
Received: from d01ml604.pok.ibm.com (d01av04.pok.ibm.com [9.56.224.64]) by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i66KKafC116264; Tue, 6 Jul 2004 16:20:36 -0400
To: Julian Reschke <nnjulian.reschke___at___gmx.de@smallcue.com>
Cc: WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 5.0.11   July 24, 2002
From: Jason Crawford <ccjason@us.ibm.com>
Message-ID: <OF7A94C828.2C4107EC-ON85256EC9.006DC76E-85256EC9.006FA4EF@us.ibm.com>
Date: Tue, 6 Jul 2004 16:19:22 -0400
X-MIMETrack: Serialize by Router on D01ML604/01/M/IBM(Release 6.51HF339 | June 21, 2004) at 07/06/2004 16:19:26, Serialize complete at 07/06/2004 16:19:26
Content-Type: multipart/alternative; boundary="=_alternative 006F695985256EC9_="
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/OF7A94C828.2C4107EC-ON85256EC9.006DC76E-85256EC9.006FA4EF@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8682
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706201946.A8C50A0678@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 16:19:46 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 006F695985256EC9_=
Content-Type: text/plain; charset="us-ascii"

On Tuesday, 07/06/2004 at 09:37 ZE2, Julian Reschke wrote:
> Jason Crawford wrote:
> > ...
> > I don't like us calling a lock a resource.
> > ...
> > The other paragraphs you included seem reasonable.
> 
> So can you explain *why* you don't like that terminology?

I'll try...

Because we tend to tend to think of words the way we've used them even if 
they technically have a more generic definition.   A lock seems to not 
behave like what we typically refer to as a resource.  There doesn't seem 
to be a lot of overlap in their most important features and methods.

You mentioned that a lock has a URI.   I think of the lock-token 
identifying the lock, but the fact that it uses URI-like syntax is only 
coincidental to me.

If a lock is a resource, I'd expect to be able to substitute the word 
"resource" for "lock" and have it sound reasonable.  I'm comfortable 
saying that a lock acts on a resource, but I'd not be comfortable saying a 
 resource acts on a resource.  Similarly... "depth-resource", "exclusive 
resource", or "write resource".   I'd prefer to simply think of resources 
as something that locks act upon.

For me it feels better not to define a lock at all beyond it's behavior 
rather than to say it's a resource.

J.

--=_alternative 006F695985256EC9_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="sans-serif">On Tuesday, 07/06/2004 at 09:37 ZE2, Julian Reschke wrote:<br>
&gt; Jason Crawford wrote:<br>
&gt; &gt; ...<br>
&gt; &gt; I don't like us calling a lock a resource.<br>
&gt; &gt; ...<br>
&gt; &gt; The other paragraphs you included seem reasonable.<br>
&gt; <br>
&gt; So can you explain *why* you don't like that terminology?</font>
<br>
<br><font size=2 face="sans-serif">I'll try...</font>
<br>
<br><font size=2 face="sans-serif">Because we tend to tend to think of words the way we've used them even if they technically have a more generic definition. &nbsp; A lock seems to not behave like what we typically refer to as a resource. &nbsp;There doesn't seem to be a lot of overlap in their most important features and methods.</font>
<br>
<br><font size=2 face="sans-serif">You mentioned that a lock has a URI. &nbsp; I think of the lock-token identifying the lock, but the fact that it uses URI-like syntax is only coincidental to me.</font>
<br>
<br><font size=2 face="sans-serif">If a lock is a resource, I'd expect to be able to substitute the word &quot;resource&quot; for &quot;lock&quot; and have it sound reasonable. &nbsp;I'm comfortable saying that a lock acts on a resource, but I'd not be comfortable saying a &nbsp;resource acts on a resource. &nbsp;Similarly... &quot;depth-resource&quot;, &quot;exclusive resource&quot;, or &quot;write resource&quot;. &nbsp; I'd prefer to simply think of resources as something that locks act upon.</font>
<br>
<br><font size=2 face="sans-serif">For me it feels better not to define a lock at all beyond it's behavior rather than to say it's a resource.</font>
<br>
<br><font size=2 face="sans-serif">J.</font>
<br>
--=_alternative 006F695985256EC9_=--



From w3c-dist-auth-request@w3.org  Tue Jul  6 16:22:24 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA19553
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 16:22:24 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 78B99A053A; Tue,  6 Jul 2004 16:22:25 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 0BC7CA053A
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 16:22:23 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhwSM-0001Ax-UL
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 16:22:23 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i66KMMIS028122 sender elias@cse.ucsc.edu for w3c-dist-auth@w3.org; Tue, 6 Jul 2004 13:22:22 -0700
Received: from dream.darwin.nasa.gov (betlik.darwin.nasa.gov [198.123.160.11]) by bandage.seagull.net (8.12.10) with ESMTP id i66KMLLD027980 sender elias@cse.ucsc.edu for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Tue, 6 Jul 2004 13:22:21 -0700
Received: from cse.ucsc.edu (paperweight.darwin.nasa.gov [198.123.160.27]) by dream.darwin.nasa.gov ( -- Info omitted by ASANI Solutions, LLC.) with ESMTP id i66KLQL07581; Tue, 6 Jul 2004 13:21:28 -0700 (PDT)
Message-ID: <40EB09C6.3090604@cse.ucsc.edu>
Date: Tue, 06 Jul 2004 13:21:26 -0700
From: Elias Sinderson <elias@cse.ucsc.edu>
MIME-Version: 1.0
To: Julian Reschke <julian.reschke@gmx.de>
Cc: Jason Crawford <ccjason@us.ibm.com>,
        WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/40EB09C6.3090604@cse.ucsc.edu
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8683
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706202225.78B99A053A@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 16:22:25 -0400 (EDT)


>  Jason Crawford:
>
>> ...  I don't like us calling a lock a resource.
>
Julian Reshke:

> I expected pushback on that wording; but I think it really makes 
> things clearer. Anything that has a URI *is* a resource (as per 
> RFC2396 definition). Saying that it is a resource with internal state 
> makes talking about it a lot simpler. So can you explain *why* you 
> don't like that terminology? 

Elias Sinderson:

Initially I also had a negative reaction to calling a lock a resource, 
since I generally use that word to refer to something that one can GET, 
PUT, PROPPATCH, etc. However, after reviewing RFC2396 to refresh my 
conceptual understanding of URIs vs. URLs, I have less of a reservation 
on using the term as Julian has for locks. A significant turning point 
in my feeling on this was in reading the explicitly referenced 
definition of a resource in section 1.1 of RFC2396:

      Resource
         A resource can be anything that has identity.  Familiar
         examples include an electronic document, an image, a service
         (e.g., "today's weather report for Los Angeles"), and a
         collection of other resources.  Not all resources are network
         "retrievable" [...]

In short, while my initial reaction was on par with Jasons', I'm okay 
with the wording - especially since it seems to make things clearer and 
a clearer specification will only lead to better implementations in the 
long run (even if the implementors have to reference RFC2396 themselves)...


Cheers,
Elias



From w3c-dist-auth-request@w3.org  Tue Jul  6 17:21:13 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA23978
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 17:21:13 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 1EA31A06E1; Tue,  6 Jul 2004 16:36:23 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 32455A08D4
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 16:36:20 -0400 (EDT)
Received: from betlik.darwin.nasa.gov ([198.123.160.11] helo=dream.darwin.nasa.gov)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bhwfr-0003pt-So
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 16:36:20 -0400
Received: from cse.ucsc.edu (paperweight.darwin.nasa.gov [198.123.160.27])
	by dream.darwin.nasa.gov ( -- Info omitted by ASANI Solutions, LLC.) with ESMTP id i66KaGL07664
	for <w3c-dist-auth@w3.org>; Tue, 6 Jul 2004 13:36:16 -0700 (PDT)
Message-ID: <40EB0D40.4060903@cse.ucsc.edu>
Date: Tue, 06 Jul 2004 13:36:16 -0700
From: Elias Sinderson <elias@cse.ucsc.edu>
Reply-To: w3c-dist-auth@w3.org
User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.0.1) Gecko/20020920 Netscape/7.0
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: w3c-dist-auth@w3.org
References: <OF69FE9935.8787C0DE-ON85256EC9.00582049-85256EC9.0058B664@us.ibm.com>
Content-Type: multipart/alternative;
 boundary="------------090607090200040904030708"
Subject: Re: Call for consensus on UNLOCK Request-URI being lock root
X-Archived-At: http://www.w3.org/mid/40EB0D40.4060903@cse.ucsc.edu
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8684
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706203623.1EA31A06E1@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 16:36:23 -0400 (EDT)



--------------090607090200040904030708
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Geoffrey M Clemm wrote:

> [...] the issue being discussed is just whether or not the refresh of 
> the lock has to be applied to the URL of the root of the lock, or 
> whether it can be applied to the URL of an indirectly locked resource 
> and then be automatically redirected by the server to the URL of the 
> root of the lock. 

Ah, thanks, I had indeed misunderstood the specific issue (while 
frantically trying to catch up on my email). So, in that case, I think I 
would still prefer option 1, given the evidence of current 
implementation behaviour. I'll try to read more carefully in the 
future...  ;-)

Cheers,
Elias

--------------090607090200040904030708
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <title></title>
</head>
<body>
Geoffrey M Clemm wrote:<br>
<blockquote type="cite"
 cite="midOF69FE9935.8787C0DE-ON85256EC9.00582049-85256EC9.0058B664@us.ibm.com"> 
  <font size="2"><tt>[...] </tt></font><font size="2"><tt>the issue being</tt></font> 
  <font size="2"><tt>discussed is just whether or not the refresh of the lock
has to be</tt></font> <font size="2"><tt>applied to the URL of the root of
the lock, or whether it can be applied</tt></font> <font size="2"><tt>to
the URL of an indirectly locked resource and then be automatically</tt></font> 
  <font size="2"><tt>redirected by the server to the URL of the root of the
lock.</tt></font> </blockquote>
Ah, thanks, I had indeed misunderstood the specific issue (while frantically
trying to catch up on my email). So, in that case, I think I would still
prefer option 1, given the evidence of current implementation behaviour.
I'll try to read more carefully in the future... &nbsp;;-)<br>
<br>
Cheers,<br>
Elias<br>
</body>
</html>

--------------090607090200040904030708--



From w3c-dist-auth-request@w3.org  Tue Jul  6 19:32:11 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA03674
	for <webdav-archive@lists.ietf.org>; Tue, 6 Jul 2004 19:32:11 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 1A8A9A0C3F; Tue,  6 Jul 2004 19:32:12 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 87FBDA0C3F
	for <w3c-dist-auth@listhub.w3.org>; Tue,  6 Jul 2004 19:32:09 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BhzQ0-0004WK-Ug
	for w3c-dist-auth@w3.org; Tue, 06 Jul 2004 19:32:09 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i66NW7A8016584 sender julian.reschke@gmx.de for w3c-dist-auth@w3.org; Tue, 6 Jul 2004 16:32:07 -0700
Received: from mail.gmx.net (imap.gmx.net [213.165.64.20]) by bandage.seagull.net (8.12.10) with SMTP id i66NW5mR016505 sender julian.reschke@gmx.de for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Tue, 6 Jul 2004 16:32:06 -0700
Received: (qmail 27323 invoked by uid 65534); 6 Jul 2004 23:31:54 -0000
Received: from pD9535E6E.dip.t-dialin.net (EHLO [192.168.0.2]) (217.83.94.110) by mail.gmx.net (mp016) with SMTP; 07 Jul 2004 01:31:54 +0200
Message-ID: <40EB3664.90505@gmx.de>
Date: Wed, 07 Jul 2004 01:31:48 +0200
From: Julian Reschke <julian.reschke@gmx.de>
MIME-Version: 1.0
To: Jason Crawford <ccjason@us.ibm.com>
Cc: WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/40EB3664.90505@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8685
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040706233212.1A8A9A0C3F@frink.w3.org>
Resent-Date: Tue,  6 Jul 2004 19:32:12 -0400 (EDT)


Jason Crawford wrote:
> I'll try...
> 
> Because we tend to tend to think of words the way we've used them even 
> if they technically have a more generic definition.   A lock seems to 
> not behave like what we typically refer to as a resource.  There doesn't 
> seem to be a lot of overlap in their most important features and methods.

Well, I'd say they do.

- you can ask the server to create a new lock using LOCK, similar to how 
servers frequently create new resources upon POST,
- a lock has a URI,
- a lock has state,
- the state is observable indirectly through HTTP methods and last but 
not least,
- it's pefectly ok to implement locks as HTTP resources (for instance 
which would react to DELETE).

> You mentioned that a lock has a URI.   I think of the lock-token 
> identifying the lock, but the fact that it uses URI-like syntax is only 
> coincidental to me.

That's fine.

> If a lock is a resource, I'd expect to be able to substitute the word 
> "resource" for "lock" and have it sound reasonable.  I'm comfortable 
> saying that a lock acts on a resource, but I'd not be comfortable saying 
> a  resource acts on a resource.  Similarly... "depth-resource", 
> "exclusive resource", or "write resource".   I'd prefer to simply think 
> of resources as something that locks act upon.

If you substitute "lock" by "lock resource" things sound much better. 
The concept is similar to the version history resource in DeltaV. It's 
not strictly needed for many things, but making it an HTTP resource 
gives you a lot of advantages (such as properties you can observe 
*directly* though PROPFIND instead of indirectly through a specific 
REPORT).

> For me it feels better not to define a lock at all beyond it's behavior 
> rather than to say it's a resource.

The desire to define the *state* of a resource (what it must consist of) 
in a single place IMHO is independant of whether we actually *state* 
that it *is* a resource.  I just happen to think that things become much 
clearer by seeing it this way.

So far I've heard a resounding "of course" internally in our office, 
yours and Elias' feedback. Let's see what others think...

Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Wed Jul  7 15:06:06 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA08620
	for <webdav-archive@lists.ietf.org>; Wed, 7 Jul 2004 15:06:06 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 1380BA140F; Wed,  7 Jul 2004 15:06:08 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id C8508A140F
	for <w3c-dist-auth@listhub.w3.org>; Wed,  7 Jul 2004 15:06:06 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BiHk6-0008W2-IT
	for w3c-dist-auth@w3.org; Wed, 07 Jul 2004 15:06:06 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i67J64FH014988 sender lisa@osafoundation.org for w3c-dist-auth@w3.org; Wed, 7 Jul 2004 12:06:04 -0700
Received: from kahuna.osafoundation.org (kahuna.osafoundation.org [204.152.186.98]) by bandage.seagull.net (8.12.10) with ESMTP id i67J61Kc014942 sender lisa@osafoundation.org for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Wed, 7 Jul 2004 12:06:01 -0700
Received: from [192.168.101.178] (w002.z065106067.sjc-ca.dsl.cnc.net [65.106.67.2]) (authenticated bits=0) by kahuna.osafoundation.org (8.12.8/8.12.8) with ESMTP id i67J5rJL029942 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO); Wed, 7 Jul 2004 12:05:53 -0700
Mime-Version: 1.0 (Apple Message framework v618)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <A6F3A918-D048-11D8-B746-000A95B2BB72@osafoundation.org>
Cc: WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
From: Lisa Dusseault <lisa@osafoundation.org>
Date: Wed, 7 Jul 2004 12:05:46 -0700
To: Julian Reschke <julian.reschke@gmx.de>
X-Mailer: Apple Mail (2.618)
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/A6F3A918-D048-11D8-B746-000A95B2BB72@osafoundation.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8686
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040707190608.1380BA140F@frink.w3.org>
Resent-Date: Wed,  7 Jul 2004 15:06:08 -0400 (EDT)


Of course a lock can be *modelled* as a resource. Of course, 
RFC2518(bis) can explicitly model a lock as a resource.  Of course 
implementations can model a lock as a resource.  Note however we could 
instead choose to model the lock token as a resource if we wanted.

To argue at least as devil's advocate, we can also simply say that a 
lock token is in the format of a URI and stop there.  The original 
RFC2518 text says that a lock token "is represented as" a URI, not that 
it is a URI, although it also says that the URI identifies a lock.

RFC2396 is clear that URIs identify resources, but since then, the 
format defined for URIs in RFC2396 has been used for many other 
identifiers.   It's natural for a well defined format to be used for 
things beyond what it was defined for.  Even HTTP URLs are used for 
things which are not HTTP resources -- for example, when an XML 
namespace begins with the "http" scheme.   When does a new URI indicate 
a new resource?  Does the addition of query parameters to a HTTP URL 
mean that it's now addressing a different resource?  Who cares?

Is an XML namespace a resource?  Each namespace has a URI.  How would 
it help or hinder XML Namespace definition if we were to insist that an 
XML namespace were a resource? Must we insist that every URI identifies 
a resource?  What implications would this have for other specifications 
and their models?  Does the "DAV:" URI point to a DAV resource?  Other 
examples:
  - CAP uses "CAP URLs" without defining calendars as "resources" 
(draft-ietf-calsch-cap-13.txt)
  - XMPP URIs and URLs (there are several kinds) don't worry about 
whether the things identified are strictly resources

Another way to look at this; is there some problem solved by modelling 
a lock as a resource?  I took a look at the proposed text and 
"resource" is only used to refer to a lock in the first paragraph, so I 
don't understand the argument that this makes the text clearer.  That 
argument ought to involve a claim that the original text is unclear in 
some way that matters to interoperability.

My concrete worry is that implementors will feel that there are 
implementation implications resulting from modelling a lock as a 
resource, and make implementation decisions that aren't necessary.  
That was the result of the wording that a MOVE is the "logical 
equivalent of" a COPY followed by a DELETE -- definitional or 
explanatory wording was seen as normative in that case by some 
implementors.  Philosophical, definitional or modeling changes do have 
an effect on implementors behavior.  What effect would you like that to 
be?

Lisa


On Jul 6, 2004, at 4:31 PM, Julian Reschke wrote:

>
> Jason Crawford wrote:
>> I'll try...
>> Because we tend to tend to think of words the way we've used them 
>> even if they technically have a more generic definition.   A lock 
>> seems to not behave like what we typically refer to as a resource.  
>> There doesn't seem to be a lot of overlap in their most important 
>> features and methods.
>
> Well, I'd say they do.
>
> - you can ask the server to create a new lock using LOCK, similar to 
> how servers frequently create new resources upon POST,
> - a lock has a URI,
> - a lock has state,
> - the state is observable indirectly through HTTP methods and last but 
> not least,
> - it's pefectly ok to implement locks as HTTP resources (for instance 
> which would react to DELETE).
>
>> You mentioned that a lock has a URI.   I think of the lock-token 
>> identifying the lock, but the fact that it uses URI-like syntax is 
>> only coincidental to me.
>
> That's fine.
>
>> If a lock is a resource, I'd expect to be able to substitute the word 
>> "resource" for "lock" and have it sound reasonable.  I'm comfortable 
>> saying that a lock acts on a resource, but I'd not be comfortable 
>> saying a  resource acts on a resource.  Similarly... 
>> "depth-resource", "exclusive resource", or "write resource".   I'd 
>> prefer to simply think of resources as something that locks act upon.
>
> If you substitute "lock" by "lock resource" things sound much better. 
> The concept is similar to the version history resource in DeltaV. It's 
> not strictly needed for many things, but making it an HTTP resource 
> gives you a lot of advantages (such as properties you can observe 
> *directly* though PROPFIND instead of indirectly through a specific 
> REPORT).
>
>> For me it feels better not to define a lock at all beyond it's 
>> behavior rather than to say it's a resource.
>
> The desire to define the *state* of a resource (what it must consist 
> of) in a single place IMHO is independant of whether we actually 
> *state* that it *is* a resource.  I just happen to think that things 
> become much clearer by seeing it this way.
>
> So far I've heard a resounding "of course" internally in our office, 
> yours and Elias' feedback. Let's see what others think...
>
> Julian
>
> -- 
> <green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
>



From w3c-dist-auth-request@w3.org  Wed Jul  7 15:35:20 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA12468
	for <webdav-archive@lists.ietf.org>; Wed, 7 Jul 2004 15:35:20 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 69DCDA1BE7; Wed,  7 Jul 2004 15:35:22 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 578C4A1C6F
	for <w3c-dist-auth@listhub.w3.org>; Wed,  7 Jul 2004 15:35:19 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BiIBm-0004vo-6Q
	for w3c-dist-auth@w3.org; Wed, 07 Jul 2004 15:34:42 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i67JYfq0002843 sender julian.reschke@gmx.de for w3c-dist-auth@w3.org; Wed, 7 Jul 2004 12:34:41 -0700
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by bandage.seagull.net (8.12.10) with SMTP id i67JYYQ6002583 sender julian.reschke@gmx.de for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Wed, 7 Jul 2004 12:34:35 -0700
Received: (qmail 17567 invoked by uid 65534); 7 Jul 2004 19:34:21 -0000
Received: from pD9535E6E.dip.t-dialin.net (EHLO [192.168.0.2]) (217.83.94.110) by mail.gmx.net (mp015) with SMTP; 07 Jul 2004 21:34:21 +0200
Message-ID: <40EC503B.3030402@gmx.de>
Date: Wed, 07 Jul 2004 21:34:19 +0200
From: Julian Reschke <julian.reschke@gmx.de>
MIME-Version: 1.0
To: Lisa Dusseault <lisa@osafoundation.org>
Cc: WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/40EC503B.3030402@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8687
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040707193522.69DCDA1BE7@frink.w3.org>
Resent-Date: Wed,  7 Jul 2004 15:35:22 -0400 (EDT)


Lisa Dusseault wrote:

> Of course a lock can be *modelled* as a resource. Of course, 
> RFC2518(bis) can explicitly model a lock as a resource.  Of course 
> implementations can model a lock as a resource.  Note however we could 
> instead choose to model the lock token as a resource if we wanted.

According to RFC2396, anything that has a URI is a resource. There's a 
one-to-one relationship between a lock token and the lock. However, the 
lock token *is* the URI, so saying it is a resource doesn't really make 
sense.

> To argue at least as devil's advocate, we can also simply say that a 
> lock token is in the format of a URI and stop there.  The original 
> RFC2518 text says that a lock token "is represented as" a URI, not that 
> it is a URI, although it also says that the URI identifies a lock.

Anything that is identified by a URI is a resource. This by *by definition*.

RFC2518 says:

"A lock token is a type of state token, represented as a URI, which 
identifies a particular lock."

So we have a URI and an object identified by a URI. It's unclear to me 
why saying that object is a resource would be saying something new...

> RFC2396 is clear that URIs identify resources, but since then, the 
> format defined for URIs in RFC2396 has been used for many other 
> identifiers.   It's natural for a well defined format to be used for 

Example, please?

> things beyond what it was defined for.  Even HTTP URLs are used for 
> things which are not HTTP resources -- for example, when an XML 
> namespace begins with the "http" scheme.   When does a new URI indicate 
> a new resource?  Does the addition of query parameters to a HTTP URL 
> mean that it's now addressing a different resource?  Who cares?

A URI always identifies a resource. Whether a "new" URI identifies a 
"new" resource depends on URI scheme, implementation and intent.

> Is an XML namespace a resource?  Each namespace has a URI.  How would it 
> help or hinder XML Namespace definition if we were to insist that an XML 
> namespace were a resource? Must we insist that every URI identifies a 
> resource?  What implications would this have for other specifications 

Yes, because that's what the relevant RFCs say.

> and their models?  Does the "DAV:" URI point to a DAV resource?  Other 
> examples:

Strictly speaking, "DAV:" isn't a URI (as defined by RFC2396). However, 
for instance, "DAV:displayname" is a resource.

>  - CAP uses "CAP URLs" without defining calendars as "resources" 
> (draft-ietf-calsch-cap-13.txt)
>  - XMPP URIs and URLs (there are several kinds) don't worry about 
> whether the things identified are strictly resources

I don't follow. What do you mean by "not being strictly a resource"? 
What's the definition of that? Do you have another definition for 
URI/resource than the one appearing in RFC2396?

> Another way to look at this; is there some problem solved by modelling a 
> lock as a resource?  I took a look at the proposed text and "resource" 
> is only used to refer to a lock in the first paragraph, so I don't 
> understand the argument that this makes the text clearer.  That argument 
> ought to involve a claim that the original text is unclear in some way 
> that matters to interoperability.

I think it helps understanding that a lock is an object that indeed has 
identity, a defined lifetime and observable properties.

> My concrete worry is that implementors will feel that there are 
> implementation implications resulting from modelling a lock as a 
> resource, and make implementation decisions that aren't necessary.  That 

Under the definition of RFC2396, there's no way to implement a WebDAV 
lock but as a resource. You may want to re-read RFC2396 
(<http://greenbytes.de/tech/webdav/rfc2396.html#rfc.section.1.1.p.3>) or 
RFC2396bis 
(<http://cvs.apache.org/viewcvs.cgi/*checkout*/ietf-uri/rev-2002/rfc2396bis.html#rfc.section.1.1.p.3>) 
to understand why this is correct.

> was the result of the wording that a MOVE is the "logical equivalent of" 
> a COPY followed by a DELETE -- definitional or explanatory wording was 
> seen as normative in that case by some implementors.  Philosophical, 
> definitional or modeling changes do have an effect on implementors 
> behavior.  What effect would you like that to be?

The intent is to better explain what a lock indeed *is*.

Could you elaborate in which way people could possibly misunderstand the 
new text?

Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Wed Jul  7 15:55:58 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA14070
	for <webdav-archive@lists.ietf.org>; Wed, 7 Jul 2004 15:55:58 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id F1CBAA1344; Wed,  7 Jul 2004 15:55:59 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 57E06A1344
	for <w3c-dist-auth@listhub.w3.org>; Wed,  7 Jul 2004 15:55:58 -0400 (EDT)
Received: from kahuna.osafoundation.org ([204.152.186.98])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BiIWM-0001Ix-49
	for w3c-dist-auth@w3c.org; Wed, 07 Jul 2004 15:55:58 -0400
Old-X-Envelope-From: lisa@osafoundation.org
Old-X-Envelope-To: <w3c-dist-auth@w3c.org>
Received: from [192.168.101.178] (w002.z065106067.sjc-ca.dsl.cnc.net [65.106.67.2])
	(authenticated bits=0)
	by kahuna.osafoundation.org (8.12.8/8.12.8) with ESMTP id i67JtqJL009514
	(version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO)
	for <w3c-dist-auth@w3c.org>; Wed, 7 Jul 2004 12:55:56 -0700
Mime-Version: 1.0 (Apple Message framework v618)
Content-Transfer-Encoding: 7bit
Message-Id: <A2BB5528-D04F-11D8-B746-000A95B2BB72@osafoundation.org>
Content-Type: text/plain; charset=US-ASCII; format=flowed
To: Webdav WG <w3c-dist-auth@w3c.org>
From: Lisa Dusseault <lisa@osafoundation.org>
Date: Wed, 7 Jul 2004 12:55:45 -0700
X-Mailer: Apple Mail (2.618)
X-Scanned-By: MIMEDefang 2.39
Subject: Using absolute URIs in headers and properties in DAV
X-Archived-At: http://www.w3.org/mid/A2BB5528-D04F-11D8-B746-000A95B2BB72@osafoundation.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8688
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040707195559.F1CBAA1344@frink.w3.org>
Resent-Date: Wed,  7 Jul 2004 15:55:59 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Originally in RFC2518, the Destination header, the If header and the 
<href> element all contained only absolute URIs (no paths).  Then, 
after the 2002 Interop, we opened that up so that RFC2518bis now says 
the Destination header could take "abs path" as well.  However, it was 
then pointed out (Dec 9 2002 mail) that we should make the If header 
consistent with the Destination header, which might also imply making 
the <href> format the same.  Nobody followed up on that Dec 9 2002 mail 
as far as I can see, so I'd like to reraise the issue.

1.  Status quo in 'bis' -- are we really sure we want to make the 
Destination header inconsistent with the other DAV elements that take 
URI values?
2.  Back to RFC2518 status -- only one option (full URIs) consistent 
across all uses
3.  Forge ahead and allow absolute paths in Destination, If header, and 
possibly also <href>.  Doesn't this have backward compatibility issues?

I'd like to recheck our reasoning on this one, and whether there's 
really a need to allow absolute paths in the value of Destination 
header.  It was an interoperability issue, but I don't have all the 
details on why clients might find it difficult to include the 
server/host part of the URI.

Lisa



From w3c-dist-auth-request@w3.org  Wed Jul  7 18:07:14 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA20853
	for <webdav-archive@lists.ietf.org>; Wed, 7 Jul 2004 18:07:14 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 6C863A0588; Wed,  7 Jul 2004 18:07:01 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id C676CA0588
	for <w3c-dist-auth@listhub.w3.org>; Wed,  7 Jul 2004 18:06:59 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BiKZ9-0005QH-Fv
	for w3c-dist-auth@w3.org; Wed, 07 Jul 2004 18:06:59 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i67M6v1U018968 sender ccjason@us.ibm.com for w3c-dist-auth@w3.org; Wed, 7 Jul 2004 15:06:57 -0700
Received: from e1.ny.us.ibm.com (e1.ny.us.ibm.com [32.97.182.101]) by bandage.seagull.net (8.12.10) with ESMTP id i67M6txZ018737 sender ccjason@us.ibm.com; Wed, 7 Jul 2004 15:06:55 -0700
Received: from northrelay04.pok.ibm.com (northrelay04.pok.ibm.com [9.56.224.206]) by e1.ny.us.ibm.com (8.12.10/NS PXFA) with ESMTP id i67M6hCc441652; Wed, 7 Jul 2004 18:06:43 -0400
Received: from d01ml604.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by northrelay04.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i67M7YWm118072; Wed, 7 Jul 2004 18:07:34 -0400
To: Julian Reschke <nnjulian.reschke___at___gmx.de@smallcue.com>
Cc: WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 5.0.11   July 24, 2002
From: Jason Crawford <ccjason@us.ibm.com>
Message-ID: <OFFABE9A6E.5EC49E06-ON85256ECA.0014AEE5-85256ECA.007975C7@us.ibm.com>
Date: Wed, 7 Jul 2004 18:06:39 -0400
X-MIMETrack: Serialize by Router on D01ML604/01/M/IBM(Release 6.51HF339 | June 21, 2004) at 07/07/2004 18:06:41, Serialize complete at 07/07/2004 18:06:41
Content-Type: multipart/alternative; boundary="=_alternative 0074445C85256ECA_="
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/OFFABE9A6E.5EC49E06-ON85256ECA.0014AEE5-85256ECA.007975C7@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8689
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040707220701.6C863A0588@frink.w3.org>
Resent-Date: Wed,  7 Jul 2004 18:07:01 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 0074445C85256ECA_=
Content-Type: text/plain; charset="us-ascii"

On Wednesday, 07/07/2004 at 01:31 ZE2, Julian Reschke wrote:
> Jason Crawford wrote:
> > I'll try...
> >
> > Because we tend to tend to think of words the way we've used them even
> > if they technically have a more generic definition.   A lock seems to
> > not behave like what we typically refer to as a resource.  There 
doesn't
> > seem to be a lot of overlap in their most important features and 
methods.
> 
> Well, I'd say they do.
> 
> - you can ask the server to create a new lock using LOCK, similar to how
> servers frequently create new resources upon POST,
I don't understand how this is related.  As far as creation, typically to 
create a resource you do PUT or MKCOL.  And the resource appears at the 
URL you provide as an argument.   This is not the case for locks. 

> - a lock has a URI,
Are you referring to the lock-token?  It doesn't work the same way that 
URI's for typical resources work.   For typical resources, the URI is a 
URL.  This is not true for locks/locktokens.

> - a lock has state,
As do properties but we rarely refer to them as resources because that 
would cause confusion.  Instead we give them a different name, 
"properties" to avoid that confusion.    Of course, specifications that do 
properties more clearly as resources should feel free to also refer to 
them as resources.

BTW... I'm not saying a lock is a property.  I'm just providing a similar 
example of where we chose not to highlight the fact that something is a 
resource.

> - the state is observable indirectly through HTTP methods 
Again, not the same way as typical resources.  Only as a side effect of 
asking (PROPFIND) for the state of some OTHER resource.  That's weird.

And that's the only method locks and typical resources have in common. 

> and last but not least,
> - it's pefectly ok to implement locks as HTTP resources (for instance
> which would react to DELETE).
You can say that for just about anything in this world, but we don't. When 
we find reason to standardize what you just mentioned, we then begin to 
have a reason to call locks resources, but right now they act differently 
than what we typically think of as resources.  So although they (and just 
about anything else in this universe) can be called resources, it is not 
really helpful to do so... and because of the context, it's actually 
confusing.


> If you substitute "lock" by "lock resource" things sound much better.
It's less awkward as you say, but still a little.  It works better to just 
say "lock"
since adding "resource" detracts.


> The concept is similar to the version history resource in DeltaV. It's
> not strictly needed for many things, but making it an HTTP resource
> gives you a lot of advantages (such as properties you can observe
> *directly* though PROPFIND instead of indirectly through a specific
> REPORT).
Well...  we don't do that in this spec though so it's premature to 
add verbiage claiming that they are resources.  Adding the verbiage
without the supporting behavior just adds confusion. 
Because you might want to eventually make them directly addressable 
via typical HTTP methods, we shouldn't say they aren't resources either.
Instead we should be silent.


> > For me it feels better not to define a lock at all beyond it's 
behavior
> > rather than to say it's a resource.
> 
> The desire to define the *state* of a resource (what it must consist of)
> in a single place IMHO is independant of whether we actually *state*
> that it *is* a resource. 
I agree.

> I just happen to think that things become much
> clearer by seeing it this way.
;-)


--=_alternative 0074445C85256ECA_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="sans-serif">On Wednesday, 07/07/2004 at 01:31 ZE2, Julian Reschke wrote:<br>
&gt; Jason Crawford wrote:<br>
&gt; &gt; I'll try...<br>
&gt; &gt;<br>
&gt; &gt; Because we tend to tend to think of words the way we've used them even<br>
&gt; &gt; if they technically have a more generic definition. &nbsp; A lock seems to<br>
&gt; &gt; not behave like what we typically refer to as a resource. &nbsp;There doesn't<br>
&gt; &gt; seem to be a lot of overlap in their most important features and methods.<br>
&gt; <br>
&gt; Well, I'd say they do.<br>
&gt; <br>
&gt; - you can ask the server to create a new lock using LOCK, similar to how<br>
&gt; servers frequently create new resources upon POST,</font>
<br><font size=2 face="sans-serif">I don't understand how this is related. &nbsp;As far as creation, typically to create a resource you do PUT or MKCOL. &nbsp;And the resource appears at the URL you provide as an argument. &nbsp; This is not the case for locks. &nbsp;</font>
<br><font size=2 face="sans-serif"><br>
&gt; - a lock has a URI,</font>
<br><font size=2 face="sans-serif">Are you referring to the lock-token? &nbsp;It doesn't work the same way that URI's for typical resources work. &nbsp; For typical resources, the URI is a URL. &nbsp;This is not true for locks/locktokens.</font>
<br><font size=2 face="sans-serif"><br>
&gt; - a lock has state,</font>
<br><font size=2 face="sans-serif">As do properties but we rarely refer to them as resources because that would cause confusion. &nbsp;Instead we give them a different name, &quot;properties&quot; to avoid that confusion. &nbsp; &nbsp;Of course, specifications that do properties more clearly as resources should feel free to also refer to them as resources.</font>
<br>
<br><font size=2 face="sans-serif">BTW... I'm not saying a lock is a property. &nbsp;I'm just providing a similar example of where we chose not to highlight the fact that something is a resource.</font>
<br><font size=2 face="sans-serif"><br>
&gt; - the state is observable indirectly through HTTP methods </font>
<br><font size=2 face="sans-serif">Again, not the same way as typical resources. &nbsp;Only as a side effect of asking (PROPFIND) for the state of some OTHER resource. &nbsp;That's weird.</font>
<br>
<br><font size=2 face="sans-serif">And that's the only method locks and typical resources have in common. &nbsp; </font>
<br>
<br><font size=2 face="sans-serif">&gt; and last but not least,</font>
<br><font size=2 face="sans-serif">&gt; - it's pefectly ok to implement locks as HTTP resources (for instance<br>
&gt; which would react to DELETE).</font>
<br><font size=2 face="sans-serif">You can say that for just about anything in this world, but we don't. &nbsp; &nbsp;When we find reason to standardize what you just mentioned, we then begin to have a reason to call locks resources, but right now they act differently than what we typically think of as resources. &nbsp;So although they (and just about anything else in this universe) can be called resources, it is not really helpful to do so... and because of the context, it's actually confusing.</font>
<br>
<br><font size=2 face="sans-serif"><br>
&gt; If you substitute &quot;lock&quot; by &quot;lock resource&quot; things sound much better.</font>
<br><font size=2 face="sans-serif">It's less awkward as you say, but still a little. &nbsp;It works better to just say &quot;lock&quot;</font>
<br><font size=2 face="sans-serif">since adding &quot;resource&quot; detracts.</font>
<br>
<br><font size=2 face="sans-serif"><br>
&gt; The concept is similar to the version history resource in DeltaV. It's<br>
&gt; not strictly needed for many things, but making it an HTTP resource<br>
&gt; gives you a lot of advantages (such as properties you can observe<br>
&gt; *directly* though PROPFIND instead of indirectly through a specific<br>
&gt; REPORT).</font>
<br><font size=2 face="sans-serif">Well... &nbsp;we don't do that in this spec though so it's premature to </font>
<br><font size=2 face="sans-serif">add verbiage claiming that they are resources. &nbsp;Adding the verbiage</font>
<br><font size=2 face="sans-serif">without the supporting behavior just adds confusion. </font>
<br><font size=2 face="sans-serif">Because you might want to eventually make them directly addressable </font>
<br><font size=2 face="sans-serif">via typical HTTP methods, we shouldn't say they aren't resources either.</font>
<br><font size=2 face="sans-serif">Instead we should be silent.</font>
<br>
<br><font size=2 face="sans-serif"><br>
&gt; &gt; For me it feels better not to define a lock at all beyond it's behavior<br>
&gt; &gt; rather than to say it's a resource.<br>
&gt; <br>
&gt; The desire to define the *state* of a resource (what it must consist of)<br>
&gt; in a single place IMHO is independant of whether we actually *state*<br>
&gt; that it *is* a resource. &nbsp;</font>
<br><font size=2 face="sans-serif">I agree.</font>
<br>
<br><font size=2 face="sans-serif">&gt; I just happen to think that things become much<br>
&gt; clearer by seeing it this way.</font>
<br><font size=2 face="sans-serif">;-)</font>
<br><font size=2 face="sans-serif"><br>
</font>
--=_alternative 0074445C85256ECA_=--



From w3c-dist-auth-request@w3.org  Wed Jul  7 18:48:55 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA25469
	for <webdav-archive@lists.ietf.org>; Wed, 7 Jul 2004 18:48:54 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id C8E0DA0D19; Wed,  7 Jul 2004 18:48:57 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 2EE14A0D19
	for <w3c-dist-auth@listhub.w3.org>; Wed,  7 Jul 2004 18:48:56 -0400 (EDT)
Received: from e6.ny.us.ibm.com ([32.97.182.106])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BiLDZ-00028s-9f
	for w3c-dist-auth@w3.org; Wed, 07 Jul 2004 18:48:45 -0400
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150])
	by e6.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i67MmEdu708522
	for <w3c-dist-auth@w3.org>; Wed, 7 Jul 2004 18:48:14 -0400
Received: from d01mc261.pok.ibm.com (d01av04.pok.ibm.com [9.56.224.64])
	by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i67MnNZb054752
	for <w3c-dist-auth@w3.org>; Wed, 7 Jul 2004 18:49:24 -0400
In-Reply-To: <40EAEB0F.8070409@gmx.de>
To: " webdav" <w3c-dist-auth@w3.org>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.0.2CF1 June 9, 2003
Message-ID: <OF9BEE2A02.2B49946B-ONC1256ECA.007C64F1-C1256ECA.007D4500@us.ibm.com>
From: Geoffrey M Clemm <geoffrey.clemm@us.ibm.com>
Date: Thu, 8 Jul 2004 00:48:12 +0200
X-MIMETrack: Serialize by Router on D01MC261/01/M/IBM(Release 6.0.2CF2 HFB2|May 18, 2004) at
 07/07/2004 18:48:13,
	Serialize complete at 07/07/2004 18:48:13
Content-Type: multipart/alternative; boundary="=_alternative 007D44FFC1256ECA_="
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/OF9BEE2A02.2B49946B-ONC1256ECA.007C64F1-C1256ECA.007D4500@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8691
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040707224857.C8E0DA0D19@frink.w3.org>
Resent-Date: Wed,  7 Jul 2004 18:48:57 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 007D44FFC1256ECA_=
Content-Type: text/plain; charset="US-ASCII"

Jason: The analogy with properties is not very close, because in WedDAV,
the URI identifies a "property type", not an "instance of a property", so
there would be ambiguity about the term "property resource", since the 
correct
interpretation is the former, i.e. the property URI identifies a property
type, while folks are likely to confuse this with the state of a 
particular
property.  There is no such ambiguity for a lock.

But I'm not wedded to the idea of calling a lock a resource, so maybe
it would be simplest to just say:

----------------------------------------

2.5 Status of a lock
    A lock is identified by a URI (the lock token URI) but in general, it
    not have a HTTP URL, and thus can not be directly manipulated using
    HTTP methods.  Instead, this specification defines the new methods
    LOCK (creating and refreshing locks, see Section 4) and UNLOCK
    (removing locks, see Section 5) that act indirectly on locks.

-----------------------------------------

Since I believe this is the only section that refers to the "resourceness"
of a lock, we can avoid the contention while keeping all the good stuff in
the later paragraphs.

Cheers,
Geoff

p.s. But just for the record, a lock really is a resource (:-).


Julian wrote on 07/06/2004 08:10:23 PM:
>
> I noticed that RFC2518 historically says little about what a lock 
> actually *is*, instead just describes it's behaviour (which of course 
> needs to be done is well). The result is that essential information if 
> spread across the document; instead of being in a single place. A good 
> example for this is if you look at the various places in RFC2518 that 
> say something about what a timeout is, what it means to refresh it, when 

> the server needs to respect it and so on...
> 
> Here's what I wrote for 
> <http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-
> latest.html#rfc.section.2> 
> (which continues to progress nicely)...:
> 
> --
> 
> 2.5  Status of a lock
> 
>     Having a URI (the lock token URI) on it's own, a lock is a resource
>     in the sense defined by [RFC2396].  In general, this resource does
>     not have a HTTP URL, and thus can not be directly manipulated using
>     HTTP methods.  Instead, this specification defines the new methods
>     LOCK (creating and refreshing locks, see Section 4) and UNLOCK
>     (removing locks, see Section 5) that act indirectly on locks.
> 
>     A lock has state that can be indirectly observed by using the
>     DAV:lockdiscovery property defined in Section 3.2.  At a minimum, 
the
>     state of a lock consists of the items defined in the sections below.
>     After lock creation, all parts of the state with the exception of 
the
>     timeout value are immutable.
> 
> 2.5.1  Lock Access Type
> 
>     At present, this specification only defines one lock access type, 
the
>     "write" lock defined in Section xx.
> 
> 2.5.2  Lock Scope
> 
>     A lock has either exclusive or shared scope (see Section 2.1).
> 
> 2.5.3  Lock Root
> 
>     A lock is created as effect of a LOCK (creation) method request. The
>     lock root is the URL to which this request was adressed.
> 
> 2.5.4  Lock Depth
> 
>     A "depth 0" lock only affects the resource to which the LOCK request
>     was adressed to (the lock root).  This resource is said to be
>     "directly locked" by the lock.
> 
>     On the other hand, a "depth infinity" lock on a collection
>     additionally affects all members of that collection.  These 
resources
>     are said to be "indirectly locked" by the lock.  A "depth infinity"
>     lock on a non-collection resource behaves exactly the same way as a
>     "depth 0" lock.
> 
> 2.5.5  Lock Owner
> 
>     Clients can submit information about the lock owner when creating a
>     lock.  This information should be sufficient for either directly
>     contacting a principal (such as a telephone number or email URI), or
>     for discovering the principal (such as the URL of a homepage).
> 
>     Owner information is kept with the lock so that it can be returned 
in
>     the DAV:lockdiscovery property upon request.  Note that this
>     information is entirely client-controlled, thus a server MUST store
>     the information faithfully just like if it appeared in a WebDAV dead
>     property (see [RFC2518], section 4).
> 
> 2.5.6  Lock Timeout
> 
>     In general, a lock expires after a certain amount of time.  This 
time
>     can be specified in the LOCK creation request (however servers are
>     not required to honor this request).
> 
>     If the timeout expires then the lock may be lost.  Specifically, if
>     the server wishes to harvest the lock upon time-out, the server
>     SHOULD act as if an UNLOCK method was executed by the server on the
>     resource using the lock token of the timed-out lock, performed with
>     its override authority.  Thus logs should be updated with the
>     disposition of the lock, notifications should be sent, etc., just as
>     they would be for an UNLOCK request.
> 
>     The timers used for timeout expiry can be reset by the client by
>     submitting a LOCK refresh request.
> 
>     Servers are advised to pay close attention to the values submitted 
by
>     clients, as they will be indicative of the type of activity the
>     client intends to perform.  For example, an applet running in a
>     browser may need to lock a resource, but because of the instability
>     of the environment within which the applet is running, the applet 
may
>     be turned off without warning.  As a result, the applet is likely to
>     ask for a relatively small timeout value so that if the applet dies,
>     the lock can be quickly harvested.  However, a document management
>     system is likely to ask for an extremely long timeout because its
>     user may be planning on going off-line.
> 
>     A client MUST NOT assume that just because the time-out has expired
>     the lock has been lost.  Clients MUST assume that locks may
>     arbitrarily disappear at any time, regardless of the value given in
>     the Timeout header.  The Timeout header only indicates the behavior
>     of the server if "extraordinary" circumstances do not occur.  For
>     example, an administrator may remove a lock at any time or the 
system
>     may crash in such a way that it loses the record of the lock's
>     existence.
> 
> --
> 
> Feedback appreciated,
> 
> Julian
> 
> 
> -- 
> <green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
> 

--=_alternative 007D44FFC1256ECA_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2><tt>Jason: The analogy with properties is not very close,
because in WedDAV,</tt></font>
<br><font size=2><tt>the URI identifies a &quot;property type&quot;, not
an &quot;instance of a property&quot;, so</tt></font>
<br><font size=2><tt>there would be ambiguity about the term &quot;property
resource&quot;, since the correct</tt></font>
<br><font size=2><tt>interpretation is the former, i.e. the property URI
identifies a property</tt></font>
<br><font size=2><tt>type, while folks are likely to confuse this with
the state of a particular</tt></font>
<br><font size=2><tt>property. &nbsp;There is no such ambiguity for a lock.</tt></font>
<br>
<br><font size=2><tt>But I'm not wedded to the idea of calling a lock a
resource, so maybe</tt></font>
<br><font size=2><tt>it would be simplest to just say:</tt></font>
<br>
<br><font size=2><tt>----------------------------------------</tt></font>
<br>
<br><font size=2><tt>2.5 Status of a lock</tt></font>
<br><font size=2><tt>&nbsp; &nbsp; A lock is identified by a URI (the lock
token URI) but in general, it<br>
 &nbsp; &nbsp;not have a HTTP URL, and thus can not be directly manipulated
using<br>
 &nbsp; &nbsp;HTTP methods. &nbsp;Instead, this specification defines the
new methods<br>
 &nbsp; &nbsp;LOCK (creating and refreshing locks, see Section 4) and UNLOCK<br>
 &nbsp; &nbsp;(removing locks, see Section 5) that act indirectly on locks.</tt></font>
<br>
<br><font size=2><tt>-----------------------------------------</tt></font>
<br>
<br><font size=2><tt>Since I believe this is the only section that refers
to the &quot;resourceness&quot;</tt></font>
<br><font size=2><tt>of a lock, we can avoid the contention while keeping
all the good stuff in</tt></font>
<br><font size=2><tt>the later paragraphs.</tt></font>
<br>
<br><font size=2><tt>Cheers,</tt></font>
<br><font size=2><tt>Geoff<br>
</tt></font>
<br><font size=2><tt>p.s. But just for the record, a lock really is a resource
(:-).</tt></font>
<br>
<br>
<br><font size=2><tt>Julian wrote on 07/06/2004 08:10:23 PM:<br>
&gt;</tt></font>
<br><font size=2><tt>&gt; I noticed that RFC2518 historically says little
about what a lock <br>
&gt; actually *is*, instead just describes it's behaviour (which of course
<br>
&gt; needs to be done is well). The result is that essential information
if <br>
&gt; spread across the document; instead of being in a single place. A
good <br>
&gt; example for this is if you look at the various places in RFC2518 that
<br>
&gt; say something about what a timeout is, what it means to refresh it,
when <br>
&gt; the server needs to respect it and so on...<br>
&gt; <br>
&gt; Here's what I wrote for <br>
&gt; &lt;http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-<br>
&gt; latest.html#rfc.section.2&gt; <br>
&gt; (which continues to progress nicely)...:<br>
&gt; <br>
&gt; --<br>
&gt; <br>
&gt; 2.5 &nbsp;Status of a lock<br>
&gt; <br>
&gt; &nbsp; &nbsp; Having a URI (the lock token URI) on it's own, a lock
is a resource<br>
&gt; &nbsp; &nbsp; in the sense defined by [RFC2396]. &nbsp;In general,
this resource does<br>
&gt; &nbsp; &nbsp; not have a HTTP URL, and thus can not be directly manipulated
using<br>
&gt; &nbsp; &nbsp; HTTP methods. &nbsp;Instead, this specification defines
the new methods<br>
&gt; &nbsp; &nbsp; LOCK (creating and refreshing locks, see Section 4)
and UNLOCK<br>
&gt; &nbsp; &nbsp; (removing locks, see Section 5) that act indirectly
on locks.<br>
&gt; <br>
&gt; &nbsp; &nbsp; A lock has state that can be indirectly observed by
using the<br>
&gt; &nbsp; &nbsp; DAV:lockdiscovery property defined in Section 3.2. &nbsp;At
a minimum, the<br>
&gt; &nbsp; &nbsp; state of a lock consists of the items defined in the
sections below.<br>
&gt; &nbsp; &nbsp; After lock creation, all parts of the state with the
exception of the<br>
&gt; &nbsp; &nbsp; timeout value are immutable.<br>
&gt; <br>
&gt; 2.5.1 &nbsp;Lock Access Type<br>
&gt; <br>
&gt; &nbsp; &nbsp; At present, this specification only defines one lock
access type, the<br>
&gt; &nbsp; &nbsp; &quot;write&quot; lock defined in Section xx.<br>
&gt; <br>
&gt; 2.5.2 &nbsp;Lock Scope<br>
&gt; <br>
&gt; &nbsp; &nbsp; A lock has either exclusive or shared scope (see Section
2.1).<br>
&gt; <br>
&gt; 2.5.3 &nbsp;Lock Root<br>
&gt; <br>
&gt; &nbsp; &nbsp; A lock is created as effect of a LOCK (creation) method
request. &nbsp;The<br>
&gt; &nbsp; &nbsp; lock root is the URL to which this request was adressed.<br>
&gt; <br>
&gt; 2.5.4 &nbsp;Lock Depth<br>
&gt; <br>
&gt; &nbsp; &nbsp; A &quot;depth 0&quot; lock only affects the resource
to which the LOCK request<br>
&gt; &nbsp; &nbsp; was adressed to (the lock root). &nbsp;This resource
is said to be<br>
&gt; &nbsp; &nbsp; &quot;directly locked&quot; by the lock.<br>
&gt; <br>
&gt; &nbsp; &nbsp; On the other hand, a &quot;depth infinity&quot; lock
on a collection<br>
&gt; &nbsp; &nbsp; additionally affects all members of that collection.
&nbsp;These resources<br>
&gt; &nbsp; &nbsp; are said to be &quot;indirectly locked&quot; by the
lock. &nbsp;A &quot;depth infinity&quot;<br>
&gt; &nbsp; &nbsp; lock on a non-collection resource behaves exactly the
same way as a<br>
&gt; &nbsp; &nbsp; &quot;depth 0&quot; lock.<br>
&gt; <br>
&gt; 2.5.5 &nbsp;Lock Owner<br>
&gt; <br>
&gt; &nbsp; &nbsp; Clients can submit information about the lock owner
when creating a<br>
&gt; &nbsp; &nbsp; lock. &nbsp;This information should be sufficient for
either directly<br>
&gt; &nbsp; &nbsp; contacting a principal (such as a telephone number or
email URI), or<br>
&gt; &nbsp; &nbsp; for discovering the principal (such as the URL of a
homepage).<br>
&gt; <br>
&gt; &nbsp; &nbsp; Owner information is kept with the lock so that it can
be returned in<br>
&gt; &nbsp; &nbsp; the DAV:lockdiscovery property upon request. &nbsp;Note
that this<br>
&gt; &nbsp; &nbsp; information is entirely client-controlled, thus a server
MUST store<br>
&gt; &nbsp; &nbsp; the information faithfully just like if it appeared
in a WebDAV dead<br>
&gt; &nbsp; &nbsp; property (see [RFC2518], section 4).<br>
&gt; <br>
&gt; 2.5.6 &nbsp;Lock Timeout<br>
&gt; <br>
&gt; &nbsp; &nbsp; In general, a lock expires after a certain amount of
time. &nbsp;This time<br>
&gt; &nbsp; &nbsp; can be specified in the LOCK creation request (however
servers are<br>
&gt; &nbsp; &nbsp; not required to honor this request).<br>
&gt; <br>
&gt; &nbsp; &nbsp; If the timeout expires then the lock may be lost. &nbsp;Specifically,
if<br>
&gt; &nbsp; &nbsp; the server wishes to harvest the lock upon time-out,
the server<br>
&gt; &nbsp; &nbsp; SHOULD act as if an UNLOCK method was executed by the
server on the<br>
&gt; &nbsp; &nbsp; resource using the lock token of the timed-out lock,
performed with<br>
&gt; &nbsp; &nbsp; its override authority. &nbsp;Thus logs should be updated
with the<br>
&gt; &nbsp; &nbsp; disposition of the lock, notifications should be sent,
etc., just as<br>
&gt; &nbsp; &nbsp; they would be for an UNLOCK request.<br>
&gt; <br>
&gt; &nbsp; &nbsp; The timers used for timeout expiry can be reset by the
client by<br>
&gt; &nbsp; &nbsp; submitting a LOCK refresh request.<br>
&gt; <br>
&gt; &nbsp; &nbsp; Servers are advised to pay close attention to the values
submitted by<br>
&gt; &nbsp; &nbsp; clients, as they will be indicative of the type of activity
the<br>
&gt; &nbsp; &nbsp; client intends to perform. &nbsp;For example, an applet
running in a<br>
&gt; &nbsp; &nbsp; browser may need to lock a resource, but because of
the instability<br>
&gt; &nbsp; &nbsp; of the environment within which the applet is running,
the applet may<br>
&gt; &nbsp; &nbsp; be turned off without warning. &nbsp;As a result, the
applet is likely to<br>
&gt; &nbsp; &nbsp; ask for a relatively small timeout value so that if
the applet dies,<br>
&gt; &nbsp; &nbsp; the lock can be quickly harvested. &nbsp;However, a
document management<br>
&gt; &nbsp; &nbsp; system is likely to ask for an extremely long timeout
because its<br>
&gt; &nbsp; &nbsp; user may be planning on going off-line.<br>
&gt; <br>
&gt; &nbsp; &nbsp; A client MUST NOT assume that just because the time-out
has expired<br>
&gt; &nbsp; &nbsp; the lock has been lost. &nbsp;Clients MUST assume that
locks may<br>
&gt; &nbsp; &nbsp; arbitrarily disappear at any time, regardless of the
value given in<br>
&gt; &nbsp; &nbsp; the Timeout header. &nbsp;The Timeout header only indicates
the behavior<br>
&gt; &nbsp; &nbsp; of the server if &quot;extraordinary&quot; circumstances
do not occur. &nbsp;For<br>
&gt; &nbsp; &nbsp; example, an administrator may remove a lock at any time
or the system<br>
&gt; &nbsp; &nbsp; may crash in such a way that it loses the record of
the lock's<br>
&gt; &nbsp; &nbsp; existence.<br>
&gt; <br>
&gt; --<br>
&gt; <br>
&gt; Feedback appreciated,<br>
&gt; <br>
&gt; Julian<br>
&gt; <br>
&gt; <br>
&gt; -- <br>
&gt; &lt;green/&gt;bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760<br>
&gt; <br>
</tt></font>
--=_alternative 007D44FFC1256ECA_=--



From w3c-dist-auth-request@w3.org  Wed Jul  7 18:52:30 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA25835
	for <webdav-archive@lists.ietf.org>; Wed, 7 Jul 2004 18:52:30 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 693D8A1A74; Wed,  7 Jul 2004 18:52:32 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 3779AA0702
	for <w3c-dist-auth@listhub.w3.org>; Wed,  7 Jul 2004 18:52:31 -0400 (EDT)
Received: from kahuna.osafoundation.org ([204.152.186.98])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BiLHD-0002kg-0i
	for w3c-dist-auth@w3c.org; Wed, 07 Jul 2004 18:52:31 -0400
Old-X-Envelope-From: lisa@xythos.com
Old-X-Envelope-To: w3c-dist-auth@w3c.org
Received: from [192.168.101.178] (w002.z065106067.sjc-ca.dsl.cnc.net [65.106.67.2])
	(authenticated bits=0)
	by kahuna.osafoundation.org (8.12.8/8.12.8) with ESMTP id i67Mp9JL021163
	(version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO);
	Wed, 7 Jul 2004 15:51:11 -0700
Mime-Version: 1.0 (Apple Message framework v618)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <1FFD37E0-D068-11D8-B746-000A95B2BB72@xythos.com>
Content-Transfer-Encoding: 7bit
Cc: Jim Luther <luther.j@apple.com>
From: Lisa Dusseault <lisa@xythos.com>
Date: Wed, 7 Jul 2004 15:51:03 -0700
To: Webdav WG <w3c-dist-auth@w3c.org>
X-Mailer: Apple Mail (2.618)
X-Scanned-By: MIMEDefang 2.39
Subject: WebDAV header typing
X-Archived-At: http://www.w3.org/mid/1FFD37E0-D068-11D8-B746-000A95B2BB72@xythos.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8692
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040707225232.693D8A1A74@frink.w3.org>
Resent-Date: Wed,  7 Jul 2004 18:52:32 -0400 (EDT)
Content-Transfer-Encoding: 7bit


HTTP classifies headers as entity headers, general headers, request 
headers or response headers.  Jim Luther suggested a while back that we 
should have classified the DAV headers accordingly.  Here are the 
definitional sections from RFC2616:

Entity-header fields define metainformation about the entity-body or,
    if no body is present, about the resource identified by the request.

General-header: There are a few header fields which have general 
applicability for
    both request and response messages, but which do not apply to the
    entity being transferred. These header fields apply only to the
message being transmitted.
Example: Upgrade, indicating additional protocols supported by the 
client.

  The response-header fields allow the server to pass additional
    information about the response which cannot be placed in the Status-
    Line. These header fields give information about the server and about
    further access to the resource identified by the Request-URI.

The request-header fields allow the client to pass additional
    information about the request, and about the client itself, to the
    server. These fields act as request modifiers, with semantics
    equivalent to the parameters on a programming language method
    invocation.

Beyond this, there's some unofficial explanation here 
(http://www.tcpipguide.com/free/t_HTTPGeneralHeaders.htm).

Thus:
  - DAV must be a general-header, just like Upgrade, unless it's a 
response header because it only appears on responses.
  - Depth, Destination, Force-Authentication, If, Overwrite and Timeout 
are all simply request headers, like If-Match  and Range.
  - Lock-Token is an entity-header like Content-Language and Expires -- 
on either the request or the response, it provides additional 
information about the resource addressed in the request.

But what does this buy us?  Besides limiting how they're used (e.g. 
prevent the server from using the Depth header on a response), I can't 
see how the definition helps implementors.  Jim perhaps you could 
explain what I'm missing?

Lisa



From w3c-dist-auth-request@w3.org  Wed Jul  7 19:14:25 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA26880
	for <webdav-archive@lists.ietf.org>; Wed, 7 Jul 2004 19:14:25 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 59144A0588; Wed,  7 Jul 2004 19:14:28 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 205C2A0588
	for <w3c-dist-auth@listhub.w3.org>; Wed,  7 Jul 2004 19:14:27 -0400 (EDT)
Received: from kahuna.osafoundation.org ([204.152.186.98])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BiLcR-00055L-0X
	for w3c-dist-auth@w3c.org; Wed, 07 Jul 2004 19:14:27 -0400
Old-X-Envelope-From: lisa@osafoundation.org
Old-X-Envelope-To: <w3c-dist-auth@w3c.org>
Received: from [192.168.101.178] (w002.z065106067.sjc-ca.dsl.cnc.net [65.106.67.2])
	(authenticated bits=0)
	by kahuna.osafoundation.org (8.12.8/8.12.8) with ESMTP id i67NEOJL022723
	(version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO)
	for <w3c-dist-auth@w3c.org>; Wed, 7 Jul 2004 16:14:24 -0700
Mime-Version: 1.0 (Apple Message framework v618)
In-Reply-To: <3FF156B5.7080809@gmx.de>
References: <OFA0B9E0AD.688D270F-ON85256E0B.007BBEB2-85256E0C.0012D423@us.ibm.com> <3FF156B5.7080809@gmx.de>
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <5F5E4972-D06B-11D8-B746-000A95B2BB72@osafoundation.org>
Content-Transfer-Encoding: 7bit
From: Lisa Dusseault <lisa@osafoundation.org>
Date: Wed, 7 Jul 2004 16:14:18 -0700
To: "'Webdav WG'" <w3c-dist-auth@w3c.org>
X-Mailer: Apple Mail (2.618)
X-Scanned-By: MIMEDefang 2.39
Subject: When If headers with tagged lists fail
X-Archived-At: http://www.w3.org/mid/5F5E4972-D06B-11D8-B746-000A95B2BB72@osafoundation.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8693
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040707231428.59144A0588@frink.w3.org>
Resent-Date: Wed,  7 Jul 2004 19:14:28 -0400 (EDT)
Content-Transfer-Encoding: 7bit


I thought that RFC2518 was clear that if the If header includes a  
tagged list with the wrong URL then the request should be failed with  
412.  I went looking for the explanation in the section on tagged  
lists, and it wasn't terribly clear.  It just tacitly "inherits" the  
definition from the untagged If header behavior.

So, what if I added a sentence to the description of tagged list  
production in the If header, as follows:

Text already there:
    The tagged-list production scopes a list production.  That is, it
    specifies that the lists following the resource specification only
    apply to the specified resource.  The scope of the resource
    production begins with the list production immediately following the
    resource production and ends with the next resource production, if
    any.  All clauses must be evaluated.

Text to add immediately after:
    If the state of the resource named in the tag does not
    match any of the associated state lists then the request MUST fail
    with a 412 (Precondition Failed).

Does this clear up the confusion?  Is it OK/clear to have this  
information in a different section of the spec from where it says "a  
lock token is submitted if it appears anywhere in the If header"?

Lisa

On Dec 30, 2003, at 2:43 AM, Julian Reschke wrote:

>
> Geoffrey M Clemm wrote:
>
>> There are a couple of ways to go here:
>> (1) consider a lock token to be submitted if it is submitted with a
>>     URL that is directly or indirectly locked by that lock token
>> (2) consider a lock token to be submitted if it appears anywhere in
>>     the If header, even if it only appears on a URL that is not in
>>     fact locked by that lock.
>>
>> Lisa's initial statement sounded like she was advocating the
>> second approach, but her last statement sounds more like the
>> first approach.  On the other hand, the last comment ("Otherwise
>> you'd get a 412 Precondition Failed") is incorrect, since only
>> one of the state lists need to match.
>>
>> Either way is OK with me (although I'd probably have gone with
>> the first approach myself), but I just wanted to verify what
>> folks had in mind here.
>
> I think the current spec
> (<http://greenbytes.de/tech/webdav/draft-ietf-webdav-rfc2518bis 
> -05.txt>)
>   assumes (2):
>
> Quoting section 7.6:
>
>     In order to prevent these collisions a lock token MUST be submitted
>     by an authorized principal for all locked resources that a method
>     may change or the method MUST fail.  A lock token is submitted when
>     it appears in an If header.  For example, if a resource is to be
>     moved and both the source and destination are locked then two lock
>     tokens must be submitted in the if header, one for the source and
>     the other for the destination.
>
> I can live with that, but I'm not sure why this is better than  
> requiring
> the token to appear with the right URL (when in a tagged list). Is this
> just a statement about current client behaviour, or a change compared  
> to
> RFC2518?
>
> Julian
>
> -- 
> <green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
>
> <winmail.dat>



From w3c-dist-auth-request@w3.org  Wed Jul  7 19:40:51 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA28073
	for <webdav-archive@lists.ietf.org>; Wed, 7 Jul 2004 19:40:51 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id B659CA16E1; Wed,  7 Jul 2004 18:30:17 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id BF250A1765
	for <w3c-dist-auth@listhub.w3.org>; Wed,  7 Jul 2004 18:30:14 -0400 (EDT)
Received: from e5.ny.us.ibm.com ([32.97.182.105])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BiKve-00089J-Ic
	for w3c-dist-auth@w3.org; Wed, 07 Jul 2004 18:30:14 -0400
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150])
	by e5.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i67MThDk764674
	for <w3c-dist-auth@w3.org>; Wed, 7 Jul 2004 18:29:43 -0400
Received: from d01mc261.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216])
	by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i67MUrZb028590
	for <w3c-dist-auth@w3.org>; Wed, 7 Jul 2004 18:30:53 -0400
In-Reply-To: <40EB09C6.3090604@cse.ucsc.edu>
To: " webdav" <w3c-dist-auth@w3.org>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.0.2CF1 June 9, 2003
Message-ID: <OF20B8041A.99B5331E-ONC1256ECA.007AAEC8-C1256ECA.007B931C@us.ibm.com>
From: Geoffrey M Clemm <geoffrey.clemm@us.ibm.com>
Date: Thu, 8 Jul 2004 00:29:41 +0200
X-MIMETrack: Serialize by Router on D01MC261/01/M/IBM(Release 6.0.2CF2 HFB2|May 18, 2004) at
 07/07/2004 18:29:42,
	Serialize complete at 07/07/2004 18:29:42
Content-Type: multipart/alternative; boundary="=_alternative 007B931BC1256ECA_="
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/OF20B8041A.99B5331E-ONC1256ECA.007AAEC8-C1256ECA.007B931C@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8690
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040707223017.B659CA16E1@frink.w3.org>
Resent-Date: Wed,  7 Jul 2004 18:30:17 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 007B931BC1256ECA_=
Content-Type: text/plain; charset="US-ASCII"

I agree with Elias (and Julian).  In particular, I agree
that Julian's usage of the term resource exactly follows the
definition and recommended usage in RFC 2396. 

In general, I strongly support the proposed text for the locking
overview as it is currently written (it is a very significant
improvement over what appears in 2518 or 2518bis).

Cheers,
Geoff

Elias wrote on 07/06/2004 10:21:26 PM:
> >  Jason Crawford:
> >
> >> ...  I don't like us calling a lock a resource.

> Julian Reshke:
> > I expected pushback on that wording; but I think it really makes 
> > things clearer. Anything that has a URI *is* a resource (as per 
> > RFC2396 definition). Saying that it is a resource with internal state 
> > makes talking about it a lot simpler. So can you explain *why* you 
> > don't like that terminology? 
 
> Elias Sinderson:
> Initially I also had a negative reaction to calling a lock a resource, 
> since I generally use that word to refer to something that one can GET, 
> PUT, PROPPATCH, etc. However, after reviewing RFC2396 to refresh my 
> conceptual understanding of URIs vs. URLs, I have less of a reservation 
> on using the term as Julian has for locks. A significant turning point 
> in my feeling on this was in reading the explicitly referenced 
> definition of a resource in section 1.1 of RFC2396:
> 
>       Resource
>          A resource can be anything that has identity.  Familiar
>          examples include an electronic document, an image, a service
>          (e.g., "today's weather report for Los Angeles"), and a
>          collection of other resources.  Not all resources are network
>          "retrievable" [...]
> 
> In short, while my initial reaction was on par with Jasons', I'm okay 
> with the wording - especially since it seems to make things clearer and 
> a clearer specification will only lead to better implementations in the 
> long run (even if the implementors have to reference RFC2396 
themselves)...

--=_alternative 007B931BC1256ECA_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2><tt>I agree with Elias (and Julian). &nbsp;In particular,
I agree</tt></font>
<br><font size=2><tt>that Julian's usage of the term resource exactly follows
the</tt></font>
<br><font size=2><tt>definition and recommended usage in RFC 2396. &nbsp;</tt></font>
<br>
<br><font size=2><tt>In general, I strongly support the proposed text for
the locking</tt></font>
<br><font size=2><tt>overview as it is currently written (it is a very
significant</tt></font>
<br><font size=2><tt>improvement over what appears in 2518 or 2518bis).</tt></font>
<br><font size=2><tt><br>
Cheers,</tt></font>
<br><font size=2><tt>Geoff</tt></font>
<br>
<br><font size=2><tt>Elias wrote on 07/06/2004 10:21:26 PM:<br>
&gt; &gt; &nbsp;Jason Crawford:<br>
&gt; &gt;<br>
&gt; &gt;&gt; ... &nbsp;I don't like us calling a lock a resource.<br>
<br>
&gt; Julian Reshke:<br>
&gt; &gt; I expected pushback on that wording; but I think it really makes
<br>
&gt; &gt; things clearer. Anything that has a URI *is* a resource (as per
<br>
&gt; &gt; RFC2396 definition). Saying that it is a resource with internal
state <br>
&gt; &gt; makes talking about it a lot simpler. So can you explain *why*
you <br>
&gt; &gt; don't like that terminology? <br>
 <br>
&gt; Elias Sinderson:<br>
&gt; Initially I also had a negative reaction to calling a lock a resource,
<br>
&gt; since I generally use that word to refer to something that one can
GET, <br>
&gt; PUT, PROPPATCH, etc. However, after reviewing RFC2396 to refresh my
<br>
&gt; conceptual understanding of URIs vs. URLs, I have less of a reservation
<br>
&gt; on using the term as Julian has for locks. A significant turning point
<br>
&gt; in my feeling on this was in reading the explicitly referenced <br>
&gt; definition of a resource in section 1.1 of RFC2396:<br>
&gt; <br>
&gt; &nbsp; &nbsp; &nbsp; Resource<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;A resource can be anything that
has identity. &nbsp;Familiar<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;examples include an electronic document,
an image, a service<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;(e.g., &quot;today's weather report
for Los Angeles&quot;), and a<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;collection of other resources. &nbsp;Not
all resources are network<br>
&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&quot;retrievable&quot; [...]<br>
&gt; <br>
&gt; In short, while my initial reaction was on par with Jasons', I'm okay
<br>
&gt; with the wording - especially since it seems to make things clearer
and <br>
&gt; a clearer specification will only lead to better implementations in
the <br>
&gt; long run (even if the implementors have to reference RFC2396 themselves)...<br>
</tt></font>
--=_alternative 007B931BC1256ECA_=--



From w3c-dist-auth-request@w3.org  Thu Jul  8 02:04:04 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA19930
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 02:04:03 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id EE873A157E; Thu,  8 Jul 2004 02:04:03 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 1C476A159A
	for <w3c-dist-auth@listhub.w3.org>; Thu,  8 Jul 2004 02:03:59 -0400 (EDT)
Received: from pop.gmx.net ([213.165.64.20] helo=mail.gmx.net)
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BiS0k-000511-To
	for w3c-dist-auth@w3c.org; Thu, 08 Jul 2004 02:03:59 -0400
Received: (qmail 25211 invoked by uid 65534); 8 Jul 2004 06:03:25 -0000
Received: from pD9E51CFC.dip.t-dialin.net (EHLO [192.168.0.2]) (217.229.28.252)
  by mail.gmx.net (mp019) with SMTP; 08 Jul 2004 08:03:25 +0200
X-Authenticated: #1915285
Message-ID: <40ECE3A6.2070504@gmx.de>
Date: Thu, 08 Jul 2004 08:03:18 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Lisa Dusseault <lisa@osafoundation.org>
Cc: "'Webdav WG'" <w3c-dist-auth@w3c.org>
References: <OFA0B9E0AD.688D270F-ON85256E0B.007BBEB2-85256E0C.0012D423@us.ibm.com> <3FF156B5.7080809@gmx.de> <5F5E4972-D06B-11D8-B746-000A95B2BB72@osafoundation.org>
In-Reply-To: <5F5E4972-D06B-11D8-B746-000A95B2BB72@osafoundation.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: When If headers with tagged lists fail
X-Archived-At: http://www.w3.org/mid/40ECE3A6.2070504@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8694
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708060403.EE873A157E@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 02:04:03 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Lisa Dusseault wrote:
> 
> I thought that RFC2518 was clear that if the If header includes a  
> tagged list with the wrong URL then the request should be failed with  
> 412.  I went looking for the explanation in the section on tagged  
> lists, and it wasn't terribly clear.  It just tacitly "inherits" the  
> definition from the untagged If header behavior.
> 
> So, what if I added a sentence to the description of tagged list  
> production in the If header, as follows:
> 
> Text already there:
>    The tagged-list production scopes a list production.  That is, it
>    specifies that the lists following the resource specification only
>    apply to the specified resource.  The scope of the resource
>    production begins with the list production immediately following the
>    resource production and ends with the next resource production, if
>    any.  All clauses must be evaluated.
> 
> Text to add immediately after:
>    If the state of the resource named in the tag does not
>    match any of the associated state lists then the request MUST fail
>    with a 412 (Precondition Failed).

"If the state of the resource identified by the URI specified in the tag 
does not match any of the associated state lists then the request MUST 
fail with a 412 (Precondition Failed)."

Plus: define a precondition code.

> Does this clear up the confusion?  Is it OK/clear to have this  
> information in a different section of the spec from where it says "a  
> lock token is submitted if it appears anywhere in the If header"?

I agree that something like this is what RFC2518 should have said in the 
first place. However, today we should take into account what exactly is 
implemented in the popular servers before making a change (so we need to 
  run tests first).


Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Thu Jul  8 02:13:23 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA28936
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 02:13:22 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 99021A1811; Thu,  8 Jul 2004 02:13:22 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 6ABC0A1811
	for <w3c-dist-auth@listhub.w3.org>; Thu,  8 Jul 2004 02:13:19 -0400 (EDT)
Received: from mail.gmx.net ([213.165.64.20])
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BiS9n-00078h-8u
	for w3c-dist-auth@w3c.org; Thu, 08 Jul 2004 02:13:19 -0400
Received: (qmail 6092 invoked by uid 65534); 8 Jul 2004 06:12:48 -0000
Received: from pD9E51CFC.dip.t-dialin.net (EHLO [192.168.0.2]) (217.229.28.252)
  by mail.gmx.net (mp027) with SMTP; 08 Jul 2004 08:12:48 +0200
X-Authenticated: #1915285
Message-ID: <40ECE5DA.3020505@gmx.de>
Date: Thu, 08 Jul 2004 08:12:42 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Lisa Dusseault <lisa@osafoundation.org>
Cc: Webdav WG <w3c-dist-auth@w3c.org>
References: <A2BB5528-D04F-11D8-B746-000A95B2BB72@osafoundation.org>
In-Reply-To: <A2BB5528-D04F-11D8-B746-000A95B2BB72@osafoundation.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: Using absolute URIs in headers and properties in DAV
X-Archived-At: http://www.w3.org/mid/40ECE5DA.3020505@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8695
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708061322.99021A1811@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 02:13:22 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Lisa Dusseault wrote:

> Originally in RFC2518, the Destination header, the If header and the 
> <href> element all contained only absolute URIs (no paths).  Then, after 
> the 2002 Interop, we opened that up so that RFC2518bis now says the 
> Destination header could take "abs path" as well.  However, it was then 
> pointed out (Dec 9 2002 mail) that we should make the If header 
> consistent with the Destination header, which might also imply making 
> the <href> format the same.  Nobody followed up on that Dec 9 2002 mail 
> as far as I can see, so I'd like to reraise the issue.
> 
> 1.  Status quo in 'bis' -- are we really sure we want to make the 
> Destination header inconsistent with the other DAV elements that take 
> URI values?
> 2.  Back to RFC2518 status -- only one option (full URIs) consistent 
> across all uses
> 3.  Forge ahead and allow absolute paths in Destination, If header, and 
> possibly also <href>.  Doesn't this have backward compatibility issues?
> 
> I'd like to recheck our reasoning on this one, and whether there's 
> really a need to allow absolute paths in the value of Destination 
> header.  It was an interoperability issue, but I don't have all the 
> details on why clients might find it difficult to include the 
> server/host part of the URI.

Note that we already allow non-absolute URIs in href elements (right now 
defined as per 3.2.1 of RFC2068), so the inconsistency is just with 
places where we currently require "Coded-URL".

Anyway, the spec should only be changed if that change doesn't break 
existing servers. So if one of Apache/moddav, MS IIS (and possibly 
others) do not allow non-absolute URIs , we shouldn't make any change.

Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Thu Jul  8 02:42:50 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA01954
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 02:42:50 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 92EEEA18E1; Thu,  8 Jul 2004 02:42:46 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 49D24A1E0E
	for <w3c-dist-auth@listhub.w3.org>; Thu,  8 Jul 2004 02:41:02 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BiSP5-0001Lo-5N
	for w3c-dist-auth@w3.org; Thu, 08 Jul 2004 02:29:07 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i686T57x007540 sender julian.reschke@gmx.de for w3c-dist-auth@w3.org; Wed, 7 Jul 2004 23:29:05 -0700
Received: from mail.gmx.net (pop.gmx.de [213.165.64.20]) by bandage.seagull.net (8.12.10) with SMTP id i686SwK2007382 sender julian.reschke@gmx.de for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Wed, 7 Jul 2004 23:28:59 -0700
Received: (qmail 26739 invoked by uid 65534); 8 Jul 2004 06:28:45 -0000
Received: from pD9E51CFC.dip.t-dialin.net (EHLO [192.168.0.2]) (217.229.28.252) by mail.gmx.net (mp005) with SMTP; 08 Jul 2004 08:28:45 +0200
Message-ID: <40ECE999.8000309@gmx.de>
Date: Thu, 08 Jul 2004 08:28:41 +0200
From: Julian Reschke <julian.reschke@gmx.de>
MIME-Version: 1.0
To: Jason Crawford <ccjason@us.ibm.com>
Cc: Julian Reschke <nnjulian.reschke___at___gmx.de@smallcue.com>,
        WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/40ECE999.8000309@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8696
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708064246.92EEEA18E1@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 02:42:46 -0400 (EDT)


Jason Crawford wrote:

>  > Well, I'd say they do.
>  >
>  > - you can ask the server to create a new lock using LOCK, similar to how
>  > servers frequently create new resources upon POST,
> I don't understand how this is related.  As far as creation, typically 
> to create a resource you do PUT or MKCOL.  And the resource appears at 
> the URL you provide as an argument.   This is not the case for locks.

That's only "typical" for WebDAV. Outside WebDAV, new resources are 
created as an effect of POST every second (and in this case, it's the 
server that assigns the URL). I'd actually call that the typical case, 
for the simply reason that it happens so often.

>  > - a lock has a URI,
> Are you referring to the lock-token?  It doesn't work the same way that 
> URI's for typical resources work.   For typical resources, the URI is a 
> URL.  This is not true for locks/locktokens.

What is a "typical" resource? And why is this relevant unless I say that 
a lock indeed is a "typical" resource?

>  > - a lock has state,
> As do properties but we rarely refer to them as resources because that 
> would cause confusion.  Instead we give them a different name, 
> "properties" to avoid that confusion.    Of course, specifications that 
> do properties more clearly as resources should feel free to also refer 
> to them as resources.

As a matter of fact particular instances of WebDAV properties on a 
resource *are* resources on their own. We just don't have a common 
notation for their URLs. For instance we could have defined that the 
DAV:displayname property for a given WebDAV URL http://a/b has the 
following URL:

   http://a/b;displayname

and then we could have allowed DELETE/PUT/GET on it. Many say that this 
is what WebDAV should have done, because it would have avoided the 
current situation where property values can not be addressed by the 
common WebDAV methods.

> BTW... I'm not saying a lock is a property.  I'm just providing a 
> similar example of where we chose not to highlight the fact that 
> something is a resource.
> 
>  > - the state is observable indirectly through HTTP methods
> Again, not the same way as typical resources.  Only as a side effect of 
> asking (PROPFIND) for the state of some OTHER resource.  That's weird.

OK. Does "urn:ietf:rfc:2518" identify a resource? Does 
"mailto:w3c-dist-auth@w3c.org"? None of them can be addressed using HTTP 
directly. They are still resources, just not HTTP resources.

> And that's the only method locks and typical resources have in common.

Again, unless you define what you understand with "typical" and how this 
is relevant here....

>  > and last but not least,
>  > - it's pefectly ok to implement locks as HTTP resources (for instance
>  > which would react to DELETE).
> You can say that for just about anything in this world, but we don't.   
>  When we find reason to standardize what you just mentioned, we then 
> begin to have a reason to call locks resources, but right now they act 
> differently than what we typically think of as resources.  So although 
> they (and just about anything else in this universe) can be called 
> resources, it is not really helpful to do so... and because of the 
> context, it's actually confusing.

I'd like to understand *why* you find that confusing? Because you 
usually only use the term "resource" when talking about HTTP resources?

>  > If you substitute "lock" by "lock resource" things sound much better.
> It's less awkward as you say, but still a little.  It works better to 
> just say "lock"
> since adding "resource" detracts.

Well, that's what the spec *does*. The term "resource" is only used in 
the introduction.

>  > The concept is similar to the version history resource in DeltaV. It's
>  > not strictly needed for many things, but making it an HTTP resource
>  > gives you a lot of advantages (such as properties you can observe
>  > *directly* though PROPFIND instead of indirectly through a specific
>  > REPORT).
> Well...  we don't do that in this spec though so it's premature to
> add verbiage claiming that they are resources.  Adding the verbiage
> without the supporting behavior just adds confusion.

They technically *are* resources. If you're arguing with that statement, 
you should explain how this is incorrect according to RFC2396 (which is 
the relevant spec here).

Whether we should *say* that they are resources is a different question. 
We don't need to say it, but my feeling was that it helps understanding 
how they work.

> ..

Regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Thu Jul  8 11:08:03 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA29108
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 11:08:03 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 03C41A0FD9; Thu,  8 Jul 2004 11:08:05 -0400 (EDT)
X-Original-To: w3c-dist-auth@frink.w3.org
Delivered-To: w3c-dist-auth@frink.w3.org
Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.88])
	by frink.w3.org (Postfix) with ESMTP id 4EEB2A1093
	for <w3c-dist-auth@frink.w3.org>; Thu,  8 Jul 2004 11:08:03 -0400 (EDT)
Received: from mac.com (smtpin01-en2 [10.13.10.146])
	by smtpout.mac.com (Xserve/MantshX 2.0) with ESMTP id i68F829L021706
	for <w3c-dist-auth@frink.w3.org>; Thu, 8 Jul 2004 08:08:02 -0700 (PDT)
Received: from [168.16.213.98] (sleepy.gcsu.edu [168.16.213.98])
	(authenticated bits=0)
	by mac.com (Xserve/smtpin01/MantshX 4.0) with ESMTP id i68F81kJ029564
	for <w3c-dist-auth@frink.w3.org>; Thu, 8 Jul 2004 08:08:02 -0700 (PDT)
Mime-Version: 1.0
X-Sender: frank.lowney@mail.mac.com
Message-Id: <p06110406bd1310a1a1b7@[168.16.213.98]>
In-Reply-To: <p06110403bd10512fc23a@[168.16.213.98]>
References: <p06110403bd10512fc23a@[168.16.213.98]>
Date: Thu, 8 Jul 2004 11:07:59 -0400
To: w3c-dist-auth@frink.w3.org
From: Frank Lowney <frank.lowney@mac.com>
Content-Type: text/plain; charset="us-ascii"
Subject: Re: WindowsXP and double login challenges
X-Archived-At: http://www.w3.org/mid/p06110406bd1310a1a1b7@%5B168.16.213.98%5D
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8697
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708150805.03C41A0FD9@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 11:08:05 -0400 (EDT)


It's great to see that the WebDAV protocol is relentlessly advancing but, as someone who is trying to get end users to embrace it over older, more established methods, I have to wonder whether the basic aspects of the protocol work well enough to assure a level of acceptance sufficient to sustain the momentum.

Take, for example, the query I posted here a week or so ago (quoted below).  While it's difficult to definitively interpret a non-response, they tend to be interpreted as: yes, that's a problem but there is no solution or workaround.

So, if that is the case with Win2K / WinXP Network Places access to a wide range of WebDAV-enabled servers where end users first and continuing experience with WebDAV is a double login challenge, we should not be surprised to learn that these end users are reluctant to consider change.


>We are currently working with three WebDAV-enabled servers as follows:
>
>WebSTAR V v.5.3.2 on MacOS X 10.3.4
>
>Apache on MacOS X Server 10.3.4
>
>BEA Weblogic (supporting WebCT Vista) on Solaris.
>
>Using WindowsXP & 'My Network Places,' we and our various clients and other constituencies are consistently seeing a "double login challenge" in all three cases. We don't see this issue on Win2K Pro or MacOS X.
>
>First, can anyone confirm that this is a "Microsoft not following standards again" issue?
>
>Second, can anyone suggest a work around that will unburden WinXP WebDAV users from the necessity of meeting this challenge twice?
>
>Thanks for any light shed on this issue.


-- 
=====================================================================
Dr. Frank Lowney  frank.lowney@gcsu.edu
    Director, Electronic Instructional Services, a unit of the
    Office of Information and Instructional Technology,
    Professional Pages: http://www.gcsu.edu/oiit/eis/
    Personal Pages: http://www.faculty.de.gcsu.edu/~flowney
Voice: (478) 445-5260
NOTICE: Please be advised that I am hearing impaired and communicate most effectively via e-mail.  Follow-up summaries of telephone conversations by e-mail are most appreciated.
=====================================================================
We don't make instruction effective, we make effective instruction more accessible.



From w3c-dist-auth-request@w3.org  Thu Jul  8 12:01:05 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA05067
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 12:01:04 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 2A9F4A0DE9; Thu,  8 Jul 2004 12:01:05 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id C901BA0DE9
	for <w3c-dist-auth@listhub.w3.org>; Thu,  8 Jul 2004 12:01:02 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BibKY-0000ZL-Ik
	for w3c-dist-auth@w3.org; Thu, 08 Jul 2004 12:01:02 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i68G11bX030899 sender ccjason@us.ibm.com for w3c-dist-auth@w3.org; Thu, 8 Jul 2004 09:01:01 -0700
Received: from e6.ny.us.ibm.com (e6.ny.us.ibm.com [32.97.182.106]) by bandage.seagull.net (8.12.10) with ESMTP id i68G0Sof030564 sender ccjason@us.ibm.com; Thu, 8 Jul 2004 09:00:36 -0700
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150]) by e6.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i68G0Cdu468504; Thu, 8 Jul 2004 12:00:13 -0400
Received: from d01ml604.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i68G1LEC107128; Thu, 8 Jul 2004 12:01:22 -0400
To: " webdav" <nnw3c-dist-auth___at___w3.org@smallcue.com>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 5.0.11   July 24, 2002
From: Jason Crawford <ccjason@us.ibm.com>
Message-ID: <OF335C7F92.D2E73FFE-ON85256ECB.004F8585-85256ECB.0057E684@us.ibm.com>
Date: Thu, 8 Jul 2004 12:00:06 -0400
X-MIMETrack: Serialize by Router on D01ML604/01/M/IBM(Release 6.51HF339 | June 21, 2004) at 07/08/2004 12:00:12, Serialize complete at 07/08/2004 12:00:12
Content-Type: multipart/alternative; boundary="=_alternative 0050322585256ECB_="
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/OF335C7F92.D2E73FFE-ON85256ECB.004F8585-85256ECB.0057E684@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8698
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708160105.2A9F4A0DE9@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 12:01:05 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 0050322585256ECB_=
Content-Type: text/plain; charset="us-ascii"

> But I'm not wedded to the idea of calling a lock a resource, so maybe 
> it would be simplest to just say: 
> 
> ---------------------------------------- 
> 
> 2.5 Status of a lock 
>     A lock is identified by a URI (the lock token URI) but in general, 
it
>    not have a HTTP URL, and thus can not be directly manipulated using
>    HTTP methods.  Instead, this specification defines the new methods
>    LOCK (creating and refreshing locks, see Section 4) and UNLOCK
>    (removing locks, see Section 5) that act indirectly on locks. 
> 
> ----------------------------------------- 
> 
> Since I believe this is the only section that refers to the 
"resourceness" 
> of a lock, we can avoid the contention while keeping all the good stuff 
in 
> the later paragraphs. 

I guess we'd have to see it in context, but if that's the only mention of
resourceness, that should be a significant improvement.  (Don't forget
to include the word "is" between lines 0 and 1.  :-))

J.

--=_alternative 0050322585256ECB_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="sans-serif">&gt; But I'm not wedded to the idea of calling a lock a resource, so maybe <br>
&gt; it would be simplest to just say: <br>
&gt; <br>
&gt; ---------------------------------------- <br>
&gt; <br>
&gt; 2.5 Status of a lock <br>
&gt; &nbsp; &nbsp; A lock is identified by a URI (the lock token URI) but in general, it<br>
&gt; &nbsp; &nbsp;not have a HTTP URL, and thus can not be directly manipulated using<br>
&gt; &nbsp; &nbsp;HTTP methods. &nbsp;Instead, this specification defines the new methods<br>
&gt; &nbsp; &nbsp;LOCK (creating and refreshing locks, see Section 4) and UNLOCK<br>
&gt; &nbsp; &nbsp;(removing locks, see Section 5) that act indirectly on locks. <br>
&gt; <br>
&gt; ----------------------------------------- <br>
&gt; <br>
&gt; Since I believe this is the only section that refers to the &quot;resourceness&quot; <br>
&gt; of a lock, we can avoid the contention while keeping all the good stuff in <br>
&gt; the later paragraphs. </font>
<br>
<br><font size=2 face="sans-serif">I guess we'd have to see it in context, but if that's the only mention of</font>
<br><font size=2 face="sans-serif">resourceness, that should be a significant improvement. &nbsp;(Don't forget</font>
<br><font size=2 face="sans-serif">to include the word &quot;is&quot; between lines 0 and 1. &nbsp;:-))</font>
<br>
<br><font size=2 face="sans-serif">J.</font>
<br>
--=_alternative 0050322585256ECB_=--



From w3c-dist-auth-request@w3.org  Thu Jul  8 12:01:14 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA05087
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 12:01:13 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id E240BA0912; Thu,  8 Jul 2004 12:01:14 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 28076A0912
	for <w3c-dist-auth@listhub.w3.org>; Thu,  8 Jul 2004 12:01:14 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BibKj-0000ak-RF
	for w3c-dist-auth@w3.org; Thu, 08 Jul 2004 12:01:14 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i68G15A7030972 sender ccjason@us.ibm.com for w3c-dist-auth@w3.org; Thu, 8 Jul 2004 09:01:12 -0700
Received: from e3.ny.us.ibm.com (e3.ny.us.ibm.com [32.97.182.103]) by bandage.seagull.net (8.12.10) with ESMTP id i68G0TpT030618 sender ccjason@us.ibm.com; Thu, 8 Jul 2004 09:00:37 -0700
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150]) by e3.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i68G0Cws638678; Thu, 8 Jul 2004 12:00:12 -0400
Received: from d01ml604.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i68G1LEA097552; Thu, 8 Jul 2004 12:01:22 -0400
To: Julian Reschke <nnjulian.reschke___at___gmx.de@smallcue.com>
Cc: WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 5.0.11   July 24, 2002
From: Jason Crawford <ccjason@us.ibm.com>
Message-ID: <OF1D36BAFC.30D66699-ON85256ECB.004909F6-85256ECB.0057E275@us.ibm.com>
Date: Thu, 8 Jul 2004 11:59:59 -0400
X-MIMETrack: Serialize by Router on D01ML604/01/M/IBM(Release 6.51HF339 | June 21, 2004) at 07/08/2004 12:00:12, Serialize complete at 07/08/2004 12:00:12
Content-Type: multipart/alternative; boundary="=_alternative 004EC42785256ECB_="
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/OF1D36BAFC.30D66699-ON85256ECB.004909F6-85256ECB.0057E275@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8699
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708160114.E240BA0912@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 12:01:14 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 004EC42785256ECB_=
Content-Type: text/plain; charset="us-ascii"

On Thursday, 07/08/2004 at 08:28 ZE2, Julian Reschke wrote:
> Jason Crawford wrote:
> 
> >  > Well, I'd say they do.
> >  >
> >  > - you can ask the server to create a new lock using LOCK, similar 
to how
> >  > servers frequently create new resources upon POST,
> > I don't understand how this is related.  As far as creation, typically
> > to create a resource you do PUT or MKCOL.  And the resource appears at
> > the URL you provide as an argument.   This is not the case for locks.
> 
> That's only "typical" for WebDAV. Outside WebDAV, new resources are
> created as an effect of POST every second (and in this case, it's the
> server that assigns the URL). I'd actually call that the typical case,
> for the simply reason that it happens so often.

We have different experience then.  For me PUT is only second to FTP.  And 
my web tools don't support authoring via POST. 

Besides.... We're working on or extending the WebDAV spec.  It doesn't 
make sense to treat our own spec(s) as exceptional.  We should be self 
consistant.   When we speak of resources, it has meant HTTP resources. 
This is not just coincidental.  The whole of 2518 is dedicated 
to defining these "resources".   To briefly use the term to refer to 
something that doesn't behave like the spec outlines doesn't make sense.

> >  > - a lock has a URI,
> > Are you referring to the lock-token?  It doesn't work the same way 
that
> > URI's for typical resources work.   For typical resources, the URI is 
a
> > URL.  This is not true for locks/locktokens.
> 
> What is a "typical" resource? And why is this relevant unless I say that
> a lock indeed is a "typical" resource?

An HTTP resource.


> As a matter of fact particular instances of WebDAV properties on a
> resource *are* resources on their own. We just don't have a common
> notation for their URLs. For instance we could have defined that the
> DAV:displayname property for a given WebDAV URL http://a/b has the
> following URL:
> 
> http://a/b;displayname
> 
> and then we could have allowed DELETE/PUT/GET on it. Many say that this
> is what WebDAV should have done, because it would have avoided the
> current situation where property values can not be addressed by the
> common WebDAV methods.

Right.  Properties are resources, but we don't call them resources.  That 
was my point.


> OK. Does "urn:ietf:rfc:2518" identify a resource? Does
> "mailto:w3c-dist-auth@w3c.org"? None of them can be addressed using HTTP
> directly. They are still resources, just not HTTP resources.

That's right.   In the context of a spec dedicate to HTTP resources it's 
not useful to call these or LOCKS  resources.  It actually is confusing 
because resources usually refers to HTTP resources.



> Again, unless you define what you understand with "typical" and how this
> is relevant here....

HTTP Resources.    One's that support simple namespace operations like 
GET/PUT/DELETE  or GET/MKCOL/DELETE... and our new operations in the 
binding spec.


> >  > and last but not least,
> >  > - it's pefectly ok to implement locks as HTTP resources (for 
instance
> >  > which would react to DELETE).
> > You can say that for just about anything in this world, but we don't.
> >  When we find reason to standardize what you just mentioned, we then
> > begin to have a reason to call locks resources, but right now they act
> > differently than what we typically think of as resources.  So although
> > they (and just about anything else in this universe) can be called
> > resources, it is not really helpful to do so... and because of the
> > context, it's actually confusing.
> 
> I'd like to understand *why* you find that confusing? Because you
> usually only use the term "resource" when talking about HTTP resources?

Because throughout the spec resources refer to 
HTTP resources.  Now it is being suggested to use the term briefly
for something that doesn't behave like an HTTP resource at all.  It
will draw the wrong picture because all the important operational
behaviors that the spec defines for resources don't apply.



> They technically *are* resources. If you're arguing with that statement,
> you should explain how this is incorrect according to RFC2396 (which is
> the relevant spec here).
> Whether we should *say* that they are resources is a different question.
> We don't need to say it, but my feeling was that it helps understanding
> how they work.
Right.  The disagreement is not whether they are resources are not.  The
rfc you mention clearly allows them and just about anything else in the
world to be a resource. 

The disagreement is over whether we should mention that they are
resources.

Down the road we might want to openly call them resources if we go 
ahead and have the lock-token be a URL that responds to 
GET/DELETE/PROPSTAT methods, but right now calling these things 
resources despite the fact that they don't have the behaviors that
our spec spends so much time defining for resources would be
confusing and not really helpful.

--=_alternative 004EC42785256ECB_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="sans-serif">On Thursday, 07/08/2004 at 08:28 ZE2, Julian Reschke wrote:<br>
&gt; Jason Crawford wrote:<br>
&gt; <br>
&gt; &gt; &nbsp;&gt; Well, I'd say they do.<br>
&gt; &gt; &nbsp;&gt;<br>
&gt; &gt; &nbsp;&gt; - you can ask the server to create a new lock using LOCK, similar to how<br>
&gt; &gt; &nbsp;&gt; servers frequently create new resources upon POST,<br>
&gt; &gt; I don't understand how this is related. &nbsp;As far as creation, typically<br>
&gt; &gt; to create a resource you do PUT or MKCOL. &nbsp;And the resource appears at<br>
&gt; &gt; the URL you provide as an argument. &nbsp; This is not the case for locks.<br>
&gt; <br>
&gt; That's only &quot;typical&quot; for WebDAV. Outside WebDAV, new resources are<br>
&gt; created as an effect of POST every second (and in this case, it's the<br>
&gt; server that assigns the URL). I'd actually call that the typical case,<br>
&gt; for the simply reason that it happens so often.</font>
<br>
<br><font size=2 face="sans-serif">We have different experience then. &nbsp;For me PUT is only second to FTP. &nbsp;And my web tools don't support authoring via POST. &nbsp;</font>
<br>
<br><font size=2 face="sans-serif">Besides.... We're working on or extending the WebDAV spec. &nbsp;It doesn't make sense to treat our own spec(s) as exceptional. &nbsp;We should be self consistant. &nbsp; When we speak of resources, it has meant HTTP resources. &nbsp; This is not just coincidental. &nbsp;The whole of 2518 is dedicated </font>
<br><font size=2 face="sans-serif">to defining these &quot;resources&quot;. &nbsp; To briefly use the term to refer to something that doesn't behave like the spec outlines doesn't make sense.</font>
<br><font size=2 face="sans-serif"><br>
&gt; &gt; &nbsp;&gt; - a lock has a URI,<br>
&gt; &gt; Are you referring to the lock-token? &nbsp;It doesn't work the same way that<br>
&gt; &gt; URI's for typical resources work. &nbsp; For typical resources, the URI is a<br>
&gt; &gt; URL. &nbsp;This is not true for locks/locktokens.<br>
&gt; <br>
&gt; What is a &quot;typical&quot; resource? And why is this relevant unless I say that<br>
&gt; a lock indeed is a &quot;typical&quot; resource?</font>
<br>
<br><font size=2 face="sans-serif">An HTTP resource.</font>
<br>
<br><font size=2 face="sans-serif"><br>
&gt; As a matter of fact particular instances of WebDAV properties on a<br>
&gt; resource *are* resources on their own. We just don't have a common<br>
&gt; notation for their URLs. For instance we could have defined that the<br>
&gt; DAV:displayname property for a given WebDAV URL http://a/b has the<br>
&gt; following URL:<br>
&gt; <br>
&gt; http://a/b;displayname<br>
&gt; <br>
&gt; and then we could have allowed DELETE/PUT/GET on it. Many say that this<br>
&gt; is what WebDAV should have done, because it would have avoided the<br>
&gt; current situation where property values can not be addressed by the<br>
&gt; common WebDAV methods.</font>
<br>
<br><font size=2 face="sans-serif">Right. &nbsp;Properties are resources, but we don't call them resources. &nbsp;That was my point.</font>
<br>
<br><font size=2 face="sans-serif"><br>
&gt; OK. Does &quot;urn:ietf:rfc:2518&quot; identify a resource? Does<br>
&gt; &quot;mailto:w3c-dist-auth@w3c.org&quot;? None of them can be addressed using HTTP<br>
&gt; directly. They are still resources, just not HTTP resources.</font>
<br>
<br><font size=2 face="sans-serif">That's right. &nbsp; In the context of a spec dedicate to HTTP resources it's not useful to call these or LOCKS &nbsp;resources. &nbsp;It actually is confusing because resources usually refers to HTTP resources.</font>
<br>
<br>
<br><font size=2 face="sans-serif"><br>
&gt; Again, unless you define what you understand with &quot;typical&quot; and how this<br>
&gt; is relevant here....</font>
<br>
<br><font size=2 face="sans-serif">HTTP Resources. &nbsp; &nbsp;One's that support simple namespace operations like GET/PUT/DELETE &nbsp;or GET/MKCOL/DELETE... and our new operations in the binding spec.</font>
<br>
<br><font size=2 face="sans-serif"><br>
&gt; &gt; &nbsp;&gt; and last but not least,<br>
&gt; &gt; &nbsp;&gt; - it's pefectly ok to implement locks as HTTP resources (for instance<br>
&gt; &gt; &nbsp;&gt; which would react to DELETE).<br>
&gt; &gt; You can say that for just about anything in this world, but we don't.<br>
&gt; &gt; &nbsp;When we find reason to standardize what you just mentioned, we then<br>
&gt; &gt; begin to have a reason to call locks resources, but right now they act<br>
&gt; &gt; differently than what we typically think of as resources. &nbsp;So although<br>
&gt; &gt; they (and just about anything else in this universe) can be called<br>
&gt; &gt; resources, it is not really helpful to do so... and because of the<br>
&gt; &gt; context, it's actually confusing.<br>
&gt; <br>
&gt; I'd like to understand *why* you find that confusing? Because you<br>
&gt; usually only use the term &quot;resource&quot; when talking about HTTP resources?</font>
<br>
<br><font size=2 face="sans-serif">Because throughout the spec resources refer to </font>
<br><font size=2 face="sans-serif">HTTP resources. &nbsp;Now it is being suggested to use the term briefly</font>
<br><font size=2 face="sans-serif">for something that doesn't behave like an HTTP resource at all. &nbsp;It</font>
<br><font size=2 face="sans-serif">will draw the wrong picture because all the important operational</font>
<br><font size=2 face="sans-serif">behaviors that the spec defines for resources don't apply.</font>
<br>
<br>
<br>
<br><font size=2 face="sans-serif">&gt; They technically *are* resources. If you're arguing with that statement,<br>
&gt; you should explain how this is incorrect according to RFC2396 (which is<br>
&gt; the relevant spec here).</font>
<br><font size=2 face="sans-serif">&gt; Whether we should *say* that they are resources is a different question.<br>
&gt; We don't need to say it, but my feeling was that it helps understanding<br>
&gt; how they work.</font>
<br><font size=2 face="sans-serif">Right. &nbsp;The disagreement is not whether they are resources are not. &nbsp;The</font>
<br><font size=2 face="sans-serif">rfc you mention clearly allows them and just about anything else in the</font>
<br><font size=2 face="sans-serif">world to be a resource. &nbsp; </font>
<br>
<br><font size=2 face="sans-serif">The disagreement is over whether we should mention that they are</font>
<br><font size=2 face="sans-serif">resources.</font>
<br>
<br><font size=2 face="sans-serif">Down the road we might want to openly call them resources if we go </font>
<br><font size=2 face="sans-serif">ahead and have the lock-token be a URL that responds to </font>
<br><font size=2 face="sans-serif">GET/DELETE/PROPSTAT methods, but right now calling these things </font>
<br><font size=2 face="sans-serif">resources despite the fact that they don't have the behaviors that</font>
<br><font size=2 face="sans-serif">our spec spends so much time defining for resources would be</font>
<br><font size=2 face="sans-serif">confusing and not really helpful.</font>
<br>
--=_alternative 004EC42785256ECB_=--



From w3c-dist-auth-request@w3.org  Thu Jul  8 12:13:54 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA06102
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 12:13:54 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id CA7FBA1268; Thu,  8 Jul 2004 12:13:55 -0400 (EDT)
X-Original-To: w3c-dist-auth@frink.w3.org
Delivered-To: w3c-dist-auth@frink.w3.org
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20])
	by frink.w3.org (Postfix) with SMTP id F33EEA1268
	for <w3c-dist-auth@frink.w3.org>; Thu,  8 Jul 2004 12:13:51 -0400 (EDT)
Received: (qmail 30662 invoked by uid 65534); 8 Jul 2004 16:13:47 -0000
Received: from pD9E51CFC.dip.t-dialin.net (EHLO [192.168.0.2]) (217.229.28.252)
  by mail.gmx.net (mp014) with SMTP; 08 Jul 2004 18:13:47 +0200
X-Authenticated: #1915285
Message-ID: <40ED72B5.3060206@gmx.de>
Date: Thu, 08 Jul 2004 18:13:41 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Frank Lowney <frank.lowney@mac.com>
Cc: w3c-dist-auth@frink.w3.org
References: <p06110403bd10512fc23a@[168.16.213.98]> <p06110406bd1310a1a1b7@[168.16.213.98]>
In-Reply-To: <p06110406bd1310a1a1b7@[168.16.213.98]>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: WindowsXP and double login challenges
X-Archived-At: http://www.w3.org/mid/40ED72B5.3060206@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8700
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708161355.CA7FBA1268@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 12:13:55 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Frank Lowney wrote:
> It's great to see that the WebDAV protocol is relentlessly advancing but, as someone who is trying to get end users to embrace it over older, more established methods, I have to wonder whether the basic aspects of the protocol work well enough to assure a level of acceptance sufficient to sustain the momentum.
> 
> Take, for example, the query I posted here a week or so ago (quoted below).  While it's difficult to definitively interpret a non-response, they tend to be interpreted as: yes, that's a problem but there is no solution or workaround.
> 
> So, if that is the case with Win2K / WinXP Network Places access to a wide range of WebDAV-enabled servers where end users first and continuing experience with WebDAV is a double login challenge, we should not be surprised to learn that these end users are reluctant to consider change.
> 
> 
> 
>>We are currently working with three WebDAV-enabled servers as follows:
>>
>>WebSTAR V v.5.3.2 on MacOS X 10.3.4
>>
>>Apache on MacOS X Server 10.3.4
>>
>>BEA Weblogic (supporting WebCT Vista) on Solaris.
>>
>>Using WindowsXP & 'My Network Places,' we and our various clients and other constituencies are consistently seeing a "double login challenge" in all three cases. We don't see this issue on Win2K Pro or MacOS X.
>>
>>First, can anyone confirm that this is a "Microsoft not following standards again" issue?
>>
>>Second, can anyone suggest a work around that will unburden WinXP WebDAV users from the necessity of meeting this challenge twice?
>>
>>Thanks for any light shed on this issue.

Wow :-)

Keep in mind that your first mail didn't reach the mailing list until 
Tuesday: 
<http://lists.w3.org/Archives/Public/w3c-dist-auth/2004JulSep/0007.html>.

Anyway. Yes, this sounds like a bug in Windows XP's WebDAV 
"Mini-Redirector". This client is broken in so many ways that I can't 
even connect to my own server, so I never had the opportunity to look 
into what else may be broken in it. And yes, I reported these issues to 
Microsoft (answer: will not be fixed before Longhorn).

To actually find out what's wrong, you may want to obtain an HTTP trace. 
We can study these traces either here or over on dav-dev (the 
development list for Apache/moddav).

Hope this helps,

Julian


-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Thu Jul  8 13:04:54 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA09649
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 13:04:54 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 874A2A1A22; Thu,  8 Jul 2004 13:04:56 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 0B673A1A45
	for <w3c-dist-auth@listhub.w3.org>; Thu,  8 Jul 2004 13:04:55 -0400 (EDT)
Received: from bandage.seagull.net ([67.136.24.2])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BicKM-0002Yh-Qk
	for w3c-dist-auth@w3.org; Thu, 08 Jul 2004 13:04:55 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i68H4tPr021768 sender julian.reschke@gmx.de for w3c-dist-auth@w3.org; Thu, 8 Jul 2004 10:04:55 -0700
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by bandage.seagull.net (8.12.10) with SMTP id i68H4pJO021565 sender julian.reschke@gmx.de for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Thu, 8 Jul 2004 10:04:51 -0700
Received: (qmail 17985 invoked by uid 65534); 8 Jul 2004 17:04:35 -0000
Received: from pD9E51CFC.dip.t-dialin.net (EHLO [192.168.0.2]) (217.229.28.252) by mail.gmx.net (mp022) with SMTP; 08 Jul 2004 19:04:35 +0200
Message-ID: <40ED7E9F.1060402@gmx.de>
Date: Thu, 08 Jul 2004 19:04:31 +0200
From: Julian Reschke <julian.reschke@gmx.de>
MIME-Version: 1.0
To: Jason Crawford <ccjason@us.ibm.com>
Cc: Julian Reschke <nnjulian.reschke___at___gmx.de@smallcue.com>,
        WebDAV <nnw3c-dist-auth___at___w3.org@smallcue.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/40ED7E9F.1060402@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8701
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708170456.874A2A1A22@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 13:04:56 -0400 (EDT)


Jason Crawford wrote:

> We have different experience then.  For me PUT is only second to FTP. 
>  And my web tools don't support authoring via POST.

I'm not talking about authoring. I'm talking about HTML forms that allow 
user input and that perform a POST request that in many cases results in 
a new HTTP resource.

> Besides.... We're working on or extending the WebDAV spec.  It doesn't 
> make sense to treat our own spec(s) as exceptional.  We should be self 
> consistant.   When we speak of resources, it has meant HTTP resources.

I disagree here. When we usually mean "HTTP resource" when we say 
"resource" this is the case because it's clear from the context. There 
are other cases, such as in

<http://greenbytes.de/tech/webdav/rfc3744.html#rfc.section.4.1>

Also, as a matter of fact, I *was* careful to say:

"Having a URI (the lock token URI) on it's own, a lock is a resource in 
the sense defined by [RFC2396]. In general, this resource does not have 
a HTTP URL, and thus can not be directly manipulated using HTTP methods."

So I claim there's no risk whatsoever of people misunderstanding this as 
meaning "HTTP resource".

> This is not just coincidental.  The whole of 2518 is dedicated
> to defining these "resources".   To briefly use the term to refer to 
> something that doesn't behave like the spec outlines doesn't make sense.

No, no. RFC2518 doesn't define resources at all. RFC2518 speaks about 
*HTTP* resources (which are defined in RFC2616), and what it means for a 
HTTP resource to be "WebDAV compliant".

>  > >  > - a lock has a URI,
>  > > Are you referring to the lock-token?  It doesn't work the same way that
>  > > URI's for typical resources work.   For typical resources, the URI is a
>  > > URL.  This is not true for locks/locktokens.
>  >
>  > What is a "typical" resource? And why is this relevant unless I say that
>  > a lock indeed is a "typical" resource?
> 
> An HTTP resource.

OK, and so why is this relevant when I explicitly say that generally 
it's not a HTTP resource?

> ...
>  > OK. Does "urn:ietf:rfc:2518" identify a resource? Does
>  > "mailto:w3c-dist-auth@w3c.org"? None of them can be addressed using HTTP
>  > directly. They are still resources, just not HTTP resources.
> 
> That's right.   In the context of a spec dedicate to HTTP resources it's 
> not useful to call these or LOCKS  resources.  It actually is confusing 
> because resources usually refers to HTTP resources.

I'd agree if there was any risk of a misunderstanding. Looking at the 
text as proposed, there isn't. It says (a) "in the sense of RFC2396" and 
"generally not an HTTP URL".

 > ...
>  > >  > and last but not least,
>  > >  > - it's pefectly ok to implement locks as HTTP resources (for 
> instance
>  > >  > which would react to DELETE).
>  > > You can say that for just about anything in this world, but we don't.
>  > >  When we find reason to standardize what you just mentioned, we then
>  > > begin to have a reason to call locks resources, but right now they act
>  > > differently than what we typically think of as resources.  So although
>  > > they (and just about anything else in this universe) can be called
>  > > resources, it is not really helpful to do so... and because of the
>  > > context, it's actually confusing.
>  >
>  > I'd like to understand *why* you find that confusing? Because you
>  > usually only use the term "resource" when talking about HTTP resources?
> 
> Because throughout the spec resources refer to
> HTTP resources.  Now it is being suggested to use the term briefly
> for something that doesn't behave like an HTTP resource at all.  It
> will draw the wrong picture because all the important operational
> behaviors that the spec defines for resources don't apply.

See above.

>  > They technically *are* resources. If you're arguing with that statement,
>  > you should explain how this is incorrect according to RFC2396 (which is
>  > the relevant spec here).
>  > Whether we should *say* that they are resources is a different question.
>  > We don't need to say it, but my feeling was that it helps understanding
>  > how they work.
> Right.  The disagreement is not whether they are resources are not.  The
> rfc you mention clearly allows them and just about anything else in the
> world to be a resource.  

Thanks.

> The disagreement is over whether we should mention that they are
> resources.
>
> Down the road we might want to openly call them resources if we go
> ahead and have the lock-token be a URL that responds to
> GET/DELETE/PROPSTAT methods, but right now calling these things
> resources despite the fact that they don't have the behaviors that
> our spec spends so much time defining for resources would be
> confusing and not really helpful.

A server may implement locks as HTTP resources, we don't need to change 
anything in RFC2518 to allow that.

Anyway, it seems that we just have different opinions how easily a 
reader can be confused by the statement in question.

Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Thu Jul  8 14:30:26 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA16067
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 14:30:26 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 593CFA1CF0; Thu,  8 Jul 2004 14:30:26 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 24B65A1CF0
	for <w3c-dist-auth@listhub.w3.org>; Thu,  8 Jul 2004 14:30:24 -0400 (EDT)
Received: from mail-out4.apple.com ([17.254.13.23])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bidf5-0007Sl-Qe
	for w3c-dist-auth@w3.org; Thu, 08 Jul 2004 14:30:24 -0400
Received: from mailgate1.apple.com (a17-128-100-225.apple.com [17.128.100.225])
	by mail-out4.apple.com (8.12.11/8.12.11) with ESMTP id i68ITqBB002136
	for <w3c-dist-auth@w3.org>; Thu, 8 Jul 2004 11:29:52 -0700 (PDT)
Received: from relay2.apple.com (relay2.apple.com) by mailgate1.apple.com
 (Content Technologies SMTPRS 4.3.12) with ESMTP id <T6aaaed0202118064e1398@mailgate1.apple.com>;
 Thu, 8 Jul 2004 11:29:52 -0700
Received: from [17.207.15.105] (baumjo.apple.com [17.207.15.105])
	by relay2.apple.com (8.12.11/8.12.11) with ESMTP id i68ITZOS021790;
	Thu, 8 Jul 2004 11:29:36 -0700 (PDT)
In-Reply-To: <40EAFF8F.1090002@gmx.de>
References: <40EAFF8F.1090002@gmx.de>
Mime-Version: 1.0 (Apple Message framework v618)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <C2735D0A-D10C-11D8-A586-000393518B02@apple.com>
Content-Transfer-Encoding: 7bit
Cc: w3c-dist-auth@w3.org, Jason Crawford <ccjason@us.ibm.com>
From: John Baumgarten <jbaumgarten@apple.com>
Date: Thu, 8 Jul 2004 11:29:33 -0700
To: Julian Reschke <julian.reschke@gmx.de>
X-Mailer: Apple Mail (2.618)
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/C2735D0A-D10C-11D8-A586-000393518B02@apple.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8702
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708183026.593CFA1CF0@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 14:30:26 -0400 (EDT)
Content-Transfer-Encoding: 7bit


 From an implementer's viewpoint and one admittedly much less 
knowledgeable about specifications:

I found it much easier to translate the WebDAV specs into a programming 
architecture by classifying locks and ACEs as "associations".  Rather 
than fundamental objects (read "resources") associations are "tuple" 
(principal-action-resource) relationships between resources, with a 
relationship attribute set.

-Jake

JS Baumgarten
Apple .Mac Backend Server Engineering

+1-408-974-0043
jbaumgarten@apple.com
Loc: VG5-1045   MS: 82-EC
20605 Valley Green Dr, Cupertino CA 95014 USA
www.apple.com


On Jul 6, 2004, at 12:37 PM, Julian Reschke wrote:

>
> Jason Crawford wrote:
>> ...
>> I don't like us calling a lock a resource.
>> ...
>> The other paragraphs you included seem reasonable.
>
> I expected pushback on that wording; but I think it really makes 
> things clearer. Anything that has a URI *is* a resource (as per 
> RFC2396 definition). Saying that it is a resource with internal state 
> makes talking about it a lot simpler.
>
> So can you explain *why* you don't like that terminology?
>
> Best regards, Julian
>
> -- 
> <green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
>
>



From w3c-dist-auth-request@w3.org  Thu Jul  8 17:06:57 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA28424
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 17:06:56 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id DA447A0834; Thu,  8 Jul 2004 17:06:57 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 89857A0834
	for <w3c-dist-auth@listhub.w3.org>; Thu,  8 Jul 2004 17:06:52 -0400 (EDT)
Received: from e4.ny.us.ibm.com ([32.97.182.104])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Big6W-000127-CF
	for w3c-dist-auth@w3.org; Thu, 08 Jul 2004 17:06:52 -0400
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150])
	by e4.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i68L6LvR716126
	for <w3c-dist-auth@w3.org>; Thu, 8 Jul 2004 17:06:21 -0400
Received: from d01mc261.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216])
	by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i68L7UEA055268
	for <w3c-dist-auth@w3.org>; Thu, 8 Jul 2004 17:07:31 -0400
In-Reply-To: <OF335C7F92.D2E73FFE-ON85256ECB.004F8585-85256ECB.0057E684@us.ibm.com>
To: " webdav" <w3c-dist-auth@w3.org>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.0.2CF1 June 9, 2003
Message-ID: <OF0D255863.42C43E6F-ONC1256ECB.0073021A-C1256ECB.0073EFA5@us.ibm.com>
From: Geoffrey M Clemm <geoffrey.clemm@us.ibm.com>
Date: Thu, 8 Jul 2004 23:06:15 +0200
X-MIMETrack: Serialize by Router on D01MC261/01/M/IBM(Release 6.0.2CF2 HFB2|May 18, 2004) at
 07/08/2004 17:06:20,
	Serialize complete at 07/08/2004 17:06:20
Content-Type: multipart/alternative; boundary="=_alternative 0073EFA4C1256ECB_="
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/OF0D255863.42C43E6F-ONC1256ECB.0073021A-C1256ECB.0073EFA5@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8703
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708210657.DA447A0834@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 17:06:57 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 0073EFA4C1256ECB_=
Content-Type: text/plain; charset="US-ASCII"

Jason wrote on 07/08/2004 06:00:06 PM:

> Geoff wrote 
> > But I'm not wedded to the idea of calling a lock a resource, so maybe 
> > it would be simplest to just say: 
> > ---------------------------------------- 
> > 2.5 Status of a lock 
> >    A lock is identified by a URI (the lock token URI) but in general, 
it
> >    does not have a HTTP URL, and thus can not be directly manipulated 
using
> >    HTTP methods.  Instead, this specification defines the new methods
> >    LOCK (creating and refreshing locks, see Section 4) and UNLOCK
> >    (removing locks, see Section 5) that act indirectly on locks. 
> > ----------------------------------------- 
> > 
> > Since I believe this is the only section that refers to the 
"resourceness" 
> > of a lock, we can avoid the contention while keeping all the good 
stuff in 
> > the later paragraphs. 
> 
> I guess we'd have to see it in context, but if that's the only mention 
of 
> resourceness, that should be a significant improvement.  (Don't forget 
> to include the word "is" between lines 0 and 1.  :-)) 

The context is just the rest of the paragraphs of Julian's proposed
text, but I'll include it again below.  By "significant improvement",
do you mean "I now like it", or are there remaining problems that you
see in the proposed text (quoted below, with the first two sentences
changed to avoid calling a lock a resource):

-----------------------

2.5 Status of a lock 
    A lock is identified by a URI (the lock token URI) but in general, it
    does not have a HTTP URL, and thus can not be directly manipulated 
using
    HTTP methods.  Instead, this specification defines the new methods
    LOCK (creating and refreshing locks, see Section 4) and UNLOCK
    (removing locks, see Section 5) that act indirectly on locks. 

    A lock has state that can be indirectly observed by using the
    DAV:lockdiscovery property defined in Section 3.2.  At a minimum, the
    state of a lock consists of the items defined in the sections below.
    After lock creation, all parts of the state with the exception of the
    timeout value are immutable.

2.5.1  Lock Access Type

    At present, this specification only defines one lock access type, the
    "write" lock defined in Section xx.

2.5.2  Lock Scope

    A lock has either exclusive or shared scope (see Section 2.1).

2.5.3  Lock Root

    A lock is created as effect of a LOCK (creation) method request.  The
    lock root is the URL to which this request was adressed.

2.5.4  Lock Depth

    A "depth 0" lock only affects the resource to which the LOCK request
    was adressed to (the lock root).  This resource is said to be
    "directly locked" by the lock.

    On the other hand, a "depth infinity" lock on a collection
    additionally affects all members of that collection.  These resources
    are said to be "indirectly locked" by the lock.  A "depth infinity"
    lock on a non-collection resource behaves exactly the same way as a
    "depth 0" lock.

2.5.5  Lock Owner

    Clients can submit information about the lock owner when creating a
    lock.  This information should be sufficient for either directly
    contacting a principal (such as a telephone number or email URI), or
    for discovering the principal (such as the URL of a homepage).

    Owner information is kept with the lock so that it can be returned in
    the DAV:lockdiscovery property upon request.  Note that this
    information is entirely client-controlled, thus a server MUST store
    the information faithfully just like if it appeared in a WebDAV dead
    property (see [RFC2518], section 4).

2.5.6  Lock Timeout

    In general, a lock expires after a certain amount of time.  This time
    can be specified in the LOCK creation request (however servers are
    not required to honor this request).

    If the timeout expires then the lock may be lost.  Specifically, if
    the server wishes to harvest the lock upon time-out, the server
    SHOULD act as if an UNLOCK method was executed by the server on the
    resource using the lock token of the timed-out lock, performed with
    its override authority.  Thus logs should be updated with the
    disposition of the lock, notifications should be sent, etc., just as
    they would be for an UNLOCK request.

    The timers used for timeout expiry can be reset by the client by
    submitting a LOCK refresh request.

    Servers are advised to pay close attention to the values submitted by
    clients, as they will be indicative of the type of activity the
    client intends to perform.  For example, an applet running in a
    browser may need to lock a resource, but because of the instability
    of the environment within which the applet is running, the applet may
    be turned off without warning.  As a result, the applet is likely to
    ask for a relatively small timeout value so that if the applet dies,
    the lock can be quickly harvested.  However, a document management
    system is likely to ask for an extremely long timeout because its
    user may be planning on going off-line.

    A client MUST NOT assume that just because the time-out has expired
    the lock has been lost.  Clients MUST assume that locks may
    arbitrarily disappear at any time, regardless of the value given in
    the Timeout header.  The Timeout header only indicates the behavior
    of the server if "extraordinary" circumstances do not occur.  For
    example, an administrator may remove a lock at any time or the system
    may crash in such a way that it loses the record of the lock's
    existence.
-----------------------

Does anyone have any issues with this revised text?

Cheers,
Geoff


--=_alternative 0073EFA4C1256ECB_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2><tt>Jason wrote on 07/08/2004 06:00:06 PM:<br>
<br>
&gt; Geoff wrote <br>
&gt; &gt; But I'm not wedded to the idea of calling a lock a resource,
so maybe <br>
&gt; &gt; it would be simplest to just say: <br>
&gt; &gt; ---------------------------------------- <br>
&gt; &gt; 2.5 Status of a lock <br>
&gt; &gt; &nbsp; &nbsp;A lock is identified by a URI (the lock token URI)
but in general, it<br>
&gt; &gt; &nbsp; &nbsp;does not have a HTTP URL, and thus can not be directly
manipulated using<br>
&gt; &gt; &nbsp; &nbsp;HTTP methods. &nbsp;Instead, this specification
defines the new methods<br>
&gt; &gt; &nbsp; &nbsp;LOCK (creating and refreshing locks, see Section
4) and UNLOCK<br>
&gt; &gt; &nbsp; &nbsp;(removing locks, see Section 5) that act indirectly
on locks. <br>
&gt; &gt; ----------------------------------------- <br>
&gt; &gt; <br>
&gt; &gt; Since I believe this is the only section that refers to the &quot;resourceness&quot;
<br>
&gt; &gt; of a lock, we can avoid the contention while keeping all the
good stuff in <br>
&gt; &gt; the later paragraphs. <br>
&gt; <br>
&gt; I guess we'd have to see it in context, but if that's the only mention
of <br>
&gt; resourceness, that should be a significant improvement. &nbsp;(Don't
forget <br>
&gt; to include the word &quot;is&quot; between lines 0 and 1. &nbsp;:-))
<br>
</tt></font>
<br><font size=2><tt>The context is just the rest of the paragraphs of
Julian's proposed</tt></font>
<br><font size=2><tt>text, but I'll include it again below. &nbsp;By &quot;significant
improvement&quot;,</tt></font>
<br><font size=2><tt>do you mean &quot;I now like it&quot;, or are there
remaining problems that you</tt></font>
<br><font size=2><tt>see in the proposed text (quoted below, with the first
two sentences</tt></font>
<br><font size=2><tt>changed to avoid calling a lock a resource):</tt></font>
<br>
<br><font size=2><tt>-----------------------</tt></font>
<br>
<br><font size=2><tt>2.5 Status of a lock <br>
 &nbsp; &nbsp;A lock is identified by a URI (the lock token URI) but in
general, it<br>
 &nbsp; &nbsp;does not have a HTTP URL, and thus can not be directly manipulated
using<br>
 &nbsp; &nbsp;HTTP methods. &nbsp;Instead, this specification defines the
new methods<br>
 &nbsp; &nbsp;LOCK (creating and refreshing locks, see Section 4) and UNLOCK<br>
 &nbsp; &nbsp;(removing locks, see Section 5) that act indirectly on locks.
</tt></font>
<br><font size=2><tt><br>
 &nbsp; &nbsp;A lock has state that can be indirectly observed by using
the<br>
 &nbsp; &nbsp;DAV:lockdiscovery property defined in Section 3.2. &nbsp;At
a minimum, the<br>
 &nbsp; &nbsp;state of a lock consists of the items defined in the sections
below.<br>
 &nbsp; &nbsp;After lock creation, all parts of the state with the exception
of the<br>
 &nbsp; &nbsp;timeout value are immutable.<br>
<br>
2.5.1 &nbsp;Lock Access Type<br>
<br>
 &nbsp; &nbsp;At present, this specification only defines one lock access
type, the<br>
 &nbsp; &nbsp;&quot;write&quot; lock defined in Section xx.<br>
<br>
2.5.2 &nbsp;Lock Scope<br>
<br>
 &nbsp; &nbsp;A lock has either exclusive or shared scope (see Section
2.1).<br>
<br>
2.5.3 &nbsp;Lock Root<br>
<br>
 &nbsp; &nbsp;A lock is created as effect of a LOCK (creation) method request.
&nbsp;The<br>
 &nbsp; &nbsp;lock root is the URL to which this request was adressed.<br>
<br>
2.5.4 &nbsp;Lock Depth<br>
<br>
 &nbsp; &nbsp;A &quot;depth 0&quot; lock only affects the resource to which
the LOCK request<br>
 &nbsp; &nbsp;was adressed to (the lock root). &nbsp;This resource is said
to be<br>
 &nbsp; &nbsp;&quot;directly locked&quot; by the lock.<br>
<br>
 &nbsp; &nbsp;On the other hand, a &quot;depth infinity&quot; lock on a
collection<br>
 &nbsp; &nbsp;additionally affects all members of that collection. &nbsp;These
resources<br>
 &nbsp; &nbsp;are said to be &quot;indirectly locked&quot; by the lock.
&nbsp;A &quot;depth infinity&quot;<br>
 &nbsp; &nbsp;lock on a non-collection resource behaves exactly the same
way as a<br>
 &nbsp; &nbsp;&quot;depth 0&quot; lock.<br>
<br>
2.5.5 &nbsp;Lock Owner<br>
<br>
 &nbsp; &nbsp;Clients can submit information about the lock owner when
creating a<br>
 &nbsp; &nbsp;lock. &nbsp;This information should be sufficient for either
directly<br>
 &nbsp; &nbsp;contacting a principal (such as a telephone number or email
URI), or<br>
 &nbsp; &nbsp;for discovering the principal (such as the URL of a homepage).<br>
<br>
 &nbsp; &nbsp;Owner information is kept with the lock so that it can be
returned in<br>
 &nbsp; &nbsp;the DAV:lockdiscovery property upon request. &nbsp;Note that
this<br>
 &nbsp; &nbsp;information is entirely client-controlled, thus a server
MUST store<br>
 &nbsp; &nbsp;the information faithfully just like if it appeared in a
WebDAV dead<br>
 &nbsp; &nbsp;property (see [RFC2518], section 4).<br>
<br>
2.5.6 &nbsp;Lock Timeout<br>
<br>
 &nbsp; &nbsp;In general, a lock expires after a certain amount of time.
&nbsp;This time<br>
 &nbsp; &nbsp;can be specified in the LOCK creation request (however servers
are<br>
 &nbsp; &nbsp;not required to honor this request).<br>
<br>
 &nbsp; &nbsp;If the timeout expires then the lock may be lost. &nbsp;Specifically,
if<br>
 &nbsp; &nbsp;the server wishes to harvest the lock upon time-out, the
server<br>
 &nbsp; &nbsp;SHOULD act as if an UNLOCK method was executed by the server
on the<br>
 &nbsp; &nbsp;resource using the lock token of the timed-out lock, performed
with<br>
 &nbsp; &nbsp;its override authority. &nbsp;Thus logs should be updated
with the<br>
 &nbsp; &nbsp;disposition of the lock, notifications should be sent, etc.,
just as<br>
 &nbsp; &nbsp;they would be for an UNLOCK request.<br>
<br>
 &nbsp; &nbsp;The timers used for timeout expiry can be reset by the client
by<br>
 &nbsp; &nbsp;submitting a LOCK refresh request.<br>
<br>
 &nbsp; &nbsp;Servers are advised to pay close attention to the values
submitted by<br>
 &nbsp; &nbsp;clients, as they will be indicative of the type of activity
the<br>
 &nbsp; &nbsp;client intends to perform. &nbsp;For example, an applet running
in a<br>
 &nbsp; &nbsp;browser may need to lock a resource, but because of the instability<br>
 &nbsp; &nbsp;of the environment within which the applet is running, the
applet may<br>
 &nbsp; &nbsp;be turned off without warning. &nbsp;As a result, the applet
is likely to<br>
 &nbsp; &nbsp;ask for a relatively small timeout value so that if the applet
dies,<br>
 &nbsp; &nbsp;the lock can be quickly harvested. &nbsp;However, a document
management<br>
 &nbsp; &nbsp;system is likely to ask for an extremely long timeout because
its<br>
 &nbsp; &nbsp;user may be planning on going off-line.<br>
<br>
 &nbsp; &nbsp;A client MUST NOT assume that just because the time-out has
expired<br>
 &nbsp; &nbsp;the lock has been lost. &nbsp;Clients MUST assume that locks
may<br>
 &nbsp; &nbsp;arbitrarily disappear at any time, regardless of the value
given in<br>
 &nbsp; &nbsp;the Timeout header. &nbsp;The Timeout header only indicates
the behavior<br>
 &nbsp; &nbsp;of the server if &quot;extraordinary&quot; circumstances
do not occur. &nbsp;For<br>
 &nbsp; &nbsp;example, an administrator may remove a lock at any time or
the system<br>
 &nbsp; &nbsp;may crash in such a way that it loses the record of the lock's<br>
 &nbsp; &nbsp;existence.<br>
-----------------------</tt></font>
<br>
<br><font size=2><tt>Does anyone have any issues with this revised text?</tt></font>
<br>
<br><font size=2><tt>Cheers,</tt></font>
<br><font size=2><tt>Geoff</tt></font>
<br>
<br>
--=_alternative 0073EFA4C1256ECB_=--



From w3c-dist-auth-request@w3.org  Thu Jul  8 18:35:11 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA09633
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 18:35:11 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 102BEA0F7C; Thu,  8 Jul 2004 18:35:14 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id E71B5A0F9E
	for <w3c-dist-auth@listhub.w3.org>; Thu,  8 Jul 2004 18:35:11 -0400 (EDT)
Received: from pop.gmx.de ([213.165.64.20] helo=mail.gmx.net)
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BihTz-00044B-KY
	for w3c-dist-auth@w3.org; Thu, 08 Jul 2004 18:35:11 -0400
Received: (qmail 10266 invoked by uid 65534); 8 Jul 2004 22:34:39 -0000
Received: from pD9535BF9.dip.t-dialin.net (EHLO [192.168.0.2]) (217.83.91.249)
  by mail.gmx.net (mp024) with SMTP; 09 Jul 2004 00:34:39 +0200
X-Authenticated: #1915285
Message-ID: <40EDCBFA.6060409@gmx.de>
Date: Fri, 09 Jul 2004 00:34:34 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Geoffrey M Clemm <geoffrey.clemm@us.ibm.com>
Cc: webdav <w3c-dist-auth@w3.org>
References: <OF0D255863.42C43E6F-ONC1256ECB.0073021A-C1256ECB.0073EFA5@us.ibm.com>
In-Reply-To: <OF0D255863.42C43E6F-ONC1256ECB.0073021A-C1256ECB.0073EFA5@us.ibm.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/40EDCBFA.6060409@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8704
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708223514.102BEA0F7C@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 18:35:14 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Geoffrey M Clemm wrote:

> ...
> The context is just the rest of the paragraphs of Julian's proposed
> text, but I'll include it again below.  By "significant improvement",
> do you mean "I now like it", or are there remaining problems that you
> see in the proposed text (quoted below, with the first two sentences
> changed to avoid calling a lock a resource):
> 
> -----------------------
> 
> 2.5 Status of a lock
>    A lock is identified by a URI (the lock token URI) but in general, it
>    does not have a HTTP URL, and thus can not be directly manipulated using
>    HTTP methods.  Instead, this specification defines the new methods
>    LOCK (creating and refreshing locks, see Section 4) and UNLOCK
>    (removing locks, see Section 5) that act indirectly on locks.
> 
>    A lock has state that can be indirectly observed by using the
>    DAV:lockdiscovery property defined in Section 3.2.  At a minimum, the
>    state of a lock consists of the items defined in the sections below.
>    After lock creation, all parts of the state with the exception of the
>    timeout value are immutable.
> 
> ...
> 
> Does anyone have any issues with this revised text?

I just updated my draft accordingly.

Note that the purpose of this proposal was *not* to start a discussion 
about the resource-ness of locks, but to collect information about the 
state a lock has into a single place. That was mainly caused by the 
observation that RFC2518 spreads lots of information about things like 
owner and timeout information across the document, making it hard to 
find a definitive summary. *Having* that summary allows to remove 
significant amounts of text from other places (where they IMHO shouldn't 
have been in the first place).

Best regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Thu Jul  8 18:43:09 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA09994
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 18:43:09 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id B2A92A0F9D; Thu,  8 Jul 2004 18:43:11 -0400 (EDT)
X-Original-To: w3c-dist-auth@frink.w3.org
Delivered-To: w3c-dist-auth@frink.w3.org
Received: from inet-mail1.oracle.com (inet-mail1.oracle.com [148.87.2.201])
	by frink.w3.org (Postfix) with ESMTP id 41C68A0F9D
	for <w3c-dist-auth@frink.w3.org>; Thu,  8 Jul 2004 18:43:10 -0400 (EDT)
Received: from rgmgw2.us.oracle.com (rgmgw2.us.oracle.com [138.1.191.11])
	by inet-mail1.oracle.com (Switch-3.1.4/Switch-3.1.0) with ESMTP id i68MiVwn005874;
	Thu, 8 Jul 2004 15:44:34 -0700 (PDT)
Received: from rgmgw2.us.oracle.com (localhost [127.0.0.1])
	by rgmgw2.us.oracle.com (Switch-3.1.4/Switch-3.1.0) with ESMTP id i68MguNM013611;
	Thu, 8 Jul 2004 16:42:56 -0600
Received: from esedlarlap1 (dhcp-4op7-4op8-west-130-35-170-32.us.oracle.com [130.35.170.32])
	by rgmgw2.us.oracle.com (Switch-3.1.4/Switch-3.1.0) with SMTP id i68MgtKR013592;
	Thu, 8 Jul 2004 16:42:55 -0600
Message-ID: <035b01c4653c$dfd61950$20aa2382@us.oracle.com>
From: "Eric Sedlar" <eric.sedlar@oracle.com>
To: <w3c-dist-auth@frink.w3.org>, "Frank Lowney" <frank.lowney@mac.com>
References: <p06110403bd10512fc23a@[168.16.213.98]> <p06110406bd1310a1a1b7@[168.16.213.98]>
Date: Thu, 8 Jul 2004 15:42:39 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
Subject: Re: WindowsXP and double login challenges
X-Archived-At: http://www.w3.org/mid/035b01c4653c$dfd61950$20aa2382@us.oracle.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8705
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708224311.B2A92A0F9D@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 18:43:11 -0400 (EDT)
Content-Transfer-Encoding: 7bit


This is basically a Microsoft problem not a WebDAV problem, which is why you
haven't gotten a response from a standards group.  Authentication isn't
actually addressed in WebDAV either, but uses the HTTP stuff.

The workaround I know of is that some vendors are including their
authentication information in a cookie, which takes advantage of the fact
that some of the Microsoft clients share the authentication information in
the local cookie cache, whereas the HTTP authentication information is not.

--Eric

----- Original Message ----- 
From: "Frank Lowney" <frank.lowney@mac.com>
To: <w3c-dist-auth@frink.w3.org>
Sent: Thursday, July 08, 2004 8:07 AM
Subject: Re: WindowsXP and double login challenges


>
> It's great to see that the WebDAV protocol is relentlessly advancing but,
as someone who is trying to get end users to embrace it over older, more
established methods, I have to wonder whether the basic aspects of the
protocol work well enough to assure a level of acceptance sufficient to
sustain the momentum.
>
> Take, for example, the query I posted here a week or so ago (quoted
below).  While it's difficult to definitively interpret a non-response, they
tend to be interpreted as: yes, that's a problem but there is no solution or
workaround.
>
> So, if that is the case with Win2K / WinXP Network Places access to a wide
range of WebDAV-enabled servers where end users first and continuing
experience with WebDAV is a double login challenge, we should not be
surprised to learn that these end users are reluctant to consider change.
>
>
> >We are currently working with three WebDAV-enabled servers as follows:
> >
> >WebSTAR V v.5.3.2 on MacOS X 10.3.4
> >
> >Apache on MacOS X Server 10.3.4
> >
> >BEA Weblogic (supporting WebCT Vista) on Solaris.
> >
> >Using WindowsXP & 'My Network Places,' we and our various clients and
other constituencies are consistently seeing a "double login challenge" in
all three cases. We don't see this issue on Win2K Pro or MacOS X.
> >
> >First, can anyone confirm that this is a "Microsoft not following
standards again" issue?
> >
> >Second, can anyone suggest a work around that will unburden WinXP WebDAV
users from the necessity of meeting this challenge twice?
> >
> >Thanks for any light shed on this issue.
>
>
> -- 
> =====================================================================
> Dr. Frank Lowney  frank.lowney@gcsu.edu
>     Director, Electronic Instructional Services, a unit of the
>     Office of Information and Instructional Technology,
>     Professional Pages: http://www.gcsu.edu/oiit/eis/
>     Personal Pages: http://www.faculty.de.gcsu.edu/~flowney
> Voice: (478) 445-5260
> NOTICE: Please be advised that I am hearing impaired and communicate most
effectively via e-mail.  Follow-up summaries of telephone conversations by
e-mail are most appreciated.
> =====================================================================
> We don't make instruction effective, we make effective instruction more
accessible.
>
>



From w3c-dist-auth-request@w3.org  Thu Jul  8 19:12:00 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA12594
	for <webdav-archive@lists.ietf.org>; Thu, 8 Jul 2004 19:12:00 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 9FCD8A0526; Thu,  8 Jul 2004 19:12:02 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 1BAC4A0549
	for <w3c-dist-auth@listhub.w3.org>; Thu,  8 Jul 2004 19:12:00 -0400 (EDT)
Received: from e1.ny.us.ibm.com ([32.97.182.101])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bii3c-0001tf-2X
	for w3c-dist-auth@w3.org; Thu, 08 Jul 2004 19:12:00 -0400
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150])
	by e1.ny.us.ibm.com (8.12.10/NS PXFA) with ESMTP id i68NBTQE066270
	for <w3c-dist-auth@w3.org>; Thu, 8 Jul 2004 19:11:29 -0400
Received: from d01mc261.pok.ibm.com (d01av04.pok.ibm.com [9.56.224.64])
	by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i68NCcEA104294
	for <w3c-dist-auth@w3.org>; Thu, 8 Jul 2004 19:12:38 -0400
In-Reply-To: <035b01c4653c$dfd61950$20aa2382@us.oracle.com>
To: " webdav" <w3c-dist-auth@w3.org>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.0.2CF1 June 9, 2003
Message-ID: <OF566C3D27.2F8655AD-ONC1256ECB.007E725D-C1256ECB.007F64EE@us.ibm.com>
From: Geoffrey M Clemm <geoffrey.clemm@us.ibm.com>
Date: Fri, 9 Jul 2004 01:11:24 +0200
X-MIMETrack: Serialize by Router on D01MC261/01/M/IBM(Release 6.0.2CF2 HFB2|May 18, 2004) at
 07/08/2004 19:11:27,
	Serialize complete at 07/08/2004 19:11:27
Content-Type: multipart/alternative; boundary="=_alternative 007F64EDC1256ECB_="
Subject: Re: WindowsXP and double login challenges
X-Archived-At: http://www.w3.org/mid/OF566C3D27.2F8655AD-ONC1256ECB.007E725D-C1256ECB.007F64EE@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8706
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040708231202.9FCD8A0526@frink.w3.org>
Resent-Date: Thu,  8 Jul 2004 19:12:02 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 007F64EDC1256ECB_=
Content-Type: text/plain; charset="US-ASCII"

Just FYI, I did run across a workaround to one of the bugs in the
WindowsXP WebDAV implementation.

In particular, if I try to create a web folder by double clicking
on "Add a network place" in the "My Network Places" folder,
the wizard fails when it gets to the authentication step,
where the symptoms are that it replaces your login name "foo"
with "www.whatever.org\foo" where www.whatever.org is the site
of the webdav location you were trying to link to.

But if you fire up Word, and then do a "File: Open" command, and
select "My Network Places" and then double click on the
"Add a network place" entry in that folder, it fires up a
slightly different wizard, which does not have the bug.

Now how long will it take before Word is "fixed" to activate
the buggy wizard instead?  (:-).

Cheers,
Geoff


Eric wrote on 07/09/2004 12:42:39 AM:

> This is basically a Microsoft problem not a WebDAV problem, which is why 
you
> haven't gotten a response from a standards group.  Authentication isn't
> actually addressed in WebDAV either, but uses the HTTP stuff.
> 
> The workaround I know of is that some vendors are including their
> authentication information in a cookie, which takes advantage of the 
fact
> that some of the Microsoft clients share the authentication information 
in
> the local cookie cache, whereas the HTTP authentication information is 
not.
> 
> ----- Original Message ----- 
> From: "Frank Lowney" <frank.lowney@mac.com>
> To: <w3c-dist-auth@frink.w3.org>
> Sent: Thursday, July 08, 2004 8:07 AM
> Subject: Re: WindowsXP and double login challenges
> 
> 
> >
> > It's great to see that the WebDAV protocol is relentlessly advancing 
but,
> as someone who is trying to get end users to embrace it over older, more
> established methods, I have to wonder whether the basic aspects of the
> protocol work well enough to assure a level of acceptance sufficient to
> sustain the momentum.
> >
> > Take, for example, the query I posted here a week or so ago (quoted
> below).  While it's difficult to definitively interpret a non-response, 
they
> tend to be interpreted as: yes, that's a problem but there is no 
solution or
> workaround.
> >
> > So, if that is the case with Win2K / WinXP Network Places access to a 
wide
> range of WebDAV-enabled servers where end users first and continuing
> experience with WebDAV is a double login challenge, we should not be
> surprised to learn that these end users are reluctant to consider 
change.
> >
> >
> > >We are currently working with three WebDAV-enabled servers as 
follows:
> > >
> > >WebSTAR V v.5.3.2 on MacOS X 10.3.4
> > >
> > >Apache on MacOS X Server 10.3.4
> > >
> > >BEA Weblogic (supporting WebCT Vista) on Solaris.
> > >
> > >Using WindowsXP & 'My Network Places,' we and our various clients and
> other constituencies are consistently seeing a "double login challenge" 
in
> all three cases. We don't see this issue on Win2K Pro or MacOS X.
> > >
> > >First, can anyone confirm that this is a "Microsoft not following
> standards again" issue?
> > >
> > >Second, can anyone suggest a work around that will unburden WinXP 
WebDAV
> users from the necessity of meeting this challenge twice?
> > >
> > >Thanks for any light shed on this issue.
> >
> >
> > -- 
> > =====================================================================
> > Dr. Frank Lowney  frank.lowney@gcsu.edu
> >     Director, Electronic Instructional Services, a unit of the
> >     Office of Information and Instructional Technology,
> >     Professional Pages: http://www.gcsu.edu/oiit/eis/
> >     Personal Pages: http://www.faculty.de.gcsu.edu/~flowney
> > Voice: (478) 445-5260
> > NOTICE: Please be advised that I am hearing impaired and communicate 
most
> effectively via e-mail.  Follow-up summaries of telephone conversations 
by
> e-mail are most appreciated.
> > =====================================================================
> > We don't make instruction effective, we make effective instruction 
more
> accessible.
> >
> >
> 

--=_alternative 007F64EDC1256ECB_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2><tt>Just FYI, I did run across a workaround to one of
the bugs in the</tt></font>
<br><font size=2><tt>WindowsXP WebDAV implementation.</tt></font>
<br>
<br><font size=2><tt>In particular, if I try to create a web folder by
double clicking</tt></font>
<br><font size=2><tt>on &quot;Add a network place&quot; in the &quot;My
Network Places&quot; folder,</tt></font>
<br><font size=2><tt>the wizard fails when it gets to the authentication
step,</tt></font>
<br><font size=2><tt>where the symptoms are that it replaces your login
name &quot;foo&quot;</tt></font>
<br><font size=2><tt>with &quot;www.whatever.org\foo&quot; where www.whatever.org
is the site</tt></font>
<br><font size=2><tt>of the webdav location you were trying to link to.</tt></font>
<br>
<br><font size=2><tt>But if you fire up Word, and then do a &quot;File:
Open&quot; command, and</tt></font>
<br><font size=2><tt>select &quot;My Network Places&quot; and then double
click on the</tt></font>
<br><font size=2><tt>&quot;Add a network place&quot; entry in that folder,
it fires up a</tt></font>
<br><font size=2><tt>slightly different wizard, which does not have the
bug.</tt></font>
<br>
<br><font size=2><tt>Now how long will it take before Word is &quot;fixed&quot;
to activate</tt></font>
<br><font size=2><tt>the buggy wizard instead? &nbsp;(:-).</tt></font>
<br>
<br><font size=2><tt>Cheers,<br>
Geoff</tt></font>
<br>
<br>
<br><font size=2><tt>Eric wrote on 07/09/2004 12:42:39 AM:<br>
<br>
&gt; This is basically a Microsoft problem not a WebDAV problem, which
is why you<br>
&gt; haven't gotten a response from a standards group. &nbsp;Authentication
isn't<br>
&gt; actually addressed in WebDAV either, but uses the HTTP stuff.<br>
&gt; <br>
&gt; The workaround I know of is that some vendors are including their<br>
&gt; authentication information in a cookie, which takes advantage of the
fact<br>
&gt; that some of the Microsoft clients share the authentication information
in<br>
&gt; the local cookie cache, whereas the HTTP authentication information
is not.<br>
&gt; <br>
&gt; ----- Original Message ----- <br>
&gt; From: &quot;Frank Lowney&quot; &lt;frank.lowney@mac.com&gt;<br>
&gt; To: &lt;w3c-dist-auth@frink.w3.org&gt;<br>
&gt; Sent: Thursday, July 08, 2004 8:07 AM<br>
&gt; Subject: Re: WindowsXP and double login challenges<br>
&gt; <br>
&gt; <br>
&gt; &gt;<br>
&gt; &gt; It's great to see that the WebDAV protocol is relentlessly advancing
but,<br>
&gt; as someone who is trying to get end users to embrace it over older,
more<br>
&gt; established methods, I have to wonder whether the basic aspects of
the<br>
&gt; protocol work well enough to assure a level of acceptance sufficient
to<br>
&gt; sustain the momentum.<br>
&gt; &gt;<br>
&gt; &gt; Take, for example, the query I posted here a week or so ago (quoted<br>
&gt; below). &nbsp;While it's difficult to definitively interpret a non-response,
they<br>
&gt; tend to be interpreted as: yes, that's a problem but there is no solution
or<br>
&gt; workaround.<br>
&gt; &gt;<br>
&gt; &gt; So, if that is the case with Win2K / WinXP Network Places access
to a wide<br>
&gt; range of WebDAV-enabled servers where end users first and continuing<br>
&gt; experience with WebDAV is a double login challenge, we should not
be<br>
&gt; surprised to learn that these end users are reluctant to consider
change.<br>
&gt; &gt;<br>
&gt; &gt;<br>
&gt; &gt; &gt;We are currently working with three WebDAV-enabled servers
as follows:<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;WebSTAR V v.5.3.2 on MacOS X 10.3.4<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;Apache on MacOS X Server 10.3.4<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;BEA Weblogic (supporting WebCT Vista) on Solaris.<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;Using WindowsXP &amp; 'My Network Places,' we and our various
clients and<br>
&gt; other constituencies are consistently seeing a &quot;double login
challenge&quot; in<br>
&gt; all three cases. We don't see this issue on Win2K Pro or MacOS X.<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;First, can anyone confirm that this is a &quot;Microsoft
not following<br>
&gt; standards again&quot; issue?<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;Second, can anyone suggest a work around that will unburden
WinXP WebDAV<br>
&gt; users from the necessity of meeting this challenge twice?<br>
&gt; &gt; &gt;<br>
&gt; &gt; &gt;Thanks for any light shed on this issue.<br>
&gt; &gt;<br>
&gt; &gt;<br>
&gt; &gt; -- <br>
&gt; &gt; =====================================================================<br>
&gt; &gt; Dr. Frank Lowney &nbsp;frank.lowney@gcsu.edu<br>
&gt; &gt; &nbsp; &nbsp; Director, Electronic Instructional Services, a
unit of the<br>
&gt; &gt; &nbsp; &nbsp; Office of Information and Instructional Technology,<br>
&gt; &gt; &nbsp; &nbsp; Professional Pages: http://www.gcsu.edu/oiit/eis/<br>
&gt; &gt; &nbsp; &nbsp; Personal Pages: http://www.faculty.de.gcsu.edu/~flowney<br>
&gt; &gt; Voice: (478) 445-5260<br>
&gt; &gt; NOTICE: Please be advised that I am hearing impaired and communicate
most<br>
&gt; effectively via e-mail. &nbsp;Follow-up summaries of telephone conversations
by<br>
&gt; e-mail are most appreciated.<br>
&gt; &gt; =====================================================================<br>
&gt; &gt; We don't make instruction effective, we make effective instruction
more<br>
&gt; accessible.<br>
&gt; &gt;<br>
&gt; &gt;<br>
&gt; <br>
</tt></font>
--=_alternative 007F64EDC1256ECB_=--



From w3c-dist-auth-request@w3.org  Fri Jul  9 00:22:24 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA16256
	for <webdav-archive@lists.ietf.org>; Fri, 9 Jul 2004 00:22:23 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 40B9DA1679; Fri,  9 Jul 2004 00:22:25 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 17BF7A188E
	for <w3c-dist-auth@listhub.w3.org>; Fri,  9 Jul 2004 00:22:22 -0400 (EDT)
Received: from bibcock.seagull.net ([67.136.24.240] helo=bandage.seagull.net)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bimtx-00026d-WD
	for w3c-dist-auth@w3.org; Fri, 09 Jul 2004 00:22:22 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i694MICt001942 sender ccjason@us.ibm.com for w3c-dist-auth@w3.org; Thu, 8 Jul 2004 21:22:18 -0700
Received: from e1.ny.us.ibm.com (e1.ny.us.ibm.com [32.97.182.101]) by bandage.seagull.net (8.12.10) with ESMTP id i694MEY2001452 sender ccjason@us.ibm.com; Thu, 8 Jul 2004 21:22:15 -0700
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150]) by e1.ny.us.ibm.com (8.12.10/NS PXFA) with ESMTP id i694M3QE445904; Fri, 9 Jul 2004 00:22:03 -0400
Received: from d01ml604.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i694NCEA117118; Fri, 9 Jul 2004 00:23:13 -0400
To: " webdav" <nnw3c-dist-auth___at___w3.org@smallcue.com>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 5.0.11   July 24, 2002
From: Jason Crawford <ccjason@us.ibm.com>
Message-ID: <OFFDE790A2.B2D88173-ON85256ECC.001787EF-85256ECC.0017FC45@us.ibm.com>
Date: Fri, 9 Jul 2004 00:21:58 -0400
X-MIMETrack: Serialize by Router on D01ML604/01/M/IBM(Release 6.51HF339 | June 21, 2004) at 07/09/2004 00:22:03, Serialize complete at 07/09/2004 00:22:03
Content-Type: multipart/alternative; boundary="=_alternative 0017A08C85256ECC_="
Subject: Re: new proposed text for locking overview
X-Archived-At: http://www.w3.org/mid/OFFDE790A2.B2D88173-ON85256ECC.001787EF-85256ECC.0017FC45@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8707
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040709042225.40B9DA1679@frink.w3.org>
Resent-Date: Fri,  9 Jul 2004 00:22:25 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 0017A08C85256ECC_=
Content-Type: text/plain; charset="us-ascii"

I approve of Geoff's suggestions which Julian says he's already added.



--=_alternative 0017A08C85256ECC_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="sans-serif">I approve of Geoff's suggestions which Julian says he's already added.</font>
<br>
<br>
<br>
--=_alternative 0017A08C85256ECC_=--



From w3c-dist-auth-request@w3.org  Fri Jul  9 16:11:47 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA26845
	for <webdav-archive@lists.ietf.org>; Fri, 9 Jul 2004 16:11:46 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 91655A13BE; Fri,  9 Jul 2004 16:11:48 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 12166A13BE
	for <w3c-dist-auth@listhub.w3.org>; Fri,  9 Jul 2004 16:11:44 -0400 (EDT)
Received: from pop.gmx.de ([213.165.64.20] helo=mail.gmx.net)
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1Bj1ih-0006cf-Tj
	for w3c-dist-auth@w3c.org; Fri, 09 Jul 2004 16:11:44 -0400
Received: (qmail 3698 invoked by uid 65534); 9 Jul 2004 20:11:12 -0000
Received: from pD9535BF9.dip.t-dialin.net (EHLO [192.168.0.2]) (217.83.91.249)
  by mail.gmx.net (mp024) with SMTP; 09 Jul 2004 22:11:12 +0200
X-Authenticated: #1915285
Message-ID: <40EEFBDA.6030805@gmx.de>
Date: Fri, 09 Jul 2004 22:11:06 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: "'Webdav WG'" <w3c-dist-auth@w3c.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Request for feedback: WebDAV property datatype draft
X-Archived-At: http://www.w3.org/mid/40EEFBDA.6030805@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8708
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040709201148.91655A13BE@frink.w3.org>
Resent-Date: Fri,  9 Jul 2004 16:11:48 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Hi,

we (greenbytes & SAP) have been working with typed WebDAV property 
values for quite some time now. The Internet Draft describing the 
extension has been stable for a long time, the recent changes describing 
mostly optional features such as:

- some per-property flags (protected, hidden)
- property displaynames
- WebDAV SEARCH operators for multivalued properties

Recently I learned that another well-known server vendor (Xythos) is 
going to support the basic parts of the protocol as well.

We have dicussed making the draft a working group deliverably several 
times now (I think last time in spring '2003). As far as I can tell, 
many of us did agree that we should do this, but there has been 
disagreement about the scope (many would like to see property schemas, 
discovery of types, and so on...). Although all these things are 
interesting, they are *hard* to define and to get consensus on. On the 
other hand, the base protocol itself is simple and can exist even in the 
absence of schemas, resource types and other extensions.

Given the time constraints (as a community) that we apparently have, it 
IMHO makes sense to publish an RFC about those things that are already 
well understood and implemented by multiple parties; and then leave all 
the other interesting stuff for future developments (maybe we can get 
back to that once we have RFC2518bis, BIND, REDIRECT and possibly 
LOCKING out of the door).

Therefore I'd like to propose to take
	<http://greenbytes.de/tech/webdav/draft-reschke-webdav-property-datatypes-latest.html>

as a base, removing all nice-to-have-but-non-essential features that 
were added since

<http://greenbytes.de/tech/webdav/draft-reschke-webdav-property-datatypes-02.html>

(being the aforementioned property flags, displaynames, and SEARCH 
operators) and publish this as an "experimental" RFC.

It would be nice if the working group would adopt it; but it's not 
really essential.  Otherwise, publishing it as a private submission as 
"informational" RFC would make a lot of sense (after all, it's a useful 
addition to WebDAV properties, and there already exist independant 
implementations).  Note that in this case, the IETF is going to come 
back to the working group and it's chairs asking whether this 
specification collides with possibly ongoing working group activities; 
thus we should discuss this before; see RFC2026, section 4.2.1).


Best regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Fri Jul  9 16:24:22 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA27584
	for <webdav-archive@lists.ietf.org>; Fri, 9 Jul 2004 16:24:21 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 49097A190F; Fri,  9 Jul 2004 16:24:23 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id DD9EAA19A9
	for <w3c-dist-auth@listhub.w3.org>; Fri,  9 Jul 2004 16:24:20 -0400 (EDT)
Received: from kahuna.osafoundation.org ([204.152.186.98])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bj1uu-00007D-R1
	for w3c-dist-auth@w3c.org; Fri, 09 Jul 2004 16:24:21 -0400
Old-X-Envelope-From: lisa@osafoundation.org
Old-X-Envelope-To: w3c-dist-auth@w3c.org
Received: from [192.168.1.100] ([198.144.201.116])
	(authenticated bits=0)
	by kahuna.osafoundation.org (8.12.8/8.12.8) with ESMTP id i69KO9JL002803
	(version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO);
	Fri, 9 Jul 2004 13:24:11 -0700
In-Reply-To: <40EEFBDA.6030805@gmx.de>
References: <40EEFBDA.6030805@gmx.de>
Mime-Version: 1.0 (Apple Message framework v618)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <EB45DE15-D1E5-11D8-B746-000A95B2BB72@osafoundation.org>
Content-Transfer-Encoding: 7bit
Cc: "'Webdav WG'" <w3c-dist-auth@w3c.org>
From: Lisa Dusseault <lisa@osafoundation.org>
Date: Fri, 9 Jul 2004 13:24:03 -0700
To: Julian Reschke <julian.reschke@gmx.de>
X-Mailer: Apple Mail (2.618)
X-Scanned-By: MIMEDefang 2.39
Subject: Re: Request for feedback: WebDAV property datatype draft
X-Archived-At: http://www.w3.org/mid/EB45DE15-D1E5-11D8-B746-000A95B2BB72@osafoundation.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8709
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040709202423.49097A190F@frink.w3.org>
Resent-Date: Fri,  9 Jul 2004 16:24:23 -0400 (EDT)
Content-Transfer-Encoding: 7bit


As an OSAF person, I'd like to help out on the datatypes draft because  
we'd like to use multi-value properties at least.  However, as chair, I  
do not believe that this working group has the energy to take on  
another official draft as it may not even complete its existing drafts.  
  There are some energetic people but it's not adding up to sufficient  
input to deal with consensus problems.

I welcome more input on this but keep in mind the participation issue.   
Also don't forget that a new WG can be started and have a good chance  
of drumming up more support, more volunteers.

Lisa

On Jul 9, 2004, at 1:11 PM, Julian Reschke wrote:

>
> Hi,
>
> we (greenbytes & SAP) have been working with typed WebDAV property  
> values for quite some time now. The Internet Draft describing the  
> extension has been stable for a long time, the recent changes  
> describing mostly optional features such as:
>
> - some per-property flags (protected, hidden)
> - property displaynames
> - WebDAV SEARCH operators for multivalued properties
>
> Recently I learned that another well-known server vendor (Xythos) is  
> going to support the basic parts of the protocol as well.
>
> We have dicussed making the draft a working group deliverably several  
> times now (I think last time in spring '2003). As far as I can tell,  
> many of us did agree that we should do this, but there has been  
> disagreement about the scope (many would like to see property schemas,  
> discovery of types, and so on...). Although all these things are  
> interesting, they are *hard* to define and to get consensus on. On the  
> other hand, the base protocol itself is simple and can exist even in  
> the absence of schemas, resource types and other extensions.
>
> Given the time constraints (as a community) that we apparently have,  
> it IMHO makes sense to publish an RFC about those things that are  
> already well understood and implemented by multiple parties; and then  
> leave all the other interesting stuff for future developments (maybe  
> we can get back to that once we have RFC2518bis, BIND, REDIRECT and  
> possibly LOCKING out of the door).
>
> Therefore I'd like to propose to take
> 	<http://greenbytes.de/tech/webdav/draft-reschke-webdav-property- 
> datatypes-latest.html>
>
> as a base, removing all nice-to-have-but-non-essential features that  
> were added since
>
> <http://greenbytes.de/tech/webdav/draft-reschke-webdav-property- 
> datatypes-02.html>
>
> (being the aforementioned property flags, displaynames, and SEARCH  
> operators) and publish this as an "experimental" RFC.
>
> It would be nice if the working group would adopt it; but it's not  
> really essential.  Otherwise, publishing it as a private submission as  
> "informational" RFC would make a lot of sense (after all, it's a  
> useful addition to WebDAV properties, and there already exist  
> independant implementations).  Note that in this case, the IETF is  
> going to come back to the working group and it's chairs asking whether  
> this specification collides with possibly ongoing working group  
> activities; thus we should discuss this before; see RFC2026, section  
> 4.2.1).
>
>
> Best regards, Julian
>
> -- 
> <green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
>



From w3c-dist-auth-request@w3.org  Sat Jul 10 05:16:37 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA00607
	for <webdav-archive@lists.ietf.org>; Sat, 10 Jul 2004 05:16:37 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id B9EEEA181B; Sat, 10 Jul 2004 05:16:37 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 22FCCA1823
	for <w3c-dist-auth@listhub.w3.org>; Sat, 10 Jul 2004 05:16:34 -0400 (EDT)
Received: from mail.gmx.de ([213.165.64.20] helo=mail.gmx.net)
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BjDyE-0004XE-0g
	for w3c-dist-auth@w3.org; Sat, 10 Jul 2004 05:16:34 -0400
Received: (qmail 29546 invoked by uid 65534); 10 Jul 2004 09:16:01 -0000
Received: from pD9535754.dip.t-dialin.net (EHLO [192.168.0.2]) (217.83.87.84)
  by mail.gmx.net (mp020) with SMTP; 10 Jul 2004 11:16:01 +0200
X-Authenticated: #1915285
Message-ID: <40EFB3CD.2050301@gmx.de>
Date: Sat, 10 Jul 2004 11:15:57 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: WebDAV <w3c-dist-auth@w3.org>
Cc: Lisa Dusseault <lisa@osafoundation.org>
References: <202D1728-CF73-11D8-8333-000A95B2BB72@osafoundation.org>
In-Reply-To: <202D1728-CF73-11D8-8333-000A95B2BB72@osafoundation.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: Call for consensus on UNLOCK Request-URI being lock root
X-Archived-At: http://www.w3.org/mid/40EFB3CD.2050301@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8710
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040710091637.B9EEEA181B@frink.w3.org>
Resent-Date: Sat, 10 Jul 2004 05:16:37 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Lisa Dusseault wrote:

> I thought a little more about exactly how the redirect would work and 
> there's a number of options, none of them very good.  I think this is 
> moot since we seem to prefer #1 accepting the UNLOCK request even on the 
> "wrong" URL, but a little discussion anyhow...
> ...

OK, I think we clearly have reached consensus to allow clients to 
specify an indirectly locked resource in UNLOCK requests. This is because

- this is what servers do implement,
- what the issues list already mentioned as resolution for issue 65 
(UNLOCK_WHAT_URL) (<http://www.webdav.org/wg/rfcdev/issues.htm>)
- this is what GULP states after the changes discussed here some weeks 
ago 
(<http://lists.w3.org/Archives/Public/w3c-dist-auth/2004AprJun/0177.html>)

So please

- update the issues list accordingly (issue 
LOCKS_SHOULD_THEY_USE_AN_IF_HEADER_TO_VERIFY can be closed as well)
- revert the change in RFC2518bis-05, possibly only clarifying the 
original language

In 
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html>, 
I already say:

"The UNLOCK method removes the lock identified by the lock token in the 
Lock-Token request header from the resource identified by the 
Request-URI, and all other resources included in the lock. Note that the 
UNLOCK request may be submitted to any resource locked by that lock 
(even those that are locked indirectly)."

I'll also mark the issue 
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-issues.html#063_LOCKS_SHOULD_THEY_USE_AN_IF_HEADER_TO_VERIFY> 
closed.

Best regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Sat Jul 10 08:48:38 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA11428
	for <webdav-archive@lists.ietf.org>; Sat, 10 Jul 2004 08:48:38 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 387EBA0CD9; Sat, 10 Jul 2004 08:48:37 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 5FA29A0CD9
	for <w3c-dist-auth@listhub.w3.org>; Sat, 10 Jul 2004 08:48:35 -0400 (EDT)
Received: from imap.gmx.net ([213.165.64.20] helo=mail.gmx.net)
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BjHHP-0004KW-32
	for w3c-dist-auth@w3c.org; Sat, 10 Jul 2004 08:48:35 -0400
Received: (qmail 25539 invoked by uid 65534); 10 Jul 2004 12:48:03 -0000
Received: from p508244AA.dip0.t-ipconnect.de (EHLO [192.168.1.17]) (80.130.68.170)
  by mail.gmx.net (mp018) with SMTP; 10 Jul 2004 14:48:03 +0200
X-Authenticated: #1915285
Message-ID: <40EFE580.8090001@gmx.de>
Date: Sat, 10 Jul 2004 14:48:00 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Webdav WG <w3c-dist-auth@w3c.org>
References: <40D3402F.6000604@gmx.de>
In-Reply-To: <40D3402F.6000604@gmx.de>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: Issue #66: MUST_AN_IF_HEADER_CHECK_THE_ROOT_OF_URL
X-Archived-At: http://www.w3.org/mid/40EFE580.8090001@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8711
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040710124837.387EBA0CD9@frink.w3.org>
Resent-Date: Sat, 10 Jul 2004 08:48:37 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Julian Reschke wrote:
> ...
> 2) Keep our earlier statement -- basically clients MUST submit the lock 
> token with the URL of the lock root; and state that otherwise the 
> behaviour is server-defined (thus interoperable).
>  
> As 2) is what we discussed before, I think I prefer that point of view. 
> However, if people think we should explicitly allow 1), I'll happily 
> document that as well.
> ...

OK, I haven't seen any feedback except for Geoff C. who preferred 2) as 
well, so I'll resolve 
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.issue.066_MUST_AN_IF_HEADER_CHECK_THE_ROOT_OF_URL> 
accordingly.

Best regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Sat Jul 10 20:48:59 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA09413
	for <webdav-archive@lists.ietf.org>; Sat, 10 Jul 2004 20:48:59 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id E89F6A05A4; Sat, 10 Jul 2004 20:48:56 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 81DD0A05A4
	for <w3c-dist-auth@listhub.w3.org>; Sat, 10 Jul 2004 20:48:54 -0400 (EDT)
Received: from dsl081-100-205.den1.dsl.speakeasy.net ([64.81.100.205] helo=giles.cursive.net)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BjSWU-0006lP-72
	for w3c-dist-auth@w3.org; Sat, 10 Jul 2004 20:48:54 -0400
Received: from [68.240.117.6] ([68.240.117.6]) by giles.cursive.net over TLS secured channel with Microsoft SMTPSVC(5.0.2195.6713);
	 Sat, 10 Jul 2004 18:48:20 -0600
In-Reply-To: <BADE6896-C3A9-11D8-82D6-000A95B2BB72@osafoundation.org>
References: <40B20BBD.6070609@gmx.de> <DF782A84-C3A6-11D8-A549-000A95B2BB72@osafoundation.org> <40D71B55.7010603@gmx.de> <BADE6896-C3A9-11D8-82D6-000A95B2BB72@osafoundation.org>
Mime-Version: 1.0 (Apple Message framework v618)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <F8E4EFB7-D2D3-11D8-8864-000A959A17A6@cursive.net>
Content-Transfer-Encoding: 7bit
Cc: WebDAV <w3c-dist-auth@w3.org>
From: Joe Hildebrand <joe@cursive.net>
Date: Sat, 10 Jul 2004 18:48:06 -0600
To: Lisa Dusseault <lisa@osafoundation.org>
X-Mailer: Apple Mail (2.618)
X-OriginalArrivalTime: 11 Jul 2004 00:48:22.0935 (UTC) FILETIME=[C48ABA70:01C466E0]
Subject: Re: Call for consensus on UNLOCK Request-URI being lock root
X-Archived-At: http://www.w3.org/mid/F8E4EFB7-D2D3-11D8-8864-000A959A17A6@cursive.net
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8712
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040711004856.E89F6A05A4@frink.w3.org>
Resent-Date: Sat, 10 Jul 2004 20:48:56 -0400 (EDT)
Content-Transfer-Encoding: 7bit


July 6 has passed.  It looks to me like we have consensus on option 1,  
with the following reasons:

- This is what existing implementations do
- It's one possible way of reading 2518
- It doesn't conflict with other decisions that have already been made

I didn't see any objections to Lisa's proposed wording:

     The UNLOCK method identifies a lock to remove with the lock token in
     the Lock-Token request header.  The Request-URI MUST identify a
     resource within the scope of the lock.

Then later in the error code information for UNLOCK:

     400 (Bad Request) - No lock token was provided, or request was
     made to a Request-URI that was not within the scope of the lock.

Also, it appears that we have consensus that refreshing locks should  
work the same way, namely, that you can refresh a lock by sending a  
LOCK request to any URI covered by the lock.

--  
Joe Hildebrand
Denver, CO, USA

On Jun 21, 2004, at 11:37 AM, Lisa Dusseault wrote:

>
> This would overturn a consensus that had previously been determined at  
> a WG meeting that happened together with an interoperability meeting,  
> and the consensus was not challenged on the mailing list at that time.
>
> However, given that we have new information -- actual research!   
> (thanks) -- it does make sense to reconsider.
>
> WG members please indicate your old, new, and/ or current preference,  
> with reasons if they've not already been stated here:
> 1. Should servers accept an UNLOCK request where the Request-URI names  
> any resource covered by the lock named in the lock token?
> 2. Or, should servers redirect that UNLOCK request to the root of the  
> lock?
> 3. If something else, please explain.
>
> Part of the rationale for #2 in the original consensus was to make  
> sure that clients understood the scope of the lock they were  
> attempting to remove -- so that the entire collection, if previously  
> marked as locked, would now be shown as unlocked, rather than just the  
> resources covered by the Request-URI.
>
> Please indicate your preference by July 6.
>
> Lisa
>
> On Jun 21, 2004, at 10:31 AM, Julian Reschke wrote:
>
>>
>> Lisa Dusseault wrote:
>>
>>> I'm fine with 1 and 2, but I don't understand problem #3.
>>> What this text attempts to say is that the server SHOULD redirect an  
>>> UNLOCK request to the correct URI if the UNLOCK request has the  
>>> wrong URI for the lock token -- that's the ideal response.  If the  
>>> server can't do that, then as Plan B, the server MAY [or SHOULD?]  
>>> return a simple error.
>>> What's wrong with a specification having a Plan B if the software  
>>> can't do Plan A for some reason?  Returning errors is the typical  
>>> Plan B anyway...
>>> I agree the text needs a little more specifics about what kind of  
>>> redirect -- suggestions?
>>
>> Well, if in the context of an HTTP related spec you talk about  
>> "redirecting" something, many will read that as having to do with a  
>> 3xx status code. I'm still not sure whether this is what you intend  
>> to say or not.
>>
>> If, on the other hand, you're saying that the server SHOULD accept  
>> the UNLOCK even if the request URI is only indirectly locked (and  
>> just do the unlock then), then it doesn't make sense to add any more  
>> text. As Geoff pointed out recently about text *I* did write, saying  
>> "server SHOULD do 'x' and MAY do not('x')" is bad specification text;  
>> it only confuses the audience.
>>
>> Anyway, quoting myself in
>>
>> <http://lists.w3.org/Archives/Public/w3c-dist-auth/2004AprJun/ 
>> 0170.html>:
>>
>> "OK,
>>
>> here are some actual test results:
>>
>> a) Apache/moddav: allows UNLOCK on indirectly locked resources,
>> b) Xythos: same,
>> c) SAP Enterprise Portal: same,
>> d) Microsoft IIS: no support for depth infinity locks.
>>
>> Thus the current text in the issues resolution "Resolved that you can
>> specify any URL locked by the lock you want to unlock" does indeed
>> reflect current implementation experience, and this is what spec
>> revisions should be saying.
>>
>> Thus:
>>
>> 1) RFC2518bis should undo that change, and
>> 2) GULP should be updated accordingly (I'll do that for my in-document
>> copy of GULP at
>> <http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking- 
>> latest.html#rfc.section.C>."
>>
>>
>> ...and that's what I did with (a) my draft and (b) GULP (they both  
>> are now consistent with what the issues list states as working group  
>> consensus, see issue 65).
>>
>> Best regards, Julian
>> -- 
>> <green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
>>
>



From w3c-dist-auth-request@w3.org  Sat Jul 10 22:38:01 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA13025
	for <webdav-archive@lists.ietf.org>; Sat, 10 Jul 2004 22:38:01 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id B05F3A142D; Sat, 10 Jul 2004 22:37:57 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 0AB0DA14ED
	for <w3c-dist-auth@listhub.w3.org>; Sat, 10 Jul 2004 22:37:53 -0400 (EDT)
Received: from e2.ny.us.ibm.com ([32.97.182.102])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BjUDw-0005ra-R1
	for w3c-dist-auth@w3.org; Sat, 10 Jul 2004 22:37:52 -0400
Received: from northrelay04.pok.ibm.com (northrelay04.pok.ibm.com [9.56.224.206])
	by e2.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i6B2bGLD472322;
	Sat, 10 Jul 2004 22:37:16 -0400
Received: from d01ml604.pok.ibm.com (d01av04.pok.ibm.com [9.56.224.64])
	by northrelay04.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i6B2cAHA091746;
	Sat, 10 Jul 2004 22:38:11 -0400
To: Julian Reschke <julian.reschke@gmx.de>
Cc: w3c-dist-auth@w3.org
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 5.0.11   July 24, 2002
From: Jason Crawford <ccjason@us.ibm.com>
Message-ID: <OFC4A39687.F6848E2C-ON85256ECE.000DACE7-85256ECE.000E617D@us.ibm.com>
Date: Sat, 10 Jul 2004 22:37:04 -0400
X-MIMETrack: Serialize by Router on D01ML604/01/M/IBM(Release 6.51HF339 | June 21, 2004) at
 07/10/2004 22:37:16,
	Serialize complete at 07/10/2004 22:37:16
Content-Type: multipart/alternative; boundary="=_alternative 000DED0085256ECE_="
Subject: Re: Issue #68: UNLOCK_WITHOUT_GOOD_TOKEN
X-Archived-At: http://www.w3.org/mid/OFC4A39687.F6848E2C-ON85256ECE.000DACE7-85256ECE.000E617D@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8713
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040711023757.B05F3A142D@frink.w3.org>
Resent-Date: Sat, 10 Jul 2004 22:37:57 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 000DED0085256ECE_=
Content-Type: text/plain; charset="us-ascii"

Julian, I can't tell from this what you are recommending a server return 
if (1) a bad token is provided  or (2) no token is provided.  Could you 
please resumarize your conclusions?

J.






Julian Reschke <julian.reschke@gmx.de>
06/15/2004 08:59 AM

 
        To:     w3c-dist-auth@w3.org
        cc:     Jason Crawford/Watson/IBM@IBMUS
        Subject:        Re: Issue #68: UNLOCK_WITHOUT_GOOD_TOKEN



OK,

to summarize (
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.issue.068_UNLOCK_WITHOUT_GOOD_TOKEN>):

- errors linked to missing or bad tokens in the "lock-token" request 
header do *not* cause a 412 ("lock-token" isn't part of the headers for 
which 412-style preconditions are checked),

- clients need to be able to handle all 4xx status codes anyway,

- we define a specific precondition for missing/bad lock tokens inside 
the lock-token request header, so clients can more precisely identity 
this error condition

Jason, you may want to update your issues list accordingly.

Best regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



--=_alternative 000DED0085256ECE_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="sans-serif">Julian, I can't tell from this what you are recommending a server return if (1) a bad token is provided &nbsp;or (2) no token is provided. &nbsp;Could you please resumarize your conclusions?</font>
<br>
<br><font size=2 face="sans-serif">J.</font>
<br>
<br>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td>
<td><font size=1 face="sans-serif"><b>Julian Reschke &lt;julian.reschke@gmx.de&gt;</b></font>
<p><font size=1 face="sans-serif">06/15/2004 08:59 AM</font>
<br>
<td><font size=1 face="Arial">&nbsp; &nbsp; &nbsp; &nbsp; </font>
<br><font size=1 face="sans-serif">&nbsp; &nbsp; &nbsp; &nbsp; To: &nbsp; &nbsp; &nbsp; &nbsp;w3c-dist-auth@w3.org</font>
<br><font size=1 face="sans-serif">&nbsp; &nbsp; &nbsp; &nbsp; cc: &nbsp; &nbsp; &nbsp; &nbsp;Jason Crawford/Watson/IBM@IBMUS</font>
<br><font size=1 face="sans-serif">&nbsp; &nbsp; &nbsp; &nbsp; Subject: &nbsp; &nbsp; &nbsp; &nbsp;Re: Issue #68: UNLOCK_WITHOUT_GOOD_TOKEN</font>
<br></table>
<br>
<br>
<br><font size=2 face="Courier New">OK,<br>
<br>
to summarize (<br>
&lt;http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.issue.068_UNLOCK_WITHOUT_GOOD_TOKEN&gt;):<br>
<br>
- errors linked to missing or bad tokens in the &quot;lock-token&quot; request <br>
header do *not* cause a 412 (&quot;lock-token&quot; isn't part of the headers for <br>
which 412-style preconditions are checked),<br>
<br>
- clients need to be able to handle all 4xx status codes anyway,<br>
<br>
- we define a specific precondition for missing/bad lock tokens inside <br>
the lock-token request header, so clients can more precisely identity <br>
this error condition<br>
<br>
Jason, you may want to update your issues list accordingly.<br>
<br>
Best regards, Julian<br>
<br>
-- <br>
&lt;green/&gt;bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760<br>
</font>
<br>
<br>
--=_alternative 000DED0085256ECE_=--



From w3c-dist-auth-request@w3.org  Sun Jul 11 06:58:16 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA16244
	for <webdav-archive@lists.ietf.org>; Sun, 11 Jul 2004 06:58:16 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 4CA16A1247; Sun, 11 Jul 2004 06:58:11 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id A7A51A11A4
	for <w3c-dist-auth@listhub.w3.org>; Sun, 11 Jul 2004 06:58:00 -0400 (EDT)
Received: from mail.gmx.net ([213.165.64.20])
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1Bjc1V-0006dc-47
	for w3c-dist-auth@w3.org; Sun, 11 Jul 2004 06:57:33 -0400
Received: (qmail 1884 invoked by uid 65534); 11 Jul 2004 10:57:01 -0000
Received: from pD9FF0751.dip.t-dialin.net (EHLO [192.168.0.2]) (217.255.7.81)
  by mail.gmx.net (mp008) with SMTP; 11 Jul 2004 12:57:01 +0200
X-Authenticated: #1915285
Message-ID: <40F11CF9.6010002@gmx.de>
Date: Sun, 11 Jul 2004 12:56:57 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Joe Hildebrand <joe@cursive.net>
Cc: Lisa Dusseault <lisa@osafoundation.org>, WebDAV <w3c-dist-auth@w3.org>
References: <40B20BBD.6070609@gmx.de> <DF782A84-C3A6-11D8-A549-000A95B2BB72@osafoundation.org> <40D71B55.7010603@gmx.de> <BADE6896-C3A9-11D8-82D6-000A95B2BB72@osafoundation.org> <F8E4EFB7-D2D3-11D8-8864-000A959A17A6@cursive.net>
In-Reply-To: <F8E4EFB7-D2D3-11D8-8864-000A959A17A6@cursive.net>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: Call for consensus on UNLOCK Request-URI being lock root
X-Archived-At: http://www.w3.org/mid/40F11CF9.6010002@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8714
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040711105811.4CA16A1247@frink.w3.org>
Resent-Date: Sun, 11 Jul 2004 06:58:11 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Joe Hildebrand wrote:
> 
> July 6 has passed.  It looks to me like we have consensus on option 1,  
> with the following reasons:
> 
> - This is what existing implementations do
> - It's one possible way of reading 2518
> - It doesn't conflict with other decisions that have already been made
> 
> I didn't see any objections to Lisa's proposed wording:
> 
>     The UNLOCK method identifies a lock to remove with the lock token in
>     the Lock-Token request header.  The Request-URI MUST identify a
>     resource within the scope of the lock.

I'd prefer something that actually focuses on what the method does (the 
purpose of UNLOCK is not to identify a lock; it's to remove it), such as:

"The UNLOCK method removes the lock identified by the lock token in the 
Lock-Token request header from the resource identified by the 
Request-URI, and all other resources included in the lock. Note that the 
UNLOCK request may be submitted to any resource locked by that lock 
(even those that are locked indirectly)." 
(<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.section.5.p.1>)

> Then later in the error code information for UNLOCK:
> 
>     400 (Bad Request) - No lock token was provided, or request was
>     made to a Request-URI that was not within the scope of the lock.

Here, I'd prefer that we define specific precondition codes that more 
clearly describe the problem:

"5.2 Preconditions

5.2.1 DAV:lock-token-matches precondition

The lock identified by the "Lock-Token" request header exists, and the 
resource identified by the Request-URI indeed is directly locked by the 
specified lock.

5.2.2 DAV:lock-removal-allowed precondition

As dicussed above, the principal authenticated for the UNLOCK request 
MUST be allowed to remove the identified lock (note that servers that 
support the "WebDAV Access Control Protocol" should use the 
DAV:need-privileges precondition defined in section 7.1.1 of 
[RFC3744])." 
(<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.section.5.2>)

> Also, it appears that we have consensus that refreshing locks should  
> work the same way, namely, that you can refresh a lock by sending a  
> LOCK request to any URI covered by the lock.

Yes.

Best regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Sun Jul 11 07:08:00 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA16585
	for <webdav-archive@lists.ietf.org>; Sun, 11 Jul 2004 07:08:00 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id AADC0A0A67; Sun, 11 Jul 2004 07:08:01 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 002ADA077E
	for <w3c-dist-auth@listhub.w3.org>; Sun, 11 Jul 2004 07:07:55 -0400 (EDT)
Received: from pop.gmx.de ([213.165.64.20] helo=mail.gmx.net)
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BjcBX-0008Lv-Q7
	for w3c-dist-auth@w3.org; Sun, 11 Jul 2004 07:07:56 -0400
Received: (qmail 13372 invoked by uid 65534); 11 Jul 2004 11:07:24 -0000
Received: from pD9FF0751.dip.t-dialin.net (EHLO [192.168.0.2]) (217.255.7.81)
  by mail.gmx.net (mp020) with SMTP; 11 Jul 2004 13:07:24 +0200
X-Authenticated: #1915285
Message-ID: <40F11F69.6070205@gmx.de>
Date: Sun, 11 Jul 2004 13:07:21 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Jason Crawford <ccjason@us.ibm.com>
Cc: w3c-dist-auth@w3.org
References: <OFC4A39687.F6848E2C-ON85256ECE.000DACE7-85256ECE.000E617D@us.ibm.com>
In-Reply-To: <OFC4A39687.F6848E2C-ON85256ECE.000DACE7-85256ECE.000E617D@us.ibm.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: Issue #68: UNLOCK_WITHOUT_GOOD_TOKEN
X-Archived-At: http://www.w3.org/mid/40F11F69.6070205@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8715
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040711110801.AADC0A0A67@frink.w3.org>
Resent-Date: Sun, 11 Jul 2004 07:08:01 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Jason Crawford wrote:

> Julian, I can't tell from this what you are recommending a server return 
> if (1) a bad token is provided  or (2) no token is provided.  Could you 
> please resumarize your conclusions?

(1) Would be a violation of the precondition DAV:lock-token-matches 
(<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.section.5.2.1>), 
and thus would cause a 4xx status with DAV:error/DAV:lock-token-matches. 
The most appropriate 4xx code here seems to be 403 (as there doesn't 
seem to be a way to change the state of the resource in a way that the 
same request would succeed).

(2) Is a violation of the request syntax (which requires a Lock-Token 
header), thus would result in a plain 400. We *could* add a specific 
precondition name for that, but that seems to me like over-engineering.

Anyway, clients MUST be able to properly handle all kinds of 4xx status 
codes in a robust manner; so I think it's a bad idea to write specs in a 
way that suggest that certain other 4xx codes will never occur. Clients 
that are really interested in why the request failed can get far more 
reliable information by inspecting the DAV:error message body.

Best regards, Julian


(note that because I closed the issue in version -03 of my draft, the 
issue entry now has moved to 
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-03.html#rfc.issue.068_UNLOCK_WITHOUT_GOOD_TOKEN>).


-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Sun Jul 11 15:02:34 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA07099
	for <webdav-archive@lists.ietf.org>; Sun, 11 Jul 2004 15:02:34 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 12918A0C15; Sun, 11 Jul 2004 15:02:34 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id C9E44A0BE6
	for <w3c-dist-auth@listhub.w3.org>; Sun, 11 Jul 2004 15:02:31 -0400 (EDT)
Received: from kahuna.osafoundation.org ([204.152.186.98])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bjjap-0005Yj-J6
	for w3c-dist-auth@w3c.org; Sun, 11 Jul 2004 15:02:31 -0400
Old-X-Envelope-From: lisa@osafoundation.org
Old-X-Envelope-To: <w3c-dist-auth@w3c.org>
Received: from [192.168.1.100] ([198.144.201.116])
	(authenticated bits=0)
	by kahuna.osafoundation.org (8.12.8/8.12.8) with ESMTP id i6BJ2OJL017925
	(version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO)
	for <w3c-dist-auth@w3c.org>; Sun, 11 Jul 2004 12:02:26 -0700
Mime-Version: 1.0 (Apple Message framework v618)
Content-Transfer-Encoding: 7bit
Message-Id: <D37EF54D-D36C-11D8-B746-000A95B2BB72@osafoundation.org>
Content-Type: text/plain; charset=US-ASCII; format=flowed
To: Webdav WG <w3c-dist-auth@w3c.org>
From: Lisa Dusseault <lisa@osafoundation.org>
Date: Sun, 11 Jul 2004 12:02:16 -0700
X-Mailer: Apple Mail (2.618)
X-Scanned-By: MIMEDefang 2.39
Subject: Using error response bodies for more information
X-Archived-At: http://www.w3.org/mid/D37EF54D-D36C-11D8-B746-000A95B2BB72@osafoundation.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8716
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040711190234.12918A0C15@frink.w3.org>
Resent-Date: Sun, 11 Jul 2004 15:02:34 -0400 (EDT)
Content-Transfer-Encoding: 7bit


There have been a number of discussions about using the error response 
body, as DeltaV and ACL do, in RFC2518bis. Some of the cases where this 
has been suggested:
  - If the XML sent to the server refers to external entities, the 
server would respond with 403 Forbidden with 'forbid-external-entities' 
in the body.
  - A 423 Locked response could include the lockdiscovery property value 
in the response body (including the lock token, timeout, owner, etc for 
client use)
  - A LOCK refresh or UNLOCK request was addressed to a Request-URI 
which did not fall in the scope of the lock identified by the 
Lock-Token header.
  - An UNLOCK request not containing a lock token at all
  - Clarify 409 error to PUT or MKCOL saying that the parent collection 
does not exist.
  - MOVE error response when the source and destination URLs are on 
different servers or different subnamespaces on a single server

I would like to confirm that we want to go down this path, because it 
involves new specification writing, more decisions, more changes, and 
an effort to maintain consistency with conflicting examples. For 
example, should the new requirements be consistent with DeltaV and ACL 
in using only 403 and 409 with precondition/postcondition responses, or 
should they be consistent with RFC2518 original status codes and 
include bodies with errors like 423 Locked and 400 Bad Request?   Would 
these be SHOULD requirements or MUST (in order to allow clients to rely 
on the additional information more quickly)?

Please respond with your opinion and further discussion,
thanks,
Lisa



From w3c-dist-auth-request@w3.org  Sun Jul 11 15:31:31 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA09174
	for <webdav-archive@lists.ietf.org>; Sun, 11 Jul 2004 15:31:30 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 0B10FA0ACD; Sun, 11 Jul 2004 15:31:32 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 2B14AA0ACD
	for <w3c-dist-auth@listhub.w3.org>; Sun, 11 Jul 2004 15:31:30 -0400 (EDT)
Received: from mail.gmx.net ([213.165.64.20])
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1Bjk2r-0001QE-QP
	for w3c-dist-auth@w3c.org; Sun, 11 Jul 2004 15:31:30 -0400
Received: (qmail 1460 invoked by uid 65534); 11 Jul 2004 19:30:57 -0000
Received: from pD9FF0751.dip.t-dialin.net (EHLO [192.168.0.2]) (217.255.7.81)
  by mail.gmx.net (mp004) with SMTP; 11 Jul 2004 21:30:57 +0200
X-Authenticated: #1915285
Message-ID: <40F19568.7050201@gmx.de>
Date: Sun, 11 Jul 2004 21:30:48 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Lisa Dusseault <lisa@osafoundation.org>
Cc: Webdav WG <w3c-dist-auth@w3c.org>
References: <D37EF54D-D36C-11D8-B746-000A95B2BB72@osafoundation.org>
In-Reply-To: <D37EF54D-D36C-11D8-B746-000A95B2BB72@osafoundation.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: Using error response bodies for more information
X-Archived-At: http://www.w3.org/mid/40F19568.7050201@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8717
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040711193132.0B10FA0ACD@frink.w3.org>
Resent-Date: Sun, 11 Jul 2004 15:31:32 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Lisa Dusseault wrote:

> There have been a number of discussions about using the error response 
> body, as DeltaV and ACL do, in RFC2518bis. Some of the cases where this 
> has been suggested:
>  - If the XML sent to the server refers to external entities, the server 
> would respond with 403 Forbidden with 'forbid-external-entities' in the 
> body.
>  - A 423 Locked response could include the lockdiscovery property value 
> in the response body (including the lock token, timeout, owner, etc for 
> client use)
>  - A LOCK refresh or UNLOCK request was addressed to a Request-URI which 
> did not fall in the scope of the lock identified by the Lock-Token header.
>  - An UNLOCK request not containing a lock token at all
>  - Clarify 409 error to PUT or MKCOL saying that the parent collection 
> does not exist.
>  - MOVE error response when the source and destination URLs are on 
> different servers or different subnamespaces on a single server
> 
> I would like to confirm that we want to go down this path, because it 
> involves new specification writing, more decisions, more changes, and an 
> effort to maintain consistency with conflicting examples. For example, 

Definitively.

> should the new requirements be consistent with DeltaV and ACL in using 
> only 403 and 409 with precondition/postcondition responses, or should 
> they be consistent with RFC2518 original status codes and include bodies 
> with errors like 423 Locked and 400 Bad Request?   Would these be SHOULD 

Yes. They should allow any 4xx (or 5xx for that matter). Note that we'd 
be making this extension in BIND already if we needed it there.

> requirements or MUST (in order to allow clients to rely on the 
> additional information more quickly)?

I think at least for RFC2518bis they should be "SHOULD" level 
requirements. We don't want servers to become non-compliant if they 
don't support this (in fact I want Apache/moddav to be conformant with 
as little changes as possible!). No big harm is done when the response 
bodies are missing; after all it's just a feature that allows better 
recovery from error conditions and better diagnostics.

> Please respond with your opinion and further discussion,
> thanks,
> Lisa

I'd like to point out once more that if a spec adopts the DAV:error 
syntax, it should be consistent in it's usage with RFC3253 (namely that 
the XML element names we use name *preconditions* and *postconditions* 
not problems).


Best regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Sun Jul 11 17:15:31 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA13527
	for <webdav-archive@lists.ietf.org>; Sun, 11 Jul 2004 17:15:31 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 7AFAFA14EB; Sun, 11 Jul 2004 17:15:30 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 33B6BA1803
	for <w3c-dist-auth@listhub.w3.org>; Sun, 11 Jul 2004 17:13:30 -0400 (EDT)
Received: from e6.ny.us.ibm.com ([32.97.182.106])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BjlUO-0006Gs-Dd
	for w3c-dist-auth@w3.org; Sun, 11 Jul 2004 17:04:00 -0400
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150])
	by e6.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i6BL3Tdu563160
	for <w3c-dist-auth@w3.org>; Sun, 11 Jul 2004 17:03:29 -0400
Received: from d01ml261.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216])
	by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i6BL4dPB080956
	for <w3c-dist-auth@w3.org>; Sun, 11 Jul 2004 17:04:39 -0400
In-Reply-To: <40F19568.7050201@gmx.de>
To: " webdav" <w3c-dist-auth@w3.org>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.0.2CF1 June 9, 2003
Message-ID: <OF382596A0.16247E1A-ON85256ECE.007386C4-85256ECE.0073AC71@us.ibm.com>
From: Geoffrey M Clemm <geoffrey.clemm@us.ibm.com>
Date: Sun, 11 Jul 2004 17:02:36 -0400
X-MIMETrack: Serialize by Router on D01ML261/01/M/IBM(Release 6.51HF339 | June 21, 2004) at
 07/11/2004 17:02:38,
	Serialize complete at 07/11/2004 17:02:38
Content-Type: multipart/alternative; boundary="=_alternative 0073AC7085256ECE_="
Subject: Re: Using error response bodies for more information
X-Archived-At: http://www.w3.org/mid/OF382596A0.16247E1A-ON85256ECE.007386C4-85256ECE.0073AC71@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8718
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040711211530.7AFAFA14EB@frink.w3.org>
Resent-Date: Sun, 11 Jul 2004 17:15:30 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 0073AC7085256ECE_=
Content-Type: text/plain; charset="US-ASCII"

I agree with all of Julian's comments in this message.

Cheers,
Geoff

Julian wrote on 07/11/2004 03:30:48 PM:
> 
> Lisa Dusseault wrote:
> 
> > There have been a number of discussions about using the error response 

> > body, as DeltaV and ACL do, in RFC2518bis. Some of the cases where 
this 
> > has been suggested:
> >  - If the XML sent to the server refers to external entities, the 
server 
> > would respond with 403 Forbidden with 'forbid-external-entities' in 
the 
> > body.
> >  - A 423 Locked response could include the lockdiscovery property 
value 
> > in the response body (including the lock token, timeout, owner, etc 
for 
> > client use)
> >  - A LOCK refresh or UNLOCK request was addressed to a Request-URI 
which 
> > did not fall in the scope of the lock identified by the Lock-Token 
header.
> >  - An UNLOCK request not containing a lock token at all
> >  - Clarify 409 error to PUT or MKCOL saying that the parent collection 

> > does not exist.
> >  - MOVE error response when the source and destination URLs are on 
> > different servers or different subnamespaces on a single server
> > 
> > I would like to confirm that we want to go down this path, because it 
> > involves new specification writing, more decisions, more changes, and 
an 
> > effort to maintain consistency with conflicting examples. For example, 

> 
> Definitively.
> 
> > should the new requirements be consistent with DeltaV and ACL in using 

> > only 403 and 409 with precondition/postcondition responses, or should 
> > they be consistent with RFC2518 original status codes and include 
bodies 
> > with errors like 423 Locked and 400 Bad Request?   Would these be 
SHOULD 
> 
> Yes. They should allow any 4xx (or 5xx for that matter). Note that we'd 
> be making this extension in BIND already if we needed it there.
> 
> > requirements or MUST (in order to allow clients to rely on the 
> > additional information more quickly)?
> 
> I think at least for RFC2518bis they should be "SHOULD" level 
> requirements. We don't want servers to become non-compliant if they 
> don't support this (in fact I want Apache/moddav to be conformant with 
> as little changes as possible!). No big harm is done when the response 
> bodies are missing; after all it's just a feature that allows better 
> recovery from error conditions and better diagnostics.
> 
> > Please respond with your opinion and further discussion,
> 
> I'd like to point out once more that if a spec adopts the DAV:error 
> syntax, it should be consistent in it's usage with RFC3253 (namely that 
> the XML element names we use name *preconditions* and *postconditions* 
> not problems).

--=_alternative 0073AC7085256ECE_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2><tt>I agree with all of Julian's comments in this message.</tt></font>
<br>
<br><font size=2><tt>Cheers,</tt></font>
<br><font size=2><tt>Geoff</tt></font>
<br>
<br><font size=2><tt>Julian wrote on 07/11/2004 03:30:48 PM:<br>
&gt; <br>
&gt; Lisa Dusseault wrote:<br>
&gt; <br>
&gt; &gt; There have been a number of discussions about using the error
response <br>
&gt; &gt; body, as DeltaV and ACL do, in RFC2518bis. Some of the cases
where this <br>
&gt; &gt; has been suggested:<br>
&gt; &gt; &nbsp;- If the XML sent to the server refers to external entities,
the server <br>
&gt; &gt; would respond with 403 Forbidden with 'forbid-external-entities'
in the <br>
&gt; &gt; body.<br>
&gt; &gt; &nbsp;- A 423 Locked response could include the lockdiscovery
property value <br>
&gt; &gt; in the response body (including the lock token, timeout, owner,
etc for <br>
&gt; &gt; client use)<br>
&gt; &gt; &nbsp;- A LOCK refresh or UNLOCK request was addressed to a Request-URI
which <br>
&gt; &gt; did not fall in the scope of the lock identified by the Lock-Token
header.<br>
&gt; &gt; &nbsp;- An UNLOCK request not containing a lock token at all<br>
&gt; &gt; &nbsp;- Clarify 409 error to PUT or MKCOL saying that the parent
collection <br>
&gt; &gt; does not exist.<br>
&gt; &gt; &nbsp;- MOVE error response when the source and destination URLs
are on <br>
&gt; &gt; different servers or different subnamespaces on a single server<br>
&gt; &gt; <br>
&gt; &gt; I would like to confirm that we want to go down this path, because
it <br>
&gt; &gt; involves new specification writing, more decisions, more changes,
and an <br>
&gt; &gt; effort to maintain consistency with conflicting examples. For
example, <br>
&gt; <br>
&gt; Definitively.<br>
&gt; <br>
&gt; &gt; should the new requirements be consistent with DeltaV and ACL
in using <br>
&gt; &gt; only 403 and 409 with precondition/postcondition responses, or
should <br>
&gt; &gt; they be consistent with RFC2518 original status codes and include
bodies <br>
&gt; &gt; with errors like 423 Locked and 400 Bad Request? &nbsp; Would
these be SHOULD <br>
&gt; <br>
&gt; Yes. They should allow any 4xx (or 5xx for that matter). Note that
we'd <br>
&gt; be making this extension in BIND already if we needed it there.<br>
&gt; <br>
&gt; &gt; requirements or MUST (in order to allow clients to rely on the
<br>
&gt; &gt; additional information more quickly)?<br>
&gt; <br>
&gt; I think at least for RFC2518bis they should be &quot;SHOULD&quot;
level <br>
&gt; requirements. We don't want servers to become non-compliant if they
<br>
&gt; don't support this (in fact I want Apache/moddav to be conformant
with <br>
&gt; as little changes as possible!). No big harm is done when the response
<br>
&gt; bodies are missing; after all it's just a feature that allows better
<br>
&gt; recovery from error conditions and better diagnostics.<br>
&gt; <br>
&gt; &gt; Please respond with your opinion and further discussion,<br>
&gt; <br>
&gt; I'd like to point out once more that if a spec adopts the DAV:error
<br>
&gt; syntax, it should be consistent in it's usage with RFC3253 (namely
that <br>
&gt; the XML element names we use name *preconditions* and *postconditions*
<br>
&gt; not problems).<br>
</tt></font>
--=_alternative 0073AC7085256ECE_=--



From w3c-dist-auth-request@w3.org  Sun Jul 11 22:02:19 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA24515
	for <webdav-archive@lists.ietf.org>; Sun, 11 Jul 2004 22:02:19 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 0BF75A0512; Sun, 11 Jul 2004 22:02:20 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 6D1A9A07F3
	for <w3c-dist-auth@listhub.w3.org>; Sun, 11 Jul 2004 22:02:16 -0400 (EDT)
Received: from bibcock.seagull.net ([67.136.24.240] helo=bandage.seagull.net)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bjq92-0000Cg-7y
	for w3c-dist-auth@w3.org; Sun, 11 Jul 2004 22:02:16 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i6C22F3o025051 sender ccjason@us.ibm.com for w3c-dist-auth@w3.org; Sun, 11 Jul 2004 19:02:15 -0700
Received: from e5.ny.us.ibm.com (e5.ny.us.ibm.com [32.97.182.105]) by bandage.seagull.net (8.12.10) with ESMTP id i6C22Cwh024979 sender ccjason@us.ibm.com; Sun, 11 Jul 2004 19:02:13 -0700
Received: from northrelay04.pok.ibm.com (northrelay04.pok.ibm.com [9.56.224.206]) by e5.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i6C221Dk757230; Sun, 11 Jul 2004 22:02:01 -0400
Received: from d01ml604.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by northrelay04.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i6C22t3d105818; Sun, 11 Jul 2004 22:02:56 -0400
To: Julian Reschke <nnjulian.reschke___at___gmx.de@smallcue.com>
Cc: nnw3c-dist-auth___at___w3.org@smallcue.com
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 5.0.11   July 24, 2002
From: Jason Crawford <ccjason@us.ibm.com>
Message-ID: <OF07C1D893.6DBC47A1-ON85256ECF.00093CA0-85256ECF.000B289F@us.ibm.com>
Date: Sun, 11 Jul 2004 22:01:52 -0400
X-MIMETrack: Serialize by Router on D01ML604/01/M/IBM(Release 6.51HF339 | June 21, 2004) at 07/11/2004 22:02:00, Serialize complete at 07/11/2004 22:02:00
Content-Type: multipart/alternative; boundary="=_alternative 000A707485256ECF_="
Subject: Re: Issue #68: UNLOCK_WITHOUT_GOOD_TOKEN
X-Archived-At: http://www.w3.org/mid/OF07C1D893.6DBC47A1-ON85256ECF.00093CA0-85256ECF.000B289F@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8719
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040712020220.0BF75A0512@frink.w3.org>
Resent-Date: Sun, 11 Jul 2004 22:02:20 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 000A707485256ECF_=
Content-Type: text/plain; charset="us-ascii"

> > Julian, I can't tell from this what you are recommending a server 
return
> > if (1) a bad token is provided  or (2) no token is provided.  Could 
you
> > please resumarize your conclusions?
> 
> (1) Would be a violation of the precondition DAV:lock-token-matches
> 
(<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.
> section.5.2.1>),
> and thus would cause a 4xx status with DAV:error/DAV:lock-token-matches.
> The most appropriate 4xx code here seems to be 403 (as there doesn't
> seem to be a way to change the state of the resource in a way that the
> same request would succeed).
I can only update the issues list with resolutions that work in the 
context of 2518.  My copy of 2518 doesn't support much of what you just 
said.   But it sounds to me that you're recommending 403 as the returned 
status which is supported.   Have we checked what existing servers 
return?... or do we just want to go with "SHOULD return 403"? 



> 
> (2) Is a violation of the request syntax (which requires a Lock-Token
> header), thus would result in a plain 400. We *could* add a specific
> precondition name for that, but that seems to me like over-engineering.
Okay.   Have we tested servers?  Or do we just want to go with "SHOULD 
return 400"?


> Anyway, clients MUST be able to properly handle all kinds of 4xx status
> codes in a robust manner; so I think it's a bad idea to write specs in a
> way that suggest that certain other 4xx codes will never occur. 
Sounds good.



--=_alternative 000A707485256ECF_=
Content-Type: text/html; charset="us-ascii"


<br><font size=2 face="sans-serif">&gt; &gt; Julian, I can't tell from this what you are recommending a server return<br>
&gt; &gt; if (1) a bad token is provided &nbsp;or (2) no token is provided. &nbsp;Could you<br>
&gt; &gt; please resumarize your conclusions?<br>
&gt; <br>
&gt; (1) Would be a violation of the precondition DAV:lock-token-matches<br>
&gt; (&lt;http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.<br>
&gt; section.5.2.1&gt;),<br>
&gt; and thus would cause a 4xx status with DAV:error/DAV:lock-token-matches.<br>
&gt; The most appropriate 4xx code here seems to be 403 (as there doesn't<br>
&gt; seem to be a way to change the state of the resource in a way that the<br>
&gt; same request would succeed).</font>
<br><font size=2 face="sans-serif">I can only update the issues list with resolutions that work in the context of 2518. &nbsp;My copy of 2518 doesn't support much of what you just said. &nbsp; But it sounds to me that you're recommending 403 as the returned status which is supported. &nbsp; Have we checked what existing servers return?... or do we just want to go with &quot;SHOULD return 403&quot;? &nbsp; </font>
<br>
<br>
<br><font size=2 face="sans-serif"><br>
&gt; <br>
&gt; (2) Is a violation of the request syntax (which requires a Lock-Token<br>
&gt; header), thus would result in a plain 400. We *could* add a specific<br>
&gt; precondition name for that, but that seems to me like over-engineering.</font>
<br><font size=2 face="sans-serif">Okay. &nbsp; Have we tested servers? &nbsp;Or do we just want to go with &quot;SHOULD return 400&quot;?</font>
<br>
<br><font size=2 face="sans-serif"><br>
&gt; Anyway, clients MUST be able to properly handle all kinds of 4xx status<br>
&gt; codes in a robust manner; so I think it's a bad idea to write specs in a<br>
&gt; way that suggest that certain other 4xx codes will never occur. </font>
<br><font size=2 face="sans-serif">Sounds good.</font>
<br>
<br><font size=2 face="sans-serif"><br>
</font>
--=_alternative 000A707485256ECF_=--



From w3c-dist-auth-request@w3.org  Mon Jul 12 03:24:41 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA20236
	for <webdav-archive@lists.ietf.org>; Mon, 12 Jul 2004 03:24:41 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 4FA07A173D; Mon, 12 Jul 2004 03:24:41 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id AFA8AA1780
	for <w3c-dist-auth@listhub.w3.org>; Mon, 12 Jul 2004 03:24:38 -0400 (EDT)
Received: from bibcock.seagull.net ([67.136.24.240] helo=bandage.seagull.net)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BjvAe-0004LH-Gw
	for w3c-dist-auth@w3.org; Mon, 12 Jul 2004 03:24:16 -0400
Received: (mail@localhost) by bandage.seagull.net (8.12.10) id i6C7OFWT003031 sender julian.reschke@gmx.de for w3c-dist-auth@w3.org; Mon, 12 Jul 2004 00:24:15 -0700
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by bandage.seagull.net (8.12.10) with SMTP id i6C7OC9K002944 sender julian.reschke@gmx.de for <nnw3c-dist-auth___at___w3.org@smallcue.com>; Mon, 12 Jul 2004 00:24:13 -0700
Received: (qmail 21590 invoked by uid 65534); 12 Jul 2004 07:24:00 -0000
Received: from pD9FF0C51.dip.t-dialin.net (EHLO [192.168.0.2]) (217.255.12.81) by mail.gmx.net (mp018) with SMTP; 12 Jul 2004 09:24:00 +0200
Message-ID: <40F23C8C.7080105@gmx.de>
Date: Mon, 12 Jul 2004 09:23:56 +0200
From: Julian Reschke <julian.reschke@gmx.de>
MIME-Version: 1.0
To: Jason Crawford <ccjason@us.ibm.com>
Cc: Julian Reschke <nnjulian.reschke___at___gmx.de@smallcue.com>,
        nnw3c-dist-auth___at___w3.org@smallcue.com
Content-Type: text/plain; charset=us-ascii; format=flowed
Subject: Re: Issue #68: UNLOCK_WITHOUT_GOOD_TOKEN
X-Archived-At: http://www.w3.org/mid/40F23C8C.7080105@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8720
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040712072441.4FA07A173D@frink.w3.org>
Resent-Date: Mon, 12 Jul 2004 03:24:41 -0400 (EDT)


Jason Crawford wrote:
> 
>  > > Julian, I can't tell from this what you are recommending a server 
> return
>  > > if (1) a bad token is provided  or (2) no token is provided.  Could you
>  > > please resumarize your conclusions?
>  >
>  > (1) Would be a violation of the precondition DAV:lock-token-matches
>  > 
> (<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.
>  > section.5.2.1>),
>  > and thus would cause a 4xx status with DAV:error/DAV:lock-token-matches.
>  > The most appropriate 4xx code here seems to be 403 (as there doesn't
>  > seem to be a way to change the state of the resource in a way that the
>  > same request would succeed).
> I can only update the issues list with resolutions that work in the 
> context of 2518.  My copy of 2518 doesn't support much of what you just 
> said.   But it sounds to me that you're recommending 403 as the returned 
> status which is supported.   Have we checked what existing servers 
> return?... or do we just want to go with "SHOULD return 403"? 

Yes, I did: 
<http://lists.w3.org/Archives/Public/w3c-dist-auth/2004AprJun/0155.html>.

This answer *does* work in the context of RFC2518bis; it defines a 
precondition that would need to be added to the spec text.

Speaking of which: it would be really nice if the working group would 
make some progress on the question whether we want to separate locking 
from RFC2518bis. See...:

<http://lists.w3.org/Archives/Public/w3c-dist-auth/2004AprJun/0049.html>

>  > (2) Is a violation of the request syntax (which requires a Lock-Token
>  > header), thus would result in a plain 400. We *could* add a specific
>  > precondition name for that, but that seems to me like over-engineering.
> Okay.   Have we tested servers?  Or do we just want to go with "SHOULD 
> return 400"?

Yes, we did test servers and their behaviour is inconsistent, thus we 
need to realize that clients MUST handle any 4xx and 5xx response in a 
robust way...:

>  > Anyway, clients MUST be able to properly handle all kinds of 4xx status
>  > codes in a robust manner; so I think it's a bad idea to write specs in a
>  > way that suggest that certain other 4xx codes will never occur.
> Sounds good.

Best regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Thu Jul 15 16:47:19 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA25723
	for <webdav-archive@lists.ietf.org>; Thu, 15 Jul 2004 16:47:18 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 7BD15A05DA; Thu, 15 Jul 2004 16:47:19 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id BCBBDA0754
	for <w3c-dist-auth@listhub.w3.org>; Thu, 15 Jul 2004 16:47:13 -0400 (EDT)
Received: from pop.gmx.de ([213.165.64.20] helo=mail.gmx.net)
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BlD8L-0002bL-Dc
	for w3c-dist-auth@w3.org; Thu, 15 Jul 2004 16:47:13 -0400
Received: (qmail 21036 invoked by uid 65534); 15 Jul 2004 20:46:41 -0000
Received: from p50825AAE.dip.t-dialin.net (EHLO [192.168.0.2]) (80.130.90.174)
  by mail.gmx.net (mp014) with SMTP; 15 Jul 2004 22:46:41 +0200
X-Authenticated: #1915285
Message-ID: <40F6ED30.1030401@gmx.de>
Date: Thu, 15 Jul 2004 22:46:40 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.2 (Windows/20040707)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: WebDAV <w3c-dist-auth@w3.org>
Content-Type: multipart/mixed;
 boundary="------------080004060707050807020303"
Subject: [Fwd: I-D ACTION:draft-reschke-webdav-locking-05.txt]
X-Archived-At: http://www.w3.org/mid/40F6ED30.1030401@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8721
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040715204719.7BD15A05DA@frink.w3.org>
Resent-Date: Thu, 15 Jul 2004 16:47:19 -0400 (EDT)


This is a multi-part message in MIME format.
--------------080004060707050807020303
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Hi,

I have submitted another version of my experimental stand-alone locking
protocol document.  Revision 05
(<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-05.html>
and
<http://www.ietf.org/internet-drafts/draft-reschke-webdav-locking-05.txt>)
have the changes described below:

E.5  Since draft-reschke-webdav-locking-04

    Add description of the lock as a resource and it's state (merging in
    Timeout semantics from old headers section).  Close issues
    "040_LOCK_ISSUES_06",
    "063_LOCKS_SHOULD_THEY_USE_AN_IF_HEADER_TO_VERIFY" and
    "088_DAVOWNER_FIELD_IS_CLIENT_CONTROLED".  Move edited version of
    "Write Lock" chapter.

(The HTML versions have all changes highlighted, so it's easy to see
what actually has been changing between revisions since the "import" of
text from RFC2518).

As usual, edits are ongoing on
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html>.
The current issues list is at
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-issues.html>.

Feedback appreciated, Julian


-------- Original Message --------

-------- Original Message --------
From: - Thu Jul 15 22:44:58 2004
X-UIDL: 3bdc7cff096ba4b9cf3b66f6e5bad1a4
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
Return-Path: <i-d-announce-bounces@ietf.org>
X-Flags: 0000
Delivered-To: GMX delivery to julian.reschke@gmx.de
Received: (qmail 17115 invoked by uid 65534); 15 Jul 2004 20:40:15 -0000
Received: from megatron.ietf.org (EHLO megatron.ietf.org) (132.151.6.71) 
  by mx0.gmx.net (mx056) with SMTP; 15 Jul 2004 22:40:15 +0200
Received: from localhost.localdomain ([127.0.0.1] 
helo=megatron.ietf.org)	by megatron.ietf.org with esmtp (Exim 4.32)	id 
1BlBuI-00070l-57; Thu, 15 Jul 2004 15:28:38 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org)	by 
megatron.ietf.org with esmtp (Exim 4.32) id 1BlBon-0005kG-5r	for 
i-d-announce@megatron.ietf.org; Thu, 15 Jul 2004 15:22:57 -0400
Received: from CNRI.Reston.VA.US (localhost [127.0.0.1])	by ietf.org 
(8.9.1a/8.9.1a) with ESMTP id PAA16430	for <i-d-announce@ietf.org>; Thu, 
15 Jul 2004 15:22:55 -0400 (EDT)
Message-Id: <200407151922.PAA16430@ietf.org>
Mime-Version: 1.0
Content-Type: Multipart/Mixed; Boundary="NextPart"
To: i-d-announce@ietf.org
From: Internet-Drafts@ietf.org
Date: Thu, 15 Jul 2004 15:22:55 -0400
Subject: I-D ACTION:draft-reschke-webdav-locking-05.txt
X-BeenThere: i-d-announce@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: internet-drafts@ietf.org
List-Id: i-d-announce.ietf.org
List-Unsubscribe: 
<https://www1.ietf.org/mailman/listinfo/i-d-announce>, 
<mailto:i-d-announce-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:i-d-announce@ietf.org>
List-Help: <mailto:i-d-announce-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/i-d-announce>, 
<mailto:i-d-announce-request@ietf.org?subject=subscribe>
Sender: i-d-announce-bounces@ietf.org
Errors-To: i-d-announce-bounces@ietf.org
X-GMX-Antivirus: -1 (not scanned, may not use virus scanner)
X-GMX-Antispam: 0 (Mail was not recognized as spam)

A New Internet-Draft is available from the on-line Internet-Drafts 
directories.


	Title		: Web Distributed Authoring and Versioning (WebDAV) Locking Protocol
	Author(s)	: J. Reschke
	Filename	: draft-reschke-webdav-locking-05.txt
	Pages		: 45
	Date		: 2004-7-15
	
This document specifies a set of methods and headers ancillary to
    HTTP/1.1 (RFC2616) and Distributed Authoring and Versioning (WebDAV,
    RFC2518) for the management of resource locking (collision
    avoidance).  It updates those sections from RFC2518 that specify
    WebDAV's locking features.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-reschke-webdav-locking-05.txt

To remove yourself from the I-D Announcement list, send a message to
i-d-announce-request@ietf.org with the word unsubscribe in the body of 
the message.
You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce
to change your subscription settings.


Internet-Drafts are also available by anonymous FTP. Login with the username
"anonymous" and a password of your e-mail address. After logging in,
type "cd internet-drafts" and then
	"get draft-reschke-webdav-locking-05.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt


Internet-Drafts can also be obtained by e-mail.

Send a message to:
	mailserv@ietf.org.
In the body type:
	"FILE /internet-drafts/draft-reschke-webdav-locking-05.txt".
	
NOTE:	The mail server at ietf.org can return the document in
	MIME-encoded form by using the "mpack" utility.  To use this
	feature, insert the command "ENCODING mime" before the "FILE"
	command.  To decode the response(s), you will need "munpack" or
	a MIME-compliant mail reader.  Different MIME-compliant mail readers
	exhibit different behavior, especially when dealing with
	"multipart" MIME messages (i.e. documents which have been split
	up into multiple messages), so check your local documentation on
	how to manipulate these messages.
		
		
Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.


-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760

--------------080004060707050807020303
Content-Type: Message/External-body;
 name="draft-reschke-webdav-locking-05.txt"
Content-Disposition: inline;
 filename="draft-reschke-webdav-locking-05.txt"
Content-Transfer-Encoding: 7bit

Content-Type: text/plain
Content-ID: <2004-7-15152048.I-D@ietf.org>



--------------080004060707050807020303
Content-Type: text/plain;
 name="file:///C|/DOKUME%7E1/JR/LOKALE%7E1/TEMP/nsmail.txt"
Content-Disposition: inline;
 filename="file:///C|/DOKUME%7E1/JR/LOKALE%7E1/TEMP/nsmail.txt"
Content-Transfer-Encoding: 7bit

_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www1.ietf.org/mailman/listinfo/i-d-announce


--------------080004060707050807020303--



From w3c-dist-auth-request@w3.org  Sat Jul 17 05:31:39 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA04289
	for <webdav-archive@lists.ietf.org>; Sat, 17 Jul 2004 05:31:39 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 059ACA118E; Sat, 17 Jul 2004 05:31:41 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 6D66FA118E
	for <w3c-dist-auth@listhub.w3.org>; Sat, 17 Jul 2004 05:31:38 -0400 (EDT)
Received: from pop.gmx.de ([213.165.64.20] helo=mail.gmx.net)
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BllXe-0007kx-3v
	for w3c-dist-auth@w3.org; Sat, 17 Jul 2004 05:31:38 -0400
Received: (qmail 27268 invoked by uid 65534); 17 Jul 2004 09:31:06 -0000
Received: from pD9E51873.dip.t-dialin.net (EHLO [192.168.0.2]) (217.229.24.115)
  by mail.gmx.net (mp010) with SMTP; 17 Jul 2004 11:31:06 +0200
X-Authenticated: #1915285
Message-ID: <40F8F1D8.50003@gmx.de>
Date: Sat, 17 Jul 2004 11:31:04 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.2 (Windows/20040707)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: WebDAV <w3c-dist-auth@w3.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: (sort-of) new LOCK refresh/depth issue
X-Archived-At: http://www.w3.org/mid/40F8F1D8.50003@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8722
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040717093141.059ACA118E@frink.w3.org>
Resent-Date: Sat, 17 Jul 2004 05:31:41 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Hi,

Lisa reminded me of a question asked by Stanley half a year ago:

<http://lists.w3.org/Archives/Public/w3c-dist-auth/2003OctDec/0300.html>

"Under the topic of "Refreshing Locks", it hints that Client may include 
a Timeout header. But, Depth header has not being mentioned.

Under the topic of "Depth and Locking", it discussed what will happen if 
"Depth" header is specified for creating a new lock.  But, nothing was 
mentioned on what's its implication on a lock refreshing command."

First of all, I've added this to my issues list as 
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-latest.html#rfc.issue.5.2.1-depth_header_vs_lock_refresh> 
(will show up next week).

When discussing the question we listed the options below:

1) server MUST respect Depth header, possibly changing the lock scope
2) server MAY respect Depth header, possibly changing the lock scope
3) server SHOULD ignore Depth header
4) server MUST ignore Depth header

plus (by Lisa D.)

5) Another option is to reject the request if the Depth header is 
present and has the wrong value.

Technically, 5) makes sense; but it would break clients that take out 
Depth: 0 locks on resources but then don't specify Depth: 0 on a lock 
refresh (the Depth: header defaults to 'infinity' for the LOCK method).

In the meantime I have tested at least Office2003, which indeed 
specifies the Depth: 0 header upon LOCK refresh; thus would continue to 
work. I'm unsure about other clients (older Office versions, Xythos, 
MacOSX), so I'd still prefer option 4 (and this is what I'll put in into 
my locking document, as it seems the clarification with the lowest risk 
of breaking anything).

Best regards, Julian


-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Sat Jul 17 07:57:00 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA10683
	for <webdav-archive@lists.ietf.org>; Sat, 17 Jul 2004 07:57:00 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id A153DA0F21; Sat, 17 Jul 2004 07:57:00 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id DB37CA0F21
	for <w3c-dist-auth@listhub.w3.org>; Sat, 17 Jul 2004 07:56:58 -0400 (EDT)
Received: from e5.ny.us.ibm.com ([32.97.182.105])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BlnoI-0004FS-Nw
	for w3c-dist-auth@w3.org; Sat, 17 Jul 2004 07:56:58 -0400
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150])
	by e5.ny.us.ibm.com (8.12.10/8.12.2) with ESMTP id i6HBuONf784836
	for <w3c-dist-auth@w3.org>; Sat, 17 Jul 2004 07:56:24 -0400
Received: from d01ml261.pok.ibm.com (d01av04.pok.ibm.com [9.56.224.64])
	by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i6HBvYUG087400
	for <w3c-dist-auth@w3.org>; Sat, 17 Jul 2004 07:57:34 -0400
In-Reply-To: <40F8F1D8.50003@gmx.de>
To: " webdav" <w3c-dist-auth@w3.org>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.0.2CF1 June 9, 2003
Message-ID: <OFD4EC9880.E11B1E19-ON85256ED4.0041664D-85256ED4.00419462@us.ibm.com>
From: Geoffrey M Clemm <geoffrey.clemm@us.ibm.com>
Date: Sat, 17 Jul 2004 07:56:17 -0400
X-MIMETrack: Serialize by Router on D01ML261/01/M/IBM(Release 6.51HF433 | July 14, 2004) at
 07/17/2004 07:56:24,
	Serialize complete at 07/17/2004 07:56:24
Content-Type: multipart/alternative; boundary="=_alternative 0041945F85256ED4_="
Subject: Re: (sort-of) new LOCK refresh/depth issue
X-Archived-At: http://www.w3.org/mid/OFD4EC9880.E11B1E19-ON85256ED4.0041664D-85256ED4.00419462@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8723
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040717115700.A153DA0F21@frink.w3.org>
Resent-Date: Sat, 17 Jul 2004 07:57:00 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 0041945F85256ED4_=
Content-Type: text/plain; charset="US-ASCII"

I agree that (4) is the best approach.

Cheers,
Geoff

Julian wrote on 07/17/2004 05:31:04 AM:
> Lisa reminded me of a question asked by Stanley half a year ago:
> 
> <http://lists.w3.org/Archives/Public/w3c-dist-auth/2003OctDec/0300.html>
> 
> "Under the topic of "Refreshing Locks", it hints that Client may include 

> a Timeout header. But, Depth header has not being mentioned.
> 
> Under the topic of "Depth and Locking", it discussed what will happen if 

> "Depth" header is specified for creating a new lock.  But, nothing was 
> mentioned on what's its implication on a lock refreshing command."
> 
> First of all, I've added this to my issues list as 
> <http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-
> latest.html#rfc.issue.5.2.1-depth_header_vs_lock_refresh> 
> (will show up next week).
> 
> When discussing the question we listed the options below:
> 
> 1) server MUST respect Depth header, possibly changing the lock scope
> 2) server MAY respect Depth header, possibly changing the lock scope
> 3) server SHOULD ignore Depth header
> 4) server MUST ignore Depth header
> 
> plus (by Lisa D.)
> 
> 5) Another option is to reject the request if the Depth header is 
> present and has the wrong value.
> 
> Technically, 5) makes sense; but it would break clients that take out 
> Depth: 0 locks on resources but then don't specify Depth: 0 on a lock 
> refresh (the Depth: header defaults to 'infinity' for the LOCK method).
> 
> In the meantime I have tested at least Office2003, which indeed 
> specifies the Depth: 0 header upon LOCK refresh; thus would continue to 
> work. I'm unsure about other clients (older Office versions, Xythos, 
> MacOSX), so I'd still prefer option 4 (and this is what I'll put in into 

> my locking document, as it seems the clarification with the lowest risk 
> of breaking anything).

--=_alternative 0041945F85256ED4_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2><tt>I agree that (4) is the best approach.</tt></font>
<br>
<br><font size=2><tt>Cheers,</tt></font>
<br><font size=2><tt>Geoff</tt></font>
<br>
<br><font size=2><tt>Julian wrote on 07/17/2004 05:31:04 AM:<br>
&gt; Lisa reminded me of a question asked by Stanley half a year ago:<br>
&gt; <br>
&gt; &lt;http://lists.w3.org/Archives/Public/w3c-dist-auth/2003OctDec/0300.html&gt;<br>
&gt; <br>
&gt; &quot;Under the topic of &quot;Refreshing Locks&quot;, it hints that
Client may include <br>
&gt; a Timeout header. But, Depth header has not being mentioned.<br>
&gt; <br>
&gt; Under the topic of &quot;Depth and Locking&quot;, it discussed what
will happen if <br>
&gt; &quot;Depth&quot; header is specified for creating a new lock. &nbsp;But,
nothing was <br>
&gt; mentioned on what's its implication on a lock refreshing command.&quot;<br>
&gt; <br>
&gt; First of all, I've added this to my issues list as <br>
&gt; &lt;http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-<br>
&gt; latest.html#rfc.issue.5.2.1-depth_header_vs_lock_refresh&gt; <br>
&gt; (will show up next week).<br>
&gt; <br>
&gt; When discussing the question we listed the options below:<br>
&gt; <br>
&gt; 1) server MUST respect Depth header, possibly changing the lock scope<br>
&gt; 2) server MAY respect Depth header, possibly changing the lock scope<br>
&gt; 3) server SHOULD ignore Depth header<br>
&gt; 4) server MUST ignore Depth header<br>
&gt; <br>
&gt; plus (by Lisa D.)<br>
&gt; <br>
&gt; 5) Another option is to reject the request if the Depth header is
<br>
&gt; present and has the wrong value.<br>
&gt; <br>
&gt; Technically, 5) makes sense; but it would break clients that take
out <br>
&gt; Depth: 0 locks on resources but then don't specify Depth: 0 on a lock
<br>
&gt; refresh (the Depth: header defaults to 'infinity' for the LOCK method).<br>
&gt; <br>
&gt; In the meantime I have tested at least Office2003, which indeed <br>
&gt; specifies the Depth: 0 header upon LOCK refresh; thus would continue
to <br>
&gt; work. I'm unsure about other clients (older Office versions, Xythos,
<br>
&gt; MacOSX), so I'd still prefer option 4 (and this is what I'll put in
into <br>
&gt; my locking document, as it seems the clarification with the lowest
risk <br>
&gt; of breaking anything).<br>
</tt></font>
--=_alternative 0041945F85256ED4_=--



From w3c-dist-auth-request@w3.org  Sat Jul 17 12:34:14 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA24140
	for <webdav-archive@lists.ietf.org>; Sat, 17 Jul 2004 12:34:14 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 8DAF2A0841; Sat, 17 Jul 2004 12:34:16 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id BFB3DA0D8F
	for <w3c-dist-auth@listhub.w3.org>; Sat, 17 Jul 2004 12:33:58 -0400 (EDT)
Received: from kahuna.osafoundation.org ([204.152.186.98])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1Bls8M-0000fJ-Fn
	for w3c-dist-auth@w3.org; Sat, 17 Jul 2004 12:33:58 -0400
Old-X-Envelope-From: lisa@osafoundation.org
Old-X-Envelope-To: w3c-dist-auth@w3.org
Received: from [192.168.1.100] ([198.144.201.116])
	(authenticated bits=0)
	by kahuna.osafoundation.org (8.12.8/8.12.8) with ESMTP id i6HGXkJL025441
	(version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO);
	Sat, 17 Jul 2004 09:33:50 -0700
In-Reply-To: <OFD4EC9880.E11B1E19-ON85256ED4.0041664D-85256ED4.00419462@us.ibm.com>
References: <OFD4EC9880.E11B1E19-ON85256ED4.0041664D-85256ED4.00419462@us.ibm.com>
Mime-Version: 1.0 (Apple Message framework v618)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <0E7784BE-D80F-11D8-AE07-000A95B2BB72@osafoundation.org>
Content-Transfer-Encoding: 7bit
Cc: " webdav" <w3c-dist-auth@w3.org>
From: Lisa Dusseault <lisa@osafoundation.org>
Date: Sat, 17 Jul 2004 09:33:38 -0700
To: Geoffrey M Clemm <geoffrey.clemm@us.ibm.com>
X-Mailer: Apple Mail (2.618)
X-Scanned-By: MIMEDefang 2.39
Subject: Re: (sort-of) new LOCK refresh/depth issue
X-Archived-At: http://www.w3.org/mid/0E7784BE-D80F-11D8-AE07-000A95B2BB72@osafoundation.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8724
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040717163416.8DAF2A0841@frink.w3.org>
Resent-Date: Sat, 17 Jul 2004 12:34:16 -0400 (EDT)
Content-Transfer-Encoding: 7bit


I can agree with (4) too.

My intent with (5) was that only if the client actually *sent* the  
header (not if it was inferred or defaulted to 'infinity') would the  
server look at it and compare the value.  So it wouldn't break any  
clients unless they were doing something seriously confusing.  But that  
seems like pointless extra work for the server.

lisa


On Jul 17, 2004, at 4:56 AM, Geoffrey M Clemm wrote:

> I agree that (4) is the best approach.
>
> Cheers,
> Geoff
>
> Julian wrote on 07/17/2004 05:31:04 AM:
>> Lisa reminded me of a question asked by Stanley half a year ago:
>>
>> <http://lists.w3.org/Archives/Public/w3c-dist-auth/2003OctDec/ 
>> 0300.html>
>>
>> "Under the topic of "Refreshing Locks", it hints that Client may  
>> include
>
>> a Timeout header. But, Depth header has not being mentioned.
>>
>> Under the topic of "Depth and Locking", it discussed what will happen  
>> if
>
>> "Depth" header is specified for creating a new lock.  But, nothing was
>> mentioned on what's its implication on a lock refreshing command."
>>
>> First of all, I've added this to my issues list as
>> <http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-
>> latest.html#rfc.issue.5.2.1-depth_header_vs_lock_refresh>
>> (will show up next week).
>>
>> When discussing the question we listed the options below:
>>
>> 1) server MUST respect Depth header, possibly changing the lock scope
>> 2) server MAY respect Depth header, possibly changing the lock scope
>> 3) server SHOULD ignore Depth header
>> 4) server MUST ignore Depth header
>>
>> plus (by Lisa D.)
>>
>> 5) Another option is to reject the request if the Depth header is
>> present and has the wrong value.
>>
>> Technically, 5) makes sense; but it would break clients that take out
>> Depth: 0 locks on resources but then don't specify Depth: 0 on a lock
>> refresh (the Depth: header defaults to 'infinity' for the LOCK  
>> method).
>>
>> In the meantime I have tested at least Office2003, which indeed
>> specifies the Depth: 0 header upon LOCK refresh; thus would continue  
>> to
>> work. I'm unsure about other clients (older Office versions, Xythos,
>> MacOSX), so I'd still prefer option 4 (and this is what I'll put in  
>> into
>
>> my locking document, as it seems the clarification with the lowest  
>> risk
>> of breaking anything).



From w3c-dist-auth-request@w3.org  Mon Jul 19 11:38:53 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA28214
	for <webdav-archive@lists.ietf.org>; Mon, 19 Jul 2004 11:38:52 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id F22A1A059B; Mon, 19 Jul 2004 11:38:54 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 2F6F3A067D
	for <w3c-dist-auth@listhub.w3.org>; Mon, 19 Jul 2004 11:38:53 -0400 (EDT)
Received: from mail.gmhwh.org ([12.110.19.37])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BmaDy-0001ax-2i
	for w3c-dist-auth@w3c.org; Mon, 19 Jul 2004 11:38:42 -0400
Received: from 192.168.8.246 by mail.gmhwh.org with ESMTP (<SMTP Relay>
 (MMS v5.5.3)); Mon, 19 Jul 2004 09:37:23 -0600
Received: from WH-INET-MTA by wh-inet.gmhwh.org with Novell_GroupWise;
 Mon, 19 Jul 2004 09:37:23 -0600
Message-ID: <s0fb9653.012@wh-inet.gmhwh.org>
X-Mailer: Novell GroupWise Internet Agent 6.5.1
Date: Mon, 19 Jul 2004 09:37:06 -0600
From: "Charlie Smith" <SmithCW@ldschurch.org>
To: w3c-dist-auth@w3c.org
MIME-Version: 1.0
X-WSS-ID: 6CE535396671619-01-03
Content-Type: text/plain;
 charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Subject: WebDAV over SSL
X-Archived-At: http://www.w3.org/mid/s0fb9653.012@wh-inet.gmhwh.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8725
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040719153854.F22A1A059B@frink.w3.org>
Resent-Date: Mon, 19 Jul 2004 11:38:54 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Does WebDAV work over SSL?

Sorry if I'm repeating question that has been asked before.

If WebDAV does not work over SSL, is there a timeframe for getting 
that to work?

Charlie ;)
7/19/04

------------------------------------------------------------------------------
This message may contain confidential information, and is
intended only for the use of the individual(s) to whom it
is addressed.
------------------------------------------------------------------------------



From w3c-dist-auth-request@w3.org  Mon Jul 19 11:43:05 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA28700
	for <webdav-archive@lists.ietf.org>; Mon, 19 Jul 2004 11:43:05 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id A4904A0508; Mon, 19 Jul 2004 11:43:07 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 49F51A0508
	for <w3c-dist-auth@listhub.w3.org>; Mon, 19 Jul 2004 11:43:06 -0400 (EDT)
Received: from imo-m27.mx.aol.com ([64.12.137.8])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BmaGm-0002EZ-NJ
	for w3c-dist-auth@w3c.org; Mon, 19 Jul 2004 11:41:36 -0400
Received: from FengAndy@aol.com
	by imo-m27.mx.aol.com (mail_out_v37_r2.6.) id l.59.10e424f7 (4328);
	Mon, 19 Jul 2004 11:40:58 -0400 (EDT)
From: FengAndy@aol.com
Message-ID: <59.10e424f7.2e2d458a@aol.com>
Date: Mon, 19 Jul 2004 11:40:58 EDT
To: SmithCW@ldschurch.org, w3c-dist-auth@w3c.org
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-----------------------------1090251658"
X-Mailer: AOL Strauss Beta Client sub 4001
Subject: Re: WebDAV over SSL
X-Archived-At: http://www.w3.org/mid/59.10e424f7.2e2d458a@aol.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8726
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040719154307.A4904A0508@frink.w3.org>
Resent-Date: Mon, 19 Jul 2004 11:43:07 -0400 (EDT)



-------------------------------1090251658
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit

 
 
There are several WebDAV clients support SSL. MSFT WebFolder, Mac Goliath  
etc.
 
In a message dated 7/19/2004 8:39:18 AM Pacific Daylight Time,  
SmithCW@ldschurch.org writes:


Does  WebDAV work over SSL?

Sorry if I'm repeating question that has been  asked before.

If WebDAV does not work over SSL, is there a timeframe  for getting 
that to work?

Charlie  ;)
7/19/04

------------------------------------------------------------------------------
This  message may contain confidential information, and is
intended only for the  use of the individual(s) to whom it
is  addressed.
------------------------------------------------------------------------------





-------------------------------1090251658
Content-Type: text/html; charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3DUS-ASCII">
<META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR></HEAD>
<BODY id=3Drole_body style=3D"FONT-SIZE: 10pt; COLOR: #000000; FONT-FAMILY:=20=
Arial"=20
bottomMargin=3D7 leftMargin=3D7 topMargin=3D7 rightMargin=3D7><FONT id=3Drol=
e_document=20
face=3DArial color=3D#000000 size=3D2>
<DIV>
<DIV>
<DIV>There are several WebDAV clients support SSL. MSFT WebFolder, Mac Golia=
th=20
etc.</DIV>
<DIV>&nbsp;</DIV>
<DIV>In a message dated 7/19/2004 8:39:18 AM Pacific Daylight Time,=20
SmithCW@ldschurch.org writes:</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: blue 2px solid"><=
FONT=20
  style=3D"BACKGROUND-COLOR: transparent" face=3DArial color=3D#000000 size=
=3D2><BR>Does=20
  WebDAV work over SSL?<BR><BR>Sorry if I'm repeating question that has been=
=20
  asked before.<BR><BR>If WebDAV does not work over SSL, is there a timefram=
e=20
  for getting <BR>that to work?<BR><BR>Charlie=20
  ;)<BR>7/19/04<BR><BR>-----------------------------------------------------=
-------------------------<BR>This=20
  message may contain confidential information, and is<BR>intended only for=20=
the=20
  use of the individual(s) to whom it<BR>is=20
  addressed.<BR>------------------------------------------------------------=
------------------<BR><BR></FONT></BLOCKQUOTE></DIV></DIV></FONT></BODY></HT=
ML>

-------------------------------1090251658--



From w3c-dist-auth-request@w3.org  Mon Jul 19 11:49:48 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA29275
	for <webdav-archive@lists.ietf.org>; Mon, 19 Jul 2004 11:49:47 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 1A136A0BAB; Mon, 19 Jul 2004 11:49:50 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id EF6A5A0BEB
	for <w3c-dist-auth@listhub.w3.org>; Mon, 19 Jul 2004 11:49:48 -0400 (EDT)
Received: from [217.5.201.10] (helo=greenbytes.de)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BmaOV-0003fY-3x
	for w3c-dist-auth@w3c.org; Mon, 19 Jul 2004 11:49:35 -0400
Received: from [192.168.1.26] by greenbytes.de
	(Cipher TLSv1:RC4-MD5:128) (MDaemon.PRO.v7.1.2.R)
	with ESMTP id md50000031464.msg
	for <w3c-dist-auth@w3c.org>; Mon, 19 Jul 2004 17:48:45 +0200
In-Reply-To: <s0fb9653.012@wh-inet.gmhwh.org>
References: <s0fb9653.012@wh-inet.gmhwh.org>
Mime-Version: 1.0 (Apple Message framework v618)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <1E2C1E6E-D99B-11D8-96D9-00039384827E@greenbytes.de>
Content-Transfer-Encoding: 7bit
Cc: w3c-dist-auth@w3c.org
From: Stefan Eissing <stefan.eissing@greenbytes.de>
Date: Mon, 19 Jul 2004 17:48:45 +0200
To: "Charlie Smith" <SmithCW@ldschurch.org>
X-Mailer: Apple Mail (2.618)
X-Authenticated-Sender: se@greenbytes.de
X-Spam-Processed: greenbytes.de, Mon, 19 Jul 2004 17:48:45 +0200
	(not processed: message from valid local sender)
X-MDRemoteIP: 192.168.1.26
X-Return-Path: stefan.eissing@greenbytes.de
X-MDaemon-Deliver-To: w3c-dist-auth@w3c.org
Subject: Re: WebDAV over SSL
X-Archived-At: http://www.w3.org/mid/1E2C1E6E-D99B-11D8-96D9-00039384827E@greenbytes.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8727
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040719154950.1A136A0BAB@frink.w3.org>
Resent-Date: Mon, 19 Jul 2004 11:49:50 -0400 (EDT)
Content-Transfer-Encoding: 7bit



Am 19.07.2004 um 17:37 schrieb Charlie Smith:

>
> Does WebDAV work over SSL?

Yes.

----------------------
This message was written as is and may or may not reflect the opionion 
of its author, the public at large or any ethnic minorities. It just 
is, was and will be again.




From w3c-dist-auth-request@w3.org  Mon Jul 19 16:04:54 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA19851
	for <webdav-archive@lists.ietf.org>; Mon, 19 Jul 2004 16:04:54 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 88A26A08CD; Mon, 19 Jul 2004 16:04:50 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 5C901A08CD
	for <w3c-dist-auth@listhub.w3.org>; Mon, 19 Jul 2004 16:04:45 -0400 (EDT)
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BmeMg-0007ve-Ul
	for w3c-dist-auth@w3.org; Mon, 19 Jul 2004 16:03:59 -0400
Received: from CNRI.Reston.VA.US (localhost [127.0.0.1])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA19823;
	Mon, 19 Jul 2004 16:03:55 -0400 (EDT)
Message-Id: <200407192003.QAA19823@ietf.org>
Mime-Version: 1.0
Content-Type: Multipart/Mixed; Boundary="NextPart"
To: i-d-announce@ietf.org
Cc: w3c-dist-auth@w3.org
From: Internet-Drafts@ietf.org
Date: Mon, 19 Jul 2004 16:03:55 -0400
Subject: I-D ACTION:draft-ietf-webdav-rfc2518bis-06.txt
X-Archived-At: http://www.w3.org/mid/200407192003.QAA19823@ietf.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8728
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040719200450.88A26A08CD@frink.w3.org>
Resent-Date: Mon, 19 Jul 2004 16:04:50 -0400 (EDT)


--NextPart

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the WWW Distributed Authoring and Versioning Working Group of the IETF.

	Title		: HTTP Extensions for Distributed Authoring - WebDAV RFC2518 bis
	Author(s)	: L. Dusseault, J. Crawford
	Filename	: draft-ietf-webdav-rfc2518bis-06.txt
	Pages		: 111
	Date		: 2004-7-19
	
WebDAV consists of a set of methods, headers, and content-types
   ancillary to HTTP/1.1 for the management of resource properties,
   creation and management of resource collections, namespace
   manipulation, and resource locking (collision avoidance).

   RFC2518 was published in February 1998, and this draft makes minor
   revisions mostly due to interoperability experience.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-webdav-rfc2518bis-06.txt

To remove yourself from the I-D Announcement list, send a message to 
i-d-announce-request@ietf.org with the word unsubscribe in the body of the message.  
You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce 
to change your subscription settings.


Internet-Drafts are also available by anonymous FTP. Login with the username
"anonymous" and a password of your e-mail address. After logging in,
type "cd internet-drafts" and then
	"get draft-ietf-webdav-rfc2518bis-06.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html 
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt


Internet-Drafts can also be obtained by e-mail.

Send a message to:
	mailserv@ietf.org.
In the body type:
	"FILE /internet-drafts/draft-ietf-webdav-rfc2518bis-06.txt".
	
NOTE:	The mail server at ietf.org can return the document in
	MIME-encoded form by using the "mpack" utility.  To use this
	feature, insert the command "ENCODING mime" before the "FILE"
	command.  To decode the response(s), you will need "munpack" or
	a MIME-compliant mail reader.  Different MIME-compliant mail readers
	exhibit different behavior, especially when dealing with
	"multipart" MIME messages (i.e. documents which have been split
	up into multiple messages), so check your local documentation on
	how to manipulate these messages.
		
		
Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Multipart/Alternative; Boundary="OtherAccess"

--OtherAccess
Content-Type: Message/External-body;
	access-type="mail-server";
	server="mailserv@ietf.org"

Content-Type: text/plain
Content-ID:	<2004-7-19152908.I-D@ietf.org>

ENCODING mime
FILE /internet-drafts/draft-ietf-webdav-rfc2518bis-06.txt

--OtherAccess
Content-Type: Message/External-body;
	name="draft-ietf-webdav-rfc2518bis-06.txt";
	site="ftp.ietf.org";
	access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID:	<2004-7-19152908.I-D@ietf.org>

--OtherAccess--

--NextPart--




From w3c-dist-auth-request@w3.org  Mon Jul 19 16:05:17 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA19895
	for <webdav-archive@lists.ietf.org>; Mon, 19 Jul 2004 16:05:16 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id A03C5A0FC9; Mon, 19 Jul 2004 16:05:08 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 15F24A0FC9
	for <w3c-dist-auth@listhub.w3.org>; Mon, 19 Jul 2004 16:05:07 -0400 (EDT)
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BmeNC-0007ze-6v
	for w3c-dist-auth@w3.org; Mon, 19 Jul 2004 16:04:30 -0400
Received: from CNRI.Reston.VA.US (localhost [127.0.0.1])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA19839;
	Mon, 19 Jul 2004 16:04:27 -0400 (EDT)
Message-Id: <200407192004.QAA19839@ietf.org>
Mime-Version: 1.0
Content-Type: Multipart/Mixed; Boundary="NextPart"
To: i-d-announce@ietf.org
Cc: w3c-dist-auth@w3.org
From: Internet-Drafts@ietf.org
Date: Mon, 19 Jul 2004 16:04:27 -0400
Subject: I-D ACTION:draft-ietf-webdav-quota-03.txt
X-Archived-At: http://www.w3.org/mid/200407192004.QAA19839@ietf.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8729
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040719200508.A03C5A0FC9@frink.w3.org>
Resent-Date: Mon, 19 Jul 2004 16:05:08 -0400 (EDT)


--NextPart

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the WWW Distributed Authoring and Versioning Working Group of the IETF.

	Title		: Quota and Size Properties for DAV Collections
	Author(s)	: B. Korver, L. Dusseault
	Filename	: draft-ietf-webdav-quota-03.txt
	Pages		: 13
	Date		: 2004-7-19
	
WebDAV servers are frequently deployed with quota (size) limitations.
   This Internet-Draft discusses the properties and minor behaviors
   needed for clients to interoperate with quota implementations on
   WebDAV repositories.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-webdav-quota-03.txt

To remove yourself from the I-D Announcement list, send a message to 
i-d-announce-request@ietf.org with the word unsubscribe in the body of the message.  
You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce 
to change your subscription settings.


Internet-Drafts are also available by anonymous FTP. Login with the username
"anonymous" and a password of your e-mail address. After logging in,
type "cd internet-drafts" and then
	"get draft-ietf-webdav-quota-03.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html 
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt


Internet-Drafts can also be obtained by e-mail.

Send a message to:
	mailserv@ietf.org.
In the body type:
	"FILE /internet-drafts/draft-ietf-webdav-quota-03.txt".
	
NOTE:	The mail server at ietf.org can return the document in
	MIME-encoded form by using the "mpack" utility.  To use this
	feature, insert the command "ENCODING mime" before the "FILE"
	command.  To decode the response(s), you will need "munpack" or
	a MIME-compliant mail reader.  Different MIME-compliant mail readers
	exhibit different behavior, especially when dealing with
	"multipart" MIME messages (i.e. documents which have been split
	up into multiple messages), so check your local documentation on
	how to manipulate these messages.
		
		
Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Multipart/Alternative; Boundary="OtherAccess"

--OtherAccess
Content-Type: Message/External-body;
	access-type="mail-server";
	server="mailserv@ietf.org"

Content-Type: text/plain
Content-ID:	<2004-7-19152914.I-D@ietf.org>

ENCODING mime
FILE /internet-drafts/draft-ietf-webdav-quota-03.txt

--OtherAccess
Content-Type: Message/External-body;
	name="draft-ietf-webdav-quota-03.txt";
	site="ftp.ietf.org";
	access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID:	<2004-7-19152914.I-D@ietf.org>

--OtherAccess--

--NextPart--




From w3c-dist-auth-request@w3.org  Mon Jul 26 10:00:50 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA27642
	for <webdav-archive@lists.ietf.org>; Mon, 26 Jul 2004 10:00:49 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id AD03CA1C05; Mon, 26 Jul 2004 10:00:45 -0400 (EDT)
X-Original-To: w3c-dist-auth@frink.w3.org
Delivered-To: w3c-dist-auth@frink.w3.org
Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.47])
	by frink.w3.org (Postfix) with ESMTP id 39C92A1C05
	for <w3c-dist-auth@frink.w3.org>; Mon, 26 Jul 2004 10:00:40 -0400 (EDT)
Received: from mac.com (smtpin01-en2 [10.13.10.146])
	by smtpout.mac.com (8.12.6/MantshX 2.0) with ESMTP id i6QE0FGQ000817
	for <w3c-dist-auth@listhub.w3.org>; Mon, 26 Jul 2004 07:00:15 -0700 (PDT)
Received: from [168.16.213.98] (sleepy.gcsu.edu [168.16.213.98])
	(authenticated bits=0)
	by mac.com (Xserve/smtpin01/MantshX 4.0) with ESMTP id i6QE0D3c020572
	for <w3c-dist-auth@listhub.w3.org>; Mon, 26 Jul 2004 07:00:14 -0700 (PDT)
Mime-Version: 1.0
X-Sender: frank.lowney@mail.mac.com
Message-Id: <p06110407bd2abdf1c8d1@[168.16.213.98]>
In-Reply-To: <1E2C1E6E-D99B-11D8-96D9-00039384827E@greenbytes.de>
References: <s0fb9653.012@wh-inet.gmhwh.org>
 <1E2C1E6E-D99B-11D8-96D9-00039384827E@greenbytes.de>
Date: Mon, 26 Jul 2004 10:00:11 -0400
To: w3c-dist-auth@frink.w3.org
From: Frank Lowney <frank.lowney@mac.com>
Content-Type: text/plain; charset="us-ascii"
Subject: Re: WebDAV over SSL
X-Archived-At: http://www.w3.org/mid/p06110407bd2abdf1c8d1@%5B168.16.213.98%5D
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8730
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040726140045.AD03CA1C05@frink.w3.org>
Resent-Date: Mon, 26 Jul 2004 10:00:45 -0400 (EDT)


Stefan Eissing <stefan.eissing@greenbytes.de> responded:

>Am 19.07.2004 um 17:37 schrieb Charlie Smith:
>
>>
>>Does WebDAV work over SSL?
>
>Yes.
>

But do all clients work successfully with WebDAV via SSL?  It used to be that the MacOS X client built into the OS would not.  Has that changed?  What does the score card for other OSs look like?

Under what circumstances does WebDAV over SSL make sense?  If I am simply working on a public web site, intercepting the info en route is no big deal but changing it en route would be.

-- 
=====================================================================
Dr. Frank Lowney  frank.lowney@gcsu.edu
    Director, Electronic Instructional Services, a unit of the
    Office of Information and Instructional Technology,
    Professional Pages: http://www.gcsu.edu/oiit/eis/
    Personal Pages: http://www.faculty.de.gcsu.edu/~flowney
Voice: (478) 445-5260
NOTICE: Please be advised that I am hearing impaired and communicate most effectively via e-mail.  Follow-up summaries of telephone conversations by e-mail are most appreciated.
=====================================================================
We don't make instruction effective, we make effective instruction more accessible.



From w3c-dist-auth-request@w3.org  Tue Jul 27 07:14:06 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA05411
	for <webdav-archive@lists.ietf.org>; Tue, 27 Jul 2004 07:14:06 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 79715A0FC5; Tue, 27 Jul 2004 07:14:06 -0400 (EDT)
X-Original-To: w3c-dist-auth@frink.w3.org
Delivered-To: w3c-dist-auth@frink.w3.org
Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140])
	by frink.w3.org (Postfix) with ESMTP id BF2BAA103D
	for <w3c-dist-auth@frink.w3.org>; Tue, 27 Jul 2004 07:14:01 -0400 (EDT)
Received: from ams-core-1.cisco.com (144.254.224.150)
  by ams-iport-1.cisco.com with ESMTP; 27 Jul 2004 13:20:24 +0200
X-BrightmailFiltered: true
Received: from xbe-ams-312.cisco.com (xbe-ams-312.cisco.com [144.254.228.202])
	by ams-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id i6RBCxUD019930;
	Tue, 27 Jul 2004 13:13:06 +0200 (MEST)
Received: from xfe-ams-312.cisco.com ([144.254.228.205]) by xbe-ams-312.cisco.com with Microsoft SMTPSVC(5.0.2195.5329);
	 Tue, 27 Jul 2004 13:13:05 +0200
Received: from [127.0.0.1] ([144.254.226.40]) by xfe-ams-312.cisco.com with Microsoft SMTPSVC(6.0.3790.0);
	 Tue, 27 Jul 2004 13:13:05 +0200
In-Reply-To: <p06110407bd2abdf1c8d1@[168.16.213.98]>
References: <s0fb9653.012@wh-inet.gmhwh.org> <1E2C1E6E-D99B-11D8-96D9-00039384827E@greenbytes.de> <p06110407bd2abdf1c8d1@[168.16.213.98]>
Mime-Version: 1.0 (Apple Message framework v618)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <EE0151BA-DFBD-11D8-A6A8-000A95B2B926@cisco.com>
Content-Transfer-Encoding: 7bit
Cc: w3c-dist-auth@frink.w3.org
From: =?ISO-8859-1?Q?Patrik_F=E4ltstr=F6m?= <paf@cisco.com>
Date: Tue, 27 Jul 2004 13:13:04 +0200
To: Frank Lowney <frank.lowney@mac.com>
X-Mailer: Apple Mail (2.618)
X-OriginalArrivalTime: 27 Jul 2004 11:13:05.0323 (UTC) FILETIME=[B0653FB0:01C473CA]
Subject: Re: WebDAV over SSL
X-Archived-At: http://www.w3.org/mid/EE0151BA-DFBD-11D8-A6A8-000A95B2B926@cisco.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8731
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040727111406.79715A0FC5@frink.w3.org>
Resent-Date: Tue, 27 Jul 2004 07:14:06 -0400 (EDT)
Content-Transfer-Encoding: 7bit



On Jul 26, 2004, at 16:00, Frank Lowney wrote:

> But do all clients work successfully with WebDAV via SSL?  It used to 
> be that the MacOS X client built into the OS would not.  Has that 
> changed?  What does the score card for other OSs look like?

MacOSX WebDAV client does not handle DAV over SSL.

    paf



From w3c-dist-auth-request@w3.org  Tue Jul 27 13:15:41 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA29949
	for <webdav-archive@lists.ietf.org>; Tue, 27 Jul 2004 13:15:39 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 2F5FAA105F; Tue, 27 Jul 2004 13:15:34 -0400 (EDT)
X-Original-To: w3c-dist-auth@frink.w3.org
Delivered-To: w3c-dist-auth@frink.w3.org
Received: from scanner2.ics.uci.edu (scanner2.ics.uci.edu [128.195.1.36])
	by frink.w3.org (Postfix) with ESMTP id 67FB1A07AB
	for <w3c-dist-auth@frink.w3.org>; Tue, 27 Jul 2004 13:15:30 -0400 (EDT)
Received: from [128.195.20.215] (doric.ics.uci.edu [128.195.20.215])
	by scanner2.ics.uci.edu (8.12.10/8.12.10) with ESMTP id i6RHE7GK011224;
	Tue, 27 Jul 2004 10:14:07 -0700 (PDT)
Message-ID: <41068CCB.30807@ics.uci.edu>
Date: Tue, 27 Jul 2004 10:11:39 -0700
From: Joachim Feise <jfeise@ics.uci.edu>
Reply-To: jfeise@ics.uci.edu
Organization: University of California, Irvine
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.7.1) Gecko/20040707 Mnenhy/0.6.0.103
X-Accept-Language: en, de
MIME-Version: 1.0
To: w3c-dist-auth@frink.w3.org
References: <s0fb9653.012@wh-inet.gmhwh.org> <1E2C1E6E-D99B-11D8-96D9-00039384827E@greenbytes.de> <p06110407bd2abdf1c8d1@[168.16.213.98]>
In-Reply-To: <p06110407bd2abdf1c8d1@[168.16.213.98]>
X-Enigmail-Version: 0.84.2.0
X-Enigmail-Supports: pgp-inline, pgp-mime
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-ICS-MailScanner: Found to be clean
X-ICS-MailScanner-SpamCheck: not spam (whitelisted),
	SpamAssassin (score=-100, required 5, USER_IN_WHITELIST)
Subject: Re: WebDAV over SSL
X-Archived-At: http://www.w3.org/mid/41068CCB.30807@ics.uci.edu
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8732
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040727171534.2F5FAA105F@frink.w3.org>
Resent-Date: Tue, 27 Jul 2004 13:15:34 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Frank Lowney wrote on 7/26/2004 7:00:
> Under what circumstances does WebDAV over SSL make sense?

Whenever you use authentication to control access.
Using Basic Authentication without SSL is completely useless,
since username and password are transmitted in clear text with
just a trivial encoding.

-Joe



From w3c-dist-auth-request@w3.org  Tue Jul 27 13:55:41 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA02156
	for <webdav-archive@lists.ietf.org>; Tue, 27 Jul 2004 13:55:40 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 6C670A132A; Tue, 27 Jul 2004 13:55:40 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 14EE3A1374
	for <w3c-dist-auth@listhub.w3.org>; Tue, 27 Jul 2004 13:55:37 -0400 (EDT)
Received: from kahuna.osafoundation.org ([204.152.186.98])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BpWA8-0008FF-Uu
	for w3c-dist-auth@w3c.org; Tue, 27 Jul 2004 13:54:53 -0400
Old-X-Envelope-From: lisa@osafoundation.org
Old-X-Envelope-To: <w3c-dist-auth@w3c.org>
Received: from [192.168.101.178] (w002.z065106067.sjc-ca.dsl.cnc.net [65.106.67.2])
	(authenticated bits=0)
	by kahuna.osafoundation.org (8.12.8/8.12.8) with ESMTP id i6RHsppD021348
	(version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO)
	for <w3c-dist-auth@w3c.org>; Tue, 27 Jul 2004 10:54:51 -0700
Mime-Version: 1.0 (Apple Message framework v618)
Content-Transfer-Encoding: 7bit
Message-Id: <089229A9-DFF6-11D8-B9A8-000A95B2BB72@osafoundation.org>
Content-Type: text/plain; charset=US-ASCII; format=flowed
To: Webdav WG <w3c-dist-auth@w3c.org>
From: Lisa Dusseault <lisa@osafoundation.org>
Date: Tue, 27 Jul 2004 10:54:40 -0700
X-Mailer: Apple Mail (2.618)
X-Scanned-By: MIMEDefang 2.39
Subject: Dinner in San Diego, Thurs Aug 5
X-Archived-At: http://www.w3.org/mid/089229A9-DFF6-11D8-B9A8-000A95B2BB72@osafoundation.org
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8733
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040727175540.6C670A132A@frink.w3.org>
Resent-Date: Tue, 27 Jul 2004 13:55:40 -0400 (EDT)
Content-Transfer-Encoding: 7bit


If you're going to be at the IETF in San Diego next week, come out for 
a casual group dinner on Thursday.  We've done this previous years and 
usually managed to get a small crowd of people together.  This year, 
since the WG meeting is on Thursday, 1530 to 1730, we'll just head out 
after the meeting with whoever wants to join us, and try to finish 
around the beginning of the Plenary session. It would be nice to get a 
count of people who know they want to come so let me know if you plan 
to join us (and whether there are any important restaurant choice 
considerations).

Joe already confirmed he'd be there, so if you haven't met Joe -- or me 
-- come along!

Lisa



From w3c-dist-auth-request@w3.org  Tue Jul 27 15:58:36 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA10687
	for <webdav-archive@lists.ietf.org>; Tue, 27 Jul 2004 15:58:36 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 9D4EEA1416; Tue, 27 Jul 2004 15:58:36 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id EBEC7A140E
	for <w3c-dist-auth@listhub.w3.org>; Tue, 27 Jul 2004 15:58:29 -0400 (EDT)
Received: from mail.gmx.net ([213.165.64.20])
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BpY5b-0005Tw-9C
	for w3c-dist-auth@w3c.org; Tue, 27 Jul 2004 15:58:19 -0400
Received: (qmail 32675 invoked by uid 65534); 27 Jul 2004 19:57:46 -0000
Received: from p54856262.dip.t-dialin.net (EHLO [192.168.0.2]) (84.133.98.98)
  by mail.gmx.net (mp019) with SMTP; 27 Jul 2004 21:57:46 +0200
X-Authenticated: #1915285
Message-ID: <4106B3B7.7000601@gmx.de>
Date: Tue, 27 Jul 2004 21:57:43 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.2 (Windows/20040707)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: w3c-dist-auth@w3c.org
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: IETF meeting comments
X-Archived-At: http://www.w3.org/mid/4106B3B7.7000601@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8734
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040727195836.9D4EEA1416@frink.w3.org>
Resent-Date: Tue, 27 Jul 2004 15:58:36 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Hi,

I'll not be able to attend the meeting, neither personally, nor using 
the text conferencing facilities. BTW: will the meeting actually take 
place? I'm asking because it's in one week, and no agenda has been posted.

Anyway, here's what I think *should* be discussed primarily:

The BIND spec has been stuck in it's current (IMHO finished) state for 
several months now, and the updated working group charter 
(<http://www.ietf.org/html.charters/webdav-charter.html>) says it should 
have been (wg-) last-called two months ago. This hasn't happened.

Note the current BIND spec is version 06 (HTML: 
<http://greenbytes.de/tech/webdav/draft-ietf-webdav-bind-06.html>, TXT: 
<http://www.ietf.org/internet-drafts/draft-ietf-webdav-bind-06.txt>, 
issues list: 
<http://greenbytes.de/tech/webdav/draft-ietf-webdav-bind-issues.html>).

As far as I can tell, the only remaining open question is whether 
RFC2518's treatment of locks is sufficient to explain the relation 
betweem (multiple) bindings and locks. The (active) authors of the spec 
(Geoff and myself) agree that the BIND spec is compatible with what 
RFC2518 says about locks, and no further clarification is stricly 
required. Note that RFC2518 already talks about locking "replicated 
resources" 
(<http://greenbytes.de/tech/webdav/rfc2518.html#rfc.section.8.10.3>), so 
this has been explicitly planned for even back then. The important fact 
here being that multiple bindings to a resource and locks are already 
compatible, and nothing needs to ne explicitly changed for that.

Now, how should that spec proceed? There seem to be several options, 
including:

#1) Just release the BIND spec as is (that is, immediately do a WG last 
call),

#2) Add locking specific clarifications to BIND, then release it,

#3) Release the BIND spec with a normative reference to RFC2518bis 
(essentially delaying it until RFC2518bis is finished) or

#4) Extract locking out of RFC2518bis into a separate spec, resolve all 
open locking-related issues, and submit this as a new specification 
(updating RFC2518) for publication as a proposed standard (note there's 
a long summary about this option posted by me in April (!): 
<http://lists.w3.org/Archives/Public/w3c-dist-auth/2004AprJun/0049.html>). 
Note that none of these open locking issues (those listed on RFC2518's 
issues list at <http://www.webdav.org/wg/rfcdev/issues.htm> actually has 
*anything* to do with the relation to multiple bindings). BIND then can 
either be released independantly or with a normative reference to that 
new spec.

Personally I see nothing wrong with option #1. Several implementors 
already have BIND working experimentally as defined in the spec (for 
instance Apache Slide and SAP in Netweaver). More people seem to look at 
it but may be waiting for it to become an RFC. Unless there's an actual 
risk of people misunderstanding BIND and lock interactions (something we 
*could* take care of on this mailing list), having possible lock 
clarifications appear in something published slightly later doesn't seem 
to be any problem at all.

#2 IMHO would be an *extremely* bad idea, because it would duplicate 
specification text in several specs, so spec revisions either need to be 
100% compatible with it; or BIND would soon need to be updated itself by 
these revisions. So there'd be additional work and risk of being 
inconsistent with very little gain. Remember that support for multiple 
bindings and locking are completely separate things (you can have 
multiple bindings on a server without locking support because locking is 
an *optional* WebDAV feature).

#3 makes sense if RFC2518bis is actually going to be finished anytime 
soon. I made my contribution by pushing for resolutions for almost all 
locking-related questions; but it's up to the authors to give an 
estimate about when it can be done. (I'll try to review the new draft 
before next week; and it would be good if others would do that as well).

#4 is the option I've been working on the last three months (HTML: 
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-05.html>, 
TXT: 
<http://www.ietf.org/internet-drafts/draft-reschke-webdav-locking-05.txt>, 
issues list: 
<http://greenbytes.de/tech/webdav/draft-reschke-webdav-locking-issues.html>). 
As far as I'm concerned, this spec is almost done (with the notable 
exception of finding the right place for the GULP summary and discussing 
the locking-related questions of "If" header semantics). Even if the 
working group decides not to adopt this as a WG document, the effort 
still will have been worth it for the progress we've been making on open 
locking issues. Of course I personally would like to see this to be used 
as a basis for a new specification so that the locking feature can be 
removed from RFC2518bis. This would actually make it *easier* for 
RFC2518bis to progress to a "draft" standard, because it would be 
significanly simplified.
In the case the WG makes that decision, I'll happily work together with 
volunteers to finish this as a working group document.


As far as other specs are concerned (SEARCH, REDIRECT), I expect to get 
back to them as soon as we have made progress on the BIND issue.

Best regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Tue Jul 27 19:22:29 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA20240
	for <webdav-archive@lists.ietf.org>; Tue, 27 Jul 2004 19:22:28 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id E77ADA176E; Tue, 27 Jul 2004 19:22:29 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 032F6A2362
	for <w3c-dist-auth@listhub.w3.org>; Tue, 27 Jul 2004 19:22:25 -0400 (EDT)
Received: from dc3.com ([68.98.211.142] helo=mail.dc3.com)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BpbH5-0001Ps-IX
	for w3c-dist-auth@w3c.org; Tue, 27 Jul 2004 19:22:23 -0400
Received: from [68.98.211.147] by dc3.com
	(MDaemon.PRO.v7.1.2.R)
	with ESMTP id md50000019602.msg
	for <w3c-dist-auth@w3c.org>; Tue, 27 Jul 2004 16:22:17 -0700
Message-ID: <4106E3A6.6040204@dc3.com>
Date: Tue, 27 Jul 2004 16:22:14 -0700
From: Bob Denny <rdenny@dc3.com>
Organization: DC-3 Dreams, SP
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.1) Gecko/20040707
X-Accept-Language: en, pdf
MIME-Version: 1.0
To: Julian Reschke <julian.reschke@gmx.de>
Cc: w3c-dist-auth@w3c.org
References: <4106B3B7.7000601@gmx.de>
In-Reply-To: <4106B3B7.7000601@gmx.de>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Authenticated-Sender: rdenny@dc3.com
X-Spam-Processed: dc3.com, Tue, 27 Jul 2004 16:22:17 -0700
	(not processed: message from valid local sender)
X-MDRemoteIP: 68.98.211.147
X-Return-Path: rdenny@dc3.com
X-MDaemon-Deliver-To: w3c-dist-auth@w3c.org
Subject: Re: IETF meeting comments
X-Archived-At: http://www.w3.org/mid/4106E3A6.6040204@dc3.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8735
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040727232229.E77ADA176E@frink.w3.org>
Resent-Date: Tue, 27 Jul 2004 19:22:29 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Julian, et al. --

After a 2 year absence from working on DAV, I re-activated my project (a
DAV server-side package) and was quickly overwhelmed with more "gotchas".
The biggest one was an attempt to LOCK a non-existent file by Dreamweaver.

I know you all have put forth a big effort to get DAV into shape to support
it's mission, and it appears that you're about to release the definitive
spec to follow RFC2518.

But as an outsider trying to implement a server, I have once again given
up. The Microsoft "extensions" and quirks (still out there en masse), their
inability to use ISO dates, and the usage patterns that come from the many
DAV clients out there are really too broad-scoped to conceive when
designing a server.

When faced with LOCK on a non-existent resource, my design collapsed. I had
built the DAV server to use the NTFS file attributes (a separate place to
store info related to the main data in a file) so I could support moving
files around on the server machine with the local shell, and have the extra
DAV attributes and locks info move with the files and directories. The
operation of locking a non-existent file invalidates this approach, and
thus my entire design. It appears that a separate parallel universe like
mod-dav is required.

This was not at all obvious in RFC2518. And the "issues" lists are so full
of internals info and wording negotiations that guys like me give up trying
to mine useful implementation tips out of them too.

I know of several people who gave up on client side implementations of
WebDAV as well. Managing locks seems to be the land mine that ends
projects. Personally, I think it got beyond the 90/10 realm, and became
overly complex (hence your approach of dealing with it in a separate
document :-))). I doubt that most of the clients out there need/use but a
small part of the locking features.

Anyway, one thing I might suggest for the working group dinner at IETF is
to set aside some time to discuss how to lower the risks for implementation
of DAV clients and servers by people not actively participating in the WG.
Perhaps a survey of your members on the most common implementation issues,
and things that you probably won't think of when designing from the RFCs. A
"DAV Developer's Guide" (not related to Apache or mod-dav) would be a
wonderful addition to the documentation.

Respectfully,

  Bob Denny
  Mesa, AZ




From w3c-dist-auth-request@w3.org  Tue Jul 27 19:35:48 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA20641
	for <webdav-archive@lists.ietf.org>; Tue, 27 Jul 2004 19:35:47 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 88F98A238F; Tue, 27 Jul 2004 19:35:49 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id AB4A6A238F
	for <w3c-dist-auth@listhub.w3.org>; Tue, 27 Jul 2004 19:35:43 -0400 (EDT)
Received: from imap.gmx.net ([213.165.64.20] helo=mail.gmx.net)
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BpbTy-0003JN-QT
	for w3c-dist-auth@w3c.org; Tue, 27 Jul 2004 19:35:43 -0400
Received: (qmail 17132 invoked by uid 65534); 27 Jul 2004 23:35:10 -0000
Received: from p54856262.dip.t-dialin.net (EHLO [192.168.0.2]) (84.133.98.98)
  by mail.gmx.net (mp008) with SMTP; 28 Jul 2004 01:35:10 +0200
X-Authenticated: #1915285
Message-ID: <4106E6AB.8040807@gmx.de>
Date: Wed, 28 Jul 2004 01:35:07 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.2 (Windows/20040707)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Bob Denny <rdenny@dc3.com>
Cc: w3c-dist-auth@w3c.org
References: <4106B3B7.7000601@gmx.de> <4106E3A6.6040204@dc3.com>
In-Reply-To: <4106E3A6.6040204@dc3.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: IETF meeting comments
X-Archived-At: http://www.w3.org/mid/4106E6AB.8040807@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8736
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040727233549.88F98A238F@frink.w3.org>
Resent-Date: Tue, 27 Jul 2004 19:35:49 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Bob Denny wrote:
> Julian, et al. --
> 
> After a 2 year absence from working on DAV, I re-activated my project (a
> DAV server-side package) and was quickly overwhelmed with more "gotchas".
> The biggest one was an attempt to LOCK a non-existent file by Dreamweaver.
> 
> I know you all have put forth a big effort to get DAV into shape to support
> it's mission, and it appears that you're about to release the definitive
> spec to follow RFC2518.
> 
> But as an outsider trying to implement a server, I have once again given
> up. The Microsoft "extensions" and quirks (still out there en masse), their
> inability to use ISO dates, and the usage patterns that come from the many
> DAV clients out there are really too broad-scoped to conceive when
> designing a server.

I think the latest Microsoft clients work just fine with a compliant 
WebDAV server, that is, no more problems with the correct date formats 
(in the past it would only work when the (proper) date would come with a 
datatype declaration).

> When faced with LOCK on a non-existent resource, my design collapsed. I had
> built the DAV server to use the NTFS file attributes (a separate place to
> store info related to the main data in a file) so I could support moving
> files around on the server machine with the local shell, and have the extra
> DAV attributes and locks info move with the files and directories. The
> operation of locking a non-existent file invalidates this approach, and
> thus my entire design. It appears that a separate parallel universe like
> mod-dav is required.

Not really. In the meantime, the working group has agreed that "lock 
null" resources are just too complicated to justify them and has settled 
with something cheaper. Hence, if you LOCK an unmapped resource, this is 
equivalent to PUTting an empty resource, then locking it. This should 
make things *much* easier and works fine with the standard clients.

> This was not at all obvious in RFC2518. And the "issues" lists are so full
> of internals info and wording negotiations that guys like me give up trying
> to mine useful implementation tips out of them too.

That's why we have a mailing list and try to get out updated specs.

> I know of several people who gave up on client side implementations of
> WebDAV as well. Managing locks seems to be the land mine that ends
> projects. Personally, I think it got beyond the 90/10 realm, and became
> overly complex (hence your approach of dealing with it in a separate
> document :-))). I doubt that most of the clients out there need/use but a
> small part of the locking features.

That's probably correct. In particular, I think having a RFC2518bis with 
locking removed (into a separate spec) may actually help adoption of 
WebDAV. It's important to realize that not to implement WebDAV locks is 
just fine; WebDAV consists of namespace operations (COPY/MOVE, Depth 
operations), metadata (PROPFIND/PROPPATCH) and locks (LOCK/UNLOCK). The 
latter are optional, and many interesting things can be done entirely 
without them.

> Anyway, one thing I might suggest for the working group dinner at IETF is
> to set aside some time to discuss how to lower the risks for implementation
> of DAV clients and servers by people not actively participating in the WG.
> Perhaps a survey of your members on the most common implementation issues,
> and things that you probably won't think of when designing from the RFCs. A
> "DAV Developer's Guide" (not related to Apache or mod-dav) would be a
> wonderful addition to the documentation.

This is probably a good idea. Did you take a look at the "WebDAV book of 
why" (<http://www.webdav.org/papers/#misc>) and Lisa's book 
(<http://www.amazon.com/exec/obidos/tg/detail/-/0130652083/002-9165843-0104803>)?

Best regards, Julian


-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Wed Jul 28 12:39:38 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA14232
	for <webdav-archive@lists.ietf.org>; Wed, 28 Jul 2004 12:39:38 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 13BD5A0FF0; Wed, 28 Jul 2004 12:39:40 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id 86EA7A16A6
	for <w3c-dist-auth@listhub.w3.org>; Wed, 28 Jul 2004 12:39:35 -0400 (EDT)
Received: from dc3.com ([68.98.211.142] helo=mail.dc3.com)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BprRS-0003NE-QJ
	for w3c-dist-auth@w3c.org; Wed, 28 Jul 2004 12:38:10 -0400
Received: from [68.98.211.147] by dc3.com
	(MDaemon.PRO.v7.1.2.R)
	with ESMTP id md50000019717.msg
	for <w3c-dist-auth@w3c.org>; Wed, 28 Jul 2004 09:38:05 -0700
Message-ID: <4107D669.70805@dc3.com>
Date: Wed, 28 Jul 2004 09:38:01 -0700
From: Bob Denny <rdenny@dc3.com>
Organization: DC-3 Dreams, SP
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.1) Gecko/20040707
X-Accept-Language: en, pdf
MIME-Version: 1.0
To: Julian Reschke <julian.reschke@gmx.de>
Cc: w3c-dist-auth@w3c.org
References: <4106B3B7.7000601@gmx.de> <4106E3A6.6040204@dc3.com> <4106E6AB.8040807@gmx.de>
In-Reply-To: <4106E6AB.8040807@gmx.de>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Authenticated-Sender: rdenny@dc3.com
X-Spam-Processed: dc3.com, Wed, 28 Jul 2004 09:38:05 -0700
	(not processed: message from valid local sender)
X-MDRemoteIP: 68.98.211.147
X-Return-Path: rdenny@dc3.com
X-MDaemon-Deliver-To: w3c-dist-auth@w3c.org
Subject: Re: IETF meeting comments
X-Archived-At: http://www.w3.org/mid/4107D669.70805@dc3.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8737
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040728163940.13BD5A0FF0@frink.w3.org>
Resent-Date: Wed, 28 Jul 2004 12:39:40 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Julian, et al. --

Thanks for your fast response. Lisa D. also answered privately. I do
appreciate the concerns of you both :-))

Creating an empty file when a lock null is received will certainly make
things possible again. I will try it, and press onward. My goal for the
moment is just to get DAV working with Dreamweaver, so that should reduce
the scope of patterns I must deal with :-)

One possibly useful thing would be to encourage the DAV client developers
to respect the DAV version and the list of DAV commands returned in an
OPTIONS request. It seems that at least some clients (GoLive and
Dreamweaver at least) don't look to see if LOCK and UNLOCK are in the
OPTIONS list. They send LOCK/UNLOCK regardless.

I got wound up tightly trying to support Microsoft's clients (with their
need for MS-Author-Via: DAV, non-standard dates, and crazy "extensions")
and gave up. I really don't care any more about Microsoft's DAV usage :-)))

Thanks also for the reference to papers. I'll review them.

  -- Bob




From w3c-dist-auth-request@w3.org  Wed Jul 28 18:33:02 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA12094
	for <webdav-archive@lists.ietf.org>; Wed, 28 Jul 2004 18:33:01 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id 98C45A0AE1; Wed, 28 Jul 2004 18:33:02 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id CB679A05BA
	for <w3c-dist-auth@listhub.w3.org>; Wed, 28 Jul 2004 18:32:58 -0400 (EDT)
Received: from mail.gmx.de ([213.165.64.20] helo=mail.gmx.net)
	by dr-nick.w3.org with smtp (Exim 4.32)
	id 1BpwyS-0006Sp-U5
	for w3c-dist-auth@w3c.org; Wed, 28 Jul 2004 18:32:37 -0400
Received: (qmail 10132 invoked by uid 65534); 28 Jul 2004 22:32:04 -0000
Received: from pD9E5142B.dip.t-dialin.net (EHLO [192.168.0.2]) (217.229.20.43)
  by mail.gmx.net (mp020) with SMTP; 29 Jul 2004 00:32:04 +0200
X-Authenticated: #1915285
Message-ID: <41082963.6020103@gmx.de>
Date: Thu, 29 Jul 2004 00:32:03 +0200
From: Julian Reschke <julian.reschke@gmx.de>
User-Agent: Mozilla Thunderbird 0.7.2 (Windows/20040707)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Bob Denny <rdenny@dc3.com>
Cc: w3c-dist-auth@w3c.org
References: <4106B3B7.7000601@gmx.de> <4106E3A6.6040204@dc3.com> <4106E6AB.8040807@gmx.de> <4107D669.70805@dc3.com>
In-Reply-To: <4107D669.70805@dc3.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: IETF meeting comments
X-Archived-At: http://www.w3.org/mid/41082963.6020103@gmx.de
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8738
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040728223302.98C45A0AE1@frink.w3.org>
Resent-Date: Wed, 28 Jul 2004 18:33:02 -0400 (EDT)
Content-Transfer-Encoding: 7bit


Bob Denny wrote:
> ...
> One possibly useful thing would be to encourage the DAV client developers
> to respect the DAV version and the list of DAV commands returned in an
> OPTIONS request. It seems that at least some clients (GoLive and
> Dreamweaver at least) don't look to see if LOCK and UNLOCK are in the
> OPTIONS list. They send LOCK/UNLOCK regardless.

That should be no problem as long as they handle "Method Not Allowed" 
properly.

> ...

Best regards, Julian

-- 
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760



From w3c-dist-auth-request@w3.org  Thu Jul 29 13:20:56 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA26282
	for <webdav-archive@lists.ietf.org>; Thu, 29 Jul 2004 13:20:56 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id C4CFEA0A7B; Thu, 29 Jul 2004 13:20:58 -0400 (EDT)
X-Original-To: w3c-dist-auth@frink.w3.org
Delivered-To: w3c-dist-auth@frink.w3.org
Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.85])
	by frink.w3.org (Postfix) with ESMTP id F0B55A0A7B
	for <w3c-dist-auth@frink.w3.org>; Thu, 29 Jul 2004 13:20:55 -0400 (EDT)
Received: from mac.com (smtpin08-en2 [10.13.10.153])
	by smtpout.mac.com (Xserve/MantshX 2.0) with ESMTP id i6THKqas021514
	for <w3c-dist-auth@listhub.w3.org>; Thu, 29 Jul 2004 10:20:52 -0700 (PDT)
Received: from [168.16.213.98] (sleepy.gcsu.edu [168.16.213.98])
	(authenticated bits=0)
	by mac.com (Xserve/smtpin08/MantshX 4.0) with ESMTP id i6THJwLw005399
	for <w3c-dist-auth@listhub.w3.org>; Thu, 29 Jul 2004 10:20:27 -0700 (PDT)
Mime-Version: 1.0
X-Sender: frank.lowney@mail.mac.com
Message-Id: <p06110417bd2ee13fc880@[168.16.213.98]>
In-Reply-To: <4107D669.70805@dc3.com>
References: <4106B3B7.7000601@gmx.de> <4106E3A6.6040204@dc3.com>
 <4106E6AB.8040807@gmx.de> <4107D669.70805@dc3.com>
Date: Thu, 29 Jul 2004 13:19:57 -0400
To: w3c-dist-auth@frink.w3.org
From: Frank Lowney <frank.lowney@mac.com>
Content-Type: text/plain; charset="us-ascii"
Subject: Re: IETF meeting comments
X-Archived-At: http://www.w3.org/mid/p06110417bd2ee13fc880@%5B168.16.213.98%5D
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8739
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040729172058.C4CFEA0A7B@frink.w3.org>
Resent-Date: Thu, 29 Jul 2004 13:20:58 -0400 (EDT)


Bob Denny <rdenny@dc3.com> remarked:

>Julian, et al. --
>
>Thanks for your fast response. Lisa D. also answered privately. I do
>appreciate the concerns of you both :-))
>
>Creating an empty file when a lock null is received will certainly make
>things possible again. I will try it, and press onward. My goal for the
>moment is just to get DAV working with Dreamweaver, so that should reduce
>the scope of patterns I must deal with :-)
>
>One possibly useful thing would be to encourage the DAV client developers
>to respect the DAV version and the list of DAV commands returned in an
>OPTIONS request. It seems that at least some clients (GoLive and
>Dreamweaver at least) don't look to see if LOCK and UNLOCK are in the
>OPTIONS list. They send LOCK/UNLOCK regardless.
>
>I got wound up tightly trying to support Microsoft's clients (with their
>need for MS-Author-Via: DAV, non-standard dates, and crazy "extensions")
>and gave up. I really don't care any more about Microsoft's DAV usage :-)))

I may be mistaken but wouldn't MS prefer that everyone use MS FrontPage extensions instead of WebDAV?  MS says 'embrace and extend' when perhaps they are thinking 'embrace, extend and wreck.'

>Thanks also for the reference to papers. I'll review them.
>
>  -- Bob


-- 
=====================================================================
Dr. Frank Lowney  frank.lowney@gcsu.edu
    Director, Electronic Instructional Services, a unit of the
    Office of Information and Instructional Technology,
    Professional Pages: http://www.gcsu.edu/oiit/eis/
    Personal Pages: http://www.faculty.de.gcsu.edu/~flowney
Voice: (478) 445-5260
NOTICE: Please be advised that I am hearing impaired and communicate most effectively via e-mail.  Follow-up summaries of telephone conversations by e-mail are most appreciated.
=====================================================================
We don't make instruction effective, we make effective instruction more accessible.



From w3c-dist-auth-request@w3.org  Thu Jul 29 20:12:27 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA19856
	for <webdav-archive@lists.ietf.org>; Thu, 29 Jul 2004 20:12:26 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id AB262A057C; Thu, 29 Jul 2004 20:12:26 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP id DF920A057C
	for <w3c-dist-auth@listhub.w3.org>; Thu, 29 Jul 2004 20:12:22 -0400 (EDT)
Received: from 212-59.84.64.master-link.com ([64.84.59.212] helo=NSNOVPS00411.nacio.xythos.com)
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BqL0D-0005fc-Cl
	for w3c-dist-auth@w3.org; Thu, 29 Jul 2004 20:12:01 -0400
Received: from [192.168.1.151] ([64.154.218.194]) by NSNOVPS00411.nacio.xythos.com with Microsoft SMTPSVC(5.0.2195.6713);
	 Thu, 29 Jul 2004 17:11:20 -0700
Mime-Version: 1.0 (Apple Message framework v618)
Content-Transfer-Encoding: 7bit
Message-Id: <FD532B28-E1BC-11D8-AA5A-000A95AACED2@xythos.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed
To: WebDAV <w3c-dist-auth@w3.org>
From: Brian Korver <briank@xythos.com>
Date: Thu, 29 Jul 2004 17:11:22 -0700
X-Mailer: Apple Mail (2.618)
X-OriginalArrivalTime: 30 Jul 2004 00:11:20.0885 (UTC) FILETIME=[BDF20E50:01C475C9]
Subject: displayname and uniqueness
X-Archived-At: http://www.w3.org/mid/FD532B28-E1BC-11D8-AA5A-000A95AACED2@xythos.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8740
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040730001226.AB262A057C@frink.w3.org>
Resent-Date: Thu, 29 Jul 2004 20:12:26 -0400 (EDT)
Content-Transfer-Encoding: 7bit


2518 doesn't address whether the displaynames on
resources within a given collection must be unique.
I presume there is no uniqueness constraint, but
besides stating that, should the spec give some
guidance to clients on what to do when there are
duplicates?  What would that guidance be?

-brian
briank@xythos.com



From w3c-dist-auth-request@w3.org  Fri Jul 30 07:28:15 2004
Received: from frink.w3.org (frink.w3.org [18.29.1.71])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA00377
	for <webdav-archive@lists.ietf.org>; Fri, 30 Jul 2004 07:28:15 -0400 (EDT)
Received: by frink.w3.org (Postfix, from userid 59936)
	id DFFFAA168E; Fri, 30 Jul 2004 07:28:14 -0400 (EDT)
X-Original-To: w3c-dist-auth@listhub.w3.org
Delivered-To: w3c-dist-auth@listhub.w3.org
Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
	by frink.w3.org (Postfix) with ESMTP
	id 749D8A168E; Fri, 30 Jul 2004 07:28:06 -0400 (EDT)
Received: from e1.ny.us.ibm.com ([32.97.182.101])
	by dr-nick.w3.org with esmtp (Exim 4.32)
	id 1BqVYU-0001ta-9k; Fri, 30 Jul 2004 07:28:06 -0400
Received: from northrelay02.pok.ibm.com (northrelay02.pok.ibm.com [9.56.224.150])
	by e1.ny.us.ibm.com (8.12.10/NS PXFA) with ESMTP id i6UBRSOZ276758;
	Fri, 30 Jul 2004 07:27:28 -0400
Received: from d01ml261.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216])
	by northrelay02.pok.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i6UBScs8106406;
	Fri, 30 Jul 2004 07:28:39 -0400
In-Reply-To: <FD532B28-E1BC-11D8-AA5A-000A95AACED2@xythos.com>
To: Brian Korver <briank@xythos.com>
Cc: WebDAV <w3c-dist-auth@w3.org>, w3c-dist-auth-request@w3.org
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.0.2CF1 June 9, 2003
Message-ID: <OF96EC0D0D.2F62B8B6-ON85256EE1.003E9037-85256EE1.003EF07B@us.ibm.com>
From: Geoffrey M Clemm <geoffrey.clemm@us.ibm.com>
Date: Fri, 30 Jul 2004 07:27:27 -0400
X-MIMETrack: Serialize by Router on D01ML261/01/M/IBM(Release 6.51HF433 | July 14, 2004) at
 07/30/2004 07:27:27,
	Serialize complete at 07/30/2004 07:27:27
Content-Type: multipart/alternative; boundary="=_alternative 003EF07685256EE1_="
Subject: Re: displayname and uniqueness
X-Archived-At: http://www.w3.org/mid/OF96EC0D0D.2F62B8B6-ON85256EE1.003E9037-85256EE1.003EF07B@us.ibm.com
Resent-From: w3c-dist-auth@w3.org
X-Mailing-List: <w3c-dist-auth@w3.org> archive/latest/8741
X-Loop: w3c-dist-auth@w3.org
Sender: w3c-dist-auth-request@w3.org
Resent-Sender: w3c-dist-auth-request@w3.org
Precedence: list
List-Id: <w3c-dist-auth.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Unsubscribe: <mailto:w3c-dist-auth-request@w3.org?subject=unsubscribe>
Resent-Message-Id: <20040730112814.DFFFAA168E@frink.w3.org>
Resent-Date: Fri, 30 Jul 2004 07:28:14 -0400 (EDT)


This is a multipart message in MIME format.
--=_alternative 003EF07685256EE1_=
Content-Type: text/plain; charset="US-ASCII"

Brian wrote on 07/29/2004 08:11:22 PM:

> 2518 doesn't address whether the displaynames on
> resources within a given collection must be unique.
> I presume there is no uniqueness constraint,

That is correct.

> but besides stating that,

Since we cannot enumerate all constraints that do not hold,
we would only do so if this has turned out to be a source
of non-interoperability.  Is this the case?

> should the spec give some
> guidance to clients on what to do when there are
> duplicates?  What would that guidance be?

I'm not sure what kind of guidance you have in mind here.
Could you provide an example?

Cheers,
Geoff


--=_alternative 003EF07685256EE1_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2><tt>Brian wrote on 07/29/2004 08:11:22 PM:<br>
<br>
&gt; 2518 doesn't address whether the displaynames on<br>
&gt; resources within a given collection must be unique.<br>
&gt; I presume there is no uniqueness constraint,</tt></font>
<br>
<br><font size=2><tt>That is correct.</tt></font>
<br>
<br><font size=2><tt>&gt; but besides stating that,</tt></font>
<br>
<br><font size=2><tt>Since we cannot enumerate all constraints that do
not hold,</tt></font>
<br><font size=2><tt>we would only do so if this has turned out to be a
source</tt></font>
<br><font size=2><tt>of non-interoperability. &nbsp;Is this the case?</tt></font>
<br>
<br><font size=2><tt>&gt; should the spec give some<br>
&gt; guidance to clients on what to do when there are<br>
&gt; duplicates? &nbsp;What would that guidance be?</tt></font>
<br>
<br><font size=2><tt>I'm not sure what kind of guidance you have in mind
here.</tt></font>
<br><font size=2><tt>Could you provide an example?</tt></font>
<br>
<br><font size=2><tt>Cheers,</tt></font>
<br><font size=2><tt>Geoff</tt></font>
<br><font size=2><tt><br>
</tt></font>
--=_alternative 003EF07685256EE1_=--



