Skip to content

Not working with new Isilon CSRF System #9

Description

@lightsavior

Recently, EMC installed via update a system to harden API communications, the new requirement for a custom header (X-CSRF-Token) and a referer of the node you are running against, this produces an output of your tools on the log webui_httpd_error.log like this;

2018-04-21T22:35:05-06:00 <18.3> sabstg02-1 httpd[60309]: [error] [client 172.17.28.63] No Origin or Referer header for CSRF protection

And at sametime, the isi_tools.py scripts end with a 401, authorization required error, like this;

ERROR:logger_agent:======================================== API Call ========================================
ERROR:logger_agent:GET https://172.17.28.62:8080/platform/1/zones , HTTP Code: 401
ERROR:logger_agent:Request Headers: {'Accept-Encoding': 'gzip, deflate', 'Accept': '/', 'User-Agent': 'python-requests/2.18.4', 'Connection': 'keep-alive', 'Cookie': 'isicsrf=59eb36b6-f34d-46c4-8c1f-07e3079494da; isisessid=0fea2ad2-ad41-4cc1-bc00-096752dd771f', 'content-type': 'application/json'}
ERROR:logger_agent:Request Data : None
ERROR:logger_agent:
ERROR:logger_agent:Response Headers: {'Content-Length': '49', 'Accept-Ranges': 'bytes', 'Keep-Alive': 'timeout=15, max=497', 'Server': 'Apache/2.2.34 (FreeBSD) mod_ssl/2.2.34 OpenSSL/1.0.2k-fips mod_fastcgi/2.4.6', 'Last-Modified': 'Thu, 03 Aug 2017 09:43:24 GMT', 'Connection': 'Keep-Alive', 'ETag': '"3a9cf-31-555d6362f8700"', 'Date': 'Sun, 22 Apr 2018 05:20:18 GMT', 'Content-Type': 'application/json', 'WWW-Authenticate': 'Basic'}
ERROR:logger_agent:Response Data: {"errors":[{"message":"authorization required"}]}
ERROR:logger_agent:==========================================================================================

EMC Technical note stating this change is this;

https://support.emc.com/kb/517421

Thanks for your great work !!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions