Didds

Firstly, make sure that your webserver is actually requiring authentication when accessing the ack page. This could be by inspecting the headers in "Developer Tools" (Ctrl+Shift-I in Firefox, Chrome and Edge) or by reviewing the webserver log for the authenticated user field. Or you could temporarily change the password or remove the account from xymonpasswd to see if that fails to authenticate.

In Edge and Chrome you can selectively review and delete cached credentials by going into Settings -> (Autofill / Profiles) -> Passwords, or entering edge://settings/passwords or chrome://settings/passwords into the location bar. In Firefox it's about:logins, or go to Options -> Privacy & Security -> Logins and Passwords.

It's possible that changing the password on the webserver (in xymonpasswd) will force the browser to prompt you for the password, and also clear the cached entry. You can then change the password back again on the server. But I'm not confident - it might just continue to try the old cached entry.

Just a thought: are you running a password manager such as Lastpass or Bitwarden? These utilities might be automagically entering the credentials for you. Lastpass has an "autofill" option that can be set/cleared for each username/password, and if set, this might be authenticating you automagically.

Cheers Jeremy

On Mon, 30 Nov 2020 at 21:28, Ian Diddams via Xymon <xymon at xymon.com> wrote:

Date: Mon, 30 Nov 2020 10:08:03 +0000 (UTC) Subject: Clearing ACK user credentials in the user interface (UI) We have several hobbit servers running in different environments (4.3.28)

In order to ack or enable and disable alerts we have (of course) an account created within hobbit

i.e. htpasswd -c /etc/xymon/server/etc/xymonpasswd <user>

Across multi ple different web browsers (IE, Edge, FF, Chrome, opera etc) over time I've used these credentials and theyve somehow/somewhere been cached. But here's the wierd thing - I cant clear them! eg if I use shit+ctrl+delete for all time and everything, or firefox.exe -p for a clean profile, in a browser with no proxies and reopened after clwearing etc... an attempt to ack goes straight to the ack page and doesnt prompt me for the UI account credentials? This must be browser/OS based rather than hobbit/xymon itself of course but its driving me nuts?

Anyone able to put me out of my siery and advise how i can make sure I clear this stuff so ic an test correctly etc ?

cheers

didds