Compatibility issues with Zabbix 7.x #1914

viper2pt0 · 2024-11-17T16:08:07Z

Describe the bug
After updating plugin and moving zabbix to new server, now getting this message when trying to reauthenticate and connect the plugin.

Expected behavior
Authentication to succeed and healthy response from zabbix api.

Software versions

Grafana	Zabbix	Grafana-Zabbix Plugin
11.3.0	7.2.0rc1	4.5.7

jakub-nowak-pl · 2024-11-25T20:55:26Z

I second this.

Getting the same error in grafana dockerized.

isaqueprofeta · 2024-11-28T04:45:52Z

You're using an unsupported version, 7.2 isn't production ready and not supported. Currently support goes till 7.0.x

sglamm · 2024-11-29T00:41:31Z

For me, every version on 7.2 has worked until 7.2 rc1. Wonder what changed to cause this issue? Going to the API page gives http error 412 now. Does the API page work for anyone on RC1?

isaqueprofeta · 2024-11-29T00:56:37Z

For me, every version on 7.2 has worked until 7.2 rc1. Wonder what changed to cause this issue? Going to the API page gives http error 412 now. Does the API page work for anyone on RC1?

You should check it out on Zabbix side. As I said, 7.2 isn't production ready, and is not currently supported by the Plug-in.

lphbraz · 2024-12-06T17:46:03Z

I'm also getting this same error. Is there no solution? I downloaded the latest versions of zabbix and grafana and they just don't work together? I installed zabbix 7.2 on all my hosts and now I have to go back to 7.0 and start all over again? Did you find a solution? @viper2pt0 @jakub-nowak-pl @isaqueprofeta @sglamm

isaqueprofeta · 2024-12-06T17:49:33Z

@lphbraz you shouldn't use zabbix 7.2 yet, it isn't released. Check on https://www.zabbix.com/road map : "Zabbix 7.2 Planned release date: Q4 2024"

sglamm · 2024-12-06T17:51:04Z

It’s a Zabbix issue, not Grafana. Looks like the api for zabbix is broken or does not function the same in 7.2. Its not production yet so we have to use it at our own risk. Sean Lamm

…

On Fri, Dec 6, 2024 at 11:46 AM lphbraz ***@***.***> wrote: I'm also getting this same error. Is there no solution? I downloaded the latest versions of zabbix and grafana and they just don't work together? I installed zabbix 7.2 on all my hosts and now I have to go back to 7.0 and start all over again? Did you find a solution? @viper2pt0 <https://github.com/viper2pt0> @jakub-nowak-pl <https://github.com/jakub-nowak-pl> @isaqueprofeta <https://github.com/isaqueprofeta> @sglamm <https://github.com/sglamm> — Reply to this email directly, view it on GitHub <#1914 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AKHUJBDY6OP4TTI7S2GQVHL2EHPHDAVCNFSM6AAAAABR6CMDBGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKMRTHAZTSOJSGA> . You are receiving this because you were mentioned.Message ID: ***@***.***>

lamenawuer · 2024-12-10T08:40:08Z

I have the exact same issue and I'm using a supported zabbix version, 7.0.6

[Tue Dec 10 09:37:59.459857 2024] [proxy_fcgi:error] [pid 1251512:tid 140701517969152] [client x.x.x.x.:51310] AH01071: Got error 'PHP message: PHP Deprecated: Parameter "/auth" is deprecated. in /usr/share/zabbix/include/classes/validators/CApiInputValidator.php on line 1516

alxcreate · 2024-12-10T14:34:50Z

Starting from version 6.4, it was announced that the auth property would be deprecated and removed in future releases. That moment has arrived, and no one was prepared for it.

sglamm · 2024-12-10T14:43:06Z

Odd part about 7.2 is even the API page does not work. Gives 412 error. Not a Grafana issue, but part of the puzzle. I am waiting for some kind of update from Zabbix for a resolution.

isaqueprofeta · 2024-12-10T15:49:48Z

@alxcreate thx for the pointer.

Being technical here now, 7.2.0 is out and looking at the API Docs now zabbix does not use the "auth" field for the AuthToken. Now the session/auth token, being an API Key or an authorize sesssion token should be at the header 'Authorization: Bearer {TOKEN}'.

@yesoreyeram @zoltanbedi @ivanahuckova can you take a look? This is a a pretty critical one.

infiniteACodevops · 2024-12-10T16:34:10Z

boa... alex

A partir da versão 6.4, foi anunciado que a propriedade de auth seria obsoleta e removida em versões futuras. Esse momento chegou, e ninguém estava preparado para isso.

yesoreyeram · 2024-12-10T16:36:53Z

@isaqueprofeta - we are looking at it.

alxcreate · 2024-12-11T07:22:36Z

Odd part about 7.2 is even the API page does not work. Gives 412 error. Not a Grafana issue, but part of the puzzle. I am waiting for some kind of update from Zabbix for a resolution.

Zabbix API works well:

root@127:/home# curl -k --request POST \
    --url 'https://zabbix-server/zabbix/api_jsonrpc.php' \
    --header 'Content-Type: application/json-rpc' \
    --data '{"jsonrpc":"2.0","method":"user.login","params":{"username":"grafana","password":"password"},"id":1}'
{"jsonrpc":"2.0","result":"db3dfa980315dacb0edf3a5411edfb08","id":1}
root@127:/home# 
root@127:/home# cat data.json 
{
    "jsonrpc": "2.0",
    "method": "host.get",
    "params": {
        "output": [
            "hostid",
            "host"
        ],
        "selectInterfaces": [
            "interfaceid",
            "ip"
        ]
    },
    "id": 2
}
root@127:/home# curl -k --request POST \
    --url 'https://zabbix-server/zabbix/api_jsonrpc.php' \
    --header 'Authorization: Bearer db3dfa980315dacb0edf3a5411edfb08' \
    --header 'Content-Type: application/json-rpc' \
    --data @data.json
{"jsonrpc":"2.0","result":[{"hostid":"10084","host":"Zabbix server","interfaces":[{"interfaceid":"1","ip":"127.0.0.1"}]}...

alxcreate · 2024-12-11T11:31:21Z

Trying set token in http header, but get an error:
Invalid params. The "apiinfo.version" method must be called without authorization header.

albertofreire · 2024-12-11T13:24:29Z

Trying set token in http header, but get an error: Invalid params. The "apiinfo.version" method must be called without authorization header.

I created an intermediary proxy using Flask, a framework I am more familiar with. This solution resolved the issues

While connecting Grafana to Zabbix, I faced the following issues:

Grafana was sending obsolete parameters (auth and real_hosts) that the Zabbix API could not process correctly.
Authentication headers were missing for some API methods, resulting in failed requests.
Grafana's behavior in certain HTTPS configurations caused communication errors with the Zabbix API.

Solution: Flask-Based Proxy
The proxy intercepts requests from Grafana, sanitizes the payload, and adds the required headers for authentication. It then forwards the sanitized request to the Zabbix API and returns the response.

Below is the Python implementation:

#!/usr/bin/env python3
from flask import Flask, request, jsonify
import requests
import json

app = Flask(__name__)

# Internal Zabbix URL (use localhost if on the same machine)
ZABBIX_URL = "http://127.0.0.1/zabbix/api_jsonrpc.php"

# Replace with your real token
AUTH_TOKEN = "7d88a9978a7sdauydguags76dgadvajhbdae0117daceiauhy823ihiuicd1f2"

@app.route('/zabbix/api_jsonrpc.php', methods=['POST'])
def proxy():
    # Read raw request body
    raw_data = request.data
    try:
        data = json.loads(raw_data.decode('utf-8'))
    except Exception as e:
        # Return a 400 error for invalid JSON
        print("Error parsing JSON:", e)
        return "Invalid JSON format", 400

    # Remove obsolete parameters
    if 'auth' in data:
        del data['auth']
    if 'params' in data and 'real_hosts' in data['params']:
        del data['params']['real_hosts']

    headers = {
        'Content-Type': 'application/json-rpc'
    }

    method = data.get('method')
    # Add Bearer token for non-'apiinfo.version' requests
    if method != 'apiinfo.version':
        headers['Authorization'] = f'Bearer {AUTH_TOKEN}'

    try:
        # Use `verify=False` if HTTPS issues occur
        # response = requests.post(ZABBIX_URL, json=data, headers=headers, verify=False)
        response = requests.post(ZABBIX_URL, json=data, headers=headers)
    except Exception as e:
        print("Error connecting to Zabbix:", e)
        return "Internal error connecting to Zabbix", 502

    # Return Zabbix response with fixed headers
    return response.content, response.status_code, {'Content-Type': 'application/json-rpc'}

if __name__ == '__main__':
    # Run Flask server on port 8080
    app.run(host='127.0.0.1', port=8080)

How It Works
The proxy listens on http://127.0.0.1:8080/zabbix/api_jsonrpc.php.
Requests from Grafana are intercepted and processed:
Invalid JSON payloads are rejected with a 400 Bad Request response.
Obsolete parameters (auth and real_hosts) are removed.
A Bearer token is added to the headers, except for the apiinfo.version method.
The proxy forwards the sanitized request to the Zabbix API and returns its response to Grafana.

Outcome
This proxy solution resolved all the integration issues. The Flask application has been running smoothly, ensuring seamless communication between Grafana and Zabbix.

I hope this implementation provides valuable insights. If there’s anything further I can clarify or contribute, please let me know!

greenaar · 2024-12-11T20:49:00Z

I created an intermediary proxy using Flask, a framework I am more familiar with. This solution resolved the issues

Nice workaround! I wrapped this in a dockerfile, which i've added below.

FROM python:3.10-alpine

WORKDIR /opt
COPY proxy.py /opt
COPY requirements.txt /opt

RUN pip install flask requests
EXPOSE 8080

CMD ["/opt/proxy.py"]

It'll do what I need in the short term.

viper2pt0 · 2024-12-11T21:34:05Z

I've deployed the proxy in docker as well and it seems to be working. I did notice that there appears to be other API changes though. For example when interacting with an item in the problem panel:

Just more of a heads up for the folks working on the official fix.

albertofreire · 2024-12-11T22:41:14Z

I've deployed the proxy in docker as well and it seems to be working. I did notice that there appears to be other API changes though. For example when interacting with an item in the problem panel:

Just more of a heads up for the folks working on the official fix.

It seems that Zabbix 7.2 has received other changes besides authentication.

It would be possible to add conditionals to intercept and modify the invalid parameters, but that would be too costly, and I think it’s better to wait for the Grafana team to proceed with their official adjustments.

In the meantime, this adaptation (at least for me) is working well.

Cheers!

yesoreyeram · 2024-12-12T00:44:11Z

Hiya. We are working on a fix and expecting to be available this week.

Miata-RX7 · 2024-12-12T06:36:35Z

if method != 'apiinfo.version':

datasource save&test will report：[Invalid params. The "user.login" method must be called without authorization header.]

change it to:
if method not in ['apiinfo.version', 'user.login']:

ivanahuckova · 2024-12-13T12:41:55Z

I have a PR with the fix ready #1931. If anyone here has time and is up for it, would you verify that it fixes the issue for you. Thank you 🙏 .

jakub-nowak-pl · 2024-12-13T12:44:17Z

I have a PR with the fix ready #1931. If anyone here has time and is up for it, would you verify that it fixes the issue for you. Thank you 🙏 .

I've got all dockerized but If this fix will got into grafana dockerized I can check.

rusitschka · 2024-12-13T12:51:01Z

I have a PR with the fix ready #1931. If anyone here has time and is up for it, would you verify that it fixes the issue for you. Thank you 🙏 .

I've got all dockerized but If this fix will got into grafana dockerized I can check.

Same here. I tried to mount the branch into /var/lib/grafana/plugins but that did not work. Do you have a how-to for testing this?

yesoreyeram · 2024-12-13T16:15:39Z

We have the build available to test through docker.

docker run -p 3000:3000 -e "GF_INSTALL_PLUGINS=https://storage.googleapis.com/integration-artifacts/alexanderzobnin-zabbix-app/4.5.7/main/163fabf651b776bf70adc08fa41bec4f52645374/alexanderzobnin-zabbix-app-4.5.7%2B163fabf6.linux_amd64.zip;alexanderzobnin-zabbix-app" grafana/grafana-enterprise:latest

Once you start the above docker instance, you need to enable the plugin in http://localhost:3000/plugins/alexanderzobnin-zabbix-app and then can test.

Can someone help to test the above build works both in 6.x and 7.x version of zabbix?

rusitschka · 2024-12-13T16:19:31Z

Works fine with Zabbix 7.2.0 - thanks!

alxcreate · 2024-12-16T04:10:19Z

When this will be available for typical installation? I mean command grafana-cli plugins install alexanderzobnin-zabbix-app

Machos65 · 2024-12-16T08:08:25Z

i was using grafana OSS not in docker instance is how can i go around that problem cause am still facing it when i upgrade zabbix to 7.2

alxcreate · 2024-12-16T08:20:48Z

i was using grafana OSS not in docker instance is how can i go around that problem cause am still facing it when i upgrade zabbix to 7.2

You can manually download plugin and unzip it in plugins folder of Grafana.

But it's not a production choice. In your position, I would continue using the old versions and wait for a published fix.

eglyn · 2024-12-16T10:56:07Z

Same issue here :(

I don't understand why you say Zabbix 7.2 is not a production version, it's the version on their main website, and it seems a prod version.

Mordong · 2024-12-16T11:05:08Z

7.2 is in production and actually it's quite strange to not to work on Zabbix changes sice ver. 7 was out in beta

yesoreyeram · 2024-12-16T11:28:40Z

Planning to release by EOD tomorrow.

isaqueprofeta · 2024-12-16T11:54:38Z

We have the build available to test through docker.

docker run -p 3000:3000 -e "GF_INSTALL_PLUGINS=https://storage.googleapis.com/integration-artifacts/alexanderzobnin-zabbix-app/4.5.7/main/163fabf651b776bf70adc08fa41bec4f52645374/alexanderzobnin-zabbix-app-4.5.7%2B163fabf6.linux_amd64.zip;alexanderzobnin-zabbix-app" grafana/grafana-enterprise:latest

Once you start the above docker instance, you need to enable the plugin in http://localhost:3000/plugins/alexanderzobnin-zabbix-app and then can test.

Can someone help to test the above build works both in 6.x and 7.x version of zabbix?

Gimme a sec, I'll try it with my zabbix-lab project.

isaqueprofeta · 2024-12-16T12:11:25Z

Planning to release by EOD tomorrow.

Tested with the following versions on docker (used the https://github.com/isaqueprofeta/zabbix-lab project)

Zabbix 5.4

Zabbix 6.0

Zabbix 6.4

Zabbix 7.0

Zabbix 7.2

yesoreyeram · 2024-12-16T12:59:23Z

Thank you @isaqueprofeta

ryanreche · 2024-12-16T18:44:03Z

When this will be available for typical installation? I mean command grafana-cli plugins install alexanderzobnin-zabbix-app

I updated the environment and I have the same problem, grafana gives the same error as auth, can anyone help me?

isaqueprofeta · 2024-12-16T19:18:15Z

When this will be available for typical installation? I mean command grafana-cli plugins install alexanderzobnin-zabbix-app

I updated the environment and I have the same problem, grafana gives the same error as auth, can anyone help me?

The new version with the correction is planned to be release tomorrow at the end of the day.

ryanreche · 2024-12-16T19:26:41Z

d to be release tomorrow at the end of the da

tks

Mordong · 2024-12-17T05:26:29Z

working after full plugin wipe and re-install

alxcreate · 2024-12-17T05:45:20Z

New plugin works fine. Thanks.

Grafana	Zabbix	Grafana-Zabbix Plugin
11.4.0	7.2.0	4.6.0

jakub-nowak-pl · 2024-12-17T06:52:51Z

Works like a charm :)
Thanks for fixing it.

gfvendra · 2024-12-17T10:29:47Z

Plugin updating and working.

Thanks.

yesoreyeram added this to OSS Big Tent Dec 10, 2024

alxcreate mentioned this issue Dec 11, 2024

Zabbix 7.2 API Authentication Changes Cause Plugin Incompatibility #1929

Closed

ivanahuckova self-assigned this Dec 12, 2024

ivanahuckova added the type/bug label Dec 12, 2024

ivanahuckova moved this to In Progress in OSS Big Tent Dec 12, 2024

ivanahuckova mentioned this issue Dec 12, 2024

Fix querying and authentication for Zabbix v7.0+ #1931

Merged

C64Axel mentioned this issue Dec 13, 2024

Not working on Zabbix 7.2.0? unexpected parameter "auth" hkjang/node-red-contrib-zabbix#3

Open

ivanahuckova assigned yesoreyeram Dec 13, 2024

This was referenced Dec 13, 2024

Zabbix Plugin Authentication Issue with Zabbix 7.2 #1932

Closed

Plugin won't connect to zabbix server version 7.0.6 #1928

Closed

Cannot integrate Zabbix 7.0 in Grafana #1917

Closed

yesoreyeram changed the title ~~Invalid request. Invalid parameter "/": unexpected parameter "auth".~~ Compatibility issues with Zabbix 7.x Dec 13, 2024

yesoreyeram closed this as completed in #1931 Dec 17, 2024

github-project-automation bot moved this from In Progress to Complete in OSS Big Tent Dec 17, 2024

Compatibility issues with Zabbix 7.x #1914

Compatibility issues with Zabbix 7.x #1914

Comments

viper2pt0 commented Nov 17, 2024

jakub-nowak-pl commented Nov 25, 2024

isaqueprofeta commented Nov 28, 2024

sglamm commented Nov 29, 2024

isaqueprofeta commented Nov 29, 2024

lphbraz commented Dec 6, 2024

isaqueprofeta commented Dec 6, 2024

sglamm commented Dec 6, 2024 via email

lamenawuer commented Dec 10, 2024 • edited Loading

alxcreate commented Dec 10, 2024 • edited Loading

sglamm commented Dec 10, 2024

isaqueprofeta commented Dec 10, 2024

infiniteACodevops commented Dec 10, 2024

yesoreyeram commented Dec 10, 2024

alxcreate commented Dec 11, 2024 • edited Loading

alxcreate commented Dec 11, 2024

albertofreire commented Dec 11, 2024

greenaar commented Dec 11, 2024

viper2pt0 commented Dec 11, 2024 • edited Loading

albertofreire commented Dec 11, 2024

yesoreyeram commented Dec 12, 2024

Miata-RX7 commented Dec 12, 2024

ivanahuckova commented Dec 13, 2024

jakub-nowak-pl commented Dec 13, 2024

rusitschka commented Dec 13, 2024

yesoreyeram commented Dec 13, 2024

rusitschka commented Dec 13, 2024

alxcreate commented Dec 16, 2024

Machos65 commented Dec 16, 2024

alxcreate commented Dec 16, 2024

eglyn commented Dec 16, 2024

Mordong commented Dec 16, 2024

yesoreyeram commented Dec 16, 2024

isaqueprofeta commented Dec 16, 2024

isaqueprofeta commented Dec 16, 2024 • edited Loading

yesoreyeram commented Dec 16, 2024

ryanreche commented Dec 16, 2024

isaqueprofeta commented Dec 16, 2024

ryanreche commented Dec 16, 2024

Mordong commented Dec 17, 2024 • edited Loading

alxcreate commented Dec 17, 2024

jakub-nowak-pl commented Dec 17, 2024

gfvendra commented Dec 17, 2024

lamenawuer commented Dec 10, 2024 •

edited

Loading

alxcreate commented Dec 10, 2024 •

edited

Loading

alxcreate commented Dec 11, 2024 •

edited

Loading

viper2pt0 commented Dec 11, 2024 •

edited

Loading

isaqueprofeta commented Dec 16, 2024 •

edited

Loading

Mordong commented Dec 17, 2024 •

edited

Loading