AnsweredAssumed Answered

Site invites problem - most bizarre

Question asked by t16 on Jan 27, 2015
Ive got an issue with failing invites for sites in Alfresco.

Using Share through a loadbalancer, the invitations fail, but going directly to one of the share front ends, the invites work every time.

Can anyone shed some light on what might be happening and how the invites are done that a load balancer infront of the share site would prevent an invite from working?!

I get in the share logs:-

alfresco/api/sites/imt—test/invitations
12:29:45,780 ERROR [org.alfresco.web.site] [http-apr-80-exec-8] javax.servlet.ServletException: Possible CSRF attack noted when asserting referer header 'https://xourserverx/share/page/site/test---site/invite'. Request: POST /share/proxy/alfresco/api/sites/test—site/invitations, FAILED TEST: Assert referer POST /share/proxy/alfresco/api/sites/test—site/invitations :: referer: 'https://xourserverx/share/page/site/test---site/invite' vs server & context: http://xourserverx/ (string) or  (regexp)

Damn….

What do I need to do here?!

Edit2: I am using HAproxy and SSL termination on the proxy, with just http on the back end. Is this a clue in the non http and https reference difference above?

Outcomes