Project

General

Profile

Actions

Bug #13034

open

Zabbix6 Agent and Proxy fail to set the PSK from the web GUI in its conf files

Added by Mat Clarke 3 months ago. Updated 3 months ago.

Status:
Feedback
Priority:
Normal
Assignee:
Viktor Gurov
Category:
Zabbix
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:

Description

The Zabbix 6 agent and proxy running on pfSense 2.6.0 fails to set the PSK values from the web GUI in the zabbix conf files. The example below is from the proxy at /usr/local/etc/zabbix6/zabbix_proxy.conf

Server=172.28.183.43
ServerPort=10051
Hostname=cn-inf-fw-01
ListenIP=0.0.0.0
ListenPort=10051
PidFile=/var/run/zabbix-proxy/zabbix_proxy.pid
DBName=/var/db/zabbix-proxy/proxy.db
LogFile=/var/log/zabbix-proxy/zabbix_proxy.log
ConfigFrequency=60
FpingLocation=/usr/local/sbin/fping
  1. There's currently no fping6 (IPv6) dependency in the package,
  2. but if there was, the binary would likely also be in /usr/local/sbin.
    Fping6Location=/usr/local/sbin/fping6
    ProxyMode=0
    #TLSConnect=
    #TLSAccept=
    #TlsCAfile=
    #TlsCRLfile=
    #TlsCERTfile=
    #TlsKEYfile=
    #TLSPSKIdentity=
    #TLSPSKFile=
    StartSNMPTrapper=1
    SNMPTrapperFile=/tmp/zabbix_traps.tmp
    TrapperTimeout=300
    StartTrappers=5

When it should be

Server=172.28.183.43
ServerPort=10051
Hostname=cn-inf-fw-01
ListenIP=0.0.0.0
ListenPort=10051
PidFile=/var/run/zabbix-proxy/zabbix_proxy.pid
DBName=/var/db/zabbix-proxy/proxy.db
LogFile=/var/log/zabbix-proxy/zabbix_proxy.log
ConfigFrequency=60
FpingLocation=/usr/local/sbin/fping
  1. There's currently no fping6 (IPv6) dependency in the package,
  2. but if there was, the binary would likely also be in /usr/local/sbin.
    Fping6Location=/usr/local/sbin/fping6
    ProxyMode=0
    TLSConnect=psk
    TLSAccept=psk
    #TlsCAfile=
    #TlsCRLfile=
    #TlsCERTfile=
    #TlsKEYfile=
    TLSPSKIdentity=CN-Std
    TLSPSKFile=/usr/local/etc/zabbix6/CN-Std.psk
    StartSNMPTrapper=1
    SNMPTrapperFile=/tmp/zabbix_traps.tmp
    TrapperTimeout=300
    StartTrappers=5

Editing the conf files directly and restarting the Zabbix proxy service works around the issue. There appears to be the same issue with the zabbix6 agent conf.

Thanks
Mat

Actions #1

Updated by Viktor Gurov 3 months ago

  • Assignee set to Viktor Gurov
  • Affected Version deleted (2.6.0)
Actions #2

Updated by Jim Pingle 3 months ago

  • Status changed from New to Pull Request Review
Actions #3

Updated by Viktor Gurov 3 months ago

  • Status changed from Pull Request Review to Feedback
Actions

Also available in: Atom PDF