CSRF errors on including LDAP Users

[celso.lom]

I received CSRF error on including user from LDAP. I tried with Chrome, Firefox, Opera, Vivaldi and Edge. Any help about?

[celso.lom]

I recharge https://hostname/system_usermanager_import_ldap.php and try again. Works! But appear to be a bug.

[franco]

Hi,

Thanks for your report.  What is your version? 17.1?

Can you give a bit more detail about the steps to reproduce?

CSRF handling was replaced rather late in the development track of 17.1 so I guess this is where we need to look.



Cheers,
Franco

[celso.lom]

I have added a Active Directory Server to auth, tested OK.
1 - On the select page to add new user from LDAP (https://hostname/system_usermanager_import_ldap.php), i select the user and save. CSRF error returned.
2 - I recharge the page and select user again and save, saves well.

I tried with 2 diferent computers (Windows 10 and Mint 18), with Chrome, Firefox, Vivaldi, Opera and Edge.

It's a pleasure to help!

PS: Sorry about my english.

[franco]

No worries and thanks for the explanation. We will track it down this week and post an update.


Cheers,
Framco

[franco]

Will be fixed in 17.1.1: https://github.com/opnsense/core/commit/f20640d0b69113


Cheers,
Franco