(2026-03-14 8:56:23): [krb5_child[76020]] [get_and_save_tgt] (0x0020): [RID#54] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:56:23): [krb5_child[76020]] [main] (0x0400): [RID#54] krb5_child started. * (2026-03-14 8:56:23): [krb5_child[76020]] [unpack_buffer] (0x1000): [RID#54] total buffer size: [99] * (2026-03-14 8:56:23): [krb5_child[76020]] [unpack_buffer] (0x0100): [RID#54] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:56:23): [krb5_child[76020]] [unpack_buffer] (0x2000): [RID#54] No old ccache * (2026-03-14 8:56:23): [krb5_child[76020]] [unpack_buffer] (0x0100): [RID#54] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:56:23): [krb5_child[76020]] [k5c_precreate_ccache] (0x4000): [RID#54] Recreating ccache * (2026-03-14 8:56:23): [krb5_child[76020]] [k5c_setup_fast] (0x0100): [RID#54] Fast principal is set to [host/np0005647039.ooo.test@OOO.TEST] * (2026-03-14 8:56:23): [krb5_child[76020]] [find_principal_in_keytab] (0x4000): [RID#54] Trying to find principal host/np0005647039.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:56:23): [krb5_child[76020]] [match_principal] (0x1000): [RID#54] Principal matched to the sample (host/np0005647039.ooo.test@OOO.TEST). * (2026-03-14 8:56:23): [krb5_child[76020]] [check_fast_ccache] (0x0200): [RID#54] FAST TGT is still valid. * (2026-03-14 8:56:23): [krb5_child[76020]] [become_user] (0x0200): [RID#54] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:56:23): [krb5_child[76020]] [main] (0x2000): [RID#54] Running as [1592400000][1592400000]. * (2026-03-14 8:56:23): [krb5_child[76020]] [set_lifetime_options] (0x0100): [RID#54] No specific renewable lifetime requested. * (2026-03-14 8:56:23): [krb5_child[76020]] [set_lifetime_options] (0x0100): [RID#54] No specific lifetime requested. * (2026-03-14 8:56:23): [krb5_child[76020]] [set_canonicalize_option] (0x0100): [RID#54] Canonicalization is set to [true] * (2026-03-14 8:56:23): [krb5_child[76020]] [main] (0x0400): [RID#54] Will perform auth * (2026-03-14 8:56:23): [krb5_child[76020]] [main] (0x0400): [RID#54] Will perform online auth * (2026-03-14 8:56:23): [krb5_child[76020]] [tgt_req_child] (0x1000): [RID#54] Attempting to get a TGT * (2026-03-14 8:56:23): [krb5_child[76020]] [get_and_save_tgt] (0x0400): [RID#54] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:56:23): [krb5_child[76020]] [sss_krb5_responder] (0x4000): [RID#54] Got question [password]. * (2026-03-14 8:56:23): [krb5_child[76020]] [get_and_save_tgt] (0x0020): [RID#54] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:56:23): [krb5_child[76020]] [map_krb5_error] (0x0020): [RID#54] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:58:23): [krb5_child[76945]] [get_and_save_tgt] (0x0020): [RID#59] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:58:23): [krb5_child[76945]] [main] (0x0400): [RID#59] krb5_child started. * (2026-03-14 8:58:23): [krb5_child[76945]] [unpack_buffer] (0x1000): [RID#59] total buffer size: [101] * (2026-03-14 8:58:23): [krb5_child[76945]] [unpack_buffer] (0x0100): [RID#59] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:58:23): [krb5_child[76945]] [unpack_buffer] (0x2000): [RID#59] No old ccache * (2026-03-14 8:58:23): [krb5_child[76945]] [unpack_buffer] (0x0100): [RID#59] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:58:23): [krb5_child[76945]] [k5c_precreate_ccache] (0x4000): [RID#59] Recreating ccache * (2026-03-14 8:58:23): [krb5_child[76945]] [k5c_setup_fast] (0x0100): [RID#59] Fast principal is set to [host/np0005647039.ooo.test@OOO.TEST] * (2026-03-14 8:58:23): [krb5_child[76945]] [find_principal_in_keytab] (0x4000): [RID#59] Trying to find principal host/np0005647039.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:58:23): [krb5_child[76945]] [match_principal] (0x1000): [RID#59] Principal matched to the sample (host/np0005647039.ooo.test@OOO.TEST). * (2026-03-14 8:58:23): [krb5_child[76945]] [check_fast_ccache] (0x0200): [RID#59] FAST TGT is still valid. * (2026-03-14 8:58:23): [krb5_child[76945]] [become_user] (0x0200): [RID#59] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:58:23): [krb5_child[76945]] [main] (0x2000): [RID#59] Running as [1592400000][1592400000]. * (2026-03-14 8:58:23): [krb5_child[76945]] [set_lifetime_options] (0x0100): [RID#59] No specific renewable lifetime requested. * (2026-03-14 8:58:23): [krb5_child[76945]] [set_lifetime_options] (0x0100): [RID#59] No specific lifetime requested. * (2026-03-14 8:58:23): [krb5_child[76945]] [set_canonicalize_option] (0x0100): [RID#59] Canonicalization is set to [true] * (2026-03-14 8:58:23): [krb5_child[76945]] [main] (0x0400): [RID#59] Will perform auth * (2026-03-14 8:58:23): [krb5_child[76945]] [main] (0x0400): [RID#59] Will perform online auth * (2026-03-14 8:58:23): [krb5_child[76945]] [tgt_req_child] (0x1000): [RID#59] Attempting to get a TGT * (2026-03-14 8:58:23): [krb5_child[76945]] [get_and_save_tgt] (0x0400): [RID#59] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:58:23): [krb5_child[76945]] [sss_krb5_responder] (0x4000): [RID#59] Got question [password]. * (2026-03-14 8:58:23): [krb5_child[76945]] [get_and_save_tgt] (0x0020): [RID#59] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:58:23): [krb5_child[76945]] [map_krb5_error] (0x0020): [RID#59] 2138: [-1765328360][Preauthentication failed] (2026-03-14 8:58:26): [krb5_child[76949]] [get_and_save_tgt] (0x0020): [RID#61] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 8:58:26): [krb5_child[76949]] [main] (0x0400): [RID#61] krb5_child started. * (2026-03-14 8:58:26): [krb5_child[76949]] [unpack_buffer] (0x1000): [RID#61] total buffer size: [101] * (2026-03-14 8:58:26): [krb5_child[76949]] [unpack_buffer] (0x0100): [RID#61] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 8:58:26): [krb5_child[76949]] [unpack_buffer] (0x2000): [RID#61] No old ccache * (2026-03-14 8:58:26): [krb5_child[76949]] [unpack_buffer] (0x0100): [RID#61] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 8:58:26): [krb5_child[76949]] [k5c_precreate_ccache] (0x4000): [RID#61] Recreating ccache * (2026-03-14 8:58:26): [krb5_child[76949]] [k5c_setup_fast] (0x0100): [RID#61] Fast principal is set to [host/np0005647039.ooo.test@OOO.TEST] * (2026-03-14 8:58:26): [krb5_child[76949]] [find_principal_in_keytab] (0x4000): [RID#61] Trying to find principal host/np0005647039.ooo.test@OOO.TEST in keytab. * (2026-03-14 8:58:26): [krb5_child[76949]] [match_principal] (0x1000): [RID#61] Principal matched to the sample (host/np0005647039.ooo.test@OOO.TEST). * (2026-03-14 8:58:26): [krb5_child[76949]] [check_fast_ccache] (0x0200): [RID#61] FAST TGT is still valid. * (2026-03-14 8:58:26): [krb5_child[76949]] [become_user] (0x0200): [RID#61] Trying to become user [1592400000][1592400000]. * (2026-03-14 8:58:26): [krb5_child[76949]] [main] (0x2000): [RID#61] Running as [1592400000][1592400000]. * (2026-03-14 8:58:26): [krb5_child[76949]] [set_lifetime_options] (0x0100): [RID#61] No specific renewable lifetime requested. * (2026-03-14 8:58:26): [krb5_child[76949]] [set_lifetime_options] (0x0100): [RID#61] No specific lifetime requested. * (2026-03-14 8:58:26): [krb5_child[76949]] [set_canonicalize_option] (0x0100): [RID#61] Canonicalization is set to [true] * (2026-03-14 8:58:26): [krb5_child[76949]] [main] (0x0400): [RID#61] Will perform auth * (2026-03-14 8:58:26): [krb5_child[76949]] [main] (0x0400): [RID#61] Will perform online auth * (2026-03-14 8:58:26): [krb5_child[76949]] [tgt_req_child] (0x1000): [RID#61] Attempting to get a TGT * (2026-03-14 8:58:26): [krb5_child[76949]] [get_and_save_tgt] (0x0400): [RID#61] Attempting kinit for realm [OOO.TEST] * (2026-03-14 8:58:26): [krb5_child[76949]] [sss_krb5_responder] (0x4000): [RID#61] Got question [password]. * (2026-03-14 8:58:26): [krb5_child[76949]] [get_and_save_tgt] (0x0020): [RID#61] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 8:58:26): [krb5_child[76949]] [map_krb5_error] (0x0020): [RID#61] 2138: [-1765328360][Preauthentication failed] (2026-03-14 9:25:09): [krb5_child[104247]] [get_and_save_tgt] (0x0020): [RID#95] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:25:09): [krb5_child[104247]] [main] (0x0400): [RID#95] krb5_child started. * (2026-03-14 9:25:09): [krb5_child[104247]] [unpack_buffer] (0x1000): [RID#95] total buffer size: [97] * (2026-03-14 9:25:09): [krb5_child[104247]] [unpack_buffer] (0x0100): [RID#95] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:25:09): [krb5_child[104247]] [unpack_buffer] (0x2000): [RID#95] No old ccache * (2026-03-14 9:25:09): [krb5_child[104247]] [unpack_buffer] (0x0100): [RID#95] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:25:09): [krb5_child[104247]] [k5c_precreate_ccache] (0x4000): [RID#95] Recreating ccache * (2026-03-14 9:25:09): [krb5_child[104247]] [k5c_setup_fast] (0x0100): [RID#95] Fast principal is set to [host/np0005647039.ooo.test@OOO.TEST] * (2026-03-14 9:25:09): [krb5_child[104247]] [find_principal_in_keytab] (0x4000): [RID#95] Trying to find principal host/np0005647039.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:25:09): [krb5_child[104247]] [match_principal] (0x1000): [RID#95] Principal matched to the sample (host/np0005647039.ooo.test@OOO.TEST). * (2026-03-14 9:25:09): [krb5_child[104247]] [check_fast_ccache] (0x0200): [RID#95] FAST TGT is still valid. * (2026-03-14 9:25:09): [krb5_child[104247]] [become_user] (0x0200): [RID#95] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:25:09): [krb5_child[104247]] [main] (0x2000): [RID#95] Running as [1592400000][1592400000]. * (2026-03-14 9:25:09): [krb5_child[104247]] [set_lifetime_options] (0x0100): [RID#95] No specific renewable lifetime requested. * (2026-03-14 9:25:09): [krb5_child[104247]] [set_lifetime_options] (0x0100): [RID#95] No specific lifetime requested. * (2026-03-14 9:25:09): [krb5_child[104247]] [set_canonicalize_option] (0x0100): [RID#95] Canonicalization is set to [true] * (2026-03-14 9:25:09): [krb5_child[104247]] [main] (0x0400): [RID#95] Will perform auth * (2026-03-14 9:25:09): [krb5_child[104247]] [main] (0x0400): [RID#95] Will perform online auth * (2026-03-14 9:25:09): [krb5_child[104247]] [tgt_req_child] (0x1000): [RID#95] Attempting to get a TGT * (2026-03-14 9:25:09): [krb5_child[104247]] [get_and_save_tgt] (0x0400): [RID#95] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:25:09): [krb5_child[104247]] [get_and_save_tgt] (0x0020): [RID#95] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:25:09): [krb5_child[104247]] [map_krb5_error] (0x0020): [RID#95] 2138: [-1765328366][Client's credentials have been revoked] (2026-03-14 9:25:13): [krb5_child[104256]] [get_and_save_tgt] (0x0020): [RID#97] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-14 9:25:13): [krb5_child[104256]] [main] (0x0400): [RID#97] krb5_child started. * (2026-03-14 9:25:13): [krb5_child[104256]] [unpack_buffer] (0x1000): [RID#97] total buffer size: [97] * (2026-03-14 9:25:13): [krb5_child[104256]] [unpack_buffer] (0x0100): [RID#97] cmd [241 (auth)] uid [1592400000] gid [1592400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-14 9:25:13): [krb5_child[104256]] [unpack_buffer] (0x2000): [RID#97] No old ccache * (2026-03-14 9:25:13): [krb5_child[104256]] [unpack_buffer] (0x0100): [RID#97] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-14 9:25:13): [krb5_child[104256]] [k5c_precreate_ccache] (0x4000): [RID#97] Recreating ccache * (2026-03-14 9:25:13): [krb5_child[104256]] [k5c_setup_fast] (0x0100): [RID#97] Fast principal is set to [host/np0005647039.ooo.test@OOO.TEST] * (2026-03-14 9:25:13): [krb5_child[104256]] [find_principal_in_keytab] (0x4000): [RID#97] Trying to find principal host/np0005647039.ooo.test@OOO.TEST in keytab. * (2026-03-14 9:25:13): [krb5_child[104256]] [match_principal] (0x1000): [RID#97] Principal matched to the sample (host/np0005647039.ooo.test@OOO.TEST). * (2026-03-14 9:25:13): [krb5_child[104256]] [check_fast_ccache] (0x0200): [RID#97] FAST TGT is still valid. * (2026-03-14 9:25:13): [krb5_child[104256]] [become_user] (0x0200): [RID#97] Trying to become user [1592400000][1592400000]. * (2026-03-14 9:25:13): [krb5_child[104256]] [main] (0x2000): [RID#97] Running as [1592400000][1592400000]. * (2026-03-14 9:25:13): [krb5_child[104256]] [set_lifetime_options] (0x0100): [RID#97] No specific renewable lifetime requested. * (2026-03-14 9:25:13): [krb5_child[104256]] [set_lifetime_options] (0x0100): [RID#97] No specific lifetime requested. * (2026-03-14 9:25:13): [krb5_child[104256]] [set_canonicalize_option] (0x0100): [RID#97] Canonicalization is set to [true] * (2026-03-14 9:25:13): [krb5_child[104256]] [main] (0x0400): [RID#97] Will perform auth * (2026-03-14 9:25:13): [krb5_child[104256]] [main] (0x0400): [RID#97] Will perform online auth * (2026-03-14 9:25:13): [krb5_child[104256]] [tgt_req_child] (0x1000): [RID#97] Attempting to get a TGT * (2026-03-14 9:25:13): [krb5_child[104256]] [get_and_save_tgt] (0x0400): [RID#97] Attempting kinit for realm [OOO.TEST] * (2026-03-14 9:25:13): [krb5_child[104256]] [get_and_save_tgt] (0x0020): [RID#97] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-14 9:25:13): [krb5_child[104256]] [map_krb5_error] (0x0020): [RID#97] 2138: [-1765328366][Client's credentials have been revoked]