Ad Widget

Collapse

Zabbix 2.2.4 / 2.2.5 - Frontend - User Groups - Calculated Permissions oddity?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • kt_twc
    Junior Member
    • Jul 2014
    • 3

    #1

    Zabbix 2.2.4 / 2.2.5 - Frontend - User Groups - Calculated Permissions oddity?

    We are noticing an oddity in the frontend in 2.2.4 and 2.2.5, though it’s not present in 2.2.3. We’ve tested pretty extensively. I’ve looked through this forum as well as the Zabbix JIRA and not found a report of a similar issue.

    Wondering if we’ve got a bug or if I’ve missed the report of it somewhere…hence this post.

    Our environment overview:
    Zabbix 2.2.3 on CentOS 6.4; 3-node cluster
    Server/JGate/Frontend running on isolated host (Linux HA using Corosync/Pacemaker)
    Frontend being served by optimized NGINX using php-fpm
    Data layer running on isolated host (Percona XtraDB Cluster - built-in Galeara)

    Overview of oddity:
    For purposes of explanation, assume we have…
    1 user group — User_Group_1
    26 host groups - Host_Group_A .. Host_Group_Z

    Description of oddity:
    When setting Permissions for User_Group_1, perform the following:
    1. Navigate the frontend to the Permissions tab under User_Group_1
    2. Under “Read-write” or “Read only”, click “Add”
    3. Select Host_Group_A, Host_Group_B, Host_Group_C, and click “Select”

    Result is, under the “Composing permissions” boxes at top of page, Host_Group_A, Host_Group_B, Host_Group_C are properly displayed in the “Read-write” or “Read only” boxes as applicable. However…under the “Calculated permissions” boxes at middle and bottom of page, Host_Group_J, Host_Group_X, Host_Group_M and their associated hosts are displayed.

    Upon clicking “Save” and then re-examining the Permissions for User_Group_1, the permissions for Host_Group_J, Host_Group_X, Host_Group_M remain present…which is undesirable, but at least consistent with permissions calculation from previous screen.

    Other observations (still using example values from above):
    1. The incorrect permissions calculations are not random. Example: when selecting Host_Group_A, you will get Host_Group_J incorrectly calculated every time.
    2. Some of the host groups will calculate correctly, but these appear to be very few in number (we’ve only noticed a couple that do this) and the host groups in question can still be incorrectly calculated by selecting another host group. Example: when selecting Host_Group_J, Host_Group_J is correctly calculated, but Host_Group_J is still incorrectly calculated when selecting Host_Group_A
    3. There seems to be no constant offset in host group incorrect calculations. Example: when selecting Host_Group_A and Host_Group_B, one does NOT end up with Host_Group_A+10 and Host_Group_B+10.

    This feels like some kind of database corruption. However, we’ve tested against both old and current copies of the database in our DEV environment, and verified behavior across all nodes in the cluster, and verified across multiple browsers, and tested against 2.2.3, 2.2.4, and 2.2.5.

    Both 2.2.4 and 2.2.5 have this oddity, while switching back to 2.2.3 makes everything happy again.

    Any assistance/suggestions would be greatly appreciated. Many thanks for reading.
  • kt_twc
    Junior Member
    • Jul 2014
    • 3

    #2
    <bump>

    Also...additional information:
    using PHP 5.3.3
    odd behavior is consistent across all Admin accounts (all Zabbix Super Admins).

    Thanks again for reading.

    Comment

    • richlv
      Senior Member
      Zabbix Certified Trainer
      Zabbix Certified SpecialistZabbix Certified Professional
      • Oct 2005
      • 3112

      #3
      that sounds really strange and i could not reproduce it.
      do incorrect permissions get saved, or is it just displaying them wrong ?
      that is, if you add only one group with 2.2.5 and see two of them listed, then check on the same db with 2.2.3 - is it ok ?
      Zabbix 3.0 Network Monitoring book

      Comment

      • kt_twc
        Junior Member
        • Jul 2014
        • 3

        #4
        Hi richlv and thanks for the assistance.

        When working with 2.2.4 and 2.2.5, we would only see a one-for-one relationship between host groups we were attempting to add, and groups that would be calculated.

        Example: We select to add Read-write permissions to Host_Group_A; the “Composing permissions” boxes at top of page show that we have selected Host_Group_A, but the “Calculated permissions” boxes at middle and bottom of page, are showing the Node, Host Group, and Hosts that are in Host_Group_J. Upon saving changes and re-viewing the permissions, the Host_Group_J data is present...no sign of Host_Group_A.

        The "bug" is, that the permissions are being calculated incorrectly (or so it seems)...I selected Host_Group_A, so why does the system "calculate" that Host_Group_J has been selected? It seems like the pop-up screen in the frontend where you pick the host groups is returning the wrong key(s)? or a similar condition?

        Our overall frustration is that...if we've corrupted data in the database, then why does rolling back to 2.2.3 address the issue, when there aren't any DB changes in point releases? Why does 2.2.3 see the correct relationships in our data and the two newer releases see mixed up data...on the same database?

        Unfortunately, after each of our tests, I deleted the test permissions that I had added before rolling back to check behavior in 2.2.3. The behavior is definitely correct in 2.2.3...and I might need to set the test environment back up so I can try changing stuff in 2.2.4 or .5 and see if the permissions are still mixed up when I roll back...but I don't see what that proves?

        Thanks again for reading.

        Comment

        • alexval_es
          Junior Member
          • Sep 2014
          • 1

          #5
          calculated permission

          Hi, on RHEL6.5 I just fresh installed zabbix mysql 2.2.6 using yum and zabbix repositories. Nothing done jet.

          In "configuration of user groups" tab "Permissions", it seems that "calculated permisions" is not showing correctly.
          • User group "Zabbix administrator" shows that has everyting denyied on red ¿?
          • User group "Guests" shows that has everyting denyied on red.

          But is shown OK on "configuration of users".
          • User "Admin" has Read-write to everything on green.
          • User "Guest" has Deny to everything on red.

          Comment

          Working...