(2025-12-03 8:16:07): [krb5_child[47570]] [get_and_save_tgt] (0x0020): [RID#13] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:16:06): [krb5_child[47570]] [main] (0x0400): [RID#13] krb5_child started. * (2025-12-03 8:16:06): [krb5_child[47570]] [unpack_buffer] (0x1000): [RID#13] total buffer size: [101] * (2025-12-03 8:16:06): [krb5_child[47570]] [unpack_buffer] (0x0100): [RID#13] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:16:06): [krb5_child[47570]] [unpack_buffer] (0x2000): [RID#13] No old ccache * (2025-12-03 8:16:06): [krb5_child[47570]] [unpack_buffer] (0x0100): [RID#13] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:16:06): [krb5_child[47570]] [k5c_precreate_ccache] (0x4000): [RID#13] Recreating ccache * (2025-12-03 8:16:06): [krb5_child[47570]] [k5c_setup_fast] (0x0100): [RID#13] Fast principal is set to [host/np0005543230.ooo.test@OOO.TEST] * (2025-12-03 8:16:06): [krb5_child[47570]] [find_principal_in_keytab] (0x4000): [RID#13] Trying to find principal host/np0005543230.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:16:06): [krb5_child[47570]] [match_principal] (0x1000): [RID#13] Principal matched to the sample (host/np0005543230.ooo.test@OOO.TEST). * (2025-12-03 8:16:06): [krb5_child[47570]] [check_fast_ccache] (0x0200): [RID#13] FAST TGT is still valid. * (2025-12-03 8:16:06): [krb5_child[47570]] [become_user] (0x0200): [RID#13] Trying to become user [940000000][940000000]. * (2025-12-03 8:16:06): [krb5_child[47570]] [main] (0x2000): [RID#13] Running as [940000000][940000000]. * (2025-12-03 8:16:06): [krb5_child[47570]] [set_lifetime_options] (0x0100): [RID#13] No specific renewable lifetime requested. * (2025-12-03 8:16:06): [krb5_child[47570]] [set_lifetime_options] (0x0100): [RID#13] No specific lifetime requested. * (2025-12-03 8:16:06): [krb5_child[47570]] [set_canonicalize_option] (0x0100): [RID#13] Canonicalization is set to [true] * (2025-12-03 8:16:06): [krb5_child[47570]] [main] (0x0400): [RID#13] Will perform auth * (2025-12-03 8:16:06): [krb5_child[47570]] [main] (0x0400): [RID#13] Will perform online auth * (2025-12-03 8:16:06): [krb5_child[47570]] [tgt_req_child] (0x1000): [RID#13] Attempting to get a TGT * (2025-12-03 8:16:06): [krb5_child[47570]] [get_and_save_tgt] (0x0400): [RID#13] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:16:06): [krb5_child[47570]] [sss_krb5_responder] (0x4000): [RID#13] Got question [password]. * (2025-12-03 8:16:07): [krb5_child[47570]] [get_and_save_tgt] (0x0020): [RID#13] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:16:07): [krb5_child[47570]] [map_krb5_error] (0x0020): [RID#13] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:16:11): [krb5_child[47573]] [get_and_save_tgt] (0x0020): [RID#15] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:16:11): [krb5_child[47573]] [main] (0x0400): [RID#15] krb5_child started. * (2025-12-03 8:16:11): [krb5_child[47573]] [unpack_buffer] (0x1000): [RID#15] total buffer size: [101] * (2025-12-03 8:16:11): [krb5_child[47573]] [unpack_buffer] (0x0100): [RID#15] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:16:11): [krb5_child[47573]] [unpack_buffer] (0x2000): [RID#15] No old ccache * (2025-12-03 8:16:11): [krb5_child[47573]] [unpack_buffer] (0x0100): [RID#15] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:16:11): [krb5_child[47573]] [k5c_precreate_ccache] (0x4000): [RID#15] Recreating ccache * (2025-12-03 8:16:11): [krb5_child[47573]] [k5c_setup_fast] (0x0100): [RID#15] Fast principal is set to [host/np0005543230.ooo.test@OOO.TEST] * (2025-12-03 8:16:11): [krb5_child[47573]] [find_principal_in_keytab] (0x4000): [RID#15] Trying to find principal host/np0005543230.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:16:11): [krb5_child[47573]] [match_principal] (0x1000): [RID#15] Principal matched to the sample (host/np0005543230.ooo.test@OOO.TEST). * (2025-12-03 8:16:11): [krb5_child[47573]] [check_fast_ccache] (0x0200): [RID#15] FAST TGT is still valid. * (2025-12-03 8:16:11): [krb5_child[47573]] [become_user] (0x0200): [RID#15] Trying to become user [940000000][940000000]. * (2025-12-03 8:16:11): [krb5_child[47573]] [main] (0x2000): [RID#15] Running as [940000000][940000000]. * (2025-12-03 8:16:11): [krb5_child[47573]] [set_lifetime_options] (0x0100): [RID#15] No specific renewable lifetime requested. * (2025-12-03 8:16:11): [krb5_child[47573]] [set_lifetime_options] (0x0100): [RID#15] No specific lifetime requested. * (2025-12-03 8:16:11): [krb5_child[47573]] [set_canonicalize_option] (0x0100): [RID#15] Canonicalization is set to [true] * (2025-12-03 8:16:11): [krb5_child[47573]] [main] (0x0400): [RID#15] Will perform auth * (2025-12-03 8:16:11): [krb5_child[47573]] [main] (0x0400): [RID#15] Will perform online auth * (2025-12-03 8:16:11): [krb5_child[47573]] [tgt_req_child] (0x1000): [RID#15] Attempting to get a TGT * (2025-12-03 8:16:11): [krb5_child[47573]] [get_and_save_tgt] (0x0400): [RID#15] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:16:11): [krb5_child[47573]] [sss_krb5_responder] (0x4000): [RID#15] Got question [password]. * (2025-12-03 8:16:11): [krb5_child[47573]] [get_and_save_tgt] (0x0020): [RID#15] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:16:11): [krb5_child[47573]] [map_krb5_error] (0x0020): [RID#15] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:48:05): [krb5_child[49426]] [get_and_save_tgt] (0x0020): [RID#21] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:48:05): [krb5_child[49426]] [main] (0x0400): [RID#21] krb5_child started. * (2025-12-03 8:48:05): [krb5_child[49426]] [unpack_buffer] (0x1000): [RID#21] total buffer size: [101] * (2025-12-03 8:48:05): [krb5_child[49426]] [unpack_buffer] (0x0100): [RID#21] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:48:05): [krb5_child[49426]] [unpack_buffer] (0x2000): [RID#21] No old ccache * (2025-12-03 8:48:05): [krb5_child[49426]] [unpack_buffer] (0x0100): [RID#21] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:48:05): [krb5_child[49426]] [k5c_precreate_ccache] (0x4000): [RID#21] Recreating ccache * (2025-12-03 8:48:05): [krb5_child[49426]] [k5c_setup_fast] (0x0100): [RID#21] Fast principal is set to [host/np0005543230.ooo.test@OOO.TEST] * (2025-12-03 8:48:05): [krb5_child[49426]] [find_principal_in_keytab] (0x4000): [RID#21] Trying to find principal host/np0005543230.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:48:05): [krb5_child[49426]] [match_principal] (0x1000): [RID#21] Principal matched to the sample (host/np0005543230.ooo.test@OOO.TEST). * (2025-12-03 8:48:05): [krb5_child[49426]] [check_fast_ccache] (0x0200): [RID#21] FAST TGT is still valid. * (2025-12-03 8:48:05): [krb5_child[49426]] [become_user] (0x0200): [RID#21] Trying to become user [940000000][940000000]. * (2025-12-03 8:48:05): [krb5_child[49426]] [main] (0x2000): [RID#21] Running as [940000000][940000000]. * (2025-12-03 8:48:05): [krb5_child[49426]] [set_lifetime_options] (0x0100): [RID#21] No specific renewable lifetime requested. * (2025-12-03 8:48:05): [krb5_child[49426]] [set_lifetime_options] (0x0100): [RID#21] No specific lifetime requested. * (2025-12-03 8:48:05): [krb5_child[49426]] [set_canonicalize_option] (0x0100): [RID#21] Canonicalization is set to [true] * (2025-12-03 8:48:05): [krb5_child[49426]] [main] (0x0400): [RID#21] Will perform auth * (2025-12-03 8:48:05): [krb5_child[49426]] [main] (0x0400): [RID#21] Will perform online auth * (2025-12-03 8:48:05): [krb5_child[49426]] [tgt_req_child] (0x1000): [RID#21] Attempting to get a TGT * (2025-12-03 8:48:05): [krb5_child[49426]] [get_and_save_tgt] (0x0400): [RID#21] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:48:05): [krb5_child[49426]] [get_and_save_tgt] (0x0020): [RID#21] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:48:05): [krb5_child[49426]] [map_krb5_error] (0x0020): [RID#21] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:48:11): [krb5_child[49429]] [get_and_save_tgt] (0x0020): [RID#24] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:48:11): [krb5_child[49429]] [main] (0x0400): [RID#24] krb5_child started. * (2025-12-03 8:48:11): [krb5_child[49429]] [unpack_buffer] (0x1000): [RID#24] total buffer size: [101] * (2025-12-03 8:48:11): [krb5_child[49429]] [unpack_buffer] (0x0100): [RID#24] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:48:11): [krb5_child[49429]] [unpack_buffer] (0x2000): [RID#24] No old ccache * (2025-12-03 8:48:11): [krb5_child[49429]] [unpack_buffer] (0x0100): [RID#24] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:48:11): [krb5_child[49429]] [k5c_precreate_ccache] (0x4000): [RID#24] Recreating ccache * (2025-12-03 8:48:11): [krb5_child[49429]] [k5c_setup_fast] (0x0100): [RID#24] Fast principal is set to [host/np0005543230.ooo.test@OOO.TEST] * (2025-12-03 8:48:11): [krb5_child[49429]] [find_principal_in_keytab] (0x4000): [RID#24] Trying to find principal host/np0005543230.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:48:11): [krb5_child[49429]] [match_principal] (0x1000): [RID#24] Principal matched to the sample (host/np0005543230.ooo.test@OOO.TEST). * (2025-12-03 8:48:11): [krb5_child[49429]] [check_fast_ccache] (0x0200): [RID#24] FAST TGT is still valid. * (2025-12-03 8:48:11): [krb5_child[49429]] [become_user] (0x0200): [RID#24] Trying to become user [940000000][940000000]. * (2025-12-03 8:48:11): [krb5_child[49429]] [main] (0x2000): [RID#24] Running as [940000000][940000000]. * (2025-12-03 8:48:11): [krb5_child[49429]] [set_lifetime_options] (0x0100): [RID#24] No specific renewable lifetime requested. * (2025-12-03 8:48:11): [krb5_child[49429]] [set_lifetime_options] (0x0100): [RID#24] No specific lifetime requested. * (2025-12-03 8:48:11): [krb5_child[49429]] [set_canonicalize_option] (0x0100): [RID#24] Canonicalization is set to [true] * (2025-12-03 8:48:11): [krb5_child[49429]] [main] (0x0400): [RID#24] Will perform auth * (2025-12-03 8:48:11): [krb5_child[49429]] [main] (0x0400): [RID#24] Will perform online auth * (2025-12-03 8:48:11): [krb5_child[49429]] [tgt_req_child] (0x1000): [RID#24] Attempting to get a TGT * (2025-12-03 8:48:11): [krb5_child[49429]] [get_and_save_tgt] (0x0400): [RID#24] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:48:11): [krb5_child[49429]] [get_and_save_tgt] (0x0020): [RID#24] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:48:11): [krb5_child[49429]] [map_krb5_error] (0x0020): [RID#24] 2138: [-1765328366][Client's credentials have been revoked]