Project

General

Profile

Actions
Copy link

Bug #13034

closed

Zabbix6 Agent and Proxy fail to set the PSK from the web GUI in its conf files

Added by Mat Clarke over 2 years ago. Updated over 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Viktor Gurov
Category:
Zabbix
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:

Description

The Zabbix 6 agent and proxy running on pfSense 2.6.0 fails to set the PSK values from the web GUI in the zabbix conf files. The example below is from the proxy at /usr/local/etc/zabbix6/zabbix_proxy.conf

Server=172.28.183.43
ServerPort=10051
Hostname=cn-inf-fw-01
ListenIP=0.0.0.0
ListenPort=10051
PidFile=/var/run/zabbix-proxy/zabbix_proxy.pid
DBName=/var/db/zabbix-proxy/proxy.db
LogFile=/var/log/zabbix-proxy/zabbix_proxy.log
ConfigFrequency=60
FpingLocation=/usr/local/sbin/fping
  1. There's currently no fping6 (IPv6) dependency in the package,
  2. but if there was, the binary would likely also be in /usr/local/sbin.
    Fping6Location=/usr/local/sbin/fping6
    ProxyMode=0
    #TLSConnect=
    #TLSAccept=
    #TlsCAfile=
    #TlsCRLfile=
    #TlsCERTfile=
    #TlsKEYfile=
    #TLSPSKIdentity=
    #TLSPSKFile=
    StartSNMPTrapper=1
    SNMPTrapperFile=/tmp/zabbix_traps.tmp
    TrapperTimeout=300
    StartTrappers=5

When it should be

Server=172.28.183.43
ServerPort=10051
Hostname=cn-inf-fw-01
ListenIP=0.0.0.0
ListenPort=10051
PidFile=/var/run/zabbix-proxy/zabbix_proxy.pid
DBName=/var/db/zabbix-proxy/proxy.db
LogFile=/var/log/zabbix-proxy/zabbix_proxy.log
ConfigFrequency=60
FpingLocation=/usr/local/sbin/fping
  1. There's currently no fping6 (IPv6) dependency in the package,
  2. but if there was, the binary would likely also be in /usr/local/sbin.
    Fping6Location=/usr/local/sbin/fping6
    ProxyMode=0
    TLSConnect=psk
    TLSAccept=psk
    #TlsCAfile=
    #TlsCRLfile=
    #TlsCERTfile=
    #TlsKEYfile=
    TLSPSKIdentity=CN-Std
    TLSPSKFile=/usr/local/etc/zabbix6/CN-Std.psk
    StartSNMPTrapper=1
    SNMPTrapperFile=/tmp/zabbix_traps.tmp
    TrapperTimeout=300
    StartTrappers=5

Editing the conf files directly and restarting the Zabbix proxy service works around the issue. There appears to be the same issue with the zabbix6 agent conf.

Thanks
Mat

Actions
Copy link

Also available in: Atom PDF