Client Daemon Event Log:
FINE: Fri November 15 09:19:20.624 PST 2019 Configuration::getClientHomeEnvOrDefault. ENV{CSPM_CLIENT_HOME}=null
FINE: Fri November 15 09:19:20.624 PST 2019 Configuration::getClientHomeEnvOrDefault. DEFAULT{CSPM_CLIENT_HOME}=C:\cspm\cloakware
FINE: Fri November 15 09:19:20.624 PST 2019 Configuration::getClientHomeEnvOrDefault. ENV{CSPM_CLIENT_HOME}=null
FINE: Fri November 15 09:19:20.624 PST 2019 Configuration::getClientHomeEnvOrDefault. DEFAULT{CSPM_CLIENT_HOME}=C:\cspm\cloakware
WARNING: Fri November 15 09:19:20.624 PST 2019 ClientDaemonManager::main. Cache file: C:\cspm\cloakware\cspmclient\config\data\.cspmclient.dat does not exist
FINE: Fri November 15 09:19:20.654 PST 2019 XMLJDomParserForConfig::parseXML. Sizeof server array: 1
INFO: Fri November 15 09:19:20.654 PST 2019 XMLJDomParserForConfig::parseXML. Configuration file is loaded
FINE: Fri November 15 09:19:20.654 PST 2019 XMLJDomParserForConfig::parseXML. Sizeof server array: 1
INFO: Fri November 15 09:19:20.654 PST 2019 XMLJDomParserForConfig::parseXML. Configuration file is loaded
INFO: Fri November 15 09:19:20.654 PST 2019 ApplicationCSPMAgent::initAppConfig. CPA Proxy is in FIPS mode
INFO: Fri November 15 09:19:20.811 PST 2019 ApplicationCSPMAgent::setupServer. CSPM Agent is on line...
FINE: Fri November 15 09:19:20.874 PST 2019 HttpService::getHttpsConnections. CSPM Server name: ARAMISCAPAM001.laboratorio.local CSPM Server port: 
FINE: Fri November 15 09:19:20.874 PST 2019 HttpService::getHttpsConnection. https://ARAMISCAPAM001.laboratorio.local/cspm/servlet/cspm?commandName=clientLogin&port=27077&osarch=x86&enablefips=true&osversion=6.3&nodeid=%3C%3Fxml+version%3D%221.0%22+encoding%3D%22utf-8%22+%3F%3E%3Cnodeid%3E%3Cmacaddr%3E00%3A0C%3A29%3AF2%3A4C%3AAC%3C%2Fmacaddr%3E%3Cmacaddr%3E00%3A0C%3A29%3AF2%3A4C%3AA2%3C%2Fmacaddr%3E%3Cmachineid%3E4_c5d1198_0_0-Intel-PIIX4_Internal_IDE_Channel%3C%2Fmachineid%3E%3Capplicationtype%3Ecspm_agent%3C%2Fapplicationtype%3E%3C%2Fnodeid%3E&version=4.16.1&osname=Windows+Server+2012+R2
FINE: Fri November 15 09:19:20.905 PST 2019 HttpService::httpsGetInputStream. Start
FINE: Fri November 15 09:19:20.905 PST 2019 CryptoManager::initialize. Instantiating crypto type: CRYPTO_TYPE_FIPS
FINE: Fri November 15 09:19:22.264 PST 2019 CspmClientUtil::genHashForLogin. Hashing string: 10.0.0.2212019-11-15 09:19:20, Hash value: sQhS1nhNnHnWUw7rHwvuLNc0c4Q=
INFO: Fri November 15 09:19:23.561 PST 2019 HttpService::httpsGetInputStream. Complete get input stream from CSPM Server
FINE: Fri November 15 09:19:23.623 PST 2019 Cache::insertContentKey. Key created. Client is ready. Key: 0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:19:23.623 PST 2019 CacheBase::setKeyUpdateTime. Setup cache key update time: 1573838363623
INFO: Fri November 15 09:19:23.623 PST 2019 Cache::insertContentKey. Key created. Client is ready.
INFO: Fri November 15 09:19:23.623 PST 2019 KeyService::login. Login succeeded
INFO: Fri November 15 09:19:23.623 PST 2019 PatchAgent::PatchAgent. Package install directory: c:\cspm_agent. Package operational directory: c:\cspm_agent\cloakware\cspmclient. Package version: 4.16.1
INFO: Fri November 15 09:19:23.639 PST 2019 ProcessPatch::hasElevatedWindowsPrivileges. Command succeeded: setx.exe CSPM_HAS_ELEVATED_PRIVILEGES 1 /M, return value: 0 (PatchAgent service enabled due to availability of Admin or elevated privileges).
INFO: Fri November 15 09:19:23.639 PST 2019 ProcessPatch::hasElevatedWindowsPrivileges. Command succeeded: setx.exe CSPM_HAS_ELEVATED_PRIVILEGES "" /M, return value: 0.
FINE: Fri November 15 09:19:23.639 PST 2019 CspmclientUtil::genRandomHours. startHour 0 endHour 5
FINE: Fri November 15 09:19:23.639 PST 2019 CspmclientUtil::genRandomHours. randHour 3
FINE: Fri November 15 09:19:23.654 PST 2019 PatchAgent::setNextPollTime. Next CSPM Server poll time: 2019-11-16 03:02:23. Patch download time: 2200-01-01 01:00:00. New patch exist indicator: false. Use download schedule indicator: true. Patch download allowed: true
INFO: Fri November 15 09:19:23.654 PST 2019 PatchAgentForCSPMAgent::run. Start thread
ESCENARIO 1: Cambio de password para la cuenta administrator con la opcion "Account can change own password" EN SERVIDOR WINSERVER2016 IP 192.168.200.177
INFO: Fri November 15 09:20:49.748 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:20:49.748 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=hIo2yjBsdDfsV1H9AMZ1vhHmDRs= for TrustString=192.168.200.302019-11-15 17:20:52, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:20:49.748 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:20:52, Hash value: hIo2yjBsdDfsV1H9AMZ1vhHmDRs=
FINE: Fri November 15 09:20:49.748 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}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
FINE: Fri November 15 09:20:49.764 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:20:49.764 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. User: Administrator, domain: cspm_dummy_value, server: 192.168.200.177
FINE: Fri November 15 09:20:49.795 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. verifying account on remote host
WARNING: Fri November 15 09:20:59.717 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Operation not successful, message: 1326-ERROR_LOGON_FAILURE
INFO: Fri November 15 09:20:59.717 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Complete verify account password
INFO: Fri November 15 09:20:59.717 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>440</statusCode><errorMessage>1326-ERROR_LOGON_FAILURE</errorMessage><content><extended_status></extended_status></content></eventReponse>
INFO: Fri November 15 09:20:59.717 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:20:59.717 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=AgcDYLtIETU+lB+SGa6/ebn65a0= for TrustString=192.168.200.302019-11-15 17:21:02, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:20:59.717 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:21:02, Hash value: AgcDYLtIETU+lB+SGa6/ebn65a0=
FINE: Fri November 15 09:20:59.717 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}efd3d919808504a9fb535a66182b44b3d4403272d7814d32a58c26bfb8b2839690b790fec65eb5c2c01b27f214b81df9cf77a82ac7b1fa27f1d1a38fc7c09cacd6c963da98272b36d50c8bebfd9863d9351d99395bb2331a4139ac90e96e4d16280d98639bca4e16236e262e7ae23ce2d69bd0c2e2df586b4d7250708126823505909a49020e3e367a28766c1631a8c39ccaf896f4102bf6c7431453d8c42c2174515270c0526b1793b7f641bda1fea6c4a63da1cae990b2d8f27cca8ac3f50723a86405ef7650e0f0da6f1c7662ea05569fb05e478aa18f8ef4b2f8a78efc734ed5f23439bdbcde079d4806d500f9f3e4639ff5620e29326172fb96dd371d48916f0970da110ca7d7f0f97507f9ff21a22d66283dfa417d89d534a6f780f7c78bcabc499381e48531a5858b398e8aa87ca0572f3521913cfe7a5b5fc0b189793a9eb09ab90e13458e0aa9e8eb88e02276c6043d4deeabd95ed7bc247ad74e7e86d2be49a194efc163b4cf90a4fa5157ef8376448b25745d31aa65bc8d60d370f4c09ac75426b22245dc609264ff05afdf4ea1a3240a37a104c48a6adc4ae3559e27edbad94eaa2de8f249cca408c6c64f7ddc403f4fa0b3da47a411573d018996dc35f3f4ea88a0588f5490bd634d481f9fca4ca7dcdc0944a628bf0adb56e180a000b4c47529ae540b62dd67f4daca82436373219a92673f1251da5adfefad50b96d67ae468e587e25ecf2bd7f369a8623157abcf7bc1afc651d2ca76e2910acebb461ac3a488308c30f862c1daf2a84d0332ed7b260dcef6b444b7a6d55e8dfe1d54f0b7026adafd96f33a10862dbd679cda105351490f4826c08052e331f
FINE: Fri November 15 09:20:59.717 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:20:59.717 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Admin user: Administrator, user: Administrator, domain: cspm_dummy_value, server: 192.168.200.177, services: []
ESCENARIO 2: Verificacion del password asociado a la cuenta Administrator EN SERVIDOR WINSERVER2016 IP 192.168.200.177
INFO: Fri November 15 09:23:51.203 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:23:51.203 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=1k+eKtMJUPynU4X0FcGx82Wv14g= for TrustString=192.168.200.302019-11-15 17:23:54, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:23:51.203 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:23:54, Hash value: 1k+eKtMJUPynU4X0FcGx82Wv14g=
FINE: Fri November 15 09:23:51.203 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}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
FINE: Fri November 15 09:23:51.203 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:23:51.203 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. User: Administrator, domain: cspm_dummy_value, server: 192.168.200.177
FINE: Fri November 15 09:23:51.249 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. verifying account on remote host
INFO: Fri November 15 09:23:53.718 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Complete verify account password
INFO: Fri November 15 09:23:53.718 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>400</statusCode><errorMessage>0-NERR_Success</errorMessage><content><extended_status></extended_status></content></eventReponse>
ESCENARIO 3: Cambio de password para la cuenta rrianor con la opcion "Account can change own password" EN SERVIDOR WINSERVER2016 IP 192.168.200.177
INFO: Fri November 15 09:29:36.125 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:29:36.125 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=a/sJGFldBCn8tfFqKkpTPtEvazs= for TrustString=192.168.200.302019-11-15 17:29:38, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:29:36.125 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:29:38, Hash value: a/sJGFldBCn8tfFqKkpTPtEvazs=
FINE: Fri November 15 09:29:36.125 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}efd3d919808504a9fb535a66182b44b3d4403272d7814d32a58c26bfb8b283964ee4cc10687ad7e6088029537b9c136d780dce58b9d3120955d20ec8749d1e5740fd45250e42d0541149968924d5220151624713e482bf4c743eb51adff3794dc9096ddd4a18fc86a91257f8128a416305059857876fcc275a5725c2d7f80d056f73e01d14449b01a69bfb58cfda78d132d9bbc687b247dde50963133d4afa42b222ea8a3d02be50de4aeadca736a8bed61a444da8477bc907f1e85e44bf59fb4c4f4cfe6de15377891bf5b345b3064479296b2a42ac2f120a9a05ec164b150dcb32f1c815e0c3ed98ed0232b61b5eaa1e4547504f7a7218cfa0a0ce70b6d48ac812f3b2fea81ffd629b9ccefe37658b71e21014ba54b2385cad637b4b82874e9a52814b1bad98653e4cacd961539f958ef5562928f11d18d149d3c138d7ac5d4a12c4c18295e9fb6ccb35f1179dbbbf4bd52138204cad3282b2aed8451d85f808e92fe0259e8f7748bd1eb68e2ce0909a03f1ba7489058fa044dbf4c35bc481
FINE: Fri November 15 09:29:36.125 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:29:36.125 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. User: rrianor, domain: cspm_dummy_value, server: 192.168.200.177
FINE: Fri November 15 09:29:36.171 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. verifying account on remote host
WARNING: Fri November 15 09:29:38.640 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Operation not successful, message: 1326-ERROR_LOGON_FAILURE
INFO: Fri November 15 09:29:38.640 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Complete verify account password
INFO: Fri November 15 09:29:38.640 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>440</statusCode><errorMessage>1326-ERROR_LOGON_FAILURE</errorMessage><content><extended_status></extended_status></content></eventReponse>
INFO: Fri November 15 09:29:38.640 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:29:38.640 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=sEFkahyVhnutCSF2zn/787uHPoo= for TrustString=192.168.200.302019-11-15 17:29:41, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:29:38.640 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:29:41, Hash value: sEFkahyVhnutCSF2zn/787uHPoo=
FINE: Fri November 15 09:29:38.640 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}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
FINE: Fri November 15 09:29:38.640 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:29:38.640 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Admin user: rrianor, user: rrianor, domain: cspm_dummy_value, server: 192.168.200.177, services: []
WARNING: Fri November 15 09:30:06.750 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Operation not successful, message: 1351-ERROR_CANT_ACCESS_DOMAIN_INFO
INFO: Fri November 15 09:30:06.750 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Complete account password update
INFO: Fri November 15 09:30:06.750 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>440</statusCode><errorMessage>1351-ERROR_CANT_ACCESS_DOMAIN_INFO</errorMessage><content><extended_status></extended_status></content></eventReponse>
ESCENARIO 4: Cambio de password para la cuenta rrianor con la opcion "Use the following account to change password"- Administrator EN SERVIDOR WINSERVER2016 IP 192.168.200.177INFO: Fri November 15 09:31:20.641 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:31:20.641 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=BtpB/wB2chxJ5HFvbM2/T59N9Ew= for TrustString=192.168.200.302019-11-15 17:31:23, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:31:20.641 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:31:23, Hash value: BtpB/wB2chxJ5HFvbM2/T59N9Ew=
FINE: Fri November 15 09:31:20.641 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}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
FINE: Fri November 15 09:31:20.641 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:31:20.641 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. User: rrianor, domain: cspm_dummy_value, server: 192.168.200.177
FINE: Fri November 15 09:31:20.688 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. verifying account on remote host
WARNING: Fri November 15 09:31:27.703 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Operation not successful, message: 1326-ERROR_LOGON_FAILURE
INFO: Fri November 15 09:31:27.703 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Complete verify account password
INFO: Fri November 15 09:31:27.703 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>440</statusCode><errorMessage>1326-ERROR_LOGON_FAILURE</errorMessage><content><extended_status></extended_status></content></eventReponse>
INFO: Fri November 15 09:31:27.703 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:31:27.703 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=pQq1n5rJuGosonPy5iU2U04WT3g= for TrustString=192.168.200.302019-11-15 17:31:30, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:31:27.703 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:31:30, Hash value: pQq1n5rJuGosonPy5iU2U04WT3g=
FINE: Fri November 15 09:31:27.703 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}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
FINE: Fri November 15 09:31:27.703 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:31:27.703 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Admin user: Administrator, user: rrianor, domain: cspm_dummy_value, server: 192.168.200.177, services: []
FINE: Fri November 15 09:31:31.609 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Start update user account as admin
INFO: Fri November 15 09:31:32.468 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Complete account password update
INFO: Fri November 15 09:31:32.468 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>400</statusCode><errorMessage>0-NERR_Success</errorMessage><content><extended_status></extended_status></content></eventReponse>
INFO: Fri November 15 09:31:32.468 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:31:32.468 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=lHKKerfJD2VzxfW5NcdEb+p04JE= for TrustString=192.168.200.302019-11-15 17:31:35, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:31:32.468 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:31:35, Hash value: lHKKerfJD2VzxfW5NcdEb+p04JE=
FINE: Fri November 15 09:31:32.484 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}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
FINE: Fri November 15 09:31:32.484 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:31:32.484 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. User: rrianor, domain: cspm_dummy_value, server: 192.168.200.177
FINE: Fri November 15 09:31:32.515 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. verifying account on remote host
INFO: Fri November 15 09:31:33.359 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Complete verify account password
INFO: Fri November 15 09:31:33.359 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>400</statusCode><errorMessage>0-NERR_Success</errorMessage><content><extended_status></extended_status></content></eventReponse>
REPETICION DE ESCENARIOS PARA SERVIDOR PORTHOS001 - IP 192.168.200.210
ESCENARIO 1: Cambio de password para la cuenta administrator con la opcion "Account can change own password"INFO: Fri November 15 09:33:17.594 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:33:17.594 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=uNUsBTJlpfZ8/Zb+sp3GThSyR7E= for TrustString=192.168.200.302019-11-15 17:33:20, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:33:17.594 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:33:20, Hash value: uNUsBTJlpfZ8/Zb+sp3GThSyR7E=
FINE: Fri November 15 09:33:17.594 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}efd3d919808504a9fb535a66182b44b3d4403272d7814d32a58c26bfb8b283964ee4cc10687ad7e6088029537b9c136d780dce58b9d3120955d20ec8749d1e5740fd45250e42d0541149968924d5220151624713e482bf4c743eb51adff3794dc9096ddd4a18fc86a91257f8128a416377c120b067bf9801b524ce381e4d15b1e16eab46ef605d8517cf65b3cfcc3417a4542c2fc89908b6ef45f274f42d16d8c024a8213811ac40453d4556f0d5a3cde45fcc2640b39be5e7ea4778799033eb1ab997c6f968a34fe88e719357f16c0e6633ce9803357680a598bf3231d618a7389679e4f9fdc9d38d563799d52df7920da0896f06e48bc3f1f25c0dd4732b2c400f4ecc2c7ae0746193c525f62f34075d2cb6cd0394dacc3239b123bd280766d2f2023f032491ba373f674071a1a56741d0f0ee8c4301a796c420527004107ecd734131c6fa7261d869ebab0a80ed1950d13167f6b99efb0be01ff975f6c4290c8488794e73b24dc4b2fbb8d782550ebf1e73ff142f4d6236323d05921fd038
FINE: Fri November 15 09:33:17.594 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:33:17.594 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. User: Administrator, domain: cspm_dummy_value, server: 192.168.200.210
FINE: Fri November 15 09:33:17.641 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. verifying account on remote host
WARNING: Fri November 15 09:33:27.672 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Operation not successful, message: 1326-ERROR_LOGON_FAILURE
INFO: Fri November 15 09:33:27.672 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Complete verify account password
INFO: Fri November 15 09:33:27.672 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>440</statusCode><errorMessage>1326-ERROR_LOGON_FAILURE</errorMessage><content><extended_status></extended_status></content></eventReponse>
INFO: Fri November 15 09:33:27.672 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:33:27.672 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=gn5k6FnQ8gVzTYVGCV9tmLUmvVY= for TrustString=192.168.200.302019-11-15 17:33:30, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:33:27.672 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:33:30, Hash value: gn5k6FnQ8gVzTYVGCV9tmLUmvVY=
FINE: Fri November 15 09:33:27.672 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}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
FINE: Fri November 15 09:33:27.672 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:33:27.672 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Admin user: Administrator, user: Administrator, domain: cspm_dummy_value, server: 192.168.200.210, services: []
WARNING: Fri November 15 09:33:54.969 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Operation not successful, message: 1351-ERROR_CANT_ACCESS_DOMAIN_INFO
INFO: Fri November 15 09:33:54.969 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Complete account password update
INFO: Fri November 15 09:33:54.969 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>440</statusCode><errorMessage>1351-ERROR_CANT_ACCESS_DOMAIN_INFO</errorMessage><content><extended_status></extended_status></content></eventReponse>
ESCENARIO 2: Verificacion del password asociado a la cuenta Administrator
INFO: Fri November 15 09:34:34.610 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:34:34.610 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=Wlthpcfbd7sWUZtrTRKbzKKLnJc= for TrustString=192.168.200.302019-11-15 17:34:37, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:34:34.610 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:34:37, Hash value: Wlthpcfbd7sWUZtrTRKbzKKLnJc=
FINE: Fri November 15 09:34:34.610 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}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
FINE: Fri November 15 09:34:34.610 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:34:34.610 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. User: Administrator, domain: cspm_dummy_value, server: 192.168.200.210
FINE: Fri November 15 09:34:34.657 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. verifying account on remote host
INFO: Fri November 15 09:34:37.126 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Complete verify account password
INFO: Fri November 15 09:34:37.126 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>400</statusCode><errorMessage>0-NERR_Success</errorMessage><content><extended_status></extended_status></content></eventReponse>
ESCENARIO 3: Cambio de password para la cuenta rrianor con la opcion "Account can change own password"INFO: Fri November 15 09:36:14.813 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
INFO: Fri November 15 09:39:21.470 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:39:21.470 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=oh0PRAril2Ivun3ktNAfbuU1ICI= for TrustString=192.168.200.302019-11-15 17:39:24, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:39:21.470 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:39:24, Hash value: oh0PRAril2Ivun3ktNAfbuU1ICI=
FINE: Fri November 15 09:39:21.470 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}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
FINE: Fri November 15 09:39:21.470 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:39:21.470 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. User: rrianor, domain: cspm_dummy_value, server: 192.168.200.210
FINE: Fri November 15 09:39:21.501 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. verifying account on remote host
WARNING: Fri November 15 09:39:23.986 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Operation not successful, message: 1326-ERROR_LOGON_FAILURE
INFO: Fri November 15 09:39:23.986 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Complete verify account password
INFO: Fri November 15 09:39:23.986 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>440</statusCode><errorMessage>1326-ERROR_LOGON_FAILURE</errorMessage><content><extended_status></extended_status></content></eventReponse>
INFO: Fri November 15 09:39:23.986 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:39:23.986 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=fTzOOv8OaXDXSKK5axmYjXsrFMM= for TrustString=192.168.200.302019-11-15 17:39:26, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:39:23.986 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:39:26, Hash value: fTzOOv8OaXDXSKK5axmYjXsrFMM=
FINE: Fri November 15 09:39:23.986 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}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
FINE: Fri November 15 09:39:23.986 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:39:23.986 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Admin user: rrianor, user: rrianor, domain: cspm_dummy_value, server: 192.168.200.210, services: []
WARNING: Fri November 15 09:39:56.642 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Operation not successful, message: 1351-ERROR_CANT_ACCESS_DOMAIN_INFO
INFO: Fri November 15 09:39:56.642 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Complete account password update
INFO: Fri November 15 09:39:56.642 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>440</statusCode><errorMessage>1351-ERROR_CANT_ACCESS_DOMAIN_INFO</errorMessage><content><extended_status></extended_status></content></eventReponse>
ESCENARIO 4: Cambio de password para la cuenta rrianor con la opcion "Use the following account to change password"- Administrator
INFO: Fri November 15 09:40:44.470 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:40:44.470 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=Dh0qGZoPLjoLAnTi2pxG9l52Yzg= for TrustString=192.168.200.302019-11-15 17:40:47, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:40:44.470 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:40:47, Hash value: Dh0qGZoPLjoLAnTi2pxG9l52Yzg=
FINE: Fri November 15 09:40:44.470 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}efd3d919808504a9fb535a66182b44b3d4403272d7814d32a58c26bfb8b283964ee4cc10687ad7e6088029537b9c136d780dce58b9d3120955d20ec8749d1e5740fd45250e42d0541149968924d5220151624713e482bf4c743eb51adff3794dc9096ddd4a18fc86a91257f8128a416305059857876fcc275a5725c2d7f80d056f73e01d14449b01a69bfb58cfda78d132d9bbc687b247dde50963133d4afa42b222ea8a3d02be50de4aeadca736a8bed61a444da8477bc907f1e85e44bf59fbb050d782260026520136757879b850b2b17c7aa4cae9e2ff2d49d57889cc6b304fdb223326fda70cefa4422af3b0df477b1db92c13b109329c8721ba7c4356821b3c6bad94b472ce7d051fe80b93bae5a6a621d2b0ec8b1f8fb5802c2388b4569b32084cd046eaf167f08142b5e0fced49b460a49f2bb96e6cef50f65dd92a68848a162f3ec3cefe724ebd0d2aea688ac8ef1518b5970fc58c9e623d56c30fd68e5a05855e460b1a2ed26b751c6596db1b3583ef56296e334f6d5f27ba96fe08
FINE: Fri November 15 09:40:44.470 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:40:44.470 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. User: rrianor, domain: cspm_dummy_value, server: 192.168.200.210
FINE: Fri November 15 09:40:44.517 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. verifying account on remote host
WARNING: Fri November 15 09:40:48.392 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Operation not successful, message: 1326-ERROR_LOGON_FAILURE
INFO: Fri November 15 09:40:48.392 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Complete verify account password
INFO: Fri November 15 09:40:48.392 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>440</statusCode><errorMessage>1326-ERROR_LOGON_FAILURE</errorMessage><content><extended_status></extended_status></content></eventReponse>
INFO: Fri November 15 09:40:48.392 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:40:48.392 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=+2KMGmRfv6iW8I7IKvicAApQu9s= for TrustString=192.168.200.302019-11-15 17:40:51, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:40:48.392 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:40:51, Hash value: +2KMGmRfv6iW8I7IKvicAApQu9s=
FINE: Fri November 15 09:40:48.392 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}efd3d919808504a9fb535a66182b44b3d4403272d7814d32a58c26bfb8b2839690b790fec65eb5c2c01b27f214b81df9cf77a82ac7b1fa27f1d1a38fc7c09cacd6c963da98272b36d50c8bebfd9863d9351d99395bb2331a4139ac90e96e4d16280d98639bca4e16236e262e7ae23ce2d69bd0c2e2df586b4d7250708126823505909a49020e3e367a28766c1631a8c39ccaf896f4102bf6c7431453d8c42c2174515270c0526b1793b7f641bda1fea6c4a63da1cae990b2d8f27cca8ac3f50723a86405ef7650e0f0da6f1c7662ea05569fb05e478aa18f8ef4b2f8a78efc734ed5f23439bdbcde079d4806d500f9f3e4639ff5620e29326172fb96dd371d48916f0970da110ca7d7f0f97507f9ff21548e10cd1f7664b7b52767763e1701815b34e4509ab3919c9c5561f636292d292b1f673e794dec3436193e0f177e9e0172148ed94ffb2d05fca53f4fd81d16fbff3cf9a286d55323359a3264b6d61d992a4b4a83cc9772785bc046521082a5fb20cbd331e210d515dfb8e6078f89d1ee4818f449d695843c7656bef9343c17b140bbc970f48a1f08b132b0705654056eee504f5831c35d9d2e4ff44201e9aac0c256383985dd164d41768a26ec7c6648ea3b4c566e0ac7e503cd62705a6c7426d09527ad6b391f605d91097e46060057ee84a601790ece89c7cff98dd3d937c8b7cb79ea730291b9da56d9218186ac26f270c23a4b0ead88a037b8d6ed3e734da880172d40237c198c03a57797c6af2d05417d17e271555eed6160a9a23a039fdbc791c3457de0bed4ed6506a972cf541a79dd6c36c4bec5a6fb2dba953b47d226cde9f4148e4c57693f9c6429684055
FINE: Fri November 15 09:40:48.392 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:40:48.392 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Admin user: Administrator, user: rrianor, domain: cspm_dummy_value, server: 192.168.200.210, services: []
FINE: Fri November 15 09:40:50.033 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Start update user account as admin
INFO: Fri November 15 09:40:50.891 PST 2019 CSPMAgentService::updateWindowsAccountPasswordWithServices. Complete account password update
INFO: Fri November 15 09:40:50.891 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>400</statusCode><errorMessage>0-NERR_Success</errorMessage><content><extended_status></extended_status></content></eventReponse>
INFO: Fri November 15 09:40:50.907 PST 2019 CSPMAgentServlet::doPost. Get notification from CSPM server
FINE: Fri November 15 09:40:50.907 PST 2019 CspmClientUtil::getCachedDynamicDigest. Computed hash=lco1XgRAdCy48ZdL73vefvWcZPg= for TrustString=192.168.200.302019-11-15 17:40:53, key=0bac7e6863a62e3cb63927e1a78e6f4645489986012fa149f7fdffe9b6acb4dd
FINE: Fri November 15 09:40:50.907 PST 2019 CspmClientUtil::authenticateCSPMServer. Hashing string: 192.168.200.302019-11-15 17:40:53, Hash value: lco1XgRAdCy48ZdL73vefvWcZPg=
FINE: Fri November 15 09:40:50.907 PST 2019 CSPMAgentServlet::getEventContent. Received encrypted block: {bcfips}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
FINE: Fri November 15 09:40:50.907 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Agent's own hostname: 10.0.0.221
FINE: Fri November 15 09:40:50.907 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. User: rrianor, domain: cspm_dummy_value, server: 192.168.200.210
FINE: Fri November 15 09:40:50.938 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. verifying account on remote host
INFO: Fri November 15 09:40:53.408 PST 2019 CSPMAgentService::verifyWindowsAccountPassword. Complete verify account password
INFO: Fri November 15 09:40:53.408 PST 2019 CSPMAgentServlet::processTask. Message to send: <?xml version="1.0" ?><eventReponse><eventId>1</eventId><statusCode>400</statusCode><errorMessage>0-NERR_Success</errorMessage><content><extended_status></extended_status></content></eventReponse>