Hi everyone, we are using ServiceNow discovery and before Yokohama Patch 7 we could scan a Devices Webpage and the HTTP Classification Match would find the webpage and then it would kick off the correct pattern to run.
Now Discovery is trying to authenticate, I think, and since it doesn't need a username and password on the website, Discovery doesn't query the webpage and moves on. If I go into Discovery Patterns and run the debug mode on the website of the device it works just fine, if I do setup an API Rest call to the device it comes back correct. Just can't get Discovery Classifier to work. I have a ticket open to SN, but not getting anywhere with it.
- Here is the document on the change:
Create an HTTP classification
"Important: The HTTP Classify probe no longer attempts credentials over the HTTP protocol by default. To override this behavior, you can enable mid.http_classy.allow_credentials_over_http. However, enabling this setting can expose credentials to man-in-the-middle (MitM) attacks. Therefore, it’s strongly recommended to keep this property set to false and use HTTPS whenever possible." - This is in the XML Payload from a scan:
<result error="No credential found for type [BASIC_AUTH]" result_code="41">
