ZABBIX SERVER 4.4.5 - AUTOREGISTRATION WITH PSK PROBLEM

[juaromu]

Hi there:

I've set up agent active auto registration enabling PSK but agents are unable to register.

Zabbix Server and agent running 4.4.5:

Agent:
# pkg info | grep zabbix
zabbix44-agent-4.4.5 Enterprise-class open source distributed monitoring (agent)
Server:
root@zabbix:~ # pkg info | grep zabbix
zabbix44-agent-4.4.5 Enterprise-class open source distributed monitoring (agent)
zabbix44-frontend-4.4.5 Enterprise-class open source distributed monitoring (frontend)
zabbix44-server-4.4.5 Enterprise-class open source distributed monitoring (server)


Logs on server throw the following line:

autoregistration from "x.x.x.x" denied (host:"HOST" ip:"x.x.x.x" port:10050): connection used PSK which is not configured for autoregistration.

Autoregistration using PSK is enabled on the server (picture attached).

If I disable TLS-PSK in both, server and agent, autoregistration works fine and defined actions are applied to agent.

If I enable encryption using TLS-PSK in existing agents, again agent config file and host settings on server, the agent works with no issues.

The only problem related to encryption that I've come across is during the auto registration process.

Could anyone help?

Thanks!

[apcloud]

We are facing the same issue. Everything is setup correctly according the documentation. Manually configuring a host works with the same PSK identity/key combo, but auto-registration fails.
We are using a proxy.
Zabbix Server and Proxy are version 4.4.8
Zabbix Agents are 4.4.5

[kernbug]

Hi,

Auto-registration rule should use uniq from others PSK identity. Otherwise you will see such error.

[apcloud]

Hi,

Auto-registration rule should use uniq from others PSK identity. Otherwise you will see such error.

Hi there
thanks for getting back! Do you mean we have to have an unique PSK for every host, or one unique PSK for all autoregistered hosts and one unique PSK for the rest?

[jwoodard1980]

Can someone provide more information on this issue? I am having the same problem.

1. Create PSK in Administration > Auto Registration
   1. IE: AutoRegPSK / **RANDOM VALUE**
2. Install Zabbix Agent 2 MSI (First Client)
   1. Enable PSK
   2. Enter AutoRegPSK and Value
   3. Autoregistration works and client set.
3. Repeat previous MSI install.
   1. Will not register to server
4. Server Logs
   1. 357068:20220105:174113.240 autoregistration from "192.168.199.116" denied (host:"WHATEVERHOST" ip:"1.2.3.4" port:10050): connection used PSK which is not configured for autoregistration
   2. 357063:20220105:180758.283 host PSK and autoregistration PSK have the same identity "AutoRegPSK" but different PSK values, autoregistration will not be allowed
      1. This error is repeated about every 5-10 seconds.