(2026-03-14 8:09:09): [krb5_child[39686]] [get_and_save_tgt] (0x0020): [RID#7] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:09:09): [krb5_child[39686]] [main] (0x0400): [RID#7] krb5_child started. * (2026-03-14 8:09:09): [krb5_child[39686]] [unpack_buffer] (0x1000): [RID#7] total buffer size: [97] * (2026-03-14 8:09:09): [krb5_child[39686]] [unpack_buffer] (0x0100): [RID#7] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:09:09): [krb5_child[39686]] [unpack_buffer] (0x2000): [RID#7] No old ccache * (2026-03-14 8:09:09): [krb5_child[39686]] [unpack_buffer] (0x0100): [RID#7] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:09:09): [krb5_child[39686]] [k5c_precreate_ccache] (0x4000): [RID#7] Recreating ccache * (2026-03-14 8:09:09): [krb5_child[39686]] [k5c_setup_fast] (0x0100): [RID#7] Fast principal is set to [host/np0005647033.ooo.test@OOO.TEST] * (2026-03-14 8:09:09): [krb5_child[39686]] [find_principal_in_keytab] (0x4000): [RID#7] Trying to find principal host/np0005647033.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:09:09): [krb5_child[39686]] [match_principal] (0x1000): [RID#7] Principal matched to the sample (host/np0005647033.ooo.test@OOO.TEST). * (2026-03-14 8:09:09): [krb5_child[39686]] [check_fast_ccache] (0x0200): [RID#7] FAST TGT is still valid. * (2026-03-14 8:09:09): [krb5_child[39686]] [become_user] (0x0200): [RID#7] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:09:09): [krb5_child[39686]] [main] (0x2000): [RID#7] Running as [1592400000][1592400000]. * (2026-03-14 8:09:09): [krb5_child[39686]] [set_lifetime_options] (0x0100): [RID#7] No specific renewable lifetime requested. * (2026-03-14 8:09:09): [krb5_child[39686]] [set_lifetime_options] (0x0100): [RID#7] No specific lifetime requested. * (2026-03-14 8:09:09): [krb5_child[39686]] [set_canonicalize_option] (0x0100): [RID#7] Canonicalization is set to [true] * (2026-03-14 8:09:09): [krb5_child[39686]] [main] (0x0400): [RID#7] Will perform auth * (2026-03-14 8:09:09): [krb5_child[39686]] [main] (0x0400): [RID#7] Will perform online auth * (2026-03-14 8:09:09): [krb5_child[39686]] [tgt_req_child] (0x1000): [RID#7] Attempting to get a TGT * (2026-03-14 8:09:09): [krb5_child[39686]] [get_and_save_tgt] (0x0400): [RID#7] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:09:09): [krb5_child[39686]] [sss_krb5_responder] (0x4000): [RID#7] Got question [password]. * (2026-03-14 8:09:09): [krb5_child[39686]] [get_and_save_tgt] (0x0020): [RID#7] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:09:09): [krb5_child[39686]] [map_krb5_error] (0x0020): [RID#7] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:10:06): [krb5_child[40892]] [get_and_save_tgt] (0x0020): [RID#14] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:10:06): [krb5_child[40892]] [main] (0x0400): [RID#14] krb5_child started. * (2026-03-14 8:10:06): [krb5_child[40892]] [unpack_buffer] (0x1000): [RID#14] total buffer size: [97] * (2026-03-14 8:10:06): [krb5_child[40892]] [unpack_buffer] (0x0100): [RID#14] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:10:06): [krb5_child[40892]] [unpack_buffer] (0x2000): [RID#14] No old ccache * (2026-03-14 8:10:06): [krb5_child[40892]] [unpack_buffer] (0x0100): [RID#14] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:10:06): [krb5_child[40892]] [k5c_precreate_ccache] (0x4000): [RID#14] Recreating ccache * (2026-03-14 8:10:06): [krb5_child[40892]] [k5c_setup_fast] (0x0100): [RID#14] Fast principal is set to [host/np0005647033.ooo.test@OOO.TEST] * (2026-03-14 8:10:06): [krb5_child[40892]] [find_principal_in_keytab] (0x4000): [RID#14] Trying to find principal host/np0005647033.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:10:06): [krb5_child[40892]] [match_principal] (0x1000): [RID#14] Principal matched to the sample (host/np0005647033.ooo.test@OOO.TEST). * (2026-03-14 8:10:06): [krb5_child[40892]] [check_fast_ccache] (0x0200): [RID#14] FAST TGT is still valid. * (2026-03-14 8:10:06): [krb5_child[40892]] [become_user] (0x0200): [RID#14] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:10:06): [krb5_child[40892]] [main] (0x2000): [RID#14] Running as [1592400000][1592400000]. * (2026-03-14 8:10:06): [krb5_child[40892]] [set_lifetime_options] (0x0100): [RID#14] No specific renewable lifetime requested. * (2026-03-14 8:10:06): [krb5_child[40892]] [set_lifetime_options] (0x0100): [RID#14] No specific lifetime requested. * (2026-03-14 8:10:06): [krb5_child[40892]] [set_canonicalize_option] (0x0100): [RID#14] Canonicalization is set to [true] * (2026-03-14 8:10:06): [krb5_child[40892]] [main] (0x0400): [RID#14] Will perform auth * (2026-03-14 8:10:06): [krb5_child[40892]] [main] (0x0400): [RID#14] Will perform online auth * (2026-03-14 8:10:06): [krb5_child[40892]] [tgt_req_child] (0x1000): [RID#14] Attempting to get a TGT * (2026-03-14 8:10:06): [krb5_child[40892]] [get_and_save_tgt] (0x0400): [RID#14] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:10:06): [krb5_child[40892]] [sss_krb5_responder] (0x4000): [RID#14] Got question [password]. * (2026-03-14 8:10:06): [krb5_child[40892]] [get_and_save_tgt] (0x0020): [RID#14] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:10:06): [krb5_child[40892]] [map_krb5_error] (0x0020): [RID#14] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:10:11): [krb5_child[40986]] [get_and_save_tgt] (0x0020): [RID#16] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:10:11): [krb5_child[40986]] [main] (0x0400): [RID#16] krb5_child started. * (2026-03-14 8:10:11): [krb5_child[40986]] [unpack_buffer] (0x1000): [RID#16] total buffer size: [97] * (2026-03-14 8:10:11): [krb5_child[40986]] [unpack_buffer] (0x0100): [RID#16] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:10:11): [krb5_child[40986]] [unpack_buffer] (0x2000): [RID#16] No old ccache * (2026-03-14 8:10:11): [krb5_child[40986]] [unpack_buffer] (0x0100): [RID#16] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:10:11): [krb5_child[40986]] [k5c_precreate_ccache] (0x4000): [RID#16] Recreating ccache * (2026-03-14 8:10:11): [krb5_child[40986]] [k5c_setup_fast] (0x0100): [RID#16] Fast principal is set to [host/np0005647033.ooo.test@OOO.TEST] * (2026-03-14 8:10:11): [krb5_child[40986]] [find_principal_in_keytab] (0x4000): [RID#16] Trying to find principal host/np0005647033.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:10:11): [krb5_child[40986]] [match_principal] (0x1000): [RID#16] Principal matched to the sample (host/np0005647033.ooo.test@OOO.TEST). * (2026-03-14 8:10:11): [krb5_child[40986]] [check_fast_ccache] (0x0200): [RID#16] FAST TGT is still valid. * (2026-03-14 8:10:11): [krb5_child[40986]] [become_user] (0x0200): [RID#16] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:10:11): [krb5_child[40986]] [main] (0x2000): [RID#16] Running as [1592400000][1592400000]. * (2026-03-14 8:10:11): [krb5_child[40986]] [set_lifetime_options] (0x0100): [RID#16] No specific renewable lifetime requested. * (2026-03-14 8:10:11): [krb5_child[40986]] [set_lifetime_options] (0x0100): [RID#16] No specific lifetime requested. * (2026-03-14 8:10:11): [krb5_child[40986]] [set_canonicalize_option] (0x0100): [RID#16] Canonicalization is set to [true] * (2026-03-14 8:10:11): [krb5_child[40986]] [main] (0x0400): [RID#16] Will perform auth * (2026-03-14 8:10:11): [krb5_child[40986]] [main] (0x0400): [RID#16] Will perform online auth * (2026-03-14 8:10:11): [krb5_child[40986]] [tgt_req_child] (0x1000): [RID#16] Attempting to get a TGT * (2026-03-14 8:10:11): [krb5_child[40986]] [get_and_save_tgt] (0x0400): [RID#16] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:10:11): [krb5_child[40986]] [sss_krb5_responder] (0x4000): [RID#16] Got question [password]. * (2026-03-14 8:10:11): [krb5_child[40986]] [get_and_save_tgt] (0x0020): [RID#16] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:10:11): [krb5_child[40986]] [map_krb5_error] (0x0020): [RID#16] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:10:24): [krb5_child[41188]] [get_and_save_tgt] (0x0020): [RID#21] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:10:24): [krb5_child[41188]] [main] (0x0400): [RID#21] krb5_child started. * (2026-03-14 8:10:24): [krb5_child[41188]] [unpack_buffer] (0x1000): [RID#21] total buffer size: [99] * (2026-03-14 8:10:24): [krb5_child[41188]] [unpack_buffer] (0x0100): [RID#21] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:10:24): [krb5_child[41188]] [unpack_buffer] (0x2000): [RID#21] No old ccache * (2026-03-14 8:10:24): [krb5_child[41188]] [unpack_buffer] (0x0100): [RID#21] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:10:24): [krb5_child[41188]] [k5c_precreate_ccache] (0x4000): [RID#21] Recreating ccache * (2026-03-14 8:10:24): [krb5_child[41188]] [k5c_setup_fast] (0x0100): [RID#21] Fast principal is set to [host/np0005647033.ooo.test@OOO.TEST] * (2026-03-14 8:10:24): [krb5_child[41188]] [find_principal_in_keytab] (0x4000): [RID#21] Trying to find principal host/np0005647033.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:10:24): [krb5_child[41188]] [match_principal] (0x1000): [RID#21] Principal matched to the sample (host/np0005647033.ooo.test@OOO.TEST). * (2026-03-14 8:10:24): [krb5_child[41188]] [check_fast_ccache] (0x0200): [RID#21] FAST TGT is still valid. * (2026-03-14 8:10:24): [krb5_child[41188]] [become_user] (0x0200): [RID#21] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:10:24): [krb5_child[41188]] [main] (0x2000): [RID#21] Running as [1592400000][1592400000]. * (2026-03-14 8:10:24): [krb5_child[41188]] [set_lifetime_options] (0x0100): [RID#21] No specific renewable lifetime requested. * (2026-03-14 8:10:24): [krb5_child[41188]] [set_lifetime_options] (0x0100): [RID#21] No specific lifetime requested. * (2026-03-14 8:10:24): [krb5_child[41188]] [set_canonicalize_option] (0x0100): [RID#21] Canonicalization is set to [true] * (2026-03-14 8:10:24): [krb5_child[41188]] [main] (0x0400): [RID#21] Will perform auth * (2026-03-14 8:10:24): [krb5_child[41188]] [main] (0x0400): [RID#21] Will perform online auth * (2026-03-14 8:10:24): [krb5_child[41188]] [tgt_req_child] (0x1000): [RID#21] Attempting to get a TGT * (2026-03-14 8:10:24): [krb5_child[41188]] [get_and_save_tgt] (0x0400): [RID#21] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:10:24): [krb5_child[41188]] [sss_krb5_responder] (0x4000): [RID#21] Got question [password]. * (2026-03-14 8:10:24): [krb5_child[41188]] [get_and_save_tgt] (0x0020): [RID#21] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:10:24): [krb5_child[41188]] [map_krb5_error] (0x0020): [RID#21] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:10:29): [krb5_child[41371]] [get_and_save_tgt] (0x0020): [RID#23] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:10:28): [krb5_child[41371]] [main] (0x0400): [RID#23] krb5_child started. * (2026-03-14 8:10:28): [krb5_child[41371]] [unpack_buffer] (0x1000): [RID#23] total buffer size: [99] * (2026-03-14 8:10:28): [krb5_child[41371]] [unpack_buffer] (0x0100): [RID#23] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:10:28): [krb5_child[41371]] [unpack_buffer] (0x2000): [RID#23] No old ccache * (2026-03-14 8:10:28): [krb5_child[41371]] [unpack_buffer] (0x0100): [RID#23] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:10:28): [krb5_child[41371]] [k5c_precreate_ccache] (0x4000): [RID#23] Recreating ccache * (2026-03-14 8:10:28): [krb5_child[41371]] [k5c_setup_fast] (0x0100): [RID#23] Fast principal is set to [host/np0005647033.ooo.test@OOO.TEST] * (2026-03-14 8:10:28): [krb5_child[41371]] [find_principal_in_keytab] (0x4000): [RID#23] Trying to find principal host/np0005647033.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:10:28): [krb5_child[41371]] [match_principal] (0x1000): [RID#23] Principal matched to the sample (host/np0005647033.ooo.test@OOO.TEST). * (2026-03-14 8:10:28): [krb5_child[41371]] [check_fast_ccache] (0x0200): [RID#23] FAST TGT is still valid. * (2026-03-14 8:10:28): [krb5_child[41371]] [become_user] (0x0200): [RID#23] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:10:28): [krb5_child[41371]] [main] (0x2000): [RID#23] Running as [1592400000][1592400000]. * (2026-03-14 8:10:28): [krb5_child[41371]] [set_lifetime_options] (0x0100): [RID#23] No specific renewable lifetime requested. * (2026-03-14 8:10:28): [krb5_child[41371]] [set_lifetime_options] (0x0100): [RID#23] No specific lifetime requested. * (2026-03-14 8:10:28): [krb5_child[41371]] [set_canonicalize_option] (0x0100): [RID#23] Canonicalization is set to [true] * (2026-03-14 8:10:28): [krb5_child[41371]] [main] (0x0400): [RID#23] Will perform auth * (2026-03-14 8:10:28): [krb5_child[41371]] [main] (0x0400): [RID#23] Will perform online auth * (2026-03-14 8:10:28): [krb5_child[41371]] [tgt_req_child] (0x1000): [RID#23] Attempting to get a TGT * (2026-03-14 8:10:28): [krb5_child[41371]] [get_and_save_tgt] (0x0400): [RID#23] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:10:28): [krb5_child[41371]] [sss_krb5_responder] (0x4000): [RID#23] Got question [password]. * (2026-03-14 8:10:29): [krb5_child[41371]] [get_and_save_tgt] (0x0020): [RID#23] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:10:29): [krb5_child[41371]] [map_krb5_error] (0x0020): [RID#23] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:52:04): [krb5_child[242319]] [get_and_save_tgt] (0x0020): [RID#129] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:52:04): [krb5_child[242319]] [main] (0x0400): [RID#129] krb5_child started. * (2026-03-14 8:52:04): [krb5_child[242319]] [unpack_buffer] (0x1000): [RID#129] total buffer size: [98] * (2026-03-14 8:52:04): [krb5_child[242319]] [unpack_buffer] (0x0100): [RID#129] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:52:04): [krb5_child[242319]] [unpack_buffer] (0x2000): [RID#129] No old ccache * (2026-03-14 8:52:04): [krb5_child[242319]] [unpack_buffer] (0x0100): [RID#129] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:52:04): [krb5_child[242319]] [k5c_precreate_ccache] (0x4000): [RID#129] Recreating ccache * (2026-03-14 8:52:04): [krb5_child[242319]] [k5c_setup_fast] (0x0100): [RID#129] Fast principal is set to [host/np0005647033.ooo.test@OOO.TEST] * (2026-03-14 8:52:04): [krb5_child[242319]] [find_principal_in_keytab] (0x4000): [RID#129] Trying to find principal host/np0005647033.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:52:04): [krb5_child[242319]] [match_principal] (0x1000): [RID#129] Principal matched to the sample (host/np0005647033.ooo.test@OOO.TEST). * (2026-03-14 8:52:04): [krb5_child[242319]] [check_fast_ccache] (0x0200): [RID#129] FAST TGT is still valid. * (2026-03-14 8:52:04): [krb5_child[242319]] [become_user] (0x0200): [RID#129] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:52:04): [krb5_child[242319]] [main] (0x2000): [RID#129] Running as [1592400000][1592400000]. * (2026-03-14 8:52:04): [krb5_child[242319]] [set_lifetime_options] (0x0100): [RID#129] No specific renewable lifetime requested. * (2026-03-14 8:52:04): [krb5_child[242319]] [set_lifetime_options] (0x0100): [RID#129] No specific lifetime requested. * (2026-03-14 8:52:04): [krb5_child[242319]] [set_canonicalize_option] (0x0100): [RID#129] Canonicalization is set to [true] * (2026-03-14 8:52:04): [krb5_child[242319]] [main] (0x0400): [RID#129] Will perform auth * (2026-03-14 8:52:04): [krb5_child[242319]] [main] (0x0400): [RID#129] Will perform online auth * (2026-03-14 8:52:04): [krb5_child[242319]] [tgt_req_child] (0x1000): [RID#129] Attempting to get a TGT * (2026-03-14 8:52:04): [krb5_child[242319]] [get_and_save_tgt] (0x0400): [RID#129] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:52:04): [krb5_child[242319]] [sss_krb5_responder] (0x4000): [RID#129] Got question [password]. * (2026-03-14 8:52:04): [krb5_child[242319]] [get_and_save_tgt] (0x0020): [RID#129] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:52:04): [krb5_child[242319]] [map_krb5_error] (0x0020): [RID#129] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:52:08): [krb5_child[242573]] [get_and_save_tgt] (0x0020): [RID#132] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:52:08): [krb5_child[242573]] [main] (0x0400): [RID#132] krb5_child started. * (2026-03-14 8:52:08): [krb5_child[242573]] [unpack_buffer] (0x1000): [RID#132] total buffer size: [98] * (2026-03-14 8:52:08): [krb5_child[242573]] [unpack_buffer] (0x0100): [RID#132] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:52:08): [krb5_child[242573]] [unpack_buffer] (0x2000): [RID#132] No old ccache * (2026-03-14 8:52:08): [krb5_child[242573]] [unpack_buffer] (0x0100): [RID#132] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:52:08): [krb5_child[242573]] [k5c_precreate_ccache] (0x4000): [RID#132] Recreating ccache * (2026-03-14 8:52:08): [krb5_child[242573]] [k5c_setup_fast] (0x0100): [RID#132] Fast principal is set to [host/np0005647033.ooo.test@OOO.TEST] * (2026-03-14 8:52:08): [krb5_child[242573]] [find_principal_in_keytab] (0x4000): [RID#132] Trying to find principal host/np0005647033.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:52:08): [krb5_child[242573]] [match_principal] (0x1000): [RID#132] Principal matched to the sample (host/np0005647033.ooo.test@OOO.TEST). * (2026-03-14 8:52:08): [krb5_child[242573]] [check_fast_ccache] (0x0200): [RID#132] FAST TGT is still valid. * (2026-03-14 8:52:08): [krb5_child[242573]] [become_user] (0x0200): [RID#132] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:52:08): [krb5_child[242573]] [main] (0x2000): [RID#132] Running as [1592400000][1592400000]. * (2026-03-14 8:52:08): [krb5_child[242573]] [set_lifetime_options] (0x0100): [RID#132] No specific renewable lifetime requested. * (2026-03-14 8:52:08): [krb5_child[242573]] [set_lifetime_options] (0x0100): [RID#132] No specific lifetime requested. * (2026-03-14 8:52:08): [krb5_child[242573]] [set_canonicalize_option] (0x0100): [RID#132] Canonicalization is set to [true] * (2026-03-14 8:52:08): [krb5_child[242573]] [main] (0x0400): [RID#132] Will perform auth * (2026-03-14 8:52:08): [krb5_child[242573]] [main] (0x0400): [RID#132] Will perform online auth * (2026-03-14 8:52:08): [krb5_child[242573]] [tgt_req_child] (0x1000): [RID#132] Attempting to get a TGT * (2026-03-14 8:52:08): [krb5_child[242573]] [get_and_save_tgt] (0x0400): [RID#132] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:52:08): [krb5_child[242573]] [sss_krb5_responder] (0x4000): [RID#132] Got question [password]. * (2026-03-14 8:52:08): [krb5_child[242573]] [get_and_save_tgt] (0x0020): [RID#132] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:52:08): [krb5_child[242573]] [map_krb5_error] (0x0020): [RID#132] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:14:14): [krb5_child[331623]] [get_and_save_tgt] (0x0020): [RID#153] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:14:14): [krb5_child[331623]] [main] (0x0400): [RID#153] krb5_child started. * (2026-03-14 9:14:14): [krb5_child[331623]] [unpack_buffer] (0x1000): [RID#153] total buffer size: [97] * (2026-03-14 9:14:14): [krb5_child[331623]] [unpack_buffer] (0x0100): [RID#153] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:14:14): [krb5_child[331623]] [unpack_buffer] (0x2000): [RID#153] No old ccache * (2026-03-14 9:14:14): [krb5_child[331623]] [unpack_buffer] (0x0100): [RID#153] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:14:14): [krb5_child[331623]] [k5c_precreate_ccache] (0x4000): [RID#153] Recreating ccache * (2026-03-14 9:14:14): [krb5_child[331623]] [k5c_setup_fast] (0x0100): [RID#153] Fast principal is set to [host/np0005647033.ooo.test@OOO.TEST] * (2026-03-14 9:14:14): [krb5_child[331623]] [find_principal_in_keytab] (0x4000): [RID#153] Trying to find principal host/np0005647033.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:14:14): [krb5_child[331623]] [match_principal] (0x1000): [RID#153] Principal matched to the sample (host/np0005647033.ooo.test@OOO.TEST). * (2026-03-14 9:14:14): [krb5_child[331623]] [check_fast_ccache] (0x0200): [RID#153] FAST TGT is still valid. * (2026-03-14 9:14:14): [krb5_child[331623]] [become_user] (0x0200): [RID#153] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:14:14): [krb5_child[331623]] [main] (0x2000): [RID#153] Running as [1592400000][1592400000]. * (2026-03-14 9:14:14): [krb5_child[331623]] [set_lifetime_options] (0x0100): [RID#153] No specific renewable lifetime requested. * (2026-03-14 9:14:14): [krb5_child[331623]] [set_lifetime_options] (0x0100): [RID#153] No specific lifetime requested. * (2026-03-14 9:14:14): [krb5_child[331623]] [set_canonicalize_option] (0x0100): [RID#153] Canonicalization is set to [true] * (2026-03-14 9:14:14): [krb5_child[331623]] [main] (0x0400): [RID#153] Will perform auth * (2026-03-14 9:14:14): [krb5_child[331623]] [main] (0x0400): [RID#153] Will perform online auth * (2026-03-14 9:14:14): [krb5_child[331623]] [tgt_req_child] (0x1000): [RID#153] Attempting to get a TGT * (2026-03-14 9:14:14): [krb5_child[331623]] [get_and_save_tgt] (0x0400): [RID#153] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:14:14): [krb5_child[331623]] [sss_krb5_responder] (0x4000): [RID#153] Got question [password]. * (2026-03-14 9:14:14): [krb5_child[331623]] [get_and_save_tgt] (0x0020): [RID#153] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:14:14): [krb5_child[331623]] [map_krb5_error] (0x0020): [RID#153] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:14:18): [krb5_child[332215]] [get_and_save_tgt] (0x0020): [RID#157] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:14:18): [krb5_child[332215]] [main] (0x0400): [RID#157] krb5_child started. * (2026-03-14 9:14:18): [krb5_child[332215]] [unpack_buffer] (0x1000): [RID#157] total buffer size: [97] * (2026-03-14 9:14:18): [krb5_child[332215]] [unpack_buffer] (0x0100): [RID#157] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:14:18): [krb5_child[332215]] [unpack_buffer] (0x2000): [RID#157] No old ccache * (2026-03-14 9:14:18): [krb5_child[332215]] [unpack_buffer] (0x0100): [RID#157] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:14:18): [krb5_child[332215]] [k5c_precreate_ccache] (0x4000): [RID#157] Recreating ccache * (2026-03-14 9:14:18): [krb5_child[332215]] [k5c_setup_fast] (0x0100): [RID#157] Fast principal is set to [host/np0005647033.ooo.test@OOO.TEST] * (2026-03-14 9:14:18): [krb5_child[332215]] [find_principal_in_keytab] (0x4000): [RID#157] Trying to find principal host/np0005647033.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:14:18): [krb5_child[332215]] [match_principal] (0x1000): [RID#157] Principal matched to the sample (host/np0005647033.ooo.test@OOO.TEST). * (2026-03-14 9:14:18): [krb5_child[332215]] [check_fast_ccache] (0x0200): [RID#157] FAST TGT is still valid. * (2026-03-14 9:14:18): [krb5_child[332215]] [become_user] (0x0200): [RID#157] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:14:18): [krb5_child[332215]] [main] (0x2000): [RID#157] Running as [1592400000][1592400000]. * (2026-03-14 9:14:18): [krb5_child[332215]] [set_lifetime_options] (0x0100): [RID#157] No specific renewable lifetime requested. * (2026-03-14 9:14:18): [krb5_child[332215]] [set_lifetime_options] (0x0100): [RID#157] No specific lifetime requested. * (2026-03-14 9:14:18): [krb5_child[332215]] [set_canonicalize_option] (0x0100): [RID#157] Canonicalization is set to [true] * (2026-03-14 9:14:18): [krb5_child[332215]] [main] (0x0400): [RID#157] Will perform auth * (2026-03-14 9:14:18): [krb5_child[332215]] [main] (0x0400): [RID#157] Will perform online auth * (2026-03-14 9:14:18): [krb5_child[332215]] [tgt_req_child] (0x1000): [RID#157] Attempting to get a TGT * (2026-03-14 9:14:18): [krb5_child[332215]] [get_and_save_tgt] (0x0400): [RID#157] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:14:18): [krb5_child[332215]] [sss_krb5_responder] (0x4000): [RID#157] Got question [password]. * (2026-03-14 9:14:18): [krb5_child[332215]] [get_and_save_tgt] (0x0020): [RID#157] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:14:18): [krb5_child[332215]] [map_krb5_error] (0x0020): [RID#157] 2138: [-1765328360][Preauthentication failed]