In my syslog on one of my VMs I see this command being run every minute:
(root) CMD ([ -f /etc/krb5.keytab ] && [ \( ! -f /etc/opt/omi/creds/omi.keytab \) -o \( /etc/krb5.keytab -nt /etc/opt/omi/creds/omi.keytab \) ] && /opt/omi/bin/support/ktstrip /etc/krb5.keytab /etc/opt/omi/creds/omi.keytab >/dev/null 2>&1 || true)
I never enabled active directory or use any kerberos stuff on my VM. Does anyone know if this is something to do with VMLinuxAgent or if it is some sort of attack from an outside party?
