-
Type:
Problem report
-
Resolution: Unresolved
-
Priority:
Trivial
-
None
-
Affects Version/s: 7.4.16
-
Component/s: Templates (T)
Steps to reproduce:
Palo Alto PAN-OS version: 11.2.10-h16
Palo Alto model: PA-440
1. Create Administrator user with Administrator Type: Dynamic and Superuser (read-only) role in Palo Alto.
2. Configure Zabbix template
3. "Get certificates" (pan.pa440.certificate.get) item works
4. "Certificate discovery" (pan.pa440.certificates.discovery) works and item prototypes are created
5. "Certificate {#CERTNAME}: Expires on" (pan.pa440.certificate.expires{#CERTNAME}) items fail as unsupported items with error
Value of type "string" is not suitable for value type "Numeric (unsigned)". Value "{"@ptpl":"template_common","@src":"tpl","#text":"1832673600"}"
Result:
Example output from testing item "Get certificates" (pan.pa440.certificate.get):
{"response":{"@status":"success","data":[{"@name":"edl-hosting-service-cert","@ptpl":"template_common","@src":"tpl","subject-hash":{"@ptpl":"template_common","@src":"tpl","#text":"b0f3e76e"},"issuer-hash":{"@ptpl":"template_common","@src":"tpl","#text":"b0f3e76e"},"not-valid-before":{"@ptpl":"template_common","@src":"tpl","#text":"Sep 1 12:00:00 1998 GMT"},"issuer":{"@ptpl":"template_common","@src":"tpl","#text":"/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA"},"not-valid-after":{"@ptpl":"template_common","@src":"tpl","#text":"Jan 28 12:00:00 2028 GMT"},"common-name":{"@ptpl":"template_common","@src":"tpl","#text":"GlobalSign Root CA"},"expiry-epoch":{"@ptpl":"template_common","@src":"tpl","#text":"1832673600"},"ca":{"@ptpl":"template_common","@src":"tpl","#text":"yes"},"subject":{"@ptpl":"template_common","@src":"tpl","#text":"/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA"},"public-key":{"@ptpl":"template_common","@src":"tpl","#text":"-----BEGIN CERTIFICATE-----\nMIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG\nA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv\nb3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw\nMDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i\nYWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT\naWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ\njc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp\nxy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz8kHp\n1Wrjsok6Vjk4bwY8iGlbKk3Fp1S4bInMm/k8yuX9ifUSPJJ4ltbcdG6TRGHRjcdG\nsnUOhugZitVtbNV4FpWi6cgKOOvyJBNPc1STE4U6G7weNLWLBYy5d4ux2x8gkasJ\nU26Qzns3dLlwR5EiUWMWea6xrkEmCMgZK9FGqkjWZCrXgzT/LCrBbBlDSgeF59N8\n9iFo7+ryUp9/k5DPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8E\nBTADAQH/MB0GA1UdDgQWBBRge2YaRQ2XyolQL30EzTSo//z9SzANBgkqhkiG9w0B\nAQUFAAOCAQEA1nPnfE920I2/7LqivjTFKDK1fPxsnCwrvQmeU79rXqoRSLblCKOz\nyj1hTdNGCbM+w6DjY1Ub8rrvrTnhQ7k4o+YviiY776BQVvnGCv04zcQLcFGUl5gE\n38NflNUVyRRBnMRddWQVDf9VMOyGj/8N7yy5Y0b2qvzfvGn9LhJIZJrglfCm7ymP\nAbEVtQwdpf5pLGkkeB6zpxxxYu7KyJesF12KwvhHhm4qxFYxldBniYUr+WymXUad\nDKqC5JlR3XC321Y9YeRq4VzW9v493kHMB65jUr9TU/Qr6cf9tveCX4XSQRjbgbME\nHMUfpIBvFSDJ3gyICh3WZlXi/EjJKSZp4A==\n-----END CERTIFICATE-----\n"},"algorithm":{"@ptpl":"template_common","@src":"tpl","#text":"RSA"},"common-name-int":"GlobalSign Root CA","subject-int":"C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA"},{"@name":"edl-cloudflare-cert","@ptpl":"template_common","@src":"tpl","subject-hash":{"@ptpl":"template_common","@src":"tpl","#text":"5acf816d"},"issuer-hash":{"@ptpl":"template_common","@src":"tpl","#text":"5acf816d"},"not-valid-before":{"@ptpl":"template_common","@src":"tpl","#text":"Jun 22 00:00:00 2016 GMT"},"issuer":{"@ptpl":"template_common","@src":"tpl","#text":"/C=US/O=Google Trust Services LLC/CN=GTS Root R4"},"not-valid-after":{"@ptpl":"template_common","@src":"tpl","#text":"Jun 22 00:00:00 2036 GMT"},"common-name":{"@ptpl":"template_common","@src":"tpl","#text":"GTS Root R4"},"expiry-epoch":{"@ptpl":"template_common","@src":"tpl","#text":"2097705600"},"ca":{"@ptpl":"template_common","@src":"tpl","#text":"yes"},"subject":{"@ptpl":"template_common","@src":"tpl","#text":"/C=US/O=Google Trust Services LLC/CN=GTS Root R4"},"public-key":{"@ptpl":"template_common","@src":"tpl","#text":"-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n"},"algorithm":{"@ptpl":"template_common","@src":"tpl","#text":"EC"},"common-name-int":"GTS Root R4","subject-int":"C = US, O = Google Trust Services LLC, CN = GTS Root R4"}]}}
See attached screenshots.
