1.9.8 appliance: fix for frontend login check

[joel_leonhardt]

Hi, FYI: In the 1.9.8 appliance, the frontend login check seems unchanged from the 1.8.4 appliance, but this check no longer works due to changes in the frontend. For us, this was handled by updating the check as follows:

Configuration > Web
> group=Zabbix-servers > host=Zabbix-server
> Zabbix-Frontend
> Steps

- Change Step 1 required string from "SIA Zabbix" to "Zabbix SIA".
This is to accommodate the updated frontend page text.

- Change Step3 url from "http://localhost/zabbix/index.php"
to "http://localhost/zabbix/index.php?request=&name={username}&password={passw ord}&autologin=1&enter=Sign+in".
Also clear Step3 POST string, turning this step into a GET.
These are to accommodate the new frontend login process.

- Add Step4 required string "Remember me for 30 days".
Also, delete Step5, since this check can now be included in Step4.

- Add Step2 required string "Profile".
Also, delete Step3, since this check can now be included in Step2.

Here's the resulting check:


Regards,
Joel

[richlv]

thanks for the report.
step 1 was fixed;
step 3 was not changed to get (that should actually be disallowed...), but the "Enter" string change was applied;
for step 5, i opted to check for the presence of "Login as Guest".

no steps were removed, though, the current setup seemed to be exposing process a bit more

thanks again, these changes should be visible in the next trunk appliance release

[joel_leonhardt]

Thanks for the response. But regarding GET vs POST for Step 3:
- Per Wireshark traces, Zabbix itself uses Get, not Post, at least in 1.9.8 appliance.
- This seems to be independent of browser (tested with Chrome, Firefox, IE).
- And it happens for both typical starting URLs (/zabbix/ and /zabbix/index.php?reconnect=1).

Wireshark traces show the browser sending the following:

GET /zabbix/index.php?request=&name=xxxx&password=xxxx&autologin=1&enter=Sign+in HTTP/1.1

[richlv]

that's definitely not good - it could be already reported, though. you might want to search the issue tracker