Wrong error message in proxy logs when encryption config does not match for agent and disabled host

XMLWordPrintable

    • Type: Incident report
    • Resolution: Unresolved
    • Priority: Trivial
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • Environment:
      4.4.10 proxies and server.

      **If agent config and host config in zabbix differ in terms of encryption (agent has it, host does not or vice versa, agent has no encryption and host in zabbix has) and that host is disabled, then proxy will display a warning about encryption issues and not about host not being monitored...

      Agent has encryption and host has none..

      cannot send list of active checks to "<IP>": connection of type "TLS with PSK" is not allowed for host "<name>"

      or

      Agent has no encryption and host has some

      cannot send list of active checks to "<IP>": connection of type "unencrypted" is not allowed for host "<name>"

      It should display 

      cannot send list of active checks to "<IP>": host [<name>] not monitored

      This is only displayed if encryption settings are same on both ends, agent and zabbix host.

      Steps to reproduce:

      1. Configure active host with some encryption method (TLS for ex.) and do not set encryption in Zabbix host config, disable host
      2. Navigate to proxy logfile, you should see

      cannot send list of active checks to "<IP>": connection of type "TLS with PSK" is not allowed for host "<name>"

      Example: (RED -config mismatch, encryption in agent but not in host, blue- I set encryption in host config, but left host disabled, green - host enabled)

       2748:20201013:104819.811 cannot send list of active checks to "<IP>": connection of type "TLS with PSK" is not allowed for host "<NAME>"

      2750:20201013:104919.913 cannot send list of active checks to "<IP>": connection of type "TLS with PSK" is not allowed for host "<NAME>"
      2749:20201013:105020.038 cannot send list of active checks to "<IP>": connection of type "TLS with PSK" is not allowed for host "<NAME>"
      2751:20201013:105120.179 cannot send list of active checks to "<IP>": host [<NAME>] not monitored
      2750:20201013:105220.304 cannot send list of active checks to "<IP>": host [<NAME>] not monitored
      2751:20201013:105320.410 cannot send list of active checks to "<IP>": host [<NAME>] not monitored
      2751:20201013:105420.538 cannot send list of active checks to "<IP>": host [<NAME>] not monitored
      2749:20201013:105520.649 cannot send list of active checks to "<IP>": host [<NAME>] not monitored
      2748:20201013:105620.754 cannot send list of active checks to "<IP>": host [<NAME>] not monitored
      2749:20201013:105720.865 cannot send list of active checks to "<IP>": host [<NAME>] not monitored
      2761:20201013:105836.556 enabling Zabbix agent checks on host "<NAME>": host became available

            Assignee:
            Zabbix Support Team
            Reporter:
            Lauri Rood
            Votes:
            2 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: