(2025-12-03 8:17:31): [krb5_child[47525]] [get_and_save_tgt] (0x0020): [RID#27] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:17:31): [krb5_child[47525]] [main] (0x0400): [RID#27] krb5_child started. * (2025-12-03 8:17:31): [krb5_child[47525]] [unpack_buffer] (0x1000): [RID#27] total buffer size: [99] * (2025-12-03 8:17:31): [krb5_child[47525]] [unpack_buffer] (0x0100): [RID#27] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:17:31): [krb5_child[47525]] [unpack_buffer] (0x2000): [RID#27] No old ccache * (2025-12-03 8:17:31): [krb5_child[47525]] [unpack_buffer] (0x0100): [RID#27] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:17:31): [krb5_child[47525]] [k5c_precreate_ccache] (0x4000): [RID#27] Recreating ccache * (2025-12-03 8:17:31): [krb5_child[47525]] [k5c_setup_fast] (0x0100): [RID#27] Fast principal is set to [host/np0005543228.ooo.test@OOO.TEST] * (2025-12-03 8:17:31): [krb5_child[47525]] [find_principal_in_keytab] (0x4000): [RID#27] Trying to find principal host/np0005543228.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:17:31): [krb5_child[47525]] [match_principal] (0x1000): [RID#27] Principal matched to the sample (host/np0005543228.ooo.test@OOO.TEST). * (2025-12-03 8:17:31): [krb5_child[47525]] [check_fast_ccache] (0x0200): [RID#27] FAST TGT is still valid. * (2025-12-03 8:17:31): [krb5_child[47525]] [become_user] (0x0200): [RID#27] Trying to become user [940000000][940000000]. * (2025-12-03 8:17:31): [krb5_child[47525]] [main] (0x2000): [RID#27] Running as [940000000][940000000]. * (2025-12-03 8:17:31): [krb5_child[47525]] [set_lifetime_options] (0x0100): [RID#27] No specific renewable lifetime requested. * (2025-12-03 8:17:31): [krb5_child[47525]] [set_lifetime_options] (0x0100): [RID#27] No specific lifetime requested. * (2025-12-03 8:17:31): [krb5_child[47525]] [set_canonicalize_option] (0x0100): [RID#27] Canonicalization is set to [true] * (2025-12-03 8:17:31): [krb5_child[47525]] [main] (0x0400): [RID#27] Will perform auth * (2025-12-03 8:17:31): [krb5_child[47525]] [main] (0x0400): [RID#27] Will perform online auth * (2025-12-03 8:17:31): [krb5_child[47525]] [tgt_req_child] (0x1000): [RID#27] Attempting to get a TGT * (2025-12-03 8:17:31): [krb5_child[47525]] [get_and_save_tgt] (0x0400): [RID#27] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:17:31): [krb5_child[47525]] [sss_krb5_responder] (0x4000): [RID#27] Got question [password]. * (2025-12-03 8:17:31): [krb5_child[47525]] [get_and_save_tgt] (0x0020): [RID#27] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:17:31): [krb5_child[47525]] [map_krb5_error] (0x0020): [RID#27] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:49:20): [krb5_child[49404]] [get_and_save_tgt] (0x0020): [RID#44] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:49:20): [krb5_child[49404]] [main] (0x0400): [RID#44] krb5_child started. * (2025-12-03 8:49:20): [krb5_child[49404]] [unpack_buffer] (0x1000): [RID#44] total buffer size: [101] * (2025-12-03 8:49:20): [krb5_child[49404]] [unpack_buffer] (0x0100): [RID#44] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:49:20): [krb5_child[49404]] [unpack_buffer] (0x2000): [RID#44] No old ccache * (2025-12-03 8:49:20): [krb5_child[49404]] [unpack_buffer] (0x0100): [RID#44] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:49:20): [krb5_child[49404]] [k5c_precreate_ccache] (0x4000): [RID#44] Recreating ccache * (2025-12-03 8:49:20): [krb5_child[49404]] [k5c_setup_fast] (0x0100): [RID#44] Fast principal is set to [host/np0005543228.ooo.test@OOO.TEST] * (2025-12-03 8:49:20): [krb5_child[49404]] [find_principal_in_keytab] (0x4000): [RID#44] Trying to find principal host/np0005543228.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:49:20): [krb5_child[49404]] [match_principal] (0x1000): [RID#44] Principal matched to the sample (host/np0005543228.ooo.test@OOO.TEST). * (2025-12-03 8:49:20): [krb5_child[49404]] [check_fast_ccache] (0x0200): [RID#44] FAST TGT is still valid. * (2025-12-03 8:49:20): [krb5_child[49404]] [become_user] (0x0200): [RID#44] Trying to become user [940000000][940000000]. * (2025-12-03 8:49:20): [krb5_child[49404]] [main] (0x2000): [RID#44] Running as [940000000][940000000]. * (2025-12-03 8:49:20): [krb5_child[49404]] [set_lifetime_options] (0x0100): [RID#44] No specific renewable lifetime requested. * (2025-12-03 8:49:20): [krb5_child[49404]] [set_lifetime_options] (0x0100): [RID#44] No specific lifetime requested. * (2025-12-03 8:49:20): [krb5_child[49404]] [set_canonicalize_option] (0x0100): [RID#44] Canonicalization is set to [true] * (2025-12-03 8:49:20): [krb5_child[49404]] [main] (0x0400): [RID#44] Will perform auth * (2025-12-03 8:49:20): [krb5_child[49404]] [main] (0x0400): [RID#44] Will perform online auth * (2025-12-03 8:49:20): [krb5_child[49404]] [tgt_req_child] (0x1000): [RID#44] Attempting to get a TGT * (2025-12-03 8:49:20): [krb5_child[49404]] [get_and_save_tgt] (0x0400): [RID#44] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:49:20): [krb5_child[49404]] [get_and_save_tgt] (0x0020): [RID#44] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:49:20): [krb5_child[49404]] [map_krb5_error] (0x0020): [RID#44] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:51:23): [krb5_child[49537]] [get_and_save_tgt] (0x0020): [RID#50] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:51:23): [krb5_child[49537]] [main] (0x0400): [RID#50] krb5_child started. * (2025-12-03 8:51:23): [krb5_child[49537]] [unpack_buffer] (0x1000): [RID#50] total buffer size: [101] * (2025-12-03 8:51:23): [krb5_child[49537]] [unpack_buffer] (0x0100): [RID#50] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:51:23): [krb5_child[49537]] [unpack_buffer] (0x2000): [RID#50] No old ccache * (2025-12-03 8:51:23): [krb5_child[49537]] [unpack_buffer] (0x0100): [RID#50] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:51:23): [krb5_child[49537]] [k5c_precreate_ccache] (0x4000): [RID#50] Recreating ccache * (2025-12-03 8:51:23): [krb5_child[49537]] [k5c_setup_fast] (0x0100): [RID#50] Fast principal is set to [host/np0005543228.ooo.test@OOO.TEST] * (2025-12-03 8:51:23): [krb5_child[49537]] [find_principal_in_keytab] (0x4000): [RID#50] Trying to find principal host/np0005543228.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:51:23): [krb5_child[49537]] [match_principal] (0x1000): [RID#50] Principal matched to the sample (host/np0005543228.ooo.test@OOO.TEST). * (2025-12-03 8:51:23): [krb5_child[49537]] [check_fast_ccache] (0x0200): [RID#50] FAST TGT is still valid. * (2025-12-03 8:51:23): [krb5_child[49537]] [become_user] (0x0200): [RID#50] Trying to become user [940000000][940000000]. * (2025-12-03 8:51:23): [krb5_child[49537]] [main] (0x2000): [RID#50] Running as [940000000][940000000]. * (2025-12-03 8:51:23): [krb5_child[49537]] [set_lifetime_options] (0x0100): [RID#50] No specific renewable lifetime requested. * (2025-12-03 8:51:23): [krb5_child[49537]] [set_lifetime_options] (0x0100): [RID#50] No specific lifetime requested. * (2025-12-03 8:51:23): [krb5_child[49537]] [set_canonicalize_option] (0x0100): [RID#50] Canonicalization is set to [true] * (2025-12-03 8:51:23): [krb5_child[49537]] [main] (0x0400): [RID#50] Will perform auth * (2025-12-03 8:51:23): [krb5_child[49537]] [main] (0x0400): [RID#50] Will perform online auth * (2025-12-03 8:51:23): [krb5_child[49537]] [tgt_req_child] (0x1000): [RID#50] Attempting to get a TGT * (2025-12-03 8:51:23): [krb5_child[49537]] [get_and_save_tgt] (0x0400): [RID#50] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:51:23): [krb5_child[49537]] [get_and_save_tgt] (0x0020): [RID#50] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:51:23): [krb5_child[49537]] [map_krb5_error] (0x0020): [RID#50] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:57:36): [krb5_child[49959]] [get_and_save_tgt] (0x0020): [RID#77] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:57:36): [krb5_child[49959]] [main] (0x0400): [RID#77] krb5_child started. * (2025-12-03 8:57:36): [krb5_child[49959]] [unpack_buffer] (0x1000): [RID#77] total buffer size: [99] * (2025-12-03 8:57:36): [krb5_child[49959]] [unpack_buffer] (0x0100): [RID#77] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:57:36): [krb5_child[49959]] [unpack_buffer] (0x2000): [RID#77] No old ccache * (2025-12-03 8:57:36): [krb5_child[49959]] [unpack_buffer] (0x0100): [RID#77] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:57:36): [krb5_child[49959]] [k5c_precreate_ccache] (0x4000): [RID#77] Recreating ccache * (2025-12-03 8:57:36): [krb5_child[49959]] [k5c_setup_fast] (0x0100): [RID#77] Fast principal is set to [host/np0005543228.ooo.test@OOO.TEST] * (2025-12-03 8:57:36): [krb5_child[49959]] [find_principal_in_keytab] (0x4000): [RID#77] Trying to find principal host/np0005543228.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:57:36): [krb5_child[49959]] [match_principal] (0x1000): [RID#77] Principal matched to the sample (host/np0005543228.ooo.test@OOO.TEST). * (2025-12-03 8:57:36): [krb5_child[49959]] [check_fast_ccache] (0x0200): [RID#77] FAST TGT is still valid. * (2025-12-03 8:57:36): [krb5_child[49959]] [become_user] (0x0200): [RID#77] Trying to become user [940000000][940000000]. * (2025-12-03 8:57:36): [krb5_child[49959]] [main] (0x2000): [RID#77] Running as [940000000][940000000]. * (2025-12-03 8:57:36): [krb5_child[49959]] [set_lifetime_options] (0x0100): [RID#77] No specific renewable lifetime requested. * (2025-12-03 8:57:36): [krb5_child[49959]] [set_lifetime_options] (0x0100): [RID#77] No specific lifetime requested. * (2025-12-03 8:57:36): [krb5_child[49959]] [set_canonicalize_option] (0x0100): [RID#77] Canonicalization is set to [true] * (2025-12-03 8:57:36): [krb5_child[49959]] [main] (0x0400): [RID#77] Will perform auth * (2025-12-03 8:57:36): [krb5_child[49959]] [main] (0x0400): [RID#77] Will perform online auth * (2025-12-03 8:57:36): [krb5_child[49959]] [tgt_req_child] (0x1000): [RID#77] Attempting to get a TGT * (2025-12-03 8:57:36): [krb5_child[49959]] [get_and_save_tgt] (0x0400): [RID#77] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:57:36): [krb5_child[49959]] [sss_krb5_responder] (0x4000): [RID#77] Got question [password]. * (2025-12-03 8:57:36): [krb5_child[49959]] [get_and_save_tgt] (0x0020): [RID#77] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:57:36): [krb5_child[49959]] [map_krb5_error] (0x0020): [RID#77] 2138: [-1765328360][Preauthentication failed]