-
Bug: default agent group becomes set to invalid value causing ACL violations
This was an interesting one and I can replicate it.
1. Perform recon task with preset ‘basic monitoring’.
2. Chose newly added agent and attempt to click-to-edit the ‘host alive’ or ‘host latency’ module. Observe agent group is shown as a blank space on agent overview screen.
3. URL is diplayed similar to ‘http://192.168.100.10/pandora_console/index.php?sec=gagente&sec2=godmode/agentes/configurar_agente&id_agente=68&tab=module&edit_module=1&id_agent_module=173’ but a blank grey screen is shown.
4. Close browser tab and reopen portal. Observe event display shows:ACL Violation      Attempt to access agent manager
5. Edit the agent and change the group to a value (e.g. ‘servers’).
6. Observe you can now edit the modules without errors.This looks like the default group that the ‘basic monitoring’ scheme adds is some sort of invalid value that causes a spurious ACL violation?
I hope this report is of help.
-
6 Replies
-
Hello Cursorkeys,
It looks like the problem is the recon task allows to create agents on the “All” group. I think if you check the database, you would see an ID 0 on the group parameter, but you can’t actually assign an agent to the “all” group.
I’ll raise an internal ticket to resolve this little issue, the solution will be to NOT allow the recon task to assign ID 0 to the new created agents.Thanks for the report!
Kind regards,
Antonio. -
Hi Antonio,
Thank you very much for the quick response.
You are correct, ‘id_grupo’ in table ‘tagente’ is 0 on the problem agents. A quick UPDATE to 10 (unknown) has resolved the remaining problem agents without any more clicking 🙂
Is it possible to put in a feature request that ACL violations cause an error message rather than just a grey screen too?
Many thanks,
Jon
-
-
-
-
Hi Antonio,
Just to let you know I tried to work through this issue. I could see the AJAX call return successfully with the popup data in the network traffic but for some reason the popup wasn’t then being displayed.
I’ve just updated Chrome and now I have popups. So it looks like this was Chome misbehaving somehow.
Best regards,
Jon
