Access Lists not working
Checklist
- Have you pulled and found the error with
jc21/nginx-proxy-manager:latestdocker image?- Yes
- Are you sure you're not using someone else's docker image?
- Yes
- Have you searched for similar issues (both open and closed)?
- Yes
Describe the bug If i using Access List and im 100% sure that the Password are correct i recieved
{ "message": "invalid username or password" }
The nginx prozess was reloaded correctly.
[2/15/2022] [9:11:00 PM] [Access ] › ✔ success Built Access file #6 for: smarteshome [2/15/2022] [9:11:24 PM] [Nginx ] › ℹ info Reloading Nginx [2/15/2022] [9:11:56 PM] [SSL ] › ℹ info Renewing SSL certs close to expiry... [2/15/2022] [9:11:58 PM] [Nginx ] › ℹ info Reloading Nginx
Nginx Proxy Manager Version V 2.9.15
To Reproduce Steps to reproduce the behavior:
- create Access List with "Satisfy any", Pass Auth to host" enabled and one User (test/test)
- add Access List to Proxy Host
- open Link and type User = test and Password=test in the popup
- See error
- If im using a wrong user or password the popup will cleared and ask again for user/password
Expected behavior
Screenshots

Operating System Ubuntu 21.10 Docker
Additional context
Hey, Was it an exisiting access list that you modified? if so have you re-opened and saved the related proxy host? Its a known issue where you need to re-save the host as well as setting the access list.
Hi, first i create the Access List and than i change the Proxy Host. Same error.I aso create an new proxy host and select the existing Access List, same error
I'm the same.
In my case, I get 403 Forbidden when I enable it.
I've added my own IP to the permissions, of course.
I had the same exact issue here. If check "satisfy any", I'll be repeatedly asking for login info. If I uncheck "satisfy any", I'll get 404 error.
Same here - 403 Forbidden
Same here - 403 Forbidden
me too
Same here. Following this issue.
Check this out for workarounds: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/383 Also, I had these in Custom Configuration:
real_ip_header CF-Connecting-IP;
#real_ip_header X-Forwarded-For;
Commenting them out helped solve the problem.
Hi, same here, asking repeatedly for password, even with password copy/paste
Edit : I got it working but only if I create the access rule on 1st try. If I edit the rule, it breaks it
I tried every possible combination of configurations in the last two hours. What reliably fixed it for me is this:
- Creating a "Allow 0.0.0.0/0" rule in the Access List Tab
- Deactivating "Satisfy Any" in ACL Tab
- Create a NEW Proxy Host.
- Deactivating HTST, HTST Subdomains and HTTP/2 in the Proxy Host Tab. Force SSL works for me when everything else is off.
And yes. It is crucial to first create the ACL and then create a NEW Proxy Host. Adding the ACL to an existing proxy host will result in 403 error, or in logging in having no effect and login window showing over and over again.
Note: When I misconfigured it i had to "clear the site data" in the browser for it to work again once it was configured right.
And just in case someone doesn't know (as I did 2h ago). You can auto login if you use this url scheme: https.//username:[email protected]/ Hope this helps.