(2025-10-01 9:46:26): [krb5_child[186817]] [get_and_save_tgt] (0x0020): [RID#338] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 9:46:26): [krb5_child[186817]] [main] (0x0400): [RID#338] krb5_child started. * (2025-10-01 9:46:26): [krb5_child[186817]] [unpack_buffer] (0x1000): [RID#338] total buffer size: [97] * (2025-10-01 9:46:26): [krb5_child[186817]] [unpack_buffer] (0x0100): [RID#338] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 9:46:26): [krb5_child[186817]] [unpack_buffer] (0x2000): [RID#338] No old ccache * (2025-10-01 9:46:26): [krb5_child[186817]] [unpack_buffer] (0x0100): [RID#338] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 9:46:26): [krb5_child[186817]] [k5c_precreate_ccache] (0x4000): [RID#338] Recreating ccache * (2025-10-01 9:46:26): [krb5_child[186817]] [k5c_setup_fast] (0x0100): [RID#338] Fast principal is set to [host/np0005463870.ooo.test@OOO.TEST] * (2025-10-01 9:46:26): [krb5_child[186817]] [find_principal_in_keytab] (0x4000): [RID#338] Trying to find principal host/np0005463870.ooo.test@OOO.TEST in keytab. * (2025-10-01 9:46:26): [krb5_child[186817]] [match_principal] (0x1000): [RID#338] Principal matched to the sample (host/np0005463870.ooo.test@OOO.TEST). * (2025-10-01 9:46:26): [krb5_child[186817]] [check_fast_ccache] (0x0200): [RID#338] FAST TGT is still valid. * (2025-10-01 9:46:26): [krb5_child[186817]] [become_user] (0x0200): [RID#338] Trying to become user [1261600000][1261600000]. * (2025-10-01 9:46:26): [krb5_child[186817]] [main] (0x2000): [RID#338] Running as [1261600000][1261600000]. * (2025-10-01 9:46:26): [krb5_child[186817]] [set_lifetime_options] (0x0100): [RID#338] No specific renewable lifetime requested. * (2025-10-01 9:46:26): [krb5_child[186817]] [set_lifetime_options] (0x0100): [RID#338] No specific lifetime requested. * (2025-10-01 9:46:26): [krb5_child[186817]] [set_canonicalize_option] (0x0100): [RID#338] Canonicalization is set to [true] * (2025-10-01 9:46:26): [krb5_child[186817]] [main] (0x0400): [RID#338] Will perform auth * (2025-10-01 9:46:26): [krb5_child[186817]] [main] (0x0400): [RID#338] Will perform online auth * (2025-10-01 9:46:26): [krb5_child[186817]] [tgt_req_child] (0x1000): [RID#338] Attempting to get a TGT * (2025-10-01 9:46:26): [krb5_child[186817]] [get_and_save_tgt] (0x0400): [RID#338] Attempting kinit for realm [OOO.TEST] * (2025-10-01 9:46:26): [krb5_child[186817]] [sss_krb5_responder] (0x4000): [RID#338] Got question [password]. * (2025-10-01 9:46:26): [krb5_child[186817]] [get_and_save_tgt] (0x0020): [RID#338] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 9:46:26): [krb5_child[186817]] [map_krb5_error] (0x0020): [RID#338] 2138: [-1765328360][Preauthentication failed] (2025-10-01 9:54:33): [krb5_child[211613]] [get_and_save_tgt] (0x0020): [RID#375] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 9:54:33): [krb5_child[211613]] [main] (0x0400): [RID#375] krb5_child started. * (2025-10-01 9:54:33): [krb5_child[211613]] [unpack_buffer] (0x1000): [RID#375] total buffer size: [98] * (2025-10-01 9:54:33): [krb5_child[211613]] [unpack_buffer] (0x0100): [RID#375] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 9:54:33): [krb5_child[211613]] [unpack_buffer] (0x2000): [RID#375] No old ccache * (2025-10-01 9:54:33): [krb5_child[211613]] [unpack_buffer] (0x0100): [RID#375] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 9:54:33): [krb5_child[211613]] [k5c_precreate_ccache] (0x4000): [RID#375] Recreating ccache * (2025-10-01 9:54:33): [krb5_child[211613]] [k5c_setup_fast] (0x0100): [RID#375] Fast principal is set to [host/np0005463870.ooo.test@OOO.TEST] * (2025-10-01 9:54:33): [krb5_child[211613]] [find_principal_in_keytab] (0x4000): [RID#375] Trying to find principal host/np0005463870.ooo.test@OOO.TEST in keytab. * (2025-10-01 9:54:33): [krb5_child[211613]] [match_principal] (0x1000): [RID#375] Principal matched to the sample (host/np0005463870.ooo.test@OOO.TEST). * (2025-10-01 9:54:33): [krb5_child[211613]] [check_fast_ccache] (0x0200): [RID#375] FAST TGT is still valid. * (2025-10-01 9:54:33): [krb5_child[211613]] [become_user] (0x0200): [RID#375] Trying to become user [1261600000][1261600000]. * (2025-10-01 9:54:33): [krb5_child[211613]] [main] (0x2000): [RID#375] Running as [1261600000][1261600000]. * (2025-10-01 9:54:33): [krb5_child[211613]] [set_lifetime_options] (0x0100): [RID#375] No specific renewable lifetime requested. * (2025-10-01 9:54:33): [krb5_child[211613]] [set_lifetime_options] (0x0100): [RID#375] No specific lifetime requested. * (2025-10-01 9:54:33): [krb5_child[211613]] [set_canonicalize_option] (0x0100): [RID#375] Canonicalization is set to [true] * (2025-10-01 9:54:33): [krb5_child[211613]] [main] (0x0400): [RID#375] Will perform auth * (2025-10-01 9:54:33): [krb5_child[211613]] [main] (0x0400): [RID#375] Will perform online auth * (2025-10-01 9:54:33): [krb5_child[211613]] [tgt_req_child] (0x1000): [RID#375] Attempting to get a TGT * (2025-10-01 9:54:33): [krb5_child[211613]] [get_and_save_tgt] (0x0400): [RID#375] Attempting kinit for realm [OOO.TEST] * (2025-10-01 9:54:33): [krb5_child[211613]] [sss_krb5_responder] (0x4000): [RID#375] Got question [password]. * (2025-10-01 9:54:33): [krb5_child[211613]] [get_and_save_tgt] (0x0020): [RID#375] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 9:54:33): [krb5_child[211613]] [map_krb5_error] (0x0020): [RID#375] 2138: [-1765328360][Preauthentication failed] (2025-10-01 10:11:16): [krb5_child[252585]] [get_and_save_tgt] (0x0020): [RID#439] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 10:11:16): [krb5_child[252585]] [main] (0x0400): [RID#439] krb5_child started. * (2025-10-01 10:11:16): [krb5_child[252585]] [unpack_buffer] (0x1000): [RID#439] total buffer size: [101] * (2025-10-01 10:11:16): [krb5_child[252585]] [unpack_buffer] (0x0100): [RID#439] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 10:11:16): [krb5_child[252585]] [unpack_buffer] (0x2000): [RID#439] No old ccache * (2025-10-01 10:11:16): [krb5_child[252585]] [unpack_buffer] (0x0100): [RID#439] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 10:11:16): [krb5_child[252585]] [k5c_precreate_ccache] (0x4000): [RID#439] Recreating ccache * (2025-10-01 10:11:16): [krb5_child[252585]] [k5c_setup_fast] (0x0100): [RID#439] Fast principal is set to [host/np0005463870.ooo.test@OOO.TEST] * (2025-10-01 10:11:16): [krb5_child[252585]] [find_principal_in_keytab] (0x4000): [RID#439] Trying to find principal host/np0005463870.ooo.test@OOO.TEST in keytab. * (2025-10-01 10:11:16): [krb5_child[252585]] [match_principal] (0x1000): [RID#439] Principal matched to the sample (host/np0005463870.ooo.test@OOO.TEST). * (2025-10-01 10:11:16): [krb5_child[252585]] [check_fast_ccache] (0x0200): [RID#439] FAST TGT is still valid. * (2025-10-01 10:11:16): [krb5_child[252585]] [become_user] (0x0200): [RID#439] Trying to become user [1261600000][1261600000]. * (2025-10-01 10:11:16): [krb5_child[252585]] [main] (0x2000): [RID#439] Running as [1261600000][1261600000]. * (2025-10-01 10:11:16): [krb5_child[252585]] [set_lifetime_options] (0x0100): [RID#439] No specific renewable lifetime requested. * (2025-10-01 10:11:16): [krb5_child[252585]] [set_lifetime_options] (0x0100): [RID#439] No specific lifetime requested. * (2025-10-01 10:11:16): [krb5_child[252585]] [set_canonicalize_option] (0x0100): [RID#439] Canonicalization is set to [true] * (2025-10-01 10:11:16): [krb5_child[252585]] [main] (0x0400): [RID#439] Will perform auth * (2025-10-01 10:11:16): [krb5_child[252585]] [main] (0x0400): [RID#439] Will perform online auth * (2025-10-01 10:11:16): [krb5_child[252585]] [tgt_req_child] (0x1000): [RID#439] Attempting to get a TGT * (2025-10-01 10:11:16): [krb5_child[252585]] [get_and_save_tgt] (0x0400): [RID#439] Attempting kinit for realm [OOO.TEST] * (2025-10-01 10:11:16): [krb5_child[252585]] [sss_krb5_responder] (0x4000): [RID#439] Got question [password]. * (2025-10-01 10:11:16): [krb5_child[252585]] [get_and_save_tgt] (0x0020): [RID#439] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 10:11:16): [krb5_child[252585]] [map_krb5_error] (0x0020): [RID#439] 2138: [-1765328360][Preauthentication failed] (2025-10-01 10:11:29): [krb5_child[252694]] [get_and_save_tgt] (0x0020): [RID#442] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 10:11:29): [krb5_child[252694]] [main] (0x0400): [RID#442] krb5_child started. * (2025-10-01 10:11:29): [krb5_child[252694]] [unpack_buffer] (0x1000): [RID#442] total buffer size: [99] * (2025-10-01 10:11:29): [krb5_child[252694]] [unpack_buffer] (0x0100): [RID#442] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 10:11:29): [krb5_child[252694]] [unpack_buffer] (0x2000): [RID#442] No old ccache * (2025-10-01 10:11:29): [krb5_child[252694]] [unpack_buffer] (0x0100): [RID#442] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 10:11:29): [krb5_child[252694]] [k5c_precreate_ccache] (0x4000): [RID#442] Recreating ccache * (2025-10-01 10:11:29): [krb5_child[252694]] [k5c_setup_fast] (0x0100): [RID#442] Fast principal is set to [host/np0005463870.ooo.test@OOO.TEST] * (2025-10-01 10:11:29): [krb5_child[252694]] [find_principal_in_keytab] (0x4000): [RID#442] Trying to find principal host/np0005463870.ooo.test@OOO.TEST in keytab. * (2025-10-01 10:11:29): [krb5_child[252694]] [match_principal] (0x1000): [RID#442] Principal matched to the sample (host/np0005463870.ooo.test@OOO.TEST). * (2025-10-01 10:11:29): [krb5_child[252694]] [check_fast_ccache] (0x0200): [RID#442] FAST TGT is still valid. * (2025-10-01 10:11:29): [krb5_child[252694]] [become_user] (0x0200): [RID#442] Trying to become user [1261600000][1261600000]. * (2025-10-01 10:11:29): [krb5_child[252694]] [main] (0x2000): [RID#442] Running as [1261600000][1261600000]. * (2025-10-01 10:11:29): [krb5_child[252694]] [set_lifetime_options] (0x0100): [RID#442] No specific renewable lifetime requested. * (2025-10-01 10:11:29): [krb5_child[252694]] [set_lifetime_options] (0x0100): [RID#442] No specific lifetime requested. * (2025-10-01 10:11:29): [krb5_child[252694]] [set_canonicalize_option] (0x0100): [RID#442] Canonicalization is set to [true] * (2025-10-01 10:11:29): [krb5_child[252694]] [main] (0x0400): [RID#442] Will perform auth * (2025-10-01 10:11:29): [krb5_child[252694]] [main] (0x0400): [RID#442] Will perform online auth * (2025-10-01 10:11:29): [krb5_child[252694]] [tgt_req_child] (0x1000): [RID#442] Attempting to get a TGT * (2025-10-01 10:11:29): [krb5_child[252694]] [get_and_save_tgt] (0x0400): [RID#442] Attempting kinit for realm [OOO.TEST] * (2025-10-01 10:11:29): [krb5_child[252694]] [sss_krb5_responder] (0x4000): [RID#442] Got question [password]. * (2025-10-01 10:11:29): [krb5_child[252694]] [get_and_save_tgt] (0x0020): [RID#442] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 10:11:29): [krb5_child[252694]] [map_krb5_error] (0x0020): [RID#442] 2138: [-1765328360][Preauthentication failed]