(2026-02-23 8:10:24): [krb5_child[51011]] [get_and_save_tgt] (0x0020): [RID#20] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-23 8:10:24): [krb5_child[51011]] [main] (0x0400): [RID#20] krb5_child started. * (2026-02-23 8:10:24): [krb5_child[51011]] [unpack_buffer] (0x1000): [RID#20] total buffer size: [101] * (2026-02-23 8:10:24): [krb5_child[51011]] [unpack_buffer] (0x0100): [RID#20] cmd [241 (auth)] uid [1777200000] gid [1777200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-23 8:10:24): [krb5_child[51011]] [unpack_buffer] (0x2000): [RID#20] No old ccache * (2026-02-23 8:10:24): [krb5_child[51011]] [unpack_buffer] (0x0100): [RID#20] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-23 8:10:24): [krb5_child[51011]] [k5c_precreate_ccache] (0x4000): [RID#20] Recreating ccache * (2026-02-23 8:10:24): [krb5_child[51011]] [k5c_setup_fast] (0x0100): [RID#20] Fast principal is set to [host/np0005626485.ooo.test@OOO.TEST] * (2026-02-23 8:10:24): [krb5_child[51011]] [find_principal_in_keytab] (0x4000): [RID#20] Trying to find principal host/np0005626485.ooo.test@OOO.TEST in keytab. * (2026-02-23 8:10:24): [krb5_child[51011]] [match_principal] (0x1000): [RID#20] Principal matched to the sample (host/np0005626485.ooo.test@OOO.TEST). * (2026-02-23 8:10:24): [krb5_child[51011]] [check_fast_ccache] (0x0200): [RID#20] FAST TGT is still valid. * (2026-02-23 8:10:24): [krb5_child[51011]] [become_user] (0x0200): [RID#20] Trying to become user [1777200000][1777200000]. * (2026-02-23 8:10:24): [krb5_child[51011]] [main] (0x2000): [RID#20] Running as [1777200000][1777200000]. * (2026-02-23 8:10:24): [krb5_child[51011]] [set_lifetime_options] (0x0100): [RID#20] No specific renewable lifetime requested. * (2026-02-23 8:10:24): [krb5_child[51011]] [set_lifetime_options] (0x0100): [RID#20] No specific lifetime requested. * (2026-02-23 8:10:24): [krb5_child[51011]] [set_canonicalize_option] (0x0100): [RID#20] Canonicalization is set to [true] * (2026-02-23 8:10:24): [krb5_child[51011]] [main] (0x0400): [RID#20] Will perform auth * (2026-02-23 8:10:24): [krb5_child[51011]] [main] (0x0400): [RID#20] Will perform online auth * (2026-02-23 8:10:24): [krb5_child[51011]] [tgt_req_child] (0x1000): [RID#20] Attempting to get a TGT * (2026-02-23 8:10:24): [krb5_child[51011]] [get_and_save_tgt] (0x0400): [RID#20] Attempting kinit for realm [OOO.TEST] * (2026-02-23 8:10:24): [krb5_child[51011]] [sss_krb5_responder] (0x4000): [RID#20] Got question [password]. * (2026-02-23 8:10:24): [krb5_child[51011]] [get_and_save_tgt] (0x0020): [RID#20] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-23 8:10:24): [krb5_child[51011]] [map_krb5_error] (0x0020): [RID#20] 2138: [-1765328360][Preauthentication failed] (2026-02-23 8:12:48): [krb5_child[55700]] [get_and_save_tgt] (0x0020): [RID#24] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-23 8:12:48): [krb5_child[55700]] [main] (0x0400): [RID#24] krb5_child started. * (2026-02-23 8:12:48): [krb5_child[55700]] [unpack_buffer] (0x1000): [RID#24] total buffer size: [99] * (2026-02-23 8:12:48): [krb5_child[55700]] [unpack_buffer] (0x0100): [RID#24] cmd [241 (auth)] uid [1777200000] gid [1777200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-23 8:12:48): [krb5_child[55700]] [unpack_buffer] (0x2000): [RID#24] No old ccache * (2026-02-23 8:12:48): [krb5_child[55700]] [unpack_buffer] (0x0100): [RID#24] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-23 8:12:48): [krb5_child[55700]] [k5c_precreate_ccache] (0x4000): [RID#24] Recreating ccache * (2026-02-23 8:12:48): [krb5_child[55700]] [k5c_setup_fast] (0x0100): [RID#24] Fast principal is set to [host/np0005626485.ooo.test@OOO.TEST] * (2026-02-23 8:12:48): [krb5_child[55700]] [find_principal_in_keytab] (0x4000): [RID#24] Trying to find principal host/np0005626485.ooo.test@OOO.TEST in keytab. * (2026-02-23 8:12:48): [krb5_child[55700]] [match_principal] (0x1000): [RID#24] Principal matched to the sample (host/np0005626485.ooo.test@OOO.TEST). * (2026-02-23 8:12:48): [krb5_child[55700]] [check_fast_ccache] (0x0200): [RID#24] FAST TGT is still valid. * (2026-02-23 8:12:48): [krb5_child[55700]] [become_user] (0x0200): [RID#24] Trying to become user [1777200000][1777200000]. * (2026-02-23 8:12:48): [krb5_child[55700]] [main] (0x2000): [RID#24] Running as [1777200000][1777200000]. * (2026-02-23 8:12:48): [krb5_child[55700]] [set_lifetime_options] (0x0100): [RID#24] No specific renewable lifetime requested. * (2026-02-23 8:12:48): [krb5_child[55700]] [set_lifetime_options] (0x0100): [RID#24] No specific lifetime requested. * (2026-02-23 8:12:48): [krb5_child[55700]] [set_canonicalize_option] (0x0100): [RID#24] Canonicalization is set to [true] * (2026-02-23 8:12:48): [krb5_child[55700]] [main] (0x0400): [RID#24] Will perform auth * (2026-02-23 8:12:48): [krb5_child[55700]] [main] (0x0400): [RID#24] Will perform online auth * (2026-02-23 8:12:48): [krb5_child[55700]] [tgt_req_child] (0x1000): [RID#24] Attempting to get a TGT * (2026-02-23 8:12:48): [krb5_child[55700]] [get_and_save_tgt] (0x0400): [RID#24] Attempting kinit for realm [OOO.TEST] * (2026-02-23 8:12:48): [krb5_child[55700]] [sss_krb5_responder] (0x4000): [RID#24] Got question [password]. * (2026-02-23 8:12:48): [krb5_child[55700]] [get_and_save_tgt] (0x0020): [RID#24] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-23 8:12:48): [krb5_child[55700]] [map_krb5_error] (0x0020): [RID#24] 2138: [-1765328360][Preauthentication failed] (2026-02-23 8:15:54): [krb5_child[56748]] [get_and_save_tgt] (0x0020): [RID#28] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-23 8:15:54): [krb5_child[56748]] [main] (0x0400): [RID#28] krb5_child started. * (2026-02-23 8:15:54): [krb5_child[56748]] [unpack_buffer] (0x1000): [RID#28] total buffer size: [100] * (2026-02-23 8:15:54): [krb5_child[56748]] [unpack_buffer] (0x0100): [RID#28] cmd [241 (auth)] uid [1777200000] gid [1777200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-23 8:15:54): [krb5_child[56748]] [unpack_buffer] (0x2000): [RID#28] No old ccache * (2026-02-23 8:15:54): [krb5_child[56748]] [unpack_buffer] (0x0100): [RID#28] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-23 8:15:54): [krb5_child[56748]] [k5c_precreate_ccache] (0x4000): [RID#28] Recreating ccache * (2026-02-23 8:15:54): [krb5_child[56748]] [k5c_setup_fast] (0x0100): [RID#28] Fast principal is set to [host/np0005626485.ooo.test@OOO.TEST] * (2026-02-23 8:15:54): [krb5_child[56748]] [find_principal_in_keytab] (0x4000): [RID#28] Trying to find principal host/np0005626485.ooo.test@OOO.TEST in keytab. * (2026-02-23 8:15:54): [krb5_child[56748]] [match_principal] (0x1000): [RID#28] Principal matched to the sample (host/np0005626485.ooo.test@OOO.TEST). * (2026-02-23 8:15:54): [krb5_child[56748]] [check_fast_ccache] (0x0200): [RID#28] FAST TGT is still valid. * (2026-02-23 8:15:54): [krb5_child[56748]] [become_user] (0x0200): [RID#28] Trying to become user [1777200000][1777200000]. * (2026-02-23 8:15:54): [krb5_child[56748]] [main] (0x2000): [RID#28] Running as [1777200000][1777200000]. * (2026-02-23 8:15:54): [krb5_child[56748]] [set_lifetime_options] (0x0100): [RID#28] No specific renewable lifetime requested. * (2026-02-23 8:15:54): [krb5_child[56748]] [set_lifetime_options] (0x0100): [RID#28] No specific lifetime requested. * (2026-02-23 8:15:54): [krb5_child[56748]] [set_canonicalize_option] (0x0100): [RID#28] Canonicalization is set to [true] * (2026-02-23 8:15:54): [krb5_child[56748]] [main] (0x0400): [RID#28] Will perform auth * (2026-02-23 8:15:54): [krb5_child[56748]] [main] (0x0400): [RID#28] Will perform online auth * (2026-02-23 8:15:54): [krb5_child[56748]] [tgt_req_child] (0x1000): [RID#28] Attempting to get a TGT * (2026-02-23 8:15:54): [krb5_child[56748]] [get_and_save_tgt] (0x0400): [RID#28] Attempting kinit for realm [OOO.TEST] * (2026-02-23 8:15:54): [krb5_child[56748]] [sss_krb5_responder] (0x4000): [RID#28] Got question [password]. * (2026-02-23 8:15:54): [krb5_child[56748]] [get_and_save_tgt] (0x0020): [RID#28] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-23 8:15:54): [krb5_child[56748]] [map_krb5_error] (0x0020): [RID#28] 2138: [-1765328360][Preauthentication failed] (2026-02-23 8:25:20): [krb5_child[68323]] [get_and_save_tgt] (0x0020): [RID#43] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-23 8:25:20): [krb5_child[68323]] [main] (0x0400): [RID#43] krb5_child started. * (2026-02-23 8:25:20): [krb5_child[68323]] [unpack_buffer] (0x1000): [RID#43] total buffer size: [100] * (2026-02-23 8:25:20): [krb5_child[68323]] [unpack_buffer] (0x0100): [RID#43] cmd [241 (auth)] uid [1777200000] gid [1777200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-23 8:25:20): [krb5_child[68323]] [unpack_buffer] (0x2000): [RID#43] No old ccache * (2026-02-23 8:25:20): [krb5_child[68323]] [unpack_buffer] (0x0100): [RID#43] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-23 8:25:20): [krb5_child[68323]] [k5c_precreate_ccache] (0x4000): [RID#43] Recreating ccache * (2026-02-23 8:25:20): [krb5_child[68323]] [k5c_setup_fast] (0x0100): [RID#43] Fast principal is set to [host/np0005626485.ooo.test@OOO.TEST] * (2026-02-23 8:25:20): [krb5_child[68323]] [find_principal_in_keytab] (0x4000): [RID#43] Trying to find principal host/np0005626485.ooo.test@OOO.TEST in keytab. * (2026-02-23 8:25:20): [krb5_child[68323]] [match_principal] (0x1000): [RID#43] Principal matched to the sample (host/np0005626485.ooo.test@OOO.TEST). * (2026-02-23 8:25:20): [krb5_child[68323]] [check_fast_ccache] (0x0200): [RID#43] FAST TGT is still valid. * (2026-02-23 8:25:20): [krb5_child[68323]] [become_user] (0x0200): [RID#43] Trying to become user [1777200000][1777200000]. * (2026-02-23 8:25:20): [krb5_child[68323]] [main] (0x2000): [RID#43] Running as [1777200000][1777200000]. * (2026-02-23 8:25:20): [krb5_child[68323]] [set_lifetime_options] (0x0100): [RID#43] No specific renewable lifetime requested. * (2026-02-23 8:25:20): [krb5_child[68323]] [set_lifetime_options] (0x0100): [RID#43] No specific lifetime requested. * (2026-02-23 8:25:20): [krb5_child[68323]] [set_canonicalize_option] (0x0100): [RID#43] Canonicalization is set to [true] * (2026-02-23 8:25:20): [krb5_child[68323]] [main] (0x0400): [RID#43] Will perform auth * (2026-02-23 8:25:20): [krb5_child[68323]] [main] (0x0400): [RID#43] Will perform online auth * (2026-02-23 8:25:20): [krb5_child[68323]] [tgt_req_child] (0x1000): [RID#43] Attempting to get a TGT * (2026-02-23 8:25:20): [krb5_child[68323]] [get_and_save_tgt] (0x0400): [RID#43] Attempting kinit for realm [OOO.TEST] * (2026-02-23 8:25:20): [krb5_child[68323]] [sss_krb5_responder] (0x4000): [RID#43] Got question [password]. * (2026-02-23 8:25:20): [krb5_child[68323]] [get_and_save_tgt] (0x0020): [RID#43] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-23 8:25:20): [krb5_child[68323]] [map_krb5_error] (0x0020): [RID#43] 2138: [-1765328360][Preauthentication failed]