Curious forbidden access on my OCS Inventory

Question

Hello, 

Here is my issue. I installed a GLPI server and an OCS server on Debian 12. No issues during the installation of both machines; I installed the OCS module in GLPI, everything is fine. The configuration of OCS is fine until the computer inventory process, where I encounter a 403 error. 

I tested the OCS client on different machines and faced the same issue. I can access my page at servername/ocsreports, but servername/ocsinventory gives me a 403 error. I believe I did everything that seems logical... A complete reinstallation of OCS, verification of the configuration. Everything seems fine, but I can't find the source of the problem. I’ve tried almost everything I found on the web while ensuring I understood what I was doing, and still nothing...

So :

- I have a GLPI server who works fine

- An OCS Server who works fine

- Communication between GLPI and OCS seems to be ok

- I can reach http://servername/ocsreports but not http://servername/ocsinventory

- Here is some log from Apache2/error.log after trying to connect a client :

ocsinventory-server: Bad setting. `SNMP_LINK_TAG` is not set. Default: `0`

[Wed Mar 26 12:01:20.961653 2025] [mpm_prefork:notice] [pid 916:tid 916] AH00163: Apache/2.4.62 (Debian) mod_perl/2.0.12 Perl/v5.36.0 configured -- resuming normal operations

[Wed Mar 26 12:01:20.961804 2025] [core:notice] [pid 916:tid 916] AH00094: Command line: '/usr/sbin/apache2'

[Wed Mar 26 12:02:53.969654 2025] [proxy_fcgi:error] [pid 1316:tid 1316] [client XX.XX.XX.XX:54869] AH01071: Got error 'PHP message: PHP Deprecated:  Optional parameter $option declared before required parameter $list_col_cant_del is implicitly treated as a required parameter in /usr/share/ocsinventory-reports/ocsreports/require/function_table_html.php on line 130; PHP message: PHP Deprecated:  Optional parameter $visibleCol d>

[Wed Mar 26 12:03:02.156899 2025] [proxy_fcgi:error] [pid 949:tid 949] [client XX.XX.XX.XX:54882] AH01071: Got error 'PHP message: PHP Deprecated:  Optional parameter $title declared before required parameter $post is implicitly treated as a required parameter in /usr/share/ocsinventory-reports/ocsreports/require/ipdiscover/Ipdiscover.php on line 66; PHP message: PHP Deprecated:  Optional parameter $type declared before requir>

[Wed Mar 26 12:03:07.270698 2025] [proxy_fcgi:error] [pid 949:tid 949] [client XX.XX.XX.XX:54882] AH01071: Got error '; PHP message: PHP Deprecated:  Creation of dynamic property Stats::$INTERFACE_BIOS_DIAGRAM_VISIBILITY is deprecated in /usr/share/ocsinventory-reports/ocsreports/require/stats/Stats.php on line 66', referer: http://servername/ocsreports/

[Wed Mar 26 12:03:07.387928 2025] [proxy_fcgi:error] [pid 949:tid 949] [client XX.XX.XX.XX:54882] AH01071: Got error 'PHP message: PHP Deprecated:  Creation of dynamic property Stats::$INTERFACE_BIOS_DIAGRAM_VISIBILITY is deprecated in /usr/share/ocsinventory-reports/ocsreports/require/stats/Stats.php on line 66', referer: http://servername/ocsreports/

Thanks for your help

Answer 1

With OCS Inventory, it's mandatory (or my recommandation) to have some knowlegde of Apache and settings.

First I recommand use of dns (fqdn). So the 2 files .conf supplied could be efficiently replace with virtualhost config for having on same server the 3 web service : for OCS, /ocsinventory and /ocsreports, for GLPI.

Second, consider usage of certificate : for /ocsinventory you need HTTP and HTTPS (for downloading package), for /ocsreports and glpi, maybe the best is https (with certificate accepted for all computers = a small pki ?)

Please consider OCS don't run immediatly without Apache knowlegde and settings !

Answer 2

@Jacquesh

Thanks for your reply, but all of this has already been done extensively... As I explained in the post, I've already completed the entire installation and checked everything that needs to be checked. I'm no Apache expert, but I make sure I know what I'm installing and yeah, I know it doesn't work by itself...

I had already installed an OCS server correctly and I did nothing different. There, I checked all the rights, I checked the accesses, the Apache config, the server config, I uninstalled, reinstalled, rechecked....

Answer 3

I suggest you define 3 virtualhost : 1 for /ocsinventory (using the .conf), 1 for /ocsreports (idem), and 1 for glpi. I use 3 dns for each, and 3 log files, ...

You can use 'apachectl -s' for verification of url name and file name ...

When you do test, you could use 'tail -f xxx.log'.

IMHO, it's not easy for getting enough knowledge ...

Answer 4

@jacquesh Sorry for the late reply. I've already done these things, but it doesn't solve my problem. I think I'll just start from scratch; I must have done something wrong at some point.

A great thanks for your help