(2026-03-14 8:59:36): [krb5_child[275635]] [get_and_save_tgt] (0x0020): [RID#50] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:59:36): [krb5_child[275635]] [main] (0x0400): [RID#50] krb5_child started. * (2026-03-14 8:59:36): [krb5_child[275635]] [unpack_buffer] (0x1000): [RID#50] total buffer size: [99] * (2026-03-14 8:59:36): [krb5_child[275635]] [unpack_buffer] (0x0100): [RID#50] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:59:36): [krb5_child[275635]] [unpack_buffer] (0x2000): [RID#50] No old ccache * (2026-03-14 8:59:36): [krb5_child[275635]] [unpack_buffer] (0x0100): [RID#50] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:59:36): [krb5_child[275635]] [k5c_precreate_ccache] (0x4000): [RID#50] Recreating ccache * (2026-03-14 8:59:36): [krb5_child[275635]] [k5c_setup_fast] (0x0100): [RID#50] Fast principal is set to [host/np0005647032.ooo.test@OOO.TEST] * (2026-03-14 8:59:36): [krb5_child[275635]] [find_principal_in_keytab] (0x4000): [RID#50] Trying to find principal host/np0005647032.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:59:36): [krb5_child[275635]] [match_principal] (0x1000): [RID#50] Principal matched to the sample (host/np0005647032.ooo.test@OOO.TEST). * (2026-03-14 8:59:36): [krb5_child[275635]] [check_fast_ccache] (0x0200): [RID#50] FAST TGT is still valid. * (2026-03-14 8:59:36): [krb5_child[275635]] [become_user] (0x0200): [RID#50] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:59:36): [krb5_child[275635]] [main] (0x2000): [RID#50] Running as [1592400000][1592400000]. * (2026-03-14 8:59:36): [krb5_child[275635]] [set_lifetime_options] (0x0100): [RID#50] No specific renewable lifetime requested. * (2026-03-14 8:59:36): [krb5_child[275635]] [set_lifetime_options] (0x0100): [RID#50] No specific lifetime requested. * (2026-03-14 8:59:36): [krb5_child[275635]] [set_canonicalize_option] (0x0100): [RID#50] Canonicalization is set to [true] * (2026-03-14 8:59:36): [krb5_child[275635]] [main] (0x0400): [RID#50] Will perform auth * (2026-03-14 8:59:36): [krb5_child[275635]] [main] (0x0400): [RID#50] Will perform online auth * (2026-03-14 8:59:36): [krb5_child[275635]] [tgt_req_child] (0x1000): [RID#50] Attempting to get a TGT * (2026-03-14 8:59:36): [krb5_child[275635]] [get_and_save_tgt] (0x0400): [RID#50] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:59:36): [krb5_child[275635]] [sss_krb5_responder] (0x4000): [RID#50] Got question [password]. * (2026-03-14 8:59:36): [krb5_child[275635]] [get_and_save_tgt] (0x0020): [RID#50] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:59:36): [krb5_child[275635]] [map_krb5_error] (0x0020): [RID#50] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:15:31): [krb5_child[343121]] [get_and_save_tgt] (0x0020): [RID#65] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:15:31): [krb5_child[343121]] [main] (0x0400): [RID#65] krb5_child started. * (2026-03-14 9:15:31): [krb5_child[343121]] [unpack_buffer] (0x1000): [RID#65] total buffer size: [95] * (2026-03-14 9:15:31): [krb5_child[343121]] [unpack_buffer] (0x0100): [RID#65] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:15:31): [krb5_child[343121]] [unpack_buffer] (0x2000): [RID#65] No old ccache * (2026-03-14 9:15:31): [krb5_child[343121]] [unpack_buffer] (0x0100): [RID#65] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:15:31): [krb5_child[343121]] [k5c_precreate_ccache] (0x4000): [RID#65] Recreating ccache * (2026-03-14 9:15:31): [krb5_child[343121]] [k5c_setup_fast] (0x0100): [RID#65] Fast principal is set to [host/np0005647032.ooo.test@OOO.TEST] * (2026-03-14 9:15:31): [krb5_child[343121]] [find_principal_in_keytab] (0x4000): [RID#65] Trying to find principal host/np0005647032.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:15:31): [krb5_child[343121]] [match_principal] (0x1000): [RID#65] Principal matched to the sample (host/np0005647032.ooo.test@OOO.TEST). * (2026-03-14 9:15:31): [krb5_child[343121]] [check_fast_ccache] (0x0200): [RID#65] FAST TGT is still valid. * (2026-03-14 9:15:31): [krb5_child[343121]] [become_user] (0x0200): [RID#65] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:15:31): [krb5_child[343121]] [main] (0x2000): [RID#65] Running as [1592400000][1592400000]. * (2026-03-14 9:15:31): [krb5_child[343121]] [set_lifetime_options] (0x0100): [RID#65] No specific renewable lifetime requested. * (2026-03-14 9:15:31): [krb5_child[343121]] [set_lifetime_options] (0x0100): [RID#65] No specific lifetime requested. * (2026-03-14 9:15:31): [krb5_child[343121]] [set_canonicalize_option] (0x0100): [RID#65] Canonicalization is set to [true] * (2026-03-14 9:15:31): [krb5_child[343121]] [main] (0x0400): [RID#65] Will perform auth * (2026-03-14 9:15:31): [krb5_child[343121]] [main] (0x0400): [RID#65] Will perform online auth * (2026-03-14 9:15:31): [krb5_child[343121]] [tgt_req_child] (0x1000): [RID#65] Attempting to get a TGT * (2026-03-14 9:15:31): [krb5_child[343121]] [get_and_save_tgt] (0x0400): [RID#65] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:15:31): [krb5_child[343121]] [sss_krb5_responder] (0x4000): [RID#65] Got question [password]. * (2026-03-14 9:15:31): [krb5_child[343121]] [get_and_save_tgt] (0x0020): [RID#65] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:15:31): [krb5_child[343121]] [map_krb5_error] (0x0020): [RID#65] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:19:42): [krb5_child[353375]] [get_and_save_tgt] (0x0020): [RID#76] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:19:42): [krb5_child[353375]] [main] (0x0400): [RID#76] krb5_child started. * (2026-03-14 9:19:42): [krb5_child[353375]] [unpack_buffer] (0x1000): [RID#76] total buffer size: [95] * (2026-03-14 9:19:42): [krb5_child[353375]] [unpack_buffer] (0x0100): [RID#76] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:19:42): [krb5_child[353375]] [unpack_buffer] (0x2000): [RID#76] No old ccache * (2026-03-14 9:19:42): [krb5_child[353375]] [unpack_buffer] (0x0100): [RID#76] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:19:42): [krb5_child[353375]] [k5c_precreate_ccache] (0x4000): [RID#76] Recreating ccache * (2026-03-14 9:19:42): [krb5_child[353375]] [k5c_setup_fast] (0x0100): [RID#76] Fast principal is set to [host/np0005647032.ooo.test@OOO.TEST] * (2026-03-14 9:19:42): [krb5_child[353375]] [find_principal_in_keytab] (0x4000): [RID#76] Trying to find principal host/np0005647032.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:19:42): [krb5_child[353375]] [match_principal] (0x1000): [RID#76] Principal matched to the sample (host/np0005647032.ooo.test@OOO.TEST). * (2026-03-14 9:19:42): [krb5_child[353375]] [check_fast_ccache] (0x0200): [RID#76] FAST TGT is still valid. * (2026-03-14 9:19:42): [krb5_child[353375]] [become_user] (0x0200): [RID#76] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:19:42): [krb5_child[353375]] [main] (0x2000): [RID#76] Running as [1592400000][1592400000]. * (2026-03-14 9:19:42): [krb5_child[353375]] [set_lifetime_options] (0x0100): [RID#76] No specific renewable lifetime requested. * (2026-03-14 9:19:42): [krb5_child[353375]] [set_lifetime_options] (0x0100): [RID#76] No specific lifetime requested. * (2026-03-14 9:19:42): [krb5_child[353375]] [set_canonicalize_option] (0x0100): [RID#76] Canonicalization is set to [true] * (2026-03-14 9:19:42): [krb5_child[353375]] [main] (0x0400): [RID#76] Will perform auth * (2026-03-14 9:19:42): [krb5_child[353375]] [main] (0x0400): [RID#76] Will perform online auth * (2026-03-14 9:19:42): [krb5_child[353375]] [tgt_req_child] (0x1000): [RID#76] Attempting to get a TGT * (2026-03-14 9:19:42): [krb5_child[353375]] [get_and_save_tgt] (0x0400): [RID#76] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:19:42): [krb5_child[353375]] [get_and_save_tgt] (0x0020): [RID#76] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:19:42): [krb5_child[353375]] [map_krb5_error] (0x0020): [RID#76] 2138: [-1765328366][Client's credentials have been revoked] (2026-03-14 9:20:39): [krb5_child[353933]] [get_and_save_tgt] (0x0020): [RID#81] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:20:39): [krb5_child[353933]] [main] (0x0400): [RID#81] krb5_child started. * (2026-03-14 9:20:39): [krb5_child[353933]] [unpack_buffer] (0x1000): [RID#81] total buffer size: [95] * (2026-03-14 9:20:39): [krb5_child[353933]] [unpack_buffer] (0x0100): [RID#81] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:20:39): [krb5_child[353933]] [unpack_buffer] (0x2000): [RID#81] No old ccache * (2026-03-14 9:20:39): [krb5_child[353933]] [unpack_buffer] (0x0100): [RID#81] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:20:39): [krb5_child[353933]] [k5c_precreate_ccache] (0x4000): [RID#81] Recreating ccache * (2026-03-14 9:20:39): [krb5_child[353933]] [k5c_setup_fast] (0x0100): [RID#81] Fast principal is set to [host/np0005647032.ooo.test@OOO.TEST] * (2026-03-14 9:20:39): [krb5_child[353933]] [find_principal_in_keytab] (0x4000): [RID#81] Trying to find principal host/np0005647032.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:20:39): [krb5_child[353933]] [match_principal] (0x1000): [RID#81] Principal matched to the sample (host/np0005647032.ooo.test@OOO.TEST). * (2026-03-14 9:20:39): [krb5_child[353933]] [check_fast_ccache] (0x0200): [RID#81] FAST TGT is still valid. * (2026-03-14 9:20:39): [krb5_child[353933]] [become_user] (0x0200): [RID#81] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:20:39): [krb5_child[353933]] [main] (0x2000): [RID#81] Running as [1592400000][1592400000]. * (2026-03-14 9:20:39): [krb5_child[353933]] [set_lifetime_options] (0x0100): [RID#81] No specific renewable lifetime requested. * (2026-03-14 9:20:39): [krb5_child[353933]] [set_lifetime_options] (0x0100): [RID#81] No specific lifetime requested. * (2026-03-14 9:20:39): [krb5_child[353933]] [set_canonicalize_option] (0x0100): [RID#81] Canonicalization is set to [true] * (2026-03-14 9:20:39): [krb5_child[353933]] [main] (0x0400): [RID#81] Will perform auth * (2026-03-14 9:20:39): [krb5_child[353933]] [main] (0x0400): [RID#81] Will perform online auth * (2026-03-14 9:20:39): [krb5_child[353933]] [tgt_req_child] (0x1000): [RID#81] Attempting to get a TGT * (2026-03-14 9:20:39): [krb5_child[353933]] [get_and_save_tgt] (0x0400): [RID#81] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:20:39): [krb5_child[353933]] [get_and_save_tgt] (0x0020): [RID#81] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:20:39): [krb5_child[353933]] [map_krb5_error] (0x0020): [RID#81] 2138: [-1765328366][Client's credentials have been revoked]