[PKG-Openstack-devel] Horizon don't work on Sid/Newton - Forbidden (CSRF token missing or incorrect

[Thomas Goirand]

On 11/05/2016 12:10 PM, Alberto Molina Coballes wrote:
> On vie, nov 04, 2016 at 10:11:54 +0000, Turbo Fredriksson wrote:
>> On 2 Nov 2016, at 20:17, Turbo Fredriksson <turbo at bayour.com> wrote:
>>>
>>> On 31 Oct 2016, at 09:54, Thomas Goirand <zigo at debian.org> wrote:
>>>
>>>> Can you try to purge the package and reinstall it?
>>>
>>> Didn’t work.
>>
>> I’ve now purged openstack-dashboard and all packages that depends on it.
>>
>> Then reinstalled ONLY openstack-dashboard and openstack-dashboard-apache
>> (changing the SSL* options to GnuTLS* equivalence because I have problem
>> with SSL* as well - forgot why, but I think I’ve talked about that here earlier).
>>
>> Still get the same problem :(
>>
>>
>> 	Forbidden (403)
>> 	CSRF verification failed. Request aborted.
>>
> 
> I've found the same error using Apache with GnuTLS or Nginx.
> 
> #843108 was opened regarding to this issue and downgrading python-django to 1.8 solves the issue, but python-django in stretch/sid is 1.10.
> 
> According to requirements.txt file [1], horizon in newton requires Django<1.9,>=1.8
> 
> Regards,
> 
> Alberto
> 
> [1] https://github.com/openstack/horizon/blob/stable/newton/requirements.txt

We've worked all the summer to fix Django 1.10 issues with upstream,
this is probably the last one we need to address. Even thought the
global-requirements are saying version 1.8, version 1.9 should work just
fine for Horizon (it's been gating on Django 1.9 for a while already).
If there's still issues with Django 1.9, then IMO this should be
considered an upstream bug.

Cheers,

Thomas Goirand (zigo)