Ad Widget

Collapse

Qnap, MariaDB TLS and zabbix-proxy

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • kinglevel
    Junior Member
    • Nov 2021
    • 3

    #1

    Qnap, MariaDB TLS and zabbix-proxy

    Hello world


    I started to realize that it might be better to have a zabbix-proxy at each location that relays all data back home to the main server so i can use passive agents in a better way instead of active agents from each client over a vpn tunnel

    Each off-site location basically has Qnap NASes.
    Good, then i would use the built in sql database (MariaDB) and with opkg install zabbix-proxy.

    All fine, until i stumbled upon TLS issues with zabbix-proxy trying to connect to MariaDB.
    (A lot of searching the web at this stage, so therefore i decided to make this post if anyone else gets into the same situation, hard to find more detailed info about this specific case)


    I am also pretty new at configuring MariaDB...

    Is there any way to skip TLS on zabbix-proxy for MariaDB?

    DBTLSCONNECT=required or verify_full seems to be minimum defaults for MariaDB.

    I do not want to mess too much with the confs on the qnaps systems with SSL and TLS in MariaDB, their autoconfigs could maybe make a mess if i do something on the front-end?

    also.. the error in the log seems to be cut off? i saw the correct error in some other thread mentioning more info?

    Suggestions?

    Code:
    20599:20211124:125628.883 Starting Zabbix Proxy (active) [Zabbix-Proxy-xxxxxx]. Zabbix 5.0.7 (revision 1b3db7f980).
    20599:20211124:125628.883 **** Enabled features ****
    20599:20211124:125628.883 SNMP monitoring: NO
    20599:20211124:125628.883 IPMI monitoring: NO
    20599:20211124:125628.883 Web monitoring: NO
    20599:20211124:125628.883 VMware monitoring: NO
    20599:20211124:125628.883 ODBC: NO
    20599:20211124:125628.883 SSH support: NO
    20599:20211124:125628.883 IPv6 support: YES
    20599:20211124:125628.883 TLS support: YES
    20599:20211124:125628.883 **************************
    20599:20211124:125628.883 using configuration file: /opt/etc/zabbix_proxy.conf
    20599:20211124:125628.884 [Z3001] connection to database 'zabbix_proxy' failed: [0] sslmode value "require" invalid when SSL support is not compiled in
    
    20599:20211124:125628.885 database is down: reconnecting in 10 seconds
    20599:20211124:125633.570 Got signal [signal:2(SIGINT),sender_pid:0,sender_uid:0,reason: 128]. Exiting ...
    20599:20211124:125633.570 [Z3001] connection to database 'zabbix_proxy' failed: [0] sslmode value "require" invalid when SSL support is not compiled in
    
    20599:20211124:125633.570 Cannot connect to the database. Exiting...
  • kinglevel
    Junior Member
    • Nov 2021
    • 3

    #2
    forgot to add that authentication was my first issue...

    Code:
    4602:20211124:133526.942 Starting Zabbix Proxy (active) [Zabbix-Proxy-Halla]. Zabbix 5.0.7 (revision 1b3db7f980).
    4602:20211124:133526.942 **** Enabled features ****
    4602:20211124:133526.942 SNMP monitoring: NO
    4602:20211124:133526.942 IPMI monitoring: NO
    4602:20211124:133526.942 Web monitoring: NO
    4602:20211124:133526.942 VMware monitoring: NO
    4602:20211124:133526.942 ODBC: NO
    4602:20211124:133526.942 SSH support: NO
    4602:20211124:133526.942 IPv6 support: YES
    4602:20211124:133526.942 TLS support: YES
    4602:20211124:133526.942 **************************
    4602:20211124:133526.943 using configuration file: /opt/etc/zabbix_proxy.conf
    4602:20211124:133526.951 [Z3001] connection to database 'zabbix_proxy' failed: [0] authentication method 892220718 not supported
    
    4602:20211124:133526.951 database is down: reconnecting in 10 seconds
    4602:20211124:133534.667 Got signal [signal:2(SIGINT),sender_pid:0,sender_uid:0,reason: 128]. Exiting ...
    4602:20211124:133534.668 [Z3001] connection to database 'zabbix_proxy' failed: [0] authentication method 892220718 not supported
    
    4602:20211124:133534.668 Cannot connect to the database. Exiting...

    And from MariaDB, dont have the complete log.. but it says:
    Wich is kinda strange because it should at least say the correct database name and user that i have set in the config file

    Code:
    aborted connection to db 'unconnected' user 'unauthenticated' host

    Comment

    • kinglevel
      Junior Member
      • Nov 2021
      • 3

      #3
      Think i found the problem... took me 2 days to realise

      I have MariaDB 5.5.57, installed on the Qnap TS-439 Pro ii+, QTS 4.2.6 firmware.
      And i cannot update it to QTS 4.3.. where it would be possible to install a 3rd party package for MariaDB 10.


      So, if someone digs in this thread in the future..
      it would be possible to install MariaDB 10 with opkg, if you want to dig in deep.
      I rather not on boxes like these...

      better use virtual machines or dockers on newer hardware.

      case closed

      Comment

      Working...