chronyc request from Zabbix agent "501 Not authorised"

[Peteris]

We are moving from CentOS 7 to CentOS8 on Zabbix server and used to use ntpdate to monitor time offset from time server, with CentOS8 Chrony is the new standard and it doesn't seem to be playing nice.

When I try to request information from chronyc via Zabbix agent (active or passive) I get "501 Not authorised" error.

This is what I was able to find in documentation:

401 4.2. I keep getting the error 501 Not authorised

402

403 Since version 2.2, the password command doesn't do anything and chronyc needs

404 to run locally under the root or chrony user, which are allowed to access the

405 chronyd's Unix domain command socket.

[root@zabbix ~]# sudo -H -u zabbix bash -c 'chronyc ntpdata cisco-ntp-server.example.com'
501 Not authorised

Any ideas how to resolve this issue?

CentOS 8, Zabbix 4.0.24

[Peteris]

Issue resolved, you can read more on it on reddit.
https://www.reddit.com/r/zabbix/comm...eb2x&context=3

Zabbix user (by default and no changes) can access information from: chronyc sourcestats, chronyc sources and chronyc tracking, but chronyc ntpdata is "501 Not authorised, need to do steps in reddit article to make it work.