I’ve been getting sporadic reports of users seeing “Your Orthanc server is accepting remote connections, but is using the default username and password, or has user authentication explicitly turned off.”
The weird thing is they typically cannot reproduce this a few seconds later, and I have never been able to reproduce it myself. They’ve sent me screenshots, though.
What on earth could cause this?
Hi Daniel,
Do you mean that they see this warning on the Orthanc UI and then, if they refresh the page, the warning is not displayed anymore ?
That is indeed really strange because, this message is hidden by default and shown only when the UI receives the response from the call to /system and this call is performed with a timestamp in the url to avoid browser caching.
Best regards,
Alain.
Yep. I wouldn’t have believed it if they hadn’t sent a screenshot 
Are you using the updated UI (the OrthancExplorer2 library) or the original? Also, if the former, is it configured (in orthanc.json) as the default UI?
We use the original by default. A few users have been experimenting with using the updated UI. But when they got this error, they were using the original interface.