(2026-03-14 8:40:34): [krb5_child[69086]] [get_and_save_tgt] (0x0020): [RID#111] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:40:34): [krb5_child[69086]] [main] (0x0400): [RID#111] krb5_child started. * (2026-03-14 8:40:34): [krb5_child[69086]] [unpack_buffer] (0x1000): [RID#111] total buffer size: [97] * (2026-03-14 8:40:34): [krb5_child[69086]] [unpack_buffer] (0x0100): [RID#111] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:40:34): [krb5_child[69086]] [unpack_buffer] (0x2000): [RID#111] No old ccache * (2026-03-14 8:40:34): [krb5_child[69086]] [unpack_buffer] (0x0100): [RID#111] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:40:34): [krb5_child[69086]] [k5c_precreate_ccache] (0x4000): [RID#111] Recreating ccache * (2026-03-14 8:40:34): [krb5_child[69086]] [k5c_setup_fast] (0x0100): [RID#111] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 8:40:34): [krb5_child[69086]] [find_principal_in_keytab] (0x4000): [RID#111] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:40:34): [krb5_child[69086]] [match_principal] (0x1000): [RID#111] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 8:40:34): [krb5_child[69086]] [check_fast_ccache] (0x0200): [RID#111] FAST TGT is still valid. * (2026-03-14 8:40:34): [krb5_child[69086]] [become_user] (0x0200): [RID#111] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:40:34): [krb5_child[69086]] [main] (0x2000): [RID#111] Running as [1592400000][1592400000]. * (2026-03-14 8:40:34): [krb5_child[69086]] [set_lifetime_options] (0x0100): [RID#111] No specific renewable lifetime requested. * (2026-03-14 8:40:34): [krb5_child[69086]] [set_lifetime_options] (0x0100): [RID#111] No specific lifetime requested. * (2026-03-14 8:40:34): [krb5_child[69086]] [set_canonicalize_option] (0x0100): [RID#111] Canonicalization is set to [true] * (2026-03-14 8:40:34): [krb5_child[69086]] [main] (0x0400): [RID#111] Will perform auth * (2026-03-14 8:40:34): [krb5_child[69086]] [main] (0x0400): [RID#111] Will perform online auth * (2026-03-14 8:40:34): [krb5_child[69086]] [tgt_req_child] (0x1000): [RID#111] Attempting to get a TGT * (2026-03-14 8:40:34): [krb5_child[69086]] [get_and_save_tgt] (0x0400): [RID#111] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:40:34): [krb5_child[69086]] [sss_krb5_responder] (0x4000): [RID#111] Got question [password]. * (2026-03-14 8:40:34): [krb5_child[69086]] [get_and_save_tgt] (0x0020): [RID#111] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:40:34): [krb5_child[69086]] [map_krb5_error] (0x0020): [RID#111] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:40:38): [krb5_child[69089]] [get_and_save_tgt] (0x0020): [RID#113] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:40:38): [krb5_child[69089]] [main] (0x0400): [RID#113] krb5_child started. * (2026-03-14 8:40:38): [krb5_child[69089]] [unpack_buffer] (0x1000): [RID#113] total buffer size: [97] * (2026-03-14 8:40:38): [krb5_child[69089]] [unpack_buffer] (0x0100): [RID#113] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:40:38): [krb5_child[69089]] [unpack_buffer] (0x2000): [RID#113] No old ccache * (2026-03-14 8:40:38): [krb5_child[69089]] [unpack_buffer] (0x0100): [RID#113] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:40:38): [krb5_child[69089]] [k5c_precreate_ccache] (0x4000): [RID#113] Recreating ccache * (2026-03-14 8:40:38): [krb5_child[69089]] [k5c_setup_fast] (0x0100): [RID#113] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 8:40:38): [krb5_child[69089]] [find_principal_in_keytab] (0x4000): [RID#113] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:40:38): [krb5_child[69089]] [match_principal] (0x1000): [RID#113] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 8:40:38): [krb5_child[69089]] [check_fast_ccache] (0x0200): [RID#113] FAST TGT is still valid. * (2026-03-14 8:40:38): [krb5_child[69089]] [become_user] (0x0200): [RID#113] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:40:38): [krb5_child[69089]] [main] (0x2000): [RID#113] Running as [1592400000][1592400000]. * (2026-03-14 8:40:38): [krb5_child[69089]] [set_lifetime_options] (0x0100): [RID#113] No specific renewable lifetime requested. * (2026-03-14 8:40:38): [krb5_child[69089]] [set_lifetime_options] (0x0100): [RID#113] No specific lifetime requested. * (2026-03-14 8:40:38): [krb5_child[69089]] [set_canonicalize_option] (0x0100): [RID#113] Canonicalization is set to [true] * (2026-03-14 8:40:38): [krb5_child[69089]] [main] (0x0400): [RID#113] Will perform auth * (2026-03-14 8:40:38): [krb5_child[69089]] [main] (0x0400): [RID#113] Will perform online auth * (2026-03-14 8:40:38): [krb5_child[69089]] [tgt_req_child] (0x1000): [RID#113] Attempting to get a TGT * (2026-03-14 8:40:38): [krb5_child[69089]] [get_and_save_tgt] (0x0400): [RID#113] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:40:38): [krb5_child[69089]] [sss_krb5_responder] (0x4000): [RID#113] Got question [password]. * (2026-03-14 8:40:38): [krb5_child[69089]] [get_and_save_tgt] (0x0020): [RID#113] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:40:38): [krb5_child[69089]] [map_krb5_error] (0x0020): [RID#113] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:50:30): [krb5_child[73696]] [get_and_save_tgt] (0x0020): [RID#123] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:50:30): [krb5_child[73696]] [main] (0x0400): [RID#123] krb5_child started. * (2026-03-14 8:50:30): [krb5_child[73696]] [unpack_buffer] (0x1000): [RID#123] total buffer size: [98] * (2026-03-14 8:50:30): [krb5_child[73696]] [unpack_buffer] (0x0100): [RID#123] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:50:30): [krb5_child[73696]] [unpack_buffer] (0x2000): [RID#123] No old ccache * (2026-03-14 8:50:30): [krb5_child[73696]] [unpack_buffer] (0x0100): [RID#123] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:50:30): [krb5_child[73696]] [k5c_precreate_ccache] (0x4000): [RID#123] Recreating ccache * (2026-03-14 8:50:30): [krb5_child[73696]] [k5c_setup_fast] (0x0100): [RID#123] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 8:50:30): [krb5_child[73696]] [find_principal_in_keytab] (0x4000): [RID#123] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:50:30): [krb5_child[73696]] [match_principal] (0x1000): [RID#123] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 8:50:30): [krb5_child[73696]] [check_fast_ccache] (0x0200): [RID#123] FAST TGT is still valid. * (2026-03-14 8:50:30): [krb5_child[73696]] [become_user] (0x0200): [RID#123] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:50:30): [krb5_child[73696]] [main] (0x2000): [RID#123] Running as [1592400000][1592400000]. * (2026-03-14 8:50:30): [krb5_child[73696]] [set_lifetime_options] (0x0100): [RID#123] No specific renewable lifetime requested. * (2026-03-14 8:50:30): [krb5_child[73696]] [set_lifetime_options] (0x0100): [RID#123] No specific lifetime requested. * (2026-03-14 8:50:30): [krb5_child[73696]] [set_canonicalize_option] (0x0100): [RID#123] Canonicalization is set to [true] * (2026-03-14 8:50:30): [krb5_child[73696]] [main] (0x0400): [RID#123] Will perform auth * (2026-03-14 8:50:30): [krb5_child[73696]] [main] (0x0400): [RID#123] Will perform online auth * (2026-03-14 8:50:30): [krb5_child[73696]] [tgt_req_child] (0x1000): [RID#123] Attempting to get a TGT * (2026-03-14 8:50:30): [krb5_child[73696]] [get_and_save_tgt] (0x0400): [RID#123] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:50:30): [krb5_child[73696]] [sss_krb5_responder] (0x4000): [RID#123] Got question [password]. * (2026-03-14 8:50:30): [krb5_child[73696]] [get_and_save_tgt] (0x0020): [RID#123] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:50:30): [krb5_child[73696]] [map_krb5_error] (0x0020): [RID#123] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:50:35): [krb5_child[73728]] [get_and_save_tgt] (0x0020): [RID#125] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:50:35): [krb5_child[73728]] [main] (0x0400): [RID#125] krb5_child started. * (2026-03-14 8:50:35): [krb5_child[73728]] [unpack_buffer] (0x1000): [RID#125] total buffer size: [98] * (2026-03-14 8:50:35): [krb5_child[73728]] [unpack_buffer] (0x0100): [RID#125] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:50:35): [krb5_child[73728]] [unpack_buffer] (0x2000): [RID#125] No old ccache * (2026-03-14 8:50:35): [krb5_child[73728]] [unpack_buffer] (0x0100): [RID#125] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:50:35): [krb5_child[73728]] [k5c_precreate_ccache] (0x4000): [RID#125] Recreating ccache * (2026-03-14 8:50:35): [krb5_child[73728]] [k5c_setup_fast] (0x0100): [RID#125] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 8:50:35): [krb5_child[73728]] [find_principal_in_keytab] (0x4000): [RID#125] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:50:35): [krb5_child[73728]] [match_principal] (0x1000): [RID#125] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 8:50:35): [krb5_child[73728]] [check_fast_ccache] (0x0200): [RID#125] FAST TGT is still valid. * (2026-03-14 8:50:35): [krb5_child[73728]] [become_user] (0x0200): [RID#125] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:50:35): [krb5_child[73728]] [main] (0x2000): [RID#125] Running as [1592400000][1592400000]. * (2026-03-14 8:50:35): [krb5_child[73728]] [set_lifetime_options] (0x0100): [RID#125] No specific renewable lifetime requested. * (2026-03-14 8:50:35): [krb5_child[73728]] [set_lifetime_options] (0x0100): [RID#125] No specific lifetime requested. * (2026-03-14 8:50:35): [krb5_child[73728]] [set_canonicalize_option] (0x0100): [RID#125] Canonicalization is set to [true] * (2026-03-14 8:50:35): [krb5_child[73728]] [main] (0x0400): [RID#125] Will perform auth * (2026-03-14 8:50:35): [krb5_child[73728]] [main] (0x0400): [RID#125] Will perform online auth * (2026-03-14 8:50:35): [krb5_child[73728]] [tgt_req_child] (0x1000): [RID#125] Attempting to get a TGT * (2026-03-14 8:50:35): [krb5_child[73728]] [get_and_save_tgt] (0x0400): [RID#125] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:50:35): [krb5_child[73728]] [sss_krb5_responder] (0x4000): [RID#125] Got question [password]. * (2026-03-14 8:50:35): [krb5_child[73728]] [get_and_save_tgt] (0x0020): [RID#125] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:50:35): [krb5_child[73728]] [map_krb5_error] (0x0020): [RID#125] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:57:41): [krb5_child[77077]] [get_and_save_tgt] (0x0020): [RID#130] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:57:41): [krb5_child[77077]] [main] (0x0400): [RID#130] krb5_child started. * (2026-03-14 8:57:41): [krb5_child[77077]] [unpack_buffer] (0x1000): [RID#130] total buffer size: [99] * (2026-03-14 8:57:41): [krb5_child[77077]] [unpack_buffer] (0x0100): [RID#130] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:57:41): [krb5_child[77077]] [unpack_buffer] (0x2000): [RID#130] No old ccache * (2026-03-14 8:57:41): [krb5_child[77077]] [unpack_buffer] (0x0100): [RID#130] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:57:41): [krb5_child[77077]] [k5c_precreate_ccache] (0x4000): [RID#130] Recreating ccache * (2026-03-14 8:57:41): [krb5_child[77077]] [k5c_setup_fast] (0x0100): [RID#130] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 8:57:41): [krb5_child[77077]] [find_principal_in_keytab] (0x4000): [RID#130] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:57:41): [krb5_child[77077]] [match_principal] (0x1000): [RID#130] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 8:57:41): [krb5_child[77077]] [check_fast_ccache] (0x0200): [RID#130] FAST TGT is still valid. * (2026-03-14 8:57:41): [krb5_child[77077]] [become_user] (0x0200): [RID#130] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:57:41): [krb5_child[77077]] [main] (0x2000): [RID#130] Running as [1592400000][1592400000]. * (2026-03-14 8:57:41): [krb5_child[77077]] [set_lifetime_options] (0x0100): [RID#130] No specific renewable lifetime requested. * (2026-03-14 8:57:41): [krb5_child[77077]] [set_lifetime_options] (0x0100): [RID#130] No specific lifetime requested. * (2026-03-14 8:57:41): [krb5_child[77077]] [set_canonicalize_option] (0x0100): [RID#130] Canonicalization is set to [true] * (2026-03-14 8:57:41): [krb5_child[77077]] [main] (0x0400): [RID#130] Will perform auth * (2026-03-14 8:57:41): [krb5_child[77077]] [main] (0x0400): [RID#130] Will perform online auth * (2026-03-14 8:57:41): [krb5_child[77077]] [tgt_req_child] (0x1000): [RID#130] Attempting to get a TGT * (2026-03-14 8:57:41): [krb5_child[77077]] [get_and_save_tgt] (0x0400): [RID#130] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:57:41): [krb5_child[77077]] [sss_krb5_responder] (0x4000): [RID#130] Got question [password]. * (2026-03-14 8:57:41): [krb5_child[77077]] [get_and_save_tgt] (0x0020): [RID#130] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:57:41): [krb5_child[77077]] [map_krb5_error] (0x0020): [RID#130] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:02:54): [krb5_child[79442]] [get_and_save_tgt] (0x0020): [RID#139] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:02:54): [krb5_child[79442]] [main] (0x0400): [RID#139] krb5_child started. * (2026-03-14 9:02:54): [krb5_child[79442]] [unpack_buffer] (0x1000): [RID#139] total buffer size: [99] * (2026-03-14 9:02:54): [krb5_child[79442]] [unpack_buffer] (0x0100): [RID#139] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:02:54): [krb5_child[79442]] [unpack_buffer] (0x2000): [RID#139] No old ccache * (2026-03-14 9:02:54): [krb5_child[79442]] [unpack_buffer] (0x0100): [RID#139] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:02:54): [krb5_child[79442]] [k5c_precreate_ccache] (0x4000): [RID#139] Recreating ccache * (2026-03-14 9:02:54): [krb5_child[79442]] [k5c_setup_fast] (0x0100): [RID#139] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 9:02:54): [krb5_child[79442]] [find_principal_in_keytab] (0x4000): [RID#139] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:02:54): [krb5_child[79442]] [match_principal] (0x1000): [RID#139] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 9:02:54): [krb5_child[79442]] [check_fast_ccache] (0x0200): [RID#139] FAST TGT is still valid. * (2026-03-14 9:02:54): [krb5_child[79442]] [become_user] (0x0200): [RID#139] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:02:54): [krb5_child[79442]] [main] (0x2000): [RID#139] Running as [1592400000][1592400000]. * (2026-03-14 9:02:54): [krb5_child[79442]] [set_lifetime_options] (0x0100): [RID#139] No specific renewable lifetime requested. * (2026-03-14 9:02:54): [krb5_child[79442]] [set_lifetime_options] (0x0100): [RID#139] No specific lifetime requested. * (2026-03-14 9:02:54): [krb5_child[79442]] [set_canonicalize_option] (0x0100): [RID#139] Canonicalization is set to [true] * (2026-03-14 9:02:54): [krb5_child[79442]] [main] (0x0400): [RID#139] Will perform auth * (2026-03-14 9:02:54): [krb5_child[79442]] [main] (0x0400): [RID#139] Will perform online auth * (2026-03-14 9:02:54): [krb5_child[79442]] [tgt_req_child] (0x1000): [RID#139] Attempting to get a TGT * (2026-03-14 9:02:54): [krb5_child[79442]] [get_and_save_tgt] (0x0400): [RID#139] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:02:54): [krb5_child[79442]] [sss_krb5_responder] (0x4000): [RID#139] Got question [password]. * (2026-03-14 9:02:54): [krb5_child[79442]] [get_and_save_tgt] (0x0020): [RID#139] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:02:54): [krb5_child[79442]] [map_krb5_error] (0x0020): [RID#139] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:14:35): [krb5_child[87276]] [get_and_save_tgt] (0x0020): [RID#156] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:14:35): [krb5_child[87276]] [main] (0x0400): [RID#156] krb5_child started. * (2026-03-14 9:14:35): [krb5_child[87276]] [unpack_buffer] (0x1000): [RID#156] total buffer size: [97] * (2026-03-14 9:14:35): [krb5_child[87276]] [unpack_buffer] (0x0100): [RID#156] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:14:35): [krb5_child[87276]] [unpack_buffer] (0x2000): [RID#156] No old ccache * (2026-03-14 9:14:35): [krb5_child[87276]] [unpack_buffer] (0x0100): [RID#156] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:14:35): [krb5_child[87276]] [k5c_precreate_ccache] (0x4000): [RID#156] Recreating ccache * (2026-03-14 9:14:35): [krb5_child[87276]] [k5c_setup_fast] (0x0100): [RID#156] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 9:14:35): [krb5_child[87276]] [find_principal_in_keytab] (0x4000): [RID#156] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:14:35): [krb5_child[87276]] [match_principal] (0x1000): [RID#156] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 9:14:35): [krb5_child[87276]] [check_fast_ccache] (0x0200): [RID#156] FAST TGT is still valid. * (2026-03-14 9:14:35): [krb5_child[87276]] [become_user] (0x0200): [RID#156] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:14:35): [krb5_child[87276]] [main] (0x2000): [RID#156] Running as [1592400000][1592400000]. * (2026-03-14 9:14:35): [krb5_child[87276]] [set_lifetime_options] (0x0100): [RID#156] No specific renewable lifetime requested. * (2026-03-14 9:14:35): [krb5_child[87276]] [set_lifetime_options] (0x0100): [RID#156] No specific lifetime requested. * (2026-03-14 9:14:35): [krb5_child[87276]] [set_canonicalize_option] (0x0100): [RID#156] Canonicalization is set to [true] * (2026-03-14 9:14:35): [krb5_child[87276]] [main] (0x0400): [RID#156] Will perform auth * (2026-03-14 9:14:35): [krb5_child[87276]] [main] (0x0400): [RID#156] Will perform online auth * (2026-03-14 9:14:35): [krb5_child[87276]] [tgt_req_child] (0x1000): [RID#156] Attempting to get a TGT * (2026-03-14 9:14:35): [krb5_child[87276]] [get_and_save_tgt] (0x0400): [RID#156] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:14:35): [krb5_child[87276]] [sss_krb5_responder] (0x4000): [RID#156] Got question [password]. * (2026-03-14 9:14:35): [krb5_child[87276]] [get_and_save_tgt] (0x0020): [RID#156] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:14:35): [krb5_child[87276]] [map_krb5_error] (0x0020): [RID#156] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:14:39): [krb5_child[87318]] [get_and_save_tgt] (0x0020): [RID#158] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:14:39): [krb5_child[87318]] [main] (0x0400): [RID#158] krb5_child started. * (2026-03-14 9:14:39): [krb5_child[87318]] [unpack_buffer] (0x1000): [RID#158] total buffer size: [97] * (2026-03-14 9:14:39): [krb5_child[87318]] [unpack_buffer] (0x0100): [RID#158] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:14:39): [krb5_child[87318]] [unpack_buffer] (0x2000): [RID#158] No old ccache * (2026-03-14 9:14:39): [krb5_child[87318]] [unpack_buffer] (0x0100): [RID#158] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:14:39): [krb5_child[87318]] [k5c_precreate_ccache] (0x4000): [RID#158] Recreating ccache * (2026-03-14 9:14:39): [krb5_child[87318]] [k5c_setup_fast] (0x0100): [RID#158] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 9:14:39): [krb5_child[87318]] [find_principal_in_keytab] (0x4000): [RID#158] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:14:39): [krb5_child[87318]] [match_principal] (0x1000): [RID#158] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 9:14:39): [krb5_child[87318]] [check_fast_ccache] (0x0200): [RID#158] FAST TGT is still valid. * (2026-03-14 9:14:39): [krb5_child[87318]] [become_user] (0x0200): [RID#158] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:14:39): [krb5_child[87318]] [main] (0x2000): [RID#158] Running as [1592400000][1592400000]. * (2026-03-14 9:14:39): [krb5_child[87318]] [set_lifetime_options] (0x0100): [RID#158] No specific renewable lifetime requested. * (2026-03-14 9:14:39): [krb5_child[87318]] [set_lifetime_options] (0x0100): [RID#158] No specific lifetime requested. * (2026-03-14 9:14:39): [krb5_child[87318]] [set_canonicalize_option] (0x0100): [RID#158] Canonicalization is set to [true] * (2026-03-14 9:14:39): [krb5_child[87318]] [main] (0x0400): [RID#158] Will perform auth * (2026-03-14 9:14:39): [krb5_child[87318]] [main] (0x0400): [RID#158] Will perform online auth * (2026-03-14 9:14:39): [krb5_child[87318]] [tgt_req_child] (0x1000): [RID#158] Attempting to get a TGT * (2026-03-14 9:14:39): [krb5_child[87318]] [get_and_save_tgt] (0x0400): [RID#158] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:14:39): [krb5_child[87318]] [sss_krb5_responder] (0x4000): [RID#158] Got question [password]. * (2026-03-14 9:14:39): [krb5_child[87318]] [get_and_save_tgt] (0x0020): [RID#158] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:14:39): [krb5_child[87318]] [map_krb5_error] (0x0020): [RID#158] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:25:36): [krb5_child[104342]] [get_and_save_tgt] (0x0020): [RID#177] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:25:36): [krb5_child[104342]] [main] (0x0400): [RID#177] krb5_child started. * (2026-03-14 9:25:36): [krb5_child[104342]] [unpack_buffer] (0x1000): [RID#177] total buffer size: [98] * (2026-03-14 9:25:36): [krb5_child[104342]] [unpack_buffer] (0x0100): [RID#177] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:25:36): [krb5_child[104342]] [unpack_buffer] (0x2000): [RID#177] No old ccache * (2026-03-14 9:25:36): [krb5_child[104342]] [unpack_buffer] (0x0100): [RID#177] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:25:36): [krb5_child[104342]] [k5c_precreate_ccache] (0x4000): [RID#177] Recreating ccache * (2026-03-14 9:25:36): [krb5_child[104342]] [k5c_setup_fast] (0x0100): [RID#177] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 9:25:36): [krb5_child[104342]] [find_principal_in_keytab] (0x4000): [RID#177] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:25:36): [krb5_child[104342]] [match_principal] (0x1000): [RID#177] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 9:25:36): [krb5_child[104342]] [check_fast_ccache] (0x0200): [RID#177] FAST TGT is still valid. * (2026-03-14 9:25:36): [krb5_child[104342]] [become_user] (0x0200): [RID#177] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:25:36): [krb5_child[104342]] [main] (0x2000): [RID#177] Running as [1592400000][1592400000]. * (2026-03-14 9:25:36): [krb5_child[104342]] [set_lifetime_options] (0x0100): [RID#177] No specific renewable lifetime requested. * (2026-03-14 9:25:36): [krb5_child[104342]] [set_lifetime_options] (0x0100): [RID#177] No specific lifetime requested. * (2026-03-14 9:25:36): [krb5_child[104342]] [set_canonicalize_option] (0x0100): [RID#177] Canonicalization is set to [true] * (2026-03-14 9:25:36): [krb5_child[104342]] [main] (0x0400): [RID#177] Will perform auth * (2026-03-14 9:25:36): [krb5_child[104342]] [main] (0x0400): [RID#177] Will perform online auth * (2026-03-14 9:25:36): [krb5_child[104342]] [tgt_req_child] (0x1000): [RID#177] Attempting to get a TGT * (2026-03-14 9:25:36): [krb5_child[104342]] [get_and_save_tgt] (0x0400): [RID#177] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:25:36): [krb5_child[104342]] [get_and_save_tgt] (0x0020): [RID#177] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:25:36): [krb5_child[104342]] [map_krb5_error] (0x0020): [RID#177] 2138: [-1765328366][Client's credentials have been revoked] (2026-03-14 9:25:41): [krb5_child[104456]] [get_and_save_tgt] (0x0020): [RID#179] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:25:41): [krb5_child[104456]] [main] (0x0400): [RID#179] krb5_child started. * (2026-03-14 9:25:41): [krb5_child[104456]] [unpack_buffer] (0x1000): [RID#179] total buffer size: [98] * (2026-03-14 9:25:41): [krb5_child[104456]] [unpack_buffer] (0x0100): [RID#179] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:25:41): [krb5_child[104456]] [unpack_buffer] (0x2000): [RID#179] No old ccache * (2026-03-14 9:25:41): [krb5_child[104456]] [unpack_buffer] (0x0100): [RID#179] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:25:41): [krb5_child[104456]] [k5c_precreate_ccache] (0x4000): [RID#179] Recreating ccache * (2026-03-14 9:25:41): [krb5_child[104456]] [k5c_setup_fast] (0x0100): [RID#179] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 9:25:41): [krb5_child[104456]] [find_principal_in_keytab] (0x4000): [RID#179] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:25:41): [krb5_child[104456]] [match_principal] (0x1000): [RID#179] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 9:25:41): [krb5_child[104456]] [check_fast_ccache] (0x0200): [RID#179] FAST TGT is still valid. * (2026-03-14 9:25:41): [krb5_child[104456]] [become_user] (0x0200): [RID#179] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:25:41): [krb5_child[104456]] [main] (0x2000): [RID#179] Running as [1592400000][1592400000]. * (2026-03-14 9:25:41): [krb5_child[104456]] [set_lifetime_options] (0x0100): [RID#179] No specific renewable lifetime requested. * (2026-03-14 9:25:41): [krb5_child[104456]] [set_lifetime_options] (0x0100): [RID#179] No specific lifetime requested. * (2026-03-14 9:25:41): [krb5_child[104456]] [set_canonicalize_option] (0x0100): [RID#179] Canonicalization is set to [true] * (2026-03-14 9:25:41): [krb5_child[104456]] [main] (0x0400): [RID#179] Will perform auth * (2026-03-14 9:25:41): [krb5_child[104456]] [main] (0x0400): [RID#179] Will perform online auth * (2026-03-14 9:25:41): [krb5_child[104456]] [tgt_req_child] (0x1000): [RID#179] Attempting to get a TGT * (2026-03-14 9:25:41): [krb5_child[104456]] [get_and_save_tgt] (0x0400): [RID#179] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:25:41): [krb5_child[104456]] [get_and_save_tgt] (0x0020): [RID#179] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:25:41): [krb5_child[104456]] [map_krb5_error] (0x0020): [RID#179] 2138: [-1765328366][Client's credentials have been revoked] (2026-03-14 9:25:44): [krb5_child[104809]] [get_and_save_tgt] (0x0020): [RID#182] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:25:44): [krb5_child[104809]] [main] (0x0400): [RID#182] krb5_child started. * (2026-03-14 9:25:44): [krb5_child[104809]] [unpack_buffer] (0x1000): [RID#182] total buffer size: [103] * (2026-03-14 9:25:44): [krb5_child[104809]] [unpack_buffer] (0x0100): [RID#182] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:25:44): [krb5_child[104809]] [unpack_buffer] (0x2000): [RID#182] No old ccache * (2026-03-14 9:25:44): [krb5_child[104809]] [unpack_buffer] (0x0100): [RID#182] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:25:44): [krb5_child[104809]] [k5c_precreate_ccache] (0x4000): [RID#182] Recreating ccache * (2026-03-14 9:25:44): [krb5_child[104809]] [k5c_setup_fast] (0x0100): [RID#182] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 9:25:44): [krb5_child[104809]] [find_principal_in_keytab] (0x4000): [RID#182] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:25:44): [krb5_child[104809]] [match_principal] (0x1000): [RID#182] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 9:25:44): [krb5_child[104809]] [check_fast_ccache] (0x0200): [RID#182] FAST TGT is still valid. * (2026-03-14 9:25:44): [krb5_child[104809]] [become_user] (0x0200): [RID#182] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:25:44): [krb5_child[104809]] [main] (0x2000): [RID#182] Running as [1592400000][1592400000]. * (2026-03-14 9:25:44): [krb5_child[104809]] [set_lifetime_options] (0x0100): [RID#182] No specific renewable lifetime requested. * (2026-03-14 9:25:44): [krb5_child[104809]] [set_lifetime_options] (0x0100): [RID#182] No specific lifetime requested. * (2026-03-14 9:25:44): [krb5_child[104809]] [set_canonicalize_option] (0x0100): [RID#182] Canonicalization is set to [true] * (2026-03-14 9:25:44): [krb5_child[104809]] [main] (0x0400): [RID#182] Will perform auth * (2026-03-14 9:25:44): [krb5_child[104809]] [main] (0x0400): [RID#182] Will perform online auth * (2026-03-14 9:25:44): [krb5_child[104809]] [tgt_req_child] (0x1000): [RID#182] Attempting to get a TGT * (2026-03-14 9:25:44): [krb5_child[104809]] [get_and_save_tgt] (0x0400): [RID#182] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:25:44): [krb5_child[104809]] [get_and_save_tgt] (0x0020): [RID#182] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:25:44): [krb5_child[104809]] [map_krb5_error] (0x0020): [RID#182] 2138: [-1765328366][Client's credentials have been revoked] (2026-03-14 9:25:46): [krb5_child[104839]] [get_and_save_tgt] (0x0020): [RID#184] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:25:46): [krb5_child[104839]] [main] (0x0400): [RID#184] krb5_child started. * (2026-03-14 9:25:46): [krb5_child[104839]] [unpack_buffer] (0x1000): [RID#184] total buffer size: [103] * (2026-03-14 9:25:46): [krb5_child[104839]] [unpack_buffer] (0x0100): [RID#184] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:25:46): [krb5_child[104839]] [unpack_buffer] (0x2000): [RID#184] No old ccache * (2026-03-14 9:25:46): [krb5_child[104839]] [unpack_buffer] (0x0100): [RID#184] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:25:46): [krb5_child[104839]] [k5c_precreate_ccache] (0x4000): [RID#184] Recreating ccache * (2026-03-14 9:25:46): [krb5_child[104839]] [k5c_setup_fast] (0x0100): [RID#184] Fast principal is set to [host/np0005647038.ooo.test@OOO.TEST] * (2026-03-14 9:25:46): [krb5_child[104839]] [find_principal_in_keytab] (0x4000): [RID#184] Trying to find principal host/np0005647038.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:25:46): [krb5_child[104839]] [match_principal] (0x1000): [RID#184] Principal matched to the sample (host/np0005647038.ooo.test@OOO.TEST). * (2026-03-14 9:25:46): [krb5_child[104839]] [check_fast_ccache] (0x0200): [RID#184] FAST TGT is still valid. * (2026-03-14 9:25:46): [krb5_child[104839]] [become_user] (0x0200): [RID#184] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:25:46): [krb5_child[104839]] [main] (0x2000): [RID#184] Running as [1592400000][1592400000]. * (2026-03-14 9:25:46): [krb5_child[104839]] [set_lifetime_options] (0x0100): [RID#184] No specific renewable lifetime requested. * (2026-03-14 9:25:46): [krb5_child[104839]] [set_lifetime_options] (0x0100): [RID#184] No specific lifetime requested. * (2026-03-14 9:25:46): [krb5_child[104839]] [set_canonicalize_option] (0x0100): [RID#184] Canonicalization is set to [true] * (2026-03-14 9:25:46): [krb5_child[104839]] [main] (0x0400): [RID#184] Will perform auth * (2026-03-14 9:25:46): [krb5_child[104839]] [main] (0x0400): [RID#184] Will perform online auth * (2026-03-14 9:25:46): [krb5_child[104839]] [tgt_req_child] (0x1000): [RID#184] Attempting to get a TGT * (2026-03-14 9:25:46): [krb5_child[104839]] [get_and_save_tgt] (0x0400): [RID#184] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:25:46): [krb5_child[104839]] [get_and_save_tgt] (0x0020): [RID#184] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:25:46): [krb5_child[104839]] [map_krb5_error] (0x0020): [RID#184] 2138: [-1765328366][Client's credentials have been revoked]