[Tillmann]

Hi,

update: The “Local Networks (no username/password)” suggestion for Domoticz users works: also the HTTP JSON API works without password if this option is used. It is possible to add specifically only the OS IP address as “Local Network” instead of a range. Only disadvantage: This setting is not per-user, but global; anybody with the specified IP (range) will have full *Admin* rights in Domoticz (but then again… if an attacker is already in the position to spoof IPs in your local network, you have major issues anyway…)

Will report again in a few days if this also solves my stability issues that came up after firmware update + using long URLs for switching.

Thanks again Pete!

All the best,
Till

[Tillmann]

Hi Pete,

thanks for the quick reply! Domoticz allows both, user/pass in the URL, or using HTML headers. Obviously, I had to chose the “URL” way since OS doesn’t support username/password in HTTP headers.

I think your tip to use “Local Networks (no username/password)” is very good. I’ll just set it to the OS IP, and will report back if it actually works.

Oon a side note, over night OpenSprinkler crashed again, so even at 184 chars there appears to be an issue.

All the best,
Till

[Author]

Posts