<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:10.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-GB" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">Hi Michael,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div id="mail-editor-reference-message-container">
<div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt">> Just trying to set up a new 5210R CT and when running the wizard I get
<br>
> “CSRF mismatch: The action you have requested is not allowed.” When <br>
> trying to post.<br>
<br>
The server date and time is probably way off. The CSRF cookies are time <br>
based and valid only for a short period. When the clock of the server is <br>
way off, then the validity of the cookie might no longer (or not yet) be <br>
true.<br>
<br>
In the wizard itself when you change the timezone of the server? That <br>
causes the clock to jump, too and could make the CSRF cookies invalid. A <br>
simple reload of the page in the browser would fix that, though.<br>
<br>
If it doesn't? As this is a CT, check if the 6109R node is using an NTP <br>
time server ("System Settings" / "Time") and what date and time it has <br>
configured.<br>
<br>
Or you could (briefly) disable CSRF until you have the problem sorted.<br>
<br>
A non-sticking way would be to edit <br>
/usr/sausalito/ui/chorizo/ci/application/config/config.php (on 5210R!) <br>
and find this line:<br>
<br>
$config['csrf_protection'] = TRUE;<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I will work through your suggestions and hopefully be able to report back with success!
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Kind regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Colin<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt"><br>
<br>
Change it to:<br>
<br>
$config['csrf_protection'] = FALSE;<br>
<br>
And save the changes.<br>
<br>
To make it sticky you would have to use cceclient if you can't use the GUI:<br>
<br>
[root@5210r ~]# /usr/sausalito/bin/cceclient<br>
100 CSCP/0.99<br>
200 READY<br>
find System<br>
104 OBJECT 17 <-- Your OID could be different!<br>
201 OK<br>
<br>
Note down the OID and then use that to disable CSRF:<br>
<br>
set <OID> csrf_protection = 0<br>
201 OK<br>
<br>
That should do the trick. But like said: It's an issue with the server <br>
time being out of whack or with the wizard time zone change causing too <br>
large a drift for the CSRF to be valid. In which case a simple page <br>
reload might help.<br>
<br>
-- <br>
With best regards<br>
<br>
Michael Stauber<br>
_______________________________________________<br>
Blueonyx mailing list<br>
Blueonyx@mail.blueonyx.it<br>
<a href="http://mail.blueonyx.it/mailman/listinfo/blueonyx">http://mail.blueonyx.it/mailman/listinfo/blueonyx</a><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</body>
</html>