Forum GLPI-Project

diego.giacani

Member

From: Rome, Italy

Registered: 2020-10-16

Posts: 31

CSRF check failed

Hi,

my GLPI installation can be reached on two different ports: 443 and 8080. While Kerberos authentication via Apache is active on port 443 and GLPI automatically authorises users with the LDAP servers confgured within it, port 8080 is used for PCs outside the Active Directory domain and therefore users must authenticate themselves manually (either with domain users or GLPI's internal database).

I have no problem on port 443, but on 8080, after logging in, the user receives the error 'The action you have requested is not allowed.' and cannot use the software.

In the log files there is no PHP error, but in the access-errors.log file it reads:

CSRF check failed for User ID: at /front/login.php

I googled for a solution but could not find it. I stress that it is not a SeLinux problem, the error occurs whether it is active or inactive.

Thanks!

Last edited by diego.giacani (2023-02-21 12:35:20)

diego.giacani

Member

From: Rome, Italy

Registered: 2020-10-16

Posts: 31

Re: CSRF check failed

Hi, I'm still struggling with this problem. No one has any clues?
Thanks

Last edited by diego.giacani (2023-02-27 13:13:24)

cuhanhtuoi

Member

Registered: 2023-03-07

Posts: 3

Re: CSRF check failed

Hi mate. Please check "session.cookie_secure" in php.ini file. Disable it and restart the server may help you in this case.

diego.giacani

Member

From: Rome, Italy

Registered: 2020-10-16

Posts: 31

Re: CSRF check failed

Thank you, I had already tried that but nothing changed.
I had to force SSL on 8080 to make it work.