Can't log in to web GUI, CSRF verification failed

[David Dyer-Bennet]

This is with FreeNAS 9.10 stable and Firefox current (Windows). I read the old thread on this error message, but it seems to be entirely about fixes that should be in 9.10. Also, I get the problem on a straight HTTP connection as well as with HTTPS.

I get the login window, enter username and password, click the button to proceed, and get the login window again. If I proceed a second time then I get a bare screen with the error message.

I don't have physical access to the box right now; I'm getting to it via port remapping in a firewall (I've got separate ports mapped to the HTTP port and the HTTPS port at that IP address). I'm using the same general port-forwarding setup for another box at the same location, and I can get into it fine.

So, "https://<name of firewall system>:8143" is mapped to 192.168.1.181:443 at that site, for example, and port 8022 is mapped to port 80 at that site. If I try things like "http://<name of firewall system>:8143" I get the expected error saying I can't talk http to the https port, which tends to confirm that the port mapping is doing what I think it does.

GUI access worked locally last night what I was at that site (when I wasn't going through the port remapping), so the probability that that's somehow part of the problem is very high .

 

[dlavigne]

Were you able to resolve this?

 

[David Dyer-Bennet]

Unfortunately, not. It happens intermittently, but it still happens. I was over where the server was the other day, and it does *not* happen locally. I checked settings (both http & https allowed for gui). I actually re-did the firewall port remappings to let us get to various servers from outside (using a new more consistent scheme ). But getting in from outside is still hit or miss, using either http or https (and the corresponding port on the router; if I use the wrong one I get a sensible message like "can't use https on http port" or equiv., so I'm getting to the ports I expect).

Also tried establishing ssh tunnels (ssh terminal access works fine), and I get the same strange behaviors.

And it's just on one server; there are two FreeNAS boxes at that location, behind the same firewall, with congruent port mappings, etc., but one I can access from outside reliably and the other is hit or miss.

 

[scurrier]

I also got this on 9.10. FreeNAS-9.10.2-U2. Brand new install with a browser I had used before. Switched to a different browser and was able to log in.

 

[baconface]

I also got this on 9.10. FreeNAS-9.10.2-U2. Brand new install with a browser I had used before. Switched to a different browser and was able to log in.

Clear your cookies for the web gui's IP in the browser you want to use. One of the cookies is called CFRS.