Openremote permission denied !

[pierre2302]

Hello,

I receive permission denied error when I use the URL http://raspberry-ip:8083/OpenRemote/Tem ... eLevel/9/0 from a computer on the local network before I did not have this problem.

I tried with the URL http://admin:admin@raspberry-ip:8083/Op ... eLevel/9/0 I receive the error Not logged in.


How to solve this problem?

Thank you

[pz1]

ZWay does not want to comply with the IETF authentication standard. See the second note on this OpenRemote page.

[pierre2302]

Thank you it works perfectly.

Too bad Zway do not want it comply.

[Guenter]

ZWay does not want to comply with the IETF authentication standard. See the second note on this OpenRemote page.

indeed, ZWay should not respond with 401 and without a valid WWW-Authentication Header, but OpenRemote could of course preemptively send the basic credentials, without forcing the challenge from the server.
In other words: OpenRemote does not want to authenticate as long as ZWay does not fully comply with the IETF standard

see: "4.6. Preemptive authentication"
https://hc.apache.org/httpcomponents-cl ... ation.html

[pz1]

Openremote standard http protocol authentication does work fine with many other services. For example with Kodi (formerly XBMC). These IETF standards are there so others don't need to worry.

Moreover, if the ZWay people complain about other manufacturers not complying with Z-Wave standards, the least they can do is respect other standards, instead of 'inventing' kludges.

[Guenter]

look at it pragmatically; In compliance with RFC 2617, ZWay is not forced to reply using 401 and a proper WWW-Authentication header, ZWay could instead easily reply with 403, which wouldn't help OpenRemote either.

ZWay wants to force preemptive authentication and OpenRemote wants to authenticate, so OpenRemote should really implement this view lines of code, instead of forcing their user base to do dirty hacks (anonymous access).