topic Re: CSRFFilter error: mod_proxy and alfresco 4.2.d: login to share fails (solved) in Alfresco Archive

CSRFFilter error: mod_proxy and alfresco 4.2.d: login to share fails (solved)

wurstgelee — Tue, 26 Feb 2013 12:03:00 GMT

Hi everyone! I´ve been digging around this for several hours now and I`m not sure whether this is a general problem or a problem of my mod_proxy configurationteps to reproduce:- install alfresco community 4.2.d (on centos x64) with default options, only using mysql instead of postgresql (latest ni

Re: CSRFFilter error: mod_proxy and alfresco 4.2.d: login to share fails (solved)

wurstgelee — Tue, 26 Feb 2013 14:48:00 GMT

Update: Shouldn´t this part of "share-security-config.xml" prevent the referer-check for /share/dologin?:


<!– Certain Share POST requests does NOT require a token –>
         <rule>
            <request>
               <method>POST</method>
               <path>^/page/dologin.*|^\/page/site\/[^\/]+\/start-workflow|^\/page/start-workflow</path>
            </request>
            <action name="assertReferer">
               <param name="always">false</param>
            </action>
            <action name="assertOrigin">
               <param name="always">false</param>
            </action>
         </rule>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Additional question: How can I turn on CSRF debug logging?

Re: CSRFFilter error: mod_proxy and alfresco 4.2.d: login to share fails (solved)

wurstgelee — Tue, 26 Feb 2013 16:40:19 GMT

Raised a JIRA: https://issues.alfresco.com/jira/browse/ALF-18175

Re: CSRFFilter error: mod_proxy and alfresco 4.2.d: login to share fails (solved)

wurstgelee — Tue, 26 Feb 2013 19:49:00 GMT

Seems to be a problem with ssl & mod_proxy. if i use the config below (http instead of https), it works:


<VirtualHost 172.27.25.4:80>
Servername docsdev.mydomain.de
DocumentRoot /opt/alfresco-4.2.d/tomcat
                                                        
  ProxyRequests Off
  ProxyPreserveHost On

ProxyPass / ajp://docsdev.mydomain.de:8009/
ProxyPassReverse / ajp://docsdev.mydomain.de:8009/


</VirtualHost>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍

So the SSLEngine is responsible?! I`m clueless……

Re: CSRFFilter error: mod_proxy and alfresco 4.2.d: login to share fails (solved)

wurstgelee — Tue, 26 Feb 2013 23:10:55 GMT

Trying stuff:

Using mod_jk produces exactly the same error - at least with ssl.

Re: CSRFFilter error: mod_proxy and alfresco 4.2.d: login to share fails (solved)

wurstgelee — Thu, 28 Feb 2013 15:03:25 GMT

Issue resolved, see JIRA link posted earlier.