(2025-12-03 8:05:28): [krb5_child[47030]] [get_and_save_tgt] (0x0020): [RID#20] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:05:28): [krb5_child[47030]] [main] (0x0400): [RID#20] krb5_child started. * (2025-12-03 8:05:28): [krb5_child[47030]] [unpack_buffer] (0x1000): [RID#20] total buffer size: [101] * (2025-12-03 8:05:28): [krb5_child[47030]] [unpack_buffer] (0x0100): [RID#20] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:05:28): [krb5_child[47030]] [unpack_buffer] (0x2000): [RID#20] No old ccache * (2025-12-03 8:05:28): [krb5_child[47030]] [unpack_buffer] (0x0100): [RID#20] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:05:28): [krb5_child[47030]] [k5c_precreate_ccache] (0x4000): [RID#20] Recreating ccache * (2025-12-03 8:05:28): [krb5_child[47030]] [k5c_setup_fast] (0x0100): [RID#20] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:05:28): [krb5_child[47030]] [find_principal_in_keytab] (0x4000): [RID#20] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:05:28): [krb5_child[47030]] [match_principal] (0x1000): [RID#20] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:05:28): [krb5_child[47030]] [check_fast_ccache] (0x0200): [RID#20] FAST TGT is still valid. * (2025-12-03 8:05:28): [krb5_child[47030]] [become_user] (0x0200): [RID#20] Trying to become user [940000000][940000000]. * (2025-12-03 8:05:28): [krb5_child[47030]] [main] (0x2000): [RID#20] Running as [940000000][940000000]. * (2025-12-03 8:05:28): [krb5_child[47030]] [set_lifetime_options] (0x0100): [RID#20] No specific renewable lifetime requested. * (2025-12-03 8:05:28): [krb5_child[47030]] [set_lifetime_options] (0x0100): [RID#20] No specific lifetime requested. * (2025-12-03 8:05:28): [krb5_child[47030]] [set_canonicalize_option] (0x0100): [RID#20] Canonicalization is set to [true] * (2025-12-03 8:05:28): [krb5_child[47030]] [main] (0x0400): [RID#20] Will perform auth * (2025-12-03 8:05:28): [krb5_child[47030]] [main] (0x0400): [RID#20] Will perform online auth * (2025-12-03 8:05:28): [krb5_child[47030]] [tgt_req_child] (0x1000): [RID#20] Attempting to get a TGT * (2025-12-03 8:05:28): [krb5_child[47030]] [get_and_save_tgt] (0x0400): [RID#20] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:05:28): [krb5_child[47030]] [sss_krb5_responder] (0x4000): [RID#20] Got question [password]. * (2025-12-03 8:05:28): [krb5_child[47030]] [get_and_save_tgt] (0x0020): [RID#20] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:05:28): [krb5_child[47030]] [map_krb5_error] (0x0020): [RID#20] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:05:32): [krb5_child[47033]] [get_and_save_tgt] (0x0020): [RID#22] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:05:32): [krb5_child[47033]] [main] (0x0400): [RID#22] krb5_child started. * (2025-12-03 8:05:32): [krb5_child[47033]] [unpack_buffer] (0x1000): [RID#22] total buffer size: [101] * (2025-12-03 8:05:32): [krb5_child[47033]] [unpack_buffer] (0x0100): [RID#22] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:05:32): [krb5_child[47033]] [unpack_buffer] (0x2000): [RID#22] No old ccache * (2025-12-03 8:05:32): [krb5_child[47033]] [unpack_buffer] (0x0100): [RID#22] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:05:32): [krb5_child[47033]] [k5c_precreate_ccache] (0x4000): [RID#22] Recreating ccache * (2025-12-03 8:05:32): [krb5_child[47033]] [k5c_setup_fast] (0x0100): [RID#22] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:05:32): [krb5_child[47033]] [find_principal_in_keytab] (0x4000): [RID#22] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:05:32): [krb5_child[47033]] [match_principal] (0x1000): [RID#22] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:05:32): [krb5_child[47033]] [check_fast_ccache] (0x0200): [RID#22] FAST TGT is still valid. * (2025-12-03 8:05:32): [krb5_child[47033]] [become_user] (0x0200): [RID#22] Trying to become user [940000000][940000000]. * (2025-12-03 8:05:32): [krb5_child[47033]] [main] (0x2000): [RID#22] Running as [940000000][940000000]. * (2025-12-03 8:05:32): [krb5_child[47033]] [set_lifetime_options] (0x0100): [RID#22] No specific renewable lifetime requested. * (2025-12-03 8:05:32): [krb5_child[47033]] [set_lifetime_options] (0x0100): [RID#22] No specific lifetime requested. * (2025-12-03 8:05:32): [krb5_child[47033]] [set_canonicalize_option] (0x0100): [RID#22] Canonicalization is set to [true] * (2025-12-03 8:05:32): [krb5_child[47033]] [main] (0x0400): [RID#22] Will perform auth * (2025-12-03 8:05:32): [krb5_child[47033]] [main] (0x0400): [RID#22] Will perform online auth * (2025-12-03 8:05:32): [krb5_child[47033]] [tgt_req_child] (0x1000): [RID#22] Attempting to get a TGT * (2025-12-03 8:05:32): [krb5_child[47033]] [get_and_save_tgt] (0x0400): [RID#22] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:05:32): [krb5_child[47033]] [sss_krb5_responder] (0x4000): [RID#22] Got question [password]. * (2025-12-03 8:05:32): [krb5_child[47033]] [get_and_save_tgt] (0x0020): [RID#22] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:05:32): [krb5_child[47033]] [map_krb5_error] (0x0020): [RID#22] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:07:57): [krb5_child[47194]] [get_and_save_tgt] (0x0020): [RID#31] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:07:57): [krb5_child[47194]] [main] (0x0400): [RID#31] krb5_child started. * (2025-12-03 8:07:57): [krb5_child[47194]] [unpack_buffer] (0x1000): [RID#31] total buffer size: [101] * (2025-12-03 8:07:57): [krb5_child[47194]] [unpack_buffer] (0x0100): [RID#31] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:07:57): [krb5_child[47194]] [unpack_buffer] (0x2000): [RID#31] No old ccache * (2025-12-03 8:07:57): [krb5_child[47194]] [unpack_buffer] (0x0100): [RID#31] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:07:57): [krb5_child[47194]] [k5c_precreate_ccache] (0x4000): [RID#31] Recreating ccache * (2025-12-03 8:07:57): [krb5_child[47194]] [k5c_setup_fast] (0x0100): [RID#31] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:07:57): [krb5_child[47194]] [find_principal_in_keytab] (0x4000): [RID#31] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:07:57): [krb5_child[47194]] [match_principal] (0x1000): [RID#31] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:07:57): [krb5_child[47194]] [check_fast_ccache] (0x0200): [RID#31] FAST TGT is still valid. * (2025-12-03 8:07:57): [krb5_child[47194]] [become_user] (0x0200): [RID#31] Trying to become user [940000000][940000000]. * (2025-12-03 8:07:57): [krb5_child[47194]] [main] (0x2000): [RID#31] Running as [940000000][940000000]. * (2025-12-03 8:07:57): [krb5_child[47194]] [set_lifetime_options] (0x0100): [RID#31] No specific renewable lifetime requested. * (2025-12-03 8:07:57): [krb5_child[47194]] [set_lifetime_options] (0x0100): [RID#31] No specific lifetime requested. * (2025-12-03 8:07:57): [krb5_child[47194]] [set_canonicalize_option] (0x0100): [RID#31] Canonicalization is set to [true] * (2025-12-03 8:07:57): [krb5_child[47194]] [main] (0x0400): [RID#31] Will perform auth * (2025-12-03 8:07:57): [krb5_child[47194]] [main] (0x0400): [RID#31] Will perform online auth * (2025-12-03 8:07:57): [krb5_child[47194]] [tgt_req_child] (0x1000): [RID#31] Attempting to get a TGT * (2025-12-03 8:07:57): [krb5_child[47194]] [get_and_save_tgt] (0x0400): [RID#31] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:07:57): [krb5_child[47194]] [get_and_save_tgt] (0x0020): [RID#31] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:07:57): [krb5_child[47194]] [map_krb5_error] (0x0020): [RID#31] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:08:01): [krb5_child[47199]] [get_and_save_tgt] (0x0020): [RID#33] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:08:01): [krb5_child[47199]] [main] (0x0400): [RID#33] krb5_child started. * (2025-12-03 8:08:01): [krb5_child[47199]] [unpack_buffer] (0x1000): [RID#33] total buffer size: [101] * (2025-12-03 8:08:01): [krb5_child[47199]] [unpack_buffer] (0x0100): [RID#33] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:08:01): [krb5_child[47199]] [unpack_buffer] (0x2000): [RID#33] No old ccache * (2025-12-03 8:08:01): [krb5_child[47199]] [unpack_buffer] (0x0100): [RID#33] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:08:01): [krb5_child[47199]] [k5c_precreate_ccache] (0x4000): [RID#33] Recreating ccache * (2025-12-03 8:08:01): [krb5_child[47199]] [k5c_setup_fast] (0x0100): [RID#33] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:08:01): [krb5_child[47199]] [find_principal_in_keytab] (0x4000): [RID#33] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:08:01): [krb5_child[47199]] [match_principal] (0x1000): [RID#33] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:08:01): [krb5_child[47199]] [check_fast_ccache] (0x0200): [RID#33] FAST TGT is still valid. * (2025-12-03 8:08:01): [krb5_child[47199]] [become_user] (0x0200): [RID#33] Trying to become user [940000000][940000000]. * (2025-12-03 8:08:01): [krb5_child[47199]] [main] (0x2000): [RID#33] Running as [940000000][940000000]. * (2025-12-03 8:08:01): [krb5_child[47199]] [set_lifetime_options] (0x0100): [RID#33] No specific renewable lifetime requested. * (2025-12-03 8:08:01): [krb5_child[47199]] [set_lifetime_options] (0x0100): [RID#33] No specific lifetime requested. * (2025-12-03 8:08:01): [krb5_child[47199]] [set_canonicalize_option] (0x0100): [RID#33] Canonicalization is set to [true] * (2025-12-03 8:08:01): [krb5_child[47199]] [main] (0x0400): [RID#33] Will perform auth * (2025-12-03 8:08:01): [krb5_child[47199]] [main] (0x0400): [RID#33] Will perform online auth * (2025-12-03 8:08:01): [krb5_child[47199]] [tgt_req_child] (0x1000): [RID#33] Attempting to get a TGT * (2025-12-03 8:08:01): [krb5_child[47199]] [get_and_save_tgt] (0x0400): [RID#33] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:08:01): [krb5_child[47199]] [get_and_save_tgt] (0x0020): [RID#33] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:08:01): [krb5_child[47199]] [map_krb5_error] (0x0020): [RID#33] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:11:15): [krb5_child[47409]] [get_and_save_tgt] (0x0020): [RID#44] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:11:15): [krb5_child[47409]] [main] (0x0400): [RID#44] krb5_child started. * (2025-12-03 8:11:15): [krb5_child[47409]] [unpack_buffer] (0x1000): [RID#44] total buffer size: [101] * (2025-12-03 8:11:15): [krb5_child[47409]] [unpack_buffer] (0x0100): [RID#44] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:11:15): [krb5_child[47409]] [unpack_buffer] (0x2000): [RID#44] No old ccache * (2025-12-03 8:11:15): [krb5_child[47409]] [unpack_buffer] (0x0100): [RID#44] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:11:15): [krb5_child[47409]] [k5c_precreate_ccache] (0x4000): [RID#44] Recreating ccache * (2025-12-03 8:11:15): [krb5_child[47409]] [k5c_setup_fast] (0x0100): [RID#44] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:11:15): [krb5_child[47409]] [find_principal_in_keytab] (0x4000): [RID#44] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:11:15): [krb5_child[47409]] [match_principal] (0x1000): [RID#44] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:11:15): [krb5_child[47409]] [check_fast_ccache] (0x0200): [RID#44] FAST TGT is still valid. * (2025-12-03 8:11:15): [krb5_child[47409]] [become_user] (0x0200): [RID#44] Trying to become user [940000000][940000000]. * (2025-12-03 8:11:15): [krb5_child[47409]] [main] (0x2000): [RID#44] Running as [940000000][940000000]. * (2025-12-03 8:11:15): [krb5_child[47409]] [set_lifetime_options] (0x0100): [RID#44] No specific renewable lifetime requested. * (2025-12-03 8:11:15): [krb5_child[47409]] [set_lifetime_options] (0x0100): [RID#44] No specific lifetime requested. * (2025-12-03 8:11:15): [krb5_child[47409]] [set_canonicalize_option] (0x0100): [RID#44] Canonicalization is set to [true] * (2025-12-03 8:11:15): [krb5_child[47409]] [main] (0x0400): [RID#44] Will perform auth * (2025-12-03 8:11:15): [krb5_child[47409]] [main] (0x0400): [RID#44] Will perform online auth * (2025-12-03 8:11:15): [krb5_child[47409]] [tgt_req_child] (0x1000): [RID#44] Attempting to get a TGT * (2025-12-03 8:11:15): [krb5_child[47409]] [get_and_save_tgt] (0x0400): [RID#44] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:11:15): [krb5_child[47409]] [get_and_save_tgt] (0x0020): [RID#44] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:11:15): [krb5_child[47409]] [map_krb5_error] (0x0020): [RID#44] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:11:17): [krb5_child[47412]] [get_and_save_tgt] (0x0020): [RID#46] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:11:17): [krb5_child[47412]] [main] (0x0400): [RID#46] krb5_child started. * (2025-12-03 8:11:17): [krb5_child[47412]] [unpack_buffer] (0x1000): [RID#46] total buffer size: [101] * (2025-12-03 8:11:17): [krb5_child[47412]] [unpack_buffer] (0x0100): [RID#46] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:11:17): [krb5_child[47412]] [unpack_buffer] (0x2000): [RID#46] No old ccache * (2025-12-03 8:11:17): [krb5_child[47412]] [unpack_buffer] (0x0100): [RID#46] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:11:17): [krb5_child[47412]] [k5c_precreate_ccache] (0x4000): [RID#46] Recreating ccache * (2025-12-03 8:11:17): [krb5_child[47412]] [k5c_setup_fast] (0x0100): [RID#46] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:11:17): [krb5_child[47412]] [find_principal_in_keytab] (0x4000): [RID#46] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:11:17): [krb5_child[47412]] [match_principal] (0x1000): [RID#46] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:11:17): [krb5_child[47412]] [check_fast_ccache] (0x0200): [RID#46] FAST TGT is still valid. * (2025-12-03 8:11:17): [krb5_child[47412]] [become_user] (0x0200): [RID#46] Trying to become user [940000000][940000000]. * (2025-12-03 8:11:17): [krb5_child[47412]] [main] (0x2000): [RID#46] Running as [940000000][940000000]. * (2025-12-03 8:11:17): [krb5_child[47412]] [set_lifetime_options] (0x0100): [RID#46] No specific renewable lifetime requested. * (2025-12-03 8:11:17): [krb5_child[47412]] [set_lifetime_options] (0x0100): [RID#46] No specific lifetime requested. * (2025-12-03 8:11:17): [krb5_child[47412]] [set_canonicalize_option] (0x0100): [RID#46] Canonicalization is set to [true] * (2025-12-03 8:11:17): [krb5_child[47412]] [main] (0x0400): [RID#46] Will perform auth * (2025-12-03 8:11:17): [krb5_child[47412]] [main] (0x0400): [RID#46] Will perform online auth * (2025-12-03 8:11:17): [krb5_child[47412]] [tgt_req_child] (0x1000): [RID#46] Attempting to get a TGT * (2025-12-03 8:11:17): [krb5_child[47412]] [get_and_save_tgt] (0x0400): [RID#46] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:11:17): [krb5_child[47412]] [get_and_save_tgt] (0x0020): [RID#46] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:11:17): [krb5_child[47412]] [map_krb5_error] (0x0020): [RID#46] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:11:21): [krb5_child[47416]] [get_and_save_tgt] (0x0020): [RID#49] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:11:21): [krb5_child[47416]] [main] (0x0400): [RID#49] krb5_child started. * (2025-12-03 8:11:21): [krb5_child[47416]] [unpack_buffer] (0x1000): [RID#49] total buffer size: [99] * (2025-12-03 8:11:21): [krb5_child[47416]] [unpack_buffer] (0x0100): [RID#49] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:11:21): [krb5_child[47416]] [unpack_buffer] (0x2000): [RID#49] No old ccache * (2025-12-03 8:11:21): [krb5_child[47416]] [unpack_buffer] (0x0100): [RID#49] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:11:21): [krb5_child[47416]] [k5c_precreate_ccache] (0x4000): [RID#49] Recreating ccache * (2025-12-03 8:11:21): [krb5_child[47416]] [k5c_setup_fast] (0x0100): [RID#49] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:11:21): [krb5_child[47416]] [find_principal_in_keytab] (0x4000): [RID#49] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:11:21): [krb5_child[47416]] [match_principal] (0x1000): [RID#49] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:11:21): [krb5_child[47416]] [check_fast_ccache] (0x0200): [RID#49] FAST TGT is still valid. * (2025-12-03 8:11:21): [krb5_child[47416]] [become_user] (0x0200): [RID#49] Trying to become user [940000000][940000000]. * (2025-12-03 8:11:21): [krb5_child[47416]] [main] (0x2000): [RID#49] Running as [940000000][940000000]. * (2025-12-03 8:11:21): [krb5_child[47416]] [set_lifetime_options] (0x0100): [RID#49] No specific renewable lifetime requested. * (2025-12-03 8:11:21): [krb5_child[47416]] [set_lifetime_options] (0x0100): [RID#49] No specific lifetime requested. * (2025-12-03 8:11:21): [krb5_child[47416]] [set_canonicalize_option] (0x0100): [RID#49] Canonicalization is set to [true] * (2025-12-03 8:11:21): [krb5_child[47416]] [main] (0x0400): [RID#49] Will perform auth * (2025-12-03 8:11:21): [krb5_child[47416]] [main] (0x0400): [RID#49] Will perform online auth * (2025-12-03 8:11:21): [krb5_child[47416]] [tgt_req_child] (0x1000): [RID#49] Attempting to get a TGT * (2025-12-03 8:11:21): [krb5_child[47416]] [get_and_save_tgt] (0x0400): [RID#49] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:11:21): [krb5_child[47416]] [get_and_save_tgt] (0x0020): [RID#49] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:11:21): [krb5_child[47416]] [map_krb5_error] (0x0020): [RID#49] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:11:25): [krb5_child[47449]] [get_and_save_tgt] (0x0020): [RID#52] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:11:25): [krb5_child[47449]] [main] (0x0400): [RID#52] krb5_child started. * (2025-12-03 8:11:25): [krb5_child[47449]] [unpack_buffer] (0x1000): [RID#52] total buffer size: [99] * (2025-12-03 8:11:25): [krb5_child[47449]] [unpack_buffer] (0x0100): [RID#52] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:11:25): [krb5_child[47449]] [unpack_buffer] (0x2000): [RID#52] No old ccache * (2025-12-03 8:11:25): [krb5_child[47449]] [unpack_buffer] (0x0100): [RID#52] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:11:25): [krb5_child[47449]] [k5c_precreate_ccache] (0x4000): [RID#52] Recreating ccache * (2025-12-03 8:11:25): [krb5_child[47449]] [k5c_setup_fast] (0x0100): [RID#52] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:11:25): [krb5_child[47449]] [find_principal_in_keytab] (0x4000): [RID#52] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:11:25): [krb5_child[47449]] [match_principal] (0x1000): [RID#52] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:11:25): [krb5_child[47449]] [check_fast_ccache] (0x0200): [RID#52] FAST TGT is still valid. * (2025-12-03 8:11:25): [krb5_child[47449]] [become_user] (0x0200): [RID#52] Trying to become user [940000000][940000000]. * (2025-12-03 8:11:25): [krb5_child[47449]] [main] (0x2000): [RID#52] Running as [940000000][940000000]. * (2025-12-03 8:11:25): [krb5_child[47449]] [set_lifetime_options] (0x0100): [RID#52] No specific renewable lifetime requested. * (2025-12-03 8:11:25): [krb5_child[47449]] [set_lifetime_options] (0x0100): [RID#52] No specific lifetime requested. * (2025-12-03 8:11:25): [krb5_child[47449]] [set_canonicalize_option] (0x0100): [RID#52] Canonicalization is set to [true] * (2025-12-03 8:11:25): [krb5_child[47449]] [main] (0x0400): [RID#52] Will perform auth * (2025-12-03 8:11:25): [krb5_child[47449]] [main] (0x0400): [RID#52] Will perform online auth * (2025-12-03 8:11:25): [krb5_child[47449]] [tgt_req_child] (0x1000): [RID#52] Attempting to get a TGT * (2025-12-03 8:11:25): [krb5_child[47449]] [get_and_save_tgt] (0x0400): [RID#52] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:11:25): [krb5_child[47449]] [get_and_save_tgt] (0x0020): [RID#52] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:11:25): [krb5_child[47449]] [map_krb5_error] (0x0020): [RID#52] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 8:37:23): [krb5_child[49251]] [get_and_save_tgt] (0x0020): [RID#106] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:37:23): [krb5_child[49251]] [main] (0x0400): [RID#106] krb5_child started. * (2025-12-03 8:37:23): [krb5_child[49251]] [unpack_buffer] (0x1000): [RID#106] total buffer size: [101] * (2025-12-03 8:37:23): [krb5_child[49251]] [unpack_buffer] (0x0100): [RID#106] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:37:23): [krb5_child[49251]] [unpack_buffer] (0x2000): [RID#106] No old ccache * (2025-12-03 8:37:23): [krb5_child[49251]] [unpack_buffer] (0x0100): [RID#106] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:37:23): [krb5_child[49251]] [k5c_precreate_ccache] (0x4000): [RID#106] Recreating ccache * (2025-12-03 8:37:23): [krb5_child[49251]] [k5c_setup_fast] (0x0100): [RID#106] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:37:23): [krb5_child[49251]] [find_principal_in_keytab] (0x4000): [RID#106] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:37:23): [krb5_child[49251]] [match_principal] (0x1000): [RID#106] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:37:23): [krb5_child[49251]] [check_fast_ccache] (0x0200): [RID#106] FAST TGT is still valid. * (2025-12-03 8:37:23): [krb5_child[49251]] [become_user] (0x0200): [RID#106] Trying to become user [940000000][940000000]. * (2025-12-03 8:37:23): [krb5_child[49251]] [main] (0x2000): [RID#106] Running as [940000000][940000000]. * (2025-12-03 8:37:23): [krb5_child[49251]] [set_lifetime_options] (0x0100): [RID#106] No specific renewable lifetime requested. * (2025-12-03 8:37:23): [krb5_child[49251]] [set_lifetime_options] (0x0100): [RID#106] No specific lifetime requested. * (2025-12-03 8:37:23): [krb5_child[49251]] [set_canonicalize_option] (0x0100): [RID#106] Canonicalization is set to [true] * (2025-12-03 8:37:23): [krb5_child[49251]] [main] (0x0400): [RID#106] Will perform auth * (2025-12-03 8:37:23): [krb5_child[49251]] [main] (0x0400): [RID#106] Will perform online auth * (2025-12-03 8:37:23): [krb5_child[49251]] [tgt_req_child] (0x1000): [RID#106] Attempting to get a TGT * (2025-12-03 8:37:23): [krb5_child[49251]] [get_and_save_tgt] (0x0400): [RID#106] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:37:23): [krb5_child[49251]] [sss_krb5_responder] (0x4000): [RID#106] Got question [password]. * (2025-12-03 8:37:23): [krb5_child[49251]] [get_and_save_tgt] (0x0020): [RID#106] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:37:23): [krb5_child[49251]] [map_krb5_error] (0x0020): [RID#106] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:37:27): [krb5_child[49254]] [get_and_save_tgt] (0x0020): [RID#108] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:37:27): [krb5_child[49254]] [main] (0x0400): [RID#108] krb5_child started. * (2025-12-03 8:37:27): [krb5_child[49254]] [unpack_buffer] (0x1000): [RID#108] total buffer size: [101] * (2025-12-03 8:37:27): [krb5_child[49254]] [unpack_buffer] (0x0100): [RID#108] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:37:27): [krb5_child[49254]] [unpack_buffer] (0x2000): [RID#108] No old ccache * (2025-12-03 8:37:27): [krb5_child[49254]] [unpack_buffer] (0x0100): [RID#108] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:37:27): [krb5_child[49254]] [k5c_precreate_ccache] (0x4000): [RID#108] Recreating ccache * (2025-12-03 8:37:27): [krb5_child[49254]] [k5c_setup_fast] (0x0100): [RID#108] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:37:27): [krb5_child[49254]] [find_principal_in_keytab] (0x4000): [RID#108] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:37:27): [krb5_child[49254]] [match_principal] (0x1000): [RID#108] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:37:27): [krb5_child[49254]] [check_fast_ccache] (0x0200): [RID#108] FAST TGT is still valid. * (2025-12-03 8:37:27): [krb5_child[49254]] [become_user] (0x0200): [RID#108] Trying to become user [940000000][940000000]. * (2025-12-03 8:37:27): [krb5_child[49254]] [main] (0x2000): [RID#108] Running as [940000000][940000000]. * (2025-12-03 8:37:27): [krb5_child[49254]] [set_lifetime_options] (0x0100): [RID#108] No specific renewable lifetime requested. * (2025-12-03 8:37:27): [krb5_child[49254]] [set_lifetime_options] (0x0100): [RID#108] No specific lifetime requested. * (2025-12-03 8:37:27): [krb5_child[49254]] [set_canonicalize_option] (0x0100): [RID#108] Canonicalization is set to [true] * (2025-12-03 8:37:27): [krb5_child[49254]] [main] (0x0400): [RID#108] Will perform auth * (2025-12-03 8:37:27): [krb5_child[49254]] [main] (0x0400): [RID#108] Will perform online auth * (2025-12-03 8:37:27): [krb5_child[49254]] [tgt_req_child] (0x1000): [RID#108] Attempting to get a TGT * (2025-12-03 8:37:27): [krb5_child[49254]] [get_and_save_tgt] (0x0400): [RID#108] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:37:27): [krb5_child[49254]] [sss_krb5_responder] (0x4000): [RID#108] Got question [password]. * (2025-12-03 8:37:27): [krb5_child[49254]] [get_and_save_tgt] (0x0020): [RID#108] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:37:27): [krb5_child[49254]] [map_krb5_error] (0x0020): [RID#108] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:39:19): [krb5_child[49388]] [get_and_save_tgt] (0x0020): [RID#116] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:39:19): [krb5_child[49388]] [main] (0x0400): [RID#116] krb5_child started. * (2025-12-03 8:39:19): [krb5_child[49388]] [unpack_buffer] (0x1000): [RID#116] total buffer size: [101] * (2025-12-03 8:39:19): [krb5_child[49388]] [unpack_buffer] (0x0100): [RID#116] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:39:19): [krb5_child[49388]] [unpack_buffer] (0x2000): [RID#116] No old ccache * (2025-12-03 8:39:19): [krb5_child[49388]] [unpack_buffer] (0x0100): [RID#116] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:39:19): [krb5_child[49388]] [k5c_precreate_ccache] (0x4000): [RID#116] Recreating ccache * (2025-12-03 8:39:19): [krb5_child[49388]] [k5c_setup_fast] (0x0100): [RID#116] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:39:19): [krb5_child[49388]] [find_principal_in_keytab] (0x4000): [RID#116] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:39:19): [krb5_child[49388]] [match_principal] (0x1000): [RID#116] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:39:19): [krb5_child[49388]] [check_fast_ccache] (0x0200): [RID#116] FAST TGT is still valid. * (2025-12-03 8:39:19): [krb5_child[49388]] [become_user] (0x0200): [RID#116] Trying to become user [940000000][940000000]. * (2025-12-03 8:39:19): [krb5_child[49388]] [main] (0x2000): [RID#116] Running as [940000000][940000000]. * (2025-12-03 8:39:19): [krb5_child[49388]] [set_lifetime_options] (0x0100): [RID#116] No specific renewable lifetime requested. * (2025-12-03 8:39:19): [krb5_child[49388]] [set_lifetime_options] (0x0100): [RID#116] No specific lifetime requested. * (2025-12-03 8:39:19): [krb5_child[49388]] [set_canonicalize_option] (0x0100): [RID#116] Canonicalization is set to [true] * (2025-12-03 8:39:19): [krb5_child[49388]] [main] (0x0400): [RID#116] Will perform auth * (2025-12-03 8:39:19): [krb5_child[49388]] [main] (0x0400): [RID#116] Will perform online auth * (2025-12-03 8:39:19): [krb5_child[49388]] [tgt_req_child] (0x1000): [RID#116] Attempting to get a TGT * (2025-12-03 8:39:19): [krb5_child[49388]] [get_and_save_tgt] (0x0400): [RID#116] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:39:19): [krb5_child[49388]] [sss_krb5_responder] (0x4000): [RID#116] Got question [password]. * (2025-12-03 8:39:19): [krb5_child[49388]] [get_and_save_tgt] (0x0020): [RID#116] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:39:19): [krb5_child[49388]] [map_krb5_error] (0x0020): [RID#116] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:39:23): [krb5_child[49392]] [get_and_save_tgt] (0x0020): [RID#118] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:39:23): [krb5_child[49392]] [main] (0x0400): [RID#118] krb5_child started. * (2025-12-03 8:39:23): [krb5_child[49392]] [unpack_buffer] (0x1000): [RID#118] total buffer size: [101] * (2025-12-03 8:39:23): [krb5_child[49392]] [unpack_buffer] (0x0100): [RID#118] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:39:23): [krb5_child[49392]] [unpack_buffer] (0x2000): [RID#118] No old ccache * (2025-12-03 8:39:23): [krb5_child[49392]] [unpack_buffer] (0x0100): [RID#118] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:39:23): [krb5_child[49392]] [k5c_precreate_ccache] (0x4000): [RID#118] Recreating ccache * (2025-12-03 8:39:23): [krb5_child[49392]] [k5c_setup_fast] (0x0100): [RID#118] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:39:23): [krb5_child[49392]] [find_principal_in_keytab] (0x4000): [RID#118] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:39:23): [krb5_child[49392]] [match_principal] (0x1000): [RID#118] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:39:23): [krb5_child[49392]] [check_fast_ccache] (0x0200): [RID#118] FAST TGT is still valid. * (2025-12-03 8:39:23): [krb5_child[49392]] [become_user] (0x0200): [RID#118] Trying to become user [940000000][940000000]. * (2025-12-03 8:39:23): [krb5_child[49392]] [main] (0x2000): [RID#118] Running as [940000000][940000000]. * (2025-12-03 8:39:23): [krb5_child[49392]] [set_lifetime_options] (0x0100): [RID#118] No specific renewable lifetime requested. * (2025-12-03 8:39:23): [krb5_child[49392]] [set_lifetime_options] (0x0100): [RID#118] No specific lifetime requested. * (2025-12-03 8:39:23): [krb5_child[49392]] [set_canonicalize_option] (0x0100): [RID#118] Canonicalization is set to [true] * (2025-12-03 8:39:23): [krb5_child[49392]] [main] (0x0400): [RID#118] Will perform auth * (2025-12-03 8:39:23): [krb5_child[49392]] [main] (0x0400): [RID#118] Will perform online auth * (2025-12-03 8:39:23): [krb5_child[49392]] [tgt_req_child] (0x1000): [RID#118] Attempting to get a TGT * (2025-12-03 8:39:23): [krb5_child[49392]] [get_and_save_tgt] (0x0400): [RID#118] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:39:23): [krb5_child[49392]] [sss_krb5_responder] (0x4000): [RID#118] Got question [password]. * (2025-12-03 8:39:23): [krb5_child[49392]] [get_and_save_tgt] (0x0020): [RID#118] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:39:23): [krb5_child[49392]] [map_krb5_error] (0x0020): [RID#118] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:43:22): [krb5_child[49635]] [get_and_save_tgt] (0x0020): [RID#130] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:43:22): [krb5_child[49635]] [main] (0x0400): [RID#130] krb5_child started. * (2025-12-03 8:43:22): [krb5_child[49635]] [unpack_buffer] (0x1000): [RID#130] total buffer size: [99] * (2025-12-03 8:43:22): [krb5_child[49635]] [unpack_buffer] (0x0100): [RID#130] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:43:22): [krb5_child[49635]] [unpack_buffer] (0x2000): [RID#130] No old ccache * (2025-12-03 8:43:22): [krb5_child[49635]] [unpack_buffer] (0x0100): [RID#130] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:43:22): [krb5_child[49635]] [k5c_precreate_ccache] (0x4000): [RID#130] Recreating ccache * (2025-12-03 8:43:22): [krb5_child[49635]] [k5c_setup_fast] (0x0100): [RID#130] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:43:22): [krb5_child[49635]] [find_principal_in_keytab] (0x4000): [RID#130] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:43:22): [krb5_child[49635]] [match_principal] (0x1000): [RID#130] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:43:22): [krb5_child[49635]] [check_fast_ccache] (0x0200): [RID#130] FAST TGT is still valid. * (2025-12-03 8:43:22): [krb5_child[49635]] [become_user] (0x0200): [RID#130] Trying to become user [940000000][940000000]. * (2025-12-03 8:43:22): [krb5_child[49635]] [main] (0x2000): [RID#130] Running as [940000000][940000000]. * (2025-12-03 8:43:22): [krb5_child[49635]] [set_lifetime_options] (0x0100): [RID#130] No specific renewable lifetime requested. * (2025-12-03 8:43:22): [krb5_child[49635]] [set_lifetime_options] (0x0100): [RID#130] No specific lifetime requested. * (2025-12-03 8:43:22): [krb5_child[49635]] [set_canonicalize_option] (0x0100): [RID#130] Canonicalization is set to [true] * (2025-12-03 8:43:22): [krb5_child[49635]] [main] (0x0400): [RID#130] Will perform auth * (2025-12-03 8:43:22): [krb5_child[49635]] [main] (0x0400): [RID#130] Will perform online auth * (2025-12-03 8:43:22): [krb5_child[49635]] [tgt_req_child] (0x1000): [RID#130] Attempting to get a TGT * (2025-12-03 8:43:22): [krb5_child[49635]] [get_and_save_tgt] (0x0400): [RID#130] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:43:22): [krb5_child[49635]] [sss_krb5_responder] (0x4000): [RID#130] Got question [password]. * (2025-12-03 8:43:22): [krb5_child[49635]] [get_and_save_tgt] (0x0020): [RID#130] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:43:22): [krb5_child[49635]] [map_krb5_error] (0x0020): [RID#130] 2138: [-1765328360][Preauthentication failed] (2025-12-03 8:43:26): [krb5_child[49667]] [get_and_save_tgt] (0x0020): [RID#132] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 8:43:26): [krb5_child[49667]] [main] (0x0400): [RID#132] krb5_child started. * (2025-12-03 8:43:26): [krb5_child[49667]] [unpack_buffer] (0x1000): [RID#132] total buffer size: [99] * (2025-12-03 8:43:26): [krb5_child[49667]] [unpack_buffer] (0x0100): [RID#132] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 8:43:26): [krb5_child[49667]] [unpack_buffer] (0x2000): [RID#132] No old ccache * (2025-12-03 8:43:26): [krb5_child[49667]] [unpack_buffer] (0x0100): [RID#132] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 8:43:26): [krb5_child[49667]] [k5c_precreate_ccache] (0x4000): [RID#132] Recreating ccache * (2025-12-03 8:43:26): [krb5_child[49667]] [k5c_setup_fast] (0x0100): [RID#132] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 8:43:26): [krb5_child[49667]] [find_principal_in_keytab] (0x4000): [RID#132] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 8:43:26): [krb5_child[49667]] [match_principal] (0x1000): [RID#132] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 8:43:26): [krb5_child[49667]] [check_fast_ccache] (0x0200): [RID#132] FAST TGT is still valid. * (2025-12-03 8:43:26): [krb5_child[49667]] [become_user] (0x0200): [RID#132] Trying to become user [940000000][940000000]. * (2025-12-03 8:43:26): [krb5_child[49667]] [main] (0x2000): [RID#132] Running as [940000000][940000000]. * (2025-12-03 8:43:26): [krb5_child[49667]] [set_lifetime_options] (0x0100): [RID#132] No specific renewable lifetime requested. * (2025-12-03 8:43:26): [krb5_child[49667]] [set_lifetime_options] (0x0100): [RID#132] No specific lifetime requested. * (2025-12-03 8:43:26): [krb5_child[49667]] [set_canonicalize_option] (0x0100): [RID#132] Canonicalization is set to [true] * (2025-12-03 8:43:26): [krb5_child[49667]] [main] (0x0400): [RID#132] Will perform auth * (2025-12-03 8:43:26): [krb5_child[49667]] [main] (0x0400): [RID#132] Will perform online auth * (2025-12-03 8:43:26): [krb5_child[49667]] [tgt_req_child] (0x1000): [RID#132] Attempting to get a TGT * (2025-12-03 8:43:26): [krb5_child[49667]] [get_and_save_tgt] (0x0400): [RID#132] Attempting kinit for realm [OOO.TEST] * (2025-12-03 8:43:26): [krb5_child[49667]] [get_and_save_tgt] (0x0020): [RID#132] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 8:43:26): [krb5_child[49667]] [map_krb5_error] (0x0020): [RID#132] 2138: [-1765328366][Client's credentials have been revoked] (2025-12-03 9:06:35): [krb5_child[51079]] [get_and_save_tgt] (0x0020): [RID#166] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 9:06:35): [krb5_child[51079]] [main] (0x0400): [RID#166] krb5_child started. * (2025-12-03 9:06:35): [krb5_child[51079]] [unpack_buffer] (0x1000): [RID#166] total buffer size: [96] * (2025-12-03 9:06:35): [krb5_child[51079]] [unpack_buffer] (0x0100): [RID#166] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 9:06:35): [krb5_child[51079]] [unpack_buffer] (0x2000): [RID#166] No old ccache * (2025-12-03 9:06:35): [krb5_child[51079]] [unpack_buffer] (0x0100): [RID#166] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 9:06:35): [krb5_child[51079]] [k5c_precreate_ccache] (0x4000): [RID#166] Recreating ccache * (2025-12-03 9:06:35): [krb5_child[51079]] [k5c_setup_fast] (0x0100): [RID#166] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 9:06:35): [krb5_child[51079]] [find_principal_in_keytab] (0x4000): [RID#166] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 9:06:35): [krb5_child[51079]] [match_principal] (0x1000): [RID#166] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 9:06:35): [krb5_child[51079]] [check_fast_ccache] (0x0200): [RID#166] FAST TGT is still valid. * (2025-12-03 9:06:35): [krb5_child[51079]] [become_user] (0x0200): [RID#166] Trying to become user [940000000][940000000]. * (2025-12-03 9:06:35): [krb5_child[51079]] [main] (0x2000): [RID#166] Running as [940000000][940000000]. * (2025-12-03 9:06:35): [krb5_child[51079]] [set_lifetime_options] (0x0100): [RID#166] No specific renewable lifetime requested. * (2025-12-03 9:06:35): [krb5_child[51079]] [set_lifetime_options] (0x0100): [RID#166] No specific lifetime requested. * (2025-12-03 9:06:35): [krb5_child[51079]] [set_canonicalize_option] (0x0100): [RID#166] Canonicalization is set to [true] * (2025-12-03 9:06:35): [krb5_child[51079]] [main] (0x0400): [RID#166] Will perform auth * (2025-12-03 9:06:35): [krb5_child[51079]] [main] (0x0400): [RID#166] Will perform online auth * (2025-12-03 9:06:35): [krb5_child[51079]] [tgt_req_child] (0x1000): [RID#166] Attempting to get a TGT * (2025-12-03 9:06:35): [krb5_child[51079]] [get_and_save_tgt] (0x0400): [RID#166] Attempting kinit for realm [OOO.TEST] * (2025-12-03 9:06:35): [krb5_child[51079]] [sss_krb5_responder] (0x4000): [RID#166] Got question [password]. * (2025-12-03 9:06:35): [krb5_child[51079]] [get_and_save_tgt] (0x0020): [RID#166] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 9:06:35): [krb5_child[51079]] [map_krb5_error] (0x0020): [RID#166] 2138: [-1765328360][Preauthentication failed] (2025-12-03 9:09:22): [krb5_child[51266]] [get_and_save_tgt] (0x0020): [RID#172] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 9:09:22): [krb5_child[51266]] [main] (0x0400): [RID#172] krb5_child started. * (2025-12-03 9:09:22): [krb5_child[51266]] [unpack_buffer] (0x1000): [RID#172] total buffer size: [101] * (2025-12-03 9:09:22): [krb5_child[51266]] [unpack_buffer] (0x0100): [RID#172] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 9:09:22): [krb5_child[51266]] [unpack_buffer] (0x2000): [RID#172] No old ccache * (2025-12-03 9:09:22): [krb5_child[51266]] [unpack_buffer] (0x0100): [RID#172] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 9:09:22): [krb5_child[51266]] [k5c_precreate_ccache] (0x4000): [RID#172] Recreating ccache * (2025-12-03 9:09:22): [krb5_child[51266]] [k5c_setup_fast] (0x0100): [RID#172] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 9:09:22): [krb5_child[51266]] [find_principal_in_keytab] (0x4000): [RID#172] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 9:09:22): [krb5_child[51266]] [match_principal] (0x1000): [RID#172] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 9:09:22): [krb5_child[51266]] [check_fast_ccache] (0x0200): [RID#172] FAST TGT is still valid. * (2025-12-03 9:09:22): [krb5_child[51266]] [become_user] (0x0200): [RID#172] Trying to become user [940000000][940000000]. * (2025-12-03 9:09:22): [krb5_child[51266]] [main] (0x2000): [RID#172] Running as [940000000][940000000]. * (2025-12-03 9:09:22): [krb5_child[51266]] [set_lifetime_options] (0x0100): [RID#172] No specific renewable lifetime requested. * (2025-12-03 9:09:22): [krb5_child[51266]] [set_lifetime_options] (0x0100): [RID#172] No specific lifetime requested. * (2025-12-03 9:09:22): [krb5_child[51266]] [set_canonicalize_option] (0x0100): [RID#172] Canonicalization is set to [true] * (2025-12-03 9:09:22): [krb5_child[51266]] [main] (0x0400): [RID#172] Will perform auth * (2025-12-03 9:09:22): [krb5_child[51266]] [main] (0x0400): [RID#172] Will perform online auth * (2025-12-03 9:09:22): [krb5_child[51266]] [tgt_req_child] (0x1000): [RID#172] Attempting to get a TGT * (2025-12-03 9:09:22): [krb5_child[51266]] [get_and_save_tgt] (0x0400): [RID#172] Attempting kinit for realm [OOO.TEST] * (2025-12-03 9:09:22): [krb5_child[51266]] [sss_krb5_responder] (0x4000): [RID#172] Got question [password]. * (2025-12-03 9:09:22): [krb5_child[51266]] [get_and_save_tgt] (0x0020): [RID#172] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 9:09:22): [krb5_child[51266]] [map_krb5_error] (0x0020): [RID#172] 2138: [-1765328360][Preauthentication failed] (2025-12-03 9:09:26): [krb5_child[51269]] [get_and_save_tgt] (0x0020): [RID#174] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-03 9:09:26): [krb5_child[51269]] [main] (0x0400): [RID#174] krb5_child started. * (2025-12-03 9:09:26): [krb5_child[51269]] [unpack_buffer] (0x1000): [RID#174] total buffer size: [101] * (2025-12-03 9:09:26): [krb5_child[51269]] [unpack_buffer] (0x0100): [RID#174] cmd [241 (auth)] uid [940000000] gid [940000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-03 9:09:26): [krb5_child[51269]] [unpack_buffer] (0x2000): [RID#174] No old ccache * (2025-12-03 9:09:26): [krb5_child[51269]] [unpack_buffer] (0x0100): [RID#174] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-03 9:09:26): [krb5_child[51269]] [k5c_precreate_ccache] (0x4000): [RID#174] Recreating ccache * (2025-12-03 9:09:26): [krb5_child[51269]] [k5c_setup_fast] (0x0100): [RID#174] Fast principal is set to [host/np0005543231.ooo.test@OOO.TEST] * (2025-12-03 9:09:26): [krb5_child[51269]] [find_principal_in_keytab] (0x4000): [RID#174] Trying to find principal host/np0005543231.ooo.test@OOO.TEST in keytab. * (2025-12-03 9:09:26): [krb5_child[51269]] [match_principal] (0x1000): [RID#174] Principal matched to the sample (host/np0005543231.ooo.test@OOO.TEST). * (2025-12-03 9:09:26): [krb5_child[51269]] [check_fast_ccache] (0x0200): [RID#174] FAST TGT is still valid. * (2025-12-03 9:09:26): [krb5_child[51269]] [become_user] (0x0200): [RID#174] Trying to become user [940000000][940000000]. * (2025-12-03 9:09:26): [krb5_child[51269]] [main] (0x2000): [RID#174] Running as [940000000][940000000]. * (2025-12-03 9:09:26): [krb5_child[51269]] [set_lifetime_options] (0x0100): [RID#174] No specific renewable lifetime requested. * (2025-12-03 9:09:26): [krb5_child[51269]] [set_lifetime_options] (0x0100): [RID#174] No specific lifetime requested. * (2025-12-03 9:09:26): [krb5_child[51269]] [set_canonicalize_option] (0x0100): [RID#174] Canonicalization is set to [true] * (2025-12-03 9:09:26): [krb5_child[51269]] [main] (0x0400): [RID#174] Will perform auth * (2025-12-03 9:09:26): [krb5_child[51269]] [main] (0x0400): [RID#174] Will perform online auth * (2025-12-03 9:09:26): [krb5_child[51269]] [tgt_req_child] (0x1000): [RID#174] Attempting to get a TGT * (2025-12-03 9:09:26): [krb5_child[51269]] [get_and_save_tgt] (0x0400): [RID#174] Attempting kinit for realm [OOO.TEST] * (2025-12-03 9:09:26): [krb5_child[51269]] [sss_krb5_responder] (0x4000): [RID#174] Got question [password]. * (2025-12-03 9:09:26): [krb5_child[51269]] [get_and_save_tgt] (0x0020): [RID#174] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-03 9:09:26): [krb5_child[51269]] [map_krb5_error] (0x0020): [RID#174] 2138: [-1765328360][Preauthentication failed]