Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-20052

Zabbix-agent2 Plugin permissons are not enough

    XMLWordPrintable

Details

    • Problem report
    • Status: Confirmed
    • Major
    • Resolution: Unresolved
    • 5.0.16, 5.4.5, 6.0.0alpha3
    • None
    • Zabbix-server 5.4.5
      Zabbix-agent 5.4.5
      Oracle 19c

    Description

      Documentation: https://git.zabbix.com/projects/ZBX/repos/zabbix/browse/src/go/plugins/oracle/README.md
      Permisions specified:

      CREATE USER zabbix_mon IDENTIFIED BY <PASSWORD>;
      -- Grant access to the zabbix_mon user.
      GRANT CONNECT, CREATE SESSION TO zabbix_mon;
      GRANT SELECT ON DBA_TABLESPACE_USAGE_METRICS TO zabbix_mon;
      GRANT SELECT ON DBA_TABLESPACES TO zabbix_mon;
      GRANT SELECT ON DBA_USERS TO zabbix_mon;
      GRANT SELECT ON SYS.DBA_DATA_FILES TO zabbix_mon;
      GRANT SELECT ON V$ACTIVE_SESSION_HISTORY TO zabbix_mon;
      GRANT SELECT ON V$ARCHIVE_DEST TO zabbix_mon;
      GRANT SELECT ON V$ASM_DISKGROUP TO zabbix_mon;
      GRANT SELECT ON V$DATABASE TO zabbix_mon;
      GRANT SELECT ON V$DATAFILE TO zabbix_mon;
      GRANT SELECT ON V$INSTANCE TO zabbix_mon;
      GRANT SELECT ON V$LOG TO zabbix_mon;
      GRANT SELECT ON V$OSSTAT TO zabbix_mon;
      GRANT SELECT ON V$PGASTAT TO zabbix_mon;
      GRANT SELECT ON V$PROCESS TO zabbix_mon;
      GRANT SELECT ON V$RECOVERY_FILE_DEST TO zabbix_mon;
      GRANT SELECT ON V$RESTORE_POINT TO zabbix_mon;
      GRANT SELECT ON V$SESSION TO zabbix_mon;
      GRANT SELECT ON V$SGASTAT TO zabbix_mon;
      GRANT SELECT ON V$SYSMETRIC TO zabbix_mon;
      GRANT SELECT ON V$SYSTEM_PARAMETER TO zabbix_mon;
      

      Insufficient permissions will be received in the following items:

      Oracle: Get FRA stats   oracle.fra.stats["\{$ORACLE.CONNSTRING}","\{$ORACLE.USER}","\{$ORACLE.PASSWORD}","\{$ORACLE.SERVICE}"]

      Table or view not exist will be received in the following items:

      Oracle: Get tablespaces stats   oracle.ts.stats["\{$ORACLE.CONNSTRING}","\{$ORACLE.USER}","\{$ORACLE.PASSWORD}","\{$ORACLE.SERVICE}"]

      The following errors will be logged in /var/log/zabbix/zabbix-agent2.log every item execution.

      2021/10/06 03:19:15.837882 [Oracle] Cannot fetch data: dpiStmt_execute: ORA-01031: insufficient privileges.
      2021/10/06 03:19:17.898852 [Oracle] Cannot fetch data: dpiStmt_execute: ORA-00942: table or view does not exist.
      

      Granting the generic permission to the user, will solve this problem:

      grant select any dictionary to zabbix_mon ;
      

      Attachments

        Activity

          People

            zabbix.dev Zabbix Development Team
            Operator1 Operator
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: