(2026-03-14 8:19:18): [krb5_child[49867]] [get_and_save_tgt] (0x0020): [RID#27] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:19:18): [krb5_child[49867]] [main] (0x0400): [RID#27] krb5_child started. * (2026-03-14 8:19:18): [krb5_child[49867]] [unpack_buffer] (0x1000): [RID#27] total buffer size: [92] * (2026-03-14 8:19:18): [krb5_child[49867]] [unpack_buffer] (0x0100): [RID#27] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:19:18): [krb5_child[49867]] [unpack_buffer] (0x2000): [RID#27] No old ccache * (2026-03-14 8:19:18): [krb5_child[49867]] [unpack_buffer] (0x0100): [RID#27] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:19:18): [krb5_child[49867]] [k5c_precreate_ccache] (0x4000): [RID#27] Recreating ccache * (2026-03-14 8:19:18): [krb5_child[49867]] [k5c_setup_fast] (0x0100): [RID#27] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 8:19:18): [krb5_child[49867]] [find_principal_in_keytab] (0x4000): [RID#27] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:19:18): [krb5_child[49867]] [match_principal] (0x1000): [RID#27] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 8:19:18): [krb5_child[49867]] [check_fast_ccache] (0x0200): [RID#27] FAST TGT is still valid. * (2026-03-14 8:19:18): [krb5_child[49867]] [become_user] (0x0200): [RID#27] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:19:18): [krb5_child[49867]] [main] (0x2000): [RID#27] Running as [1592400000][1592400000]. * (2026-03-14 8:19:18): [krb5_child[49867]] [set_lifetime_options] (0x0100): [RID#27] No specific renewable lifetime requested. * (2026-03-14 8:19:18): [krb5_child[49867]] [set_lifetime_options] (0x0100): [RID#27] No specific lifetime requested. * (2026-03-14 8:19:18): [krb5_child[49867]] [set_canonicalize_option] (0x0100): [RID#27] Canonicalization is set to [true] * (2026-03-14 8:19:18): [krb5_child[49867]] [main] (0x0400): [RID#27] Will perform auth * (2026-03-14 8:19:18): [krb5_child[49867]] [main] (0x0400): [RID#27] Will perform online auth * (2026-03-14 8:19:18): [krb5_child[49867]] [tgt_req_child] (0x1000): [RID#27] Attempting to get a TGT * (2026-03-14 8:19:18): [krb5_child[49867]] [get_and_save_tgt] (0x0400): [RID#27] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:19:18): [krb5_child[49867]] [sss_krb5_responder] (0x4000): [RID#27] Got question [password]. * (2026-03-14 8:19:18): [krb5_child[49867]] [get_and_save_tgt] (0x0020): [RID#27] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:19:18): [krb5_child[49867]] [map_krb5_error] (0x0020): [RID#27] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:23:25): [krb5_child[50991]] [get_and_save_tgt] (0x0020): [RID#37] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:23:25): [krb5_child[50991]] [main] (0x0400): [RID#37] krb5_child started. * (2026-03-14 8:23:25): [krb5_child[50991]] [unpack_buffer] (0x1000): [RID#37] total buffer size: [94] * (2026-03-14 8:23:25): [krb5_child[50991]] [unpack_buffer] (0x0100): [RID#37] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:23:25): [krb5_child[50991]] [unpack_buffer] (0x2000): [RID#37] No old ccache * (2026-03-14 8:23:25): [krb5_child[50991]] [unpack_buffer] (0x0100): [RID#37] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:23:25): [krb5_child[50991]] [k5c_precreate_ccache] (0x4000): [RID#37] Recreating ccache * (2026-03-14 8:23:25): [krb5_child[50991]] [k5c_setup_fast] (0x0100): [RID#37] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 8:23:25): [krb5_child[50991]] [find_principal_in_keytab] (0x4000): [RID#37] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:23:25): [krb5_child[50991]] [match_principal] (0x1000): [RID#37] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 8:23:25): [krb5_child[50991]] [check_fast_ccache] (0x0200): [RID#37] FAST TGT is still valid. * (2026-03-14 8:23:25): [krb5_child[50991]] [become_user] (0x0200): [RID#37] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:23:25): [krb5_child[50991]] [main] (0x2000): [RID#37] Running as [1592400000][1592400000]. * (2026-03-14 8:23:25): [krb5_child[50991]] [set_lifetime_options] (0x0100): [RID#37] No specific renewable lifetime requested. * (2026-03-14 8:23:25): [krb5_child[50991]] [set_lifetime_options] (0x0100): [RID#37] No specific lifetime requested. * (2026-03-14 8:23:25): [krb5_child[50991]] [set_canonicalize_option] (0x0100): [RID#37] Canonicalization is set to [true] * (2026-03-14 8:23:25): [krb5_child[50991]] [main] (0x0400): [RID#37] Will perform auth * (2026-03-14 8:23:25): [krb5_child[50991]] [main] (0x0400): [RID#37] Will perform online auth * (2026-03-14 8:23:25): [krb5_child[50991]] [tgt_req_child] (0x1000): [RID#37] Attempting to get a TGT * (2026-03-14 8:23:25): [krb5_child[50991]] [get_and_save_tgt] (0x0400): [RID#37] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:23:25): [krb5_child[50991]] [sss_krb5_responder] (0x4000): [RID#37] Got question [password]. * (2026-03-14 8:23:25): [krb5_child[50991]] [get_and_save_tgt] (0x0020): [RID#37] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:23:25): [krb5_child[50991]] [map_krb5_error] (0x0020): [RID#37] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:23:29): [krb5_child[51024]] [get_and_save_tgt] (0x0020): [RID#39] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:23:29): [krb5_child[51024]] [main] (0x0400): [RID#39] krb5_child started. * (2026-03-14 8:23:29): [krb5_child[51024]] [unpack_buffer] (0x1000): [RID#39] total buffer size: [94] * (2026-03-14 8:23:29): [krb5_child[51024]] [unpack_buffer] (0x0100): [RID#39] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:23:29): [krb5_child[51024]] [unpack_buffer] (0x2000): [RID#39] No old ccache * (2026-03-14 8:23:29): [krb5_child[51024]] [unpack_buffer] (0x0100): [RID#39] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:23:29): [krb5_child[51024]] [k5c_precreate_ccache] (0x4000): [RID#39] Recreating ccache * (2026-03-14 8:23:29): [krb5_child[51024]] [k5c_setup_fast] (0x0100): [RID#39] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 8:23:29): [krb5_child[51024]] [find_principal_in_keytab] (0x4000): [RID#39] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:23:29): [krb5_child[51024]] [match_principal] (0x1000): [RID#39] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 8:23:29): [krb5_child[51024]] [check_fast_ccache] (0x0200): [RID#39] FAST TGT is still valid. * (2026-03-14 8:23:29): [krb5_child[51024]] [become_user] (0x0200): [RID#39] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:23:29): [krb5_child[51024]] [main] (0x2000): [RID#39] Running as [1592400000][1592400000]. * (2026-03-14 8:23:29): [krb5_child[51024]] [set_lifetime_options] (0x0100): [RID#39] No specific renewable lifetime requested. * (2026-03-14 8:23:29): [krb5_child[51024]] [set_lifetime_options] (0x0100): [RID#39] No specific lifetime requested. * (2026-03-14 8:23:29): [krb5_child[51024]] [set_canonicalize_option] (0x0100): [RID#39] Canonicalization is set to [true] * (2026-03-14 8:23:29): [krb5_child[51024]] [main] (0x0400): [RID#39] Will perform auth * (2026-03-14 8:23:29): [krb5_child[51024]] [main] (0x0400): [RID#39] Will perform online auth * (2026-03-14 8:23:29): [krb5_child[51024]] [tgt_req_child] (0x1000): [RID#39] Attempting to get a TGT * (2026-03-14 8:23:29): [krb5_child[51024]] [get_and_save_tgt] (0x0400): [RID#39] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:23:29): [krb5_child[51024]] [sss_krb5_responder] (0x4000): [RID#39] Got question [password]. * (2026-03-14 8:23:29): [krb5_child[51024]] [get_and_save_tgt] (0x0020): [RID#39] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:23:29): [krb5_child[51024]] [map_krb5_error] (0x0020): [RID#39] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:33:30): [krb5_child[65421]] [get_and_save_tgt] (0x0020): [RID#51] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:33:30): [krb5_child[65421]] [main] (0x0400): [RID#51] krb5_child started. * (2026-03-14 8:33:30): [krb5_child[65421]] [unpack_buffer] (0x1000): [RID#51] total buffer size: [97] * (2026-03-14 8:33:30): [krb5_child[65421]] [unpack_buffer] (0x0100): [RID#51] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:33:30): [krb5_child[65421]] [unpack_buffer] (0x2000): [RID#51] No old ccache * (2026-03-14 8:33:30): [krb5_child[65421]] [unpack_buffer] (0x0100): [RID#51] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:33:30): [krb5_child[65421]] [k5c_precreate_ccache] (0x4000): [RID#51] Recreating ccache * (2026-03-14 8:33:30): [krb5_child[65421]] [k5c_setup_fast] (0x0100): [RID#51] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 8:33:30): [krb5_child[65421]] [find_principal_in_keytab] (0x4000): [RID#51] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:33:30): [krb5_child[65421]] [match_principal] (0x1000): [RID#51] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 8:33:30): [krb5_child[65421]] [check_fast_ccache] (0x0200): [RID#51] FAST TGT is still valid. * (2026-03-14 8:33:30): [krb5_child[65421]] [become_user] (0x0200): [RID#51] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:33:30): [krb5_child[65421]] [main] (0x2000): [RID#51] Running as [1592400000][1592400000]. * (2026-03-14 8:33:30): [krb5_child[65421]] [set_lifetime_options] (0x0100): [RID#51] No specific renewable lifetime requested. * (2026-03-14 8:33:30): [krb5_child[65421]] [set_lifetime_options] (0x0100): [RID#51] No specific lifetime requested. * (2026-03-14 8:33:30): [krb5_child[65421]] [set_canonicalize_option] (0x0100): [RID#51] Canonicalization is set to [true] * (2026-03-14 8:33:30): [krb5_child[65421]] [main] (0x0400): [RID#51] Will perform auth * (2026-03-14 8:33:30): [krb5_child[65421]] [main] (0x0400): [RID#51] Will perform online auth * (2026-03-14 8:33:30): [krb5_child[65421]] [tgt_req_child] (0x1000): [RID#51] Attempting to get a TGT * (2026-03-14 8:33:30): [krb5_child[65421]] [get_and_save_tgt] (0x0400): [RID#51] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:33:30): [krb5_child[65421]] [sss_krb5_responder] (0x4000): [RID#51] Got question [password]. * (2026-03-14 8:33:30): [krb5_child[65421]] [get_and_save_tgt] (0x0020): [RID#51] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:33:30): [krb5_child[65421]] [map_krb5_error] (0x0020): [RID#51] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:48:36): [krb5_child[73135]] [get_and_save_tgt] (0x0020): [RID#78] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:48:36): [krb5_child[73135]] [main] (0x0400): [RID#78] krb5_child started. * (2026-03-14 8:48:36): [krb5_child[73135]] [unpack_buffer] (0x1000): [RID#78] total buffer size: [97] * (2026-03-14 8:48:36): [krb5_child[73135]] [unpack_buffer] (0x0100): [RID#78] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:48:36): [krb5_child[73135]] [unpack_buffer] (0x2000): [RID#78] No old ccache * (2026-03-14 8:48:36): [krb5_child[73135]] [unpack_buffer] (0x0100): [RID#78] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:48:36): [krb5_child[73135]] [k5c_precreate_ccache] (0x4000): [RID#78] Recreating ccache * (2026-03-14 8:48:36): [krb5_child[73135]] [k5c_setup_fast] (0x0100): [RID#78] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 8:48:36): [krb5_child[73135]] [find_principal_in_keytab] (0x4000): [RID#78] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:48:36): [krb5_child[73135]] [match_principal] (0x1000): [RID#78] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 8:48:36): [krb5_child[73135]] [check_fast_ccache] (0x0200): [RID#78] FAST TGT is still valid. * (2026-03-14 8:48:36): [krb5_child[73135]] [become_user] (0x0200): [RID#78] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:48:36): [krb5_child[73135]] [main] (0x2000): [RID#78] Running as [1592400000][1592400000]. * (2026-03-14 8:48:36): [krb5_child[73135]] [set_lifetime_options] (0x0100): [RID#78] No specific renewable lifetime requested. * (2026-03-14 8:48:36): [krb5_child[73135]] [set_lifetime_options] (0x0100): [RID#78] No specific lifetime requested. * (2026-03-14 8:48:36): [krb5_child[73135]] [set_canonicalize_option] (0x0100): [RID#78] Canonicalization is set to [true] * (2026-03-14 8:48:36): [krb5_child[73135]] [main] (0x0400): [RID#78] Will perform auth * (2026-03-14 8:48:36): [krb5_child[73135]] [main] (0x0400): [RID#78] Will perform online auth * (2026-03-14 8:48:36): [krb5_child[73135]] [tgt_req_child] (0x1000): [RID#78] Attempting to get a TGT * (2026-03-14 8:48:36): [krb5_child[73135]] [get_and_save_tgt] (0x0400): [RID#78] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:48:36): [krb5_child[73135]] [sss_krb5_responder] (0x4000): [RID#78] Got question [password]. * (2026-03-14 8:48:36): [krb5_child[73135]] [get_and_save_tgt] (0x0020): [RID#78] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:48:36): [krb5_child[73135]] [map_krb5_error] (0x0020): [RID#78] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:51:54): [krb5_child[74722]] [get_and_save_tgt] (0x0020): [RID#90] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:51:54): [krb5_child[74722]] [main] (0x0400): [RID#90] krb5_child started. * (2026-03-14 8:51:54): [krb5_child[74722]] [unpack_buffer] (0x1000): [RID#90] total buffer size: [100] * (2026-03-14 8:51:54): [krb5_child[74722]] [unpack_buffer] (0x0100): [RID#90] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:51:54): [krb5_child[74722]] [unpack_buffer] (0x2000): [RID#90] No old ccache * (2026-03-14 8:51:54): [krb5_child[74722]] [unpack_buffer] (0x0100): [RID#90] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:51:54): [krb5_child[74722]] [k5c_precreate_ccache] (0x4000): [RID#90] Recreating ccache * (2026-03-14 8:51:54): [krb5_child[74722]] [k5c_setup_fast] (0x0100): [RID#90] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 8:51:54): [krb5_child[74722]] [find_principal_in_keytab] (0x4000): [RID#90] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:51:54): [krb5_child[74722]] [match_principal] (0x1000): [RID#90] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 8:51:54): [krb5_child[74722]] [check_fast_ccache] (0x0200): [RID#90] FAST TGT is still valid. * (2026-03-14 8:51:54): [krb5_child[74722]] [become_user] (0x0200): [RID#90] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:51:54): [krb5_child[74722]] [main] (0x2000): [RID#90] Running as [1592400000][1592400000]. * (2026-03-14 8:51:54): [krb5_child[74722]] [set_lifetime_options] (0x0100): [RID#90] No specific renewable lifetime requested. * (2026-03-14 8:51:54): [krb5_child[74722]] [set_lifetime_options] (0x0100): [RID#90] No specific lifetime requested. * (2026-03-14 8:51:54): [krb5_child[74722]] [set_canonicalize_option] (0x0100): [RID#90] Canonicalization is set to [true] * (2026-03-14 8:51:54): [krb5_child[74722]] [main] (0x0400): [RID#90] Will perform auth * (2026-03-14 8:51:54): [krb5_child[74722]] [main] (0x0400): [RID#90] Will perform online auth * (2026-03-14 8:51:54): [krb5_child[74722]] [tgt_req_child] (0x1000): [RID#90] Attempting to get a TGT * (2026-03-14 8:51:54): [krb5_child[74722]] [get_and_save_tgt] (0x0400): [RID#90] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:51:54): [krb5_child[74722]] [sss_krb5_responder] (0x4000): [RID#90] Got question [password]. * (2026-03-14 8:51:54): [krb5_child[74722]] [get_and_save_tgt] (0x0020): [RID#90] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:51:54): [krb5_child[74722]] [map_krb5_error] (0x0020): [RID#90] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:51:59): [krb5_child[74725]] [get_and_save_tgt] (0x0020): [RID#92] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:51:58): [krb5_child[74725]] [main] (0x0400): [RID#92] krb5_child started. * (2026-03-14 8:51:58): [krb5_child[74725]] [unpack_buffer] (0x1000): [RID#92] total buffer size: [100] * (2026-03-14 8:51:58): [krb5_child[74725]] [unpack_buffer] (0x0100): [RID#92] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:51:58): [krb5_child[74725]] [unpack_buffer] (0x2000): [RID#92] No old ccache * (2026-03-14 8:51:58): [krb5_child[74725]] [unpack_buffer] (0x0100): [RID#92] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:51:58): [krb5_child[74725]] [k5c_precreate_ccache] (0x4000): [RID#92] Recreating ccache * (2026-03-14 8:51:58): [krb5_child[74725]] [k5c_setup_fast] (0x0100): [RID#92] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 8:51:58): [krb5_child[74725]] [find_principal_in_keytab] (0x4000): [RID#92] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:51:58): [krb5_child[74725]] [match_principal] (0x1000): [RID#92] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 8:51:58): [krb5_child[74725]] [check_fast_ccache] (0x0200): [RID#92] FAST TGT is still valid. * (2026-03-14 8:51:58): [krb5_child[74725]] [become_user] (0x0200): [RID#92] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:51:58): [krb5_child[74725]] [main] (0x2000): [RID#92] Running as [1592400000][1592400000]. * (2026-03-14 8:51:58): [krb5_child[74725]] [set_lifetime_options] (0x0100): [RID#92] No specific renewable lifetime requested. * (2026-03-14 8:51:58): [krb5_child[74725]] [set_lifetime_options] (0x0100): [RID#92] No specific lifetime requested. * (2026-03-14 8:51:58): [krb5_child[74725]] [set_canonicalize_option] (0x0100): [RID#92] Canonicalization is set to [true] * (2026-03-14 8:51:58): [krb5_child[74725]] [main] (0x0400): [RID#92] Will perform auth * (2026-03-14 8:51:58): [krb5_child[74725]] [main] (0x0400): [RID#92] Will perform online auth * (2026-03-14 8:51:58): [krb5_child[74725]] [tgt_req_child] (0x1000): [RID#92] Attempting to get a TGT * (2026-03-14 8:51:58): [krb5_child[74725]] [get_and_save_tgt] (0x0400): [RID#92] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:51:59): [krb5_child[74725]] [sss_krb5_responder] (0x4000): [RID#92] Got question [password]. * (2026-03-14 8:51:59): [krb5_child[74725]] [get_and_save_tgt] (0x0020): [RID#92] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:51:59): [krb5_child[74725]] [map_krb5_error] (0x0020): [RID#92] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:58:27): [krb5_child[77643]] [get_and_save_tgt] (0x0020): [RID#120] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:58:27): [krb5_child[77643]] [main] (0x0400): [RID#120] krb5_child started. * (2026-03-14 8:58:27): [krb5_child[77643]] [unpack_buffer] (0x1000): [RID#120] total buffer size: [99] * (2026-03-14 8:58:27): [krb5_child[77643]] [unpack_buffer] (0x0100): [RID#120] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:58:27): [krb5_child[77643]] [unpack_buffer] (0x2000): [RID#120] No old ccache * (2026-03-14 8:58:27): [krb5_child[77643]] [unpack_buffer] (0x0100): [RID#120] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:58:27): [krb5_child[77643]] [k5c_precreate_ccache] (0x4000): [RID#120] Recreating ccache * (2026-03-14 8:58:27): [krb5_child[77643]] [k5c_setup_fast] (0x0100): [RID#120] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 8:58:27): [krb5_child[77643]] [find_principal_in_keytab] (0x4000): [RID#120] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:58:27): [krb5_child[77643]] [match_principal] (0x1000): [RID#120] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 8:58:27): [krb5_child[77643]] [check_fast_ccache] (0x0200): [RID#120] FAST TGT is still valid. * (2026-03-14 8:58:27): [krb5_child[77643]] [become_user] (0x0200): [RID#120] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:58:27): [krb5_child[77643]] [main] (0x2000): [RID#120] Running as [1592400000][1592400000]. * (2026-03-14 8:58:27): [krb5_child[77643]] [set_lifetime_options] (0x0100): [RID#120] No specific renewable lifetime requested. * (2026-03-14 8:58:27): [krb5_child[77643]] [set_lifetime_options] (0x0100): [RID#120] No specific lifetime requested. * (2026-03-14 8:58:27): [krb5_child[77643]] [set_canonicalize_option] (0x0100): [RID#120] Canonicalization is set to [true] * (2026-03-14 8:58:27): [krb5_child[77643]] [main] (0x0400): [RID#120] Will perform auth * (2026-03-14 8:58:27): [krb5_child[77643]] [main] (0x0400): [RID#120] Will perform online auth * (2026-03-14 8:58:27): [krb5_child[77643]] [tgt_req_child] (0x1000): [RID#120] Attempting to get a TGT * (2026-03-14 8:58:27): [krb5_child[77643]] [get_and_save_tgt] (0x0400): [RID#120] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:58:27): [krb5_child[77643]] [sss_krb5_responder] (0x4000): [RID#120] Got question [password]. * (2026-03-14 8:58:27): [krb5_child[77643]] [get_and_save_tgt] (0x0020): [RID#120] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:58:27): [krb5_child[77643]] [map_krb5_error] (0x0020): [RID#120] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:04:40): [krb5_child[80452]] [get_and_save_tgt] (0x0020): [RID#151] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:04:40): [krb5_child[80452]] [main] (0x0400): [RID#151] krb5_child started. * (2026-03-14 9:04:40): [krb5_child[80452]] [unpack_buffer] (0x1000): [RID#151] total buffer size: [99] * (2026-03-14 9:04:40): [krb5_child[80452]] [unpack_buffer] (0x0100): [RID#151] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:04:40): [krb5_child[80452]] [unpack_buffer] (0x2000): [RID#151] No old ccache * (2026-03-14 9:04:40): [krb5_child[80452]] [unpack_buffer] (0x0100): [RID#151] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:04:40): [krb5_child[80452]] [k5c_precreate_ccache] (0x4000): [RID#151] Recreating ccache * (2026-03-14 9:04:40): [krb5_child[80452]] [k5c_setup_fast] (0x0100): [RID#151] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 9:04:40): [krb5_child[80452]] [find_principal_in_keytab] (0x4000): [RID#151] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:04:40): [krb5_child[80452]] [match_principal] (0x1000): [RID#151] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 9:04:40): [krb5_child[80452]] [check_fast_ccache] (0x0200): [RID#151] FAST TGT is still valid. * (2026-03-14 9:04:40): [krb5_child[80452]] [become_user] (0x0200): [RID#151] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:04:40): [krb5_child[80452]] [main] (0x2000): [RID#151] Running as [1592400000][1592400000]. * (2026-03-14 9:04:40): [krb5_child[80452]] [set_lifetime_options] (0x0100): [RID#151] No specific renewable lifetime requested. * (2026-03-14 9:04:40): [krb5_child[80452]] [set_lifetime_options] (0x0100): [RID#151] No specific lifetime requested. * (2026-03-14 9:04:40): [krb5_child[80452]] [set_canonicalize_option] (0x0100): [RID#151] Canonicalization is set to [true] * (2026-03-14 9:04:40): [krb5_child[80452]] [main] (0x0400): [RID#151] Will perform auth * (2026-03-14 9:04:40): [krb5_child[80452]] [main] (0x0400): [RID#151] Will perform online auth * (2026-03-14 9:04:40): [krb5_child[80452]] [tgt_req_child] (0x1000): [RID#151] Attempting to get a TGT * (2026-03-14 9:04:40): [krb5_child[80452]] [get_and_save_tgt] (0x0400): [RID#151] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:04:40): [krb5_child[80452]] [sss_krb5_responder] (0x4000): [RID#151] Got question [password]. * (2026-03-14 9:04:40): [krb5_child[80452]] [get_and_save_tgt] (0x0020): [RID#151] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:04:40): [krb5_child[80452]] [map_krb5_error] (0x0020): [RID#151] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:16:14): [krb5_child[88132]] [get_and_save_tgt] (0x0020): [RID#190] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:16:14): [krb5_child[88132]] [main] (0x0400): [RID#190] krb5_child started. * (2026-03-14 9:16:14): [krb5_child[88132]] [unpack_buffer] (0x1000): [RID#190] total buffer size: [100] * (2026-03-14 9:16:14): [krb5_child[88132]] [unpack_buffer] (0x0100): [RID#190] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:16:14): [krb5_child[88132]] [unpack_buffer] (0x2000): [RID#190] No old ccache * (2026-03-14 9:16:14): [krb5_child[88132]] [unpack_buffer] (0x0100): [RID#190] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:16:14): [krb5_child[88132]] [k5c_precreate_ccache] (0x4000): [RID#190] Recreating ccache * (2026-03-14 9:16:14): [krb5_child[88132]] [k5c_setup_fast] (0x0100): [RID#190] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 9:16:14): [krb5_child[88132]] [find_principal_in_keytab] (0x4000): [RID#190] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:16:14): [krb5_child[88132]] [match_principal] (0x1000): [RID#190] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 9:16:14): [krb5_child[88132]] [check_fast_ccache] (0x0200): [RID#190] FAST TGT is still valid. * (2026-03-14 9:16:14): [krb5_child[88132]] [become_user] (0x0200): [RID#190] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:16:14): [krb5_child[88132]] [main] (0x2000): [RID#190] Running as [1592400000][1592400000]. * (2026-03-14 9:16:14): [krb5_child[88132]] [set_lifetime_options] (0x0100): [RID#190] No specific renewable lifetime requested. * (2026-03-14 9:16:14): [krb5_child[88132]] [set_lifetime_options] (0x0100): [RID#190] No specific lifetime requested. * (2026-03-14 9:16:14): [krb5_child[88132]] [set_canonicalize_option] (0x0100): [RID#190] Canonicalization is set to [true] * (2026-03-14 9:16:14): [krb5_child[88132]] [main] (0x0400): [RID#190] Will perform auth * (2026-03-14 9:16:14): [krb5_child[88132]] [main] (0x0400): [RID#190] Will perform online auth * (2026-03-14 9:16:14): [krb5_child[88132]] [tgt_req_child] (0x1000): [RID#190] Attempting to get a TGT * (2026-03-14 9:16:14): [krb5_child[88132]] [get_and_save_tgt] (0x0400): [RID#190] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:16:14): [krb5_child[88132]] [sss_krb5_responder] (0x4000): [RID#190] Got question [password]. * (2026-03-14 9:16:14): [krb5_child[88132]] [get_and_save_tgt] (0x0020): [RID#190] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:16:14): [krb5_child[88132]] [map_krb5_error] (0x0020): [RID#190] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:16:18): [krb5_child[88594]] [get_and_save_tgt] (0x0020): [RID#192] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:16:18): [krb5_child[88594]] [main] (0x0400): [RID#192] krb5_child started. * (2026-03-14 9:16:18): [krb5_child[88594]] [unpack_buffer] (0x1000): [RID#192] total buffer size: [100] * (2026-03-14 9:16:18): [krb5_child[88594]] [unpack_buffer] (0x0100): [RID#192] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:16:18): [krb5_child[88594]] [unpack_buffer] (0x2000): [RID#192] No old ccache * (2026-03-14 9:16:18): [krb5_child[88594]] [unpack_buffer] (0x0100): [RID#192] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:16:18): [krb5_child[88594]] [k5c_precreate_ccache] (0x4000): [RID#192] Recreating ccache * (2026-03-14 9:16:18): [krb5_child[88594]] [k5c_setup_fast] (0x0100): [RID#192] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 9:16:18): [krb5_child[88594]] [find_principal_in_keytab] (0x4000): [RID#192] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:16:18): [krb5_child[88594]] [match_principal] (0x1000): [RID#192] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 9:16:18): [krb5_child[88594]] [check_fast_ccache] (0x0200): [RID#192] FAST TGT is still valid. * (2026-03-14 9:16:18): [krb5_child[88594]] [become_user] (0x0200): [RID#192] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:16:18): [krb5_child[88594]] [main] (0x2000): [RID#192] Running as [1592400000][1592400000]. * (2026-03-14 9:16:18): [krb5_child[88594]] [set_lifetime_options] (0x0100): [RID#192] No specific renewable lifetime requested. * (2026-03-14 9:16:18): [krb5_child[88594]] [set_lifetime_options] (0x0100): [RID#192] No specific lifetime requested. * (2026-03-14 9:16:18): [krb5_child[88594]] [set_canonicalize_option] (0x0100): [RID#192] Canonicalization is set to [true] * (2026-03-14 9:16:18): [krb5_child[88594]] [main] (0x0400): [RID#192] Will perform auth * (2026-03-14 9:16:18): [krb5_child[88594]] [main] (0x0400): [RID#192] Will perform online auth * (2026-03-14 9:16:18): [krb5_child[88594]] [tgt_req_child] (0x1000): [RID#192] Attempting to get a TGT * (2026-03-14 9:16:18): [krb5_child[88594]] [get_and_save_tgt] (0x0400): [RID#192] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:16:18): [krb5_child[88594]] [get_and_save_tgt] (0x0020): [RID#192] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:16:18): [krb5_child[88594]] [map_krb5_error] (0x0020): [RID#192] 2138: [-1765328366][Client's credentials have been revoked] (2026-03-14 9:16:23): [krb5_child[89052]] [get_and_save_tgt] (0x0020): [RID#196] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:16:23): [krb5_child[89052]] [main] (0x0400): [RID#196] krb5_child started. * (2026-03-14 9:16:23): [krb5_child[89052]] [unpack_buffer] (0x1000): [RID#196] total buffer size: [100] * (2026-03-14 9:16:23): [krb5_child[89052]] [unpack_buffer] (0x0100): [RID#196] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:16:23): [krb5_child[89052]] [unpack_buffer] (0x2000): [RID#196] No old ccache * (2026-03-14 9:16:23): [krb5_child[89052]] [unpack_buffer] (0x0100): [RID#196] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:16:23): [krb5_child[89052]] [k5c_precreate_ccache] (0x4000): [RID#196] Recreating ccache * (2026-03-14 9:16:23): [krb5_child[89052]] [k5c_setup_fast] (0x0100): [RID#196] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 9:16:23): [krb5_child[89052]] [find_principal_in_keytab] (0x4000): [RID#196] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:16:23): [krb5_child[89052]] [match_principal] (0x1000): [RID#196] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 9:16:23): [krb5_child[89052]] [check_fast_ccache] (0x0200): [RID#196] FAST TGT is still valid. * (2026-03-14 9:16:23): [krb5_child[89052]] [become_user] (0x0200): [RID#196] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:16:23): [krb5_child[89052]] [main] (0x2000): [RID#196] Running as [1592400000][1592400000]. * (2026-03-14 9:16:23): [krb5_child[89052]] [set_lifetime_options] (0x0100): [RID#196] No specific renewable lifetime requested. * (2026-03-14 9:16:23): [krb5_child[89052]] [set_lifetime_options] (0x0100): [RID#196] No specific lifetime requested. * (2026-03-14 9:16:23): [krb5_child[89052]] [set_canonicalize_option] (0x0100): [RID#196] Canonicalization is set to [true] * (2026-03-14 9:16:23): [krb5_child[89052]] [main] (0x0400): [RID#196] Will perform auth * (2026-03-14 9:16:23): [krb5_child[89052]] [main] (0x0400): [RID#196] Will perform online auth * (2026-03-14 9:16:23): [krb5_child[89052]] [tgt_req_child] (0x1000): [RID#196] Attempting to get a TGT * (2026-03-14 9:16:23): [krb5_child[89052]] [get_and_save_tgt] (0x0400): [RID#196] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:16:23): [krb5_child[89052]] [get_and_save_tgt] (0x0020): [RID#196] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:16:23): [krb5_child[89052]] [map_krb5_error] (0x0020): [RID#196] 2138: [-1765328366][Client's credentials have been revoked] (2026-03-14 9:16:27): [krb5_child[89491]] [get_and_save_tgt] (0x0020): [RID#198] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:16:27): [krb5_child[89491]] [main] (0x0400): [RID#198] krb5_child started. * (2026-03-14 9:16:27): [krb5_child[89491]] [unpack_buffer] (0x1000): [RID#198] total buffer size: [100] * (2026-03-14 9:16:27): [krb5_child[89491]] [unpack_buffer] (0x0100): [RID#198] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:16:27): [krb5_child[89491]] [unpack_buffer] (0x2000): [RID#198] No old ccache * (2026-03-14 9:16:27): [krb5_child[89491]] [unpack_buffer] (0x0100): [RID#198] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:16:27): [krb5_child[89491]] [k5c_precreate_ccache] (0x4000): [RID#198] Recreating ccache * (2026-03-14 9:16:27): [krb5_child[89491]] [k5c_setup_fast] (0x0100): [RID#198] Fast principal is set to [host/np0005647037.ooo.test@OOO.TEST] * (2026-03-14 9:16:27): [krb5_child[89491]] [find_principal_in_keytab] (0x4000): [RID#198] Trying to find principal host/np0005647037.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:16:27): [krb5_child[89491]] [match_principal] (0x1000): [RID#198] Principal matched to the sample (host/np0005647037.ooo.test@OOO.TEST). * (2026-03-14 9:16:27): [krb5_child[89491]] [check_fast_ccache] (0x0200): [RID#198] FAST TGT is still valid. * (2026-03-14 9:16:27): [krb5_child[89491]] [become_user] (0x0200): [RID#198] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:16:27): [krb5_child[89491]] [main] (0x2000): [RID#198] Running as [1592400000][1592400000]. * (2026-03-14 9:16:27): [krb5_child[89491]] [set_lifetime_options] (0x0100): [RID#198] No specific renewable lifetime requested. * (2026-03-14 9:16:27): [krb5_child[89491]] [set_lifetime_options] (0x0100): [RID#198] No specific lifetime requested. * (2026-03-14 9:16:27): [krb5_child[89491]] [set_canonicalize_option] (0x0100): [RID#198] Canonicalization is set to [true] * (2026-03-14 9:16:27): [krb5_child[89491]] [main] (0x0400): [RID#198] Will perform auth * (2026-03-14 9:16:27): [krb5_child[89491]] [main] (0x0400): [RID#198] Will perform online auth * (2026-03-14 9:16:27): [krb5_child[89491]] [tgt_req_child] (0x1000): [RID#198] Attempting to get a TGT * (2026-03-14 9:16:27): [krb5_child[89491]] [get_and_save_tgt] (0x0400): [RID#198] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:16:27): [krb5_child[89491]] [get_and_save_tgt] (0x0020): [RID#198] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:16:27): [krb5_child[89491]] [map_krb5_error] (0x0020): [RID#198] 2138: [-1765328366][Client's credentials have been revoked]