(2025-10-01 8:26:15): [krb5_child[51419]] [get_and_save_tgt] (0x0020): [RID#26] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:26:15): [krb5_child[51419]] [main] (0x0400): [RID#26] krb5_child started. * (2025-10-01 8:26:15): [krb5_child[51419]] [unpack_buffer] (0x1000): [RID#26] total buffer size: [96] * (2025-10-01 8:26:15): [krb5_child[51419]] [unpack_buffer] (0x0100): [RID#26] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:26:15): [krb5_child[51419]] [unpack_buffer] (0x2000): [RID#26] No old ccache * (2025-10-01 8:26:15): [krb5_child[51419]] [unpack_buffer] (0x0100): [RID#26] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:26:15): [krb5_child[51419]] [k5c_precreate_ccache] (0x4000): [RID#26] Recreating ccache * (2025-10-01 8:26:15): [krb5_child[51419]] [k5c_setup_fast] (0x0100): [RID#26] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:26:15): [krb5_child[51419]] [find_principal_in_keytab] (0x4000): [RID#26] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:26:15): [krb5_child[51419]] [match_principal] (0x1000): [RID#26] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:26:15): [krb5_child[51419]] [check_fast_ccache] (0x0200): [RID#26] FAST TGT is still valid. * (2025-10-01 8:26:15): [krb5_child[51419]] [become_user] (0x0200): [RID#26] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:26:15): [krb5_child[51419]] [main] (0x2000): [RID#26] Running as [1261600000][1261600000]. * (2025-10-01 8:26:15): [krb5_child[51419]] [set_lifetime_options] (0x0100): [RID#26] No specific renewable lifetime requested. * (2025-10-01 8:26:15): [krb5_child[51419]] [set_lifetime_options] (0x0100): [RID#26] No specific lifetime requested. * (2025-10-01 8:26:15): [krb5_child[51419]] [set_canonicalize_option] (0x0100): [RID#26] Canonicalization is set to [true] * (2025-10-01 8:26:15): [krb5_child[51419]] [main] (0x0400): [RID#26] Will perform auth * (2025-10-01 8:26:15): [krb5_child[51419]] [main] (0x0400): [RID#26] Will perform online auth * (2025-10-01 8:26:15): [krb5_child[51419]] [tgt_req_child] (0x1000): [RID#26] Attempting to get a TGT * (2025-10-01 8:26:15): [krb5_child[51419]] [get_and_save_tgt] (0x0400): [RID#26] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:26:15): [krb5_child[51419]] [sss_krb5_responder] (0x4000): [RID#26] Got question [password]. * (2025-10-01 8:26:15): [krb5_child[51419]] [get_and_save_tgt] (0x0020): [RID#26] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:26:15): [krb5_child[51419]] [map_krb5_error] (0x0020): [RID#26] 2138: [-1765328360][Preauthentication failed] (2025-10-01 8:28:56): [krb5_child[52278]] [get_and_save_tgt] (0x0020): [RID#36] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:28:56): [krb5_child[52278]] [main] (0x0400): [RID#36] krb5_child started. * (2025-10-01 8:28:56): [krb5_child[52278]] [unpack_buffer] (0x1000): [RID#36] total buffer size: [100] * (2025-10-01 8:28:56): [krb5_child[52278]] [unpack_buffer] (0x0100): [RID#36] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:28:56): [krb5_child[52278]] [unpack_buffer] (0x2000): [RID#36] No old ccache * (2025-10-01 8:28:56): [krb5_child[52278]] [unpack_buffer] (0x0100): [RID#36] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:28:56): [krb5_child[52278]] [k5c_precreate_ccache] (0x4000): [RID#36] Recreating ccache * (2025-10-01 8:28:56): [krb5_child[52278]] [k5c_setup_fast] (0x0100): [RID#36] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:28:56): [krb5_child[52278]] [find_principal_in_keytab] (0x4000): [RID#36] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:28:56): [krb5_child[52278]] [match_principal] (0x1000): [RID#36] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:28:56): [krb5_child[52278]] [check_fast_ccache] (0x0200): [RID#36] FAST TGT is still valid. * (2025-10-01 8:28:56): [krb5_child[52278]] [become_user] (0x0200): [RID#36] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:28:56): [krb5_child[52278]] [main] (0x2000): [RID#36] Running as [1261600000][1261600000]. * (2025-10-01 8:28:56): [krb5_child[52278]] [set_lifetime_options] (0x0100): [RID#36] No specific renewable lifetime requested. * (2025-10-01 8:28:56): [krb5_child[52278]] [set_lifetime_options] (0x0100): [RID#36] No specific lifetime requested. * (2025-10-01 8:28:56): [krb5_child[52278]] [set_canonicalize_option] (0x0100): [RID#36] Canonicalization is set to [true] * (2025-10-01 8:28:56): [krb5_child[52278]] [main] (0x0400): [RID#36] Will perform auth * (2025-10-01 8:28:56): [krb5_child[52278]] [main] (0x0400): [RID#36] Will perform online auth * (2025-10-01 8:28:56): [krb5_child[52278]] [tgt_req_child] (0x1000): [RID#36] Attempting to get a TGT * (2025-10-01 8:28:56): [krb5_child[52278]] [get_and_save_tgt] (0x0400): [RID#36] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:28:56): [krb5_child[52278]] [sss_krb5_responder] (0x4000): [RID#36] Got question [password]. * (2025-10-01 8:28:56): [krb5_child[52278]] [get_and_save_tgt] (0x0020): [RID#36] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:28:56): [krb5_child[52278]] [map_krb5_error] (0x0020): [RID#36] 2138: [-1765328360][Preauthentication failed] (2025-10-01 8:30:12): [krb5_child[56261]] [get_and_save_tgt] (0x0020): [RID#43] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:30:11): [krb5_child[56261]] [main] (0x0400): [RID#43] krb5_child started. * (2025-10-01 8:30:11): [krb5_child[56261]] [unpack_buffer] (0x1000): [RID#43] total buffer size: [107] * (2025-10-01 8:30:11): [krb5_child[56261]] [unpack_buffer] (0x0100): [RID#43] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:30:11): [krb5_child[56261]] [unpack_buffer] (0x2000): [RID#43] No old ccache * (2025-10-01 8:30:11): [krb5_child[56261]] [unpack_buffer] (0x0100): [RID#43] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:30:11): [krb5_child[56261]] [k5c_precreate_ccache] (0x4000): [RID#43] Recreating ccache * (2025-10-01 8:30:11): [krb5_child[56261]] [k5c_setup_fast] (0x0100): [RID#43] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:30:11): [krb5_child[56261]] [find_principal_in_keytab] (0x4000): [RID#43] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:30:11): [krb5_child[56261]] [match_principal] (0x1000): [RID#43] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:30:11): [krb5_child[56261]] [check_fast_ccache] (0x0200): [RID#43] FAST TGT is still valid. * (2025-10-01 8:30:11): [krb5_child[56261]] [become_user] (0x0200): [RID#43] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:30:11): [krb5_child[56261]] [main] (0x2000): [RID#43] Running as [1261600000][1261600000]. * (2025-10-01 8:30:11): [krb5_child[56261]] [set_lifetime_options] (0x0100): [RID#43] No specific renewable lifetime requested. * (2025-10-01 8:30:11): [krb5_child[56261]] [set_lifetime_options] (0x0100): [RID#43] No specific lifetime requested. * (2025-10-01 8:30:11): [krb5_child[56261]] [set_canonicalize_option] (0x0100): [RID#43] Canonicalization is set to [true] * (2025-10-01 8:30:11): [krb5_child[56261]] [main] (0x0400): [RID#43] Will perform auth * (2025-10-01 8:30:11): [krb5_child[56261]] [main] (0x0400): [RID#43] Will perform online auth * (2025-10-01 8:30:11): [krb5_child[56261]] [tgt_req_child] (0x1000): [RID#43] Attempting to get a TGT * (2025-10-01 8:30:11): [krb5_child[56261]] [get_and_save_tgt] (0x0400): [RID#43] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:30:11): [krb5_child[56261]] [sss_krb5_responder] (0x4000): [RID#43] Got question [password]. * (2025-10-01 8:30:12): [krb5_child[56261]] [get_and_save_tgt] (0x0020): [RID#43] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:30:12): [krb5_child[56261]] [map_krb5_error] (0x0020): [RID#43] 2138: [-1765328360][Preauthentication failed] (2025-10-01 8:31:22): [krb5_child[56405]] [get_and_save_tgt] (0x0020): [RID#49] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:31:22): [krb5_child[56405]] [main] (0x0400): [RID#49] krb5_child started. * (2025-10-01 8:31:22): [krb5_child[56405]] [unpack_buffer] (0x1000): [RID#49] total buffer size: [99] * (2025-10-01 8:31:22): [krb5_child[56405]] [unpack_buffer] (0x0100): [RID#49] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:31:22): [krb5_child[56405]] [unpack_buffer] (0x2000): [RID#49] No old ccache * (2025-10-01 8:31:22): [krb5_child[56405]] [unpack_buffer] (0x0100): [RID#49] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:31:22): [krb5_child[56405]] [k5c_precreate_ccache] (0x4000): [RID#49] Recreating ccache * (2025-10-01 8:31:22): [krb5_child[56405]] [k5c_setup_fast] (0x0100): [RID#49] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:31:22): [krb5_child[56405]] [find_principal_in_keytab] (0x4000): [RID#49] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:31:22): [krb5_child[56405]] [match_principal] (0x1000): [RID#49] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:31:22): [krb5_child[56405]] [check_fast_ccache] (0x0200): [RID#49] FAST TGT is still valid. * (2025-10-01 8:31:22): [krb5_child[56405]] [become_user] (0x0200): [RID#49] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:31:22): [krb5_child[56405]] [main] (0x2000): [RID#49] Running as [1261600000][1261600000]. * (2025-10-01 8:31:22): [krb5_child[56405]] [set_lifetime_options] (0x0100): [RID#49] No specific renewable lifetime requested. * (2025-10-01 8:31:22): [krb5_child[56405]] [set_lifetime_options] (0x0100): [RID#49] No specific lifetime requested. * (2025-10-01 8:31:22): [krb5_child[56405]] [set_canonicalize_option] (0x0100): [RID#49] Canonicalization is set to [true] * (2025-10-01 8:31:22): [krb5_child[56405]] [main] (0x0400): [RID#49] Will perform auth * (2025-10-01 8:31:22): [krb5_child[56405]] [main] (0x0400): [RID#49] Will perform online auth * (2025-10-01 8:31:22): [krb5_child[56405]] [tgt_req_child] (0x1000): [RID#49] Attempting to get a TGT * (2025-10-01 8:31:22): [krb5_child[56405]] [get_and_save_tgt] (0x0400): [RID#49] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:31:22): [krb5_child[56405]] [sss_krb5_responder] (0x4000): [RID#49] Got question [password]. * (2025-10-01 8:31:22): [krb5_child[56405]] [get_and_save_tgt] (0x0020): [RID#49] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:31:22): [krb5_child[56405]] [map_krb5_error] (0x0020): [RID#49] 2138: [-1765328360][Preauthentication failed] (2025-10-01 8:31:35): [krb5_child[56439]] [get_and_save_tgt] (0x0020): [RID#52] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:31:35): [krb5_child[56439]] [main] (0x0400): [RID#52] krb5_child started. * (2025-10-01 8:31:35): [krb5_child[56439]] [unpack_buffer] (0x1000): [RID#52] total buffer size: [98] * (2025-10-01 8:31:35): [krb5_child[56439]] [unpack_buffer] (0x0100): [RID#52] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:31:35): [krb5_child[56439]] [unpack_buffer] (0x2000): [RID#52] No old ccache * (2025-10-01 8:31:35): [krb5_child[56439]] [unpack_buffer] (0x0100): [RID#52] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:31:35): [krb5_child[56439]] [k5c_precreate_ccache] (0x4000): [RID#52] Recreating ccache * (2025-10-01 8:31:35): [krb5_child[56439]] [k5c_setup_fast] (0x0100): [RID#52] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:31:35): [krb5_child[56439]] [find_principal_in_keytab] (0x4000): [RID#52] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:31:35): [krb5_child[56439]] [match_principal] (0x1000): [RID#52] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:31:35): [krb5_child[56439]] [check_fast_ccache] (0x0200): [RID#52] FAST TGT is still valid. * (2025-10-01 8:31:35): [krb5_child[56439]] [become_user] (0x0200): [RID#52] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:31:35): [krb5_child[56439]] [main] (0x2000): [RID#52] Running as [1261600000][1261600000]. * (2025-10-01 8:31:35): [krb5_child[56439]] [set_lifetime_options] (0x0100): [RID#52] No specific renewable lifetime requested. * (2025-10-01 8:31:35): [krb5_child[56439]] [set_lifetime_options] (0x0100): [RID#52] No specific lifetime requested. * (2025-10-01 8:31:35): [krb5_child[56439]] [set_canonicalize_option] (0x0100): [RID#52] Canonicalization is set to [true] * (2025-10-01 8:31:35): [krb5_child[56439]] [main] (0x0400): [RID#52] Will perform auth * (2025-10-01 8:31:35): [krb5_child[56439]] [main] (0x0400): [RID#52] Will perform online auth * (2025-10-01 8:31:35): [krb5_child[56439]] [tgt_req_child] (0x1000): [RID#52] Attempting to get a TGT * (2025-10-01 8:31:35): [krb5_child[56439]] [get_and_save_tgt] (0x0400): [RID#52] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:31:35): [krb5_child[56439]] [sss_krb5_responder] (0x4000): [RID#52] Got question [password]. * (2025-10-01 8:31:35): [krb5_child[56439]] [get_and_save_tgt] (0x0020): [RID#52] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:31:35): [krb5_child[56439]] [map_krb5_error] (0x0020): [RID#52] 2138: [-1765328360][Preauthentication failed] (2025-10-01 8:32:44): [krb5_child[56601]] [get_and_save_tgt] (0x0020): [RID#56] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:32:44): [krb5_child[56601]] [main] (0x0400): [RID#56] krb5_child started. * (2025-10-01 8:32:44): [krb5_child[56601]] [unpack_buffer] (0x1000): [RID#56] total buffer size: [95] * (2025-10-01 8:32:44): [krb5_child[56601]] [unpack_buffer] (0x0100): [RID#56] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:32:44): [krb5_child[56601]] [unpack_buffer] (0x2000): [RID#56] No old ccache * (2025-10-01 8:32:44): [krb5_child[56601]] [unpack_buffer] (0x0100): [RID#56] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:32:44): [krb5_child[56601]] [k5c_precreate_ccache] (0x4000): [RID#56] Recreating ccache * (2025-10-01 8:32:44): [krb5_child[56601]] [k5c_setup_fast] (0x0100): [RID#56] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:32:44): [krb5_child[56601]] [find_principal_in_keytab] (0x4000): [RID#56] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:32:44): [krb5_child[56601]] [match_principal] (0x1000): [RID#56] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:32:44): [krb5_child[56601]] [check_fast_ccache] (0x0200): [RID#56] FAST TGT is still valid. * (2025-10-01 8:32:44): [krb5_child[56601]] [become_user] (0x0200): [RID#56] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:32:44): [krb5_child[56601]] [main] (0x2000): [RID#56] Running as [1261600000][1261600000]. * (2025-10-01 8:32:44): [krb5_child[56601]] [set_lifetime_options] (0x0100): [RID#56] No specific renewable lifetime requested. * (2025-10-01 8:32:44): [krb5_child[56601]] [set_lifetime_options] (0x0100): [RID#56] No specific lifetime requested. * (2025-10-01 8:32:44): [krb5_child[56601]] [set_canonicalize_option] (0x0100): [RID#56] Canonicalization is set to [true] * (2025-10-01 8:32:44): [krb5_child[56601]] [main] (0x0400): [RID#56] Will perform auth * (2025-10-01 8:32:44): [krb5_child[56601]] [main] (0x0400): [RID#56] Will perform online auth * (2025-10-01 8:32:44): [krb5_child[56601]] [tgt_req_child] (0x1000): [RID#56] Attempting to get a TGT * (2025-10-01 8:32:44): [krb5_child[56601]] [get_and_save_tgt] (0x0400): [RID#56] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:32:44): [krb5_child[56601]] [get_and_save_tgt] (0x0020): [RID#56] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:32:44): [krb5_child[56601]] [map_krb5_error] (0x0020): [RID#56] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-01 8:33:31): [krb5_child[57843]] [get_and_save_tgt] (0x0020): [RID#60] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:33:31): [krb5_child[57843]] [main] (0x0400): [RID#60] krb5_child started. * (2025-10-01 8:33:31): [krb5_child[57843]] [unpack_buffer] (0x1000): [RID#60] total buffer size: [99] * (2025-10-01 8:33:31): [krb5_child[57843]] [unpack_buffer] (0x0100): [RID#60] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:33:31): [krb5_child[57843]] [unpack_buffer] (0x2000): [RID#60] No old ccache * (2025-10-01 8:33:31): [krb5_child[57843]] [unpack_buffer] (0x0100): [RID#60] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:33:31): [krb5_child[57843]] [k5c_precreate_ccache] (0x4000): [RID#60] Recreating ccache * (2025-10-01 8:33:31): [krb5_child[57843]] [k5c_setup_fast] (0x0100): [RID#60] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:33:31): [krb5_child[57843]] [find_principal_in_keytab] (0x4000): [RID#60] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:33:31): [krb5_child[57843]] [match_principal] (0x1000): [RID#60] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:33:31): [krb5_child[57843]] [check_fast_ccache] (0x0200): [RID#60] FAST TGT is still valid. * (2025-10-01 8:33:31): [krb5_child[57843]] [become_user] (0x0200): [RID#60] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:33:31): [krb5_child[57843]] [main] (0x2000): [RID#60] Running as [1261600000][1261600000]. * (2025-10-01 8:33:31): [krb5_child[57843]] [set_lifetime_options] (0x0100): [RID#60] No specific renewable lifetime requested. * (2025-10-01 8:33:31): [krb5_child[57843]] [set_lifetime_options] (0x0100): [RID#60] No specific lifetime requested. * (2025-10-01 8:33:31): [krb5_child[57843]] [set_canonicalize_option] (0x0100): [RID#60] Canonicalization is set to [true] * (2025-10-01 8:33:31): [krb5_child[57843]] [main] (0x0400): [RID#60] Will perform auth * (2025-10-01 8:33:31): [krb5_child[57843]] [main] (0x0400): [RID#60] Will perform online auth * (2025-10-01 8:33:31): [krb5_child[57843]] [tgt_req_child] (0x1000): [RID#60] Attempting to get a TGT * (2025-10-01 8:33:31): [krb5_child[57843]] [get_and_save_tgt] (0x0400): [RID#60] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:33:31): [krb5_child[57843]] [get_and_save_tgt] (0x0020): [RID#60] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:33:31): [krb5_child[57843]] [map_krb5_error] (0x0020): [RID#60] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-01 8:34:04): [krb5_child[60078]] [get_and_save_tgt] (0x0020): [RID#64] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:34:04): [krb5_child[60078]] [main] (0x0400): [RID#64] krb5_child started. * (2025-10-01 8:34:04): [krb5_child[60078]] [unpack_buffer] (0x1000): [RID#64] total buffer size: [97] * (2025-10-01 8:34:04): [krb5_child[60078]] [unpack_buffer] (0x0100): [RID#64] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:34:04): [krb5_child[60078]] [unpack_buffer] (0x2000): [RID#64] No old ccache * (2025-10-01 8:34:04): [krb5_child[60078]] [unpack_buffer] (0x0100): [RID#64] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:34:04): [krb5_child[60078]] [k5c_precreate_ccache] (0x4000): [RID#64] Recreating ccache * (2025-10-01 8:34:04): [krb5_child[60078]] [k5c_setup_fast] (0x0100): [RID#64] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:34:04): [krb5_child[60078]] [find_principal_in_keytab] (0x4000): [RID#64] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:34:04): [krb5_child[60078]] [match_principal] (0x1000): [RID#64] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:34:04): [krb5_child[60078]] [check_fast_ccache] (0x0200): [RID#64] FAST TGT is still valid. * (2025-10-01 8:34:04): [krb5_child[60078]] [become_user] (0x0200): [RID#64] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:34:04): [krb5_child[60078]] [main] (0x2000): [RID#64] Running as [1261600000][1261600000]. * (2025-10-01 8:34:04): [krb5_child[60078]] [set_lifetime_options] (0x0100): [RID#64] No specific renewable lifetime requested. * (2025-10-01 8:34:04): [krb5_child[60078]] [set_lifetime_options] (0x0100): [RID#64] No specific lifetime requested. * (2025-10-01 8:34:04): [krb5_child[60078]] [set_canonicalize_option] (0x0100): [RID#64] Canonicalization is set to [true] * (2025-10-01 8:34:04): [krb5_child[60078]] [main] (0x0400): [RID#64] Will perform auth * (2025-10-01 8:34:04): [krb5_child[60078]] [main] (0x0400): [RID#64] Will perform online auth * (2025-10-01 8:34:04): [krb5_child[60078]] [tgt_req_child] (0x1000): [RID#64] Attempting to get a TGT * (2025-10-01 8:34:04): [krb5_child[60078]] [get_and_save_tgt] (0x0400): [RID#64] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:34:04): [krb5_child[60078]] [get_and_save_tgt] (0x0020): [RID#64] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:34:04): [krb5_child[60078]] [map_krb5_error] (0x0020): [RID#64] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-01 8:37:47): [krb5_child[65482]] [get_and_save_tgt] (0x0020): [RID#82] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:37:47): [krb5_child[65482]] [main] (0x0400): [RID#82] krb5_child started. * (2025-10-01 8:37:47): [krb5_child[65482]] [unpack_buffer] (0x1000): [RID#82] total buffer size: [96] * (2025-10-01 8:37:47): [krb5_child[65482]] [unpack_buffer] (0x0100): [RID#82] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:37:47): [krb5_child[65482]] [unpack_buffer] (0x2000): [RID#82] No old ccache * (2025-10-01 8:37:47): [krb5_child[65482]] [unpack_buffer] (0x0100): [RID#82] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:37:47): [krb5_child[65482]] [k5c_precreate_ccache] (0x4000): [RID#82] Recreating ccache * (2025-10-01 8:37:47): [krb5_child[65482]] [k5c_setup_fast] (0x0100): [RID#82] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:37:47): [krb5_child[65482]] [find_principal_in_keytab] (0x4000): [RID#82] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:37:47): [krb5_child[65482]] [match_principal] (0x1000): [RID#82] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:37:47): [krb5_child[65482]] [check_fast_ccache] (0x0200): [RID#82] FAST TGT is still valid. * (2025-10-01 8:37:47): [krb5_child[65482]] [become_user] (0x0200): [RID#82] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:37:47): [krb5_child[65482]] [main] (0x2000): [RID#82] Running as [1261600000][1261600000]. * (2025-10-01 8:37:47): [krb5_child[65482]] [set_lifetime_options] (0x0100): [RID#82] No specific renewable lifetime requested. * (2025-10-01 8:37:47): [krb5_child[65482]] [set_lifetime_options] (0x0100): [RID#82] No specific lifetime requested. * (2025-10-01 8:37:47): [krb5_child[65482]] [set_canonicalize_option] (0x0100): [RID#82] Canonicalization is set to [true] * (2025-10-01 8:37:47): [krb5_child[65482]] [main] (0x0400): [RID#82] Will perform auth * (2025-10-01 8:37:47): [krb5_child[65482]] [main] (0x0400): [RID#82] Will perform online auth * (2025-10-01 8:37:47): [krb5_child[65482]] [tgt_req_child] (0x1000): [RID#82] Attempting to get a TGT * (2025-10-01 8:37:47): [krb5_child[65482]] [get_and_save_tgt] (0x0400): [RID#82] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:37:47): [krb5_child[65482]] [get_and_save_tgt] (0x0020): [RID#82] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:37:47): [krb5_child[65482]] [map_krb5_error] (0x0020): [RID#82] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-01 8:39:30): [krb5_child[66728]] [get_and_save_tgt] (0x0020): [RID#89] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:39:30): [krb5_child[66728]] [main] (0x0400): [RID#89] krb5_child started. * (2025-10-01 8:39:30): [krb5_child[66728]] [unpack_buffer] (0x1000): [RID#89] total buffer size: [99] * (2025-10-01 8:39:30): [krb5_child[66728]] [unpack_buffer] (0x0100): [RID#89] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:39:30): [krb5_child[66728]] [unpack_buffer] (0x2000): [RID#89] No old ccache * (2025-10-01 8:39:30): [krb5_child[66728]] [unpack_buffer] (0x0100): [RID#89] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:39:30): [krb5_child[66728]] [k5c_precreate_ccache] (0x4000): [RID#89] Recreating ccache * (2025-10-01 8:39:30): [krb5_child[66728]] [k5c_setup_fast] (0x0100): [RID#89] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:39:30): [krb5_child[66728]] [find_principal_in_keytab] (0x4000): [RID#89] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:39:30): [krb5_child[66728]] [match_principal] (0x1000): [RID#89] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:39:30): [krb5_child[66728]] [check_fast_ccache] (0x0200): [RID#89] FAST TGT is still valid. * (2025-10-01 8:39:30): [krb5_child[66728]] [become_user] (0x0200): [RID#89] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:39:30): [krb5_child[66728]] [main] (0x2000): [RID#89] Running as [1261600000][1261600000]. * (2025-10-01 8:39:30): [krb5_child[66728]] [set_lifetime_options] (0x0100): [RID#89] No specific renewable lifetime requested. * (2025-10-01 8:39:30): [krb5_child[66728]] [set_lifetime_options] (0x0100): [RID#89] No specific lifetime requested. * (2025-10-01 8:39:30): [krb5_child[66728]] [set_canonicalize_option] (0x0100): [RID#89] Canonicalization is set to [true] * (2025-10-01 8:39:30): [krb5_child[66728]] [main] (0x0400): [RID#89] Will perform auth * (2025-10-01 8:39:30): [krb5_child[66728]] [main] (0x0400): [RID#89] Will perform online auth * (2025-10-01 8:39:30): [krb5_child[66728]] [tgt_req_child] (0x1000): [RID#89] Attempting to get a TGT * (2025-10-01 8:39:30): [krb5_child[66728]] [get_and_save_tgt] (0x0400): [RID#89] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:39:30): [krb5_child[66728]] [get_and_save_tgt] (0x0020): [RID#89] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:39:30): [krb5_child[66728]] [map_krb5_error] (0x0020): [RID#89] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-01 8:42:54): [krb5_child[69186]] [get_and_save_tgt] (0x0020): [RID#104] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:42:54): [krb5_child[69186]] [main] (0x0400): [RID#104] krb5_child started. * (2025-10-01 8:42:54): [krb5_child[69186]] [unpack_buffer] (0x1000): [RID#104] total buffer size: [97] * (2025-10-01 8:42:54): [krb5_child[69186]] [unpack_buffer] (0x0100): [RID#104] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:42:54): [krb5_child[69186]] [unpack_buffer] (0x2000): [RID#104] No old ccache * (2025-10-01 8:42:54): [krb5_child[69186]] [unpack_buffer] (0x0100): [RID#104] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:42:54): [krb5_child[69186]] [k5c_precreate_ccache] (0x4000): [RID#104] Recreating ccache * (2025-10-01 8:42:54): [krb5_child[69186]] [k5c_setup_fast] (0x0100): [RID#104] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:42:54): [krb5_child[69186]] [find_principal_in_keytab] (0x4000): [RID#104] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:42:54): [krb5_child[69186]] [match_principal] (0x1000): [RID#104] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:42:54): [krb5_child[69186]] [check_fast_ccache] (0x0200): [RID#104] FAST TGT is still valid. * (2025-10-01 8:42:54): [krb5_child[69186]] [become_user] (0x0200): [RID#104] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:42:54): [krb5_child[69186]] [main] (0x2000): [RID#104] Running as [1261600000][1261600000]. * (2025-10-01 8:42:54): [krb5_child[69186]] [set_lifetime_options] (0x0100): [RID#104] No specific renewable lifetime requested. * (2025-10-01 8:42:54): [krb5_child[69186]] [set_lifetime_options] (0x0100): [RID#104] No specific lifetime requested. * (2025-10-01 8:42:54): [krb5_child[69186]] [set_canonicalize_option] (0x0100): [RID#104] Canonicalization is set to [true] * (2025-10-01 8:42:54): [krb5_child[69186]] [main] (0x0400): [RID#104] Will perform auth * (2025-10-01 8:42:54): [krb5_child[69186]] [main] (0x0400): [RID#104] Will perform online auth * (2025-10-01 8:42:54): [krb5_child[69186]] [tgt_req_child] (0x1000): [RID#104] Attempting to get a TGT * (2025-10-01 8:42:54): [krb5_child[69186]] [get_and_save_tgt] (0x0400): [RID#104] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:42:54): [krb5_child[69186]] [sss_krb5_responder] (0x4000): [RID#104] Got question [password]. * (2025-10-01 8:42:54): [krb5_child[69186]] [get_and_save_tgt] (0x0020): [RID#104] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:42:54): [krb5_child[69186]] [map_krb5_error] (0x0020): [RID#104] 2138: [-1765328360][Preauthentication failed] (2025-10-01 8:43:40): [krb5_child[69532]] [get_and_save_tgt] (0x0020): [RID#110] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:43:40): [krb5_child[69532]] [main] (0x0400): [RID#110] krb5_child started. * (2025-10-01 8:43:40): [krb5_child[69532]] [unpack_buffer] (0x1000): [RID#110] total buffer size: [99] * (2025-10-01 8:43:40): [krb5_child[69532]] [unpack_buffer] (0x0100): [RID#110] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:43:40): [krb5_child[69532]] [unpack_buffer] (0x2000): [RID#110] No old ccache * (2025-10-01 8:43:40): [krb5_child[69532]] [unpack_buffer] (0x0100): [RID#110] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:43:40): [krb5_child[69532]] [k5c_precreate_ccache] (0x4000): [RID#110] Recreating ccache * (2025-10-01 8:43:40): [krb5_child[69532]] [k5c_setup_fast] (0x0100): [RID#110] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:43:40): [krb5_child[69532]] [find_principal_in_keytab] (0x4000): [RID#110] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:43:40): [krb5_child[69532]] [match_principal] (0x1000): [RID#110] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:43:40): [krb5_child[69532]] [check_fast_ccache] (0x0200): [RID#110] FAST TGT is still valid. * (2025-10-01 8:43:40): [krb5_child[69532]] [become_user] (0x0200): [RID#110] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:43:40): [krb5_child[69532]] [main] (0x2000): [RID#110] Running as [1261600000][1261600000]. * (2025-10-01 8:43:40): [krb5_child[69532]] [set_lifetime_options] (0x0100): [RID#110] No specific renewable lifetime requested. * (2025-10-01 8:43:40): [krb5_child[69532]] [set_lifetime_options] (0x0100): [RID#110] No specific lifetime requested. * (2025-10-01 8:43:40): [krb5_child[69532]] [set_canonicalize_option] (0x0100): [RID#110] Canonicalization is set to [true] * (2025-10-01 8:43:40): [krb5_child[69532]] [main] (0x0400): [RID#110] Will perform auth * (2025-10-01 8:43:40): [krb5_child[69532]] [main] (0x0400): [RID#110] Will perform online auth * (2025-10-01 8:43:40): [krb5_child[69532]] [tgt_req_child] (0x1000): [RID#110] Attempting to get a TGT * (2025-10-01 8:43:40): [krb5_child[69532]] [get_and_save_tgt] (0x0400): [RID#110] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:43:40): [krb5_child[69532]] [sss_krb5_responder] (0x4000): [RID#110] Got question [password]. * (2025-10-01 8:43:40): [krb5_child[69532]] [get_and_save_tgt] (0x0020): [RID#110] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:43:40): [krb5_child[69532]] [map_krb5_error] (0x0020): [RID#110] 2138: [-1765328360][Preauthentication failed] (2025-10-01 8:44:05): [krb5_child[69773]] [get_and_save_tgt] (0x0020): [RID#114] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:44:05): [krb5_child[69773]] [main] (0x0400): [RID#114] krb5_child started. * (2025-10-01 8:44:05): [krb5_child[69773]] [unpack_buffer] (0x1000): [RID#114] total buffer size: [99] * (2025-10-01 8:44:05): [krb5_child[69773]] [unpack_buffer] (0x0100): [RID#114] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:44:05): [krb5_child[69773]] [unpack_buffer] (0x2000): [RID#114] No old ccache * (2025-10-01 8:44:05): [krb5_child[69773]] [unpack_buffer] (0x0100): [RID#114] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:44:05): [krb5_child[69773]] [k5c_precreate_ccache] (0x4000): [RID#114] Recreating ccache * (2025-10-01 8:44:05): [krb5_child[69773]] [k5c_setup_fast] (0x0100): [RID#114] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:44:05): [krb5_child[69773]] [find_principal_in_keytab] (0x4000): [RID#114] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:44:05): [krb5_child[69773]] [match_principal] (0x1000): [RID#114] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:44:05): [krb5_child[69773]] [check_fast_ccache] (0x0200): [RID#114] FAST TGT is still valid. * (2025-10-01 8:44:05): [krb5_child[69773]] [become_user] (0x0200): [RID#114] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:44:05): [krb5_child[69773]] [main] (0x2000): [RID#114] Running as [1261600000][1261600000]. * (2025-10-01 8:44:05): [krb5_child[69773]] [set_lifetime_options] (0x0100): [RID#114] No specific renewable lifetime requested. * (2025-10-01 8:44:05): [krb5_child[69773]] [set_lifetime_options] (0x0100): [RID#114] No specific lifetime requested. * (2025-10-01 8:44:05): [krb5_child[69773]] [set_canonicalize_option] (0x0100): [RID#114] Canonicalization is set to [true] * (2025-10-01 8:44:05): [krb5_child[69773]] [main] (0x0400): [RID#114] Will perform auth * (2025-10-01 8:44:05): [krb5_child[69773]] [main] (0x0400): [RID#114] Will perform online auth * (2025-10-01 8:44:05): [krb5_child[69773]] [tgt_req_child] (0x1000): [RID#114] Attempting to get a TGT * (2025-10-01 8:44:05): [krb5_child[69773]] [get_and_save_tgt] (0x0400): [RID#114] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:44:05): [krb5_child[69773]] [get_and_save_tgt] (0x0020): [RID#114] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:44:05): [krb5_child[69773]] [map_krb5_error] (0x0020): [RID#114] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-01 8:44:16): [krb5_child[69782]] [get_and_save_tgt] (0x0020): [RID#117] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:44:16): [krb5_child[69782]] [main] (0x0400): [RID#117] krb5_child started. * (2025-10-01 8:44:16): [krb5_child[69782]] [unpack_buffer] (0x1000): [RID#117] total buffer size: [98] * (2025-10-01 8:44:16): [krb5_child[69782]] [unpack_buffer] (0x0100): [RID#117] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:44:16): [krb5_child[69782]] [unpack_buffer] (0x2000): [RID#117] No old ccache * (2025-10-01 8:44:16): [krb5_child[69782]] [unpack_buffer] (0x0100): [RID#117] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:44:16): [krb5_child[69782]] [k5c_precreate_ccache] (0x4000): [RID#117] Recreating ccache * (2025-10-01 8:44:16): [krb5_child[69782]] [k5c_setup_fast] (0x0100): [RID#117] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:44:16): [krb5_child[69782]] [find_principal_in_keytab] (0x4000): [RID#117] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:44:16): [krb5_child[69782]] [match_principal] (0x1000): [RID#117] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:44:16): [krb5_child[69782]] [check_fast_ccache] (0x0200): [RID#117] FAST TGT is still valid. * (2025-10-01 8:44:16): [krb5_child[69782]] [become_user] (0x0200): [RID#117] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:44:16): [krb5_child[69782]] [main] (0x2000): [RID#117] Running as [1261600000][1261600000]. * (2025-10-01 8:44:16): [krb5_child[69782]] [set_lifetime_options] (0x0100): [RID#117] No specific renewable lifetime requested. * (2025-10-01 8:44:16): [krb5_child[69782]] [set_lifetime_options] (0x0100): [RID#117] No specific lifetime requested. * (2025-10-01 8:44:16): [krb5_child[69782]] [set_canonicalize_option] (0x0100): [RID#117] Canonicalization is set to [true] * (2025-10-01 8:44:16): [krb5_child[69782]] [main] (0x0400): [RID#117] Will perform auth * (2025-10-01 8:44:16): [krb5_child[69782]] [main] (0x0400): [RID#117] Will perform online auth * (2025-10-01 8:44:16): [krb5_child[69782]] [tgt_req_child] (0x1000): [RID#117] Attempting to get a TGT * (2025-10-01 8:44:16): [krb5_child[69782]] [get_and_save_tgt] (0x0400): [RID#117] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:44:16): [krb5_child[69782]] [get_and_save_tgt] (0x0020): [RID#117] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:44:16): [krb5_child[69782]] [map_krb5_error] (0x0020): [RID#117] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-01 8:45:24): [krb5_child[70319]] [get_and_save_tgt] (0x0020): [RID#123] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:45:24): [krb5_child[70319]] [main] (0x0400): [RID#123] krb5_child started. * (2025-10-01 8:45:24): [krb5_child[70319]] [unpack_buffer] (0x1000): [RID#123] total buffer size: [97] * (2025-10-01 8:45:24): [krb5_child[70319]] [unpack_buffer] (0x0100): [RID#123] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:45:24): [krb5_child[70319]] [unpack_buffer] (0x2000): [RID#123] No old ccache * (2025-10-01 8:45:24): [krb5_child[70319]] [unpack_buffer] (0x0100): [RID#123] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:45:24): [krb5_child[70319]] [k5c_precreate_ccache] (0x4000): [RID#123] Recreating ccache * (2025-10-01 8:45:24): [krb5_child[70319]] [k5c_setup_fast] (0x0100): [RID#123] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:45:24): [krb5_child[70319]] [find_principal_in_keytab] (0x4000): [RID#123] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:45:24): [krb5_child[70319]] [match_principal] (0x1000): [RID#123] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:45:24): [krb5_child[70319]] [check_fast_ccache] (0x0200): [RID#123] FAST TGT is still valid. * (2025-10-01 8:45:24): [krb5_child[70319]] [become_user] (0x0200): [RID#123] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:45:24): [krb5_child[70319]] [main] (0x2000): [RID#123] Running as [1261600000][1261600000]. * (2025-10-01 8:45:24): [krb5_child[70319]] [set_lifetime_options] (0x0100): [RID#123] No specific renewable lifetime requested. * (2025-10-01 8:45:24): [krb5_child[70319]] [set_lifetime_options] (0x0100): [RID#123] No specific lifetime requested. * (2025-10-01 8:45:24): [krb5_child[70319]] [set_canonicalize_option] (0x0100): [RID#123] Canonicalization is set to [true] * (2025-10-01 8:45:24): [krb5_child[70319]] [main] (0x0400): [RID#123] Will perform auth * (2025-10-01 8:45:24): [krb5_child[70319]] [main] (0x0400): [RID#123] Will perform online auth * (2025-10-01 8:45:24): [krb5_child[70319]] [tgt_req_child] (0x1000): [RID#123] Attempting to get a TGT * (2025-10-01 8:45:24): [krb5_child[70319]] [get_and_save_tgt] (0x0400): [RID#123] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:45:24): [krb5_child[70319]] [get_and_save_tgt] (0x0020): [RID#123] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:45:24): [krb5_child[70319]] [map_krb5_error] (0x0020): [RID#123] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-01 8:49:40): [krb5_child[72774]] [get_and_save_tgt] (0x0020): [RID#153] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:49:40): [krb5_child[72774]] [main] (0x0400): [RID#153] krb5_child started. * (2025-10-01 8:49:40): [krb5_child[72774]] [unpack_buffer] (0x1000): [RID#153] total buffer size: [95] * (2025-10-01 8:49:40): [krb5_child[72774]] [unpack_buffer] (0x0100): [RID#153] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:49:40): [krb5_child[72774]] [unpack_buffer] (0x2000): [RID#153] No old ccache * (2025-10-01 8:49:40): [krb5_child[72774]] [unpack_buffer] (0x0100): [RID#153] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:49:40): [krb5_child[72774]] [k5c_precreate_ccache] (0x4000): [RID#153] Recreating ccache * (2025-10-01 8:49:40): [krb5_child[72774]] [k5c_setup_fast] (0x0100): [RID#153] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:49:40): [krb5_child[72774]] [find_principal_in_keytab] (0x4000): [RID#153] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:49:40): [krb5_child[72774]] [match_principal] (0x1000): [RID#153] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:49:40): [krb5_child[72774]] [check_fast_ccache] (0x0200): [RID#153] FAST TGT is still valid. * (2025-10-01 8:49:40): [krb5_child[72774]] [become_user] (0x0200): [RID#153] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:49:40): [krb5_child[72774]] [main] (0x2000): [RID#153] Running as [1261600000][1261600000]. * (2025-10-01 8:49:40): [krb5_child[72774]] [set_lifetime_options] (0x0100): [RID#153] No specific renewable lifetime requested. * (2025-10-01 8:49:40): [krb5_child[72774]] [set_lifetime_options] (0x0100): [RID#153] No specific lifetime requested. * (2025-10-01 8:49:40): [krb5_child[72774]] [set_canonicalize_option] (0x0100): [RID#153] Canonicalization is set to [true] * (2025-10-01 8:49:40): [krb5_child[72774]] [main] (0x0400): [RID#153] Will perform auth * (2025-10-01 8:49:40): [krb5_child[72774]] [main] (0x0400): [RID#153] Will perform online auth * (2025-10-01 8:49:40): [krb5_child[72774]] [tgt_req_child] (0x1000): [RID#153] Attempting to get a TGT * (2025-10-01 8:49:40): [krb5_child[72774]] [get_and_save_tgt] (0x0400): [RID#153] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:49:40): [krb5_child[72774]] [get_and_save_tgt] (0x0020): [RID#153] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:49:40): [krb5_child[72774]] [map_krb5_error] (0x0020): [RID#153] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-01 8:50:14): [krb5_child[73021]] [get_and_save_tgt] (0x0020): [RID#159] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:50:14): [krb5_child[73021]] [main] (0x0400): [RID#159] krb5_child started. * (2025-10-01 8:50:14): [krb5_child[73021]] [unpack_buffer] (0x1000): [RID#159] total buffer size: [101] * (2025-10-01 8:50:14): [krb5_child[73021]] [unpack_buffer] (0x0100): [RID#159] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:50:14): [krb5_child[73021]] [unpack_buffer] (0x2000): [RID#159] No old ccache * (2025-10-01 8:50:14): [krb5_child[73021]] [unpack_buffer] (0x0100): [RID#159] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:50:14): [krb5_child[73021]] [k5c_precreate_ccache] (0x4000): [RID#159] Recreating ccache * (2025-10-01 8:50:14): [krb5_child[73021]] [k5c_setup_fast] (0x0100): [RID#159] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:50:14): [krb5_child[73021]] [find_principal_in_keytab] (0x4000): [RID#159] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:50:14): [krb5_child[73021]] [match_principal] (0x1000): [RID#159] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:50:14): [krb5_child[73021]] [check_fast_ccache] (0x0200): [RID#159] FAST TGT is still valid. * (2025-10-01 8:50:14): [krb5_child[73021]] [become_user] (0x0200): [RID#159] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:50:14): [krb5_child[73021]] [main] (0x2000): [RID#159] Running as [1261600000][1261600000]. * (2025-10-01 8:50:14): [krb5_child[73021]] [set_lifetime_options] (0x0100): [RID#159] No specific renewable lifetime requested. * (2025-10-01 8:50:14): [krb5_child[73021]] [set_lifetime_options] (0x0100): [RID#159] No specific lifetime requested. * (2025-10-01 8:50:14): [krb5_child[73021]] [set_canonicalize_option] (0x0100): [RID#159] Canonicalization is set to [true] * (2025-10-01 8:50:14): [krb5_child[73021]] [main] (0x0400): [RID#159] Will perform auth * (2025-10-01 8:50:14): [krb5_child[73021]] [main] (0x0400): [RID#159] Will perform online auth * (2025-10-01 8:50:14): [krb5_child[73021]] [tgt_req_child] (0x1000): [RID#159] Attempting to get a TGT * (2025-10-01 8:50:14): [krb5_child[73021]] [get_and_save_tgt] (0x0400): [RID#159] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:50:14): [krb5_child[73021]] [get_and_save_tgt] (0x0020): [RID#159] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:50:14): [krb5_child[73021]] [map_krb5_error] (0x0020): [RID#159] 2138: [-1765328366][Client's credentials have been revoked] (2025-10-01 8:56:49): [krb5_child[76141]] [get_and_save_tgt] (0x0020): [RID#194] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 8:56:49): [krb5_child[76141]] [main] (0x0400): [RID#194] krb5_child started. * (2025-10-01 8:56:49): [krb5_child[76141]] [unpack_buffer] (0x1000): [RID#194] total buffer size: [104] * (2025-10-01 8:56:49): [krb5_child[76141]] [unpack_buffer] (0x0100): [RID#194] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 8:56:49): [krb5_child[76141]] [unpack_buffer] (0x2000): [RID#194] No old ccache * (2025-10-01 8:56:49): [krb5_child[76141]] [unpack_buffer] (0x0100): [RID#194] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 8:56:49): [krb5_child[76141]] [k5c_precreate_ccache] (0x4000): [RID#194] Recreating ccache * (2025-10-01 8:56:49): [krb5_child[76141]] [k5c_setup_fast] (0x0100): [RID#194] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 8:56:49): [krb5_child[76141]] [find_principal_in_keytab] (0x4000): [RID#194] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 8:56:49): [krb5_child[76141]] [match_principal] (0x1000): [RID#194] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 8:56:49): [krb5_child[76141]] [check_fast_ccache] (0x0200): [RID#194] FAST TGT is still valid. * (2025-10-01 8:56:49): [krb5_child[76141]] [become_user] (0x0200): [RID#194] Trying to become user [1261600000][1261600000]. * (2025-10-01 8:56:49): [krb5_child[76141]] [main] (0x2000): [RID#194] Running as [1261600000][1261600000]. * (2025-10-01 8:56:49): [krb5_child[76141]] [set_lifetime_options] (0x0100): [RID#194] No specific renewable lifetime requested. * (2025-10-01 8:56:49): [krb5_child[76141]] [set_lifetime_options] (0x0100): [RID#194] No specific lifetime requested. * (2025-10-01 8:56:49): [krb5_child[76141]] [set_canonicalize_option] (0x0100): [RID#194] Canonicalization is set to [true] * (2025-10-01 8:56:49): [krb5_child[76141]] [main] (0x0400): [RID#194] Will perform auth * (2025-10-01 8:56:49): [krb5_child[76141]] [main] (0x0400): [RID#194] Will perform online auth * (2025-10-01 8:56:49): [krb5_child[76141]] [tgt_req_child] (0x1000): [RID#194] Attempting to get a TGT * (2025-10-01 8:56:49): [krb5_child[76141]] [get_and_save_tgt] (0x0400): [RID#194] Attempting kinit for realm [OOO.TEST] * (2025-10-01 8:56:49): [krb5_child[76141]] [sss_krb5_responder] (0x4000): [RID#194] Got question [password]. * (2025-10-01 8:56:49): [krb5_child[76141]] [get_and_save_tgt] (0x0020): [RID#194] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 8:56:49): [krb5_child[76141]] [map_krb5_error] (0x0020): [RID#194] 2138: [-1765328360][Preauthentication failed] (2025-10-01 9:02:58): [krb5_child[78964]] [get_and_save_tgt] (0x0020): [RID#228] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 9:02:58): [krb5_child[78964]] [main] (0x0400): [RID#228] krb5_child started. * (2025-10-01 9:02:58): [krb5_child[78964]] [unpack_buffer] (0x1000): [RID#228] total buffer size: [100] * (2025-10-01 9:02:58): [krb5_child[78964]] [unpack_buffer] (0x0100): [RID#228] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 9:02:58): [krb5_child[78964]] [unpack_buffer] (0x2000): [RID#228] No old ccache * (2025-10-01 9:02:58): [krb5_child[78964]] [unpack_buffer] (0x0100): [RID#228] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 9:02:58): [krb5_child[78964]] [k5c_precreate_ccache] (0x4000): [RID#228] Recreating ccache * (2025-10-01 9:02:58): [krb5_child[78964]] [k5c_setup_fast] (0x0100): [RID#228] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 9:02:58): [krb5_child[78964]] [find_principal_in_keytab] (0x4000): [RID#228] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 9:02:58): [krb5_child[78964]] [match_principal] (0x1000): [RID#228] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 9:02:58): [krb5_child[78964]] [check_fast_ccache] (0x0200): [RID#228] FAST TGT is still valid. * (2025-10-01 9:02:58): [krb5_child[78964]] [become_user] (0x0200): [RID#228] Trying to become user [1261600000][1261600000]. * (2025-10-01 9:02:58): [krb5_child[78964]] [main] (0x2000): [RID#228] Running as [1261600000][1261600000]. * (2025-10-01 9:02:58): [krb5_child[78964]] [set_lifetime_options] (0x0100): [RID#228] No specific renewable lifetime requested. * (2025-10-01 9:02:58): [krb5_child[78964]] [set_lifetime_options] (0x0100): [RID#228] No specific lifetime requested. * (2025-10-01 9:02:58): [krb5_child[78964]] [set_canonicalize_option] (0x0100): [RID#228] Canonicalization is set to [true] * (2025-10-01 9:02:58): [krb5_child[78964]] [main] (0x0400): [RID#228] Will perform auth * (2025-10-01 9:02:58): [krb5_child[78964]] [main] (0x0400): [RID#228] Will perform online auth * (2025-10-01 9:02:58): [krb5_child[78964]] [tgt_req_child] (0x1000): [RID#228] Attempting to get a TGT * (2025-10-01 9:02:58): [krb5_child[78964]] [get_and_save_tgt] (0x0400): [RID#228] Attempting kinit for realm [OOO.TEST] * (2025-10-01 9:02:58): [krb5_child[78964]] [sss_krb5_responder] (0x4000): [RID#228] Got question [password]. * (2025-10-01 9:02:58): [krb5_child[78964]] [get_and_save_tgt] (0x0020): [RID#228] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 9:02:58): [krb5_child[78964]] [map_krb5_error] (0x0020): [RID#228] 2138: [-1765328360][Preauthentication failed] (2025-10-01 9:03:01): [krb5_child[78966]] [get_and_save_tgt] (0x0020): [RID#231] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 9:03:01): [krb5_child[78966]] [main] (0x0400): [RID#231] krb5_child started. * (2025-10-01 9:03:01): [krb5_child[78966]] [unpack_buffer] (0x1000): [RID#231] total buffer size: [101] * (2025-10-01 9:03:01): [krb5_child[78966]] [unpack_buffer] (0x0100): [RID#231] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 9:03:01): [krb5_child[78966]] [unpack_buffer] (0x2000): [RID#231] No old ccache * (2025-10-01 9:03:01): [krb5_child[78966]] [unpack_buffer] (0x0100): [RID#231] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 9:03:01): [krb5_child[78966]] [k5c_precreate_ccache] (0x4000): [RID#231] Recreating ccache * (2025-10-01 9:03:01): [krb5_child[78966]] [k5c_setup_fast] (0x0100): [RID#231] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 9:03:01): [krb5_child[78966]] [find_principal_in_keytab] (0x4000): [RID#231] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 9:03:01): [krb5_child[78966]] [match_principal] (0x1000): [RID#231] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 9:03:01): [krb5_child[78966]] [check_fast_ccache] (0x0200): [RID#231] FAST TGT is still valid. * (2025-10-01 9:03:01): [krb5_child[78966]] [become_user] (0x0200): [RID#231] Trying to become user [1261600000][1261600000]. * (2025-10-01 9:03:01): [krb5_child[78966]] [main] (0x2000): [RID#231] Running as [1261600000][1261600000]. * (2025-10-01 9:03:01): [krb5_child[78966]] [set_lifetime_options] (0x0100): [RID#231] No specific renewable lifetime requested. * (2025-10-01 9:03:01): [krb5_child[78966]] [set_lifetime_options] (0x0100): [RID#231] No specific lifetime requested. * (2025-10-01 9:03:01): [krb5_child[78966]] [set_canonicalize_option] (0x0100): [RID#231] Canonicalization is set to [true] * (2025-10-01 9:03:01): [krb5_child[78966]] [main] (0x0400): [RID#231] Will perform auth * (2025-10-01 9:03:01): [krb5_child[78966]] [main] (0x0400): [RID#231] Will perform online auth * (2025-10-01 9:03:01): [krb5_child[78966]] [tgt_req_child] (0x1000): [RID#231] Attempting to get a TGT * (2025-10-01 9:03:01): [krb5_child[78966]] [get_and_save_tgt] (0x0400): [RID#231] Attempting kinit for realm [OOO.TEST] * (2025-10-01 9:03:01): [krb5_child[78966]] [sss_krb5_responder] (0x4000): [RID#231] Got question [password]. * (2025-10-01 9:03:01): [krb5_child[78966]] [get_and_save_tgt] (0x0020): [RID#231] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 9:03:01): [krb5_child[78966]] [map_krb5_error] (0x0020): [RID#231] 2138: [-1765328360][Preauthentication failed] (2025-10-01 9:03:20): [krb5_child[79071]] [get_and_save_tgt] (0x0020): [RID#235] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 9:03:20): [krb5_child[79071]] [main] (0x0400): [RID#235] krb5_child started. * (2025-10-01 9:03:20): [krb5_child[79071]] [unpack_buffer] (0x1000): [RID#235] total buffer size: [95] * (2025-10-01 9:03:20): [krb5_child[79071]] [unpack_buffer] (0x0100): [RID#235] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 9:03:20): [krb5_child[79071]] [unpack_buffer] (0x2000): [RID#235] No old ccache * (2025-10-01 9:03:20): [krb5_child[79071]] [unpack_buffer] (0x0100): [RID#235] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 9:03:20): [krb5_child[79071]] [k5c_precreate_ccache] (0x4000): [RID#235] Recreating ccache * (2025-10-01 9:03:20): [krb5_child[79071]] [k5c_setup_fast] (0x0100): [RID#235] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 9:03:20): [krb5_child[79071]] [find_principal_in_keytab] (0x4000): [RID#235] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 9:03:20): [krb5_child[79071]] [match_principal] (0x1000): [RID#235] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 9:03:20): [krb5_child[79071]] [check_fast_ccache] (0x0200): [RID#235] FAST TGT is still valid. * (2025-10-01 9:03:20): [krb5_child[79071]] [become_user] (0x0200): [RID#235] Trying to become user [1261600000][1261600000]. * (2025-10-01 9:03:20): [krb5_child[79071]] [main] (0x2000): [RID#235] Running as [1261600000][1261600000]. * (2025-10-01 9:03:20): [krb5_child[79071]] [set_lifetime_options] (0x0100): [RID#235] No specific renewable lifetime requested. * (2025-10-01 9:03:20): [krb5_child[79071]] [set_lifetime_options] (0x0100): [RID#235] No specific lifetime requested. * (2025-10-01 9:03:20): [krb5_child[79071]] [set_canonicalize_option] (0x0100): [RID#235] Canonicalization is set to [true] * (2025-10-01 9:03:20): [krb5_child[79071]] [main] (0x0400): [RID#235] Will perform auth * (2025-10-01 9:03:20): [krb5_child[79071]] [main] (0x0400): [RID#235] Will perform online auth * (2025-10-01 9:03:20): [krb5_child[79071]] [tgt_req_child] (0x1000): [RID#235] Attempting to get a TGT * (2025-10-01 9:03:20): [krb5_child[79071]] [get_and_save_tgt] (0x0400): [RID#235] Attempting kinit for realm [OOO.TEST] * (2025-10-01 9:03:20): [krb5_child[79071]] [sss_krb5_responder] (0x4000): [RID#235] Got question [password]. * (2025-10-01 9:03:20): [krb5_child[79071]] [get_and_save_tgt] (0x0020): [RID#235] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 9:03:20): [krb5_child[79071]] [map_krb5_error] (0x0020): [RID#235] 2138: [-1765328360][Preauthentication failed] (2025-10-01 9:12:42): [krb5_child[83344]] [get_and_save_tgt] (0x0020): [RID#273] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 9:12:42): [krb5_child[83344]] [main] (0x0400): [RID#273] krb5_child started. * (2025-10-01 9:12:42): [krb5_child[83344]] [unpack_buffer] (0x1000): [RID#273] total buffer size: [97] * (2025-10-01 9:12:42): [krb5_child[83344]] [unpack_buffer] (0x0100): [RID#273] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 9:12:42): [krb5_child[83344]] [unpack_buffer] (0x2000): [RID#273] No old ccache * (2025-10-01 9:12:42): [krb5_child[83344]] [unpack_buffer] (0x0100): [RID#273] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 9:12:42): [krb5_child[83344]] [k5c_precreate_ccache] (0x4000): [RID#273] Recreating ccache * (2025-10-01 9:12:42): [krb5_child[83344]] [k5c_setup_fast] (0x0100): [RID#273] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 9:12:42): [krb5_child[83344]] [find_principal_in_keytab] (0x4000): [RID#273] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 9:12:42): [krb5_child[83344]] [match_principal] (0x1000): [RID#273] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 9:12:42): [krb5_child[83344]] [check_fast_ccache] (0x0200): [RID#273] FAST TGT is still valid. * (2025-10-01 9:12:42): [krb5_child[83344]] [become_user] (0x0200): [RID#273] Trying to become user [1261600000][1261600000]. * (2025-10-01 9:12:42): [krb5_child[83344]] [main] (0x2000): [RID#273] Running as [1261600000][1261600000]. * (2025-10-01 9:12:42): [krb5_child[83344]] [set_lifetime_options] (0x0100): [RID#273] No specific renewable lifetime requested. * (2025-10-01 9:12:42): [krb5_child[83344]] [set_lifetime_options] (0x0100): [RID#273] No specific lifetime requested. * (2025-10-01 9:12:42): [krb5_child[83344]] [set_canonicalize_option] (0x0100): [RID#273] Canonicalization is set to [true] * (2025-10-01 9:12:42): [krb5_child[83344]] [main] (0x0400): [RID#273] Will perform auth * (2025-10-01 9:12:42): [krb5_child[83344]] [main] (0x0400): [RID#273] Will perform online auth * (2025-10-01 9:12:42): [krb5_child[83344]] [tgt_req_child] (0x1000): [RID#273] Attempting to get a TGT * (2025-10-01 9:12:42): [krb5_child[83344]] [get_and_save_tgt] (0x0400): [RID#273] Attempting kinit for realm [OOO.TEST] * (2025-10-01 9:12:42): [krb5_child[83344]] [sss_krb5_responder] (0x4000): [RID#273] Got question [password]. * (2025-10-01 9:12:42): [krb5_child[83344]] [get_and_save_tgt] (0x0020): [RID#273] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 9:12:42): [krb5_child[83344]] [map_krb5_error] (0x0020): [RID#273] 2138: [-1765328360][Preauthentication failed] (2025-10-01 9:46:26): [krb5_child[188614]] [get_and_save_tgt] (0x0020): [RID#364] 2009: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 9:46:26): [krb5_child[188614]] [main] (0x0400): [RID#364] krb5_child started. * (2025-10-01 9:46:26): [krb5_child[188614]] [unpack_buffer] (0x1000): [RID#364] total buffer size: [97] * (2025-10-01 9:46:26): [krb5_child[188614]] [unpack_buffer] (0x0100): [RID#364] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 9:46:26): [krb5_child[188614]] [unpack_buffer] (0x2000): [RID#364] No old ccache * (2025-10-01 9:46:26): [krb5_child[188614]] [unpack_buffer] (0x0100): [RID#364] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 9:46:26): [krb5_child[188614]] [k5c_precreate_ccache] (0x4000): [RID#364] Recreating ccache * (2025-10-01 9:46:26): [krb5_child[188614]] [k5c_setup_fast] (0x0100): [RID#364] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 9:46:26): [krb5_child[188614]] [find_principal_in_keytab] (0x4000): [RID#364] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 9:46:26): [krb5_child[188614]] [match_principal] (0x1000): [RID#364] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 9:46:26): [krb5_child[188614]] [check_fast_ccache] (0x0200): [RID#364] FAST TGT is still valid. * (2025-10-01 9:46:26): [krb5_child[188614]] [become_user] (0x0200): [RID#364] Trying to become user [1261600000][1261600000]. * (2025-10-01 9:46:26): [krb5_child[188614]] [main] (0x2000): [RID#364] Running as [1261600000][1261600000]. * (2025-10-01 9:46:26): [krb5_child[188614]] [set_lifetime_options] (0x0100): [RID#364] No specific renewable lifetime requested. * (2025-10-01 9:46:26): [krb5_child[188614]] [set_lifetime_options] (0x0100): [RID#364] No specific lifetime requested. * (2025-10-01 9:46:26): [krb5_child[188614]] [set_canonicalize_option] (0x0100): [RID#364] Canonicalization is set to [true] * (2025-10-01 9:46:26): [krb5_child[188614]] [main] (0x0400): [RID#364] Will perform auth * (2025-10-01 9:46:26): [krb5_child[188614]] [main] (0x0400): [RID#364] Will perform online auth * (2025-10-01 9:46:26): [krb5_child[188614]] [tgt_req_child] (0x1000): [RID#364] Attempting to get a TGT * (2025-10-01 9:46:26): [krb5_child[188614]] [get_and_save_tgt] (0x0400): [RID#364] Attempting kinit for realm [OOO.TEST] * (2025-10-01 9:46:26): [krb5_child[188614]] [get_and_save_tgt] (0x0020): [RID#364] 2009: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 9:46:26): [krb5_child[188614]] [map_krb5_error] (0x0020): [RID#364] 2138: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types] (2025-10-01 9:46:53): [krb5_child[191152]] [get_and_save_tgt] (0x0020): [RID#376] 2009: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 9:46:53): [krb5_child[191152]] [main] (0x0400): [RID#376] krb5_child started. * (2025-10-01 9:46:53): [krb5_child[191152]] [unpack_buffer] (0x1000): [RID#376] total buffer size: [98] * (2025-10-01 9:46:53): [krb5_child[191152]] [unpack_buffer] (0x0100): [RID#376] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 9:46:53): [krb5_child[191152]] [unpack_buffer] (0x2000): [RID#376] No old ccache * (2025-10-01 9:46:53): [krb5_child[191152]] [unpack_buffer] (0x0100): [RID#376] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 9:46:53): [krb5_child[191152]] [k5c_precreate_ccache] (0x4000): [RID#376] Recreating ccache * (2025-10-01 9:46:53): [krb5_child[191152]] [k5c_setup_fast] (0x0100): [RID#376] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 9:46:53): [krb5_child[191152]] [find_principal_in_keytab] (0x4000): [RID#376] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 9:46:53): [krb5_child[191152]] [match_principal] (0x1000): [RID#376] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 9:46:53): [krb5_child[191152]] [check_fast_ccache] (0x0200): [RID#376] FAST TGT is still valid. * (2025-10-01 9:46:53): [krb5_child[191152]] [become_user] (0x0200): [RID#376] Trying to become user [1261600000][1261600000]. * (2025-10-01 9:46:53): [krb5_child[191152]] [main] (0x2000): [RID#376] Running as [1261600000][1261600000]. * (2025-10-01 9:46:53): [krb5_child[191152]] [set_lifetime_options] (0x0100): [RID#376] No specific renewable lifetime requested. * (2025-10-01 9:46:53): [krb5_child[191152]] [set_lifetime_options] (0x0100): [RID#376] No specific lifetime requested. * (2025-10-01 9:46:53): [krb5_child[191152]] [set_canonicalize_option] (0x0100): [RID#376] Canonicalization is set to [true] * (2025-10-01 9:46:53): [krb5_child[191152]] [main] (0x0400): [RID#376] Will perform auth * (2025-10-01 9:46:53): [krb5_child[191152]] [main] (0x0400): [RID#376] Will perform online auth * (2025-10-01 9:46:53): [krb5_child[191152]] [tgt_req_child] (0x1000): [RID#376] Attempting to get a TGT * (2025-10-01 9:46:53): [krb5_child[191152]] [get_and_save_tgt] (0x0400): [RID#376] Attempting kinit for realm [OOO.TEST] * (2025-10-01 9:46:53): [krb5_child[191152]] [get_and_save_tgt] (0x0020): [RID#376] 2009: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 9:46:53): [krb5_child[191152]] [map_krb5_error] (0x0020): [RID#376] 2138: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types] (2025-10-01 10:18:43): [krb5_child[257799]] [get_and_save_tgt] (0x0020): [RID#409] 2009: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-01 10:18:43): [krb5_child[257799]] [main] (0x0400): [RID#409] krb5_child started. * (2025-10-01 10:18:43): [krb5_child[257799]] [unpack_buffer] (0x1000): [RID#409] total buffer size: [99] * (2025-10-01 10:18:43): [krb5_child[257799]] [unpack_buffer] (0x0100): [RID#409] cmd [241 (auth)] uid [1261600000] gid [1261600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-01 10:18:43): [krb5_child[257799]] [unpack_buffer] (0x2000): [RID#409] No old ccache * (2025-10-01 10:18:43): [krb5_child[257799]] [unpack_buffer] (0x0100): [RID#409] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-01 10:18:43): [krb5_child[257799]] [k5c_precreate_ccache] (0x4000): [RID#409] Recreating ccache * (2025-10-01 10:18:43): [krb5_child[257799]] [k5c_setup_fast] (0x0100): [RID#409] Fast principal is set to [host/np0005463871.ooo.test@OOO.TEST] * (2025-10-01 10:18:43): [krb5_child[257799]] [find_principal_in_keytab] (0x4000): [RID#409] Trying to find principal host/np0005463871.ooo.test@OOO.TEST in keytab. * (2025-10-01 10:18:43): [krb5_child[257799]] [match_principal] (0x1000): [RID#409] Principal matched to the sample (host/np0005463871.ooo.test@OOO.TEST). * (2025-10-01 10:18:43): [krb5_child[257799]] [check_fast_ccache] (0x0200): [RID#409] FAST TGT is still valid. * (2025-10-01 10:18:43): [krb5_child[257799]] [become_user] (0x0200): [RID#409] Trying to become user [1261600000][1261600000]. * (2025-10-01 10:18:43): [krb5_child[257799]] [main] (0x2000): [RID#409] Running as [1261600000][1261600000]. * (2025-10-01 10:18:43): [krb5_child[257799]] [set_lifetime_options] (0x0100): [RID#409] No specific renewable lifetime requested. * (2025-10-01 10:18:43): [krb5_child[257799]] [set_lifetime_options] (0x0100): [RID#409] No specific lifetime requested. * (2025-10-01 10:18:43): [krb5_child[257799]] [set_canonicalize_option] (0x0100): [RID#409] Canonicalization is set to [true] * (2025-10-01 10:18:43): [krb5_child[257799]] [main] (0x0400): [RID#409] Will perform auth * (2025-10-01 10:18:43): [krb5_child[257799]] [main] (0x0400): [RID#409] Will perform online auth * (2025-10-01 10:18:43): [krb5_child[257799]] [tgt_req_child] (0x1000): [RID#409] Attempting to get a TGT * (2025-10-01 10:18:43): [krb5_child[257799]] [get_and_save_tgt] (0x0400): [RID#409] Attempting kinit for realm [OOO.TEST] * (2025-10-01 10:18:43): [krb5_child[257799]] [get_and_save_tgt] (0x0020): [RID#409] 2009: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-01 10:18:43): [krb5_child[257799]] [map_krb5_error] (0x0020): [RID#409] 2138: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types]