Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-5323

SSH Agent TImeout too small / Not tunable

XMLWordPrintable

    • Icon: Incident report Incident report
    • Resolution: Won't fix
    • Icon: Major Major
    • None
    • 2.0.1
    • Server (S)
    • Centos 6.3 x64

      Hello,

      I have two hosts "hostA" and "hostB". I'm trying to perform an ssh agent check and I'm getting:

      26110:20120713:215807.165 item [hostB:ssh.run[test]] became not supported: Cannot obtain authentication methods: Would block requesting userauth list

      The item is set up with the root user in the check. The public key is id_dsa.pub and the private key is id_dsa. I've added the public keygen key for zabbix server account to the authorized_keys2 file and I've verified I can ssh into hostB from hostA without a password. (sudo -u zabbix ssh root@hostB) I've also modified the server config file to point to the correct path of the id_dsa files (/home/zabbix/.ssh)

      The script is just a simple "service sshd status" (I'm using this as a test)

      I set up a watch on /var/log/secure and I can see that it is connecting, but it appears to be timing out:

      Jul 13 22:10:54 hostB sshd[6059]: Received disconnect from 11.22.33.44: 11: Normal Shutdown

      I created /etc/hosts entries on both machines, and it finally worked!

      THE PROBLEM IS THIS:

      The ssh agent tries to do a name lookup upon connecting, and when there isn't an entry for that host, it just gives up after a while and logs you in. The Zabbix timeout period is much less than the ssh login time. The Zabbix Server error message is very misleading and poorly worded.

            Unassigned Unassigned
            bturnbough Brad Turnbough
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: