After 10.5 Build 10509 : [com.adventnet.iam.security.IAMSecurityException] ... IAMSecurityException ErrorCode: BROWSER_COOKIES_DISABLED, RequestURI: "/api/v3/requests/3491/share"
I guess it is a bug of your security framework since upgrading to 10.5 Build 10509.
The same python script of request sharing stopped accidentally working since upgrading.
I had to discover on my own for possible evidences and found out in /opt/ServiceDeskPlus-MSP/logs the following (in serverout0.txt)
- [13:48:55:471]|[07-26-2020]|[com.manageengine.servicedesk.v3api.utils.SDPAPIUtil]|[SEVERE]|[64]: BROWSER_COOKIES_DISABLED|
- com.adventnet.iam.security.IAMSecurityException: BROWSER_COOKIES_DISABLED
- at com.adventnet.iam.security.ActionRule.validateCSRFToken(ActionRule.java:1309)
- at com.adventnet.iam.security.ActionRule.validate(ActionRule.java:1447)
- at com.adventnet.iam.security.URLRule.validateURLRule(URLRule.java:411)
- at com.adventnet.iam.security.SecurityFilter.doFilter(SecurityFilter.java:199)
- at com.manageengine.servicedesk.filter.SdpSecurityFilter.doFilter(SdpSecurityFilter.java:300)
- at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
- at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
- at com.adventnet.servicedesk.filter.AccountUrlFilter.doFilter(AccountUrlFilter.java:38)
- at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
- at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
- at org.tuckey.web.filters.urlrewrite.UrlRewriteFilter.doFilter(UrlRewriteFilter.java:350)
- at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
- at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
- at com.adventnet.servicedesk.filter.RememberMe.doFilter(RememberMe.java:125)
- at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
- at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
- at com.adventnet.servicedesk.authentication.NTLMV2CredentialAssociationFilter.doFilter(NTLMV2CredentialAssociationFilter.java:37)
- at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
- at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
- at com.adventnet.servicedesk.authentication.NTLMV2Filter.doFilter(NTLMV2Filter.java:222)
- at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
- at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
- at com.adventnet.filters.ParamFilter.doFilter(ParamFilter.java:30)
- at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
- at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
- at com.adventnet.authentication.filter.AssociateCredential.doFilter(AssociateCredential.java:61)
- at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
- at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
- at com.manageengine.servicedesk.filter.MethodFilter.doFilter(MethodFilter.java:65)
- at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
- at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
- at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)
- at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
- at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:493)
- at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
- at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
- at com.adventnet.servicedesk.tools.AuthenticateNtlm.invoke(AuthenticateNtlm.java:179)
- at com.adventnet.servicedesk.tools.LoginCookiesValveBase.invoke(LoginCookiesValveBase.java:249)
- at org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:240)
- at org.apache.catalina.valves.StuckThreadDetectionValve.invoke(StuckThreadDetectionValve.java:206)
- at com.manageengine.servicedesk.valves.SDPStuckThreadDetectionValve.invoke(SDPStuckThreadDetectionValve.java:65)
- at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
- at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
- at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:800)
- at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
- at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:800)
- at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1471)
- at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
- at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
- at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
- at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
- at java.lang.Thread.run(Thread.java:748)
Browser cookies? Disabled?
I scanned through cat securitylog*.txt | grep "IAMSecurityException ErrorCode" and found this exception started appearing sicne the date we upgraded onto 10509