search

cvicente / Netdot

Network Documentation Tool
223 stars 62 forks source link

Invalid Cookie Format #171

Open MatVDS opened 2 years ago

MatVDS commented 2 years ago

Not 100% sure if this is a configuration problem (netdot_apache2_ldap.conf?) or if its an issue in the code. Right now we are running Netdot ( v.1.0.7) not sure if this is the latest version as I don't manage the Netdot environment myself. But when trying to rebuild the Perl:Rest:Client module in Golang I encountered the problem that the cookie generated by netdot is not RFC6265 compliant. The issue seems to be that the cookie name set by the netdot server has : Apache2::SiteControl_Netdot in its name.
Considering ":" is not allowed in the name of a cookie following the RFC and is thus ignored by the Golang cookiejar. This also seems to be the case for the "/" in "path=/netdot/"

MatVDS commented 2 years ago

Seems this was handled at one point in. https://github.com/cvicente/Netdot/pull/98 But it got reverted again?

pkmollman commented 1 year ago

I just lost a few hours due to the auth cookie name being invalid 😭