Page 1 of 1
Openremote permission denied !
Posted: 19 Dec 2015 20:42
by pierre2302
Hello,
I receive
permission denied error when I use the URL
http://raspberry-ip:8083/OpenRemote/Tem ... eLevel/9/0 from a computer on the local network before I did not have this problem.
I tried with the URL
http://admin:admin@raspberry-ip:8083/Op ... eLevel/9/0 I receive the error Not logged in.
How to solve this problem?
Thank you
Re: Openremote permission denied !
Posted: 20 Dec 2015 01:00
by pz1
ZWay does not want to comply with the IETF authentication standard. See the second note on this
OpenRemote page.
Re: Openremote permission denied !
Posted: 20 Dec 2015 01:40
by pierre2302
Thank you it works perfectly.
Too bad Zway do not want it comply.
Re: Openremote permission denied !
Posted: 20 Dec 2015 20:06
by Guenter
pz1 wrote:ZWay does not want to comply with the IETF authentication standard. See the second note on this
OpenRemote page.
indeed, ZWay should not respond with 401 and without a valid WWW-Authentication Header, but OpenRemote could of course preemptively send the basic credentials, without forcing the challenge from the server.
In other words: OpenRemote does not want to authenticate as long as ZWay does not fully comply with the IETF standard
see: "4.6. Preemptive authentication"
https://hc.apache.org/httpcomponents-cl ... ation.html
Re: Openremote permission denied !
Posted: 21 Dec 2015 02:02
by pz1
Openremote standard http protocol authentication does work fine with many other services. For example with Kodi (formerly XBMC). These IETF standards are there so others don't need to worry.
Moreover, if the ZWay people complain about other manufacturers not complying with Z-Wave standards, the least they can do is respect other standards, instead of 'inventing' kludges.
Re: Openremote permission denied !
Posted: 21 Dec 2015 09:01
by Guenter
look at it pragmatically; In compliance with RFC 2617, ZWay is not forced to reply using 401 and a proper WWW-Authentication header, ZWay could instead easily reply with 403, which wouldn't help OpenRemote either.
ZWay wants to force preemptive authentication and OpenRemote wants to authenticate, so OpenRemote should really implement this view lines of code, instead of forcing their user base to do dirty hacks (anonymous access).