need help with Zabbix server

Mike Davis

@scottalanmiller
since I have 3 accounts, I tried:

MariaDB [(none)]> drop user zabbix;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> drop user zabbix@localhost;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> drop user 'zabbix'@'xx.xx.14.212';
ERROR 1396 (HY000): Operation DROP USER failed for 'zabbix'@'xx.xx.14.212'

Can't seem to delete the last one.

DustinB3403

Here is a report (2007) of the syntax to be used to provide access to the database for a user.

Mike Davis

to delete the last account, it didn't like that I specified the host, even though it was listed. I did:
delete from mysql.user where user='zabbix' ;

and that took.

now I just have the user zabbix@localhost

I restarted services and in the log I'm getting:
1141:20161020:154817.079 [Z3001] connection to database 'zabbix' failed: [2002] Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
1141:20161020:154817.086 database is down: reconnecting in 10 seconds
1141:20161020:154827.330 [Z3001] connection to database 'zabbix' failed: [1045] Access denied for user 'zabbix'@'localhost' (using password: YES)

travisdh1

@Mike-Davis Can you login to MariaDB with the username/password you're using for Zabbix?

mysql -u zabbix -p

scottalanmiller

@Mike-Davis said in need help with Zabbix server:

to delete the last account, it didn't like that I specified the host, even though it was listed. I did:
delete from mysql.user where user='zabbix' ;

and that took.

now I just have the user zabbix@localhost

I restarted services and in the log I'm getting:
1141:20161020:154817.079 [Z3001] connection to database 'zabbix' failed: [2002] Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
1141:20161020:154817.086 database is down: reconnecting in 10 seconds
1141:20161020:154827.330 [Z3001] connection to database 'zabbix' failed: [1045] Access denied for user 'zabbix'@'localhost' (using password: YES)

And that's the only user that there should be.

Mike Davis

I can't log in with the user zabbix. Only as root.

Just for kicks I looked at the zabbix_agentd.log
I'm getting this error:

  1132:20161020:154817.055 agent #3 started [listener #2]
  1134:20161020:154817.056 active check configuration update from 127.0.0.1:10051 started to fail (cannot connect to 127.0.0.1:10051: 111 Connection refused)

Is it possible I need to open 127.0.0.1 in the firewall?
I do have this command:

sudo firewall-cmd --permanent --zone=public --add-port=10051/tcp

travisdh1

@Mike-Davis If you can't login to the database using the credentials you created for the Zabbix user, then that will be one problem.

Firewall ports may or may not be another.

scottalanmiller

@Mike-Davis said in need help with Zabbix server:

I can't log in with the user zabbix. Only as root.

Just for kicks I looked at the zabbix_agentd.log
I'm getting this error:
  1132:20161020:154817.055 agent #3 started [listener #2]
  1134:20161020:154817.056 active check configuration update from [127.0.0.1:10051] started to fail (cannot connect to 127.0.0.1]:10051]: [111] Connection refused)
Is it possible I need to open 127.0.0.1 in the firewall?
I do have this command:

sudo firewall-cmd --permanent --zone=public --add-port=10051/tcp

No, there is no network or firewall involved here.

scottalanmiller

@Mike-Davis said in need help with Zabbix server:

sudo firewall-cmd --permanent --zone=public --add-port=10051/tcp

That's not even the right port. Why are you looking at 10051 when 3306 is the MySQL port?

scottalanmiller

The issue is simple, you have a username / password mismatch. There is nothing more to it.

You know that the firewall can't be involved for three reasons...

Root user works, so you've gotten past that point.
The MySQL client does not use the network stack to connect in this way.
Localhost / 127.0.0.1 never goes through the firewall.

Mike Davis

@scottalanmiller because the agent was getting connection refused and it's on 10051

Mike Davis

OK, so it's definitely something about the zabbix user account. Switching the zabbix server to connect as root works. How bad is it to let it connect as root?

coliver

@Mike-Davis said in need help with Zabbix server:

OK, so it's definitely something about the zabbix user account. Switching the zabbix server to connect as root works. How bad is it to let it connect as root?

Anything else running on that database? It isn't best practice but if you have a good backup then you probably won't have any issues.

Mike Davis

It's a dedicated server just for zabbix.

JaredBusch

@Mike-Davis said in need help with Zabbix server:

It's a dedicated server just for zabbix.

Did you follow my guide?

coliver

@Mike-Davis said in need help with Zabbix server:

It's a dedicated server just for zabbix.

Won't be best practice or altogether safe but you can do it. I'm wondering why the Zabbix user doesn't work though that just seems odd.

DustinB3403

@coliver said in need help with Zabbix server:

@Mike-Davis said in need help with Zabbix server:

It's a dedicated server just for zabbix.

Won't be best practice or altogether safe but you can do it. I'm wondering why the Zabbix user doesn't work though that just seems odd.

Likely because the zabbix user password was fat fingered and is now stuck in a config file somewhere / isn't being overwritten.

Mike Davis

@JaredBusch said in need help with Zabbix server:

@Mike-Davis said in need help with Zabbix server:

It's a dedicated server just for zabbix.

Did you follow my guide?

no, but I wish I had known it was there last night....

Mike Davis

@DustinB3403 said in need help with Zabbix server:

@coliver said in need help with Zabbix server:

@Mike-Davis said in need help with Zabbix server:

It's a dedicated server just for zabbix.

Won't be best practice or altogether safe but you can do it. I'm wondering why the Zabbix user doesn't work though that just seems odd.

Likely because the zabbix user password was fat fingered and is now stuck in a config file somewhere / isn't being overwritten.

I created a really long password, so I was pasting it each time. I even used
use mysql;
update user set password=password('aweakpassword') where user='zabbix';

to change the password in SQL and then try to connect with that with no luck.

scottalanmiller

@Mike-Davis said in need help with Zabbix server:

@scottalanmiller because the agent was getting connection refused and it's on 10051

I thought that you were working on the database. The agent doesn't talk to the database.