Re: HttpRequest: access denied -- client [xx.xx.xx.xx]: missing or invalid Authorization header

[Lutz Mader]

Hello,
back to your Basic Authentication problems,
Microsoft does some Edge hardening in 2020 and remove support for "Basic
Authentication" via "http".

Check the registry
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge]
"AuthSchemes"="basic,negotiate,ntlm"
"BasicAuthOverHttpEnabled"=dword:00000000

And see some more details in
https://learn.microsoft.com/DeployEdge/microsoft-edge-policies#basicauthoverhttpenabled
https://learn.microsoft.com/DeployEdge/microsoft-edge-policies#authschemes

Lutz


Am 17.10.23 um 19:25 schrieb Lutz Mader:
> Hello,
> if "https" work, but "http" does not and you are on a Windows system, it
> seems to me your system block the 401 answer via "http". I have seen
> this in a company network too, but do not know how to configure this in
> windows. The Firefox was able to logon via "http" in the company network
> only.
> 
> Nice to know,
> Lutz
> 
> 
> Am 16.10.23 um 07:53 schrieb Mesut GULNAZ:
>> I have also tried it.
>> I also tried EDGE, opera, and chrome. not working at all.
>> so I configured it to HTTPS instead of HTTP. so all is working but
>> interesting.
>> thank you.
>>
>> On Mon, Oct 16, 2023 at 12:11 AM Lutz Mader <lutz.mader@freenet.de> wrote:
>>
>>> Hello Mesut,
>>> the message based on the basic authentication request.
>>> The browser should open the login window,
>>> try https://user:pass@your.host:2812 to login to the Monit web interface.
>>>
>>> A suggestion only,
>>> Lutz
>>>
>>> p.s.
>>> See https://en.wikipedia.org/wiki/Basic_access_authentication
>>> for some additional information.
>>>
>>>
>>> Am 02.10.23 um 22:42 schrieb Mesut GULNAZ:
>>>> My server is:VERSION="22.04.3 LTS (Jammy Jellyfish)"
>>>> monit: root@crystal:/etc/monit# monit --version
>>>> This is Monit version 5.31.0
>>>> Built with ssl, with ipv6, with compression, with pam and with large
>>> files
>>>> Copyright (C) 2001-2022 Tildeslash Ltd. All Rights Reserved.
>>>> root@crystal:/etc/monit#
>>>>
>>>>  I have so many servers running monit. but I am getting this error on my
>>>> this server from all browsers like edge, chrome etc.
>>>>
>>>>   HttpRequest: access denied -- client [xx.xx.xx.xx]: missing or invalid
>>>> Authorization header
>>>>
>>>> what can I do?
>>>>
>>>
>>>
>>>
>>
>