(2025-10-01 9:54:13): [krb5_child[410349]] [get_and_save_tgt] (0x0020): [RID#109] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 9:54:13): [krb5_child[410349]] [main] (0x0400): [RID#109] krb5_child started. * (2025-10-01 9:54:13): [krb5_child[410349]] [unpack_buffer] (0x1000): [RID#109] total buffer size: [98] * (2025-10-01 9:54:13): [krb5_child[410349]] [unpack_buffer] (0x0100): [RID#109] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 9:54:13): [krb5_child[410349]] [unpack_buffer] (0x2000): [RID#109] No old ccache * (2025-10-01 9:54:13): [krb5_child[410349]] [unpack_buffer] (0x0100): [RID#109] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 9:54:13): [krb5_child[410349]] [k5c_precreate_ccache] (0x4000): [RID#109] Recreating ccache * (2025-10-01 9:54:13): [krb5_child[410349]] [k5c_setup_fast] (0x0100): [RID#109] Fast principal is set to [host/np0005463867.ooo.test@OOO.TEST] * (2025-10-01 9:54:13): [krb5_child[410349]] [find_principal_in_keytab] (0x4000): [RID#109] Trying to find principal host/np0005463867.ooo.test@OOO.TEST in keytab. * (2025-10-01 9:54:13): [krb5_child[410349]] [match_principal] (0x1000): [RID#109] Principal matched to the sample (host/np0005463867.ooo.test@OOO.TEST). * (2025-10-01 9:54:13): [krb5_child[410349]] [check_fast_ccache] (0x0200): [RID#109] FAST TGT is still valid. * (2025-10-01 9:54:13): [krb5_child[410349]] [become_user] (0x0200): [RID#109] Trying to become user [1261600000][1261600000]. * (2025-10-01 9:54:13): [krb5_child[410349]] [main] (0x2000): [RID#109] Running as [1261600000][1261600000]. * (2025-10-01 9:54:13): [krb5_child[410349]] [set_lifetime_options] (0x0100): [RID#109] No specific renewable lifetime requested. * (2025-10-01 9:54:13): [krb5_child[410349]] [set_lifetime_options] (0x0100): [RID#109] No specific lifetime requested. * (2025-10-01 9:54:13): [krb5_child[410349]] [set_canonicalize_option] (0x0100): [RID#109] Canonicalization is set to [true] * (2025-10-01 9:54:13): [krb5_child[410349]] [main] (0x0400): [RID#109] Will perform auth * (2025-10-01 9:54:13): [krb5_child[410349]] [main] (0x0400): [RID#109] Will perform online auth * (2025-10-01 9:54:13): [krb5_child[410349]] [tgt_req_child] (0x1000): [RID#109] Attempting to get a TGT * (2025-10-01 9:54:13): [krb5_child[410349]] [get_and_save_tgt] (0x0400): [RID#109] Attempting kinit for realm [OOO.TEST] * (2025-10-01 9:54:13): [krb5_child[410349]] [sss_krb5_responder] (0x4000): [RID#109] Got question [password]. * (2025-10-01 9:54:13): [krb5_child[410349]] [get_and_save_tgt] (0x0020): [RID#109] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 9:54:13): [krb5_child[410349]] [map_krb5_error] (0x0020): [RID#109] 2138: [-1765328360][Preauthentication failed] (2025-10-01 10:11:21): [krb5_child[422128]] [get_and_save_tgt] (0x0020): [RID#149] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 10:11:21): [krb5_child[422128]] [main] (0x0400): [RID#149] krb5_child started. * (2025-10-01 10:11:21): [krb5_child[422128]] [unpack_buffer] (0x1000): [RID#149] total buffer size: [102] * (2025-10-01 10:11:21): [krb5_child[422128]] [unpack_buffer] (0x0100): [RID#149] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 10:11:21): [krb5_child[422128]] [unpack_buffer] (0x2000): [RID#149] No old ccache * (2025-10-01 10:11:21): [krb5_child[422128]] [unpack_buffer] (0x0100): [RID#149] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 10:11:21): [krb5_child[422128]] [k5c_precreate_ccache] (0x4000): [RID#149] Recreating ccache * (2025-10-01 10:11:21): [krb5_child[422128]] [k5c_setup_fast] (0x0100): [RID#149] Fast principal is set to [host/np0005463867.ooo.test@OOO.TEST] * (2025-10-01 10:11:21): [krb5_child[422128]] [find_principal_in_keytab] (0x4000): [RID#149] Trying to find principal host/np0005463867.ooo.test@OOO.TEST in keytab. * (2025-10-01 10:11:21): [krb5_child[422128]] [match_principal] (0x1000): [RID#149] Principal matched to the sample (host/np0005463867.ooo.test@OOO.TEST). * (2025-10-01 10:11:21): [krb5_child[422128]] [check_fast_ccache] (0x0200): [RID#149] FAST TGT is still valid. * (2025-10-01 10:11:21): [krb5_child[422128]] [become_user] (0x0200): [RID#149] Trying to become user [1261600000][1261600000]. * (2025-10-01 10:11:21): [krb5_child[422128]] [main] (0x2000): [RID#149] Running as [1261600000][1261600000]. * (2025-10-01 10:11:21): [krb5_child[422128]] [set_lifetime_options] (0x0100): [RID#149] No specific renewable lifetime requested. * (2025-10-01 10:11:21): [krb5_child[422128]] [set_lifetime_options] (0x0100): [RID#149] No specific lifetime requested. * (2025-10-01 10:11:21): [krb5_child[422128]] [set_canonicalize_option] (0x0100): [RID#149] Canonicalization is set to [true] * (2025-10-01 10:11:21): [krb5_child[422128]] [main] (0x0400): [RID#149] Will perform auth * (2025-10-01 10:11:21): [krb5_child[422128]] [main] (0x0400): [RID#149] Will perform online auth * (2025-10-01 10:11:21): [krb5_child[422128]] [tgt_req_child] (0x1000): [RID#149] Attempting to get a TGT * (2025-10-01 10:11:21): [krb5_child[422128]] [get_and_save_tgt] (0x0400): [RID#149] Attempting kinit for realm [OOO.TEST] * (2025-10-01 10:11:21): [krb5_child[422128]] [sss_krb5_responder] (0x4000): [RID#149] Got question [password]. * (2025-10-01 10:11:21): [krb5_child[422128]] [get_and_save_tgt] (0x0020): [RID#149] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 10:11:21): [krb5_child[422128]] [map_krb5_error] (0x0020): [RID#149] 2138: [-1765328360][Preauthentication failed] (2025-10-01 10:15:35): [krb5_child[429811]] [get_and_save_tgt] (0x0020): [RID#162] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 10:15:35): [krb5_child[429811]] [main] (0x0400): [RID#162] krb5_child started. * (2025-10-01 10:15:35): [krb5_child[429811]] [unpack_buffer] (0x1000): [RID#162] total buffer size: [100] * (2025-10-01 10:15:35): [krb5_child[429811]] [unpack_buffer] (0x0100): [RID#162] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 10:15:35): [krb5_child[429811]] [unpack_buffer] (0x2000): [RID#162] No old ccache * (2025-10-01 10:15:35): [krb5_child[429811]] [unpack_buffer] (0x0100): [RID#162] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 10:15:35): [krb5_child[429811]] [k5c_precreate_ccache] (0x4000): [RID#162] Recreating ccache * (2025-10-01 10:15:35): [krb5_child[429811]] [k5c_setup_fast] (0x0100): [RID#162] Fast principal is set to [host/np0005463867.ooo.test@OOO.TEST] * (2025-10-01 10:15:35): [krb5_child[429811]] [find_principal_in_keytab] (0x4000): [RID#162] Trying to find principal host/np0005463867.ooo.test@OOO.TEST in keytab. * (2025-10-01 10:15:35): [krb5_child[429811]] [match_principal] (0x1000): [RID#162] Principal matched to the sample (host/np0005463867.ooo.test@OOO.TEST). * (2025-10-01 10:15:35): [krb5_child[429811]] [check_fast_ccache] (0x0200): [RID#162] FAST TGT is still valid. * (2025-10-01 10:15:35): [krb5_child[429811]] [become_user] (0x0200): [RID#162] Trying to become user [1261600000][1261600000]. * (2025-10-01 10:15:35): [krb5_child[429811]] [main] (0x2000): [RID#162] Running as [1261600000][1261600000]. * (2025-10-01 10:15:35): [krb5_child[429811]] [set_lifetime_options] (0x0100): [RID#162] No specific renewable lifetime requested. * (2025-10-01 10:15:35): [krb5_child[429811]] [set_lifetime_options] (0x0100): [RID#162] No specific lifetime requested. * (2025-10-01 10:15:35): [krb5_child[429811]] [set_canonicalize_option] (0x0100): [RID#162] Canonicalization is set to [true] * (2025-10-01 10:15:35): [krb5_child[429811]] [main] (0x0400): [RID#162] Will perform auth * (2025-10-01 10:15:35): [krb5_child[429811]] [main] (0x0400): [RID#162] Will perform online auth * (2025-10-01 10:15:35): [krb5_child[429811]] [tgt_req_child] (0x1000): [RID#162] Attempting to get a TGT * (2025-10-01 10:15:35): [krb5_child[429811]] [get_and_save_tgt] (0x0400): [RID#162] Attempting kinit for realm [OOO.TEST] * (2025-10-01 10:15:35): [krb5_child[429811]] [sss_krb5_responder] (0x4000): [RID#162] Got question [password]. * (2025-10-01 10:15:35): [krb5_child[429811]] [get_and_save_tgt] (0x0020): [RID#162] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 10:15:35): [krb5_child[429811]] [map_krb5_error] (0x0020): [RID#162] 2138: [-1765328360][Preauthentication failed] (2025-10-01 10:16:16): [krb5_child[431385]] [get_and_save_tgt] (0x0020): [RID#166] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 10:16:16): [krb5_child[431385]] [main] (0x0400): [RID#166] krb5_child started. * (2025-10-01 10:16:16): [krb5_child[431385]] [unpack_buffer] (0x1000): [RID#166] total buffer size: [99] * (2025-10-01 10:16:16): [krb5_child[431385]] [unpack_buffer] (0x0100): [RID#166] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 10:16:16): [krb5_child[431385]] [unpack_buffer] (0x2000): [RID#166] No old ccache * (2025-10-01 10:16:16): [krb5_child[431385]] [unpack_buffer] (0x0100): [RID#166] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 10:16:16): [krb5_child[431385]] [k5c_precreate_ccache] (0x4000): [RID#166] Recreating ccache * (2025-10-01 10:16:16): [krb5_child[431385]] [k5c_setup_fast] (0x0100): [RID#166] Fast principal is set to [host/np0005463867.ooo.test@OOO.TEST] * (2025-10-01 10:16:16): [krb5_child[431385]] [find_principal_in_keytab] (0x4000): [RID#166] Trying to find principal host/np0005463867.ooo.test@OOO.TEST in keytab. * (2025-10-01 10:16:16): [krb5_child[431385]] [match_principal] (0x1000): [RID#166] Principal matched to the sample (host/np0005463867.ooo.test@OOO.TEST). * (2025-10-01 10:16:16): [krb5_child[431385]] [check_fast_ccache] (0x0200): [RID#166] FAST TGT is still valid. * (2025-10-01 10:16:16): [krb5_child[431385]] [become_user] (0x0200): [RID#166] Trying to become user [1261600000][1261600000]. * (2025-10-01 10:16:16): [krb5_child[431385]] [main] (0x2000): [RID#166] Running as [1261600000][1261600000]. * (2025-10-01 10:16:16): [krb5_child[431385]] [set_lifetime_options] (0x0100): [RID#166] No specific renewable lifetime requested. * (2025-10-01 10:16:16): [krb5_child[431385]] [set_lifetime_options] (0x0100): [RID#166] No specific lifetime requested. * (2025-10-01 10:16:16): [krb5_child[431385]] [set_canonicalize_option] (0x0100): [RID#166] Canonicalization is set to [true] * (2025-10-01 10:16:16): [krb5_child[431385]] [main] (0x0400): [RID#166] Will perform auth * (2025-10-01 10:16:16): [krb5_child[431385]] [main] (0x0400): [RID#166] Will perform online auth * (2025-10-01 10:16:16): [krb5_child[431385]] [tgt_req_child] (0x1000): [RID#166] Attempting to get a TGT * (2025-10-01 10:16:16): [krb5_child[431385]] [get_and_save_tgt] (0x0400): [RID#166] Attempting kinit for realm [OOO.TEST] * (2025-10-01 10:16:16): [krb5_child[431385]] [sss_krb5_responder] (0x4000): [RID#166] Got question [password]. * (2025-10-01 10:16:16): [krb5_child[431385]] [get_and_save_tgt] (0x0020): [RID#166] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 10:16:16): [krb5_child[431385]] [map_krb5_error] (0x0020): [RID#166] 2138: [-1765328360][Preauthentication failed] (2025-10-01 10:27:36): [krb5_child[470067]] [get_and_save_tgt] (0x0020): [RID#194] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 10:27:36): [krb5_child[470067]] [main] (0x0400): [RID#194] krb5_child started. * (2025-10-01 10:27:36): [krb5_child[470067]] [unpack_buffer] (0x1000): [RID#194] total buffer size: [95] * (2025-10-01 10:27:36): [krb5_child[470067]] [unpack_buffer] (0x0100): [RID#194] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 10:27:36): [krb5_child[470067]] [unpack_buffer] (0x2000): [RID#194] No old ccache * (2025-10-01 10:27:36): [krb5_child[470067]] [unpack_buffer] (0x0100): [RID#194] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 10:27:36): [krb5_child[470067]] [k5c_precreate_ccache] (0x4000): [RID#194] Recreating ccache * (2025-10-01 10:27:36): [krb5_child[470067]] [k5c_setup_fast] (0x0100): [RID#194] Fast principal is set to [host/np0005463867.ooo.test@OOO.TEST] * (2025-10-01 10:27:36): [krb5_child[470067]] [find_principal_in_keytab] (0x4000): [RID#194] Trying to find principal host/np0005463867.ooo.test@OOO.TEST in keytab. * (2025-10-01 10:27:36): [krb5_child[470067]] [match_principal] (0x1000): [RID#194] Principal matched to the sample (host/np0005463867.ooo.test@OOO.TEST). * (2025-10-01 10:27:36): [krb5_child[470067]] [check_fast_ccache] (0x0200): [RID#194] FAST TGT is still valid. * (2025-10-01 10:27:36): [krb5_child[470067]] [become_user] (0x0200): [RID#194] Trying to become user [1261600000][1261600000]. * (2025-10-01 10:27:36): [krb5_child[470067]] [main] (0x2000): [RID#194] Running as [1261600000][1261600000]. * (2025-10-01 10:27:36): [krb5_child[470067]] [set_lifetime_options] (0x0100): [RID#194] No specific renewable lifetime requested. * (2025-10-01 10:27:36): [krb5_child[470067]] [set_lifetime_options] (0x0100): [RID#194] No specific lifetime requested. * (2025-10-01 10:27:36): [krb5_child[470067]] [set_canonicalize_option] (0x0100): [RID#194] Canonicalization is set to [true] * (2025-10-01 10:27:36): [krb5_child[470067]] [main] (0x0400): [RID#194] Will perform auth * (2025-10-01 10:27:36): [krb5_child[470067]] [main] (0x0400): [RID#194] Will perform online auth * (2025-10-01 10:27:36): [krb5_child[470067]] [tgt_req_child] (0x1000): [RID#194] Attempting to get a TGT * (2025-10-01 10:27:36): [krb5_child[470067]] [get_and_save_tgt] (0x0400): [RID#194] Attempting kinit for realm [OOO.TEST] * (2025-10-01 10:27:36): [krb5_child[470067]] [sss_krb5_responder] (0x4000): [RID#194] Got question [password]. * (2025-10-01 10:27:36): [krb5_child[470067]] [get_and_save_tgt] (0x0020): [RID#194] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 10:27:36): [krb5_child[470067]] [map_krb5_error] (0x0020): [RID#194] 2138: [-1765328360][Preauthentication failed]