=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2021.09.09 16:01:49 =~=~=~=~=~=~=~=~=~=~=~=  Carriage return. ise-node01-us-east/admin# show logging application ? is Application log file name (Max Size - 255) >Output Redirection. |Output modifiers. Carriage return. ise-node01-us-east/admin# show logging application ad_agent.log ? is >Output Redirection. tail Tail application log file |Output modifiers. Carriage return. ise-node01-us-east/admin# show logging application ad_agent.log tail ? is >Output Redirection. count Tail application log file |Output modifiers. Carriage return. ise-node01-us-east/admin# show logging application ad_agent.log tail count ? is <0-4294967295> Tail last count messages ise-node01-us-east/admin# show logging application ad_agent.log tail ise-node01-us-east/admin# show logging application ad_agent.log tail ise-node01-us-east/admin# ise-node01-us-east/admin# ^C ise-node01-us-east/admin# show logging application ad_agent.log tail 2021-09-09 20:31:06,910 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:07,910 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:08,910 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:09,910 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:10,911 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:11,911 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. --More-- c:49 2021-09-09 20:31:12,911 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:13,911 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:14,911 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:15,912 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:16,912 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:17,912 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve --More-- r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:18,912 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:19,912 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:20,913 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:21,913 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:22,913 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:23,913 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / --More-- opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:24,001 DEBUG ,139657475974912,Lsa User Manager - checking user credentials refresh list,LsaUmpCheckUsers(),lsass/server/auth-providers/ad-open -provider/lsaum_p.c:702 2021-09-09 20:31:24,001 DEBUG ,139657475974912,LsaDmpIsDomainOffline: checking status of domain CORP.STATIKNET.NET,LsaDmpIsDomainOffline(),lsass/server/auth-pr oviders/ad-open-provider/lsadm.c:3193 2021-09-09 20:31:24,001 DEBUG ,139657488619264,LsaDmpThreadRoutine: Invoking do main manager online detection thread,LsaDmpThreadRoutine(),lsass/server/auth-pro viders/ad-open-provider/lsadm.c:500 2021-09-09 20:31:24,001 DEBUG ,139657488619264,LsaDmpDetectTransitionOnlineAllD omains: Calling AD_GetAuthDomains() for join point corp.statiknet.net,LsaDmpDete ctTransitionOnlineAllDomains(),lsass/server/auth-providers/ad-open-provider/lsad m.c:3573 2021-09-09 20:31:24,001 DEBUG ,139657488619264,AD_GetAuthDomains invoked for co rp.statiknet.net,AD_GetAuthDomains(),lsass/server/auth-providers/ad-open-provide r/provider-main.c:6881 2021-09-09 20:31:24,001 DEBUG ,139657488619264,Status: LW_STATUS_OBJECT_NAME_NO T_FOUND = 0xC0000034 (-1073741772)],MemDbGetValue(),lwreg/server/providers/memor y/memdb.c:1520 2021-09-09 20:31:24,001 DEBUG ,139657488619264,Status: LW_STATUS_OBJECT_NAME_NO --More-- T_FOUND = 0xC0000034 (-1073741772)],MemGetValue(),lwreg/server/providers/memory/ memapi.c:698 2021-09-09 20:31:24,001 DEBUG ,139657488619264,Status: LW_STATUS_OBJECT_NAME_NO T_FOUND = 0xC0000034 (-1073741772)],RegTransactGetValueW(),lwreg/client/clientip c.c:809 2021-09-09 20:31:24,001 DEBUG ,139657488619264,Status: LW_STATUS_OBJECT_NAME_NO T_FOUND = 0xC0000034 (-1073741772)],LwNtRegGetValueA(),lwreg/client/regntclient. c:793 2021-09-09 20:31:24,001 DEBUG ,139657488619264,Error: 40700,RegShellUtilGetValu e(),lwreg/shellutil/rsutils.c:1463 2021-09-09 20:31:24,001 DEBUG ,139657488619264,AD_GetAuthDomains no authenticat ion domains for corp.statiknet.net,AD_GetAuthDomains(),lsass/server/auth-provide rs/ad-open-provider/provider-main.c:6927 2021-09-09 20:31:24,001 DEBUG ,139657488619264,LsaDmpDetectTransitionOnlineAllD omains: Calling LsaDmEnumDomainNames() to filter offline domains,LsaDmpDetectTra nsitionOnlineAllDomains(),lsass/server/auth-providers/ad-open-provider/lsadm.c:3 583 2021-09-09 20:31:24,001 DEBUG ,139657488619264,LsaDmpFilterOfflineCallback: exa mine domain corp.statiknet.net,LsaDmpFilterOfflineCallback(),lsass/server/auth-p roviders/ad-open-provider/lsadm.c:3458 2021-09-09 20:31:24,001 DEBUG ,139657488619264,LsaDmpFilterOfflineCallback: dom ain corp.statiknet.net is not marked offline (DC or GC).,LsaDmpFilterOfflineCall back(),lsass/server/auth-providers/ad-open-provider/lsadm.c:3489 --More-- 2021-09-09 20:31:24,001 DEBUG ,139657488619264,LsaDmpDetectTransitionOnlineAllD omains: 0 offline domains detected,LsaDmpDetectTransitionOnlineAllDomains(),lsas s/server/auth-providers/ad-open-provider/lsadm.c:3592 2021-09-09 20:31:24,001 DEBUG ,139657488619264,LsaDmpThreadRoutine: Sleeping do main manager online detection thread for 60 seconds ,LsaDmpThreadRoutine(),lsass /server/auth-providers/ad-open-provider/lsadm.c:471 2021-09-09 20:31:24,914 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:25,914 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:26,914 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:27,914 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:28,914 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / --More-- opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:29,915 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:30,915 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:31,915 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:32,915 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:33,915 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 --More-- 2021-09-09 20:31:34,916 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:35,916 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:36,916 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:37,916 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:38,916 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:39,531 DEBUG ,139658849834752,Permission granted for (uid = 30 0, gid = 300, pid = 8398) to open LsaIpcServer,LsaSrvIpcCheckPermissions(),lsass /server/api/ipc_state.c:85 --More-- 2021-09-09 20:31:39,531 VERBOSE,139658849834752,(session:3bfe140f101714f2-098877 22acddb133) Accepted ,lwmsg_peer_log_accept(), lwmsg/src/peer-log.c:230 2021-09-09 20:31:39,531 TRACE ,139658849834752,(session:3bfe140f101714f2-098877 22acddb133 >> 0) call req LSA_Q_PROVIDER_IO_CONTROL: { pszProvider = "lsa-activedirectory-provider" dwIoControlCode = 15 dwDataLen = 134 pData = },lwmsg_peer_log_message(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:39,531 DEBUG ,139657287292672,LwRtlSetThreadPriority: pid=2172 2 thread LWP=10887, set priority to -10,LwRtlSetThreadPriorityEx(),lwbase/src/th readpool-common.c:1186 2021-09-09 20:31:39,531 VERBOSE,139657287292672,ConfigManager::getInstance(): Re turning instance...,getInstance(),lsass/server/auth-providers/ad-open-provider/c onfig-manager/config_manager.cpp:41 2021-09-09 20:31:39,531 VERBOSE,139657287292672,ConfigManager::setConfig(): sett ing configuration,setConfig(),lsass/server/auth-providers/ad-open-provider/confi g-manager/config_manager.cpp:162 2021-09-09 20:31:39,531 VERBOSE,139657287292672,ConfigManager::parseXmlData(): p arsing configuration,parseXmlData(),lsass/server/auth-providers/ad-open-provider /config-manager/config_manager.cpp:94 --More-- 2021-09-09 20:31:39,531 VERBOSE,139657287292672,ConfigManager::extractHandlerCon fig(): extracting handler config,extractHandlerConfig(),lsass/server/auth-provid ers/ad-open-provider/config-manager/config_manager.cpp:179 2021-09-09 20:31:39,531 VERBOSE,139657287292672,ConfigManager::setConfig(): invo king handler authentication_domain with config :  ,setConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/config_ manager.cpp:170 2021-09-09 20:31:39,531 VERBOSE,139657287292672,AuthDomainHandler::getInstance() : returning instance,getInstance(),lsass/server/auth-providers/ad-open-provider /config-manager/auth_domain_handler.cpp:34 2021-09-09 20:31:39,532 VERBOSE,139657287292672,AuthDomainHandler::handler() - P arsing xml data,handler(),lsass/server/auth-providers/ad-open-provider/config-ma nager/auth_domain_handler.cpp:148 2021-09-09 20:31:39,532 VERBOSE,139657287292672,AuthDomainHandler::parseXmlConfi g() : parsing xml config  ,parseXmlConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/au th_domain_handler.cpp:54 2021-09-09 20:31:39,532 VERBOSE,139657287292672,AuthDomainHandler::handler() - w --More-- riting data to registry,handler(),lsass/server/auth-providers/ad-open-provider/c onfig-manager/auth_domain_handler.cpp:151 2021-09-09 20:31:39,532 VERBOSE,139657287292672,AuthDomainHandler::handler() - j p: corp.statiknet.net authentication domain disables, delete key from registry / n,handler(),lsass/server/auth-providers/ad-open-provider/config-manager/auth_dom ain_handler.cpp:163 2021-09-09 20:31:39,532 DEBUG ,139657287292672,Status: LW_STATUS_OBJECT_NAME_NO T_FOUND = 0xC0000034 (-1073741772)],RegTransactDeleteKeyValueW(),lwreg/client/cl ientipc.c:868 2021-09-09 20:31:39,532 DEBUG ,139657287292672,Status: LW_STATUS_OBJECT_NAME_NO T_FOUND = 0xC0000034 (-1073741772)],LwNtRegDeleteKeyValueA(),lwreg/client/regntc lient.c:320 2021-09-09 20:31:39,532 DEBUG ,139657287292672,Error: 40700,RegShellUtilDeleteV alue(),lwreg/shellutil/rsutils.c:1296 2021-09-09 20:31:39,532 VERBOSE,139657287292672,AuthDomainHandler::handler() - C annot delete registry key Services\lsass\Parameters\Providers\ActiveDirectory\CI SCO corp.statiknet.net (40700) /n,handler(),lsass/server/auth-providers/ad-open- provider/config-manager/auth_domain_handler.cpp:174 2021-09-09 20:31:39,532 DEBUG ,139657287292672,RegCache::deleteCache() called., deleteCache(),lwadvapi/threaded/regcache.cpp:381 2021-09-09 20:31:39,532 DEBUG ,139657287292672,RegCache::deleteCache() cache ve rsion=58,deleteCache(),lwadvapi/threaded/regcache.cpp:388 2021-09-09 20:31:39,532 TRACE ,139658849834752,(session:3bfe140f101714f2-098877 --More-- 22acddb133 >> 0) call res LSA_R_PROVIDER_IO_CONTROL_SUCCESS,lwmsg_peer_log_messa ge(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:39,532 DEBUG ,139657295685376,LwRtlSetThreadPriority: pid=2172 2 thread LWP=10886, set priority to -10,LwRtlSetThreadPriorityEx(),lwbase/src/th readpool-common.c:1186 2021-09-09 20:31:39,532 VERBOSE,139658849834752,(session:3bfe140f101714f2-098877 22acddb133) Dropping: LWMSG_STATUS_PEER_CLOSE,lwmsg_peer_task_handle_assoc_error (),lwmsg/src/peer-task.c:625 2021-09-09 20:31:39,532 DEBUG ,139658849834752,Permission granted for (uid = 30 0, gid = 300, pid = 8398) to open LsaIpcServer,LsaSrvIpcCheckPermissions(),lsass /server/api/ipc_state.c:85 2021-09-09 20:31:39,532 VERBOSE,139658849834752,(session:1626af4bab93ed9e-602a00 cc6bc26572) Accepted ,lwmsg_peer_log_accept(), lwmsg/src/peer-log.c:230 2021-09-09 20:31:39,532 TRACE ,139658849834752,(session:1626af4bab93ed9e-602a00 cc6bc26572 >> 0) call req LSA_Q_PROVIDER_IO_CONTROL: { pszProvider = "lsa-activedirectory-provider" dwIoControlCode = 15 dwDataLen = 499 pData = },lwmsg_peer_log_message(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:39,533 VERBOSE,139657287292672,ConfigManager::getInstance(): Re --More-- turning instance...,getInstance(),lsass/server/auth-providers/ad-open-provider/c onfig-manager/config_manager.cpp:41 2021-09-09 20:31:39,533 VERBOSE,139657287292672,ConfigManager::setConfig(): sett ing configuration,setConfig(),lsass/server/auth-providers/ad-open-provider/confi g-manager/config_manager.cpp:162 2021-09-09 20:31:39,533 VERBOSE,139657287292672,ConfigManager::parseXmlData(): p arsing configuration,parseXmlData(),lsass/server/auth-providers/ad-open-provider /config-manager/config_manager.cpp:94 2021-09-09 20:31:39,533 VERBOSE,139657287292672,ConfigManager::extractHandlerCon fig(): extracting handler config,extractHandlerConfig(),lsass/server/auth-provid ers/ad-open-provider/config-manager/config_manager.cpp:179 2021-09-09 20:31:39,533 VERBOSE,139657287292672,ConfigManager::setConfig(): invo king handler identity_rewrite with config : 024host/[HOSTNAME].[DOMAIN]024host/[HOSTNAME].[DOMAIN]015host/[HOSTNAME]015host/[HOSTNAME]019[DOMAIN]\[IDENTITY]019[DOMAIN]\[IDENTITY]019[ IDENTITY]@[DOMAIN]019[IDENTITY]@[DOMAIN]010[IDENTITY] 010[IDENTITY] ,setConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/config_ manager.cpp:170 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::handler( ) - Parsing xml data,handler(),lsass/server/auth-providers/ad-open-provider/conf --More-- ig-manager/identity_rewrite_handler.cpp:225 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::parseXml Config() : parsing xml config 024host/[HOSTNAME].[DOMAIN]024host/[HOSTNAME].[DOMAIN]015host/[HOSTNAME]015host/[HOSTNAME]019[DOMAIN]\[IDENTITY]019[DOMAIN]\[IDENTITY]019[ IDENTITY]@[DOMAIN]019[IDENTITY]@[DOMAIN]010[IDENTITY] 010[IDENTITY] ,parseXmlConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/id entity_rewrite_handler.cpp:65 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::parseXml Config() : rewrite rules for corp.statiknet.net is enable,parseXmlConfig(),lsass /server/auth-providers/ad-open-provider/config-manager/identity_rewrite_handler. cpp:123 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::parseIde ntityRewriteRule() - XML is: 024host/[HOSTNAME].[DOMAIN]024host/[HOSTNAME].[DOMA IN], Rule is: host/[HOSTNAME].[DOMAIN], Result is: host/[HOSTNAME].[DOMAIN],pars eIdentityRewriteRule(),lsass/server/auth-providers/ad-open-provider/config-manag er/identity_rewrite_handler.cpp:205 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::parseIde ntityRewriteRule() - XML is: 015host/[HOSTNAME]015host/[HOSTNAME], Rule is: host /[HOSTNAME], Result is: host/[HOSTNAME],parseIdentityRewriteRule(),lsass/server/ --More-- auth-providers/ad-open-provider/config-manager/identity_rewrite_handler.cpp:205 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::parseIde ntityRewriteRule() - XML is: 019[DOMAIN]\[IDENTITY]019[DOMAIN]\[IDENTITY], Rule is: [DOMAIN]\[IDENTITY], Result is: [DOMAIN]\[IDENTITY],parseIdentityRewriteRule (),lsass/server/auth-providers/ad-open-provider/config-manager/identity_rewrite_ handler.cpp:205 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::parseIde ntityRewriteRule() - XML is: 019[IDENTITY]@[DOMAIN]019[IDENTITY]@[DOMAIN], Rule is: [IDENTITY]@[DOMAIN], Result is: [IDENTITY]@[DOMAIN],parseIdentityRewriteRule (),lsass/server/auth-providers/ad-open-provider/config-manager/identity_rewrite_ handler.cpp:205 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::parseIde ntityRewriteRule() - XML is: 010[IDENTITY]010[IDENTITY], Rule is: [IDENTITY], Re sult is: [IDENTITY],parseIdentityRewriteRule(),lsass/server/auth-providers/ad-op en-provider/config-manager/identity_rewrite_handler.cpp:205 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::handler( ) - writing data to registry,handler(),lsass/server/auth-providers/ad-open-provi der/config-manager/identity_rewrite_handler.cpp:231 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::handler( ) - Added values : host/[HOSTNAME].[DOMAIN] - host/[HOSTNAME].[DOMAIN],handler() ,lsass/server/auth-providers/ad-open-provider/config-manager/identity_rewrite_ha ndler.cpp:279 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::handler( --More-- ) - Added values : host/[HOSTNAME] - host/[HOSTNAME],handler(),lsass/server/auth -providers/ad-open-provider/config-manager/identity_rewrite_handler.cpp:279 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::handler( ) - Added values : [DOMAIN]\[IDENTITY] - [DOMAIN]\[IDENTITY],handler(),lsass/ser ver/auth-providers/ad-open-provider/config-manager/identity_rewrite_handler.cpp: 279 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::handler( ) - Added values : [IDENTITY]@[DOMAIN] - [IDENTITY]@[DOMAIN],handler(),lsass/ser ver/auth-providers/ad-open-provider/config-manager/identity_rewrite_handler.cpp: 279 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::handler( ) - Added values : [IDENTITY] - [IDENTITY],handler(),lsass/server/auth-providers /ad-open-provider/config-manager/identity_rewrite_handler.cpp:279 2021-09-09 20:31:39,533 VERBOSE,139657287292672,IdentityRewriteHandler::handler( ) - data written to registry,handler(),lsass/server/auth-providers/ad-open-provi der/config-manager/identity_rewrite_handler.cpp:293 2021-09-09 20:31:39,533 DEBUG ,139657287292672,RegCache::deleteCache() called., deleteCache(),lwadvapi/threaded/regcache.cpp:381 2021-09-09 20:31:39,533 DEBUG ,139657287292672,RegCache::deleteCache() cache ve rsion=59,deleteCache(),lwadvapi/threaded/regcache.cpp:388 2021-09-09 20:31:39,533 TRACE ,139658849834752,(session:1626af4bab93ed9e-602a00 cc6bc26572 >> 0) call res LSA_R_PROVIDER_IO_CONTROL_SUCCESS,lwmsg_peer_log_messa ge(),lwmsg/src/peer-log.c:153 --More-- 2021-09-09 20:31:39,533 VERBOSE,139658849834752,(session:1626af4bab93ed9e-602a00 cc6bc26572) Dropping: LWMSG_STATUS_PEER_CLOSE,lwmsg_peer_task_handle_assoc_error (),lwmsg/src/peer-task.c:625 2021-09-09 20:31:39,533 DEBUG ,139658849834752,Permission granted for (uid = 30 0, gid = 300, pid = 8398) to open LsaIpcServer,LsaSrvIpcCheckPermissions(),lsass /server/api/ipc_state.c:85 2021-09-09 20:31:39,533 VERBOSE,139658849834752,(session:436dc6387d7d4317-47fc25 67cfc4f05f) Accepted ,lwmsg_peer_log_accept(), lwmsg/src/peer-log.c:230 2021-09-09 20:31:39,534 TRACE ,139658849834752,(session:436dc6387d7d4317-47fc25 67cfc4f05f >> 0) call req LSA_Q_PROVIDER_IO_CONTROL: { pszProvider = "lsa-activedirectory-provider" dwIoControlCode = 15 dwDataLen = 145 pData = },lwmsg_peer_log_message(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:39,534 VERBOSE,139657295685376,ConfigManager::getInstance(): Re turning instance...,getInstance(),lsass/server/auth-providers/ad-open-provider/c onfig-manager/config_manager.cpp:41 2021-09-09 20:31:39,534 VERBOSE,139657295685376,ConfigManager::setConfig(): sett ing configuration,setConfig(),lsass/server/auth-providers/ad-open-provider/confi g-manager/config_manager.cpp:162 --More-- 2021-09-09 20:31:39,534 VERBOSE,139657295685376,ConfigManager::parseXmlData(): p arsing configuration,parseXmlData(),lsass/server/auth-providers/ad-open-provider /config-manager/config_manager.cpp:94 2021-09-09 20:31:39,534 VERBOSE,139657295685376,ConfigManager::extractHandlerCon fig(): extracting handler config,extractHandlerConfig(),lsass/server/auth-provid ers/ad-open-provider/config-manager/config_manager.cpp:179 2021-09-09 20:31:39,534 VERBOSE,139657295685376,ConfigManager::setConfig(): invo king handler registry_cleaner with config : ,setConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/config_ manager.cpp:170 2021-09-09 20:31:39,534 VERBOSE,139657295685376,PbisRegistryHandler::getInstance () : returning instance,getInstance(),lsass/server/auth-providers/ad-open-provid er/config-manager/pbis_registry_handler.cpp:33 2021-09-09 20:31:39,534 VERBOSE,139657295685376,PbisRegistryHandler::handler() - Parsing xml data,handler(),lsass/server/auth-providers/ad-open-provider/config- manager/pbis_registry_handler.cpp:152 2021-09-09 20:31:39,534 VERBOSE,139657295685376,PbisRegistryHandler::parseXmlCon fig() : parsing xml config --More-- ,parseXmlConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/pb is_registry_handler.cpp:71 2021-09-09 20:31:39,534 VERBOSE,139657295685376,PbisRegistryHandler::handler() - Examining data,handler(),lsass/server/auth-providers/ad-open-provider/config-ma nager/pbis_registry_handler.cpp:155 2021-09-09 20:31:39,534 DEBUG ,139657295685376,RegCache::deleteCache() called., deleteCache(),lwadvapi/threaded/regcache.cpp:381 2021-09-09 20:31:39,534 DEBUG ,139657295685376,RegCache::deleteCache() cache ve rsion=60,deleteCache(),lwadvapi/threaded/regcache.cpp:388 2021-09-09 20:31:39,534 TRACE ,139658849834752,(session:436dc6387d7d4317-47fc25 67cfc4f05f >> 0) call res LSA_R_PROVIDER_IO_CONTROL_SUCCESS,lwmsg_peer_log_messa ge(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:39,534 VERBOSE,139658849834752,(session:436dc6387d7d4317-47fc25 67cfc4f05f) Dropping: LWMSG_STATUS_PEER_CLOSE,lwmsg_peer_task_handle_assoc_error (),lwmsg/src/peer-task.c:625 2021-09-09 20:31:39,917 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:40,112 DEBUG ,139658849834752,Permission granted for (uid = 30 0, gid = 300, pid = 8398) to open LsaIpcServer,LsaSrvIpcCheckPermissions(),lsass /server/api/ipc_state.c:85 2021-09-09 20:31:40,112 VERBOSE,139658849834752,(session:3d563e5cf4e51d2f-bf170d --More-- e53d00a589) Accepted ,lwmsg_peer_log_accept(), lwmsg/src/peer-log.c:230 2021-09-09 20:31:40,112 TRACE ,139658849834752,(session:3d563e5cf4e51d2f-bf170d e53d00a589 >> 0) call req LSA_Q_PROVIDER_IO_CONTROL: { pszProvider = "lsa-activedirectory-provider" dwIoControlCode = 15 dwDataLen = 134 pData = },lwmsg_peer_log_message(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:40,112 VERBOSE,139657287292672,ConfigManager::getInstance(): Re turning instance...,getInstance(),lsass/server/auth-providers/ad-open-provider/c onfig-manager/config_manager.cpp:41 2021-09-09 20:31:40,112 VERBOSE,139657287292672,ConfigManager::setConfig(): sett ing configuration,setConfig(),lsass/server/auth-providers/ad-open-provider/confi g-manager/config_manager.cpp:162 2021-09-09 20:31:40,113 VERBOSE,139657287292672,ConfigManager::parseXmlData(): p arsing configuration,parseXmlData(),lsass/server/auth-providers/ad-open-provider /config-manager/config_manager.cpp:94 2021-09-09 20:31:40,113 VERBOSE,139657287292672,ConfigManager::extractHandlerCon fig(): extracting handler config,extractHandlerConfig(),lsass/server/auth-provid ers/ad-open-provider/config-manager/config_manager.cpp:179 2021-09-09 20:31:40,113 VERBOSE,139657287292672,ConfigManager::setConfig(): invo --More-- king handler authentication_domain with config :  ,setConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/config_ manager.cpp:170 2021-09-09 20:31:40,113 VERBOSE,139657287292672,AuthDomainHandler::getInstance() : returning instance,getInstance(),lsass/server/auth-providers/ad-open-provider /config-manager/auth_domain_handler.cpp:34 2021-09-09 20:31:40,113 VERBOSE,139657287292672,AuthDomainHandler::handler() - P arsing xml data,handler(),lsass/server/auth-providers/ad-open-provider/config-ma nager/auth_domain_handler.cpp:148 2021-09-09 20:31:40,113 VERBOSE,139657287292672,AuthDomainHandler::parseXmlConfi g() : parsing xml config  ,parseXmlConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/au th_domain_handler.cpp:54 2021-09-09 20:31:40,113 VERBOSE,139657287292672,AuthDomainHandler::handler() - w riting data to registry,handler(),lsass/server/auth-providers/ad-open-provider/c onfig-manager/auth_domain_handler.cpp:151 2021-09-09 20:31:40,113 VERBOSE,139657287292672,AuthDomainHandler::handler() - j p: corp.statiknet.net authentication domain disables, delete key from registry / --More-- n,handler(),lsass/server/auth-providers/ad-open-provider/config-manager/auth_dom ain_handler.cpp:163 2021-09-09 20:31:40,113 DEBUG ,139657287292672,Status: LW_STATUS_OBJECT_NAME_NO T_FOUND = 0xC0000034 (-1073741772)],RegTransactDeleteKeyValueW(),lwreg/client/cl ientipc.c:868 2021-09-09 20:31:40,113 DEBUG ,139657287292672,Status: LW_STATUS_OBJECT_NAME_NO T_FOUND = 0xC0000034 (-1073741772)],LwNtRegDeleteKeyValueA(),lwreg/client/regntc lient.c:320 2021-09-09 20:31:40,113 DEBUG ,139657287292672,Error: 40700,RegShellUtilDeleteV alue(),lwreg/shellutil/rsutils.c:1296 2021-09-09 20:31:40,113 VERBOSE,139657287292672,AuthDomainHandler::handler() - C annot delete registry key Services\lsass\Parameters\Providers\ActiveDirectory\CI SCO corp.statiknet.net (40700) /n,handler(),lsass/server/auth-providers/ad-open- provider/config-manager/auth_domain_handler.cpp:174 2021-09-09 20:31:40,113 DEBUG ,139657287292672,RegCache::deleteCache() called., deleteCache(),lwadvapi/threaded/regcache.cpp:381 2021-09-09 20:31:40,113 DEBUG ,139657287292672,RegCache::deleteCache() cache ve rsion=61,deleteCache(),lwadvapi/threaded/regcache.cpp:388 2021-09-09 20:31:40,113 TRACE ,139658849834752,(session:3d563e5cf4e51d2f-bf170d e53d00a589 >> 0) call res LSA_R_PROVIDER_IO_CONTROL_SUCCESS,lwmsg_peer_log_messa ge(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:40,113 VERBOSE,139658849834752,(session:3d563e5cf4e51d2f-bf170d e53d00a589) Dropping: LWMSG_STATUS_PEER_CLOSE,lwmsg_peer_task_handle_assoc_error --More-- (),lwmsg/src/peer-task.c:625 2021-09-09 20:31:40,120 DEBUG ,139658849834752,Permission granted for (uid = 30 0, gid = 300, pid = 8398) to open LsaIpcServer,LsaSrvIpcCheckPermissions(),lsass /server/api/ipc_state.c:85 2021-09-09 20:31:40,120 VERBOSE,139658849834752,(session:9a6e61efcdbc71c3-8510e7 8648a07afb) Accepted ,lwmsg_peer_log_accept(), lwmsg/src/peer-log.c:230 2021-09-09 20:31:40,120 TRACE ,139658849834752,(session:9a6e61efcdbc71c3-8510e7 8648a07afb >> 0) call req LSA_Q_PROVIDER_IO_CONTROL: { pszProvider = "lsa-activedirectory-provider" dwIoControlCode = 15 dwDataLen = 499 pData = },lwmsg_peer_log_message(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:40,120 VERBOSE,139657295685376,ConfigManager::getInstance(): Re turning instance...,getInstance(),lsass/server/auth-providers/ad-open-provider/c onfig-manager/config_manager.cpp:41 2021-09-09 20:31:40,120 VERBOSE,139657295685376,ConfigManager::setConfig(): sett ing configuration,setConfig(),lsass/server/auth-providers/ad-open-provider/confi g-manager/config_manager.cpp:162 2021-09-09 20:31:40,120 VERBOSE,139657295685376,ConfigManager::parseXmlData(): p arsing configuration,parseXmlData(),lsass/server/auth-providers/ad-open-provider --More-- /config-manager/config_manager.cpp:94 2021-09-09 20:31:40,121 VERBOSE,139657295685376,ConfigManager::extractHandlerCon fig(): extracting handler config,extractHandlerConfig(),lsass/server/auth-provid ers/ad-open-provider/config-manager/config_manager.cpp:179 2021-09-09 20:31:40,121 VERBOSE,139657295685376,ConfigManager::setConfig(): invo king handler identity_rewrite with config : 024host/[HOSTNAME].[DOMAIN]024host/[HOSTNAME].[DOMAIN]015host/[HOSTNAME]015host/[HOSTNAME]019[DOMAIN]\[IDENTITY]019[DOMAIN]\[IDENTITY]019[ IDENTITY]@[DOMAIN]019[IDENTITY]@[DOMAIN]010[IDENTITY] 010[IDENTITY] ,setConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/config_ manager.cpp:170 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::handler( ) - Parsing xml data,handler(),lsass/server/auth-providers/ad-open-provider/conf ig-manager/identity_rewrite_handler.cpp:225 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::parseXml Config() : parsing xml config 024host/[HOSTNAME].[DOMAIN]024host/[HOSTNAME].[DOMAIN]015host/[HOSTNAME]015host/[HOSTNAME]019[DOMAIN]\[IDENTITY]019[DOMAIN]\[IDENTITY]019[ --More-- IDENTITY]@[DOMAIN]019[IDENTITY]@[DOMAIN]010[IDENTITY] 010[IDENTITY] ,parseXmlConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/id entity_rewrite_handler.cpp:65 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::parseXml Config() : rewrite rules for corp.statiknet.net is enable,parseXmlConfig(),lsass /server/auth-providers/ad-open-provider/config-manager/identity_rewrite_handler. cpp:123 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::parseIde ntityRewriteRule() - XML is: 024host/[HOSTNAME].[DOMAIN]024host/[HOSTNAME].[DOMA IN], Rule is: host/[HOSTNAME].[DOMAIN], Result is: host/[HOSTNAME].[DOMAIN],pars eIdentityRewriteRule(),lsass/server/auth-providers/ad-open-provider/config-manag er/identity_rewrite_handler.cpp:205 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::parseIde ntityRewriteRule() - XML is: 015host/[HOSTNAME]015host/[HOSTNAME], Rule is: host /[HOSTNAME], Result is: host/[HOSTNAME],parseIdentityRewriteRule(),lsass/server/ auth-providers/ad-open-provider/config-manager/identity_rewrite_handler.cpp:205 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::parseIde ntityRewriteRule() - XML is: 019[DOMAIN]\[IDENTITY]019[DOMAIN]\[IDENTITY], Rule is: [DOMAIN]\[IDENTITY], Result is: [DOMAIN]\[IDENTITY],parseIdentityRewriteRule (),lsass/server/auth-providers/ad-open-provider/config-manager/identity_rewrite_ handler.cpp:205 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::parseIde --More-- ntityRewriteRule() - XML is: 019[IDENTITY]@[DOMAIN]019[IDENTITY]@[DOMAIN], Rule is: [IDENTITY]@[DOMAIN], Result is: [IDENTITY]@[DOMAIN],parseIdentityRewriteRule (),lsass/server/auth-providers/ad-open-provider/config-manager/identity_rewrite_ handler.cpp:205 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::parseIde ntityRewriteRule() - XML is: 010[IDENTITY]010[IDENTITY], Rule is: [IDENTITY], Re sult is: [IDENTITY],parseIdentityRewriteRule(),lsass/server/auth-providers/ad-op en-provider/config-manager/identity_rewrite_handler.cpp:205 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::handler( ) - writing data to registry,handler(),lsass/server/auth-providers/ad-open-provi der/config-manager/identity_rewrite_handler.cpp:231 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::handler( ) - Added values : host/[HOSTNAME].[DOMAIN] - host/[HOSTNAME].[DOMAIN],handler() ,lsass/server/auth-providers/ad-open-provider/config-manager/identity_rewrite_ha ndler.cpp:279 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::handler( ) - Added values : host/[HOSTNAME] - host/[HOSTNAME],handler(),lsass/server/auth -providers/ad-open-provider/config-manager/identity_rewrite_handler.cpp:279 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::handler( ) - Added values : [DOMAIN]\[IDENTITY] - [DOMAIN]\[IDENTITY],handler(),lsass/ser ver/auth-providers/ad-open-provider/config-manager/identity_rewrite_handler.cpp: 279 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::handler( --More-- ) - Added values : [IDENTITY]@[DOMAIN] - [IDENTITY]@[DOMAIN],handler(),lsass/ser ver/auth-providers/ad-open-provider/config-manager/identity_rewrite_handler.cpp: 279 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::handler( ) - Added values : [IDENTITY] - [IDENTITY],handler(),lsass/server/auth-providers /ad-open-provider/config-manager/identity_rewrite_handler.cpp:279 2021-09-09 20:31:40,121 VERBOSE,139657295685376,IdentityRewriteHandler::handler( ) - data written to registry,handler(),lsass/server/auth-providers/ad-open-provi der/config-manager/identity_rewrite_handler.cpp:293 2021-09-09 20:31:40,121 DEBUG ,139657295685376,RegCache::deleteCache() called., deleteCache(),lwadvapi/threaded/regcache.cpp:381 2021-09-09 20:31:40,121 DEBUG ,139657295685376,RegCache::deleteCache() cache ve rsion=62,deleteCache(),lwadvapi/threaded/regcache.cpp:388 2021-09-09 20:31:40,121 TRACE ,139658849834752,(session:9a6e61efcdbc71c3-8510e7 8648a07afb >> 0) call res LSA_R_PROVIDER_IO_CONTROL_SUCCESS,lwmsg_peer_log_messa ge(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:40,121 VERBOSE,139658849834752,(session:9a6e61efcdbc71c3-8510e7 8648a07afb) Dropping: LWMSG_STATUS_PEER_CLOSE,lwmsg_peer_task_handle_assoc_error (),lwmsg/src/peer-task.c:625 2021-09-09 20:31:40,126 DEBUG ,139658849834752,Permission granted for (uid = 30 0, gid = 300, pid = 8398) to open LsaIpcServer,LsaSrvIpcCheckPermissions(),lsass /server/api/ipc_state.c:85 2021-09-09 20:31:40,126 VERBOSE,139658849834752,(session:934e674aae20612f-afc4bf --More-- ed2e683989) Accepted ,lwmsg_peer_log_accept(), lwmsg/src/peer-log.c:230 2021-09-09 20:31:40,126 TRACE ,139658849834752,(session:934e674aae20612f-afc4bf ed2e683989 >> 0) call req LSA_Q_PROVIDER_IO_CONTROL: { pszProvider = "lsa-activedirectory-provider" dwIoControlCode = 15 dwDataLen = 145 pData = },lwmsg_peer_log_message(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:40,126 VERBOSE,139657287292672,ConfigManager::getInstance(): Re turning instance...,getInstance(),lsass/server/auth-providers/ad-open-provider/c onfig-manager/config_manager.cpp:41 2021-09-09 20:31:40,126 VERBOSE,139657287292672,ConfigManager::setConfig(): sett ing configuration,setConfig(),lsass/server/auth-providers/ad-open-provider/confi g-manager/config_manager.cpp:162 2021-09-09 20:31:40,126 VERBOSE,139657287292672,ConfigManager::parseXmlData(): p arsing configuration,parseXmlData(),lsass/server/auth-providers/ad-open-provider /config-manager/config_manager.cpp:94 2021-09-09 20:31:40,126 VERBOSE,139657287292672,ConfigManager::extractHandlerCon fig(): extracting handler config,extractHandlerConfig(),lsass/server/auth-provid ers/ad-open-provider/config-manager/config_manager.cpp:179 2021-09-09 20:31:40,126 VERBOSE,139657287292672,ConfigManager::setConfig(): invo --More-- king handler registry_cleaner with config : ,setConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/config_ manager.cpp:170 2021-09-09 20:31:40,126 VERBOSE,139657287292672,PbisRegistryHandler::getInstance () : returning instance,getInstance(),lsass/server/auth-providers/ad-open-provid er/config-manager/pbis_registry_handler.cpp:33 2021-09-09 20:31:40,126 VERBOSE,139657287292672,PbisRegistryHandler::handler() - Parsing xml data,handler(),lsass/server/auth-providers/ad-open-provider/config- manager/pbis_registry_handler.cpp:152 2021-09-09 20:31:40,126 VERBOSE,139657287292672,PbisRegistryHandler::parseXmlCon fig() : parsing xml config ,parseXmlConfig(),lsass/server/auth-providers/ad-open-provider/config-manager/pb is_registry_handler.cpp:71 2021-09-09 20:31:40,127 VERBOSE,139657287292672,PbisRegistryHandler::handler() - Examining data,handler(),lsass/server/auth-providers/ad-open-provider/config-ma nager/pbis_registry_handler.cpp:155 2021-09-09 20:31:40,127 DEBUG ,139657287292672,RegCache::deleteCache() called., deleteCache(),lwadvapi/threaded/regcache.cpp:381 --More-- 2021-09-09 20:31:40,127 DEBUG ,139657287292672,RegCache::deleteCache() cache ve rsion=63,deleteCache(),lwadvapi/threaded/regcache.cpp:388 2021-09-09 20:31:40,127 TRACE ,139658849834752,(session:934e674aae20612f-afc4bf ed2e683989 >> 0) call res LSA_R_PROVIDER_IO_CONTROL_SUCCESS,lwmsg_peer_log_messa ge(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:40,127 VERBOSE,139658849834752,(session:934e674aae20612f-afc4bf ed2e683989) Dropping: LWMSG_STATUS_PEER_CLOSE,lwmsg_peer_task_handle_assoc_error (),lwmsg/src/peer-task.c:625 2021-09-09 20:31:40,546 DEBUG ,139658849834752,Permission granted for (uid = 30 0, gid = 300, pid = 8398) to open LsaIpcServer,LsaSrvIpcCheckPermissions(),lsass /server/api/ipc_state.c:85 2021-09-09 20:31:40,546 VERBOSE,139658849834752,(session:9ba9f57c26ad6fb7-8a197e 9221722a41) Accepted ,lwmsg_peer_log_accept(), lwmsg/src/peer-log.c:230 2021-09-09 20:31:40,546 TRACE ,139658849834752,(session:9ba9f57c26ad6fb7-8a197e 9221722a41 >> 0) call req LSA_Q_GET_TRUSTED_DOMAIN_STATUS: "lsa-activedirectory- provider:corp.statiknet.net",lwmsg_peer_log_message(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:40,546 VERBOSE,139657295685376,LsaSrvGetTrustedDomainStatus: pr ovider=lsa-activedirectory-provider, instance=corp.statiknet.net,LsaSrvGetTruste dDomainStatus(),lsass/server/api/status.c:281 2021-09-09 20:31:40,546 DEBUG ,139657295685376,Switched gss krb5 credentials pa th from to FILE:/var/lib/pbis/krb5cc_lsass.CORP.STATIKNET.NET,LwKrb5SetTh readDefaultCachePath(),lwadvapi/threaded/lwkrb5.c:485 --More-- 2021-09-09 20:31:40,546 TRACE ,139658849834752,(session:9ba9f57c26ad6fb7-8a197e 9221722a41 >> 0) call res LSA_R_GET_TRUSTED_DOMAIN_STATUS_SUCCESS: { dwNumTrustedDomains = 1 pTrustedDomainInfoArray = { { pszDnsDomain = "corp.statiknet.net" pszNetbiosDomain = "STATIKNET" pszTrusteeDnsDomain = pszDomainSID = "S-1-5-21-2945959796-1883129701-87330482" pszDomainGUID = "00000000-0000-0000-0000-000000000000" pszForestName = "corp.statiknet.net" pszClientSiteName = "NYROCHUB" dwTrustFlags = 29 dwTrustType = 2 dwTrustAttributes = 0 dwTrustDirection = 4 dwTrustMode = 2 dwDomainFlags = 1 pDCInfo = pGCInfo = bIsAuthenticable = 1 --More-- dwNotAuthenticableReason = 0 } } },lwmsg_peer_log_message(),lwmsg/src/peer-log.c:153 2021-09-09 20:31:40,546 VERBOSE,139658849834752,(session:9ba9f57c26ad6fb7-8a197e 9221722a41) Dropping: LWMSG_STATUS_PEER_CLOSE,lwmsg_peer_task_handle_assoc_error (),lwmsg/src/peer-task.c:625 2021-09-09 20:31:40,917 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:41,917 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:42,917 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:43,917 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 --More-- 2021-09-09 20:31:44,918 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:44,000 DEBUG ,139658140751616,MemDbExportToFileThread: Exporti ng registry to save file...,MemDbExportToFileThread(),lwreg/server/providers/mem ory/memdb.c:572 2021-09-09 20:31:44,000 DEBUG ,139658140751616,MemDbStackPush: Max stack depth 1,MemDbStackPush(),lwreg/server/providers/memory/memdb.c:1934 2021-09-09 20:31:44,000 DEBUG ,139658140751616,MemDbStackPush: Max stack depth 2,MemDbStackPush(),lwreg/server/providers/memory/memdb.c:1934 2021-09-09 20:31:44,000 DEBUG ,139658140751616,MemDbStackPush: Max stack depth 3,MemDbStackPush(),lwreg/server/providers/memory/memdb.c:1934 2021-09-09 20:31:44,000 DEBUG ,139658140751616,MemDbStackPush: Max stack depth 4,MemDbStackPush(),lwreg/server/providers/memory/memdb.c:1934 2021-09-09 20:31:44,000 DEBUG ,139658140751616,MemDbStackPush: Max stack depth 5,MemDbStackPush(),lwreg/server/providers/memory/memdb.c:1934 2021-09-09 20:31:44,000 DEBUG ,139658140751616,MemDbStackPush: Max stack depth 6,MemDbStackPush(),lwreg/server/providers/memory/memdb.c:1934 2021-09-09 20:31:44,000 DEBUG ,139658140751616,MemDbStackPush: Max stack depth 7,MemDbStackPush(),lwreg/server/providers/memory/memdb.c:1934 2021-09-09 20:31:44,000 DEBUG ,139658140751616,MemDbStackPush: Max stack depth 8,MemDbStackPush(),lwreg/server/providers/memory/memdb.c:1934 --More-- 2021-09-09 20:31:44,001 DEBUG ,139658140751616,MemDbStackPush: Max stack depth 9,MemDbStackPush(),lwreg/server/providers/memory/memdb.c:1934 2021-09-09 20:31:44,001 DEBUG ,139658140751616,MemDbStackPush: Max stack depth 10,MemDbStackPush(),lwreg/server/providers/memory/memdb.c:1934 2021-09-09 20:31:44,002 DEBUG ,139658140751616,MemDbStackPush: Max stack depth 11,MemDbStackPush(),lwreg/server/providers/memory/memdb.c:1934 2021-09-09 20:31:45,006 DEBUG ,139658140751616,Status: UNKNOWN = 0x000010D2 (43 06)],MemDbStackPop(),lwreg/server/providers/memory/memdb.c:1953 2021-09-09 20:31:45,125 INFO ,139658140751616,MemDbExportToFileThread: Exporti ng registry to save file completed.,MemDbExportToFileThread(),lwreg/server/provi ders/memory/memdb.c:575 2021-09-09 20:31:45,918 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:46,918 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:47,924 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 --More-- 2021-09-09 20:31:48,925 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:49,925 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:50,926 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:51,926 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:52,926 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:53,926 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. --More-- c:49 2021-09-09 20:31:54,934 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:55,934 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:56,935 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:57,935 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:58,935 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:31:59,935 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve --More-- r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 2021-09-09 20:32:00,935 DEBUG ,139657505404672,IsAdrtShutdown() - Marker file / opt/pbis/var/.lwsmd_marker exists. Adrt is running.,IsAdrtShutdown(),lsass/serve r/auth-providers/ad-open-provider/background-tasks/jp_periodic_trusts_discovery. c:49 ise-node01-us-east/admin#