Getting error: "The following error occurred on the page 'SystemConfigurationEditor.aspx'" when right clicking a computer and selecting "Configure Computer"
search cancel

Getting error: "The following error occurred on the page 'SystemConfigurationEditor.aspx'" when right clicking a computer and selecting "Configure Computer"

book

Article ID: 163320

calendar_today

Updated On:

Products

IT Management Suite Deployment Solution

Issue/Introduction

Customer is seeing an error when he right-clicks on a computer under Manage>Computers>Selecting computer>Right-click on it>Configure Computer

The error in the SMP logs indicates that it is a failure to process the Anti-XSRF token (Anti Cross Script Forgery).

The following is displayed:

The NS logs shows the following:

Error 1:

Failed to process web request.

Exception of type 'System.Web.HttpUnhandledException' was thrown.
   [System.Web.HttpUnhandledException @ System.Web]
   at System.Web.UI.Page.HandleError(Exception e)
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
   at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
   at System.Web.UI.Page.ProcessRequest()
   at System.Web.UI.Page.ProcessRequest(HttpContext context)
   at Altiris.NS.UI.Controls.PageCachePage.ProcessRequest(HttpContext context)
   at Altiris.NS.UI.AltirisPage.ProcessRequest(HttpContext context)

Validation of Anti-XSRF token failed. Accessing page: http://smp-w2k12-01.epm.local/Altiris/Deployment/SystemConfigurationEditor.aspx?itemguid=679ac1bd-073e-44ca-b860-9244077cc5cd

   [System.InvalidOperationException @ Altiris.NS.UI]
   at Altiris.NS.UI.AltirisPage.DoCheckToken()
   at Altiris.NS.UI.AltirisPage.DoCheckXsrf()
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Exception logged from: 

   at Altiris.NS.UI.AltirisPage.ProcessRequest(System.Web.HttpContext)
   at System.Web.HttpApplication+CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(System.Web.HttpApplication+IExecutionStep, Boolean&)
   at System.Web.HttpApplication+PipelineStepManager.ResumeSteps(Exception)
   at System.Web.HttpApplication.BeginProcessRequestNotification(System.Web.HttpContext, AsyncCallback)
   at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(System.Web.Hosting.IIS7WorkerRequest, System.Web.HttpContext)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
   at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)

Error 2:

HTTP Request failed:

/Altiris/Deployment/SystemConfigurationEditor.aspx?itemguid=679ac1bd-073e-44ca-b860-9244077cc5cd

Validation of Anti-XSRF token failed. Accessing page: http://smp-w2k12-01.epm.local/Altiris/Deployment/SystemConfigurationEditor.aspx?itemguid=679ac1bd-073e-44ca-b860-9244077cc5cd

   [System.InvalidOperationException @ Altiris.NS.UI]
   at Altiris.NS.UI.AltirisPage.DoCheckToken()
   at Altiris.NS.UI.AltirisPage.DoCheckXsrf()
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Exception logged from: 

   at Altiris.NS.UI.AltirisWebApplication.ReportApplicationError(System.Web.HttpContext)
   at System.Web.HttpApplication.RaiseOnError()
   at System.Web.HttpApplication.RecordError(Exception)
   at System.Web.HttpApplication+PipelineStepManager.ResumeSteps(Exception)
   at System.Web.HttpApplication.BeginProcessRequestNotification(System.Web.HttpContext, AsyncCallback)
   at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(System.Web.Hosting.IIS7WorkerRequest, System.Web.HttpContext)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
   at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)

Cause

Known issue present within ITMS 8.0 HF1.

The problem occurrs because java applet (CopyFolderFileApplet.java, method SendManifest()) does its own POST requests. XSRF token verification uses form hidden fields and compares the value rendered to the page with the one received back during POST.
The POST request has nothing in the form, so the verification fails.

So you have either make POST requests with __AntiXsrfToken in the form, or switch anti-xsrf check in this page.

Resolution

This issue has been fixed in ITMS 8.0 HF2.

Workaround:
“System Configuration Editor” page can be launched from “Manage>Jobs and Tasks>New>Task>Apply System Configuration” task and then it can be scheduled for required computer resource.

Attachments

Powered by Wolken Software