[ZBX-10571] Discovery based on agent item fails Created: 2016 Mar 24  Updated: 2017 May 30  Resolved: 2016 Apr 08

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Proxy (P), Server (S)
Affects Version/s: 3.0.1, 3.2.0alpha1
Fix Version/s: 3.0.2rc1, 3.2.0alpha1

Type: Incident report Priority: Blocker
Reporter: Glebs Ivanovskis (Inactive) Assignee: Unassigned
Resolution: Fixed Votes: 0
Labels: discovery, encryption, regression
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified


 Description   

Discoverer memset()'s DC_ITEM structure with zeros and passes it to get_value_agent() where item->tls_connect == 0 is interpreted not ZBX_TCP_SEC_UNENCRYPTED.

Obviously, nothing good will happen if encryption support was compiled in when zbx_tcp_connect() gets tls_connect == 0, tls_arg1 == NULL and tls_arg2 == NULL.

If encryption support was not compiled in get_value_agent() will fail with error: "A TLS connection is configured to be used with agent but support for TLS was not compiled into %s."

Also, in this scenario zbx_tcp_close() is called for uninitialized socket.

Introduced with ZBXNEXT-1263.



 Comments   
Comment by Glebs Ivanovskis (Inactive) [ 2016 Mar 24 ]

Fix for version 3.0 is available in development branch svn://svn.zabbix.com/branches/dev/ZBX-10571 revision 59129.

Comment by Sandis Neilands (Inactive) [ 2016 Apr 05 ]

(1) Documentation. We should mention in the network discovery page that only unencrpyted Zabbix agent checks are supported until ZBXNEXT-3215 is implemented.

glebs.ivanovskis Updated pages:

Dear sandis.neilands, please have a look and then I will copy changes to 3.2 documentation.
RESOLVED

sandis.neilands Content is OK. martins-v, please check the language.

martins-v Done. I also copied the changes to 3.2.

sandis.neilands CLOSED.

Comment by Sandis Neilands (Inactive) [ 2016 Apr 06 ]

Successfully tested both build with and without encryption. For build with encryption tested cases where encryption for agent is and is not enabled.

Comment by Glebs Ivanovskis (Inactive) [ 2016 Apr 07 ]

Fixed in pre-3.0.2rc1 r59344, pre-3.1.0 (trunk) r59345.

Generated at Fri Mar 29 00:40:23 EET 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.