Domoticz authorization error

[waltervl]

If you use http you HAVE to set the setting "Allow Basic-Auth authentication over plain HTTP (API only)" to "On" in menu Setup-Settings, tab Security.

[Lokonli]

I also have this error after I updated to the last version of Domoticz,

Is there one simple solution for the issue

*) updated to the Beta version of Dashticz
*) have my IP range in the "trusted network settings" (was already there) (10.0.0.*)
*) try'd the username / password option in the config.js

In my opinion it just shoud work

I can't see any login attempts in the logging of Domoticz, do i have to switch this on somewhere?

You have to do all the following things:

In CONFIG.js add the Domoticz username and password, like

Code: Select all

config['user_name'] = 'admin';
config['pass_word'] = 'domoticz';

In Domoticz->Settings->Security tab:

• Tick 'Allow Basic-Auth authentication over plain HTTP' in Domoticz->Settings->Security->API protection
• Fill in your local subnet in Trusted Networks

Example of Domoticz settings:

[swilting]

Thank you, that did the trick

(I still find it strange to set a trusted network IP and then still have to set a username and a password)

[Lokonli]

(I still find it strange to set a trusted network IP and then still have to set a username and a password)

I'll fix that in a next update.

[kiddigital]

(I still find it strange to set a trusted network IP and then still have to set a username and a password)

I'll fix that in a next update.

Dashticz should be given access to domoticz’s API either by adding the Dashticz IP-address to the trusted network OR via username and password.

These 2 ways should be mutually exclusive. It is one or the other, never both.

And, in case you access the domoticz API over HTTP instead of HTTPS, you have to enable ‘basic-auth over http’. This is independent of the above option you use to give Dashticz access to domoticz.

Best, prefered and most secure way is to run domoticz with HTTPS enabled and create a specific user for Dashticz to use. Configure Dashticz to access domoticz over HTTPS using the specific username and password.

(Or even better, Dashticz should become able to leverage the OAuth2 functionality of domoticz and access the domoticz API after acquiring an access token. But that is for the future).