Hi Ian and group,

CSRF was it.

Thanks,
Steve


Stephen Crawford

Center For Environmental Informatics

The Pennsylvania State University

src...@psu.edu

________________________________
From: Ian Turton <ijtur...@gmail.com>
Sent: Thursday, March 2, 2023 11:54 AM
To: Crawford Jr., Stephen Rand <src...@psu.edu>
Cc: geoserver-users@lists.sourceforge.net 
<geoserver-users@lists.sourceforge.net>
Subject: Re: [Geoserver-users] strange behavior after upgrade



On Thu, 2 Mar 2023 at 16:38, Crawford Jr., Stephen Rand 
<src...@psu.edu<mailto:src...@psu.edu>> wrote:
Hi All,

 I recently upgraded 2.22.2, Tomcat container.  The data are still being served 
correctly, but the web interface now has lost much of its functionality: 
searches through layers or stores don't do anything, many links return 400 Bad 
request errors, etc.

Any help is greatly appreciated.  Error log attached.

Can't see what the exact issue is, but it could be CSRF 
(https://docs.geoserver.org/latest/en/user/security/webadmin/csrf.html<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.geoserver.org%2Flatest%2Fen%2Fuser%2Fsecurity%2Fwebadmin%2Fcsrf.html&data=05%7C01%7Csrc176%40psu.edu%7Ce476dbedb494423af4be08db1b3ed5ce%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C638133728907225879%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=rUhKkZtJrljwHZCezmZBI7NiPbiqXcvh1BHwraC1VgQ%3D&reserved=0>)
 or possibly a Java version mismatch if you aren;t using 11 (or possibly 17). 
Another issue is if you are using tomcat 10 which isn't supported (yet)

Ian

Thanks,
Steve


Stephen Crawford

Center For Environmental Informatics

The Pennsylvania State University

src...@psu.edu<mailto:src...@psu.edu>

_______________________________________________
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/<https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.ianturton.com%2Ftalks%2Ffoss4g.html%23%2F&data=05%7C01%7Csrc176%40psu.edu%7Ce476dbedb494423af4be08db1b3ed5ce%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C638133728907225879%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=o87ROerNbD0xAjjhQXSjUT%2BhDgKJJLRUfheN%2FTipHMs%3D&reserved=0>
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html<https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgeoserver.org%2Fcomm%2Fuserlist-guidelines.html&data=05%7C01%7Csrc176%40psu.edu%7Ce476dbedb494423af4be08db1b3ed5ce%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C638133728907225879%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=daop2WzBN3ITq1W2JCUI5XU%2Bxj0x7JusTGSd1yfHPcc%3D&reserved=0>

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fgeoserver%2Fgeoserver%2Fwiki%2FSuccessfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer&data=05%7C01%7Csrc176%40psu.edu%7Ce476dbedb494423af4be08db1b3ed5ce%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C638133728907225879%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=s1EtAfnD0%2BhSBjVtoIROuwU1kY2Dd62vX8Cgaa21TQQ%3D&reserved=0>


Geoserver-users@lists.sourceforge.net<mailto:Geoserver-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/geoserver-users<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fgeoserver-users&data=05%7C01%7Csrc176%40psu.edu%7Ce476dbedb494423af4be08db1b3ed5ce%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C638133728907225879%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=VNL2SOG8zzW3qvgVAe4dCiYjieuP5YksMEQFuJEp5iE%3D&reserved=0>


--
Ian Turton
_______________________________________________
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to