Unable to login as Admin after upgrade

[MarkB]

I have just upgraded to 3.4.8, but now cannot logon as an admin user.

OS: CentOS Linux release 7.4.1708 (Core) , DB: 5.5.56-MariaDB MariaDB Server

There were a few issues after the upgrade that were resolved, so I'm not sure if that is still causing this.

First, mariadb refused to start, reporting [ERROR] COLLATION 'utf8_bin' is not valid for CHARACTER SET 'latin1'

I eventually resolved this by adding character-set-server=utf8 to the [mysqld] section of /etc/my.cnf

I'm not sure what triggered it.
result from mysql status;

Connection: Localhost via UNIX socket
Server characterset: utf8
Db characterset: utf8
Client characterset: utf8
Conn. characterset: utf8



SELinux also caused issues, which I have worked around by changing to permissive mode and services then started

A successful login as an admin user now results in guest access or sometimes a blank screen, regardless of the browser used.

Can anyone assist in troubleshooting this?

Other than this limitation, everything seems to be functional.

Mark.

[aigars.kadikis]

I have just upgraded to 3.4.8, but now cannot logon as an admin user.

OS: CentOS Linux release 7.4.1708 (Core) , DB: 5.5.56-MariaDB MariaDB Server

There were a few issues after the upgrade that were resolved, so I'm not sure if that is still causing this.

First, mariadb refused to start, reporting [ERROR] COLLATION 'utf8_bin' is not valid for CHARACTER SET 'latin1'

I eventually resolved this by adding character-set-server=utf8 to the [mysqld] section of /etc/my.cnf

I'm not sure what triggered it.
result from mysql status;

Connection: Localhost via UNIX socket
Server characterset: utf8
Db characterset: utf8
Client characterset: utf8
Conn. characterset: utf8



SELinux also caused issues, which I have worked around by changing to permissive mode and services then started

A successful login as an admin user now results in guest access or sometimes a blank screen, regardless of the browser used.

Can anyone assist in troubleshooting this?

Other than this limitation, everything seems to be functional.

Mark.

This is quite interesting.

Clearing browser cache is a mandatory thing after upgrade, but it looks like it is not the case.

Can you please expand "Other than this limitation, everything seems to be functional"? You have configured access to hosts/triggers for guests?

Did you used clean url (without arguments) accesing web interface like: http://ip.address.goes.here/zabbix ?


Regards,

[MarkB]

The zabbix was fully operational with around 250 monitored servers.
The issue is I can't get administartor access with any of the admin accounts to do anything but look.
Entering an incorrect admin password fails the logon attempt, but entering a valid one only gets you guest access.

I tried a zabbix and database uninstall and reinstall with the same result, so it is possible it is an external component causing this.

I ended up building a new CentOS 7 server without any updates and installed zabbix 3.4.8 from scratch, restored the database and it resolved the issue.
I still need to apply CentOS updates again, so I'll tread more carefully and see what happens this time.

I still have the origional server (vm) so may be able to look at it again, but no idea where to start.
There was no sign of an error to offer clues.


Mark.

[aigars.kadikis]

The zabbix was fully operational with around 250 monitored servers.
The issue is I can't get administartor access with any of the admin accounts to do anything but look.
Entering an incorrect admin password fails the logon attempt, but entering a valid one only gets you guest access.

I tried a zabbix and database uninstall and reinstall with the same result, so it is possible it is an external component causing this.

I ended up building a new CentOS 7 server without any updates and installed zabbix 3.4.8 from scratch, restored the database and it resolved the issue.
I still need to apply CentOS updates again, so I'll tread more carefully and see what happens this time.

I still have the origional server (vm) so may be able to look at it again, but no idea where to start.
There was no sign of an error to offer clues.


Mark.

Does this old server and administrative user has assigned "Zabbix Super Admin" role? You can list all user and swith roles via MySQL:

mysql -uzabbix -p
use zabbix;
select userid,alias,type from zabbix.users;

set zabbix super admin role:

update users set type='3' where userid='userid from previous step';

https://catonrug.blogspot.com/2018/04/switch-user-role-zabbix-super-admin-mysql.html

Does SELinux is active on your system:

getenforce

What is the output of:

grep denied /var/log/audit/audit.log | sed "s/^.*denied /denied/g;s/ pid=[0-9]\+ \| ino=[0-9]\+//g;s/ name=.*scontext=\| path=.*scontext=/ /g" | sort | uniq

[MarkB]

The roles in the database were correct, and I even tried adding a new admin user and also giving guest the super admin role, selinux was previously set to permissive to get the zabbix-server service to run.

I'll need to reconfigure the old server and bring it back online once I finish sorting fallout from all the external script issues caused by library differences the full rebuild installed.