(2025-10-14 8:16:46): [krb5_child[56286]] [get_and_save_tgt] (0x0020): [RID#18] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:16:46): [krb5_child[56286]] [main] (0x0400): [RID#18] krb5_child started. * (2025-10-14 8:16:46): [krb5_child[56286]] [unpack_buffer] (0x1000): [RID#18] total buffer size: [96] * (2025-10-14 8:16:46): [krb5_child[56286]] [unpack_buffer] (0x0100): [RID#18] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:16:46): [krb5_child[56286]] [unpack_buffer] (0x2000): [RID#18] No old ccache * (2025-10-14 8:16:46): [krb5_child[56286]] [unpack_buffer] (0x0100): [RID#18] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:16:46): [krb5_child[56286]] [k5c_precreate_ccache] (0x4000): [RID#18] Recreating ccache * (2025-10-14 8:16:46): [krb5_child[56286]] [k5c_setup_fast] (0x0100): [RID#18] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:16:46): [krb5_child[56286]] [find_principal_in_keytab] (0x4000): [RID#18] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:16:46): [krb5_child[56286]] [match_principal] (0x1000): [RID#18] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:16:46): [krb5_child[56286]] [check_fast_ccache] (0x0200): [RID#18] FAST TGT is still valid. * (2025-10-14 8:16:46): [krb5_child[56286]] [become_user] (0x0200): [RID#18] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:16:46): [krb5_child[56286]] [main] (0x2000): [RID#18] Running as [1464600000][1464600000]. * (2025-10-14 8:16:46): [krb5_child[56286]] [set_lifetime_options] (0x0100): [RID#18] No specific renewable lifetime requested. * (2025-10-14 8:16:46): [krb5_child[56286]] [set_lifetime_options] (0x0100): [RID#18] No specific lifetime requested. * (2025-10-14 8:16:46): [krb5_child[56286]] [set_canonicalize_option] (0x0100): [RID#18] Canonicalization is set to [true] * (2025-10-14 8:16:46): [krb5_child[56286]] [main] (0x0400): [RID#18] Will perform auth * (2025-10-14 8:16:46): [krb5_child[56286]] [main] (0x0400): [RID#18] Will perform online auth * (2025-10-14 8:16:46): [krb5_child[56286]] [tgt_req_child] (0x1000): [RID#18] Attempting to get a TGT * (2025-10-14 8:16:46): [krb5_child[56286]] [get_and_save_tgt] (0x0400): [RID#18] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:16:46): [krb5_child[56286]] [sss_krb5_responder] (0x4000): [RID#18] Got question [password]. * (2025-10-14 8:16:46): [krb5_child[56286]] [get_and_save_tgt] (0x0020): [RID#18] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:16:46): [krb5_child[56286]] [map_krb5_error] (0x0020): [RID#18] 2138: [-1765328360][Preauthentication failed] (2025-10-14 8:16:49): [krb5_child[56288]] [get_and_save_tgt] (0x0020): [RID#20] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:16:49): [krb5_child[56288]] [main] (0x0400): [RID#20] krb5_child started. * (2025-10-14 8:16:49): [krb5_child[56288]] [unpack_buffer] (0x1000): [RID#20] total buffer size: [97] * (2025-10-14 8:16:49): [krb5_child[56288]] [unpack_buffer] (0x0100): [RID#20] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:16:49): [krb5_child[56288]] [unpack_buffer] (0x2000): [RID#20] No old ccache * (2025-10-14 8:16:49): [krb5_child[56288]] [unpack_buffer] (0x0100): [RID#20] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:16:49): [krb5_child[56288]] [k5c_precreate_ccache] (0x4000): [RID#20] Recreating ccache * (2025-10-14 8:16:49): [krb5_child[56288]] [k5c_setup_fast] (0x0100): [RID#20] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:16:49): [krb5_child[56288]] [find_principal_in_keytab] (0x4000): [RID#20] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:16:49): [krb5_child[56288]] [match_principal] (0x1000): [RID#20] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:16:49): [krb5_child[56288]] [check_fast_ccache] (0x0200): [RID#20] FAST TGT is still valid. * (2025-10-14 8:16:49): [krb5_child[56288]] [become_user] (0x0200): [RID#20] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:16:49): [krb5_child[56288]] [main] (0x2000): [RID#20] Running as [1464600000][1464600000]. * (2025-10-14 8:16:49): [krb5_child[56288]] [set_lifetime_options] (0x0100): [RID#20] No specific renewable lifetime requested. * (2025-10-14 8:16:49): [krb5_child[56288]] [set_lifetime_options] (0x0100): [RID#20] No specific lifetime requested. * (2025-10-14 8:16:49): [krb5_child[56288]] [set_canonicalize_option] (0x0100): [RID#20] Canonicalization is set to [true] * (2025-10-14 8:16:49): [krb5_child[56288]] [main] (0x0400): [RID#20] Will perform auth * (2025-10-14 8:16:49): [krb5_child[56288]] [main] (0x0400): [RID#20] Will perform online auth * (2025-10-14 8:16:49): [krb5_child[56288]] [tgt_req_child] (0x1000): [RID#20] Attempting to get a TGT * (2025-10-14 8:16:49): [krb5_child[56288]] [get_and_save_tgt] (0x0400): [RID#20] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:16:49): [krb5_child[56288]] [sss_krb5_responder] (0x4000): [RID#20] Got question [password]. * (2025-10-14 8:16:49): [krb5_child[56288]] [get_and_save_tgt] (0x0020): [RID#20] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:16:49): [krb5_child[56288]] [map_krb5_error] (0x0020): [RID#20] 2138: [-1765328360][Preauthentication failed] (2025-10-14 8:16:53): [krb5_child[56319]] [get_and_save_tgt] (0x0020): [RID#23] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:16:52): [krb5_child[56319]] [main] (0x0400): [RID#23] krb5_child started. * (2025-10-14 8:16:52): [krb5_child[56319]] [unpack_buffer] (0x1000): [RID#23] total buffer size: [96] * (2025-10-14 8:16:52): [krb5_child[56319]] [unpack_buffer] (0x0100): [RID#23] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:16:52): [krb5_child[56319]] [unpack_buffer] (0x2000): [RID#23] No old ccache * (2025-10-14 8:16:52): [krb5_child[56319]] [unpack_buffer] (0x0100): [RID#23] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:16:52): [krb5_child[56319]] [k5c_precreate_ccache] (0x4000): [RID#23] Recreating ccache * (2025-10-14 8:16:52): [krb5_child[56319]] [k5c_setup_fast] (0x0100): [RID#23] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:16:52): [krb5_child[56319]] [find_principal_in_keytab] (0x4000): [RID#23] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:16:52): [krb5_child[56319]] [match_principal] (0x1000): [RID#23] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:16:52): [krb5_child[56319]] [check_fast_ccache] (0x0200): [RID#23] FAST TGT is still valid. * (2025-10-14 8:16:53): [krb5_child[56319]] [become_user] (0x0200): [RID#23] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:16:53): [krb5_child[56319]] [main] (0x2000): [RID#23] Running as [1464600000][1464600000]. * (2025-10-14 8:16:53): [krb5_child[56319]] [set_lifetime_options] (0x0100): [RID#23] No specific renewable lifetime requested. * (2025-10-14 8:16:53): [krb5_child[56319]] [set_lifetime_options] (0x0100): [RID#23] No specific lifetime requested. * (2025-10-14 8:16:53): [krb5_child[56319]] [set_canonicalize_option] (0x0100): [RID#23] Canonicalization is set to [true] * (2025-10-14 8:16:53): [krb5_child[56319]] [main] (0x0400): [RID#23] Will perform auth * (2025-10-14 8:16:53): [krb5_child[56319]] [main] (0x0400): [RID#23] Will perform online auth * (2025-10-14 8:16:53): [krb5_child[56319]] [tgt_req_child] (0x1000): [RID#23] Attempting to get a TGT * (2025-10-14 8:16:53): [krb5_child[56319]] [get_and_save_tgt] (0x0400): [RID#23] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:16:53): [krb5_child[56319]] [sss_krb5_responder] (0x4000): [RID#23] Got question [password]. * (2025-10-14 8:16:53): [krb5_child[56319]] [get_and_save_tgt] (0x0020): [RID#23] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:16:53): [krb5_child[56319]] [map_krb5_error] (0x0020): [RID#23] 2138: [-1765328360][Preauthentication failed] (2025-10-14 8:16:56): [krb5_child[56321]] [get_and_save_tgt] (0x0020): [RID#26] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:16:56): [krb5_child[56321]] [main] (0x0400): [RID#26] krb5_child started. * (2025-10-14 8:16:56): [krb5_child[56321]] [unpack_buffer] (0x1000): [RID#26] total buffer size: [95] * (2025-10-14 8:16:56): [krb5_child[56321]] [unpack_buffer] (0x0100): [RID#26] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:16:56): [krb5_child[56321]] [unpack_buffer] (0x2000): [RID#26] No old ccache * (2025-10-14 8:16:56): [krb5_child[56321]] [unpack_buffer] (0x0100): [RID#26] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:16:56): [krb5_child[56321]] [k5c_precreate_ccache] (0x4000): [RID#26] Recreating ccache * (2025-10-14 8:16:56): [krb5_child[56321]] [k5c_setup_fast] (0x0100): [RID#26] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:16:56): [krb5_child[56321]] [find_principal_in_keytab] (0x4000): [RID#26] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:16:56): [krb5_child[56321]] [match_principal] (0x1000): [RID#26] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:16:56): [krb5_child[56321]] [check_fast_ccache] (0x0200): [RID#26] FAST TGT is still valid. * (2025-10-14 8:16:56): [krb5_child[56321]] [become_user] (0x0200): [RID#26] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:16:56): [krb5_child[56321]] [main] (0x2000): [RID#26] Running as [1464600000][1464600000]. * (2025-10-14 8:16:56): [krb5_child[56321]] [set_lifetime_options] (0x0100): [RID#26] No specific renewable lifetime requested. * (2025-10-14 8:16:56): [krb5_child[56321]] [set_lifetime_options] (0x0100): [RID#26] No specific lifetime requested. * (2025-10-14 8:16:56): [krb5_child[56321]] [set_canonicalize_option] (0x0100): [RID#26] Canonicalization is set to [true] * (2025-10-14 8:16:56): [krb5_child[56321]] [main] (0x0400): [RID#26] Will perform auth * (2025-10-14 8:16:56): [krb5_child[56321]] [main] (0x0400): [RID#26] Will perform online auth * (2025-10-14 8:16:56): [krb5_child[56321]] [tgt_req_child] (0x1000): [RID#26] Attempting to get a TGT * (2025-10-14 8:16:56): [krb5_child[56321]] [get_and_save_tgt] (0x0400): [RID#26] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:16:56): [krb5_child[56321]] [sss_krb5_responder] (0x4000): [RID#26] Got question [password]. * (2025-10-14 8:16:56): [krb5_child[56321]] [get_and_save_tgt] (0x0020): [RID#26] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:16:56): [krb5_child[56321]] [map_krb5_error] (0x0020): [RID#26] 2138: [-1765328360][Preauthentication failed] (2025-10-14 8:16:59): [krb5_child[56323]] [get_and_save_tgt] (0x0020): [RID#29] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:16:59): [krb5_child[56323]] [main] (0x0400): [RID#29] krb5_child started. * (2025-10-14 8:16:59): [krb5_child[56323]] [unpack_buffer] (0x1000): [RID#29] total buffer size: [96] * (2025-10-14 8:16:59): [krb5_child[56323]] [unpack_buffer] (0x0100): [RID#29] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:16:59): [krb5_child[56323]] [unpack_buffer] (0x2000): [RID#29] No old ccache * (2025-10-14 8:16:59): [krb5_child[56323]] [unpack_buffer] (0x0100): [RID#29] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:16:59): [krb5_child[56323]] [k5c_precreate_ccache] (0x4000): [RID#29] Recreating ccache * (2025-10-14 8:16:59): [krb5_child[56323]] [k5c_setup_fast] (0x0100): [RID#29] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:16:59): [krb5_child[56323]] [find_principal_in_keytab] (0x4000): [RID#29] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:16:59): [krb5_child[56323]] [match_principal] (0x1000): [RID#29] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:16:59): [krb5_child[56323]] [check_fast_ccache] (0x0200): [RID#29] FAST TGT is still valid. * (2025-10-14 8:16:59): [krb5_child[56323]] [become_user] (0x0200): [RID#29] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:16:59): [krb5_child[56323]] [main] (0x2000): [RID#29] Running as [1464600000][1464600000]. * (2025-10-14 8:16:59): [krb5_child[56323]] [set_lifetime_options] (0x0100): [RID#29] No specific renewable lifetime requested. * (2025-10-14 8:16:59): [krb5_child[56323]] [set_lifetime_options] (0x0100): [RID#29] No specific lifetime requested. * (2025-10-14 8:16:59): [krb5_child[56323]] [set_canonicalize_option] (0x0100): [RID#29] Canonicalization is set to [true] * (2025-10-14 8:16:59): [krb5_child[56323]] [main] (0x0400): [RID#29] Will perform auth * (2025-10-14 8:16:59): [krb5_child[56323]] [main] (0x0400): [RID#29] Will perform online auth * (2025-10-14 8:16:59): [krb5_child[56323]] [tgt_req_child] (0x1000): [RID#29] Attempting to get a TGT * (2025-10-14 8:16:59): [krb5_child[56323]] [get_and_save_tgt] (0x0400): [RID#29] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:16:59): [krb5_child[56323]] [sss_krb5_responder] (0x4000): [RID#29] Got question [password]. * (2025-10-14 8:16:59): [krb5_child[56323]] [get_and_save_tgt] (0x0020): [RID#29] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:16:59): [krb5_child[56323]] [map_krb5_error] (0x0020): [RID#29] 2138: [-1765328360][Preauthentication failed] (2025-10-14 8:17:02): [krb5_child[56325]] [get_and_save_tgt] (0x0020): [RID#31] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:17:02): [krb5_child[56325]] [main] (0x0400): [RID#31] krb5_child started. * (2025-10-14 8:17:02): [krb5_child[56325]] [unpack_buffer] (0x1000): [RID#31] total buffer size: [95] * (2025-10-14 8:17:02): [krb5_child[56325]] [unpack_buffer] (0x0100): [RID#31] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:17:02): [krb5_child[56325]] [unpack_buffer] (0x2000): [RID#31] No old ccache * (2025-10-14 8:17:02): [krb5_child[56325]] [unpack_buffer] (0x0100): [RID#31] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:17:02): [krb5_child[56325]] [k5c_precreate_ccache] (0x4000): [RID#31] Recreating ccache * (2025-10-14 8:17:02): [krb5_child[56325]] [k5c_setup_fast] (0x0100): [RID#31] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:17:02): [krb5_child[56325]] [find_principal_in_keytab] (0x4000): [RID#31] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:17:02): [krb5_child[56325]] [match_principal] (0x1000): [RID#31] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:17:02): [krb5_child[56325]] [check_fast_ccache] (0x0200): [RID#31] FAST TGT is still valid. * (2025-10-14 8:17:02): [krb5_child[56325]] [become_user] (0x0200): [RID#31] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:17:02): [krb5_child[56325]] [main] (0x2000): [RID#31] Running as [1464600000][1464600000]. * (2025-10-14 8:17:02): [krb5_child[56325]] [set_lifetime_options] (0x0100): [RID#31] No specific renewable lifetime requested. * (2025-10-14 8:17:02): [krb5_child[56325]] [set_lifetime_options] (0x0100): [RID#31] No specific lifetime requested. * (2025-10-14 8:17:02): [krb5_child[56325]] [set_canonicalize_option] (0x0100): [RID#31] Canonicalization is set to [true] * (2025-10-14 8:17:02): [krb5_child[56325]] [main] (0x0400): [RID#31] Will perform auth * (2025-10-14 8:17:02): [krb5_child[56325]] [main] (0x0400): [RID#31] Will perform online auth * (2025-10-14 8:17:02): [krb5_child[56325]] [tgt_req_child] (0x1000): [RID#31] Attempting to get a TGT * (2025-10-14 8:17:02): [krb5_child[56325]] [get_and_save_tgt] (0x0400): [RID#31] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:17:02): [krb5_child[56325]] [sss_krb5_responder] (0x4000): [RID#31] Got question [password]. * (2025-10-14 8:17:02): [krb5_child[56325]] [get_and_save_tgt] (0x0020): [RID#31] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:17:02): [krb5_child[56325]] [map_krb5_error] (0x0020): [RID#31] 2138: [-1765328360][Preauthentication failed] (2025-10-14 8:17:09): [krb5_child[56367]] [get_and_save_tgt] (0x0020): [RID#34] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:17:09): [krb5_child[56367]] [main] (0x0400): [RID#34] krb5_child started. * (2025-10-14 8:17:09): [krb5_child[56367]] [unpack_buffer] (0x1000): [RID#34] total buffer size: [95] * (2025-10-14 8:17:09): [krb5_child[56367]] [unpack_buffer] (0x0100): [RID#34] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:17:09): [krb5_child[56367]] [unpack_buffer] (0x2000): [RID#34] No old ccache * (2025-10-14 8:17:09): [krb5_child[56367]] [unpack_buffer] (0x0100): [RID#34] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:17:09): [krb5_child[56367]] [k5c_precreate_ccache] (0x4000): [RID#34] Recreating ccache * (2025-10-14 8:17:09): [krb5_child[56367]] [k5c_setup_fast] (0x0100): [RID#34] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:17:09): [krb5_child[56367]] [find_principal_in_keytab] (0x4000): [RID#34] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:17:09): [krb5_child[56367]] [match_principal] (0x1000): [RID#34] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:17:09): [krb5_child[56367]] [check_fast_ccache] (0x0200): [RID#34] FAST TGT is still valid. * (2025-10-14 8:17:09): [krb5_child[56367]] [become_user] (0x0200): [RID#34] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:17:09): [krb5_child[56367]] [main] (0x2000): [RID#34] Running as [1464600000][1464600000]. * (2025-10-14 8:17:09): [krb5_child[56367]] [set_lifetime_options] (0x0100): [RID#34] No specific renewable lifetime requested. * (2025-10-14 8:17:09): [krb5_child[56367]] [set_lifetime_options] (0x0100): [RID#34] No specific lifetime requested. * (2025-10-14 8:17:09): [krb5_child[56367]] [set_canonicalize_option] (0x0100): [RID#34] Canonicalization is set to [true] * (2025-10-14 8:17:09): [krb5_child[56367]] [main] (0x0400): [RID#34] Will perform auth * (2025-10-14 8:17:09): [krb5_child[56367]] [main] (0x0400): [RID#34] Will perform online auth * (2025-10-14 8:17:09): [krb5_child[56367]] [tgt_req_child] (0x1000): [RID#34] Attempting to get a TGT * (2025-10-14 8:17:09): [krb5_child[56367]] [get_and_save_tgt] (0x0400): [RID#34] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:17:09): [krb5_child[56367]] [get_and_save_tgt] (0x0020): [RID#34] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:17:09): [krb5_child[56367]] [map_krb5_error] (0x0020): [RID#34] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 8:17:12): [krb5_child[56369]] [get_and_save_tgt] (0x0020): [RID#37] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:17:12): [krb5_child[56369]] [main] (0x0400): [RID#37] krb5_child started. * (2025-10-14 8:17:12): [krb5_child[56369]] [unpack_buffer] (0x1000): [RID#37] total buffer size: [94] * (2025-10-14 8:17:12): [krb5_child[56369]] [unpack_buffer] (0x0100): [RID#37] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:17:12): [krb5_child[56369]] [unpack_buffer] (0x2000): [RID#37] No old ccache * (2025-10-14 8:17:12): [krb5_child[56369]] [unpack_buffer] (0x0100): [RID#37] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:17:12): [krb5_child[56369]] [k5c_precreate_ccache] (0x4000): [RID#37] Recreating ccache * (2025-10-14 8:17:12): [krb5_child[56369]] [k5c_setup_fast] (0x0100): [RID#37] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:17:12): [krb5_child[56369]] [find_principal_in_keytab] (0x4000): [RID#37] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:17:12): [krb5_child[56369]] [match_principal] (0x1000): [RID#37] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:17:12): [krb5_child[56369]] [check_fast_ccache] (0x0200): [RID#37] FAST TGT is still valid. * (2025-10-14 8:17:12): [krb5_child[56369]] [become_user] (0x0200): [RID#37] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:17:12): [krb5_child[56369]] [main] (0x2000): [RID#37] Running as [1464600000][1464600000]. * (2025-10-14 8:17:12): [krb5_child[56369]] [set_lifetime_options] (0x0100): [RID#37] No specific renewable lifetime requested. * (2025-10-14 8:17:12): [krb5_child[56369]] [set_lifetime_options] (0x0100): [RID#37] No specific lifetime requested. * (2025-10-14 8:17:12): [krb5_child[56369]] [set_canonicalize_option] (0x0100): [RID#37] Canonicalization is set to [true] * (2025-10-14 8:17:12): [krb5_child[56369]] [main] (0x0400): [RID#37] Will perform auth * (2025-10-14 8:17:12): [krb5_child[56369]] [main] (0x0400): [RID#37] Will perform online auth * (2025-10-14 8:17:12): [krb5_child[56369]] [tgt_req_child] (0x1000): [RID#37] Attempting to get a TGT * (2025-10-14 8:17:12): [krb5_child[56369]] [get_and_save_tgt] (0x0400): [RID#37] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:17:12): [krb5_child[56369]] [get_and_save_tgt] (0x0020): [RID#37] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:17:12): [krb5_child[56369]] [map_krb5_error] (0x0020): [RID#37] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 8:17:15): [krb5_child[56371]] [get_and_save_tgt] (0x0020): [RID#40] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:17:15): [krb5_child[56371]] [main] (0x0400): [RID#40] krb5_child started. * (2025-10-14 8:17:15): [krb5_child[56371]] [unpack_buffer] (0x1000): [RID#40] total buffer size: [97] * (2025-10-14 8:17:15): [krb5_child[56371]] [unpack_buffer] (0x0100): [RID#40] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:17:15): [krb5_child[56371]] [unpack_buffer] (0x2000): [RID#40] No old ccache * (2025-10-14 8:17:15): [krb5_child[56371]] [unpack_buffer] (0x0100): [RID#40] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:17:15): [krb5_child[56371]] [k5c_precreate_ccache] (0x4000): [RID#40] Recreating ccache * (2025-10-14 8:17:15): [krb5_child[56371]] [k5c_setup_fast] (0x0100): [RID#40] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:17:15): [krb5_child[56371]] [find_principal_in_keytab] (0x4000): [RID#40] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:17:15): [krb5_child[56371]] [match_principal] (0x1000): [RID#40] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:17:15): [krb5_child[56371]] [check_fast_ccache] (0x0200): [RID#40] FAST TGT is still valid. * (2025-10-14 8:17:15): [krb5_child[56371]] [become_user] (0x0200): [RID#40] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:17:15): [krb5_child[56371]] [main] (0x2000): [RID#40] Running as [1464600000][1464600000]. * (2025-10-14 8:17:15): [krb5_child[56371]] [set_lifetime_options] (0x0100): [RID#40] No specific renewable lifetime requested. * (2025-10-14 8:17:15): [krb5_child[56371]] [set_lifetime_options] (0x0100): [RID#40] No specific lifetime requested. * (2025-10-14 8:17:15): [krb5_child[56371]] [set_canonicalize_option] (0x0100): [RID#40] Canonicalization is set to [true] * (2025-10-14 8:17:15): [krb5_child[56371]] [main] (0x0400): [RID#40] Will perform auth * (2025-10-14 8:17:15): [krb5_child[56371]] [main] (0x0400): [RID#40] Will perform online auth * (2025-10-14 8:17:15): [krb5_child[56371]] [tgt_req_child] (0x1000): [RID#40] Attempting to get a TGT * (2025-10-14 8:17:15): [krb5_child[56371]] [get_and_save_tgt] (0x0400): [RID#40] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:17:15): [krb5_child[56371]] [get_and_save_tgt] (0x0020): [RID#40] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:17:15): [krb5_child[56371]] [map_krb5_error] (0x0020): [RID#40] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 8:17:18): [krb5_child[56373]] [get_and_save_tgt] (0x0020): [RID#42] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:17:18): [krb5_child[56373]] [main] (0x0400): [RID#42] krb5_child started. * (2025-10-14 8:17:18): [krb5_child[56373]] [unpack_buffer] (0x1000): [RID#42] total buffer size: [95] * (2025-10-14 8:17:18): [krb5_child[56373]] [unpack_buffer] (0x0100): [RID#42] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:17:18): [krb5_child[56373]] [unpack_buffer] (0x2000): [RID#42] No old ccache * (2025-10-14 8:17:18): [krb5_child[56373]] [unpack_buffer] (0x0100): [RID#42] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:17:18): [krb5_child[56373]] [k5c_precreate_ccache] (0x4000): [RID#42] Recreating ccache * (2025-10-14 8:17:18): [krb5_child[56373]] [k5c_setup_fast] (0x0100): [RID#42] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:17:18): [krb5_child[56373]] [find_principal_in_keytab] (0x4000): [RID#42] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:17:18): [krb5_child[56373]] [match_principal] (0x1000): [RID#42] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:17:18): [krb5_child[56373]] [check_fast_ccache] (0x0200): [RID#42] FAST TGT is still valid. * (2025-10-14 8:17:18): [krb5_child[56373]] [become_user] (0x0200): [RID#42] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:17:18): [krb5_child[56373]] [main] (0x2000): [RID#42] Running as [1464600000][1464600000]. * (2025-10-14 8:17:18): [krb5_child[56373]] [set_lifetime_options] (0x0100): [RID#42] No specific renewable lifetime requested. * (2025-10-14 8:17:18): [krb5_child[56373]] [set_lifetime_options] (0x0100): [RID#42] No specific lifetime requested. * (2025-10-14 8:17:18): [krb5_child[56373]] [set_canonicalize_option] (0x0100): [RID#42] Canonicalization is set to [true] * (2025-10-14 8:17:18): [krb5_child[56373]] [main] (0x0400): [RID#42] Will perform auth * (2025-10-14 8:17:18): [krb5_child[56373]] [main] (0x0400): [RID#42] Will perform online auth * (2025-10-14 8:17:18): [krb5_child[56373]] [tgt_req_child] (0x1000): [RID#42] Attempting to get a TGT * (2025-10-14 8:17:18): [krb5_child[56373]] [get_and_save_tgt] (0x0400): [RID#42] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:17:18): [krb5_child[56373]] [get_and_save_tgt] (0x0020): [RID#42] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:17:18): [krb5_child[56373]] [map_krb5_error] (0x0020): [RID#42] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 8:17:21): [krb5_child[56375]] [get_and_save_tgt] (0x0020): [RID#45] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:17:21): [krb5_child[56375]] [main] (0x0400): [RID#45] krb5_child started. * (2025-10-14 8:17:21): [krb5_child[56375]] [unpack_buffer] (0x1000): [RID#45] total buffer size: [95] * (2025-10-14 8:17:21): [krb5_child[56375]] [unpack_buffer] (0x0100): [RID#45] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:17:21): [krb5_child[56375]] [unpack_buffer] (0x2000): [RID#45] No old ccache * (2025-10-14 8:17:21): [krb5_child[56375]] [unpack_buffer] (0x0100): [RID#45] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:17:21): [krb5_child[56375]] [k5c_precreate_ccache] (0x4000): [RID#45] Recreating ccache * (2025-10-14 8:17:21): [krb5_child[56375]] [k5c_setup_fast] (0x0100): [RID#45] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:17:21): [krb5_child[56375]] [find_principal_in_keytab] (0x4000): [RID#45] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:17:21): [krb5_child[56375]] [match_principal] (0x1000): [RID#45] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:17:21): [krb5_child[56375]] [check_fast_ccache] (0x0200): [RID#45] FAST TGT is still valid. * (2025-10-14 8:17:21): [krb5_child[56375]] [become_user] (0x0200): [RID#45] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:17:21): [krb5_child[56375]] [main] (0x2000): [RID#45] Running as [1464600000][1464600000]. * (2025-10-14 8:17:21): [krb5_child[56375]] [set_lifetime_options] (0x0100): [RID#45] No specific renewable lifetime requested. * (2025-10-14 8:17:21): [krb5_child[56375]] [set_lifetime_options] (0x0100): [RID#45] No specific lifetime requested. * (2025-10-14 8:17:21): [krb5_child[56375]] [set_canonicalize_option] (0x0100): [RID#45] Canonicalization is set to [true] * (2025-10-14 8:17:21): [krb5_child[56375]] [main] (0x0400): [RID#45] Will perform auth * (2025-10-14 8:17:21): [krb5_child[56375]] [main] (0x0400): [RID#45] Will perform online auth * (2025-10-14 8:17:21): [krb5_child[56375]] [tgt_req_child] (0x1000): [RID#45] Attempting to get a TGT * (2025-10-14 8:17:21): [krb5_child[56375]] [get_and_save_tgt] (0x0400): [RID#45] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:17:21): [krb5_child[56375]] [get_and_save_tgt] (0x0020): [RID#45] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:17:21): [krb5_child[56375]] [map_krb5_error] (0x0020): [RID#45] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 8:17:24): [krb5_child[56674]] [get_and_save_tgt] (0x0020): [RID#47] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:17:24): [krb5_child[56674]] [main] (0x0400): [RID#47] krb5_child started. * (2025-10-14 8:17:24): [krb5_child[56674]] [unpack_buffer] (0x1000): [RID#47] total buffer size: [98] * (2025-10-14 8:17:24): [krb5_child[56674]] [unpack_buffer] (0x0100): [RID#47] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:17:24): [krb5_child[56674]] [unpack_buffer] (0x2000): [RID#47] No old ccache * (2025-10-14 8:17:24): [krb5_child[56674]] [unpack_buffer] (0x0100): [RID#47] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:17:24): [krb5_child[56674]] [k5c_precreate_ccache] (0x4000): [RID#47] Recreating ccache * (2025-10-14 8:17:24): [krb5_child[56674]] [k5c_setup_fast] (0x0100): [RID#47] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:17:24): [krb5_child[56674]] [find_principal_in_keytab] (0x4000): [RID#47] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:17:24): [krb5_child[56674]] [match_principal] (0x1000): [RID#47] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:17:24): [krb5_child[56674]] [check_fast_ccache] (0x0200): [RID#47] FAST TGT is still valid. * (2025-10-14 8:17:24): [krb5_child[56674]] [become_user] (0x0200): [RID#47] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:17:24): [krb5_child[56674]] [main] (0x2000): [RID#47] Running as [1464600000][1464600000]. * (2025-10-14 8:17:24): [krb5_child[56674]] [set_lifetime_options] (0x0100): [RID#47] No specific renewable lifetime requested. * (2025-10-14 8:17:24): [krb5_child[56674]] [set_lifetime_options] (0x0100): [RID#47] No specific lifetime requested. * (2025-10-14 8:17:24): [krb5_child[56674]] [set_canonicalize_option] (0x0100): [RID#47] Canonicalization is set to [true] * (2025-10-14 8:17:24): [krb5_child[56674]] [main] (0x0400): [RID#47] Will perform auth * (2025-10-14 8:17:24): [krb5_child[56674]] [main] (0x0400): [RID#47] Will perform online auth * (2025-10-14 8:17:24): [krb5_child[56674]] [tgt_req_child] (0x1000): [RID#47] Attempting to get a TGT * (2025-10-14 8:17:24): [krb5_child[56674]] [get_and_save_tgt] (0x0400): [RID#47] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:17:24): [krb5_child[56674]] [get_and_save_tgt] (0x0020): [RID#47] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:17:24): [krb5_child[56674]] [map_krb5_error] (0x0020): [RID#47] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 8:17:31): [krb5_child[57243]] [get_and_save_tgt] (0x0020): [RID#51] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:17:31): [krb5_child[57243]] [main] (0x0400): [RID#51] krb5_child started. * (2025-10-14 8:17:31): [krb5_child[57243]] [unpack_buffer] (0x1000): [RID#51] total buffer size: [98] * (2025-10-14 8:17:31): [krb5_child[57243]] [unpack_buffer] (0x0100): [RID#51] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:17:31): [krb5_child[57243]] [unpack_buffer] (0x2000): [RID#51] No old ccache * (2025-10-14 8:17:31): [krb5_child[57243]] [unpack_buffer] (0x0100): [RID#51] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:17:31): [krb5_child[57243]] [k5c_precreate_ccache] (0x4000): [RID#51] Recreating ccache * (2025-10-14 8:17:31): [krb5_child[57243]] [k5c_setup_fast] (0x0100): [RID#51] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:17:31): [krb5_child[57243]] [find_principal_in_keytab] (0x4000): [RID#51] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:17:31): [krb5_child[57243]] [match_principal] (0x1000): [RID#51] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:17:31): [krb5_child[57243]] [check_fast_ccache] (0x0200): [RID#51] FAST TGT is still valid. * (2025-10-14 8:17:31): [krb5_child[57243]] [become_user] (0x0200): [RID#51] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:17:31): [krb5_child[57243]] [main] (0x2000): [RID#51] Running as [1464600000][1464600000]. * (2025-10-14 8:17:31): [krb5_child[57243]] [set_lifetime_options] (0x0100): [RID#51] No specific renewable lifetime requested. * (2025-10-14 8:17:31): [krb5_child[57243]] [set_lifetime_options] (0x0100): [RID#51] No specific lifetime requested. * (2025-10-14 8:17:31): [krb5_child[57243]] [set_canonicalize_option] (0x0100): [RID#51] Canonicalization is set to [true] * (2025-10-14 8:17:31): [krb5_child[57243]] [main] (0x0400): [RID#51] Will perform auth * (2025-10-14 8:17:31): [krb5_child[57243]] [main] (0x0400): [RID#51] Will perform online auth * (2025-10-14 8:17:31): [krb5_child[57243]] [tgt_req_child] (0x1000): [RID#51] Attempting to get a TGT * (2025-10-14 8:17:31): [krb5_child[57243]] [get_and_save_tgt] (0x0400): [RID#51] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:17:31): [krb5_child[57243]] [get_and_save_tgt] (0x0020): [RID#51] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:17:31): [krb5_child[57243]] [map_krb5_error] (0x0020): [RID#51] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 8:17:34): [krb5_child[57475]] [get_and_save_tgt] (0x0020): [RID#53] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:17:34): [krb5_child[57475]] [main] (0x0400): [RID#53] krb5_child started. * (2025-10-14 8:17:34): [krb5_child[57475]] [unpack_buffer] (0x1000): [RID#53] total buffer size: [97] * (2025-10-14 8:17:34): [krb5_child[57475]] [unpack_buffer] (0x0100): [RID#53] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:17:34): [krb5_child[57475]] [unpack_buffer] (0x2000): [RID#53] No old ccache * (2025-10-14 8:17:34): [krb5_child[57475]] [unpack_buffer] (0x0100): [RID#53] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:17:34): [krb5_child[57475]] [k5c_precreate_ccache] (0x4000): [RID#53] Recreating ccache * (2025-10-14 8:17:34): [krb5_child[57475]] [k5c_setup_fast] (0x0100): [RID#53] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:17:34): [krb5_child[57475]] [find_principal_in_keytab] (0x4000): [RID#53] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:17:34): [krb5_child[57475]] [match_principal] (0x1000): [RID#53] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:17:34): [krb5_child[57475]] [check_fast_ccache] (0x0200): [RID#53] FAST TGT is still valid. * (2025-10-14 8:17:34): [krb5_child[57475]] [become_user] (0x0200): [RID#53] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:17:34): [krb5_child[57475]] [main] (0x2000): [RID#53] Running as [1464600000][1464600000]. * (2025-10-14 8:17:34): [krb5_child[57475]] [set_lifetime_options] (0x0100): [RID#53] No specific renewable lifetime requested. * (2025-10-14 8:17:34): [krb5_child[57475]] [set_lifetime_options] (0x0100): [RID#53] No specific lifetime requested. * (2025-10-14 8:17:34): [krb5_child[57475]] [set_canonicalize_option] (0x0100): [RID#53] Canonicalization is set to [true] * (2025-10-14 8:17:34): [krb5_child[57475]] [main] (0x0400): [RID#53] Will perform auth * (2025-10-14 8:17:34): [krb5_child[57475]] [main] (0x0400): [RID#53] Will perform online auth * (2025-10-14 8:17:34): [krb5_child[57475]] [tgt_req_child] (0x1000): [RID#53] Attempting to get a TGT * (2025-10-14 8:17:34): [krb5_child[57475]] [get_and_save_tgt] (0x0400): [RID#53] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:17:34): [krb5_child[57475]] [get_and_save_tgt] (0x0020): [RID#53] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:17:34): [krb5_child[57475]] [map_krb5_error] (0x0020): [RID#53] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 8:17:37): [krb5_child[57535]] [get_and_save_tgt] (0x0020): [RID#56] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:17:37): [krb5_child[57535]] [main] (0x0400): [RID#56] krb5_child started. * (2025-10-14 8:17:37): [krb5_child[57535]] [unpack_buffer] (0x1000): [RID#56] total buffer size: [108] * (2025-10-14 8:17:37): [krb5_child[57535]] [unpack_buffer] (0x0100): [RID#56] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:17:37): [krb5_child[57535]] [unpack_buffer] (0x2000): [RID#56] No old ccache * (2025-10-14 8:17:37): [krb5_child[57535]] [unpack_buffer] (0x0100): [RID#56] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:17:37): [krb5_child[57535]] [k5c_precreate_ccache] (0x4000): [RID#56] Recreating ccache * (2025-10-14 8:17:37): [krb5_child[57535]] [k5c_setup_fast] (0x0100): [RID#56] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:17:37): [krb5_child[57535]] [find_principal_in_keytab] (0x4000): [RID#56] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:17:37): [krb5_child[57535]] [match_principal] (0x1000): [RID#56] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:17:37): [krb5_child[57535]] [check_fast_ccache] (0x0200): [RID#56] FAST TGT is still valid. * (2025-10-14 8:17:37): [krb5_child[57535]] [become_user] (0x0200): [RID#56] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:17:37): [krb5_child[57535]] [main] (0x2000): [RID#56] Running as [1464600000][1464600000]. * (2025-10-14 8:17:37): [krb5_child[57535]] [set_lifetime_options] (0x0100): [RID#56] No specific renewable lifetime requested. * (2025-10-14 8:17:37): [krb5_child[57535]] [set_lifetime_options] (0x0100): [RID#56] No specific lifetime requested. * (2025-10-14 8:17:37): [krb5_child[57535]] [set_canonicalize_option] (0x0100): [RID#56] Canonicalization is set to [true] * (2025-10-14 8:17:37): [krb5_child[57535]] [main] (0x0400): [RID#56] Will perform auth * (2025-10-14 8:17:37): [krb5_child[57535]] [main] (0x0400): [RID#56] Will perform online auth * (2025-10-14 8:17:37): [krb5_child[57535]] [tgt_req_child] (0x1000): [RID#56] Attempting to get a TGT * (2025-10-14 8:17:37): [krb5_child[57535]] [get_and_save_tgt] (0x0400): [RID#56] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:17:37): [krb5_child[57535]] [get_and_save_tgt] (0x0020): [RID#56] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:17:37): [krb5_child[57535]] [map_krb5_error] (0x0020): [RID#56] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 8:17:40): [krb5_child[57605]] [get_and_save_tgt] (0x0020): [RID#58] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 8:17:40): [krb5_child[57605]] [main] (0x0400): [RID#58] krb5_child started. * (2025-10-14 8:17:40): [krb5_child[57605]] [unpack_buffer] (0x1000): [RID#58] total buffer size: [110] * (2025-10-14 8:17:40): [krb5_child[57605]] [unpack_buffer] (0x0100): [RID#58] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 8:17:40): [krb5_child[57605]] [unpack_buffer] (0x2000): [RID#58] No old ccache * (2025-10-14 8:17:40): [krb5_child[57605]] [unpack_buffer] (0x0100): [RID#58] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 8:17:40): [krb5_child[57605]] [k5c_precreate_ccache] (0x4000): [RID#58] Recreating ccache * (2025-10-14 8:17:40): [krb5_child[57605]] [k5c_setup_fast] (0x0100): [RID#58] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 8:17:40): [krb5_child[57605]] [find_principal_in_keytab] (0x4000): [RID#58] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 8:17:40): [krb5_child[57605]] [match_principal] (0x1000): [RID#58] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 8:17:40): [krb5_child[57605]] [check_fast_ccache] (0x0200): [RID#58] FAST TGT is still valid. * (2025-10-14 8:17:40): [krb5_child[57605]] [become_user] (0x0200): [RID#58] Trying to become user [1464600000][1464600000]. * (2025-10-14 8:17:40): [krb5_child[57605]] [main] (0x2000): [RID#58] Running as [1464600000][1464600000]. * (2025-10-14 8:17:40): [krb5_child[57605]] [set_lifetime_options] (0x0100): [RID#58] No specific renewable lifetime requested. * (2025-10-14 8:17:40): [krb5_child[57605]] [set_lifetime_options] (0x0100): [RID#58] No specific lifetime requested. * (2025-10-14 8:17:40): [krb5_child[57605]] [set_canonicalize_option] (0x0100): [RID#58] Canonicalization is set to [true] * (2025-10-14 8:17:40): [krb5_child[57605]] [main] (0x0400): [RID#58] Will perform auth * (2025-10-14 8:17:40): [krb5_child[57605]] [main] (0x0400): [RID#58] Will perform online auth * (2025-10-14 8:17:40): [krb5_child[57605]] [tgt_req_child] (0x1000): [RID#58] Attempting to get a TGT * (2025-10-14 8:17:40): [krb5_child[57605]] [get_and_save_tgt] (0x0400): [RID#58] Attempting kinit for realm [OOO.TEST] * (2025-10-14 8:17:40): [krb5_child[57605]] [get_and_save_tgt] (0x0020): [RID#58] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 8:17:40): [krb5_child[57605]] [map_krb5_error] (0x0020): [RID#58] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 9:00:35): [krb5_child[83840]] [get_and_save_tgt] (0x0020): [RID#102] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:00:35): [krb5_child[83840]] [main] (0x0400): [RID#102] krb5_child started. * (2025-10-14 9:00:35): [krb5_child[83840]] [unpack_buffer] (0x1000): [RID#102] total buffer size: [96] * (2025-10-14 9:00:35): [krb5_child[83840]] [unpack_buffer] (0x0100): [RID#102] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:00:35): [krb5_child[83840]] [unpack_buffer] (0x2000): [RID#102] No old ccache * (2025-10-14 9:00:35): [krb5_child[83840]] [unpack_buffer] (0x0100): [RID#102] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:00:35): [krb5_child[83840]] [k5c_precreate_ccache] (0x4000): [RID#102] Recreating ccache * (2025-10-14 9:00:35): [krb5_child[83840]] [k5c_setup_fast] (0x0100): [RID#102] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:00:35): [krb5_child[83840]] [find_principal_in_keytab] (0x4000): [RID#102] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:00:35): [krb5_child[83840]] [match_principal] (0x1000): [RID#102] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:00:35): [krb5_child[83840]] [check_fast_ccache] (0x0200): [RID#102] FAST TGT is still valid. * (2025-10-14 9:00:35): [krb5_child[83840]] [become_user] (0x0200): [RID#102] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:00:35): [krb5_child[83840]] [main] (0x2000): [RID#102] Running as [1464600000][1464600000]. * (2025-10-14 9:00:35): [krb5_child[83840]] [set_lifetime_options] (0x0100): [RID#102] No specific renewable lifetime requested. * (2025-10-14 9:00:35): [krb5_child[83840]] [set_lifetime_options] (0x0100): [RID#102] No specific lifetime requested. * (2025-10-14 9:00:35): [krb5_child[83840]] [set_canonicalize_option] (0x0100): [RID#102] Canonicalization is set to [true] * (2025-10-14 9:00:35): [krb5_child[83840]] [main] (0x0400): [RID#102] Will perform auth * (2025-10-14 9:00:35): [krb5_child[83840]] [main] (0x0400): [RID#102] Will perform online auth * (2025-10-14 9:00:35): [krb5_child[83840]] [tgt_req_child] (0x1000): [RID#102] Attempting to get a TGT * (2025-10-14 9:00:35): [krb5_child[83840]] [get_and_save_tgt] (0x0400): [RID#102] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:00:35): [krb5_child[83840]] [sss_krb5_responder] (0x4000): [RID#102] Got question [password]. * (2025-10-14 9:00:35): [krb5_child[83840]] [get_and_save_tgt] (0x0020): [RID#102] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:00:35): [krb5_child[83840]] [map_krb5_error] (0x0020): [RID#102] 2138: [-1765328360][Preauthentication failed] (2025-10-14 9:00:39): [krb5_child[83979]] [get_and_save_tgt] (0x0020): [RID#104] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:00:39): [krb5_child[83979]] [main] (0x0400): [RID#104] krb5_child started. * (2025-10-14 9:00:39): [krb5_child[83979]] [unpack_buffer] (0x1000): [RID#104] total buffer size: [97] * (2025-10-14 9:00:39): [krb5_child[83979]] [unpack_buffer] (0x0100): [RID#104] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:00:39): [krb5_child[83979]] [unpack_buffer] (0x2000): [RID#104] No old ccache * (2025-10-14 9:00:39): [krb5_child[83979]] [unpack_buffer] (0x0100): [RID#104] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:00:39): [krb5_child[83979]] [k5c_precreate_ccache] (0x4000): [RID#104] Recreating ccache * (2025-10-14 9:00:39): [krb5_child[83979]] [k5c_setup_fast] (0x0100): [RID#104] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:00:39): [krb5_child[83979]] [find_principal_in_keytab] (0x4000): [RID#104] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:00:39): [krb5_child[83979]] [match_principal] (0x1000): [RID#104] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:00:39): [krb5_child[83979]] [check_fast_ccache] (0x0200): [RID#104] FAST TGT is still valid. * (2025-10-14 9:00:39): [krb5_child[83979]] [become_user] (0x0200): [RID#104] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:00:39): [krb5_child[83979]] [main] (0x2000): [RID#104] Running as [1464600000][1464600000]. * (2025-10-14 9:00:39): [krb5_child[83979]] [set_lifetime_options] (0x0100): [RID#104] No specific renewable lifetime requested. * (2025-10-14 9:00:39): [krb5_child[83979]] [set_lifetime_options] (0x0100): [RID#104] No specific lifetime requested. * (2025-10-14 9:00:39): [krb5_child[83979]] [set_canonicalize_option] (0x0100): [RID#104] Canonicalization is set to [true] * (2025-10-14 9:00:39): [krb5_child[83979]] [main] (0x0400): [RID#104] Will perform auth * (2025-10-14 9:00:39): [krb5_child[83979]] [main] (0x0400): [RID#104] Will perform online auth * (2025-10-14 9:00:39): [krb5_child[83979]] [tgt_req_child] (0x1000): [RID#104] Attempting to get a TGT * (2025-10-14 9:00:39): [krb5_child[83979]] [get_and_save_tgt] (0x0400): [RID#104] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:00:39): [krb5_child[83979]] [sss_krb5_responder] (0x4000): [RID#104] Got question [password]. * (2025-10-14 9:00:39): [krb5_child[83979]] [get_and_save_tgt] (0x0020): [RID#104] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:00:39): [krb5_child[83979]] [map_krb5_error] (0x0020): [RID#104] 2138: [-1765328360][Preauthentication failed] (2025-10-14 9:00:42): [krb5_child[83981]] [get_and_save_tgt] (0x0020): [RID#107] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:00:42): [krb5_child[83981]] [main] (0x0400): [RID#107] krb5_child started. * (2025-10-14 9:00:42): [krb5_child[83981]] [unpack_buffer] (0x1000): [RID#107] total buffer size: [96] * (2025-10-14 9:00:42): [krb5_child[83981]] [unpack_buffer] (0x0100): [RID#107] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:00:42): [krb5_child[83981]] [unpack_buffer] (0x2000): [RID#107] No old ccache * (2025-10-14 9:00:42): [krb5_child[83981]] [unpack_buffer] (0x0100): [RID#107] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:00:42): [krb5_child[83981]] [k5c_precreate_ccache] (0x4000): [RID#107] Recreating ccache * (2025-10-14 9:00:42): [krb5_child[83981]] [k5c_setup_fast] (0x0100): [RID#107] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:00:42): [krb5_child[83981]] [find_principal_in_keytab] (0x4000): [RID#107] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:00:42): [krb5_child[83981]] [match_principal] (0x1000): [RID#107] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:00:42): [krb5_child[83981]] [check_fast_ccache] (0x0200): [RID#107] FAST TGT is still valid. * (2025-10-14 9:00:42): [krb5_child[83981]] [become_user] (0x0200): [RID#107] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:00:42): [krb5_child[83981]] [main] (0x2000): [RID#107] Running as [1464600000][1464600000]. * (2025-10-14 9:00:42): [krb5_child[83981]] [set_lifetime_options] (0x0100): [RID#107] No specific renewable lifetime requested. * (2025-10-14 9:00:42): [krb5_child[83981]] [set_lifetime_options] (0x0100): [RID#107] No specific lifetime requested. * (2025-10-14 9:00:42): [krb5_child[83981]] [set_canonicalize_option] (0x0100): [RID#107] Canonicalization is set to [true] * (2025-10-14 9:00:42): [krb5_child[83981]] [main] (0x0400): [RID#107] Will perform auth * (2025-10-14 9:00:42): [krb5_child[83981]] [main] (0x0400): [RID#107] Will perform online auth * (2025-10-14 9:00:42): [krb5_child[83981]] [tgt_req_child] (0x1000): [RID#107] Attempting to get a TGT * (2025-10-14 9:00:42): [krb5_child[83981]] [get_and_save_tgt] (0x0400): [RID#107] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:00:42): [krb5_child[83981]] [sss_krb5_responder] (0x4000): [RID#107] Got question [password]. * (2025-10-14 9:00:42): [krb5_child[83981]] [get_and_save_tgt] (0x0020): [RID#107] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:00:42): [krb5_child[83981]] [map_krb5_error] (0x0020): [RID#107] 2138: [-1765328360][Preauthentication failed] (2025-10-14 9:00:45): [krb5_child[84012]] [get_and_save_tgt] (0x0020): [RID#109] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:00:45): [krb5_child[84012]] [main] (0x0400): [RID#109] krb5_child started. * (2025-10-14 9:00:45): [krb5_child[84012]] [unpack_buffer] (0x1000): [RID#109] total buffer size: [95] * (2025-10-14 9:00:45): [krb5_child[84012]] [unpack_buffer] (0x0100): [RID#109] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:00:45): [krb5_child[84012]] [unpack_buffer] (0x2000): [RID#109] No old ccache * (2025-10-14 9:00:45): [krb5_child[84012]] [unpack_buffer] (0x0100): [RID#109] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:00:45): [krb5_child[84012]] [k5c_precreate_ccache] (0x4000): [RID#109] Recreating ccache * (2025-10-14 9:00:45): [krb5_child[84012]] [k5c_setup_fast] (0x0100): [RID#109] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:00:45): [krb5_child[84012]] [find_principal_in_keytab] (0x4000): [RID#109] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:00:45): [krb5_child[84012]] [match_principal] (0x1000): [RID#109] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:00:45): [krb5_child[84012]] [check_fast_ccache] (0x0200): [RID#109] FAST TGT is still valid. * (2025-10-14 9:00:45): [krb5_child[84012]] [become_user] (0x0200): [RID#109] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:00:45): [krb5_child[84012]] [main] (0x2000): [RID#109] Running as [1464600000][1464600000]. * (2025-10-14 9:00:45): [krb5_child[84012]] [set_lifetime_options] (0x0100): [RID#109] No specific renewable lifetime requested. * (2025-10-14 9:00:45): [krb5_child[84012]] [set_lifetime_options] (0x0100): [RID#109] No specific lifetime requested. * (2025-10-14 9:00:45): [krb5_child[84012]] [set_canonicalize_option] (0x0100): [RID#109] Canonicalization is set to [true] * (2025-10-14 9:00:45): [krb5_child[84012]] [main] (0x0400): [RID#109] Will perform auth * (2025-10-14 9:00:45): [krb5_child[84012]] [main] (0x0400): [RID#109] Will perform online auth * (2025-10-14 9:00:45): [krb5_child[84012]] [tgt_req_child] (0x1000): [RID#109] Attempting to get a TGT * (2025-10-14 9:00:45): [krb5_child[84012]] [get_and_save_tgt] (0x0400): [RID#109] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:00:45): [krb5_child[84012]] [sss_krb5_responder] (0x4000): [RID#109] Got question [password]. * (2025-10-14 9:00:45): [krb5_child[84012]] [get_and_save_tgt] (0x0020): [RID#109] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:00:45): [krb5_child[84012]] [map_krb5_error] (0x0020): [RID#109] 2138: [-1765328360][Preauthentication failed] (2025-10-14 9:00:48): [krb5_child[84014]] [get_and_save_tgt] (0x0020): [RID#112] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:00:48): [krb5_child[84014]] [main] (0x0400): [RID#112] krb5_child started. * (2025-10-14 9:00:48): [krb5_child[84014]] [unpack_buffer] (0x1000): [RID#112] total buffer size: [96] * (2025-10-14 9:00:48): [krb5_child[84014]] [unpack_buffer] (0x0100): [RID#112] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:00:48): [krb5_child[84014]] [unpack_buffer] (0x2000): [RID#112] No old ccache * (2025-10-14 9:00:48): [krb5_child[84014]] [unpack_buffer] (0x0100): [RID#112] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:00:48): [krb5_child[84014]] [k5c_precreate_ccache] (0x4000): [RID#112] Recreating ccache * (2025-10-14 9:00:48): [krb5_child[84014]] [k5c_setup_fast] (0x0100): [RID#112] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:00:48): [krb5_child[84014]] [find_principal_in_keytab] (0x4000): [RID#112] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:00:48): [krb5_child[84014]] [match_principal] (0x1000): [RID#112] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:00:48): [krb5_child[84014]] [check_fast_ccache] (0x0200): [RID#112] FAST TGT is still valid. * (2025-10-14 9:00:48): [krb5_child[84014]] [become_user] (0x0200): [RID#112] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:00:48): [krb5_child[84014]] [main] (0x2000): [RID#112] Running as [1464600000][1464600000]. * (2025-10-14 9:00:48): [krb5_child[84014]] [set_lifetime_options] (0x0100): [RID#112] No specific renewable lifetime requested. * (2025-10-14 9:00:48): [krb5_child[84014]] [set_lifetime_options] (0x0100): [RID#112] No specific lifetime requested. * (2025-10-14 9:00:48): [krb5_child[84014]] [set_canonicalize_option] (0x0100): [RID#112] Canonicalization is set to [true] * (2025-10-14 9:00:48): [krb5_child[84014]] [main] (0x0400): [RID#112] Will perform auth * (2025-10-14 9:00:48): [krb5_child[84014]] [main] (0x0400): [RID#112] Will perform online auth * (2025-10-14 9:00:48): [krb5_child[84014]] [tgt_req_child] (0x1000): [RID#112] Attempting to get a TGT * (2025-10-14 9:00:48): [krb5_child[84014]] [get_and_save_tgt] (0x0400): [RID#112] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:00:48): [krb5_child[84014]] [sss_krb5_responder] (0x4000): [RID#112] Got question [password]. * (2025-10-14 9:00:48): [krb5_child[84014]] [get_and_save_tgt] (0x0020): [RID#112] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:00:48): [krb5_child[84014]] [map_krb5_error] (0x0020): [RID#112] 2138: [-1765328360][Preauthentication failed] (2025-10-14 9:00:51): [krb5_child[84016]] [get_and_save_tgt] (0x0020): [RID#115] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:00:51): [krb5_child[84016]] [main] (0x0400): [RID#115] krb5_child started. * (2025-10-14 9:00:51): [krb5_child[84016]] [unpack_buffer] (0x1000): [RID#115] total buffer size: [95] * (2025-10-14 9:00:51): [krb5_child[84016]] [unpack_buffer] (0x0100): [RID#115] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:00:51): [krb5_child[84016]] [unpack_buffer] (0x2000): [RID#115] No old ccache * (2025-10-14 9:00:51): [krb5_child[84016]] [unpack_buffer] (0x0100): [RID#115] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:00:51): [krb5_child[84016]] [k5c_precreate_ccache] (0x4000): [RID#115] Recreating ccache * (2025-10-14 9:00:51): [krb5_child[84016]] [k5c_setup_fast] (0x0100): [RID#115] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:00:51): [krb5_child[84016]] [find_principal_in_keytab] (0x4000): [RID#115] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:00:51): [krb5_child[84016]] [match_principal] (0x1000): [RID#115] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:00:51): [krb5_child[84016]] [check_fast_ccache] (0x0200): [RID#115] FAST TGT is still valid. * (2025-10-14 9:00:51): [krb5_child[84016]] [become_user] (0x0200): [RID#115] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:00:51): [krb5_child[84016]] [main] (0x2000): [RID#115] Running as [1464600000][1464600000]. * (2025-10-14 9:00:51): [krb5_child[84016]] [set_lifetime_options] (0x0100): [RID#115] No specific renewable lifetime requested. * (2025-10-14 9:00:51): [krb5_child[84016]] [set_lifetime_options] (0x0100): [RID#115] No specific lifetime requested. * (2025-10-14 9:00:51): [krb5_child[84016]] [set_canonicalize_option] (0x0100): [RID#115] Canonicalization is set to [true] * (2025-10-14 9:00:51): [krb5_child[84016]] [main] (0x0400): [RID#115] Will perform auth * (2025-10-14 9:00:51): [krb5_child[84016]] [main] (0x0400): [RID#115] Will perform online auth * (2025-10-14 9:00:51): [krb5_child[84016]] [tgt_req_child] (0x1000): [RID#115] Attempting to get a TGT * (2025-10-14 9:00:51): [krb5_child[84016]] [get_and_save_tgt] (0x0400): [RID#115] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:00:51): [krb5_child[84016]] [sss_krb5_responder] (0x4000): [RID#115] Got question [password]. * (2025-10-14 9:00:51): [krb5_child[84016]] [get_and_save_tgt] (0x0020): [RID#115] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:00:51): [krb5_child[84016]] [map_krb5_error] (0x0020): [RID#115] 2138: [-1765328360][Preauthentication failed] (2025-10-14 9:00:56): [krb5_child[84081]] [get_and_save_tgt] (0x0020): [RID#118] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:00:56): [krb5_child[84081]] [main] (0x0400): [RID#118] krb5_child started. * (2025-10-14 9:00:56): [krb5_child[84081]] [unpack_buffer] (0x1000): [RID#118] total buffer size: [95] * (2025-10-14 9:00:56): [krb5_child[84081]] [unpack_buffer] (0x0100): [RID#118] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:00:56): [krb5_child[84081]] [unpack_buffer] (0x2000): [RID#118] No old ccache * (2025-10-14 9:00:56): [krb5_child[84081]] [unpack_buffer] (0x0100): [RID#118] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:00:56): [krb5_child[84081]] [k5c_precreate_ccache] (0x4000): [RID#118] Recreating ccache * (2025-10-14 9:00:56): [krb5_child[84081]] [k5c_setup_fast] (0x0100): [RID#118] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:00:56): [krb5_child[84081]] [find_principal_in_keytab] (0x4000): [RID#118] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:00:56): [krb5_child[84081]] [match_principal] (0x1000): [RID#118] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:00:56): [krb5_child[84081]] [check_fast_ccache] (0x0200): [RID#118] FAST TGT is still valid. * (2025-10-14 9:00:56): [krb5_child[84081]] [become_user] (0x0200): [RID#118] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:00:56): [krb5_child[84081]] [main] (0x2000): [RID#118] Running as [1464600000][1464600000]. * (2025-10-14 9:00:56): [krb5_child[84081]] [set_lifetime_options] (0x0100): [RID#118] No specific renewable lifetime requested. * (2025-10-14 9:00:56): [krb5_child[84081]] [set_lifetime_options] (0x0100): [RID#118] No specific lifetime requested. * (2025-10-14 9:00:56): [krb5_child[84081]] [set_canonicalize_option] (0x0100): [RID#118] Canonicalization is set to [true] * (2025-10-14 9:00:56): [krb5_child[84081]] [main] (0x0400): [RID#118] Will perform auth * (2025-10-14 9:00:56): [krb5_child[84081]] [main] (0x0400): [RID#118] Will perform online auth * (2025-10-14 9:00:56): [krb5_child[84081]] [tgt_req_child] (0x1000): [RID#118] Attempting to get a TGT * (2025-10-14 9:00:56): [krb5_child[84081]] [get_and_save_tgt] (0x0400): [RID#118] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:00:56): [krb5_child[84081]] [get_and_save_tgt] (0x0020): [RID#118] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:00:56): [krb5_child[84081]] [map_krb5_error] (0x0020): [RID#118] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 9:00:59): [krb5_child[84083]] [get_and_save_tgt] (0x0020): [RID#120] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:00:59): [krb5_child[84083]] [main] (0x0400): [RID#120] krb5_child started. * (2025-10-14 9:00:59): [krb5_child[84083]] [unpack_buffer] (0x1000): [RID#120] total buffer size: [94] * (2025-10-14 9:00:59): [krb5_child[84083]] [unpack_buffer] (0x0100): [RID#120] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:00:59): [krb5_child[84083]] [unpack_buffer] (0x2000): [RID#120] No old ccache * (2025-10-14 9:00:59): [krb5_child[84083]] [unpack_buffer] (0x0100): [RID#120] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:00:59): [krb5_child[84083]] [k5c_precreate_ccache] (0x4000): [RID#120] Recreating ccache * (2025-10-14 9:00:59): [krb5_child[84083]] [k5c_setup_fast] (0x0100): [RID#120] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:00:59): [krb5_child[84083]] [find_principal_in_keytab] (0x4000): [RID#120] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:00:59): [krb5_child[84083]] [match_principal] (0x1000): [RID#120] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:00:59): [krb5_child[84083]] [check_fast_ccache] (0x0200): [RID#120] FAST TGT is still valid. * (2025-10-14 9:00:59): [krb5_child[84083]] [become_user] (0x0200): [RID#120] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:00:59): [krb5_child[84083]] [main] (0x2000): [RID#120] Running as [1464600000][1464600000]. * (2025-10-14 9:00:59): [krb5_child[84083]] [set_lifetime_options] (0x0100): [RID#120] No specific renewable lifetime requested. * (2025-10-14 9:00:59): [krb5_child[84083]] [set_lifetime_options] (0x0100): [RID#120] No specific lifetime requested. * (2025-10-14 9:00:59): [krb5_child[84083]] [set_canonicalize_option] (0x0100): [RID#120] Canonicalization is set to [true] * (2025-10-14 9:00:59): [krb5_child[84083]] [main] (0x0400): [RID#120] Will perform auth * (2025-10-14 9:00:59): [krb5_child[84083]] [main] (0x0400): [RID#120] Will perform online auth * (2025-10-14 9:00:59): [krb5_child[84083]] [tgt_req_child] (0x1000): [RID#120] Attempting to get a TGT * (2025-10-14 9:00:59): [krb5_child[84083]] [get_and_save_tgt] (0x0400): [RID#120] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:00:59): [krb5_child[84083]] [get_and_save_tgt] (0x0020): [RID#120] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:00:59): [krb5_child[84083]] [map_krb5_error] (0x0020): [RID#120] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 9:01:02): [krb5_child[84111]] [get_and_save_tgt] (0x0020): [RID#123] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:01:02): [krb5_child[84111]] [main] (0x0400): [RID#123] krb5_child started. * (2025-10-14 9:01:02): [krb5_child[84111]] [unpack_buffer] (0x1000): [RID#123] total buffer size: [97] * (2025-10-14 9:01:02): [krb5_child[84111]] [unpack_buffer] (0x0100): [RID#123] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:01:02): [krb5_child[84111]] [unpack_buffer] (0x2000): [RID#123] No old ccache * (2025-10-14 9:01:02): [krb5_child[84111]] [unpack_buffer] (0x0100): [RID#123] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:01:02): [krb5_child[84111]] [k5c_precreate_ccache] (0x4000): [RID#123] Recreating ccache * (2025-10-14 9:01:02): [krb5_child[84111]] [k5c_setup_fast] (0x0100): [RID#123] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:01:02): [krb5_child[84111]] [find_principal_in_keytab] (0x4000): [RID#123] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:01:02): [krb5_child[84111]] [match_principal] (0x1000): [RID#123] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:01:02): [krb5_child[84111]] [check_fast_ccache] (0x0200): [RID#123] FAST TGT is still valid. * (2025-10-14 9:01:02): [krb5_child[84111]] [become_user] (0x0200): [RID#123] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:01:02): [krb5_child[84111]] [main] (0x2000): [RID#123] Running as [1464600000][1464600000]. * (2025-10-14 9:01:02): [krb5_child[84111]] [set_lifetime_options] (0x0100): [RID#123] No specific renewable lifetime requested. * (2025-10-14 9:01:02): [krb5_child[84111]] [set_lifetime_options] (0x0100): [RID#123] No specific lifetime requested. * (2025-10-14 9:01:02): [krb5_child[84111]] [set_canonicalize_option] (0x0100): [RID#123] Canonicalization is set to [true] * (2025-10-14 9:01:02): [krb5_child[84111]] [main] (0x0400): [RID#123] Will perform auth * (2025-10-14 9:01:02): [krb5_child[84111]] [main] (0x0400): [RID#123] Will perform online auth * (2025-10-14 9:01:02): [krb5_child[84111]] [tgt_req_child] (0x1000): [RID#123] Attempting to get a TGT * (2025-10-14 9:01:02): [krb5_child[84111]] [get_and_save_tgt] (0x0400): [RID#123] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:01:02): [krb5_child[84111]] [get_and_save_tgt] (0x0020): [RID#123] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:01:02): [krb5_child[84111]] [map_krb5_error] (0x0020): [RID#123] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 9:01:05): [krb5_child[84113]] [get_and_save_tgt] (0x0020): [RID#125] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:01:05): [krb5_child[84113]] [main] (0x0400): [RID#125] krb5_child started. * (2025-10-14 9:01:05): [krb5_child[84113]] [unpack_buffer] (0x1000): [RID#125] total buffer size: [95] * (2025-10-14 9:01:05): [krb5_child[84113]] [unpack_buffer] (0x0100): [RID#125] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:01:05): [krb5_child[84113]] [unpack_buffer] (0x2000): [RID#125] No old ccache * (2025-10-14 9:01:05): [krb5_child[84113]] [unpack_buffer] (0x0100): [RID#125] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:01:05): [krb5_child[84113]] [k5c_precreate_ccache] (0x4000): [RID#125] Recreating ccache * (2025-10-14 9:01:05): [krb5_child[84113]] [k5c_setup_fast] (0x0100): [RID#125] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:01:05): [krb5_child[84113]] [find_principal_in_keytab] (0x4000): [RID#125] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:01:05): [krb5_child[84113]] [match_principal] (0x1000): [RID#125] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:01:05): [krb5_child[84113]] [check_fast_ccache] (0x0200): [RID#125] FAST TGT is still valid. * (2025-10-14 9:01:05): [krb5_child[84113]] [become_user] (0x0200): [RID#125] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:01:05): [krb5_child[84113]] [main] (0x2000): [RID#125] Running as [1464600000][1464600000]. * (2025-10-14 9:01:05): [krb5_child[84113]] [set_lifetime_options] (0x0100): [RID#125] No specific renewable lifetime requested. * (2025-10-14 9:01:05): [krb5_child[84113]] [set_lifetime_options] (0x0100): [RID#125] No specific lifetime requested. * (2025-10-14 9:01:05): [krb5_child[84113]] [set_canonicalize_option] (0x0100): [RID#125] Canonicalization is set to [true] * (2025-10-14 9:01:05): [krb5_child[84113]] [main] (0x0400): [RID#125] Will perform auth * (2025-10-14 9:01:05): [krb5_child[84113]] [main] (0x0400): [RID#125] Will perform online auth * (2025-10-14 9:01:05): [krb5_child[84113]] [tgt_req_child] (0x1000): [RID#125] Attempting to get a TGT * (2025-10-14 9:01:05): [krb5_child[84113]] [get_and_save_tgt] (0x0400): [RID#125] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:01:05): [krb5_child[84113]] [get_and_save_tgt] (0x0020): [RID#125] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:01:05): [krb5_child[84113]] [map_krb5_error] (0x0020): [RID#125] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 9:01:08): [krb5_child[84188]] [get_and_save_tgt] (0x0020): [RID#129] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:01:08): [krb5_child[84188]] [main] (0x0400): [RID#129] krb5_child started. * (2025-10-14 9:01:08): [krb5_child[84188]] [unpack_buffer] (0x1000): [RID#129] total buffer size: [95] * (2025-10-14 9:01:08): [krb5_child[84188]] [unpack_buffer] (0x0100): [RID#129] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:01:08): [krb5_child[84188]] [unpack_buffer] (0x2000): [RID#129] No old ccache * (2025-10-14 9:01:08): [krb5_child[84188]] [unpack_buffer] (0x0100): [RID#129] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:01:08): [krb5_child[84188]] [k5c_precreate_ccache] (0x4000): [RID#129] Recreating ccache * (2025-10-14 9:01:08): [krb5_child[84188]] [k5c_setup_fast] (0x0100): [RID#129] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:01:08): [krb5_child[84188]] [find_principal_in_keytab] (0x4000): [RID#129] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:01:08): [krb5_child[84188]] [match_principal] (0x1000): [RID#129] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:01:08): [krb5_child[84188]] [check_fast_ccache] (0x0200): [RID#129] FAST TGT is still valid. * (2025-10-14 9:01:08): [krb5_child[84188]] [become_user] (0x0200): [RID#129] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:01:08): [krb5_child[84188]] [main] (0x2000): [RID#129] Running as [1464600000][1464600000]. * (2025-10-14 9:01:08): [krb5_child[84188]] [set_lifetime_options] (0x0100): [RID#129] No specific renewable lifetime requested. * (2025-10-14 9:01:08): [krb5_child[84188]] [set_lifetime_options] (0x0100): [RID#129] No specific lifetime requested. * (2025-10-14 9:01:08): [krb5_child[84188]] [set_canonicalize_option] (0x0100): [RID#129] Canonicalization is set to [true] * (2025-10-14 9:01:08): [krb5_child[84188]] [main] (0x0400): [RID#129] Will perform auth * (2025-10-14 9:01:08): [krb5_child[84188]] [main] (0x0400): [RID#129] Will perform online auth * (2025-10-14 9:01:08): [krb5_child[84188]] [tgt_req_child] (0x1000): [RID#129] Attempting to get a TGT * (2025-10-14 9:01:08): [krb5_child[84188]] [get_and_save_tgt] (0x0400): [RID#129] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:01:08): [krb5_child[84188]] [get_and_save_tgt] (0x0020): [RID#129] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:01:08): [krb5_child[84188]] [map_krb5_error] (0x0020): [RID#129] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 9:01:11): [krb5_child[84251]] [get_and_save_tgt] (0x0020): [RID#131] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:01:11): [krb5_child[84251]] [main] (0x0400): [RID#131] krb5_child started. * (2025-10-14 9:01:11): [krb5_child[84251]] [unpack_buffer] (0x1000): [RID#131] total buffer size: [98] * (2025-10-14 9:01:11): [krb5_child[84251]] [unpack_buffer] (0x0100): [RID#131] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:01:11): [krb5_child[84251]] [unpack_buffer] (0x2000): [RID#131] No old ccache * (2025-10-14 9:01:11): [krb5_child[84251]] [unpack_buffer] (0x0100): [RID#131] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:01:11): [krb5_child[84251]] [k5c_precreate_ccache] (0x4000): [RID#131] Recreating ccache * (2025-10-14 9:01:11): [krb5_child[84251]] [k5c_setup_fast] (0x0100): [RID#131] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:01:11): [krb5_child[84251]] [find_principal_in_keytab] (0x4000): [RID#131] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:01:11): [krb5_child[84251]] [match_principal] (0x1000): [RID#131] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:01:11): [krb5_child[84251]] [check_fast_ccache] (0x0200): [RID#131] FAST TGT is still valid. * (2025-10-14 9:01:11): [krb5_child[84251]] [become_user] (0x0200): [RID#131] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:01:11): [krb5_child[84251]] [main] (0x2000): [RID#131] Running as [1464600000][1464600000]. * (2025-10-14 9:01:11): [krb5_child[84251]] [set_lifetime_options] (0x0100): [RID#131] No specific renewable lifetime requested. * (2025-10-14 9:01:11): [krb5_child[84251]] [set_lifetime_options] (0x0100): [RID#131] No specific lifetime requested. * (2025-10-14 9:01:11): [krb5_child[84251]] [set_canonicalize_option] (0x0100): [RID#131] Canonicalization is set to [true] * (2025-10-14 9:01:11): [krb5_child[84251]] [main] (0x0400): [RID#131] Will perform auth * (2025-10-14 9:01:11): [krb5_child[84251]] [main] (0x0400): [RID#131] Will perform online auth * (2025-10-14 9:01:11): [krb5_child[84251]] [tgt_req_child] (0x1000): [RID#131] Attempting to get a TGT * (2025-10-14 9:01:11): [krb5_child[84251]] [get_and_save_tgt] (0x0400): [RID#131] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:01:11): [krb5_child[84251]] [get_and_save_tgt] (0x0020): [RID#131] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:01:11): [krb5_child[84251]] [map_krb5_error] (0x0020): [RID#131] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 9:01:16): [krb5_child[84284]] [get_and_save_tgt] (0x0020): [RID#134] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:01:16): [krb5_child[84284]] [main] (0x0400): [RID#134] krb5_child started. * (2025-10-14 9:01:16): [krb5_child[84284]] [unpack_buffer] (0x1000): [RID#134] total buffer size: [98] * (2025-10-14 9:01:16): [krb5_child[84284]] [unpack_buffer] (0x0100): [RID#134] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:01:16): [krb5_child[84284]] [unpack_buffer] (0x2000): [RID#134] No old ccache * (2025-10-14 9:01:16): [krb5_child[84284]] [unpack_buffer] (0x0100): [RID#134] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:01:16): [krb5_child[84284]] [k5c_precreate_ccache] (0x4000): [RID#134] Recreating ccache * (2025-10-14 9:01:16): [krb5_child[84284]] [k5c_setup_fast] (0x0100): [RID#134] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:01:16): [krb5_child[84284]] [find_principal_in_keytab] (0x4000): [RID#134] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:01:16): [krb5_child[84284]] [match_principal] (0x1000): [RID#134] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:01:16): [krb5_child[84284]] [check_fast_ccache] (0x0200): [RID#134] FAST TGT is still valid. * (2025-10-14 9:01:16): [krb5_child[84284]] [become_user] (0x0200): [RID#134] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:01:16): [krb5_child[84284]] [main] (0x2000): [RID#134] Running as [1464600000][1464600000]. * (2025-10-14 9:01:16): [krb5_child[84284]] [set_lifetime_options] (0x0100): [RID#134] No specific renewable lifetime requested. * (2025-10-14 9:01:16): [krb5_child[84284]] [set_lifetime_options] (0x0100): [RID#134] No specific lifetime requested. * (2025-10-14 9:01:16): [krb5_child[84284]] [set_canonicalize_option] (0x0100): [RID#134] Canonicalization is set to [true] * (2025-10-14 9:01:16): [krb5_child[84284]] [main] (0x0400): [RID#134] Will perform auth * (2025-10-14 9:01:16): [krb5_child[84284]] [main] (0x0400): [RID#134] Will perform online auth * (2025-10-14 9:01:16): [krb5_child[84284]] [tgt_req_child] (0x1000): [RID#134] Attempting to get a TGT * (2025-10-14 9:01:16): [krb5_child[84284]] [get_and_save_tgt] (0x0400): [RID#134] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:01:16): [krb5_child[84284]] [get_and_save_tgt] (0x0020): [RID#134] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:01:16): [krb5_child[84284]] [map_krb5_error] (0x0020): [RID#134] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 9:01:19): [krb5_child[84286]] [get_and_save_tgt] (0x0020): [RID#136] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:01:19): [krb5_child[84286]] [main] (0x0400): [RID#136] krb5_child started. * (2025-10-14 9:01:19): [krb5_child[84286]] [unpack_buffer] (0x1000): [RID#136] total buffer size: [97] * (2025-10-14 9:01:19): [krb5_child[84286]] [unpack_buffer] (0x0100): [RID#136] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:01:19): [krb5_child[84286]] [unpack_buffer] (0x2000): [RID#136] No old ccache * (2025-10-14 9:01:19): [krb5_child[84286]] [unpack_buffer] (0x0100): [RID#136] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:01:19): [krb5_child[84286]] [k5c_precreate_ccache] (0x4000): [RID#136] Recreating ccache * (2025-10-14 9:01:19): [krb5_child[84286]] [k5c_setup_fast] (0x0100): [RID#136] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:01:19): [krb5_child[84286]] [find_principal_in_keytab] (0x4000): [RID#136] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:01:19): [krb5_child[84286]] [match_principal] (0x1000): [RID#136] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:01:19): [krb5_child[84286]] [check_fast_ccache] (0x0200): [RID#136] FAST TGT is still valid. * (2025-10-14 9:01:19): [krb5_child[84286]] [become_user] (0x0200): [RID#136] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:01:19): [krb5_child[84286]] [main] (0x2000): [RID#136] Running as [1464600000][1464600000]. * (2025-10-14 9:01:19): [krb5_child[84286]] [set_lifetime_options] (0x0100): [RID#136] No specific renewable lifetime requested. * (2025-10-14 9:01:19): [krb5_child[84286]] [set_lifetime_options] (0x0100): [RID#136] No specific lifetime requested. * (2025-10-14 9:01:19): [krb5_child[84286]] [set_canonicalize_option] (0x0100): [RID#136] Canonicalization is set to [true] * (2025-10-14 9:01:19): [krb5_child[84286]] [main] (0x0400): [RID#136] Will perform auth * (2025-10-14 9:01:19): [krb5_child[84286]] [main] (0x0400): [RID#136] Will perform online auth * (2025-10-14 9:01:19): [krb5_child[84286]] [tgt_req_child] (0x1000): [RID#136] Attempting to get a TGT * (2025-10-14 9:01:19): [krb5_child[84286]] [get_and_save_tgt] (0x0400): [RID#136] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:01:19): [krb5_child[84286]] [get_and_save_tgt] (0x0020): [RID#136] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:01:19): [krb5_child[84286]] [map_krb5_error] (0x0020): [RID#136] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 9:01:22): [krb5_child[84288]] [get_and_save_tgt] (0x0020): [RID#139] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:01:22): [krb5_child[84288]] [main] (0x0400): [RID#139] krb5_child started. * (2025-10-14 9:01:22): [krb5_child[84288]] [unpack_buffer] (0x1000): [RID#139] total buffer size: [108] * (2025-10-14 9:01:22): [krb5_child[84288]] [unpack_buffer] (0x0100): [RID#139] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:01:22): [krb5_child[84288]] [unpack_buffer] (0x2000): [RID#139] No old ccache * (2025-10-14 9:01:22): [krb5_child[84288]] [unpack_buffer] (0x0100): [RID#139] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:01:22): [krb5_child[84288]] [k5c_precreate_ccache] (0x4000): [RID#139] Recreating ccache * (2025-10-14 9:01:22): [krb5_child[84288]] [k5c_setup_fast] (0x0100): [RID#139] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:01:22): [krb5_child[84288]] [find_principal_in_keytab] (0x4000): [RID#139] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:01:22): [krb5_child[84288]] [match_principal] (0x1000): [RID#139] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:01:22): [krb5_child[84288]] [check_fast_ccache] (0x0200): [RID#139] FAST TGT is still valid. * (2025-10-14 9:01:22): [krb5_child[84288]] [become_user] (0x0200): [RID#139] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:01:22): [krb5_child[84288]] [main] (0x2000): [RID#139] Running as [1464600000][1464600000]. * (2025-10-14 9:01:22): [krb5_child[84288]] [set_lifetime_options] (0x0100): [RID#139] No specific renewable lifetime requested. * (2025-10-14 9:01:22): [krb5_child[84288]] [set_lifetime_options] (0x0100): [RID#139] No specific lifetime requested. * (2025-10-14 9:01:22): [krb5_child[84288]] [set_canonicalize_option] (0x0100): [RID#139] Canonicalization is set to [true] * (2025-10-14 9:01:22): [krb5_child[84288]] [main] (0x0400): [RID#139] Will perform auth * (2025-10-14 9:01:22): [krb5_child[84288]] [main] (0x0400): [RID#139] Will perform online auth * (2025-10-14 9:01:22): [krb5_child[84288]] [tgt_req_child] (0x1000): [RID#139] Attempting to get a TGT * (2025-10-14 9:01:22): [krb5_child[84288]] [get_and_save_tgt] (0x0400): [RID#139] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:01:22): [krb5_child[84288]] [get_and_save_tgt] (0x0020): [RID#139] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:01:22): [krb5_child[84288]] [map_krb5_error] (0x0020): [RID#139] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-14 9:01:25): [krb5_child[84350]] [get_and_save_tgt] (0x0020): [RID#142] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-14 9:01:25): [krb5_child[84350]] [main] (0x0400): [RID#142] krb5_child started. * (2025-10-14 9:01:25): [krb5_child[84350]] [unpack_buffer] (0x1000): [RID#142] total buffer size: [110] * (2025-10-14 9:01:25): [krb5_child[84350]] [unpack_buffer] (0x0100): [RID#142] cmd [241 (auth)] uid [1464600000] gid [1464600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-14 9:01:25): [krb5_child[84350]] [unpack_buffer] (0x2000): [RID#142] No old ccache * (2025-10-14 9:01:25): [krb5_child[84350]] [unpack_buffer] (0x0100): [RID#142] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-14 9:01:25): [krb5_child[84350]] [k5c_precreate_ccache] (0x4000): [RID#142] Recreating ccache * (2025-10-14 9:01:25): [krb5_child[84350]] [k5c_setup_fast] (0x0100): [RID#142] Fast principal is set to [host/np0005486750.ooo.test@OOO.TEST] * (2025-10-14 9:01:25): [krb5_child[84350]] [find_principal_in_keytab] (0x4000): [RID#142] Trying to find principal host/np0005486750.ooo.test@OOO.TEST in keytab. * (2025-10-14 9:01:25): [krb5_child[84350]] [match_principal] (0x1000): [RID#142] Principal matched to the sample (host/np0005486750.ooo.test@OOO.TEST). * (2025-10-14 9:01:25): [krb5_child[84350]] [check_fast_ccache] (0x0200): [RID#142] FAST TGT is still valid. * (2025-10-14 9:01:25): [krb5_child[84350]] [become_user] (0x0200): [RID#142] Trying to become user [1464600000][1464600000]. * (2025-10-14 9:01:25): [krb5_child[84350]] [main] (0x2000): [RID#142] Running as [1464600000][1464600000]. * (2025-10-14 9:01:25): [krb5_child[84350]] [set_lifetime_options] (0x0100): [RID#142] No specific renewable lifetime requested. * (2025-10-14 9:01:25): [krb5_child[84350]] [set_lifetime_options] (0x0100): [RID#142] No specific lifetime requested. * (2025-10-14 9:01:25): [krb5_child[84350]] [set_canonicalize_option] (0x0100): [RID#142] Canonicalization is set to [true] * (2025-10-14 9:01:25): [krb5_child[84350]] [main] (0x0400): [RID#142] Will perform auth * (2025-10-14 9:01:25): [krb5_child[84350]] [main] (0x0400): [RID#142] Will perform online auth * (2025-10-14 9:01:25): [krb5_child[84350]] [tgt_req_child] (0x1000): [RID#142] Attempting to get a TGT * (2025-10-14 9:01:25): [krb5_child[84350]] [get_and_save_tgt] (0x0400): [RID#142] Attempting kinit for realm [OOO.TEST] * (2025-10-14 9:01:25): [krb5_child[84350]] [get_and_save_tgt] (0x0020): [RID#142] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-14 9:01:25): [krb5_child[84350]] [map_krb5_error] (0x0020): [RID#142] 2138: [-1765328366][Client's credentials have been revoked]