Tumbleweed apache and zabbix packages not working together

i’m trying the tumbleweed(20241226-3287.1) zabbix packages. Postgresql17-server(17.2-1.1) and zabbix_server(&zabbix-server-postgresql|6.0.36-1.2) seem to be working, but

http://192.168.128.157/zabbix
Access forbidden!

You don't have permission to access the requested object.
It is either read-protected or not readable by the server.

Error 403
192.168.128.157
Apache

/var/log/apache2/error_log:

[Mon Feb 17 16:35:44.964925 2025] [authz_core:error] [pid 1393:tid 1393] [client 192.168.128.232:37376] AH01630: client denied by server configuration: /usr/share/zabbix/

/var/log/apache2/access_log:

192.168.128.232 - - [17/Feb/2025:16:35:44 -0600] "GET /zabbix HTTP/1.1" 403 977 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0"

/etc/apache2/conf.d/zabbix.conf:

<IfDefine ZABBIX>
  Alias /zabbix "/usr/share/zabbix/"
  <DirectoryMatch "/usr/share/zabbix/(conf/|include/)>
    <IfModule mod_authz_core.c>
      # Apache 2.4
      Require all denied
    </IfModule>

    <IfModule !mod_authz_core.c>
      Order deny,allow 
      Deny from all
    </IfModule>
  </DirectoryMatch> 
</IfDefine>
<IfDefine !ZABBIX>  
    Redirect 403 /zabbix
</IfDefine>

a2enflag ZABBIX says "ZABBIX" already present, /usr/share/zabbix is all root:root, files all -rw-r--r--, directories drwxr-xr-x, there are no .htaccess files.

/var/log/zabbixs/zabbix_server.log:

 18230:20250217:162351.413 database connection re-established
 18230:20250217:162351.574 current database version (mandatory/optional): 06000000/06000054
 18230:20250217:162351.575 required mandatory version: 06000000
 29804:20250217:162351.643 starting HA manager
 29804:20250217:162351.719 HA manager started in active mode
 18230:20250217:162351.722 server #0 started [main process]
 29806:20250217:162351.724 server #1 started [service manager #1]
 29807:20250217:162351.725 server #2 started [configuration syncer #1]
 29811:20250217:162352.395 server #3 started [alert manager #1]
 29812:20250217:162352.396 server #4 started [alerter #1]
 29813:20250217:162352.397 server #5 started [alerter #2]
 29816:20250217:162352.399 server #7 started [preprocessing manager #1]
 29815:20250217:162352.400 server #6 started [alerter #3]
 29817:20250217:162352.401 server #8 started [preprocessing worker #1]
 29818:20250217:162352.402 server #9 started [preprocessing worker #2]
 29819:20250217:162352.403 server #10 started [preprocessing worker #3]
 29820:20250217:162352.403 server #11 started [lld manager #1]
 29821:20250217:162352.404 server #12 started [lld worker #1]
 29822:20250217:162352.405 server #13 started [lld worker #2]
 29823:20250217:162352.405 server #14 started [housekeeper #1]
 29825:20250217:162352.407 server #15 started [timer #1]
 29827:20250217:162352.409 server #17 started [discoverer #1]
 29826:20250217:162352.410 server #16 started [http poller #1]
 29831:20250217:162352.414 server #19 started [history syncer #2]
 29830:20250217:162352.414 server #18 started [history syncer #1]
 29832:20250217:162352.415 server #20 started [history syncer #3]
 29836:20250217:162352.418 server #21 started [history syncer #4]
 29839:20250217:162352.419 server #22 started [escalator #1]
 29840:20250217:162352.423 server #23 started [proxy poller #1]
 29843:20250217:162352.429 server #24 started [self-monitoring #1]
 29845:20250217:162352.430 server #26 started [poller #1]
 29844:20250217:162352.430 server #25 started [task manager #1]
 29848:20250217:162352.435 server #28 started [poller #3]
 29847:20250217:162352.436 server #27 started [poller #2]
 29850:20250217:162352.436 server #30 started [poller #5]
 29851:20250217:162352.439 server #31 started [unreachable poller #1]
 29849:20250217:162352.440 server #29 started [poller #4]
 29852:20250217:162352.443 server #32 started [trapper #1]
 29856:20250217:162352.465 server #34 started [trapper #3]
 29855:20250217:162352.466 server #33 started [trapper #2]
 29858:20250217:162352.470 server #36 started [trapper #5]
 29857:20250217:162352.473 server #35 started [trapper #4]
 29863:20250217:162352.486 server #39 started [history poller #1]
 29860:20250217:162352.486 server #37 started [icmp pinger #1]
 29864:20250217:162352.487 server #40 started [history poller #2]
 29862:20250217:162352.489 server #38 started [alert syncer #1]
 29870:20250217:162352.499 server #43 started [history poller #5]
 29868:20250217:162352.500 server #41 started [history poller #3]
 29869:20250217:162352.503 server #42 started [history poller #4]
 29871:20250217:162352.510 server #44 started [availability manager #1]
 29874:20250217:162352.510 server #46 started [odbc poller #1]
 29873:20250217:162352.513 server #45 started [trigger housekeeper #1]
 29848:20250217:162356.456 enabling Zabbix agent checks on host "Zabbix server": interface became available
 29831:20250217:162356.593 item "Zabbix server:zabbix[vmware,buffer,pused]" became not supported: No "vmware collector" processes started.
 29831:20250217:162358.677 item "Zabbix server:zabbix[process,report writer,avg,busy]" became not supported: No "report writer" processes started.                                                                  
 29831:20250217:162359.691 item "Zabbix server:zabbix[process,report manager,avg,busy]" became not supported: No "report manager" processes started.
 29832:20250217:162441.696 item "Zabbix server:zabbix[process,ipmi poller,avg,busy]" became not supported: No "ipmi poller" processes started.
 29830:20250217:162442.700 item "Zabbix server:zabbix[process,java poller,avg,busy]" became not supported: No "java poller" processes started.
 29832:20250217:162447.714 item "Zabbix server:zabbix[process,snmp trapper,avg,busy]" became not supported: No "snmp trapper" processes started.
 29832:20250217:162447.715 item "Zabbix server:zabbix[process,ipmi manager,avg,busy]" became not supported: No "ipmi manager" processes started.
 29836:20250217:162448.715 item "Zabbix server:zabbix[process,vmware collector,avg,busy]" became not supported: No "vmware collector" processes started.
 29836:20250217:164551.593 item "Zabbix server:vfs.file.contents["/sys/class/net/enp1s0/speed"]" became not supported: Value "-1000000" of type "double" is not suitable for value type "Numeric (unsigned)"
 29832:20250217:164552.594 item "Zabbix server:vfs.file.contents["/sys/class/net/enp2s0/speed"]" became not supported: Value "-1000000" of type "double" is not suitable for value type "Numeric (unsigned)"
 29830:20250217:164553.596 item "Zabbix server:vfs.dev.read.await[vda]" became not supported: Cannot evaluate function: not enough data at "last(//vfs.dev.read.time.rate[vda])/(last(//vfs.dev.read.rate[vda])+(last(//vfs.dev.read.rate[vda])=0)))*1000*(last(//vfs.dev.read.rate[vda]) > 0)".
 29831:20250217:164554.598 item "Zabbix server:vfs.dev.write.await[vda]" became not supported: Cannot evaluate function: not enough data at "last(//vfs.dev.write.time.rate[vda])/(last(//vfs.dev.write.rate[vda])+(last(//vfs.dev.write.rate[vda])=0)))*1000*(last(//vfs.dev.write.rate[vda]) > 0)".
 29830:20250217:164753.807 item "Zabbix server:vfs.dev.read.await[vda]" became supported
 29832:20250217:164754.808 item "Zabbix server:vfs.dev.write.await[vda]" became supported
 29823:20250217:165352.589 executing housekeeper
 29823:20250217:165352.694 housekeeper [deleted 0 hist/trends, 0 items/triggers, 0 events, 0 problems, 0 sessions, 0 alarms, 0 audit, 0 autoreg_host, 0 records in 0.069039 sec, idle for 1 hour(s)]
 29823:20250217:175352.794 executing housekeeper
 29823:20250217:175352.880 housekeeper [deleted 0 hist/trends, 0 items/triggers, 0 events, 0 problems, 0 sessions, 0 alarms, 0 audit, 0 autoreg_host, 0 records in 0.051009 sec, idle for 1 hour(s)]

My guess is none of those log entries are related to apache complaining Access forbidden! i’m at a loss. Any ideas?

updated…

Tumbleweed  20241226-0 -> 20250216-0
2025-02-17 19:14:02|install|apache2|2.4.62-4.1
2025-02-17 19:14:15|install|postgresql17-server|17.3-1.1

no change to

2025-01-26 17:43:58|install|zabbix-server|6.0.36-1.2

nor any change to

Access forbidden!

There are several hints:

https://www.zabbix.com/forum/zabbix-help/484582-web-ui-403-forbidden-error-after-this-morning-s-auto-update-to-zabbix-7-0-0rc3

1 Like

it works now with /etc/apache2/conf.d/zabbix.conf containing:

<Directory />
  Require all denied
</Directory>  
<IfDefine ZABBIX>
  Alias /zabbix "/usr/share/zabbix/"
  <Directory /usr/share/zabbix>
    Require ip 192.168.128.0/24
  </Directory>
  <DirectoryMatch "/usr/share/zabbix/(conf/|include/)>
    <IfModule mod_authz_core.c>
      # Apache 2.4
      Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
      Order deny,allow
      Deny from all
    </IfModule>
  </DirectoryMatch>
</IfDefine>
<IfDefine !ZABBIX>
    Redirect 403 /zabbix
</IfDefine>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.