Apache problem

[jancs]

Hi!
I have some weird problem with Zabbix 5.0.40:
apache log for Zabbix frontend fills with such messages:
:55012] client denied by server configuration: .../zabbix/zabbix.php, referer: https://.../zabbix.php?action=dashbo...&dashboardid=2
:46252] client denied by server configuration: .../zabbix/zabbix.php, referer: https://.../zabbix.php?action=dashboard.view
:33278] client denied by server configuration: .../zabbix/jsLoader.php, referer: https://.../zabbix.php?action=host.view
:34242] client denied by server configuration: .../zabbix/jsLoader.php, referer: https://.../zabbix.php?action=proxy.list
:39868] client denied by server configuration: .../zabbix/jsrpc.php, referer: https://.../zabbix.php?action=proxy.edit&proxyid=10438
every such message usually repeats few times.

virtual host section in cfg looks so:
<VirtualHost *:443>
ServerName ...:443
DocumentRoot .../zabbix
SSLEngine on
SSLOptions +StrictRequire
SSLVerifyClient none
SSLProxyEngine off
<Directory />
SSLRequireSSL
Require all granted
</Directory>
BrowserMatch ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
<<logging instructions skipped>>
</VirtualHost>

apache version 2.4.62, PHP - 7.4.20

[jancs]

I am very sorry - upgrade to 5.0.47 solved the problem.

[tim.mooney]

Are you attempting to use mod_php, or are you attempting to use PHP-FPM for php processing?

You may have php 7.4.20 installed, but I don't think it's being used by httpd. All of your error messages are about php files being blocked. My guess is that's because you're missing the config to tell httpd how to process php.

[jancs]

No, all php/Apache related things, besides Zabbix, are working fine, so something other has to be blamed (funny thing - why mod_php has to be loaded in apache if it is not used for php file processing?)

Could it relate ssl somehow:
error concides in time with ssl request
server TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /chart2.php?graphid=1982&from=now-30m&to=now&height=201&width=1166&profileIdx=web.charts.filter&_=xakwpho3 HTTP/1.1" 21562

[jancs]

The solutions was suggested by AI:
Ensure the Alias /zabbix /usr/share/zabbix is present in the SSL VirtualHost if it’s used.
Most of errors (the ones generated by chartX.php) disappeared, but call to dashboard.view still generates errors, from the first call after the connection to the frontend.
zabbix.php (as well as everything under /zabbix) is owned by apache.apache with 644 permissions for files and 775 for directories

In addition - in the apache error.log file I see Segmentation fault messages, again coinciding in time with dashboard.view calls.
as it is impossible to upload almost anything

[jancs]

I am very sorry - upgrade to 5.0.47 solved the problem.