Assuming that agent dropped connection because of access permissions

[blocker]

Hello,

i have successfully installed zabbix 1.6.1 from source. I have installed the zabbix client on some hosts, everything runs fine, except for 1 host which can not be monitored for some reason. In the server log i get:

24049:20081211:155550 Got empty string from [host name] IP [1.1.1.1] Parameter [agent.ping]
 24049:20081211:155550 Assuming that agent dropped connection because of access permissions

as suggested in some of the posts at this forum i have raised up the timeout in the zabbix agent configuration to 9 and then in the zabbix server configuration to 15 and of course i restarted the services - unfortunately there was no positive result

i have double checked everything - firewall port, uninstall/install/recompile, and i still get the same error.
A small note is that i have tried to telnet to the zabbix agent from localhost and from the server - both connections get closed immediately:

telnet localhost 10050
Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
Connection closed by foreign host.

Does anybody have an idea what might be wrong with my zabbix agent? Or is that problem not related to the agent at all?

Thanks!

[Calimero]

In zabbix_agentd.conf, does the "Server=" configuration variable have the right IP of your zabbix server ?

If you guery the agent from an unauthorized IP, it will at first accept the inbound connection, check source IP and close the connection if IP is unauthorized.

If you have:
Server=1.2.3.4,1.2.3.10

And you 'telnet' from the host itself to the loopback, it won't work as 127.0.0.1 isn't authorized.

[caarts]

Just a thought, did you check the log file on the client and the zabbix server?
What kind of OS do you run on the client?

[blocker]

In zabbix_agentd.conf, does the "Server=" configuration variable have the right IP of your zabbix server ?

If you guery the agent from an unauthorized IP, it will at first accept the inbound connection, check source IP and close the connection if IP is unauthorized.

If you have:
Server=1.2.3.4,1.2.3.10

And you 'telnet' from the host itself to the loopback, it won't work as 127.0.0.1 isn't authorized.

Hello,

i have double checked the config of the client - everything seems to be right...

[blocker]

Just a thought, did you check the log file on the client and the zabbix server?
What kind of OS do you run on the client?

Hello,

its running debian etch

in the log there seems to be nothing disturbing (at least something i can see):

2774:20081212:143346 zabbix_agentd started. ZABBIX 1.6.1.
  2797:20081212:143346 zabbix_agentd collector started
  2798:20081212:143346 zabbix_agentd listener started
  2799:20081212:143346 zabbix_agentd listener started
  2800:20081212:143346 zabbix_agentd listener started
  2801:20081212:143346 zabbix_agentd active check started [correct_server_ip:10051]

in the server log i still get:

24049:20081215:120129 Got empty string from [client name] IP [correct_client_ip] Parameter [agent.ping]
 24049:20081215:120129 Assuming that agent dropped connection because of access permissions

[caarts]

I came across this post, same error as you described.

http://www.zabbix.com/forum/showthread.php?t=9950&highlight=empty+string

[nepto]

I have the same problem, the pity is that nobody put an answer here.

I turner on DEBUG and here is what I have found:

Listener error: Connection from [::ffff:127.0.0.1] rejected. Allowed server is [127.0.0.1]

Veru funny :-/

[operativo]

I have the same problem, the pity is that nobody put an answer here.

I turner on DEBUG and here is what I have found:

Listener error: Connection from [::ffff:127.0.0.1] rejected. Allowed server is [127.0.0.1]

Veru funny :-/

I put:

Server=::ffff:127.0.0.1

in zabbix_agentd.conf and it works!

[Murz]

I put:
Server=::ffff:127.0.0.1
in zabbix_agentd.conf and it works!

Thank's, operativo! This strange changes help me too on 1.8.1 version! Server=::ffff:213.177.108.xxx

[henry]

Same problem here, server is Zabbix appliance 1.8
client is compiled from source on S10U8 x86 based on zabbix-1.8.2.tar.gz

running ./configure --enable-client
then make install (as root)


Created:
root@s10u8-t:/# ls -l /etc/zabbix/zabbix_agentd.conf
-rw-r--r-- 1 root root 20 Jul 11 16:46 /etc/zabbix/zabbix_agentd.conf

root@s10u8-t:/# cat /etc/zabbix/zabbix_agentd.conf
Server=172.27.26.15

I can telnet to port 10050 from server and get:
Trying 172.27.26.101...
Connected to 172.27.26.101.
Escape character is '^]'.
sdf
ZBXDZBX_NOTSUPPORTEDConnection closed by foreign host.

so that's ok.

But the server log says:

2928:20100711:074346.041 Item [s10u8-t:agent.ping] error: Got empty string from [172.27.26.101]. Assuming that agent dropped connection because of access permissions

zabbix_agentd.conf runs with my own local user on the client. Haven't created a separate account yet. But it seems the zabbix user doesn't need (or want) special privs anyway?

Any ideas?

Cheers,
henry

[henry]

OK, my fault.

To figure it out, run the agent in debug mode.

It told me that the IP address wasn't allowed. I fogot that I was connecting from the zabbix appliance now instead of the zabbix server on my central host. And they have different IPs, of course.

Cheers,
henry

[moo]

anyone have..

..this same problem in solaris?

i've just used the ::ffff:192.x.x.xxx fix for a gentoo box & worked fine

however tried exact same fix for solaris10 x86 container & still won't work

no problem with package, as have used exact same details for near mirror image machine with no problems, also had no issues with SPARC containers either

[henry]

..this same problem in solaris?

i've just used the ::ffff:192.x.x.xxx fix for a gentoo box & worked fine

however tried exact same fix for solaris10 x86 container & still won't work

no problem with package, as have used exact same details for near mirror image machine with no problems, also had no issues with SPARC containers either

Did u try and run the agent in debug mode as mentioned above?

[moo]

re: henry

Hiya,

Yeah I've tried in mode 3 & 4 - nothing to report from logs :/

Could be a network thing my side, just looking into that now.

Will report back soon if any fixes although if anyone has had same issue in Sol it'd be good to know!

Cheers

Laura.

[ashrocks]

Changed the debug level

Hi,
I am facing the same problem.
The server log says:

zabbix_server [2570]: ERROR: File [/tmp/zabbix_server.pid] exists and is locked. Is this process already running ?


What could be the problem????/