[msgs:/var/log/messages] <...SKIPPED...> Sep 19 23:02:35 usaea1satuas200 systemd[1]: Stopped User runtime directory /run/user/65534. Sep 19 23:02:35 usaea1satuas200 systemd[1]: Removed slice User Slice of UID 65534. Sep 19 23:04:30 usaea1satuas200 systemd[1]: Starting Automatically configure NetworkManager in cloud... Sep 19 23:04:30 usaea1satuas200 systemd[1]: nm-cloud-setup.service: Succeeded. Sep 19 23:04:30 usaea1satuas200 systemd[1]: Started Automatically configure NetworkManager in cloud. <...CURRENT...> Sep 19 23:05:01 usaea1satuas200 root[1045626]: MARK -- sudoers_audit.sh Sep 19 23:05:02 usaea1satuas200 su[1045890]: (to nobody) root on none Sep 19 23:05:02 usaea1satuas200 systemd[1]: Created slice User Slice of UID 65534. Sep 19 23:05:02 usaea1satuas200 systemd[1]: Starting User runtime directory /run/user/65534... Sep 19 23:05:02 usaea1satuas200 systemd[1]: Started User runtime directory /run/user/65534. Sep 19 23:05:02 usaea1satuas200 systemd[1]: Starting User Manager for UID 65534... Sep 19 23:05:02 usaea1satuas200 systemd[1045893]: Starting D-Bus User Message Bus Socket. Sep 19 23:05:02 usaea1satuas200 systemd[1045893]: Reached target Timers. Sep 19 23:05:02 usaea1satuas200 systemd[1045893]: Reached target Paths. Sep 19 23:05:02 usaea1satuas200 systemd[1045893]: Listening on D-Bus User Message Bus Socket. Sep 19 23:05:02 usaea1satuas200 systemd[1045893]: Reached target Sockets. Sep 19 23:05:02 usaea1satuas200 systemd[1045893]: Reached target Basic System. Sep 19 23:05:02 usaea1satuas200 systemd[1045893]: Reached target Default. Sep 19 23:05:02 usaea1satuas200 systemd[1045893]: Startup finished in 24ms. Sep 19 23:05:02 usaea1satuas200 systemd[1]: Started User Manager for UID 65534. Sep 19 23:05:02 usaea1satuas200 systemd[1]: Started Session c136653 of user nobody. Sep 19 23:05:03 usaea1satuas200 systemd[1]: session-c136653.scope: Succeeded. Sep 19 23:05:13 usaea1satuas200 systemd[1]: Stopping User Manager for UID 65534... Sep 19 23:05:13 usaea1satuas200 systemd[1045893]: Stopped target Default. Sep 19 23:05:13 usaea1satuas200 systemd[1045893]: Stopped target Basic System. Sep 19 23:05:13 usaea1satuas200 systemd[1045893]: Stopped target Sockets. Sep 19 23:05:13 usaea1satuas200 systemd[1045893]: Stopped target Paths. Sep 19 23:05:13 usaea1satuas200 systemd[1045893]: Closed D-Bus User Message Bus Socket. Sep 19 23:05:13 usaea1satuas200 systemd[1045893]: Stopped target Timers. Sep 19 23:05:13 usaea1satuas200 systemd[1045893]: Reached target Shutdown. Sep 19 23:05:13 usaea1satuas200 systemd[1045893]: Started Exit the Session. Sep 19 23:05:13 usaea1satuas200 systemd[1045893]: Reached target Exit the Session. Sep 19 23:05:13 usaea1satuas200 systemd[1]: user@65534.service: Succeeded. Sep 19 23:05:13 usaea1satuas200 systemd[1]: Stopped User Manager for UID 65534. Sep 19 23:05:13 usaea1satuas200 systemd[1]: Stopping User runtime directory /run/user/65534... Sep 19 23:05:13 usaea1satuas200 systemd[1]: run-user-65534.mount: Succeeded. Sep 19 23:05:13 usaea1satuas200 systemd[1]: user-runtime-dir@65534.service: Succeeded. Sep 19 23:05:13 usaea1satuas200 systemd[1]: Stopped User runtime directory /run/user/65534. Sep 19 23:05:13 usaea1satuas200 systemd[1]: Removed slice User Slice of UID 65534. Sep 19 23:05:55 usaea1satuas200 sshd[1046166]: rexec line 147: Deprecated option UsePrivilegeSeparation Sep 19 23:06:21 usaea1satuas200 adclient[27640]: INFO AUDIT_TRAIL|Centrify Suite|Trusted Path|1.0|2700|Trusted path granted|5|user=usaea1satuas200$@ENA.US.EXPERIAN.LOCAL pid=27640 utc=1726787181041 centrifyEventID=23700 DASessID=N/A DAInst=N/A status=GRANTED server=ldap/usaea1prootdc01.experian.local@EXPERIAN.LOCAL Sep 19 23:06:48 usaea1satuas200 adclient[27640]: INFO AUDIT_TRAIL|Centrify Suite|Trusted Path|1.0|2700|Trusted path granted|5|user=usaea1satuas200$@ENA.US.EXPERIAN.LOCAL pid=27640 utc=1726787208008 centrifyEventID=23700 DASessID=N/A DAInst=N/A status=GRANTED server=ldap/usaea1pexdcw01.ena.us.experian.local@ENA.US.EXPERIAN.LOCAL Sep 19 23:06:48 usaea1satuas200 adclient[27640]: INFO AUDIT_TRAIL|Centrify Suite|Trusted Path|1.0|2700|Trusted path granted|5|user=usaea1satuas200$@ENA.US.EXPERIAN.LOCAL pid=27640 utc=1726787208167 centrifyEventID=23700 DASessID=N/A DAInst=N/A status=GRANTED server=ldap/usaea1pexdcw01.ena.us.experian.local@ENA.US.EXPERIAN.LOCAL Sep 19 23:06:48 usaea1satuas200 adclient[27640]: INFO AUDIT_TRAIL|Centrify Suite|Trusted Path|1.0|2700|Trusted path granted|5|user=usaea1satuas200$@ENA.US.EXPERIAN.LOCAL pid=27640 utc=1726787208331 centrifyEventID=23700 DASessID=N/A DAInst=N/A status=GRANTED server=ldap/mckukdc1.uk.experian.local@UK.EXPERIAN.LOCAL Sep 19 23:06:48 usaea1satuas200 adclient[27640]: INFO AUDIT_TRAIL|Centrify Suite|Trusted Path|1.0|2700|Trusted path granted|5|user=usaea1satuas200$@ENA.US.EXPERIAN.LOCAL pid=27640 utc=1726787208403 centrifyEventID=23700 DASessID=N/A DAInst=N/A status=GRANTED server=ldap/mckbrdc1.br.experian.local@BR.EXPERIAN.LOCAL Sep 19 23:06:48 usaea1satuas200 adclient[27640]: INFO AUDIT_TRAIL|Centrify Suite|Trusted Path|1.0|2700|Trusted path granted|5|user=usaea1satuas200$@ENA.US.EXPERIAN.LOCAL pid=27640 utc=1726787208423 centrifyEventID=23700 DASessID=N/A DAInst=N/A status=GRANTED server=ldap/usaea1prootdc01.experian.local@EXPERIAN.LOCAL Sep 19 23:06:48 usaea1satuas200 adquery[1046266]: INFO AUDIT_TRAIL|Centrify Suite|Centrify Commands|1.0|2300|Query as root was successful|5|user=root pid=1046266 utc=1726787208449 centrifyEventID=20300 DASessID=N/A DAInst=N/A status=SUCCESS service=adquery parameters=user Sep 19 23:06:48 usaea1satuas200 adclient[27640]: INFO sam.loader DB: /var/centrifydc/dz.cache update successfully Sep 19 23:06:49 usaea1satuas200 adclient[27640]: INFO AUDIT_TRAIL|Centrify Suite|Trusted Path|1.0|2700|Trusted path granted|5|user=usaea1satuas200$@ENA.US.EXPERIAN.LOCAL pid=27640 utc=1726787209488 centrifyEventID=23700 DASessID=N/A DAInst=N/A status=GRANTED server=ldap/mckapacdc1.apac.experian.local@APAC.EXPERIAN.LOCAL Sep 19 23:06:49 usaea1satuas200 adclient[27640]: INFO AUDIT_TRAIL|Centrify Suite|Trusted Path|1.0|2700|Trusted path granted|5|user=usaea1satuas200$@ENA.US.EXPERIAN.LOCAL pid=27640 utc=1726787209551 centrifyEventID=23700 DASessID=N/A DAInst=N/A status=GRANTED server=ldap/usaea1prootdc01.experian.local@EXPERIAN.LOCAL Sep 19 23:06:49 usaea1satuas200 adclient[27640]: INFO AUDIT_TRAIL|Centrify Suite|Trusted Path|1.0|2700|Trusted path granted|5|user=usaea1satuas200$@ENA.US.EXPERIAN.LOCAL pid=27640 utc=1726787209563 centrifyEventID=23700 DASessID=N/A DAInst=N/A status=GRANTED server=ldap/usaea1prootdc01.experian.local@EXPERIAN.LOCAL Sep 19 23:09:30 usaea1satuas200 systemd[1]: Starting Automatically configure NetworkManager in cloud... Sep 19 23:09:30 usaea1satuas200 systemd[1]: nm-cloud-setup.service: Succeeded. Sep 19 23:09:30 usaea1satuas200 systemd[1]: Started Automatically configure NetworkManager in cloud.