HTTP Basic Auth activated–but not by owner, admin, or isp

  • fusterbuck

    (@fusterbuck)


    11 years ago

    Question: How can I remove a demand for “HTTP Basic Authentication” (if that’s what it is)– which neither I nor my ISP has activated?

    About a month ago my blogging client began demanding that I provide not one but two username/password pairs before posting my to the WordPress xml-rpc API on my website.

    I’ve discovered that the wording of the demand for a second username/password pair conforms exactly to the protocol of “HTTP Basic Authentication.” And I’ve learned that such authentication can be added to WordPress by plugins, including one which is a module of Jetpack.

    I myself have never downloaded nor activated an “HTTP Basic Authentication” plugin to a WordPress installation, and I’ve never been required to deal with it by anyone else. Yet there it is, blocking me from posting stuff to my blog.

    In order of importance, how can I eliminate it? Where did it come from? How can I prevent its returning? I’ll appreciate any help I can get, and I’ll share what I learn with the tech people at my blogging client (MarsEdit) and ISP (MacHighway).

Viewing 1 replies (of 1 total)
  • Moderator James Huff

    (@macmanx)

    11 years ago

    This is generally not something added by WordPress. Look for something like this in your .htaccess file, and also look for a .htpasswd file.

    AuthType Basic
AuthName "My Protected Area"
AuthUserFile /path/to/.htpasswd
Require valid-user

    Were you able to find either?

Viewing 1 replies (of 1 total)

The topic ‘HTTP Basic Auth activated–but not by owner, admin, or isp’ is closed to new replies.