RedHat 8.10 - HTTP 403 error

[HotDonut]

Hi, having the following error on RedHat 8.10.
After encountering it on our production RedHat systems, where it worked for multiple years and suddenly stopped a few weeks ago. I also tried with a VM set up in private cloud account (no firewall/proxy/vpn) and the issue still persists.

Login works without any issue:

[user@instance ~]$  lpass --version
LastPass CLI v1.6.1.6.g667da1
[user@instance ~]$ lpass login --trust --force xxx@a1.at
Success: Logged in as xxx@a1.at.

any other command gives the HTTP Error:

[user@instance ~]$ lpass show "aimadm - MASTER"
Error: HTTP response code said error.
[user@instance ~]$ lpass add testttest
Error: HTTP response code said error.

Log with Debug Level = 8.

<7> [1752831778.080547] Making request to https://lastpass.com/getaccts.php
*   Trying 104.123.41.227...
* TCP_NODELAY set
* Connected to lastpass.com (104.123.41.227) port 443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: businessCategory=Private Organization; serialNumber=6402861; jurisdictionC=US; jurisdictionST=DELAWARE; C=US; ST=Massachusetts; L=Boston; O=LASTPASS US LP; CN=lastpass.com
*  start date: Sep  2 10:31:02 2024 GMT
*  expire date: Oct  4 10:31:01 2025 GMT
*  subjectAltName: host "lastpass.com" matched cert's "lastpass.com"
*  issuer: C=BE; O=GlobalSign nv-sa; CN=GlobalSign ECC EV SSL CA 2018
*  SSL certificate verify ok.
> POST /getaccts.php HTTP/1.1
Host: lastpass.com
User-Agent: LastPass-CLI/1.6.1.6.g667da1f
Accept: */*
Cookie: PHPSESSID=ri043eu27lic98ck8e8vnarj3if
Content-Length: 50
Content-Type: application/x-www-form-urlencoded

* upload completely sent off: 50 out of 50 bytes
* The requested URL returned error: 403 Forbidden
* Closing connection 0

I am a bit stuck on how to troubleshoot further. Anyone experiencing the same issue and got it to work again?

[stevommmm]

In my case the endless 403 was because of a forced credential rotation. I had to load lastpass in a browser to follow the rotation process before lpass would work again for me