need help with Zabbix server

Mike Davis

it is on the same server.
I just edited:
sudo vi /etc/zabbix/zabbix_server.conf
and set :
DBhost=localhost

dafyre

@Mike-Davis said in need help with Zabbix server:

it is on the same server.
I just edited:
sudo vi /etc/zabbix/zabbix_server.conf
and set :
DBhost=localhost

Then go back and run the Grant commands again, adjusting the IP accordingly.

DustinB3403

It looks like this was a housekeeper / permissions issue.

It was resolved several years ago, so I'm guessing permissions.

Mike Davis

sudo mysql -u zabbix -p -h localhost
Enter password:
ERROR 1045 (28000): Access denied for user 'zabbix'@'localhost' (using password: YES)

scottalanmiller

@Mike-Davis said in need help with Zabbix server:

I did enter the real IP address.

Should be 127.0.0.1

scottalanmiller

@Mike-Davis said in need help with Zabbix server:

sudo mysql -u zabbix -p -h localhost
Enter password:
ERROR 1045 (28000): Access denied for user 'zabbix'@'localhost' (using password: YES)

Need to grant permissions to the correct user. You have two overlapping users created in that database. Remove them both and start over ONLY with the localhost one.

DustinB3403

Can you confirm the running services against what I have here.

Mike Davis

@scottalanmiller
since I have 3 accounts, I tried:

MariaDB [(none)]> drop user zabbix;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> drop user zabbix@localhost;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> drop user 'zabbix'@'xx.xx.14.212';
ERROR 1396 (HY000): Operation DROP USER failed for 'zabbix'@'xx.xx.14.212'

Can't seem to delete the last one.

DustinB3403

Here is a report (2007) of the syntax to be used to provide access to the database for a user.

Mike Davis

to delete the last account, it didn't like that I specified the host, even though it was listed. I did:
delete from mysql.user where user='zabbix' ;

and that took.

now I just have the user zabbix@localhost

I restarted services and in the log I'm getting:
1141:20161020:154817.079 [Z3001] connection to database 'zabbix' failed: [2002] Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
1141:20161020:154817.086 database is down: reconnecting in 10 seconds
1141:20161020:154827.330 [Z3001] connection to database 'zabbix' failed: [1045] Access denied for user 'zabbix'@'localhost' (using password: YES)

travisdh1

@Mike-Davis Can you login to MariaDB with the username/password you're using for Zabbix?

mysql -u zabbix -p

scottalanmiller

@Mike-Davis said in need help with Zabbix server:

to delete the last account, it didn't like that I specified the host, even though it was listed. I did:
delete from mysql.user where user='zabbix' ;

and that took.

now I just have the user zabbix@localhost

I restarted services and in the log I'm getting:
1141:20161020:154817.079 [Z3001] connection to database 'zabbix' failed: [2002] Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
1141:20161020:154817.086 database is down: reconnecting in 10 seconds
1141:20161020:154827.330 [Z3001] connection to database 'zabbix' failed: [1045] Access denied for user 'zabbix'@'localhost' (using password: YES)

And that's the only user that there should be.

Mike Davis

I can't log in with the user zabbix. Only as root.

Just for kicks I looked at the zabbix_agentd.log
I'm getting this error:

  1132:20161020:154817.055 agent #3 started [listener #2]
  1134:20161020:154817.056 active check configuration update from 127.0.0.1:10051 started to fail (cannot connect to 127.0.0.1:10051: 111 Connection refused)

Is it possible I need to open 127.0.0.1 in the firewall?
I do have this command:

sudo firewall-cmd --permanent --zone=public --add-port=10051/tcp

travisdh1

@Mike-Davis If you can't login to the database using the credentials you created for the Zabbix user, then that will be one problem.

Firewall ports may or may not be another.

scottalanmiller

@Mike-Davis said in need help with Zabbix server:

I can't log in with the user zabbix. Only as root.

Just for kicks I looked at the zabbix_agentd.log
I'm getting this error:
  1132:20161020:154817.055 agent #3 started [listener #2]
  1134:20161020:154817.056 active check configuration update from [127.0.0.1:10051] started to fail (cannot connect to 127.0.0.1]:10051]: [111] Connection refused)
Is it possible I need to open 127.0.0.1 in the firewall?
I do have this command:

sudo firewall-cmd --permanent --zone=public --add-port=10051/tcp

No, there is no network or firewall involved here.

scottalanmiller

@Mike-Davis said in need help with Zabbix server:

sudo firewall-cmd --permanent --zone=public --add-port=10051/tcp

That's not even the right port. Why are you looking at 10051 when 3306 is the MySQL port?

scottalanmiller

The issue is simple, you have a username / password mismatch. There is nothing more to it.

You know that the firewall can't be involved for three reasons...

Root user works, so you've gotten past that point.
The MySQL client does not use the network stack to connect in this way.
Localhost / 127.0.0.1 never goes through the firewall.

Mike Davis

@scottalanmiller because the agent was getting connection refused and it's on 10051

Mike Davis

OK, so it's definitely something about the zabbix user account. Switching the zabbix server to connect as root works. How bad is it to let it connect as root?

coliver

@Mike-Davis said in need help with Zabbix server:

OK, so it's definitely something about the zabbix user account. Switching the zabbix server to connect as root works. How bad is it to let it connect as root?

Anything else running on that database? It isn't best practice but if you have a good backup then you probably won't have any issues.