Upgrade from 6.4 -> 7.2 - URL Forbidden

[Verulam]

Hi there

I appreciate this may be a simple query - and I've seen a lot of references to it online as well as on these boards - but I am not getting anywhere resolving it so thought I'd ask.

I recently restored a Veeam backup of our Zabbix server to an isolated network to test the upgrade process from 6.4 -> 7.2. I worked through the steps from the Zabbix site and thought it had completed successfully. I did have to re-copy over the zabbix_server.conf file to overwrite the default that reappeared in order to get the database running & cache settings sorted out. When I check the zabbix_server.log file it looks fine to me (it can't see anything being in an isolated network, but if it's moaning about time outs to resources then I took it as a good thing).

When I browse to http://10.50.8.20/zabbix though I get the "403 Forbidden - You don't have permission to access this resource" page. Which, from my understanding, is telling me the httpd user doesn't have access to the local website files on the server?

access_log
[17/Dec/2024:16:35:39 +0200] "GET /zabbix HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
(lots of these)

error_log
[Tue Dec 17 16:35:39.407678 2024] [authz_core:error] [pid 1365:tid 140170705479424] [client 10.200.20.18:62824] AH01630: client denied by server configuration: /usr/share/zabbix/ui/ui

error_Log-20241217
Dec 16 17:06:54.079643 2024] [authz_core:error] [pid 1219:tid 139841042249472] [client 10.200.20.18:51287] AH01630: client denied by server configuration: /usr/share/zabbix/ui/ui, referer: http://10.50.8.20/zabbix/

The logs are telling me that my request from 10.200.20.18 to the /zabbix site on 10.50.8.20 are being denied.

I checked OS level permissions (comparing with the original server) and they look fine: either 744 at the folder or 644 at zabbix.php which looks OK & selinux is disabled.

But as this isn't my area I'd appreciate it if anyone could point me in the right direction as to what to check next and/or where I need to set the config to allow the access please?

Hope you can help, many thanks.

[cyber]

/usr/share/zabbix/ui/ui
double "ui" there... Something was changed in 7.2 about the location of files. Some messages in UI about it also... I have seen recently some topics with similar things... some people require some extra restarts, some have changed things manaully, even if process also changed, so they ended up with wrong paths... Just verify, if you have correct paths everywhere..

[Verulam]

Thanks cyber - I thought the same thing initially. The patch notes do say that the path has changed from /usr/share/zabbix to /usr/share/zabbix/ui so when I saw the double /ui/ui I manually removed the second /ui from the config but this then caused a different error:

So I put it back and got the 403 again.

But it does still look suspicious to me.

[mrnobody]

There is a Article in Medium with name "Zabbix 7.2 Upgrade Made Easy: A Practical Step-by-Step Guide" that say something about chown directories, may be helpful