[ZBX-17700] Enabling remote commands on Zabbix agent is very hard and misleading Created: 2020 May 11 Updated: 2024 Apr 10 Resolved: 2020 Jun 04 |
|
Status: | Closed |
Project: | ZABBIX BUGS AND ISSUES |
Component/s: | Agent (G), Documentation (D) |
Affects Version/s: | 5.0.0rc1 |
Fix Version/s: | 5.0.1rc1, 5.2.0alpha1, 5.2 (plan) |
Type: | Problem report | Priority: | Trivial |
Reporter: | Vladislavs Sokurenko | Assignee: | Andris Zeila |
Resolution: | Fixed | Votes: | 3 |
Labels: | None | ||
Remaining Estimate: | Not Specified | ||
Time Spent: | Not Specified | ||
Original Estimate: | Not Specified |
Issue Links: |
|
||||||||
Team: | |||||||||
Sprint: | Sprint 64 (May 2020) | ||||||||
Story Points: | 0.5 |
Description |
Take clean zabbix_agentd.conf, and read documentation that EnableRemoteCommands is deprecated
Add: AllowKey=system.run[*] See warning
zabbix_get -s 127.0.0.1 -k "system.run[echo 2]"
ZBX_NOTSUPPORTED: Unsupported item key.
For some reason it says unsupported item key but made sure that key is correct so it is not allowed Try deleting DenyKey zabbix_agentd [141243]: ERROR: "AllowKey" without "DenyKey" rules are meaningless What can be done to enable remote command ? Documentation states simply use AllowKey=system.run[*] or DenyKey=system.run[*] So it looks like we need to add at least something to DenyKey ? DenyKey=test See:
zabbix_get -s 127.0.0.1 -k "system.run[echo 2]"
ZBX_NOTSUPPORTED: Remote commands are not enabled.
Still not working, how to enable remote commands there is only one option to do that but it is deprecated. EnableRemoteCommands=1 See warning Warning: EnableRemoteCommands parameter is deprecated, use AllowKey=system.run[*] or DenyKey=system.run[*] instead But got it working
./bin/zabbix_get -s 127.0.0.1 -k "system.run[echo 2]"
2
Expected: |
Comments |
Comment by Vladislavs Sokurenko [ 2020 May 11 ] |
Also upgrade notes do not provide insights
It does not work and not clear what to do, commenting out DenyKey does not enable remote commands. |
Comment by Vladislavs Sokurenko [ 2020 May 11 ] |
Also there are no examples in Restricting agent checks on how to enable remote commands without disabling other keys. |
Comment by richlv [ 2020 May 11 ] |
Seems to partially duplicate |
Comment by Sergejs Olonkins [ 2020 May 11 ] |
Same problem also reported in ZBX-17367 |
Comment by Martins Valkovskis [ 2020 May 12 ] |
The upgrade notes have been updated to reflect what appears to be the real situation. However, it does not resolve the issue because agent startup messages and also config files entries now contradict the documentation and perhaps also reality, as reported here and in some other tickets listed here. |
Comment by Andris Zeila [ 2020 May 15 ] |
Released
|