[InterMine Dev] web app session error

Joshua Heimbach jkh46 at cam.ac.uk
Tue Aug 25 17:48:48 BST 2015


(Sorry, this was meant to be the solution to the "[InterMine Dev] webapp 
403" email thread)

On 25/08/15 16:31, Josh Heimbach wrote:
> Hi everyone,
>
> Sofia and I had a chat outside of the dev mailing list to discuss 
> property settings and such. Good news: the webapp now launches 
> successfully.
>
> For future reference here's what we did to fix it. The solution might 
> be specific to Tomcat7 installed via the package manager on CentOS.
>
> In conf/tomcat-users.xml we added two new roles (admin-gui and 
> admin-script). Please note these have to have comma separated.
>
> <tomcat-users>
>    <role rolename="manager-gui"/>
>    <role rolename="manager-script"/>
>    <role rolename="admin-gui"/>
>    <role rolename="admin-script"
>    <user username=“YOUR_USERNAME" password=“YOUR_PASSWORD" 
> roles="manager-gui, manager-script, admin-gui, admin-script"/>
> </tomcat-users>
>
> Then restart the Tomcat service.
>
> I've been under the impression that the deployment process uses 
> Tomcat's manager/html URL path rather than the manager/text/list path 
> where Sofia's ant deployment was failing. Perhaps the roles we added 
> cover the manager/text/list.
>
> - Josh
>
>
> On 25/08/15 16:12, Justin Clark-Casey wrote:
>> Hi Sofia,
>>
>> Have you seen [1]?
>>
>> [1] 
>> http://intermine.readthedocs.org/en/latest/system-requirements/software/tomcat/#session-errors
>>
>> On 25/08/15 16:10, Sofia Robb wrote:
>>> Hello,
>>>
>>> I am working at making sure everything is in working order so I have
>>> been goting through the malariamine tutorial.
>>>
>>> I have my webapp up and running, but when I visit the home page i get a
>>> session error.
>>>
>>> I am pretty sure that this error message corresponds to the exact time
>>> the error box pops up. I tried a few times and the message was written
>>> to my messages file each time.
>>>
>>> Aug 25 10:05:25 simrbase server: 60482836 [http-bio-8080-exec-8] ERROR
>>> org.directwebremoting.dwrp.Batch  - A request has been denied as a
>>> potential CSRF attack.
>>>
>>> Any ideas?
>>>
>>> Thanks,
>>> Sofia
>>> Inline image 1
>>>
>>>
>>> _______________________________________________
>>> dev mailing list
>>> dev at intermine.org
>>> http://mail.intermine.org/cgi-bin/mailman/listinfo/dev
>>>
>>
>
>
> _______________________________________________
> dev mailing list
> dev at intermine.org
> http://mail.intermine.org/cgi-bin/mailman/listinfo/dev




More information about the dev mailing list