PDA

View Full Version : Assuming that agent dropped connection because of access permissions


blocker
11-12-2008, 16:33
Hello,

i have successfully installed zabbix 1.6.1 from source. I have installed the zabbix client on some hosts, everything runs fine, except for 1 host which can not be monitored for some reason. In the server log i get:

24049:20081211:155550 Got empty string from [host name] IP [1.1.1.1] Parameter [agent.ping]
24049:20081211:155550 Assuming that agent dropped connection because of access permissions

as suggested in some of the posts at this forum i have raised up the timeout in the zabbix agent configuration to 9 and then in the zabbix server configuration to 15 and of course i restarted the services - unfortunately there was no positive result

i have double checked everything - firewall port, uninstall/install/recompile, and i still get the same error.
A small note is that i have tried to telnet to the zabbix agent from localhost and from the server - both connections get closed immediately:

telnet localhost 10050
Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
Connection closed by foreign host.

Does anybody have an idea what might be wrong with my zabbix agent? Or is that problem not related to the agent at all?

Thanks!

Calimero
12-12-2008, 15:45
In zabbix_agentd.conf, does the "Server=" configuration variable have the right IP of your zabbix server ?

If you guery the agent from an unauthorized IP, it will at first accept the inbound connection, check source IP and close the connection if IP is unauthorized.

If you have:
Server=1.2.3.4,1.2.3.10

And you 'telnet' from the host itself to the loopback, it won't work as 127.0.0.1 isn't authorized.

caarts
15-12-2008, 11:44
Just a thought, did you check the log file on the client and the zabbix server?
What kind of OS do you run on the client?

blocker
15-12-2008, 11:56
In zabbix_agentd.conf, does the "Server=" configuration variable have the right IP of your zabbix server ?

If you guery the agent from an unauthorized IP, it will at first accept the inbound connection, check source IP and close the connection if IP is unauthorized.

If you have:
Server=1.2.3.4,1.2.3.10

And you 'telnet' from the host itself to the loopback, it won't work as 127.0.0.1 isn't authorized.

Hello,

i have double checked the config of the client - everything seems to be right...

blocker
15-12-2008, 12:03
Just a thought, did you check the log file on the client and the zabbix server?
What kind of OS do you run on the client?

Hello,

its running debian etch

in the log there seems to be nothing disturbing (at least something i can see):

2774:20081212:143346 zabbix_agentd started. ZABBIX 1.6.1.
2797:20081212:143346 zabbix_agentd collector started
2798:20081212:143346 zabbix_agentd listener started
2799:20081212:143346 zabbix_agentd listener started
2800:20081212:143346 zabbix_agentd listener started
2801:20081212:143346 zabbix_agentd active check started [correct_server_ip:10051]

in the server log i still get:

24049:20081215:120129 Got empty string from [client name] IP [correct_client_ip] Parameter [agent.ping]
24049:20081215:120129 Assuming that agent dropped connection because of access permissions

caarts
17-12-2008, 11:36
I came across this post, same error as you described.

http://www.zabbix.com/forum/showthread.php?t=9950&highlight=empty+string

nepto
18-02-2009, 16:58
I have the same problem, the pity is that nobody put an answer here.

I turner on DEBUG and here is what I have found:


Listener error: Connection from [::ffff:127.0.0.1] rejected. Allowed server is [127.0.0.1]


Veru funny :-/

operativo
25-02-2009, 22:52
I have the same problem, the pity is that nobody put an answer here.

I turner on DEBUG and here is what I have found:


Listener error: Connection from [::ffff:127.0.0.1] rejected. Allowed server is [127.0.0.1]


Veru funny :-/

I put:

Server=::ffff:127.0.0.1

in zabbix_agentd.conf and it works!

:rolleyes:

Murz
17-03-2010, 08:18
I put:
Server=::ffff:127.0.0.1
in zabbix_agentd.conf and it works!
:rolleyes:
Thank's, operativo! This strange changes help me too on 1.8.1 version! Server=::ffff:213.177.108.xxx

henry
11-07-2010, 09:36
Same problem here, server is Zabbix appliance 1.8
client is compiled from source on S10U8 x86 based on zabbix-1.8.2.tar.gz

running ./configure --enable-client
then make install (as root)


Created:
root@s10u8-t:/# ls -l /etc/zabbix/zabbix_agentd.conf
-rw-r--r-- 1 root root 20 Jul 11 16:46 /etc/zabbix/zabbix_agentd.conf

root@s10u8-t:/# cat /etc/zabbix/zabbix_agentd.conf
Server=172.27.26.15

I can telnet to port 10050 from server and get:
Trying 172.27.26.101...
Connected to 172.27.26.101.
Escape character is '^]'.
sdf
ZBXDZBX_NOTSUPPORTEDConnection closed by foreign host.

so that's ok.

But the server log says:

2928:20100711:074346.041 Item [s10u8-t:agent.ping] error: Got empty string from [172.27.26.101]. Assuming that agent dropped connection because of access permissions

zabbix_agentd.conf runs with my own local user on the client. Haven't created a separate account yet. But it seems the zabbix user doesn't need (or want) special privs anyway?

Any ideas?

Cheers,
henry

henry
11-07-2010, 09:59
OK, my fault.

To figure it out, run the agent in debug mode.

It told me that the IP address wasn't allowed. I fogot that I was connecting from the zabbix appliance now instead of the zabbix server on my central host. And they have different IPs, of course.

Cheers,
henry

moo
11-10-2010, 11:14
..this same problem in solaris?

i've just used the ::ffff:192.x.x.xxx fix for a gentoo box & worked fine

however tried exact same fix for solaris10 x86 container & still won't work

no problem with package, as have used exact same details for near mirror image machine with no problems, also had no issues with SPARC containers either

henry
11-10-2010, 14:53
..this same problem in solaris?

i've just used the ::ffff:192.x.x.xxx fix for a gentoo box & worked fine

however tried exact same fix for solaris10 x86 container & still won't work

no problem with package, as have used exact same details for near mirror image machine with no problems, also had no issues with SPARC containers either

Did u try and run the agent in debug mode as mentioned above?

moo
11-10-2010, 17:05
Hiya,

Yeah I've tried in mode 3 & 4 - nothing to report from logs :/

Could be a network thing my side, just looking into that now.

Will report back soon if any fixes :) although if anyone has had same issue in Sol it'd be good to know!

Cheers

Laura.

ashrocks
18-10-2010, 22:38
Hi,
I am facing the same problem.
The server log says:

zabbix_server [2570]: ERROR: File [/tmp/zabbix_server.pid] exists and is locked. Is this process already running ?


What could be the problem????/

moo
19-10-2010, 11:03
quite a simple one! never needed to do this with the agents on our linux boxes but in solaris - (in agentd.conf) - if you uncomment ListenIP=127.0.0.1 and change the IP to the same as the box the agent's running on, that sorted it for me :)

Bill Wang
06-11-2010, 15:26
same problem, unsolved, any ideas?

rashid_47010
10-05-2011, 11:24
I install the zabbix1.8.5 on server.
I am receiving below error when I check the status of zabbix server

Got empty string from [127.0.0.1]. Assuming that agent dropped connection because of access permissions



Kindly help me to sort out this problem