Forbidden Invalid CSRF Token +monit Announcing the arrival of Valued Associate #679: Cesar Manara Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern) Come Celebrate our 10 Year Anniversary!Setting up monit to work with Varnish and nginxMonit doesn't pick up httpd process after resetmysql monitoring with monitHow to start dovecot?configure Monit application on Linux Centos error messageCan't find httpd.pid to use for Monit apache2 monitoringConfigure Monit to monitor PHP5-FPM on Ubuntu/Nginx setupAwaken monit daemon every few hours for all monitored processesExecute custom monit script upon failure to restart the processMonit not restarting process on kill
Is there a documented rationale why the House Ways and Means chairman can demand tax info?
How did the aliens keep their waters separated?
Windows 10: How to Lock (not sleep) laptop on lid close?
Statistical model of ligand substitution
If A makes B more likely then B makes A more likely"
Problem when applying foreach loop
Estimated State payment too big --> money back; + 2018 Tax Reform
Was credit for the black hole image misattributed?
What's the point in a preamp?
What do you call a plan that's an alternative plan in case your initial plan fails?
Aligning matrix of nodes with grid
Writing Thesis: Copying from published papers
How to politely respond to generic emails requesting a PhD/job in my lab? Without wasting too much time
Two different pronunciation of "понял"
Simulating Exploding Dice
What is the largest species of polychaete?
Communication vs. Technical skills ,which is more relevant for today's QA engineer positions?
Array/tabular for long multiplication
How to dynamically generate the hash value of a file while it gets downloaded from any website?
Can a 1st-level character have an ability score above 18?
Strange behaviour of Check
I'm thinking of a number
Cold is to Refrigerator as warm is to?
What computer would be fastest for Mathematica Home Edition?
Forbidden Invalid CSRF Token +monit
Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
Come Celebrate our 10 Year Anniversary!Setting up monit to work with Varnish and nginxMonit doesn't pick up httpd process after resetmysql monitoring with monitHow to start dovecot?configure Monit application on Linux Centos error messageCan't find httpd.pid to use for Monit apache2 monitoringConfigure Monit to monitor PHP5-FPM on Ubuntu/Nginx setupAwaken monit daemon every few hours for all monitored processesExecute custom monit script upon failure to restart the processMonit not restarting process on kill
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have installed monit on AWS ec2 and it working fine. But when I try to restart the nginx service through monit UI,i got an error like "Forbidden Invalid CSRF Token +monit".
My configuration
check process nginx with pidfile /var/run/nginx.pid
start program = "/etc/init.d/mysql start"
stop program = "/etc/init.d/mysql stop"
linux monitoring monit
asked Oct 15 '18 at 13:08
Sruthin Kumar TKSruthin Kumar TK
113
add a comment |
I have installed monit on AWS ec2 and it working fine. But when I try to restart the nginx service through monit UI,i got an error like "Forbidden Invalid CSRF Token +monit".
My configuration
check process nginx with pidfile /var/run/nginx.pid
start program = "/etc/init.d/mysql start"
stop program = "/etc/init.d/mysql stop"
linux monitoring monit
asked Oct 15 '18 at 13:08
Sruthin Kumar TKSruthin Kumar TK
113
add a comment |
I have installed monit on AWS ec2 and it working fine. But when I try to restart the nginx service through monit UI,i got an error like "Forbidden Invalid CSRF Token +monit".
My configuration
check process nginx with pidfile /var/run/nginx.pid
start program = "/etc/init.d/mysql start"
stop program = "/etc/init.d/mysql stop"
linux monitoring monit
asked Oct 15 '18 at 13:08
Sruthin Kumar TKSruthin Kumar TK
113
I have installed monit on AWS ec2 and it working fine. But when I try to restart the nginx service through monit UI,i got an error like "Forbidden Invalid CSRF Token +monit".
My configuration
check process nginx with pidfile /var/run/nginx.pid
start program = "/etc/init.d/mysql start"
stop program = "/etc/init.d/mysql stop"
linux monitoring monit
linux monitoring monit
asked Oct 15 '18 at 13:08
Sruthin Kumar TKSruthin Kumar TK
113
asked Oct 15 '18 at 13:08
Sruthin Kumar TKSruthin Kumar TK
113
asked Oct 15 '18 at 13:08
Sruthin Kumar TKSruthin Kumar TK
113
asked Oct 15 '18 at 13:08
Sruthin Kumar TKSruthin Kumar TK
113
asked Oct 15 '18 at 13:08
Sruthin Kumar TKSruthin Kumar TK
113
113
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
monit implement double-submit cookie pattern to protect from csrf attacks, it send a cookie called securitytoken with post requests, but up to (at least) version 1.20 didn't take into account the presence of other cookies before the one mentioned.
Beside upgrading to a newer version where it should be fixed there's a simple workaround, just delete the other cookies using the browser or make securitytoken the first in the list.
answered Jan 8 at 7:58
AlexAlex
1112
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f935582%2fforbidden-invalid-csrf-token-monit%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
monit implement double-submit cookie pattern to protect from csrf attacks, it send a cookie called securitytoken with post requests, but up to (at least) version 1.20 didn't take into account the presence of other cookies before the one mentioned.
Beside upgrading to a newer version where it should be fixed there's a simple workaround, just delete the other cookies using the browser or make securitytoken the first in the list.
answered Jan 8 at 7:58
AlexAlex
1112
add a comment |
monit implement double-submit cookie pattern to protect from csrf attacks, it send a cookie called securitytoken with post requests, but up to (at least) version 1.20 didn't take into account the presence of other cookies before the one mentioned.
Beside upgrading to a newer version where it should be fixed there's a simple workaround, just delete the other cookies using the browser or make securitytoken the first in the list.
answered Jan 8 at 7:58
AlexAlex
1112
add a comment |
monit implement double-submit cookie pattern to protect from csrf attacks, it send a cookie called securitytoken with post requests, but up to (at least) version 1.20 didn't take into account the presence of other cookies before the one mentioned.
Beside upgrading to a newer version where it should be fixed there's a simple workaround, just delete the other cookies using the browser or make securitytoken the first in the list.
answered Jan 8 at 7:58
AlexAlex
1112
monit implement double-submit cookie pattern to protect from csrf attacks, it send a cookie called securitytoken with post requests, but up to (at least) version 1.20 didn't take into account the presence of other cookies before the one mentioned.
Beside upgrading to a newer version where it should be fixed there's a simple workaround, just delete the other cookies using the browser or make securitytoken the first in the list.
answered Jan 8 at 7:58
AlexAlex
1112
answered Jan 8 at 7:58
AlexAlex
1112
answered Jan 8 at 7:58
AlexAlex
1112
answered Jan 8 at 7:58
AlexAlex
1112
1112
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f935582%2fforbidden-invalid-csrf-token-monit%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
