Remote shutdown in OS6 ??

G'day Guys,

 

I'm in the process of unsuccessfully trying to do a remote shutdown of my NAS by posting a request to /dbbroker.. I've referenced several existing posts on the forums here.

 

So I was initially getting the error message "Forbidden. You don't have permission to access /dbbroker on this server", I've resolved that problem by obtaining and submitting the csrfpId.

 

The problem that I am running into now is that the NAS returns a http code of 200 but with no contents in the response and the NAS obviously doesn't shutdown.

 

Here's the verbose output from curl...

* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server did not agree to a protocol
* Server certificate:
*  subject: C=US; CN=media.local
*  start date: Jul 31 07:33:55 2018 GMT
*  expire date: Jan 18 07:33:55 2038 GMT
*  issuer: C=US; CN=media.local
*  SSL certificate verify result: self signed certificate (18), continuing anyway.
* Server auth using Basic with user 'admin'
} [5 bytes data]
> POST /dbbroker HTTP/1.1
> Host: media.local
> Authorization: Basic YWRtaW46bmV0Z2VhcjE=
> User-Agent: curl/7.52.1
> Accept: */*
> Content-Type: application/x-www-form-urlencoded; charset=UTF-8
> Cookie: sn=3C82350F01CD8
> csrfpId: [redacted]
> X-Requested-With: XMLHttpRequest
> Content-Length: 464
>
} [464 bytes data]
* upload completely sent off: 464 out of 464 bytes
{ [5 bytes data]
< HTTP/1.1 200 OK
< Date: Tue, 31 Jul 2018 07:59:40 GMT
< Server: Apache/2.2.34 (Debian)
< Content-Length: 0
< Vary: User-Agent,Accept-Encoding
< Connection: close
< Content-Type: text/xml
<
* Curl_http_done: called premature == 0
[79B blob data]
* Closing connection 0

Looking at the network calls from frontview, I can see that this same method works correctly. Not quite sure what I am missing.

 

If anyone could point me in the right direction, that would be awesome.

 

Thanks,

 

David