Cannot sync with webdav on computer but sync is okay on app android

guillaumebouzige · 2026-09-04T13:19:56+00:00

When i try to sync on my computer I have an error message so when i go in setting to click on 'verify server' I receive this error :

Permission denied
The WebDAV server did not accept the username and password you entered.
Please check your file sync settings or contact your WebDAV server administrator.

but with that same server, same credential on android App I can confirm the server is okay.

I have contacted the administrator of my webdav server that confirm to me that my account and the server has no issue, the password is correct and the server webdav is working.

How can i do to sync my zotero on my computer ?

Thanks

guillaumebouzige · 2026-09-04T13:20:39+00:00

report id 821049764

dstillman · 2026-09-04T14:03:15+00:00

If you provide a Debug ID and we can take a look (your password isn't logged), but that error really means what it says.

guillaumebouzige · 2026-09-04T14:08:41+00:00

D109380471

dstillman · 2026-09-04T14:21:43+00:00

Can you provide the output for these from this machine?

curl -i -X OPTIONS [WebDAV URL]
curl -i -u [username] -X OPTIONS [WebDAV URL]

guillaumebouzige · 2026-09-04T14:25:08+00:00

guiz@fedora:/var/home/guiz$ curl -i -X OPTIONS https://mywebdav.example.com
HTTP/2 401
alt-svc: h3=":443"; ma=2592000
content-security-policy: upgrade-insecure-requests
content-type: text/html
date: Fri, 04 Sep 2026 14:22:38 GMT
permissions-policy: interest-cohort=()
strict-transport-security: max-age=63072000; includeSubDomains; preload
via: 2.0 Caddy
www-authenticate: Basic realm="Restricted"
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-length: 172

<html>
<head><title>401 Authorization Required</title></head>
<body>
<center><h1>401 Authorization Required</h1></center>
<hr><center>nginx</center>
</body>
</html>
guiz@fedora:/var/home/guiz$ curl -i -u user -X OPTIONS https://mywebdav.example.com
Enter host password for user 'user':
HTTP/2 200
allow: GET,HEAD,PUT,DELETE,MKCOL,COPY,MOVE,PROPFIND,OPTIONS,LOCK,UNLOCK
alt-svc: h3=":443"; ma=2592000
content-security-policy: upgrade-insecure-requests
date: Fri, 04 Sep 2026 14:23:23 GMT
dav: 1
permissions-policy: interest-cohort=()
strict-transport-security: max-age=63072000; includeSubDomains; preload
via: 2.0 Caddy
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-sso-wat: You've just been SSOed
x-xss-protection: 1; mode=block
content-length: 0

dstillman · 2026-09-04T14:52:54+00:00

And this?

curl -i --anyauth -u [username] -A "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0 Zotero/10.0.1" -X OPTIONS https://[server]/zotero/

urodriguezpomba · 2026-09-06T23:05:51+00:00

Hi there, I'm having the same issue after the 10.x upgrade, previously works perfect and in iOS also is OK.
Im using WEBDAV on a Hetzner StorageBox without problems before.

In response to

curl -i --anyauth -u [username] -A "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0 Zotero/10.0.1" -X OPTIONS https://[server]/zotero/

HTTP/1.1 401 Unauthorized
Date: Sun, 06 Sep 2026 18:57:07 GMT
Server: Apache
WWW-Authenticate: Basic realm="WebDAV Restricted"
Content-Length: 458
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 401 Unauthorized
Date: Sun, 06 Sep 2026 18:57:08 GMT
Server: Apache
WWW-Authenticate: Basic realm="WebDAV Restricted"
Content-Length: 458
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>401 Unauthorized</title>
</head><body>
<h1>Unauthorized</h1>
<p>This server could not verify that you
are authorized to access the document
requested.  Either you supplied the wrong
credentials (e.g., bad password), or your
browser doesn't understand how to supply
the credentials required.</p>
<hr>
<address>Apache Server at uxxx.your-storagebox.de Port 443</address>
</body></html>

dstillman · 2026-09-06T23:09:32+00:00

@urodriguezpomba: That's a second 401 Unauthorized when using curl, using the same authentication pattern as Zotero. Unless you mistyped your password, your server is rejecting your credentials. Nothing to do with Zotero.

urodriguezpomba · 2026-09-06T23:35:02+00:00

Sorry, you're right, now with the good pass :)

HTTP/1.1 401 Unauthorized
Date: Sun, 06 Sep 2026 23:31:03 GMT
Server: Apache
WWW-Authenticate: Basic realm="WebDAV Restricted"
Content-Length: 458
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 200 OK
Date: Sun, 06 Sep 2026 23:31:04 GMT
Server: Apache
DAV: 1,2
DAV: <http://apache.org/dav/propset/fs/1>
MS-Author-Via: DAV
Allow: OPTIONS,GET,HEAD,POST,DELETE,TRACE,PROPFIND,PROPPATCH,COPY,MOVE,LOCK,UNLOCK
Content-Length: 0
Content-Type: httpd/unix-directory

And in the console:

https://s3.amazonaws.com/zotero.org/images/forums/u16200641/2nz40c7nabu77y06k3cn.png

I've checked the user and pass, but I haven't do any changes after the update to 10.

dstillman · 2026-09-07T01:34:01+00:00

If your WebDAV password contains non-ASCII characters, it's likely fixed in the Zotero beta, and the fix will be included in Zotero 10.0.2.

guillaumebouzige · 2026-09-07T13:05:16+00:00

ok, in my case I do have non ASCII characters, any idea when this version will be available in stable (retorque repo apt) ?

guillaumebouzige · 2026-09-17T14:31:10+00:00

I have just try the version Zotero 10.0.2 and I have the same behavior...also the changelog do not specify this fix tho it include a 'various bug fixes' item that is clearly vague.

Can we have a fix somehow sometime ?

Thanks

dstillman · 2026-09-17T14:41:05+00:00

It's "Fixed sync errors due to non-ASCII characters in credentials" in the changelog.

If you're still seeing this in 10.0.2, your issue is something else. You can try the Zotero beta, which fixes a similar error when there's a "%" in the password.