Ah-ha, I think that's indeed what is happening here. Here's a session where I'm appropriately authenticated: ``` > PROPFIND //user/ligo/ HTTP/1.1 > User-Agent: curl/7.29.0 > Host: example.unl.edu:1094 > Accept: */* > < HTTP/1.1 207 Multi-Status < Content-Length: 650 < Content-Type: text/xml; charset="utf-8" < <?xml version="1.0" encoding="utf-8"?> <D:multistatus xmlns:D="DAV:" xmlns:ns1="http://apache.org/dav/props/" xmlns:ns0="DAV:"> <D:response xmlns:lp1="DAV:" xmlns:lp2="http://apache.org/dav/props/" xmlns:lp3="LCGDM:"> <D:href>/user/ligo/</D:href> <D:propstat> <D:prop> <lp1:getcontentlength>4096</lp1:getcontentlength> <lp1:getlastmodified>Mon, 05 Feb 2018 21:33:42 GMT</lp1:getlastmodified> <lp1:resourcetype><D:collection/></lp1:resourcetype> <lp1:iscollection>1</lp1:iscollection> <lp1:executable>T</lp1:executable> <lp1:iscollection>1</lp1:iscollection> </D:prop> <D:status>HTTP/1.1 200 OK</D:status> </D:propstat> </D:response> </D:multistatus> ``` However, if I don't authenticate: ``` > PROPFIND //user/ligo/ HTTP/1.1 > User-Agent: curl/7.29.0 > Host: example.unl.edu:1094 > Accept: */* > < HTTP/1.1 404 Not found < Content-Length: 47 < ``` From the server log for the second access: ``` 180521 16:42:05 18957 unknown.264985:171@example2 XrootdResponse: sending err 3010: Unable to locate /user/ligo/; permission denied ``` So indeed - instead of a 403 unauthorized I get a rather surprising 404. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/xrootd/xrootd/issues/691#issuecomment-390792627 ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1