Text only | Text with Images

OPNsense Forum

Archive => 17.1 Legacy Series => Topic started by: celso.lom on January 31, 2017, 08:18:46 PM

Title: CSRF errors on including LDAP Users
Post by: celso.lom on January 31, 2017, 08:18:46 PM
I received CSRF error on including user from LDAP. I tried with Chrome, Firefox, Opera, Vivaldi and Edge. Any help about?
Title: Re: CSRF errors on including LDAP Users
Post by: celso.lom on January 31, 2017, 08:47:59 PM
I recharge https://hostname/system_usermanager_import_ldap.php and try again. Works! But appear to be a bug.
Title: Re: CSRF errors on including LDAP Users
Post by: franco on January 31, 2017, 09:00:53 PM
Hi,

Thanks for your report.  What is your version? 17.1?

Can you give a bit more detail about the steps to reproduce?

CSRF handling was replaced rather late in the development track of 17.1 so I guess this is where we need to look.



Cheers,
Franco
Title: Re: CSRF errors on including LDAP Users
Post by: celso.lom on January 31, 2017, 09:20:16 PM
I have added a Active Directory Server to auth, tested OK.
1 - On the select page to add new user from LDAP (https://hostname/system_usermanager_import_ldap.php), i select the user and save. CSRF error returned.
2 - I recharge the page and select user again and save, saves well.

I tried with 2 diferent computers (Windows 10 and Mint 18), with Chrome, Firefox, Vivaldi, Opera and Edge.

It's a pleasure to help!

PS: Sorry about my english.
Title: Re: CSRF errors on including LDAP Users
Post by: franco on January 31, 2017, 09:24:04 PM
No worries and thanks for the explanation. We will track it down this week and post an update.


Cheers,
Framco
Title: Re: CSRF errors on including LDAP Users
Post by: franco on February 02, 2017, 10:03:54 PM
Will be fixed in 17.1.1: https://github.com/opnsense/core/commit/f20640d0b69113


Cheers,
Franco
Text only | Text with Images