search

retspen / webvirtcloud

WebVirtCloud is virtualization web interface for admins and users
1.63k stars 362 forks source link

CSRF verification failed #564

Closed Doker96 closed 1 year ago

Doker96 commented 1 year ago

Hi, after fresh install on ubuntu 22.04 i cant login into panel. I got this error: 403 CSRF verification failed. Request aborted.

My settings.py is: ` """ Django settings for webvirtcloud project.

"""

import subprocess from pathlib import Path

Build paths inside the project like this: BASE_DIR / 'subdir'.

BASE_DIR = Path(file).resolve().parent.parent

SECRET_KEY = "l4r_9JInYRznH8cVx9wtxgDp2-tFI3xUvJ5cHuvK62E7mN9Zbl5nywZ6jq_7OHYKS8s"

DEBUG = False

ALLOWED_HOSTS = ["*"]

Application definition

INSTALLED_APPS = [ "django.contrib.auth", "django.contrib.contenttypes", "django.contrib.sessions", "django.contrib.messages", "django.contrib.staticfiles", "django_bootstrap5", "django_icons", "django_otp", "django_otp.plugins.otp_totp", "drf_yasg", "accounts", "admin", "appsettings", "computes", "console", "datasource", "networks", "instances", "interfaces", "nwfilters", "storages", "virtsecrets", "logs", "qr_code", "rest_framework", ]

MIDDLEWARE = [ "django.middleware.security.SecurityMiddleware", "django.contrib.sessions.middleware.SessionMiddleware", "django.middleware.locale.LocaleMiddleware", "django.middleware.common.CommonMiddleware", "django.middleware.csrf.CsrfViewMiddleware", "django.contrib.auth.middleware.AuthenticationMiddleware", "django_otp.middleware.OTPMiddleware", "login_required.middleware.LoginRequiredMiddleware", "django.contrib.auth.middleware.RemoteUserMiddleware", "django.contrib.messages.middleware.MessageMiddleware", "django.middleware.clickjacking.XFrameOptionsMiddleware", "appsettings.middleware.AppSettingsMiddleware", "webvirtcloud.middleware.ExceptionMiddleware", ]

ROOT_URLCONF = "webvirtcloud.urls"

TEMPLATES = [ { "BACKEND": "django.template.backends.django.DjangoTemplates", "DIRS": [ Path.joinpath(BASE_DIR, "templates"), ], "APP_DIRS": True, "OPTIONS": { "context_processors": [ "django.template.context_processors.debug", "django.template.context_processors.request", "django.contrib.auth.context_processors.auth", "django.contrib.messages.context_processors.messages", "appsettings.context_processors.app_settings", ], "libraries": { "common_tags": "webvirtcloud.common_tags", }, }, }, ]

WSGI_APPLICATION = "webvirtcloud.wsgi.application"

Settings for django-icons

DJANGO_ICONS = {

'DEFAULTS': {
    'renderer': 'fontawesome4',
},

'RENDERERS': {
    'fontawesome4': 'FontAwesome4Renderer',
    'bootstrap3': 'Bootstrap3Renderer',
},

}

Database

https://docs.djangoproject.com/en/3.0/ref/settings/#databases

DATABASES = { "default": { "ENGINE": "django.db.backends.sqlite3", "NAME": Path.joinpath(BASE_DIR, "db.sqlite3"), } }

AUTHENTICATION_BACKENDS = [ "django.contrib.auth.backends.ModelBackend", "webvirtcloud.ldapbackend.LdapAuthenticationBackend", ]

LOGIN_URL = "/accounts/login/"

LOGOUT_REDIRECT_URL = "/accounts/login/"

LANGUAGE_CODE = "en-us"

TIME_ZONE = "UTC"

USE_I18N = True

USE_L10N = True

USE_TZ = True

STATIC_URL = "/static/"

if not DEBUG: STATIC_ROOT = Path.joinpath(BASE_DIR, "static") else: STATICFILES_DIRS = [ Path.joinpath(BASE_DIR, "static"), ]

Default primary key field type

https://docs.djangoproject.com/en/3.2/ref/settings/#default-auto-field

DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'

LOCALE_PATHS = [ "locale/", ]

Settings for django-icons

DJANGO_ICONS = {

'DEFAULTS': {
    'renderer': 'fontawesome4',
},

'RENDERERS': {
    'fontawesome4': 'FontAwesome4Renderer',
    'bootstrap3': 'Bootstrap3Renderer',
},

}

LOGGING = { "version": 1, "disable_existing_loggers": False, "handlers": { "mail_admins": {"level": "ERROR", "class": "django.utils.log.AdminEmailHandler"} }, "loggers": { "django.request": { "handlers": ["mail_admins"], "level": "ERROR", "propagate": True, } }, }

#

WebVirtCloud settings

#

Websock port

WS_PORT = 6080

Websock host

WS_HOST = "0.0.0.0"

Websock public port - 80 or 443 if reverse-proxy, else 6080

WS_PUBLIC_PORT = 6080

Websock public host

WS_PUBLIC_HOST = None

Websock public path

WS_PUBLIC_PATH = "/novncd/"

Websock Certificate for SSL

WS_CERT = None

SOCKETIO_PORT = 6081 SOCKETIO_HOST = '0.0.0.0'

Socketio public host

SOCKETIO_PUBLIC_HOST = None

Socketio public port - 80 or 443 if reverse-proxy, else 6081

SOCKETIO_PUBLIC_PORT = 6081

Socketio public path

SOCKETIO_PUBLIC_PATH = "socket.io/"

List of console listen addresses

QEMU_CONSOLE_LISTENER_ADDRESSES = ( ("127.0.0.1", "Localhost"), ("0.0.0.0", "All interfaces"), )

List taken from http://qemu.weilnetz.de/qemu-doc.html#sec_005finvocation

QEMU_KEYMAPS = [ "ar", "da", "de", "de-ch", "en-gb", "en-us", "es", "et", "fi", "fo", "fr", "fr-be", "fr-ca", "fr-ch", "hr", "hu", "is", "it", "ja", "lt", "lv", "mk", "nl", "nl-be", "no", "pl", "pt", "pt-br", "ru", "sl", "sv", "th", "tr", ]

Keepalive interval and count for libvirt connections

LIBVIRT_KEEPALIVE_INTERVAL = 5 LIBVIRT_KEEPALIVE_COUNT = 5

ALLOW_EMPTY_PASSWORD = False NEW_USER_DEFAULT_INSTANCES = [] SHOW_PROFILE_EDIT_PASSWORD = True

OTP Config

OTP_ENABLED = False

LOGIN_REQUIRED_IGNORE_VIEW_NAMES = ["accounts:login", "accounts:email_otp"]

EMAIL Config

EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend' EMAIL_HOST = 'smtp.gmail.com' EMAIL_USE_TLS = True EMAIL_PORT = 587

sender's email-id

EMAIL_HOST_USER = ''

password associated with above email-id

EMAIL_HOST_PASSWORD = ''

LDAP Config

#

LDAP_ENABLED = False LDAP_URL = '' LDAP_PORT = 389 USE_SSL = False

The user with search rights on ldap. (e.g cn=admin,dc=kendar,dc=org)

LDAP_MASTER_DN = '' LDAP_MASTER_PW_ENC = '' LDAP_MASTER_PW = subprocess.Popen(["bash", str(BASE_DIR) + "/webvirtcloud/.dec_ldap_pwd.sh", LDAP_MASTER_PW_ENC],stdout=subprocess.PIPE, encoding='utf8').stdout.read().strip('\n')

The root dn (e.g. dc=kendar,dc=org)

LDAP_ROOT_DN = ''

Queries to identify the users, i use groupOfUniqueNames on openldap

PLEASE BE SURE memberOf overlay is activated on slapd

e.g. memberOf=cn=admins,cn=staff,cn=technicians,cn=webvirtcloud,ou=groups,dc=kendar,dc=org

LDAP_SEARCH_GROUP_FILTER_ADMINS = ''

e.g. memberOf=cn=staff,cn=technicians,cn=webvirtcloud,ou=groups,dc=kendar,dc=org

LDAP_SEARCH_GROUP_FILTER_STAFF = ''

e.g. memberOf=cn=technicians,cn=webvirtcloud,ou=groups,dc=kendar,dc=org

LDAP_SEARCH_GROUP_FILTER_TECHNICIANS = ''

e.g. memberOf=cn=webvirtcloud,ou=groups,dc=kendar,dc=org

LDAP_SEARCH_GROUP_FILTER_USERS = ''

The user name prefix to identify the user name (e.g. cn)

LDAP_USER_UID_PREFIX = '' `

catborise commented 1 year ago

it is related with django version. it is fixed