Wso2 ei server, error 403 is prohibited, does not gain access to the kernel, error: the required token is not in the request

I install WSO2 EI 6.1.1

integrator --run : 
https://localhost:9445/carbon/admin/login.jsp -> OK

wso2serber.bat : EI-Business-Process Server 
https://localhost:9445/carbon/admin/login_action.jsp
Error 403 - Forbidden

[EI-Business-Process]  WARN {org.owasp.csrfguard.log.JavaLogger} -  potential cross-site request forgery (CSRF) attack thwarted (user:<anonymous>, ip:192.168.1.11, method:POST, uri:/carbon/admin/login_action.jsp, error:required token is missing from the request)

and wso2serber.bat : EI-Analytics
https://localhost:9444/carbon/admin/login_action.jsp
Error 403 - Forbidden

 [EI-Analytics]  WARN {org.owasp.csrfguard.log.JavaLogger} -  potential cross-site request forgery (CSRF) attack thwarted (user:<anonymous>, ip:192.168.1.11, method:POST, uri:/carbon/admin/login_action.jsp, error:required token is missing from the request)

How to solve this problem? How to create a wso2 business process server management console under WSO2 WSO2 EI?

+4
source share
1 answer

This is due to a known bug in the latest JDK.

https://bugs.openjdk.java.net/browse/JDK-8189789

Use JDK 8u144instead.

Edit: Another solution is to disable compressionin tomcat.

  • Open the ca file talina-server.xmlfrom the directory <PRODUCT_HOME>/repository/conf/tomcat/.
  • Set the compression parameter (under each connector configuration) to off, as shown below: compression="off"

  • Reboot the server.

+4

Source: https://habr.com/ru/post/1689847/


All Articles