Hi Daniel, Thank you for the report. As you described, the issues is exactly the same as #856048, so I am going to merge the bugs. Given that this impacts a core functionality, it may qualify for a stable release update. I will check with the stable release team.
Thanks, Ludovico On Thu, Dec 7, 2017 at 3:45 PM Daniel Aubry <daniel.au...@adfinis-sygroup.ch> wrote: > Package: ntopng > Version: 2.4+dfsg1-3 > Severity: grave > Justification: renders package unusable > > Dear Maintainer, > > This is fixed in ntopng/2.4+dfsg1-4 which is not available on debian > stretch. > > Please see bug #856048 for more details. > > It is not possible to access the "Manage users" and "Preferences" links on > the web interface. Both will display an error message: > > Script "/lua/admin/users.lua" returned an error: > Missing CSRF parameter > > Script "/lua/admin/prefs.lua" returned an error: > Missing CSRF parameter > > > This is the important changelog entry of version 2.4+dfsg1-4 > > * Update Check-for-presence-of-crsf-in-admin-scripts.patch to avoid the > 'Missing CSRF parameter' error (Closes: #856048). > > > Best Reards > Daniel > > -- System Information: > Debian Release: 9.2 > APT prefers stable-updates > APT policy: (500, 'stable-updates'), (500, 'stable') > Architecture: amd64 (x86_64) > > Kernel: Linux 4.9.0-4-amd64 (SMP w/2 CPU cores) > Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), > LANGUAGE=en_US:en (charmap=UTF-8) > Shell: /bin/sh linked to /bin/dash > Init: systemd (via /run/systemd/system) > > Versions of packages ntopng depends on: > ii init-system-helpers 1.48 > ii libc6 2.24-11+deb9u1 > ii libcurl3-gnutls 7.52.1-5+deb9u3 > ii libgcc1 1:6.3.0-18 > ii libgeoip1 1.6.9-4 > ii libhiredis0.13 0.13.3-2 > ii libjson-c3 0.12.1-1.1 > ii libluajit-5.1-2 2.0.4+dfsg-1+b1 > ii libmariadbclient18 10.1.26-0+deb9u1 > ii libndpi4 1.8-1 > ii libpcap0.8 1.8.1-3 > ii librrd8 1.6.0-1+b2 > ii libsqlite3-0 3.16.2-5 > ii libstdc++6 6.3.0-18 > ii libzmq5 4.2.1-4 > ii lsb-base 9.20161125 > ii ntopng-data 2.4+dfsg1-3 > ii redis-server 3:3.2.6-1 > ii zlib1g 1:1.2.8.dfsg-5 > > ntopng recommends no packages. > > Versions of packages ntopng suggests: > pn geoip-database-contrib <none> > > -- no debconf information >
