(2025-12-03 8:09:31): [krb5_child[39917]] [get_and_save_tgt] (0x0020): [RID#63] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:09:31): [krb5_child[39917]] [main] (0x0400): [RID#63] krb5_child started. * (2025-12-03 8:09:31): [krb5_child[39917]] [unpack_buffer] (0x1000): [RID#63] total buffer size: [101] * (2025-12-03 8:09:31): [krb5_child[39917]] [unpack_buffer] (0x0100): [RID#63] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:09:31): [krb5_child[39917]] [unpack_buffer] (0x2000): [RID#63] No old ccache * (2025-12-03 8:09:31): [krb5_child[39917]] [unpack_buffer] (0x0100): [RID#63] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:09:31): [krb5_child[39917]] [k5c_precreate_ccache] (0x4000): [RID#63] Recreating ccache * (2025-12-03 8:09:31): [krb5_child[39917]] [k5c_setup_fast] (0x0100): [RID#63] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:09:31): [krb5_child[39917]] [find_principal_in_keytab] (0x4000): [RID#63] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:09:31): [krb5_child[39917]] [match_principal] (0x1000): [RID#63] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:09:31): [krb5_child[39917]] [check_fast_ccache] (0x0200): [RID#63] FAST TGT is still valid. * (2025-12-03 8:09:31): [krb5_child[39917]] [become_user] (0x0200): [RID#63] Trying to become user [940000000][940000000]. * (2025-12-03 8:09:31): [krb5_child[39917]] [main] (0x2000): [RID#63] Running as [940000000][940000000]. * (2025-12-03 8:09:31): [krb5_child[39917]] [set_lifetime_options] (0x0100): [RID#63] No specific renewable lifetime requested. * (2025-12-03 8:09:31): [krb5_child[39917]] [set_lifetime_options] (0x0100): [RID#63] No specific lifetime requested. * (2025-12-03 8:09:31): [krb5_child[39917]] [set_canonicalize_option] (0x0100): [RID#63] Canonicalization is set to [true] * (2025-12-03 8:09:31): [krb5_child[39917]] [main] (0x0400): [RID#63] Will perform auth * (2025-12-03 8:09:31): [krb5_child[39917]] [main] (0x0400): [RID#63] Will perform online auth * (2025-12-03 8:09:31): [krb5_child[39917]] [tgt_req_child] (0x1000): [RID#63] Attempting to get a TGT * (2025-12-03 8:09:31): [krb5_child[39917]] [get_and_save_tgt] (0x0400): [RID#63] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:09:31): [krb5_child[39917]] [get_and_save_tgt] (0x0020): [RID#63] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:09:31): [krb5_child[39917]] [map_krb5_error] (0x0020): [RID#63] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:09:35): [krb5_child[39921]] [get_and_save_tgt] (0x0020): [RID#65] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:09:35): [krb5_child[39921]] [main] (0x0400): [RID#65] krb5_child started. * (2025-12-03 8:09:35): [krb5_child[39921]] [unpack_buffer] (0x1000): [RID#65] total buffer size: [101] * (2025-12-03 8:09:35): [krb5_child[39921]] [unpack_buffer] (0x0100): [RID#65] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:09:35): [krb5_child[39921]] [unpack_buffer] (0x2000): [RID#65] No old ccache * (2025-12-03 8:09:35): [krb5_child[39921]] [unpack_buffer] (0x0100): [RID#65] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:09:35): [krb5_child[39921]] [k5c_precreate_ccache] (0x4000): [RID#65] Recreating ccache * (2025-12-03 8:09:35): [krb5_child[39921]] [k5c_setup_fast] (0x0100): [RID#65] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:09:35): [krb5_child[39921]] [find_principal_in_keytab] (0x4000): [RID#65] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:09:35): [krb5_child[39921]] [match_principal] (0x1000): [RID#65] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:09:35): [krb5_child[39921]] [check_fast_ccache] (0x0200): [RID#65] FAST TGT is still valid. * (2025-12-03 8:09:35): [krb5_child[39921]] [become_user] (0x0200): [RID#65] Trying to become user [940000000][940000000]. * (2025-12-03 8:09:35): [krb5_child[39921]] [main] (0x2000): [RID#65] Running as [940000000][940000000]. * (2025-12-03 8:09:35): [krb5_child[39921]] [set_lifetime_options] (0x0100): [RID#65] No specific renewable lifetime requested. * (2025-12-03 8:09:35): [krb5_child[39921]] [set_lifetime_options] (0x0100): [RID#65] No specific lifetime requested. * (2025-12-03 8:09:35): [krb5_child[39921]] [set_canonicalize_option] (0x0100): [RID#65] Canonicalization is set to [true] * (2025-12-03 8:09:35): [krb5_child[39921]] [main] (0x0400): [RID#65] Will perform auth * (2025-12-03 8:09:35): [krb5_child[39921]] [main] (0x0400): [RID#65] Will perform online auth * (2025-12-03 8:09:35): [krb5_child[39921]] [tgt_req_child] (0x1000): [RID#65] Attempting to get a TGT * (2025-12-03 8:09:35): [krb5_child[39921]] [get_and_save_tgt] (0x0400): [RID#65] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:09:35): [krb5_child[39921]] [get_and_save_tgt] (0x0020): [RID#65] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:09:35): [krb5_child[39921]] [map_krb5_error] (0x0020): [RID#65] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:11:01): [krb5_child[39956]] [get_and_save_tgt] (0x0020): [RID#77] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:11:01): [krb5_child[39956]] [main] (0x0400): [RID#77] krb5_child started. * (2025-12-03 8:11:01): [krb5_child[39956]] [unpack_buffer] (0x1000): [RID#77] total buffer size: [100] * (2025-12-03 8:11:01): [krb5_child[39956]] [unpack_buffer] (0x0100): [RID#77] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:11:01): [krb5_child[39956]] [unpack_buffer] (0x2000): [RID#77] No old ccache * (2025-12-03 8:11:01): [krb5_child[39956]] [unpack_buffer] (0x0100): [RID#77] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:11:01): [krb5_child[39956]] [k5c_precreate_ccache] (0x4000): [RID#77] Recreating ccache * (2025-12-03 8:11:01): [krb5_child[39956]] [k5c_setup_fast] (0x0100): [RID#77] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:11:01): [krb5_child[39956]] [find_principal_in_keytab] (0x4000): [RID#77] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:11:01): [krb5_child[39956]] [match_principal] (0x1000): [RID#77] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:11:01): [krb5_child[39956]] [check_fast_ccache] (0x0200): [RID#77] FAST TGT is still valid. * (2025-12-03 8:11:01): [krb5_child[39956]] [become_user] (0x0200): [RID#77] Trying to become user [940000000][940000000]. * (2025-12-03 8:11:01): [krb5_child[39956]] [main] (0x2000): [RID#77] Running as [940000000][940000000]. * (2025-12-03 8:11:01): [krb5_child[39956]] [set_lifetime_options] (0x0100): [RID#77] No specific renewable lifetime requested. * (2025-12-03 8:11:01): [krb5_child[39956]] [set_lifetime_options] (0x0100): [RID#77] No specific lifetime requested. * (2025-12-03 8:11:01): [krb5_child[39956]] [set_canonicalize_option] (0x0100): [RID#77] Canonicalization is set to [true] * (2025-12-03 8:11:01): [krb5_child[39956]] [main] (0x0400): [RID#77] Will perform auth * (2025-12-03 8:11:01): [krb5_child[39956]] [main] (0x0400): [RID#77] Will perform online auth * (2025-12-03 8:11:01): [krb5_child[39956]] [tgt_req_child] (0x1000): [RID#77] Attempting to get a TGT * (2025-12-03 8:11:01): [krb5_child[39956]] [get_and_save_tgt] (0x0400): [RID#77] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:11:01): [krb5_child[39956]] [get_and_save_tgt] (0x0020): [RID#77] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:11:01): [krb5_child[39956]] [map_krb5_error] (0x0020): [RID#77] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:11:03): [krb5_child[39960]] [get_and_save_tgt] (0x0020): [RID#79] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:11:03): [krb5_child[39960]] [main] (0x0400): [RID#79] krb5_child started. * (2025-12-03 8:11:03): [krb5_child[39960]] [unpack_buffer] (0x1000): [RID#79] total buffer size: [101] * (2025-12-03 8:11:03): [krb5_child[39960]] [unpack_buffer] (0x0100): [RID#79] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:11:03): [krb5_child[39960]] [unpack_buffer] (0x2000): [RID#79] No old ccache * (2025-12-03 8:11:03): [krb5_child[39960]] [unpack_buffer] (0x0100): [RID#79] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:11:03): [krb5_child[39960]] [k5c_precreate_ccache] (0x4000): [RID#79] Recreating ccache * (2025-12-03 8:11:03): [krb5_child[39960]] [k5c_setup_fast] (0x0100): [RID#79] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:11:03): [krb5_child[39960]] [find_principal_in_keytab] (0x4000): [RID#79] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:11:03): [krb5_child[39960]] [match_principal] (0x1000): [RID#79] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:11:03): [krb5_child[39960]] [check_fast_ccache] (0x0200): [RID#79] FAST TGT is still valid. * (2025-12-03 8:11:03): [krb5_child[39960]] [become_user] (0x0200): [RID#79] Trying to become user [940000000][940000000]. * (2025-12-03 8:11:03): [krb5_child[39960]] [main] (0x2000): [RID#79] Running as [940000000][940000000]. * (2025-12-03 8:11:03): [krb5_child[39960]] [set_lifetime_options] (0x0100): [RID#79] No specific renewable lifetime requested. * (2025-12-03 8:11:03): [krb5_child[39960]] [set_lifetime_options] (0x0100): [RID#79] No specific lifetime requested. * (2025-12-03 8:11:03): [krb5_child[39960]] [set_canonicalize_option] (0x0100): [RID#79] Canonicalization is set to [true] * (2025-12-03 8:11:03): [krb5_child[39960]] [main] (0x0400): [RID#79] Will perform auth * (2025-12-03 8:11:03): [krb5_child[39960]] [main] (0x0400): [RID#79] Will perform online auth * (2025-12-03 8:11:03): [krb5_child[39960]] [tgt_req_child] (0x1000): [RID#79] Attempting to get a TGT * (2025-12-03 8:11:03): [krb5_child[39960]] [get_and_save_tgt] (0x0400): [RID#79] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:11:03): [krb5_child[39960]] [get_and_save_tgt] (0x0020): [RID#79] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:11:03): [krb5_child[39960]] [map_krb5_error] (0x0020): [RID#79] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:11:05): [krb5_child[39963]] [get_and_save_tgt] (0x0020): [RID#81] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:11:05): [krb5_child[39963]] [main] (0x0400): [RID#81] krb5_child started. * (2025-12-03 8:11:05): [krb5_child[39963]] [unpack_buffer] (0x1000): [RID#81] total buffer size: [101] * (2025-12-03 8:11:05): [krb5_child[39963]] [unpack_buffer] (0x0100): [RID#81] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:11:05): [krb5_child[39963]] [unpack_buffer] (0x2000): [RID#81] No old ccache * (2025-12-03 8:11:05): [krb5_child[39963]] [unpack_buffer] (0x0100): [RID#81] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:11:05): [krb5_child[39963]] [k5c_precreate_ccache] (0x4000): [RID#81] Recreating ccache * (2025-12-03 8:11:05): [krb5_child[39963]] [k5c_setup_fast] (0x0100): [RID#81] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:11:05): [krb5_child[39963]] [find_principal_in_keytab] (0x4000): [RID#81] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:11:05): [krb5_child[39963]] [match_principal] (0x1000): [RID#81] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:11:05): [krb5_child[39963]] [check_fast_ccache] (0x0200): [RID#81] FAST TGT is still valid. * (2025-12-03 8:11:05): [krb5_child[39963]] [become_user] (0x0200): [RID#81] Trying to become user [940000000][940000000]. * (2025-12-03 8:11:05): [krb5_child[39963]] [main] (0x2000): [RID#81] Running as [940000000][940000000]. * (2025-12-03 8:11:05): [krb5_child[39963]] [set_lifetime_options] (0x0100): [RID#81] No specific renewable lifetime requested. * (2025-12-03 8:11:05): [krb5_child[39963]] [set_lifetime_options] (0x0100): [RID#81] No specific lifetime requested. * (2025-12-03 8:11:05): [krb5_child[39963]] [set_canonicalize_option] (0x0100): [RID#81] Canonicalization is set to [true] * (2025-12-03 8:11:05): [krb5_child[39963]] [main] (0x0400): [RID#81] Will perform auth * (2025-12-03 8:11:05): [krb5_child[39963]] [main] (0x0400): [RID#81] Will perform online auth * (2025-12-03 8:11:05): [krb5_child[39963]] [tgt_req_child] (0x1000): [RID#81] Attempting to get a TGT * (2025-12-03 8:11:05): [krb5_child[39963]] [get_and_save_tgt] (0x0400): [RID#81] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:11:05): [krb5_child[39963]] [get_and_save_tgt] (0x0020): [RID#81] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:11:05): [krb5_child[39963]] [map_krb5_error] (0x0020): [RID#81] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:11:09): [krb5_child[39967]] [get_and_save_tgt] (0x0020): [RID#84] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:11:09): [krb5_child[39967]] [main] (0x0400): [RID#84] krb5_child started. * (2025-12-03 8:11:09): [krb5_child[39967]] [unpack_buffer] (0x1000): [RID#84] total buffer size: [99] * (2025-12-03 8:11:09): [krb5_child[39967]] [unpack_buffer] (0x0100): [RID#84] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:11:09): [krb5_child[39967]] [unpack_buffer] (0x2000): [RID#84] No old ccache * (2025-12-03 8:11:09): [krb5_child[39967]] [unpack_buffer] (0x0100): [RID#84] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:11:09): [krb5_child[39967]] [k5c_precreate_ccache] (0x4000): [RID#84] Recreating ccache * (2025-12-03 8:11:09): [krb5_child[39967]] [k5c_setup_fast] (0x0100): [RID#84] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:11:09): [krb5_child[39967]] [find_principal_in_keytab] (0x4000): [RID#84] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:11:09): [krb5_child[39967]] [match_principal] (0x1000): [RID#84] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:11:09): [krb5_child[39967]] [check_fast_ccache] (0x0200): [RID#84] FAST TGT is still valid. * (2025-12-03 8:11:09): [krb5_child[39967]] [become_user] (0x0200): [RID#84] Trying to become user [940000000][940000000]. * (2025-12-03 8:11:09): [krb5_child[39967]] [main] (0x2000): [RID#84] Running as [940000000][940000000]. * (2025-12-03 8:11:09): [krb5_child[39967]] [set_lifetime_options] (0x0100): [RID#84] No specific renewable lifetime requested. * (2025-12-03 8:11:09): [krb5_child[39967]] [set_lifetime_options] (0x0100): [RID#84] No specific lifetime requested. * (2025-12-03 8:11:09): [krb5_child[39967]] [set_canonicalize_option] (0x0100): [RID#84] Canonicalization is set to [true] * (2025-12-03 8:11:09): [krb5_child[39967]] [main] (0x0400): [RID#84] Will perform auth * (2025-12-03 8:11:09): [krb5_child[39967]] [main] (0x0400): [RID#84] Will perform online auth * (2025-12-03 8:11:09): [krb5_child[39967]] [tgt_req_child] (0x1000): [RID#84] Attempting to get a TGT * (2025-12-03 8:11:09): [krb5_child[39967]] [get_and_save_tgt] (0x0400): [RID#84] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:11:09): [krb5_child[39967]] [get_and_save_tgt] (0x0020): [RID#84] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:11:09): [krb5_child[39967]] [map_krb5_error] (0x0020): [RID#84] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:11:14): [krb5_child[39972]] [get_and_save_tgt] (0x0020): [RID#87] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:11:14): [krb5_child[39972]] [main] (0x0400): [RID#87] krb5_child started. * (2025-12-03 8:11:14): [krb5_child[39972]] [unpack_buffer] (0x1000): [RID#87] total buffer size: [99] * (2025-12-03 8:11:14): [krb5_child[39972]] [unpack_buffer] (0x0100): [RID#87] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:11:14): [krb5_child[39972]] [unpack_buffer] (0x2000): [RID#87] No old ccache * (2025-12-03 8:11:14): [krb5_child[39972]] [unpack_buffer] (0x0100): [RID#87] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:11:14): [krb5_child[39972]] [k5c_precreate_ccache] (0x4000): [RID#87] Recreating ccache * (2025-12-03 8:11:14): [krb5_child[39972]] [k5c_setup_fast] (0x0100): [RID#87] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:11:14): [krb5_child[39972]] [find_principal_in_keytab] (0x4000): [RID#87] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:11:14): [krb5_child[39972]] [match_principal] (0x1000): [RID#87] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:11:14): [krb5_child[39972]] [check_fast_ccache] (0x0200): [RID#87] FAST TGT is still valid. * (2025-12-03 8:11:14): [krb5_child[39972]] [become_user] (0x0200): [RID#87] Trying to become user [940000000][940000000]. * (2025-12-03 8:11:14): [krb5_child[39972]] [main] (0x2000): [RID#87] Running as [940000000][940000000]. * (2025-12-03 8:11:14): [krb5_child[39972]] [set_lifetime_options] (0x0100): [RID#87] No specific renewable lifetime requested. * (2025-12-03 8:11:14): [krb5_child[39972]] [set_lifetime_options] (0x0100): [RID#87] No specific lifetime requested. * (2025-12-03 8:11:14): [krb5_child[39972]] [set_canonicalize_option] (0x0100): [RID#87] Canonicalization is set to [true] * (2025-12-03 8:11:14): [krb5_child[39972]] [main] (0x0400): [RID#87] Will perform auth * (2025-12-03 8:11:14): [krb5_child[39972]] [main] (0x0400): [RID#87] Will perform online auth * (2025-12-03 8:11:14): [krb5_child[39972]] [tgt_req_child] (0x1000): [RID#87] Attempting to get a TGT * (2025-12-03 8:11:14): [krb5_child[39972]] [get_and_save_tgt] (0x0400): [RID#87] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:11:14): [krb5_child[39972]] [get_and_save_tgt] (0x0020): [RID#87] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:11:14): [krb5_child[39972]] [map_krb5_error] (0x0020): [RID#87] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:15:36): [krb5_child[40063]] [get_and_save_tgt] (0x0020): [RID#120] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:15:36): [krb5_child[40063]] [main] (0x0400): [RID#120] krb5_child started. * (2025-12-03 8:15:36): [krb5_child[40063]] [unpack_buffer] (0x1000): [RID#120] total buffer size: [101] * (2025-12-03 8:15:36): [krb5_child[40063]] [unpack_buffer] (0x0100): [RID#120] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:15:36): [krb5_child[40063]] [unpack_buffer] (0x2000): [RID#120] No old ccache * (2025-12-03 8:15:36): [krb5_child[40063]] [unpack_buffer] (0x0100): [RID#120] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:15:36): [krb5_child[40063]] [k5c_precreate_ccache] (0x4000): [RID#120] Recreating ccache * (2025-12-03 8:15:36): [krb5_child[40063]] [k5c_setup_fast] (0x0100): [RID#120] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:15:36): [krb5_child[40063]] [find_principal_in_keytab] (0x4000): [RID#120] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:15:36): [krb5_child[40063]] [match_principal] (0x1000): [RID#120] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:15:36): [krb5_child[40063]] [check_fast_ccache] (0x0200): [RID#120] FAST TGT is still valid. * (2025-12-03 8:15:36): [krb5_child[40063]] [become_user] (0x0200): [RID#120] Trying to become user [940000000][940000000]. * (2025-12-03 8:15:36): [krb5_child[40063]] [main] (0x2000): [RID#120] Running as [940000000][940000000]. * (2025-12-03 8:15:36): [krb5_child[40063]] [set_lifetime_options] (0x0100): [RID#120] No specific renewable lifetime requested. * (2025-12-03 8:15:36): [krb5_child[40063]] [set_lifetime_options] (0x0100): [RID#120] No specific lifetime requested. * (2025-12-03 8:15:36): [krb5_child[40063]] [set_canonicalize_option] (0x0100): [RID#120] Canonicalization is set to [true] * (2025-12-03 8:15:36): [krb5_child[40063]] [main] (0x0400): [RID#120] Will perform auth * (2025-12-03 8:15:36): [krb5_child[40063]] [main] (0x0400): [RID#120] Will perform online auth * (2025-12-03 8:15:36): [krb5_child[40063]] [tgt_req_child] (0x1000): [RID#120] Attempting to get a TGT * (2025-12-03 8:15:36): [krb5_child[40063]] [get_and_save_tgt] (0x0400): [RID#120] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:15:36): [krb5_child[40063]] [get_and_save_tgt] (0x0020): [RID#120] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:15:36): [krb5_child[40063]] [map_krb5_error] (0x0020): [RID#120] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:15:41): [krb5_child[40068]] [get_and_save_tgt] (0x0020): [RID#122] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:15:41): [krb5_child[40068]] [main] (0x0400): [RID#122] krb5_child started. * (2025-12-03 8:15:41): [krb5_child[40068]] [unpack_buffer] (0x1000): [RID#122] total buffer size: [101] * (2025-12-03 8:15:41): [krb5_child[40068]] [unpack_buffer] (0x0100): [RID#122] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:15:41): [krb5_child[40068]] [unpack_buffer] (0x2000): [RID#122] No old ccache * (2025-12-03 8:15:41): [krb5_child[40068]] [unpack_buffer] (0x0100): [RID#122] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:15:41): [krb5_child[40068]] [k5c_precreate_ccache] (0x4000): [RID#122] Recreating ccache * (2025-12-03 8:15:41): [krb5_child[40068]] [k5c_setup_fast] (0x0100): [RID#122] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:15:41): [krb5_child[40068]] [find_principal_in_keytab] (0x4000): [RID#122] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:15:41): [krb5_child[40068]] [match_principal] (0x1000): [RID#122] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:15:41): [krb5_child[40068]] [check_fast_ccache] (0x0200): [RID#122] FAST TGT is still valid. * (2025-12-03 8:15:41): [krb5_child[40068]] [become_user] (0x0200): [RID#122] Trying to become user [940000000][940000000]. * (2025-12-03 8:15:41): [krb5_child[40068]] [main] (0x2000): [RID#122] Running as [940000000][940000000]. * (2025-12-03 8:15:41): [krb5_child[40068]] [set_lifetime_options] (0x0100): [RID#122] No specific renewable lifetime requested. * (2025-12-03 8:15:41): [krb5_child[40068]] [set_lifetime_options] (0x0100): [RID#122] No specific lifetime requested. * (2025-12-03 8:15:41): [krb5_child[40068]] [set_canonicalize_option] (0x0100): [RID#122] Canonicalization is set to [true] * (2025-12-03 8:15:41): [krb5_child[40068]] [main] (0x0400): [RID#122] Will perform auth * (2025-12-03 8:15:41): [krb5_child[40068]] [main] (0x0400): [RID#122] Will perform online auth * (2025-12-03 8:15:41): [krb5_child[40068]] [tgt_req_child] (0x1000): [RID#122] Attempting to get a TGT * (2025-12-03 8:15:41): [krb5_child[40068]] [get_and_save_tgt] (0x0400): [RID#122] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:15:41): [krb5_child[40068]] [get_and_save_tgt] (0x0020): [RID#122] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:15:41): [krb5_child[40068]] [map_krb5_error] (0x0020): [RID#122] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:25:15): [krb5_child[40215]] [get_and_save_tgt] (0x0020): [RID#174] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:25:15): [krb5_child[40215]] [main] (0x0400): [RID#174] krb5_child started. * (2025-12-03 8:25:15): [krb5_child[40215]] [unpack_buffer] (0x1000): [RID#174] total buffer size: [96] * (2025-12-03 8:25:15): [krb5_child[40215]] [unpack_buffer] (0x0100): [RID#174] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:25:15): [krb5_child[40215]] [unpack_buffer] (0x2000): [RID#174] No old ccache * (2025-12-03 8:25:15): [krb5_child[40215]] [unpack_buffer] (0x0100): [RID#174] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:25:15): [krb5_child[40215]] [k5c_precreate_ccache] (0x4000): [RID#174] Recreating ccache * (2025-12-03 8:25:15): [krb5_child[40215]] [k5c_setup_fast] (0x0100): [RID#174] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:25:15): [krb5_child[40215]] [find_principal_in_keytab] (0x4000): [RID#174] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:25:15): [krb5_child[40215]] [match_principal] (0x1000): [RID#174] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:25:15): [krb5_child[40215]] [check_fast_ccache] (0x0200): [RID#174] FAST TGT is still valid. * (2025-12-03 8:25:15): [krb5_child[40215]] [become_user] (0x0200): [RID#174] Trying to become user [940000000][940000000]. * (2025-12-03 8:25:15): [krb5_child[40215]] [main] (0x2000): [RID#174] Running as [940000000][940000000]. * (2025-12-03 8:25:15): [krb5_child[40215]] [set_lifetime_options] (0x0100): [RID#174] No specific renewable lifetime requested. * (2025-12-03 8:25:15): [krb5_child[40215]] [set_lifetime_options] (0x0100): [RID#174] No specific lifetime requested. * (2025-12-03 8:25:15): [krb5_child[40215]] [set_canonicalize_option] (0x0100): [RID#174] Canonicalization is set to [true] * (2025-12-03 8:25:15): [krb5_child[40215]] [main] (0x0400): [RID#174] Will perform auth * (2025-12-03 8:25:15): [krb5_child[40215]] [main] (0x0400): [RID#174] Will perform online auth * (2025-12-03 8:25:15): [krb5_child[40215]] [tgt_req_child] (0x1000): [RID#174] Attempting to get a TGT * (2025-12-03 8:25:15): [krb5_child[40215]] [get_and_save_tgt] (0x0400): [RID#174] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:25:15): [krb5_child[40215]] [sss_krb5_responder] (0x4000): [RID#174] Got question [password]. * (2025-12-03 8:25:15): [krb5_child[40215]] [get_and_save_tgt] (0x0020): [RID#174] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:25:15): [krb5_child[40215]] [map_krb5_error] (0x0020): [RID#174] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:29:25): [krb5_child[40249]] [get_and_save_tgt] (0x0020): [RID#187] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:29:25): [krb5_child[40249]] [main] (0x0400): [RID#187] krb5_child started. * (2025-12-03 8:29:25): [krb5_child[40249]] [unpack_buffer] (0x1000): [RID#187] total buffer size: [100] * (2025-12-03 8:29:25): [krb5_child[40249]] [unpack_buffer] (0x0100): [RID#187] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:29:25): [krb5_child[40249]] [unpack_buffer] (0x2000): [RID#187] No old ccache * (2025-12-03 8:29:25): [krb5_child[40249]] [unpack_buffer] (0x0100): [RID#187] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:29:25): [krb5_child[40249]] [k5c_precreate_ccache] (0x4000): [RID#187] Recreating ccache * (2025-12-03 8:29:25): [krb5_child[40249]] [k5c_setup_fast] (0x0100): [RID#187] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:29:25): [krb5_child[40249]] [find_principal_in_keytab] (0x4000): [RID#187] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:29:25): [krb5_child[40249]] [match_principal] (0x1000): [RID#187] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:29:25): [krb5_child[40249]] [check_fast_ccache] (0x0200): [RID#187] FAST TGT is still valid. * (2025-12-03 8:29:25): [krb5_child[40249]] [become_user] (0x0200): [RID#187] Trying to become user [940000000][940000000]. * (2025-12-03 8:29:25): [krb5_child[40249]] [main] (0x2000): [RID#187] Running as [940000000][940000000]. * (2025-12-03 8:29:25): [krb5_child[40249]] [set_lifetime_options] (0x0100): [RID#187] No specific renewable lifetime requested. * (2025-12-03 8:29:25): [krb5_child[40249]] [set_lifetime_options] (0x0100): [RID#187] No specific lifetime requested. * (2025-12-03 8:29:25): [krb5_child[40249]] [set_canonicalize_option] (0x0100): [RID#187] Canonicalization is set to [true] * (2025-12-03 8:29:25): [krb5_child[40249]] [main] (0x0400): [RID#187] Will perform auth * (2025-12-03 8:29:25): [krb5_child[40249]] [main] (0x0400): [RID#187] Will perform online auth * (2025-12-03 8:29:25): [krb5_child[40249]] [tgt_req_child] (0x1000): [RID#187] Attempting to get a TGT * (2025-12-03 8:29:25): [krb5_child[40249]] [get_and_save_tgt] (0x0400): [RID#187] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:29:25): [krb5_child[40249]] [sss_krb5_responder] (0x4000): [RID#187] Got question [password]. * (2025-12-03 8:29:25): [krb5_child[40249]] [get_and_save_tgt] (0x0020): [RID#187] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:29:25): [krb5_child[40249]] [map_krb5_error] (0x0020): [RID#187] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:41:26): [krb5_child[40328]] [get_and_save_tgt] (0x0020): [RID#210] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:41:26): [krb5_child[40328]] [main] (0x0400): [RID#210] krb5_child started. * (2025-12-03 8:41:26): [krb5_child[40328]] [unpack_buffer] (0x1000): [RID#210] total buffer size: [101] * (2025-12-03 8:41:26): [krb5_child[40328]] [unpack_buffer] (0x0100): [RID#210] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:41:26): [krb5_child[40328]] [unpack_buffer] (0x2000): [RID#210] No old ccache * (2025-12-03 8:41:26): [krb5_child[40328]] [unpack_buffer] (0x0100): [RID#210] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:41:26): [krb5_child[40328]] [k5c_precreate_ccache] (0x4000): [RID#210] Recreating ccache * (2025-12-03 8:41:26): [krb5_child[40328]] [k5c_setup_fast] (0x0100): [RID#210] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:41:26): [krb5_child[40328]] [find_principal_in_keytab] (0x4000): [RID#210] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:41:26): [krb5_child[40328]] [match_principal] (0x1000): [RID#210] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:41:26): [krb5_child[40328]] [check_fast_ccache] (0x0200): [RID#210] FAST TGT is still valid. * (2025-12-03 8:41:26): [krb5_child[40328]] [become_user] (0x0200): [RID#210] Trying to become user [940000000][940000000]. * (2025-12-03 8:41:26): [krb5_child[40328]] [main] (0x2000): [RID#210] Running as [940000000][940000000]. * (2025-12-03 8:41:26): [krb5_child[40328]] [set_lifetime_options] (0x0100): [RID#210] No specific renewable lifetime requested. * (2025-12-03 8:41:26): [krb5_child[40328]] [set_lifetime_options] (0x0100): [RID#210] No specific lifetime requested. * (2025-12-03 8:41:26): [krb5_child[40328]] [set_canonicalize_option] (0x0100): [RID#210] Canonicalization is set to [true] * (2025-12-03 8:41:26): [krb5_child[40328]] [main] (0x0400): [RID#210] Will perform auth * (2025-12-03 8:41:26): [krb5_child[40328]] [main] (0x0400): [RID#210] Will perform online auth * (2025-12-03 8:41:26): [krb5_child[40328]] [tgt_req_child] (0x1000): [RID#210] Attempting to get a TGT * (2025-12-03 8:41:26): [krb5_child[40328]] [get_and_save_tgt] (0x0400): [RID#210] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:41:26): [krb5_child[40328]] [sss_krb5_responder] (0x4000): [RID#210] Got question [password]. * (2025-12-03 8:41:26): [krb5_child[40328]] [get_and_save_tgt] (0x0020): [RID#210] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:41:26): [krb5_child[40328]] [map_krb5_error] (0x0020): [RID#210] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:41:31): [krb5_child[40333]] [get_and_save_tgt] (0x0020): [RID#213] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:41:31): [krb5_child[40333]] [main] (0x0400): [RID#213] krb5_child started. * (2025-12-03 8:41:31): [krb5_child[40333]] [unpack_buffer] (0x1000): [RID#213] total buffer size: [101] * (2025-12-03 8:41:31): [krb5_child[40333]] [unpack_buffer] (0x0100): [RID#213] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:41:31): [krb5_child[40333]] [unpack_buffer] (0x2000): [RID#213] No old ccache * (2025-12-03 8:41:31): [krb5_child[40333]] [unpack_buffer] (0x0100): [RID#213] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:41:31): [krb5_child[40333]] [k5c_precreate_ccache] (0x4000): [RID#213] Recreating ccache * (2025-12-03 8:41:31): [krb5_child[40333]] [k5c_setup_fast] (0x0100): [RID#213] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:41:31): [krb5_child[40333]] [find_principal_in_keytab] (0x4000): [RID#213] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:41:31): [krb5_child[40333]] [match_principal] (0x1000): [RID#213] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:41:31): [krb5_child[40333]] [check_fast_ccache] (0x0200): [RID#213] FAST TGT is still valid. * (2025-12-03 8:41:31): [krb5_child[40333]] [become_user] (0x0200): [RID#213] Trying to become user [940000000][940000000]. * (2025-12-03 8:41:31): [krb5_child[40333]] [main] (0x2000): [RID#213] Running as [940000000][940000000]. * (2025-12-03 8:41:31): [krb5_child[40333]] [set_lifetime_options] (0x0100): [RID#213] No specific renewable lifetime requested. * (2025-12-03 8:41:31): [krb5_child[40333]] [set_lifetime_options] (0x0100): [RID#213] No specific lifetime requested. * (2025-12-03 8:41:31): [krb5_child[40333]] [set_canonicalize_option] (0x0100): [RID#213] Canonicalization is set to [true] * (2025-12-03 8:41:31): [krb5_child[40333]] [main] (0x0400): [RID#213] Will perform auth * (2025-12-03 8:41:31): [krb5_child[40333]] [main] (0x0400): [RID#213] Will perform online auth * (2025-12-03 8:41:31): [krb5_child[40333]] [tgt_req_child] (0x1000): [RID#213] Attempting to get a TGT * (2025-12-03 8:41:31): [krb5_child[40333]] [get_and_save_tgt] (0x0400): [RID#213] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:41:31): [krb5_child[40333]] [sss_krb5_responder] (0x4000): [RID#213] Got question [password]. * (2025-12-03 8:41:31): [krb5_child[40333]] [get_and_save_tgt] (0x0020): [RID#213] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:41:31): [krb5_child[40333]] [map_krb5_error] (0x0020): [RID#213] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:42:23): [krb5_child[40341]] [get_and_save_tgt] (0x0020): [RID#218] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:42:23): [krb5_child[40341]] [main] (0x0400): [RID#218] krb5_child started. * (2025-12-03 8:42:23): [krb5_child[40341]] [unpack_buffer] (0x1000): [RID#218] total buffer size: [99] * (2025-12-03 8:42:23): [krb5_child[40341]] [unpack_buffer] (0x0100): [RID#218] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:42:23): [krb5_child[40341]] [unpack_buffer] (0x2000): [RID#218] No old ccache * (2025-12-03 8:42:23): [krb5_child[40341]] [unpack_buffer] (0x0100): [RID#218] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:42:23): [krb5_child[40341]] [k5c_precreate_ccache] (0x4000): [RID#218] Recreating ccache * (2025-12-03 8:42:23): [krb5_child[40341]] [k5c_setup_fast] (0x0100): [RID#218] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:42:23): [krb5_child[40341]] [find_principal_in_keytab] (0x4000): [RID#218] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:42:23): [krb5_child[40341]] [match_principal] (0x1000): [RID#218] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:42:23): [krb5_child[40341]] [check_fast_ccache] (0x0200): [RID#218] FAST TGT is still valid. * (2025-12-03 8:42:23): [krb5_child[40341]] [become_user] (0x0200): [RID#218] Trying to become user [940000000][940000000]. * (2025-12-03 8:42:23): [krb5_child[40341]] [main] (0x2000): [RID#218] Running as [940000000][940000000]. * (2025-12-03 8:42:23): [krb5_child[40341]] [set_lifetime_options] (0x0100): [RID#218] No specific renewable lifetime requested. * (2025-12-03 8:42:23): [krb5_child[40341]] [set_lifetime_options] (0x0100): [RID#218] No specific lifetime requested. * (2025-12-03 8:42:23): [krb5_child[40341]] [set_canonicalize_option] (0x0100): [RID#218] Canonicalization is set to [true] * (2025-12-03 8:42:23): [krb5_child[40341]] [main] (0x0400): [RID#218] Will perform auth * (2025-12-03 8:42:23): [krb5_child[40341]] [main] (0x0400): [RID#218] Will perform online auth * (2025-12-03 8:42:23): [krb5_child[40341]] [tgt_req_child] (0x1000): [RID#218] Attempting to get a TGT * (2025-12-03 8:42:23): [krb5_child[40341]] [get_and_save_tgt] (0x0400): [RID#218] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:42:23): [krb5_child[40341]] [sss_krb5_responder] (0x4000): [RID#218] Got question [password]. * (2025-12-03 8:42:23): [krb5_child[40341]] [get_and_save_tgt] (0x0020): [RID#218] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:42:23): [krb5_child[40341]] [map_krb5_error] (0x0020): [RID#218] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:42:27): [krb5_child[40344]] [get_and_save_tgt] (0x0020): [RID#220] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:42:27): [krb5_child[40344]] [main] (0x0400): [RID#220] krb5_child started. * (2025-12-03 8:42:27): [krb5_child[40344]] [unpack_buffer] (0x1000): [RID#220] total buffer size: [99] * (2025-12-03 8:42:27): [krb5_child[40344]] [unpack_buffer] (0x0100): [RID#220] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:42:27): [krb5_child[40344]] [unpack_buffer] (0x2000): [RID#220] No old ccache * (2025-12-03 8:42:27): [krb5_child[40344]] [unpack_buffer] (0x0100): [RID#220] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:42:27): [krb5_child[40344]] [k5c_precreate_ccache] (0x4000): [RID#220] Recreating ccache * (2025-12-03 8:42:27): [krb5_child[40344]] [k5c_setup_fast] (0x0100): [RID#220] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:42:27): [krb5_child[40344]] [find_principal_in_keytab] (0x4000): [RID#220] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:42:27): [krb5_child[40344]] [match_principal] (0x1000): [RID#220] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:42:27): [krb5_child[40344]] [check_fast_ccache] (0x0200): [RID#220] FAST TGT is still valid. * (2025-12-03 8:42:27): [krb5_child[40344]] [become_user] (0x0200): [RID#220] Trying to become user [940000000][940000000]. * (2025-12-03 8:42:27): [krb5_child[40344]] [main] (0x2000): [RID#220] Running as [940000000][940000000]. * (2025-12-03 8:42:27): [krb5_child[40344]] [set_lifetime_options] (0x0100): [RID#220] No specific renewable lifetime requested. * (2025-12-03 8:42:27): [krb5_child[40344]] [set_lifetime_options] (0x0100): [RID#220] No specific lifetime requested. * (2025-12-03 8:42:27): [krb5_child[40344]] [set_canonicalize_option] (0x0100): [RID#220] Canonicalization is set to [true] * (2025-12-03 8:42:27): [krb5_child[40344]] [main] (0x0400): [RID#220] Will perform auth * (2025-12-03 8:42:27): [krb5_child[40344]] [main] (0x0400): [RID#220] Will perform online auth * (2025-12-03 8:42:27): [krb5_child[40344]] [tgt_req_child] (0x1000): [RID#220] Attempting to get a TGT * (2025-12-03 8:42:27): [krb5_child[40344]] [get_and_save_tgt] (0x0400): [RID#220] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:42:27): [krb5_child[40344]] [sss_krb5_responder] (0x4000): [RID#220] Got question [password]. * (2025-12-03 8:42:27): [krb5_child[40344]] [get_and_save_tgt] (0x0020): [RID#220] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:42:27): [krb5_child[40344]] [map_krb5_error] (0x0020): [RID#220] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:47:36): [krb5_child[40375]] [get_and_save_tgt] (0x0020): [RID#230] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:47:36): [krb5_child[40375]] [main] (0x0400): [RID#230] krb5_child started. * (2025-12-03 8:47:36): [krb5_child[40375]] [unpack_buffer] (0x1000): [RID#230] total buffer size: [101] * (2025-12-03 8:47:36): [krb5_child[40375]] [unpack_buffer] (0x0100): [RID#230] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:47:36): [krb5_child[40375]] [unpack_buffer] (0x2000): [RID#230] No old ccache * (2025-12-03 8:47:36): [krb5_child[40375]] [unpack_buffer] (0x0100): [RID#230] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:47:36): [krb5_child[40375]] [k5c_precreate_ccache] (0x4000): [RID#230] Recreating ccache * (2025-12-03 8:47:36): [krb5_child[40375]] [k5c_setup_fast] (0x0100): [RID#230] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:47:36): [krb5_child[40375]] [find_principal_in_keytab] (0x4000): [RID#230] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:47:36): [krb5_child[40375]] [match_principal] (0x1000): [RID#230] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:47:36): [krb5_child[40375]] [check_fast_ccache] (0x0200): [RID#230] FAST TGT is still valid. * (2025-12-03 8:47:36): [krb5_child[40375]] [become_user] (0x0200): [RID#230] Trying to become user [940000000][940000000]. * (2025-12-03 8:47:36): [krb5_child[40375]] [main] (0x2000): [RID#230] Running as [940000000][940000000]. * (2025-12-03 8:47:36): [krb5_child[40375]] [set_lifetime_options] (0x0100): [RID#230] No specific renewable lifetime requested. * (2025-12-03 8:47:36): [krb5_child[40375]] [set_lifetime_options] (0x0100): [RID#230] No specific lifetime requested. * (2025-12-03 8:47:36): [krb5_child[40375]] [set_canonicalize_option] (0x0100): [RID#230] Canonicalization is set to [true] * (2025-12-03 8:47:36): [krb5_child[40375]] [main] (0x0400): [RID#230] Will perform auth * (2025-12-03 8:47:36): [krb5_child[40375]] [main] (0x0400): [RID#230] Will perform online auth * (2025-12-03 8:47:36): [krb5_child[40375]] [tgt_req_child] (0x1000): [RID#230] Attempting to get a TGT * (2025-12-03 8:47:36): [krb5_child[40375]] [get_and_save_tgt] (0x0400): [RID#230] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:47:36): [krb5_child[40375]] [get_and_save_tgt] (0x0020): [RID#230] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:47:36): [krb5_child[40375]] [map_krb5_error] (0x0020): [RID#230] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:47:41): [krb5_child[40378]] [get_and_save_tgt] (0x0020): [RID#232] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:47:41): [krb5_child[40378]] [main] (0x0400): [RID#232] krb5_child started. * (2025-12-03 8:47:41): [krb5_child[40378]] [unpack_buffer] (0x1000): [RID#232] total buffer size: [101] * (2025-12-03 8:47:41): [krb5_child[40378]] [unpack_buffer] (0x0100): [RID#232] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:47:41): [krb5_child[40378]] [unpack_buffer] (0x2000): [RID#232] No old ccache * (2025-12-03 8:47:41): [krb5_child[40378]] [unpack_buffer] (0x0100): [RID#232] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:47:41): [krb5_child[40378]] [k5c_precreate_ccache] (0x4000): [RID#232] Recreating ccache * (2025-12-03 8:47:41): [krb5_child[40378]] [k5c_setup_fast] (0x0100): [RID#232] Fast principal is set to [host/np0005543226.ooo.test@OOO.TEST] * (2025-12-03 8:47:41): [krb5_child[40378]] [find_principal_in_keytab] (0x4000): [RID#232] Trying to find principal host/np0005543226.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:47:41): [krb5_child[40378]] [match_principal] (0x1000): [RID#232] Principal matched to the sample (host/np0005543226.ooo.test@OOO.TEST). * (2025-12-03 8:47:41): [krb5_child[40378]] [check_fast_ccache] (0x0200): [RID#232] FAST TGT is still valid. * (2025-12-03 8:47:41): [krb5_child[40378]] [become_user] (0x0200): [RID#232] Trying to become user [940000000][940000000]. * (2025-12-03 8:47:41): [krb5_child[40378]] [main] (0x2000): [RID#232] Running as [940000000][940000000]. * (2025-12-03 8:47:41): [krb5_child[40378]] [set_lifetime_options] (0x0100): [RID#232] No specific renewable lifetime requested. * (2025-12-03 8:47:41): [krb5_child[40378]] [set_lifetime_options] (0x0100): [RID#232] No specific lifetime requested. * (2025-12-03 8:47:41): [krb5_child[40378]] [set_canonicalize_option] (0x0100): [RID#232] Canonicalization is set to [true] * (2025-12-03 8:47:41): [krb5_child[40378]] [main] (0x0400): [RID#232] Will perform auth * (2025-12-03 8:47:41): [krb5_child[40378]] [main] (0x0400): [RID#232] Will perform online auth * (2025-12-03 8:47:41): [krb5_child[40378]] [tgt_req_child] (0x1000): [RID#232] Attempting to get a TGT * (2025-12-03 8:47:41): [krb5_child[40378]] [get_and_save_tgt] (0x0400): [RID#232] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:47:41): [krb5_child[40378]] [get_and_save_tgt] (0x0020): [RID#232] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:47:41): [krb5_child[40378]] [map_krb5_error] (0x0020): [RID#232] 2138: [-1765328366][Client's credentials have been revoked]