Disable WebDAV

Recommendation

• WebDAV should be disabled in the publish environment. This can be done by stopping the appropriate OSGi bundles.
• Connect to the Felix Management Console running on:
• http://<host>:<port>/system/console
• For example http://localhost:4503/system/console/bundles.

In the list of bundles, find the bundle named:

1. Apache Sling Simple WebDAV Access to repositories (org.apache.sling.jcr.webdav)

• Click the stop button (in the Actions column) to stop this bundle.
• Again in the list of bundles, find the bundle named:

2. Apache Sling DavEx Access to repositories (org.apache.sling.jcr.davex)
Click the stop button to stop this bundle.

Note
A restart of AEM is not required.

WebDav related findings

Finding ID	JVM Name	Total risk	Effort to Fix
WD1	Stop Apache Sling Simple WebDAV	Critical	Low
WD2	Stop Apache Sling DavEx	Critical	Low

How to disable WebDav in AEM

Disable WebDAV
WebDAV should be disabled on both the author and publish environments. This can be done by stopping the appropriate OSGi bundles.

1. Connect to the Felix Management Console running on http://localhost:4502/system/console For example http://localhost:4503/system/console/bundles.
2. In the list of bundles, find the bundle named: Apache Sling Simple WebDAV Access to repositories (org.apache.sling.jcr.webdav)
3. Click the stop button (in the Actions column) to stop this bundle.
4. Again in the list of bundles, find the bundle named: Apache Sling DavEx Access to repositories (org.apache.sling.jcr.davex)
5. Click the stop button to stop this bundle.

Note:
A restart of AEM is not required.

References:
https://helpx.adobe.com/experience-manager/6-4/sites/administering/using/security-checklist.html

Bulk file transfers with WebDAV

Bulk asset transfers to a JCR are sometimes tedious, especially when using AEM's Assets Manager or Site Admin. Adobe has tutorials on how to upload to the DAM and accessing AEM via WebDAV. This tutorial will make accessing AEM's JCR via WebDAV clear for current versions of Windows and OSX, and provide an alternate solution to the upload to the DAM article. WebDav stands for Web-based Distributed Authoring and Versioning. All tutorial examples will need an instance to connect to, for the examples below a local author server will be used (http://localhost:4502).

WebDAV on Windows (Windows 10)
Specific to Windows you may first need to open regedit (I did) and go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters. Then change "BasicAuthLevel" key to "2". This allows for SSL and non-SSL shares. A restart may be required after this change.

Open an Explorer window with Windows Key + e. Select 'This PC'. Then select 'Map network drive'.


Then enter 'http://localhost:4502' as the folder. Also check 'Connect using different credentials'.

Then enter your admin credentials.

Your JCR via WebDAV should be visible now as the mapped drive. You may now bulk upload your files as you would using any other file system. This is great for /content/dam multiple folder uploads.

WebDAV on OSX
OSX has a very similar process as Windows. Open a Finder with the elegant alt + cmd + <space> keystroke. Then cmd + k to bring up the Connect to Server Dialog. Enter 'http://localhost:4502' and click connect. Select 'Registered User' and enter your credentials. It will then map the drive.


WebDAV via cURL
A more terminal/command line based developer, might want to use cURL commands in Terminal or Cygwin. These commands will just scratch the surface of cURL interactions with AEM, and are in the context of DAM assets.

Read the DAM folder: curl -u admin:admin 'http://localhost:4502/content/dam'

Delete a DAM folder: curl -u admin:admin -X DELETE 'http://localhost:4502/content/dam/project'

Create a DAM folder: curl -u admin:admin -X MKCOL 'http://localhost:4502/content/dam/project'

Upload a DAM file: curl -u admin:admin -T '/path/on/local/file.ext' 'http://localhost:4502/content/dam/project/file.ext'

AEM WebDAV : Upload Media Files to CQ Server from Desktop

AEM WebDAV is a protocol used for transferring media content to the CQ server. WebDAV allows developers to display and edit the repository content, WebDAV gives direct access to the content repository through your desktop.

In this tutorial, we will learn how to upload images to the AEM server repository on Network drive and local drive using WebDAV.

Upload files to aem using webdav in windows 10.
Upload files to aem using webdav in windows 7. Steps to upload files to the AEM server using webdav protocol in windows 10:
In case of Windows 10, you might need to update your windows registry:-
Open Regedit.
Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters.
Go to “BasicAuthLevel”
Change the key value to “2”. If not present then create a subkey by name BasicAuthLevel.
Restart your Windows machine.

Follow below steps to map webdav for aem:-
Open Explorer window.
Select This PC –> Computer –> Map network drive.


Under map drive dialog. Enter Drive letter and server host and port name as shown below. Remember to select the checkbox for “Connect using different credentials”.


Click on Finish.
Enter user credentials for login into aem.

Click OK. Once connected It will Map your crx repository with the windows file structure.


Steps to upload files to AEM server using webdav protocol of net drive in windows 7:

I have found out on the internet that Windows 7 64-bit does not support mapping a WebDAV resource. So, in this tutorial, we will see how to configure WebDAV in Windows 7. I am using the free version of net drive software to upload content to the CQ server.

Download NetDrive from the internet.
Install NetDrive on your computer and restart the machine.
Open NetDrive, scroll to the bottom and click on setting icon of WebDAV.
For connecting to local drive means if the server running on localhost. Click the setting tab enter the below details.
For connecting to Network drive means if the server running on localhost. Click the setting tab enter the below details.
Save the details
Click the connect button. your local/network repository will popup as shown below.
Go to the appropriate folder and upload the images.

WebDAV client

Try this one : http://www.bitkinex.com/webdavclient

Some companies have used NetDrive for WebDAV.
Also, check out Adobe Bridge and Adobe Drive - they may fit the bill better than plain webdav. They provide greater functionality for metadata, etc., especially for Creative Suite users.

Also, note that by default Basic Authentication for WebDAV is disabled on Windows 7. In order to enable it, the following entry in the registry has to be updated to 2 or greater:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters\BasicAuthLevel

For more information see (for Windows Vista): http://support.microsoft.com/kb/841215

Some folks have reportedly got webdav to work on a newer version of Windows using the above.