Sybase sensor

The Sybase sensor discovers Sybase Adaptive Server Enterprise (ASE) database servers.

To discover the Sybase database, the sensor uses JDBC protocol with the ENCRYPT_PASSWORD and RETRY_WITH_NO_ENCRYPTION flags set to true by default. It means that the password is encrypted and that if you fail to authenticate in your first attempt, the passwords provided during next attempts are not encrypted. The connection is secure if the access list entry contains a trust store file.

Sensor name that is used in the GUI and logs

SybaseSensor

Security issues

To assign the minimum privileges to the Sybase discovery user, run the following command:

grant select on sysengines from public

The following tables are queried:

  • version
  • master..sysconfigures
  • master..sysusages
  • master..syssegments
  • master..sysprocesses
  • master..sysengines
  • master..sysdatabases
  • master..sysdevices
  • master..syscurconfigs
  • master..sysservers
  • master..syssrvroles
  • master..syslogins
  • master..sysloginroles
  • master..syspartitions
  • master..systhresholds
  • master..sysresourcelimits
  • master..systimeranges
The previous query discovers only the information for the master database. If you want to discover information about users and tables from other databases, create a user id on these databases. During the discovery, Agile Service Manager runs the following query:
select t.segment, u.name from database_name..systhresholds t,database_name..sysusers u where t.suid=u.suid
Examples:
  • The following query is run for the tempdb database:
    select t.segment, u.name from tempdb..systhresholds t,tempdb..sysusers u where t.suid=u.suid
  • The following query is run for the sybsystemprocs database:
    select t.segment, u.name from sybsystemprocs..systhresholds t,sybsystemprocs..sysusers u where t.suid=u.suid

Limitations

  • The Sybase sensor does not collect information about schemas owned by the dbo user.
  • The limitation in SAP Sybase ASE software identified by CR# 751110 affects Agile Service Manager. Database connection configured to use secure socket layer (SSL) hangs while connecting to servers that have SSL mode disabled. The avoid such problem in Agile Service Manager, set a value of the following scoped property:
    com.collation.sybasesensor.jdbclogin.timeout
    The default value is 15000 ms (15 seconds). After that time, attempts to log in fail and sensor tries to establish a plain unsecured connection.
  • The following configuration elements are not discovered by default:
    • logins
    • roles
    • rawSchema
    • tables
    • thresholds
    If you want these elements to be discovered, create a sensor configuration and set the following properties to true:
    • discoverLogins
    • discoverRoles
    • discoverRawSchema
    • discoverTables
    • discoverThresholds