Zabbix active agent for MacOs (12.5)

[cipandales]

Hi,

The current configuration of a Mac host requires entering the device's IP. Please let me know if it is possible to monitor mac devices that are not connected to the same network as Zabbix or proxy servers (or connected to VPN).

Thank you

[cipandales]

Please advise.
Thank you

[cipandales]

Please advise.
thanks

[cipandales]

Can you please advise? The company I am working for is migrating all workstations to Mac. Therefore, I am unsure if I can use Zabbix as the monitoring solution for all company devices.

[DaLoZ]

This seems a question unrelated to Zabbix.

If the zabbix server can reach the agent then there is no problem.

[cipandales]

I installed the agent on a Mac (6.2, openssl, pkg). I modified the zabbix_agentd.conf accordingly:

Server=agent.mydomain.com
ServerActive=agent.mydomain.com
Hostname=XXXXMACSVRYY
TLSConnect=psk
TLSAccept=psk
TLSPSKIdentity=XXXXMACSVRYY (hostname)
TLSPSKFile=/Users/username/zabbix/secret.psk

I added the host in Zabbix admin: hostname = comp hostname, template = macOS, PSK with psk identity = TLSPSKIdentity and psk = /Users/username/zabbix/secret.psk and I added an interface with agent IP = 0.0.0.0.


The logs on my mac (cat /var/log/zabbix/zabbix_agentd.log):

Starting Zabbix Agent [hostname. Zabbix 6.2.1 (revision 2c382976146).

29522:20220812:184148.931 **** Enabled features ****

29522:20220812:184148.931 IPv6 support: YES

29522:20220812:184148.931 TLS support: YES

29522:20220812:184148.931 **************************

29522:20220812:184148.931 using configuration file: /usr/local/etc/zabbix/zabbix_agentd.conf

29522:20220812:184148.934 listener failed: zbx_tcp_listen() fatal error: unable to serve on any address [[-]:10050]

29522:20220812:184148.934 Zabbix Agent stopped. Zabbix 6.2.1 (revision 2c382976146).

The message I see on the Zabbix server:
0.0.0.0:10050 - Not available - Get value from agent failed: TCP successful, cannot establish TLS to [[0.0.0.0]:10050]: SSL_connect() I/O error: [0] Success


I have MacBook Air (M1) and Zabbix Server (6.2.1) - installed on Ubuntu 22.04.

Can you please advise?

[cipandales]

After reboot, I see that the Zabbix agent communicates with the Zabbix server.

Successfully sent heartbeat message to [domain.com]:10051
Active check configuration update from [domain.com:10051] is working again

But the same error comes up in the Zabbix console:
Get value from agent failed: TCP successful, cannot establish TLS to [[0.0.0.0]:10050]: SSL_connect() I/O error: [0] Success

In the Zabbix server log, I see this:
autoregistration from "myip" denied (host:"hostname" ip:"myip" port:10050): connection type "TLS with PSK" is not allowed for autoregistration
SSL_shutdown() with serverIP set result code to 5:

Can you please advise how to troubleshoot the error?

[cyber]

Server/ServerActive should point to your Ubuntu box.
Agent interface in its config should refer to your laptops IP or name (and be resolvable). trying to connect to 0.0.0.0 is by default not successful...

[cipandales]

Server/ServerActive point to the Ubuntu box.
I cannot set up an IP for the laptop as it would change - the users are not in the office.

Please advise

[cipandales]

Please advise.
Thanks

[eithor]

Hi,

If you don't get a reply, it might be because your question is unclear or you have provided too little information.

It seems there are some confusion. The agent can be registered as a host on the server configuration with DNS not IP, if you select that. The agent config needs to have the IP or hostname of the server. If you use PSK you need to pre-create the host on the server and input the PSK information there, or if you want to use autoregister - you need to use the same PSK information for all hosts and input that in the autoregister configuration on the server.

[cipandales]

Hi Eithor,

I apologize for not being clear.
Our Zabbix server is an EC2 instance in AWS. We are monitoring all our Windows endpoints/laptops now (PSK encryption).
I installed, as a test, the Zabbix agent on a Mac (M1) and configured agent and the host as you mentioned: pre-created the host on the server (IP = 0.0.0.0 as the laptop is not in the same network as the Zabbix server) and configured PSK.
I am seeing the errors above (previous posts).
Please advise on how to configure the agent and the host correctly. All our users are working remotely, and there is now VPN to the VPC solution implemented so far.
Thank you