#2778 RFE: Browser config javascript should check to see if sending Referer is enabled
Closed: Fixed None Opened 11 years ago by dpal.

https://bugzilla.redhat.com/show_bug.cgi?id=821448 (Red Hat Enterprise Linux 6)

I have Fedora 16 installed with default firefox from repos
(firefox-12.0-1.fc16.x86_64) and I'm unable to login.

I get a bit cryptic error "Missing or invalid HTTP Referer, missing". It seems
that latest version of Firefox is not sending Referrer header (I've tried this
also in safe mode and without extentions).

Without allowing Password Logins on server (KrbMethodK5Passwd On), I can't use
IPA.


Does IPA really need the referrer header for login?

If it absolutely needs to, I'd prefer to see more user friendly messages about
possible issues and help on how to solve them (advice on Firefox configuration
changes if possible, pointer to changes server side, etc).

Also the error message that the referrer headers are "missing or invalid" is
not very good for debugging. It does make a big difference if the browser is
not sending some header at all or if it's corrupted.

ipa-server-2.1.3-9.el6.x86_64

network.http.sendRefererHeader was set to 0. The default is 2.

We should check this in javascript, either in the signed version or elsewhere, to warn the user.

Moving to next month iteration.

Metadata Update from @dpal:
- Issue assigned to pvoborni
- Issue set to the milestone: FreeIPA 3.0 Beta 1

7 years ago

Login to comment on this ticket.

Metadata