(2025-10-14 8:08:40): [krb5_child[66619]] [get_and_save_tgt] (0x0020): [RID#59] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:08:40): [krb5_child[66619]] [main] (0x0400): [RID#59] krb5_child started. * (2025-10-14 8:08:40): [krb5_child[66619]] [unpack_buffer] (0x1000): [RID#59] total buffer size: [96] * (2025-10-14 8:08:40): [krb5_child[66619]] [unpack_buffer] (0x0100): [RID#59] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:08:40): [krb5_child[66619]] [unpack_buffer] (0x2000): [RID#59] No old ccache * (2025-10-14 8:08:40): [krb5_child[66619]] [unpack_buffer] (0x0100): [RID#59] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:08:40): [krb5_child[66619]] [k5c_precreate_ccache] (0x4000): [RID#59] Recreating ccache * (2025-10-14 8:08:40): [krb5_child[66619]] [k5c_setup_fast] (0x0100): [RID#59] Fast principal is set to [host/np0005486749.ooo.test@OOO.TEST] * (2025-10-14 8:08:40): [krb5_child[66619]] [find_principal_in_keytab] (0x4000): [RID#59] Trying to find principal host/np0005486749.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:08:40): [krb5_child[66619]] [match_principal] (0x1000): [RID#59] Principal matched to the sample (host/np0005486749.ooo.test@OOO.TEST). * (2025-10-14 8:08:40): [krb5_child[66619]] [check_fast_ccache] (0x0200): [RID#59] FAST TGT is still valid. * (2025-10-14 8:08:40): [krb5_child[66619]] [become_user] (0x0200): [RID#59] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:08:40): [krb5_child[66619]] [main] (0x2000): [RID#59] Running as [1464600000][1464600000]. * (2025-10-14 8:08:40): [krb5_child[66619]] [set_lifetime_options] (0x0100): [RID#59] No specific renewable lifetime requested. * (2025-10-14 8:08:40): [krb5_child[66619]] [set_lifetime_options] (0x0100): [RID#59] No specific lifetime requested. * (2025-10-14 8:08:40): [krb5_child[66619]] [set_canonicalize_option] (0x0100): [RID#59] Canonicalization is set to [true] * (2025-10-14 8:08:40): [krb5_child[66619]] [main] (0x0400): [RID#59] Will perform auth * (2025-10-14 8:08:40): [krb5_child[66619]] [main] (0x0400): [RID#59] Will perform online auth * (2025-10-14 8:08:40): [krb5_child[66619]] [tgt_req_child] (0x1000): [RID#59] Attempting to get a TGT * (2025-10-14 8:08:40): [krb5_child[66619]] [get_and_save_tgt] (0x0400): [RID#59] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:08:40): [krb5_child[66619]] [sss_krb5_responder] (0x4000): [RID#59] Got question [password]. * (2025-10-14 8:08:40): [krb5_child[66619]] [get_and_save_tgt] (0x0020): [RID#59] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:08:40): [krb5_child[66619]] [map_krb5_error] (0x0020): [RID#59] 2138: [-1765328360][Preauthentication failed] (2025-10-14 8:12:18): [krb5_child[81687]] [get_and_save_tgt] (0x0020): [RID#117] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:12:18): [krb5_child[81687]] [main] (0x0400): [RID#117] krb5_child started. * (2025-10-14 8:12:18): [krb5_child[81687]] [unpack_buffer] (0x1000): [RID#117] total buffer size: [99] * (2025-10-14 8:12:18): [krb5_child[81687]] [unpack_buffer] (0x0100): [RID#117] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:12:18): [krb5_child[81687]] [unpack_buffer] (0x2000): [RID#117] No old ccache * (2025-10-14 8:12:18): [krb5_child[81687]] [unpack_buffer] (0x0100): [RID#117] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:12:18): [krb5_child[81687]] [k5c_precreate_ccache] (0x4000): [RID#117] Recreating ccache * (2025-10-14 8:12:18): [krb5_child[81687]] [k5c_setup_fast] (0x0100): [RID#117] Fast principal is set to [host/np0005486749.ooo.test@OOO.TEST] * (2025-10-14 8:12:18): [krb5_child[81687]] [find_principal_in_keytab] (0x4000): [RID#117] Trying to find principal host/np0005486749.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:12:18): [krb5_child[81687]] [match_principal] (0x1000): [RID#117] Principal matched to the sample (host/np0005486749.ooo.test@OOO.TEST). * (2025-10-14 8:12:18): [krb5_child[81687]] [check_fast_ccache] (0x0200): [RID#117] FAST TGT is still valid. * (2025-10-14 8:12:18): [krb5_child[81687]] [become_user] (0x0200): [RID#117] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:12:18): [krb5_child[81687]] [main] (0x2000): [RID#117] Running as [1464600000][1464600000]. * (2025-10-14 8:12:18): [krb5_child[81687]] [set_lifetime_options] (0x0100): [RID#117] No specific renewable lifetime requested. * (2025-10-14 8:12:18): [krb5_child[81687]] [set_lifetime_options] (0x0100): [RID#117] No specific lifetime requested. * (2025-10-14 8:12:18): [krb5_child[81687]] [set_canonicalize_option] (0x0100): [RID#117] Canonicalization is set to [true] * (2025-10-14 8:12:18): [krb5_child[81687]] [main] (0x0400): [RID#117] Will perform auth * (2025-10-14 8:12:18): [krb5_child[81687]] [main] (0x0400): [RID#117] Will perform online auth * (2025-10-14 8:12:18): [krb5_child[81687]] [tgt_req_child] (0x1000): [RID#117] Attempting to get a TGT * (2025-10-14 8:12:18): [krb5_child[81687]] [get_and_save_tgt] (0x0400): [RID#117] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:12:18): [krb5_child[81687]] [sss_krb5_responder] (0x4000): [RID#117] Got question [password]. * (2025-10-14 8:12:18): [krb5_child[81687]] [get_and_save_tgt] (0x0020): [RID#117] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:12:18): [krb5_child[81687]] [map_krb5_error] (0x0020): [RID#117] 2138: [-1765328360][Preauthentication failed] (2025-10-14 8:13:19): [krb5_child[86617]] [get_and_save_tgt] (0x0020): [RID#136] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:13:19): [krb5_child[86617]] [main] (0x0400): [RID#136] krb5_child started. * (2025-10-14 8:13:19): [krb5_child[86617]] [unpack_buffer] (0x1000): [RID#136] total buffer size: [97] * (2025-10-14 8:13:19): [krb5_child[86617]] [unpack_buffer] (0x0100): [RID#136] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:13:19): [krb5_child[86617]] [unpack_buffer] (0x2000): [RID#136] No old ccache * (2025-10-14 8:13:19): [krb5_child[86617]] [unpack_buffer] (0x0100): [RID#136] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:13:19): [krb5_child[86617]] [k5c_precreate_ccache] (0x4000): [RID#136] Recreating ccache * (2025-10-14 8:13:19): [krb5_child[86617]] [k5c_setup_fast] (0x0100): [RID#136] Fast principal is set to [host/np0005486749.ooo.test@OOO.TEST] * (2025-10-14 8:13:19): [krb5_child[86617]] [find_principal_in_keytab] (0x4000): [RID#136] Trying to find principal host/np0005486749.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:13:19): [krb5_child[86617]] [match_principal] (0x1000): [RID#136] Principal matched to the sample (host/np0005486749.ooo.test@OOO.TEST). * (2025-10-14 8:13:19): [krb5_child[86617]] [check_fast_ccache] (0x0200): [RID#136] FAST TGT is still valid. * (2025-10-14 8:13:19): [krb5_child[86617]] [become_user] (0x0200): [RID#136] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:13:19): [krb5_child[86617]] [main] (0x2000): [RID#136] Running as [1464600000][1464600000]. * (2025-10-14 8:13:19): [krb5_child[86617]] [set_lifetime_options] (0x0100): [RID#136] No specific renewable lifetime requested. * (2025-10-14 8:13:19): [krb5_child[86617]] [set_lifetime_options] (0x0100): [RID#136] No specific lifetime requested. * (2025-10-14 8:13:19): [krb5_child[86617]] [set_canonicalize_option] (0x0100): [RID#136] Canonicalization is set to [true] * (2025-10-14 8:13:19): [krb5_child[86617]] [main] (0x0400): [RID#136] Will perform auth * (2025-10-14 8:13:19): [krb5_child[86617]] [main] (0x0400): [RID#136] Will perform online auth * (2025-10-14 8:13:19): [krb5_child[86617]] [tgt_req_child] (0x1000): [RID#136] Attempting to get a TGT * (2025-10-14 8:13:19): [krb5_child[86617]] [get_and_save_tgt] (0x0400): [RID#136] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:13:19): [krb5_child[86617]] [sss_krb5_responder] (0x4000): [RID#136] Got question [password]. * (2025-10-14 8:13:19): [krb5_child[86617]] [get_and_save_tgt] (0x0020): [RID#136] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:13:19): [krb5_child[86617]] [map_krb5_error] (0x0020): [RID#136] 2138: [-1765328360][Preauthentication failed] (2025-10-14 8:14:10): [krb5_child[93910]] [get_and_save_tgt] (0x0020): [RID#149] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:14:09): [krb5_child[93910]] [main] (0x0400): [RID#149] krb5_child started. * (2025-10-14 8:14:09): [krb5_child[93910]] [unpack_buffer] (0x1000): [RID#149] total buffer size: [99] * (2025-10-14 8:14:09): [krb5_child[93910]] [unpack_buffer] (0x0100): [RID#149] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:14:09): [krb5_child[93910]] [unpack_buffer] (0x2000): [RID#149] No old ccache * (2025-10-14 8:14:09): [krb5_child[93910]] [unpack_buffer] (0x0100): [RID#149] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:14:09): [krb5_child[93910]] [k5c_precreate_ccache] (0x4000): [RID#149] Recreating ccache * (2025-10-14 8:14:09): [krb5_child[93910]] [k5c_setup_fast] (0x0100): [RID#149] Fast principal is set to [host/np0005486749.ooo.test@OOO.TEST] * (2025-10-14 8:14:09): [krb5_child[93910]] [find_principal_in_keytab] (0x4000): [RID#149] Trying to find principal host/np0005486749.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:14:09): [krb5_child[93910]] [match_principal] (0x1000): [RID#149] Principal matched to the sample (host/np0005486749.ooo.test@OOO.TEST). * (2025-10-14 8:14:09): [krb5_child[93910]] [check_fast_ccache] (0x0200): [RID#149] FAST TGT is still valid. * (2025-10-14 8:14:09): [krb5_child[93910]] [become_user] (0x0200): [RID#149] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:14:09): [krb5_child[93910]] [main] (0x2000): [RID#149] Running as [1464600000][1464600000]. * (2025-10-14 8:14:09): [krb5_child[93910]] [set_lifetime_options] (0x0100): [RID#149] No specific renewable lifetime requested. * (2025-10-14 8:14:09): [krb5_child[93910]] [set_lifetime_options] (0x0100): [RID#149] No specific lifetime requested. * (2025-10-14 8:14:09): [krb5_child[93910]] [set_canonicalize_option] (0x0100): [RID#149] Canonicalization is set to [true] * (2025-10-14 8:14:09): [krb5_child[93910]] [main] (0x0400): [RID#149] Will perform auth * (2025-10-14 8:14:09): [krb5_child[93910]] [main] (0x0400): [RID#149] Will perform online auth * (2025-10-14 8:14:09): [krb5_child[93910]] [tgt_req_child] (0x1000): [RID#149] Attempting to get a TGT * (2025-10-14 8:14:09): [krb5_child[93910]] [get_and_save_tgt] (0x0400): [RID#149] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:14:10): [krb5_child[93910]] [sss_krb5_responder] (0x4000): [RID#149] Got question [password]. * (2025-10-14 8:14:10): [krb5_child[93910]] [get_and_save_tgt] (0x0020): [RID#149] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:14:10): [krb5_child[93910]] [map_krb5_error] (0x0020): [RID#149] 2138: [-1765328360][Preauthentication failed] (2025-10-14 8:15:18): [krb5_child[98057]] [get_and_save_tgt] (0x0020): [RID#168] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:15:17): [krb5_child[98057]] [main] (0x0400): [RID#168] krb5_child started. * (2025-10-14 8:15:17): [krb5_child[98057]] [unpack_buffer] (0x1000): [RID#168] total buffer size: [95] * (2025-10-14 8:15:17): [krb5_child[98057]] [unpack_buffer] (0x0100): [RID#168] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:15:17): [krb5_child[98057]] [unpack_buffer] (0x2000): [RID#168] No old ccache * (2025-10-14 8:15:17): [krb5_child[98057]] [unpack_buffer] (0x0100): [RID#168] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:15:17): [krb5_child[98057]] [k5c_precreate_ccache] (0x4000): [RID#168] Recreating ccache * (2025-10-14 8:15:17): [krb5_child[98057]] [k5c_setup_fast] (0x0100): [RID#168] Fast principal is set to [host/np0005486749.ooo.test@OOO.TEST] * (2025-10-14 8:15:17): [krb5_child[98057]] [find_principal_in_keytab] (0x4000): [RID#168] Trying to find principal host/np0005486749.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:15:17): [krb5_child[98057]] [match_principal] (0x1000): [RID#168] Principal matched to the sample (host/np0005486749.ooo.test@OOO.TEST). * (2025-10-14 8:15:17): [krb5_child[98057]] [check_fast_ccache] (0x0200): [RID#168] FAST TGT is still valid. * (2025-10-14 8:15:17): [krb5_child[98057]] [become_user] (0x0200): [RID#168] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:15:17): [krb5_child[98057]] [main] (0x2000): [RID#168] Running as [1464600000][1464600000]. * (2025-10-14 8:15:17): [krb5_child[98057]] [set_lifetime_options] (0x0100): [RID#168] No specific renewable lifetime requested. * (2025-10-14 8:15:17): [krb5_child[98057]] [set_lifetime_options] (0x0100): [RID#168] No specific lifetime requested. * (2025-10-14 8:15:17): [krb5_child[98057]] [set_canonicalize_option] (0x0100): [RID#168] Canonicalization is set to [true] * (2025-10-14 8:15:17): [krb5_child[98057]] [main] (0x0400): [RID#168] Will perform auth * (2025-10-14 8:15:17): [krb5_child[98057]] [main] (0x0400): [RID#168] Will perform online auth * (2025-10-14 8:15:17): [krb5_child[98057]] [tgt_req_child] (0x1000): [RID#168] Attempting to get a TGT * (2025-10-14 8:15:17): [krb5_child[98057]] [get_and_save_tgt] (0x0400): [RID#168] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:15:18): [krb5_child[98057]] [sss_krb5_responder] (0x4000): [RID#168] Got question [password]. * (2025-10-14 8:15:18): [krb5_child[98057]] [get_and_save_tgt] (0x0020): [RID#168] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:15:18): [krb5_child[98057]] [map_krb5_error] (0x0020): [RID#168] 2138: [-1765328360][Preauthentication failed]