(2026-02-25 8:43:32): [krb5_child[77377]] [get_and_save_tgt] (0x0020): [RID#113] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:43:32): [krb5_child[77377]] [main] (0x0400): [RID#113] krb5_child started. * (2026-02-25 8:43:32): [krb5_child[77377]] [unpack_buffer] (0x1000): [RID#113] total buffer size: [97] * (2026-02-25 8:43:32): [krb5_child[77377]] [unpack_buffer] (0x0100): [RID#113] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:43:32): [krb5_child[77377]] [unpack_buffer] (0x2000): [RID#113] No old ccache * (2026-02-25 8:43:32): [krb5_child[77377]] [unpack_buffer] (0x0100): [RID#113] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:43:32): [krb5_child[77377]] [k5c_precreate_ccache] (0x4000): [RID#113] Recreating ccache * (2026-02-25 8:43:32): [krb5_child[77377]] [k5c_setup_fast] (0x0100): [RID#113] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:43:32): [krb5_child[77377]] [find_principal_in_keytab] (0x4000): [RID#113] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:43:32): [krb5_child[77377]] [match_principal] (0x1000): [RID#113] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:43:32): [krb5_child[77377]] [check_fast_ccache] (0x0200): [RID#113] FAST TGT is still valid. * (2026-02-25 8:43:32): [krb5_child[77377]] [become_user] (0x0200): [RID#113] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:43:32): [krb5_child[77377]] [main] (0x2000): [RID#113] Running as [1388400000][1388400000]. * (2026-02-25 8:43:32): [krb5_child[77377]] [set_lifetime_options] (0x0100): [RID#113] No specific renewable lifetime requested. * (2026-02-25 8:43:32): [krb5_child[77377]] [set_lifetime_options] (0x0100): [RID#113] No specific lifetime requested. * (2026-02-25 8:43:32): [krb5_child[77377]] [set_canonicalize_option] (0x0100): [RID#113] Canonicalization is set to [true] * (2026-02-25 8:43:32): [krb5_child[77377]] [main] (0x0400): [RID#113] Will perform auth * (2026-02-25 8:43:32): [krb5_child[77377]] [main] (0x0400): [RID#113] Will perform online auth * (2026-02-25 8:43:32): [krb5_child[77377]] [tgt_req_child] (0x1000): [RID#113] Attempting to get a TGT * (2026-02-25 8:43:32): [krb5_child[77377]] [get_and_save_tgt] (0x0400): [RID#113] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:43:32): [krb5_child[77377]] [sss_krb5_responder] (0x4000): [RID#113] Got question [password]. * (2026-02-25 8:43:32): [krb5_child[77377]] [get_and_save_tgt] (0x0020): [RID#113] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:43:32): [krb5_child[77377]] [map_krb5_error] (0x0020): [RID#113] 2138: [-1765328360][Preauthentication failed] (2026-02-25 8:43:38): [krb5_child[77407]] [get_and_save_tgt] (0x0020): [RID#116] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:43:38): [krb5_child[77407]] [main] (0x0400): [RID#116] krb5_child started. * (2026-02-25 8:43:38): [krb5_child[77407]] [unpack_buffer] (0x1000): [RID#116] total buffer size: [97] * (2026-02-25 8:43:38): [krb5_child[77407]] [unpack_buffer] (0x0100): [RID#116] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:43:38): [krb5_child[77407]] [unpack_buffer] (0x2000): [RID#116] No old ccache * (2026-02-25 8:43:38): [krb5_child[77407]] [unpack_buffer] (0x0100): [RID#116] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:43:38): [krb5_child[77407]] [k5c_precreate_ccache] (0x4000): [RID#116] Recreating ccache * (2026-02-25 8:43:38): [krb5_child[77407]] [k5c_setup_fast] (0x0100): [RID#116] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:43:38): [krb5_child[77407]] [find_principal_in_keytab] (0x4000): [RID#116] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:43:38): [krb5_child[77407]] [match_principal] (0x1000): [RID#116] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:43:38): [krb5_child[77407]] [check_fast_ccache] (0x0200): [RID#116] FAST TGT is still valid. * (2026-02-25 8:43:38): [krb5_child[77407]] [become_user] (0x0200): [RID#116] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:43:38): [krb5_child[77407]] [main] (0x2000): [RID#116] Running as [1388400000][1388400000]. * (2026-02-25 8:43:38): [krb5_child[77407]] [set_lifetime_options] (0x0100): [RID#116] No specific renewable lifetime requested. * (2026-02-25 8:43:38): [krb5_child[77407]] [set_lifetime_options] (0x0100): [RID#116] No specific lifetime requested. * (2026-02-25 8:43:38): [krb5_child[77407]] [set_canonicalize_option] (0x0100): [RID#116] Canonicalization is set to [true] * (2026-02-25 8:43:38): [krb5_child[77407]] [main] (0x0400): [RID#116] Will perform auth * (2026-02-25 8:43:38): [krb5_child[77407]] [main] (0x0400): [RID#116] Will perform online auth * (2026-02-25 8:43:38): [krb5_child[77407]] [tgt_req_child] (0x1000): [RID#116] Attempting to get a TGT * (2026-02-25 8:43:38): [krb5_child[77407]] [get_and_save_tgt] (0x0400): [RID#116] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:43:38): [krb5_child[77407]] [sss_krb5_responder] (0x4000): [RID#116] Got question [password]. * (2026-02-25 8:43:38): [krb5_child[77407]] [get_and_save_tgt] (0x0020): [RID#116] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:43:38): [krb5_child[77407]] [map_krb5_error] (0x0020): [RID#116] 2138: [-1765328360][Preauthentication failed] (2026-02-25 8:43:41): [krb5_child[77411]] [get_and_save_tgt] (0x0020): [RID#118] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:43:41): [krb5_child[77411]] [main] (0x0400): [RID#118] krb5_child started. * (2026-02-25 8:43:41): [krb5_child[77411]] [unpack_buffer] (0x1000): [RID#118] total buffer size: [97] * (2026-02-25 8:43:41): [krb5_child[77411]] [unpack_buffer] (0x0100): [RID#118] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:43:41): [krb5_child[77411]] [unpack_buffer] (0x2000): [RID#118] No old ccache * (2026-02-25 8:43:41): [krb5_child[77411]] [unpack_buffer] (0x0100): [RID#118] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:43:41): [krb5_child[77411]] [k5c_precreate_ccache] (0x4000): [RID#118] Recreating ccache * (2026-02-25 8:43:41): [krb5_child[77411]] [k5c_setup_fast] (0x0100): [RID#118] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:43:41): [krb5_child[77411]] [find_principal_in_keytab] (0x4000): [RID#118] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:43:41): [krb5_child[77411]] [match_principal] (0x1000): [RID#118] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:43:41): [krb5_child[77411]] [check_fast_ccache] (0x0200): [RID#118] FAST TGT is still valid. * (2026-02-25 8:43:41): [krb5_child[77411]] [become_user] (0x0200): [RID#118] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:43:41): [krb5_child[77411]] [main] (0x2000): [RID#118] Running as [1388400000][1388400000]. * (2026-02-25 8:43:41): [krb5_child[77411]] [set_lifetime_options] (0x0100): [RID#118] No specific renewable lifetime requested. * (2026-02-25 8:43:41): [krb5_child[77411]] [set_lifetime_options] (0x0100): [RID#118] No specific lifetime requested. * (2026-02-25 8:43:41): [krb5_child[77411]] [set_canonicalize_option] (0x0100): [RID#118] Canonicalization is set to [true] * (2026-02-25 8:43:41): [krb5_child[77411]] [main] (0x0400): [RID#118] Will perform auth * (2026-02-25 8:43:41): [krb5_child[77411]] [main] (0x0400): [RID#118] Will perform online auth * (2026-02-25 8:43:41): [krb5_child[77411]] [tgt_req_child] (0x1000): [RID#118] Attempting to get a TGT * (2026-02-25 8:43:41): [krb5_child[77411]] [get_and_save_tgt] (0x0400): [RID#118] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:43:41): [krb5_child[77411]] [sss_krb5_responder] (0x4000): [RID#118] Got question [password]. * (2026-02-25 8:43:41): [krb5_child[77411]] [get_and_save_tgt] (0x0020): [RID#118] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:43:41): [krb5_child[77411]] [map_krb5_error] (0x0020): [RID#118] 2138: [-1765328360][Preauthentication failed] (2026-02-25 8:43:47): [krb5_child[77446]] [get_and_save_tgt] (0x0020): [RID#121] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:43:46): [krb5_child[77446]] [main] (0x0400): [RID#121] krb5_child started. * (2026-02-25 8:43:46): [krb5_child[77446]] [unpack_buffer] (0x1000): [RID#121] total buffer size: [96] * (2026-02-25 8:43:46): [krb5_child[77446]] [unpack_buffer] (0x0100): [RID#121] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:43:46): [krb5_child[77446]] [unpack_buffer] (0x2000): [RID#121] No old ccache * (2026-02-25 8:43:46): [krb5_child[77446]] [unpack_buffer] (0x0100): [RID#121] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:43:46): [krb5_child[77446]] [k5c_precreate_ccache] (0x4000): [RID#121] Recreating ccache * (2026-02-25 8:43:46): [krb5_child[77446]] [k5c_setup_fast] (0x0100): [RID#121] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:43:46): [krb5_child[77446]] [find_principal_in_keytab] (0x4000): [RID#121] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:43:46): [krb5_child[77446]] [match_principal] (0x1000): [RID#121] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:43:46): [krb5_child[77446]] [check_fast_ccache] (0x0200): [RID#121] FAST TGT is still valid. * (2026-02-25 8:43:46): [krb5_child[77446]] [become_user] (0x0200): [RID#121] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:43:46): [krb5_child[77446]] [main] (0x2000): [RID#121] Running as [1388400000][1388400000]. * (2026-02-25 8:43:46): [krb5_child[77446]] [set_lifetime_options] (0x0100): [RID#121] No specific renewable lifetime requested. * (2026-02-25 8:43:46): [krb5_child[77446]] [set_lifetime_options] (0x0100): [RID#121] No specific lifetime requested. * (2026-02-25 8:43:46): [krb5_child[77446]] [set_canonicalize_option] (0x0100): [RID#121] Canonicalization is set to [true] * (2026-02-25 8:43:46): [krb5_child[77446]] [main] (0x0400): [RID#121] Will perform auth * (2026-02-25 8:43:46): [krb5_child[77446]] [main] (0x0400): [RID#121] Will perform online auth * (2026-02-25 8:43:46): [krb5_child[77446]] [tgt_req_child] (0x1000): [RID#121] Attempting to get a TGT * (2026-02-25 8:43:46): [krb5_child[77446]] [get_and_save_tgt] (0x0400): [RID#121] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:43:46): [krb5_child[77446]] [sss_krb5_responder] (0x4000): [RID#121] Got question [password]. * (2026-02-25 8:43:47): [krb5_child[77446]] [get_and_save_tgt] (0x0020): [RID#121] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:43:47): [krb5_child[77446]] [map_krb5_error] (0x0020): [RID#121] 2138: [-1765328360][Preauthentication failed] (2026-02-25 8:43:52): [krb5_child[77558]] [get_and_save_tgt] (0x0020): [RID#125] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:43:52): [krb5_child[77558]] [main] (0x0400): [RID#125] krb5_child started. * (2026-02-25 8:43:52): [krb5_child[77558]] [unpack_buffer] (0x1000): [RID#125] total buffer size: [96] * (2026-02-25 8:43:52): [krb5_child[77558]] [unpack_buffer] (0x0100): [RID#125] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:43:52): [krb5_child[77558]] [unpack_buffer] (0x2000): [RID#125] No old ccache * (2026-02-25 8:43:52): [krb5_child[77558]] [unpack_buffer] (0x0100): [RID#125] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:43:52): [krb5_child[77558]] [k5c_precreate_ccache] (0x4000): [RID#125] Recreating ccache * (2026-02-25 8:43:52): [krb5_child[77558]] [k5c_setup_fast] (0x0100): [RID#125] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:43:52): [krb5_child[77558]] [find_principal_in_keytab] (0x4000): [RID#125] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:43:52): [krb5_child[77558]] [match_principal] (0x1000): [RID#125] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:43:52): [krb5_child[77558]] [check_fast_ccache] (0x0200): [RID#125] FAST TGT is still valid. * (2026-02-25 8:43:52): [krb5_child[77558]] [become_user] (0x0200): [RID#125] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:43:52): [krb5_child[77558]] [main] (0x2000): [RID#125] Running as [1388400000][1388400000]. * (2026-02-25 8:43:52): [krb5_child[77558]] [set_lifetime_options] (0x0100): [RID#125] No specific renewable lifetime requested. * (2026-02-25 8:43:52): [krb5_child[77558]] [set_lifetime_options] (0x0100): [RID#125] No specific lifetime requested. * (2026-02-25 8:43:52): [krb5_child[77558]] [set_canonicalize_option] (0x0100): [RID#125] Canonicalization is set to [true] * (2026-02-25 8:43:52): [krb5_child[77558]] [main] (0x0400): [RID#125] Will perform auth * (2026-02-25 8:43:52): [krb5_child[77558]] [main] (0x0400): [RID#125] Will perform online auth * (2026-02-25 8:43:52): [krb5_child[77558]] [tgt_req_child] (0x1000): [RID#125] Attempting to get a TGT * (2026-02-25 8:43:52): [krb5_child[77558]] [get_and_save_tgt] (0x0400): [RID#125] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:43:52): [krb5_child[77558]] [sss_krb5_responder] (0x4000): [RID#125] Got question [password]. * (2026-02-25 8:43:52): [krb5_child[77558]] [get_and_save_tgt] (0x0020): [RID#125] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:43:52): [krb5_child[77558]] [map_krb5_error] (0x0020): [RID#125] 2138: [-1765328360][Preauthentication failed] (2026-02-25 8:43:57): [krb5_child[77562]] [get_and_save_tgt] (0x0020): [RID#128] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:43:57): [krb5_child[77562]] [main] (0x0400): [RID#128] krb5_child started. * (2026-02-25 8:43:57): [krb5_child[77562]] [unpack_buffer] (0x1000): [RID#128] total buffer size: [96] * (2026-02-25 8:43:57): [krb5_child[77562]] [unpack_buffer] (0x0100): [RID#128] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:43:57): [krb5_child[77562]] [unpack_buffer] (0x2000): [RID#128] No old ccache * (2026-02-25 8:43:57): [krb5_child[77562]] [unpack_buffer] (0x0100): [RID#128] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:43:57): [krb5_child[77562]] [k5c_precreate_ccache] (0x4000): [RID#128] Recreating ccache * (2026-02-25 8:43:57): [krb5_child[77562]] [k5c_setup_fast] (0x0100): [RID#128] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:43:57): [krb5_child[77562]] [find_principal_in_keytab] (0x4000): [RID#128] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:43:57): [krb5_child[77562]] [match_principal] (0x1000): [RID#128] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:43:57): [krb5_child[77562]] [check_fast_ccache] (0x0200): [RID#128] FAST TGT is still valid. * (2026-02-25 8:43:57): [krb5_child[77562]] [become_user] (0x0200): [RID#128] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:43:57): [krb5_child[77562]] [main] (0x2000): [RID#128] Running as [1388400000][1388400000]. * (2026-02-25 8:43:57): [krb5_child[77562]] [set_lifetime_options] (0x0100): [RID#128] No specific renewable lifetime requested. * (2026-02-25 8:43:57): [krb5_child[77562]] [set_lifetime_options] (0x0100): [RID#128] No specific lifetime requested. * (2026-02-25 8:43:57): [krb5_child[77562]] [set_canonicalize_option] (0x0100): [RID#128] Canonicalization is set to [true] * (2026-02-25 8:43:57): [krb5_child[77562]] [main] (0x0400): [RID#128] Will perform auth * (2026-02-25 8:43:57): [krb5_child[77562]] [main] (0x0400): [RID#128] Will perform online auth * (2026-02-25 8:43:57): [krb5_child[77562]] [tgt_req_child] (0x1000): [RID#128] Attempting to get a TGT * (2026-02-25 8:43:57): [krb5_child[77562]] [get_and_save_tgt] (0x0400): [RID#128] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:43:57): [krb5_child[77562]] [sss_krb5_responder] (0x4000): [RID#128] Got question [password]. * (2026-02-25 8:43:57): [krb5_child[77562]] [get_and_save_tgt] (0x0020): [RID#128] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:43:57): [krb5_child[77562]] [map_krb5_error] (0x0020): [RID#128] 2138: [-1765328360][Preauthentication failed] (2026-02-25 8:44:02): [krb5_child[77589]] [get_and_save_tgt] (0x0020): [RID#130] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:02): [krb5_child[77589]] [main] (0x0400): [RID#130] krb5_child started. * (2026-02-25 8:44:02): [krb5_child[77589]] [unpack_buffer] (0x1000): [RID#130] total buffer size: [97] * (2026-02-25 8:44:02): [krb5_child[77589]] [unpack_buffer] (0x0100): [RID#130] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:02): [krb5_child[77589]] [unpack_buffer] (0x2000): [RID#130] No old ccache * (2026-02-25 8:44:02): [krb5_child[77589]] [unpack_buffer] (0x0100): [RID#130] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:02): [krb5_child[77589]] [k5c_precreate_ccache] (0x4000): [RID#130] Recreating ccache * (2026-02-25 8:44:02): [krb5_child[77589]] [k5c_setup_fast] (0x0100): [RID#130] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:02): [krb5_child[77589]] [find_principal_in_keytab] (0x4000): [RID#130] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:02): [krb5_child[77589]] [match_principal] (0x1000): [RID#130] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:02): [krb5_child[77589]] [check_fast_ccache] (0x0200): [RID#130] FAST TGT is still valid. * (2026-02-25 8:44:02): [krb5_child[77589]] [become_user] (0x0200): [RID#130] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:02): [krb5_child[77589]] [main] (0x2000): [RID#130] Running as [1388400000][1388400000]. * (2026-02-25 8:44:02): [krb5_child[77589]] [set_lifetime_options] (0x0100): [RID#130] No specific renewable lifetime requested. * (2026-02-25 8:44:02): [krb5_child[77589]] [set_lifetime_options] (0x0100): [RID#130] No specific lifetime requested. * (2026-02-25 8:44:02): [krb5_child[77589]] [set_canonicalize_option] (0x0100): [RID#130] Canonicalization is set to [true] * (2026-02-25 8:44:02): [krb5_child[77589]] [main] (0x0400): [RID#130] Will perform auth * (2026-02-25 8:44:02): [krb5_child[77589]] [main] (0x0400): [RID#130] Will perform online auth * (2026-02-25 8:44:02): [krb5_child[77589]] [tgt_req_child] (0x1000): [RID#130] Attempting to get a TGT * (2026-02-25 8:44:02): [krb5_child[77589]] [get_and_save_tgt] (0x0400): [RID#130] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:02): [krb5_child[77589]] [get_and_save_tgt] (0x0020): [RID#130] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:02): [krb5_child[77589]] [map_krb5_error] (0x0020): [RID#130] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:44:07): [krb5_child[77632]] [get_and_save_tgt] (0x0020): [RID#133] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:07): [krb5_child[77632]] [main] (0x0400): [RID#133] krb5_child started. * (2026-02-25 8:44:07): [krb5_child[77632]] [unpack_buffer] (0x1000): [RID#133] total buffer size: [97] * (2026-02-25 8:44:07): [krb5_child[77632]] [unpack_buffer] (0x0100): [RID#133] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:07): [krb5_child[77632]] [unpack_buffer] (0x2000): [RID#133] No old ccache * (2026-02-25 8:44:07): [krb5_child[77632]] [unpack_buffer] (0x0100): [RID#133] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:07): [krb5_child[77632]] [k5c_precreate_ccache] (0x4000): [RID#133] Recreating ccache * (2026-02-25 8:44:07): [krb5_child[77632]] [k5c_setup_fast] (0x0100): [RID#133] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:07): [krb5_child[77632]] [find_principal_in_keytab] (0x4000): [RID#133] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:07): [krb5_child[77632]] [match_principal] (0x1000): [RID#133] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:07): [krb5_child[77632]] [check_fast_ccache] (0x0200): [RID#133] FAST TGT is still valid. * (2026-02-25 8:44:07): [krb5_child[77632]] [become_user] (0x0200): [RID#133] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:07): [krb5_child[77632]] [main] (0x2000): [RID#133] Running as [1388400000][1388400000]. * (2026-02-25 8:44:07): [krb5_child[77632]] [set_lifetime_options] (0x0100): [RID#133] No specific renewable lifetime requested. * (2026-02-25 8:44:07): [krb5_child[77632]] [set_lifetime_options] (0x0100): [RID#133] No specific lifetime requested. * (2026-02-25 8:44:07): [krb5_child[77632]] [set_canonicalize_option] (0x0100): [RID#133] Canonicalization is set to [true] * (2026-02-25 8:44:07): [krb5_child[77632]] [main] (0x0400): [RID#133] Will perform auth * (2026-02-25 8:44:07): [krb5_child[77632]] [main] (0x0400): [RID#133] Will perform online auth * (2026-02-25 8:44:07): [krb5_child[77632]] [tgt_req_child] (0x1000): [RID#133] Attempting to get a TGT * (2026-02-25 8:44:07): [krb5_child[77632]] [get_and_save_tgt] (0x0400): [RID#133] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:07): [krb5_child[77632]] [get_and_save_tgt] (0x0020): [RID#133] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:07): [krb5_child[77632]] [map_krb5_error] (0x0020): [RID#133] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:44:13): [krb5_child[77663]] [get_and_save_tgt] (0x0020): [RID#137] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:13): [krb5_child[77663]] [main] (0x0400): [RID#137] krb5_child started. * (2026-02-25 8:44:13): [krb5_child[77663]] [unpack_buffer] (0x1000): [RID#137] total buffer size: [94] * (2026-02-25 8:44:13): [krb5_child[77663]] [unpack_buffer] (0x0100): [RID#137] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:13): [krb5_child[77663]] [unpack_buffer] (0x2000): [RID#137] No old ccache * (2026-02-25 8:44:13): [krb5_child[77663]] [unpack_buffer] (0x0100): [RID#137] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:13): [krb5_child[77663]] [k5c_precreate_ccache] (0x4000): [RID#137] Recreating ccache * (2026-02-25 8:44:13): [krb5_child[77663]] [k5c_setup_fast] (0x0100): [RID#137] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:13): [krb5_child[77663]] [find_principal_in_keytab] (0x4000): [RID#137] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:13): [krb5_child[77663]] [match_principal] (0x1000): [RID#137] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:13): [krb5_child[77663]] [check_fast_ccache] (0x0200): [RID#137] FAST TGT is still valid. * (2026-02-25 8:44:13): [krb5_child[77663]] [become_user] (0x0200): [RID#137] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:13): [krb5_child[77663]] [main] (0x2000): [RID#137] Running as [1388400000][1388400000]. * (2026-02-25 8:44:13): [krb5_child[77663]] [set_lifetime_options] (0x0100): [RID#137] No specific renewable lifetime requested. * (2026-02-25 8:44:13): [krb5_child[77663]] [set_lifetime_options] (0x0100): [RID#137] No specific lifetime requested. * (2026-02-25 8:44:13): [krb5_child[77663]] [set_canonicalize_option] (0x0100): [RID#137] Canonicalization is set to [true] * (2026-02-25 8:44:13): [krb5_child[77663]] [main] (0x0400): [RID#137] Will perform auth * (2026-02-25 8:44:13): [krb5_child[77663]] [main] (0x0400): [RID#137] Will perform online auth * (2026-02-25 8:44:13): [krb5_child[77663]] [tgt_req_child] (0x1000): [RID#137] Attempting to get a TGT * (2026-02-25 8:44:13): [krb5_child[77663]] [get_and_save_tgt] (0x0400): [RID#137] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:13): [krb5_child[77663]] [get_and_save_tgt] (0x0020): [RID#137] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:13): [krb5_child[77663]] [map_krb5_error] (0x0020): [RID#137] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:44:18): [krb5_child[77695]] [get_and_save_tgt] (0x0020): [RID#140] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:18): [krb5_child[77695]] [main] (0x0400): [RID#140] krb5_child started. * (2026-02-25 8:44:18): [krb5_child[77695]] [unpack_buffer] (0x1000): [RID#140] total buffer size: [95] * (2026-02-25 8:44:18): [krb5_child[77695]] [unpack_buffer] (0x0100): [RID#140] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:18): [krb5_child[77695]] [unpack_buffer] (0x2000): [RID#140] No old ccache * (2026-02-25 8:44:18): [krb5_child[77695]] [unpack_buffer] (0x0100): [RID#140] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:18): [krb5_child[77695]] [k5c_precreate_ccache] (0x4000): [RID#140] Recreating ccache * (2026-02-25 8:44:18): [krb5_child[77695]] [k5c_setup_fast] (0x0100): [RID#140] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:18): [krb5_child[77695]] [find_principal_in_keytab] (0x4000): [RID#140] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:18): [krb5_child[77695]] [match_principal] (0x1000): [RID#140] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:18): [krb5_child[77695]] [check_fast_ccache] (0x0200): [RID#140] FAST TGT is still valid. * (2026-02-25 8:44:18): [krb5_child[77695]] [become_user] (0x0200): [RID#140] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:18): [krb5_child[77695]] [main] (0x2000): [RID#140] Running as [1388400000][1388400000]. * (2026-02-25 8:44:18): [krb5_child[77695]] [set_lifetime_options] (0x0100): [RID#140] No specific renewable lifetime requested. * (2026-02-25 8:44:18): [krb5_child[77695]] [set_lifetime_options] (0x0100): [RID#140] No specific lifetime requested. * (2026-02-25 8:44:18): [krb5_child[77695]] [set_canonicalize_option] (0x0100): [RID#140] Canonicalization is set to [true] * (2026-02-25 8:44:18): [krb5_child[77695]] [main] (0x0400): [RID#140] Will perform auth * (2026-02-25 8:44:18): [krb5_child[77695]] [main] (0x0400): [RID#140] Will perform online auth * (2026-02-25 8:44:18): [krb5_child[77695]] [tgt_req_child] (0x1000): [RID#140] Attempting to get a TGT * (2026-02-25 8:44:18): [krb5_child[77695]] [get_and_save_tgt] (0x0400): [RID#140] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:18): [krb5_child[77695]] [get_and_save_tgt] (0x0020): [RID#140] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:18): [krb5_child[77695]] [map_krb5_error] (0x0020): [RID#140] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:44:23): [krb5_child[77808]] [get_and_save_tgt] (0x0020): [RID#143] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:23): [krb5_child[77808]] [main] (0x0400): [RID#143] krb5_child started. * (2026-02-25 8:44:23): [krb5_child[77808]] [unpack_buffer] (0x1000): [RID#143] total buffer size: [94] * (2026-02-25 8:44:23): [krb5_child[77808]] [unpack_buffer] (0x0100): [RID#143] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:23): [krb5_child[77808]] [unpack_buffer] (0x2000): [RID#143] No old ccache * (2026-02-25 8:44:23): [krb5_child[77808]] [unpack_buffer] (0x0100): [RID#143] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:23): [krb5_child[77808]] [k5c_precreate_ccache] (0x4000): [RID#143] Recreating ccache * (2026-02-25 8:44:23): [krb5_child[77808]] [k5c_setup_fast] (0x0100): [RID#143] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:23): [krb5_child[77808]] [find_principal_in_keytab] (0x4000): [RID#143] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:23): [krb5_child[77808]] [match_principal] (0x1000): [RID#143] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:23): [krb5_child[77808]] [check_fast_ccache] (0x0200): [RID#143] FAST TGT is still valid. * (2026-02-25 8:44:23): [krb5_child[77808]] [become_user] (0x0200): [RID#143] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:23): [krb5_child[77808]] [main] (0x2000): [RID#143] Running as [1388400000][1388400000]. * (2026-02-25 8:44:23): [krb5_child[77808]] [set_lifetime_options] (0x0100): [RID#143] No specific renewable lifetime requested. * (2026-02-25 8:44:23): [krb5_child[77808]] [set_lifetime_options] (0x0100): [RID#143] No specific lifetime requested. * (2026-02-25 8:44:23): [krb5_child[77808]] [set_canonicalize_option] (0x0100): [RID#143] Canonicalization is set to [true] * (2026-02-25 8:44:23): [krb5_child[77808]] [main] (0x0400): [RID#143] Will perform auth * (2026-02-25 8:44:23): [krb5_child[77808]] [main] (0x0400): [RID#143] Will perform online auth * (2026-02-25 8:44:23): [krb5_child[77808]] [tgt_req_child] (0x1000): [RID#143] Attempting to get a TGT * (2026-02-25 8:44:23): [krb5_child[77808]] [get_and_save_tgt] (0x0400): [RID#143] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:23): [krb5_child[77808]] [get_and_save_tgt] (0x0020): [RID#143] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:23): [krb5_child[77808]] [map_krb5_error] (0x0020): [RID#143] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:44:29): [krb5_child[77812]] [get_and_save_tgt] (0x0020): [RID#147] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:29): [krb5_child[77812]] [main] (0x0400): [RID#147] krb5_child started. * (2026-02-25 8:44:29): [krb5_child[77812]] [unpack_buffer] (0x1000): [RID#147] total buffer size: [94] * (2026-02-25 8:44:29): [krb5_child[77812]] [unpack_buffer] (0x0100): [RID#147] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:29): [krb5_child[77812]] [unpack_buffer] (0x2000): [RID#147] No old ccache * (2026-02-25 8:44:29): [krb5_child[77812]] [unpack_buffer] (0x0100): [RID#147] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:29): [krb5_child[77812]] [k5c_precreate_ccache] (0x4000): [RID#147] Recreating ccache * (2026-02-25 8:44:29): [krb5_child[77812]] [k5c_setup_fast] (0x0100): [RID#147] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:29): [krb5_child[77812]] [find_principal_in_keytab] (0x4000): [RID#147] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:29): [krb5_child[77812]] [match_principal] (0x1000): [RID#147] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:29): [krb5_child[77812]] [check_fast_ccache] (0x0200): [RID#147] FAST TGT is still valid. * (2026-02-25 8:44:29): [krb5_child[77812]] [become_user] (0x0200): [RID#147] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:29): [krb5_child[77812]] [main] (0x2000): [RID#147] Running as [1388400000][1388400000]. * (2026-02-25 8:44:29): [krb5_child[77812]] [set_lifetime_options] (0x0100): [RID#147] No specific renewable lifetime requested. * (2026-02-25 8:44:29): [krb5_child[77812]] [set_lifetime_options] (0x0100): [RID#147] No specific lifetime requested. * (2026-02-25 8:44:29): [krb5_child[77812]] [set_canonicalize_option] (0x0100): [RID#147] Canonicalization is set to [true] * (2026-02-25 8:44:29): [krb5_child[77812]] [main] (0x0400): [RID#147] Will perform auth * (2026-02-25 8:44:29): [krb5_child[77812]] [main] (0x0400): [RID#147] Will perform online auth * (2026-02-25 8:44:29): [krb5_child[77812]] [tgt_req_child] (0x1000): [RID#147] Attempting to get a TGT * (2026-02-25 8:44:29): [krb5_child[77812]] [get_and_save_tgt] (0x0400): [RID#147] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:29): [krb5_child[77812]] [get_and_save_tgt] (0x0020): [RID#147] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:29): [krb5_child[77812]] [map_krb5_error] (0x0020): [RID#147] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:44:34): [krb5_child[77879]] [get_and_save_tgt] (0x0020): [RID#150] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:34): [krb5_child[77879]] [main] (0x0400): [RID#150] krb5_child started. * (2026-02-25 8:44:34): [krb5_child[77879]] [unpack_buffer] (0x1000): [RID#150] total buffer size: [98] * (2026-02-25 8:44:34): [krb5_child[77879]] [unpack_buffer] (0x0100): [RID#150] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:34): [krb5_child[77879]] [unpack_buffer] (0x2000): [RID#150] No old ccache * (2026-02-25 8:44:34): [krb5_child[77879]] [unpack_buffer] (0x0100): [RID#150] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:34): [krb5_child[77879]] [k5c_precreate_ccache] (0x4000): [RID#150] Recreating ccache * (2026-02-25 8:44:34): [krb5_child[77879]] [k5c_setup_fast] (0x0100): [RID#150] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:34): [krb5_child[77879]] [find_principal_in_keytab] (0x4000): [RID#150] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:34): [krb5_child[77879]] [match_principal] (0x1000): [RID#150] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:34): [krb5_child[77879]] [check_fast_ccache] (0x0200): [RID#150] FAST TGT is still valid. * (2026-02-25 8:44:34): [krb5_child[77879]] [become_user] (0x0200): [RID#150] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:34): [krb5_child[77879]] [main] (0x2000): [RID#150] Running as [1388400000][1388400000]. * (2026-02-25 8:44:34): [krb5_child[77879]] [set_lifetime_options] (0x0100): [RID#150] No specific renewable lifetime requested. * (2026-02-25 8:44:34): [krb5_child[77879]] [set_lifetime_options] (0x0100): [RID#150] No specific lifetime requested. * (2026-02-25 8:44:34): [krb5_child[77879]] [set_canonicalize_option] (0x0100): [RID#150] Canonicalization is set to [true] * (2026-02-25 8:44:34): [krb5_child[77879]] [main] (0x0400): [RID#150] Will perform auth * (2026-02-25 8:44:34): [krb5_child[77879]] [main] (0x0400): [RID#150] Will perform online auth * (2026-02-25 8:44:34): [krb5_child[77879]] [tgt_req_child] (0x1000): [RID#150] Attempting to get a TGT * (2026-02-25 8:44:34): [krb5_child[77879]] [get_and_save_tgt] (0x0400): [RID#150] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:34): [krb5_child[77879]] [get_and_save_tgt] (0x0020): [RID#150] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:34): [krb5_child[77879]] [map_krb5_error] (0x0020): [RID#150] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:44:40): [krb5_child[77909]] [get_and_save_tgt] (0x0020): [RID#153] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:40): [krb5_child[77909]] [main] (0x0400): [RID#153] krb5_child started. * (2026-02-25 8:44:40): [krb5_child[77909]] [unpack_buffer] (0x1000): [RID#153] total buffer size: [104] * (2026-02-25 8:44:40): [krb5_child[77909]] [unpack_buffer] (0x0100): [RID#153] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:40): [krb5_child[77909]] [unpack_buffer] (0x2000): [RID#153] No old ccache * (2026-02-25 8:44:40): [krb5_child[77909]] [unpack_buffer] (0x0100): [RID#153] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:40): [krb5_child[77909]] [k5c_precreate_ccache] (0x4000): [RID#153] Recreating ccache * (2026-02-25 8:44:40): [krb5_child[77909]] [k5c_setup_fast] (0x0100): [RID#153] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:40): [krb5_child[77909]] [find_principal_in_keytab] (0x4000): [RID#153] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:40): [krb5_child[77909]] [match_principal] (0x1000): [RID#153] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:40): [krb5_child[77909]] [check_fast_ccache] (0x0200): [RID#153] FAST TGT is still valid. * (2026-02-25 8:44:40): [krb5_child[77909]] [become_user] (0x0200): [RID#153] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:40): [krb5_child[77909]] [main] (0x2000): [RID#153] Running as [1388400000][1388400000]. * (2026-02-25 8:44:40): [krb5_child[77909]] [set_lifetime_options] (0x0100): [RID#153] No specific renewable lifetime requested. * (2026-02-25 8:44:40): [krb5_child[77909]] [set_lifetime_options] (0x0100): [RID#153] No specific lifetime requested. * (2026-02-25 8:44:40): [krb5_child[77909]] [set_canonicalize_option] (0x0100): [RID#153] Canonicalization is set to [true] * (2026-02-25 8:44:40): [krb5_child[77909]] [main] (0x0400): [RID#153] Will perform auth * (2026-02-25 8:44:40): [krb5_child[77909]] [main] (0x0400): [RID#153] Will perform online auth * (2026-02-25 8:44:40): [krb5_child[77909]] [tgt_req_child] (0x1000): [RID#153] Attempting to get a TGT * (2026-02-25 8:44:40): [krb5_child[77909]] [get_and_save_tgt] (0x0400): [RID#153] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:40): [krb5_child[77909]] [get_and_save_tgt] (0x0020): [RID#153] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:40): [krb5_child[77909]] [map_krb5_error] (0x0020): [RID#153] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:44:44): [krb5_child[77915]] [get_and_save_tgt] (0x0020): [RID#155] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:44): [krb5_child[77915]] [main] (0x0400): [RID#155] krb5_child started. * (2026-02-25 8:44:44): [krb5_child[77915]] [unpack_buffer] (0x1000): [RID#155] total buffer size: [96] * (2026-02-25 8:44:44): [krb5_child[77915]] [unpack_buffer] (0x0100): [RID#155] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:44): [krb5_child[77915]] [unpack_buffer] (0x2000): [RID#155] No old ccache * (2026-02-25 8:44:44): [krb5_child[77915]] [unpack_buffer] (0x0100): [RID#155] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:44): [krb5_child[77915]] [k5c_precreate_ccache] (0x4000): [RID#155] Recreating ccache * (2026-02-25 8:44:44): [krb5_child[77915]] [k5c_setup_fast] (0x0100): [RID#155] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:44): [krb5_child[77915]] [find_principal_in_keytab] (0x4000): [RID#155] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:44): [krb5_child[77915]] [match_principal] (0x1000): [RID#155] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:44): [krb5_child[77915]] [check_fast_ccache] (0x0200): [RID#155] FAST TGT is still valid. * (2026-02-25 8:44:44): [krb5_child[77915]] [become_user] (0x0200): [RID#155] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:44): [krb5_child[77915]] [main] (0x2000): [RID#155] Running as [1388400000][1388400000]. * (2026-02-25 8:44:44): [krb5_child[77915]] [set_lifetime_options] (0x0100): [RID#155] No specific renewable lifetime requested. * (2026-02-25 8:44:44): [krb5_child[77915]] [set_lifetime_options] (0x0100): [RID#155] No specific lifetime requested. * (2026-02-25 8:44:44): [krb5_child[77915]] [set_canonicalize_option] (0x0100): [RID#155] Canonicalization is set to [true] * (2026-02-25 8:44:44): [krb5_child[77915]] [main] (0x0400): [RID#155] Will perform auth * (2026-02-25 8:44:44): [krb5_child[77915]] [main] (0x0400): [RID#155] Will perform online auth * (2026-02-25 8:44:44): [krb5_child[77915]] [tgt_req_child] (0x1000): [RID#155] Attempting to get a TGT * (2026-02-25 8:44:44): [krb5_child[77915]] [get_and_save_tgt] (0x0400): [RID#155] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:44): [krb5_child[77915]] [get_and_save_tgt] (0x0020): [RID#155] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:44): [krb5_child[77915]] [map_krb5_error] (0x0020): [RID#155] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:44:49): [krb5_child[77947]] [get_and_save_tgt] (0x0020): [RID#159] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:49): [krb5_child[77947]] [main] (0x0400): [RID#159] krb5_child started. * (2026-02-25 8:44:49): [krb5_child[77947]] [unpack_buffer] (0x1000): [RID#159] total buffer size: [99] * (2026-02-25 8:44:49): [krb5_child[77947]] [unpack_buffer] (0x0100): [RID#159] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:49): [krb5_child[77947]] [unpack_buffer] (0x2000): [RID#159] No old ccache * (2026-02-25 8:44:49): [krb5_child[77947]] [unpack_buffer] (0x0100): [RID#159] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:49): [krb5_child[77947]] [k5c_precreate_ccache] (0x4000): [RID#159] Recreating ccache * (2026-02-25 8:44:49): [krb5_child[77947]] [k5c_setup_fast] (0x0100): [RID#159] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:49): [krb5_child[77947]] [find_principal_in_keytab] (0x4000): [RID#159] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:49): [krb5_child[77947]] [match_principal] (0x1000): [RID#159] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:49): [krb5_child[77947]] [check_fast_ccache] (0x0200): [RID#159] FAST TGT is still valid. * (2026-02-25 8:44:49): [krb5_child[77947]] [become_user] (0x0200): [RID#159] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:49): [krb5_child[77947]] [main] (0x2000): [RID#159] Running as [1388400000][1388400000]. * (2026-02-25 8:44:49): [krb5_child[77947]] [set_lifetime_options] (0x0100): [RID#159] No specific renewable lifetime requested. * (2026-02-25 8:44:49): [krb5_child[77947]] [set_lifetime_options] (0x0100): [RID#159] No specific lifetime requested. * (2026-02-25 8:44:49): [krb5_child[77947]] [set_canonicalize_option] (0x0100): [RID#159] Canonicalization is set to [true] * (2026-02-25 8:44:49): [krb5_child[77947]] [main] (0x0400): [RID#159] Will perform auth * (2026-02-25 8:44:49): [krb5_child[77947]] [main] (0x0400): [RID#159] Will perform online auth * (2026-02-25 8:44:49): [krb5_child[77947]] [tgt_req_child] (0x1000): [RID#159] Attempting to get a TGT * (2026-02-25 8:44:49): [krb5_child[77947]] [get_and_save_tgt] (0x0400): [RID#159] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:49): [krb5_child[77947]] [get_and_save_tgt] (0x0020): [RID#159] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:49): [krb5_child[77947]] [map_krb5_error] (0x0020): [RID#159] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:44:55): [krb5_child[78065]] [get_and_save_tgt] (0x0020): [RID#162] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:55): [krb5_child[78065]] [main] (0x0400): [RID#162] krb5_child started. * (2026-02-25 8:44:55): [krb5_child[78065]] [unpack_buffer] (0x1000): [RID#162] total buffer size: [95] * (2026-02-25 8:44:55): [krb5_child[78065]] [unpack_buffer] (0x0100): [RID#162] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:55): [krb5_child[78065]] [unpack_buffer] (0x2000): [RID#162] No old ccache * (2026-02-25 8:44:55): [krb5_child[78065]] [unpack_buffer] (0x0100): [RID#162] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:55): [krb5_child[78065]] [k5c_precreate_ccache] (0x4000): [RID#162] Recreating ccache * (2026-02-25 8:44:55): [krb5_child[78065]] [k5c_setup_fast] (0x0100): [RID#162] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:55): [krb5_child[78065]] [find_principal_in_keytab] (0x4000): [RID#162] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:55): [krb5_child[78065]] [match_principal] (0x1000): [RID#162] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:55): [krb5_child[78065]] [check_fast_ccache] (0x0200): [RID#162] FAST TGT is still valid. * (2026-02-25 8:44:55): [krb5_child[78065]] [become_user] (0x0200): [RID#162] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:55): [krb5_child[78065]] [main] (0x2000): [RID#162] Running as [1388400000][1388400000]. * (2026-02-25 8:44:55): [krb5_child[78065]] [set_lifetime_options] (0x0100): [RID#162] No specific renewable lifetime requested. * (2026-02-25 8:44:55): [krb5_child[78065]] [set_lifetime_options] (0x0100): [RID#162] No specific lifetime requested. * (2026-02-25 8:44:55): [krb5_child[78065]] [set_canonicalize_option] (0x0100): [RID#162] Canonicalization is set to [true] * (2026-02-25 8:44:55): [krb5_child[78065]] [main] (0x0400): [RID#162] Will perform auth * (2026-02-25 8:44:55): [krb5_child[78065]] [main] (0x0400): [RID#162] Will perform online auth * (2026-02-25 8:44:55): [krb5_child[78065]] [tgt_req_child] (0x1000): [RID#162] Attempting to get a TGT * (2026-02-25 8:44:55): [krb5_child[78065]] [get_and_save_tgt] (0x0400): [RID#162] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:55): [krb5_child[78065]] [get_and_save_tgt] (0x0020): [RID#162] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:55): [krb5_child[78065]] [map_krb5_error] (0x0020): [RID#162] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:44:59): [krb5_child[78069]] [get_and_save_tgt] (0x0020): [RID#164] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:44:59): [krb5_child[78069]] [main] (0x0400): [RID#164] krb5_child started. * (2026-02-25 8:44:59): [krb5_child[78069]] [unpack_buffer] (0x1000): [RID#164] total buffer size: [97] * (2026-02-25 8:44:59): [krb5_child[78069]] [unpack_buffer] (0x0100): [RID#164] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:44:59): [krb5_child[78069]] [unpack_buffer] (0x2000): [RID#164] No old ccache * (2026-02-25 8:44:59): [krb5_child[78069]] [unpack_buffer] (0x0100): [RID#164] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:44:59): [krb5_child[78069]] [k5c_precreate_ccache] (0x4000): [RID#164] Recreating ccache * (2026-02-25 8:44:59): [krb5_child[78069]] [k5c_setup_fast] (0x0100): [RID#164] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:44:59): [krb5_child[78069]] [find_principal_in_keytab] (0x4000): [RID#164] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:44:59): [krb5_child[78069]] [match_principal] (0x1000): [RID#164] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:44:59): [krb5_child[78069]] [check_fast_ccache] (0x0200): [RID#164] FAST TGT is still valid. * (2026-02-25 8:44:59): [krb5_child[78069]] [become_user] (0x0200): [RID#164] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:44:59): [krb5_child[78069]] [main] (0x2000): [RID#164] Running as [1388400000][1388400000]. * (2026-02-25 8:44:59): [krb5_child[78069]] [set_lifetime_options] (0x0100): [RID#164] No specific renewable lifetime requested. * (2026-02-25 8:44:59): [krb5_child[78069]] [set_lifetime_options] (0x0100): [RID#164] No specific lifetime requested. * (2026-02-25 8:44:59): [krb5_child[78069]] [set_canonicalize_option] (0x0100): [RID#164] Canonicalization is set to [true] * (2026-02-25 8:44:59): [krb5_child[78069]] [main] (0x0400): [RID#164] Will perform auth * (2026-02-25 8:44:59): [krb5_child[78069]] [main] (0x0400): [RID#164] Will perform online auth * (2026-02-25 8:44:59): [krb5_child[78069]] [tgt_req_child] (0x1000): [RID#164] Attempting to get a TGT * (2026-02-25 8:44:59): [krb5_child[78069]] [get_and_save_tgt] (0x0400): [RID#164] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:44:59): [krb5_child[78069]] [get_and_save_tgt] (0x0020): [RID#164] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:44:59): [krb5_child[78069]] [map_krb5_error] (0x0020): [RID#164] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:45:05): [krb5_child[78135]] [get_and_save_tgt] (0x0020): [RID#168] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:45:05): [krb5_child[78135]] [main] (0x0400): [RID#168] krb5_child started. * (2026-02-25 8:45:05): [krb5_child[78135]] [unpack_buffer] (0x1000): [RID#168] total buffer size: [95] * (2026-02-25 8:45:05): [krb5_child[78135]] [unpack_buffer] (0x0100): [RID#168] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:45:05): [krb5_child[78135]] [unpack_buffer] (0x2000): [RID#168] No old ccache * (2026-02-25 8:45:05): [krb5_child[78135]] [unpack_buffer] (0x0100): [RID#168] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:45:05): [krb5_child[78135]] [k5c_precreate_ccache] (0x4000): [RID#168] Recreating ccache * (2026-02-25 8:45:05): [krb5_child[78135]] [k5c_setup_fast] (0x0100): [RID#168] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:45:05): [krb5_child[78135]] [find_principal_in_keytab] (0x4000): [RID#168] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:45:05): [krb5_child[78135]] [match_principal] (0x1000): [RID#168] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:45:05): [krb5_child[78135]] [check_fast_ccache] (0x0200): [RID#168] FAST TGT is still valid. * (2026-02-25 8:45:05): [krb5_child[78135]] [become_user] (0x0200): [RID#168] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:45:05): [krb5_child[78135]] [main] (0x2000): [RID#168] Running as [1388400000][1388400000]. * (2026-02-25 8:45:05): [krb5_child[78135]] [set_lifetime_options] (0x0100): [RID#168] No specific renewable lifetime requested. * (2026-02-25 8:45:05): [krb5_child[78135]] [set_lifetime_options] (0x0100): [RID#168] No specific lifetime requested. * (2026-02-25 8:45:05): [krb5_child[78135]] [set_canonicalize_option] (0x0100): [RID#168] Canonicalization is set to [true] * (2026-02-25 8:45:05): [krb5_child[78135]] [main] (0x0400): [RID#168] Will perform auth * (2026-02-25 8:45:05): [krb5_child[78135]] [main] (0x0400): [RID#168] Will perform online auth * (2026-02-25 8:45:05): [krb5_child[78135]] [tgt_req_child] (0x1000): [RID#168] Attempting to get a TGT * (2026-02-25 8:45:05): [krb5_child[78135]] [get_and_save_tgt] (0x0400): [RID#168] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:45:05): [krb5_child[78135]] [get_and_save_tgt] (0x0020): [RID#168] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:45:05): [krb5_child[78135]] [map_krb5_error] (0x0020): [RID#168] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:45:10): [krb5_child[78165]] [get_and_save_tgt] (0x0020): [RID#171] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:45:10): [krb5_child[78165]] [main] (0x0400): [RID#171] krb5_child started. * (2026-02-25 8:45:10): [krb5_child[78165]] [unpack_buffer] (0x1000): [RID#171] total buffer size: [95] * (2026-02-25 8:45:10): [krb5_child[78165]] [unpack_buffer] (0x0100): [RID#171] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:45:10): [krb5_child[78165]] [unpack_buffer] (0x2000): [RID#171] No old ccache * (2026-02-25 8:45:10): [krb5_child[78165]] [unpack_buffer] (0x0100): [RID#171] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:45:10): [krb5_child[78165]] [k5c_precreate_ccache] (0x4000): [RID#171] Recreating ccache * (2026-02-25 8:45:10): [krb5_child[78165]] [k5c_setup_fast] (0x0100): [RID#171] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:45:10): [krb5_child[78165]] [find_principal_in_keytab] (0x4000): [RID#171] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:45:10): [krb5_child[78165]] [match_principal] (0x1000): [RID#171] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:45:10): [krb5_child[78165]] [check_fast_ccache] (0x0200): [RID#171] FAST TGT is still valid. * (2026-02-25 8:45:10): [krb5_child[78165]] [become_user] (0x0200): [RID#171] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:45:10): [krb5_child[78165]] [main] (0x2000): [RID#171] Running as [1388400000][1388400000]. * (2026-02-25 8:45:10): [krb5_child[78165]] [set_lifetime_options] (0x0100): [RID#171] No specific renewable lifetime requested. * (2026-02-25 8:45:10): [krb5_child[78165]] [set_lifetime_options] (0x0100): [RID#171] No specific lifetime requested. * (2026-02-25 8:45:10): [krb5_child[78165]] [set_canonicalize_option] (0x0100): [RID#171] Canonicalization is set to [true] * (2026-02-25 8:45:10): [krb5_child[78165]] [main] (0x0400): [RID#171] Will perform auth * (2026-02-25 8:45:10): [krb5_child[78165]] [main] (0x0400): [RID#171] Will perform online auth * (2026-02-25 8:45:10): [krb5_child[78165]] [tgt_req_child] (0x1000): [RID#171] Attempting to get a TGT * (2026-02-25 8:45:10): [krb5_child[78165]] [get_and_save_tgt] (0x0400): [RID#171] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:45:10): [krb5_child[78165]] [get_and_save_tgt] (0x0020): [RID#171] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:45:10): [krb5_child[78165]] [map_krb5_error] (0x0020): [RID#171] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:45:16): [krb5_child[78169]] [get_and_save_tgt] (0x0020): [RID#174] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:45:16): [krb5_child[78169]] [main] (0x0400): [RID#174] krb5_child started. * (2026-02-25 8:45:16): [krb5_child[78169]] [unpack_buffer] (0x1000): [RID#174] total buffer size: [97] * (2026-02-25 8:45:16): [krb5_child[78169]] [unpack_buffer] (0x0100): [RID#174] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:45:16): [krb5_child[78169]] [unpack_buffer] (0x2000): [RID#174] No old ccache * (2026-02-25 8:45:16): [krb5_child[78169]] [unpack_buffer] (0x0100): [RID#174] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:45:16): [krb5_child[78169]] [k5c_precreate_ccache] (0x4000): [RID#174] Recreating ccache * (2026-02-25 8:45:16): [krb5_child[78169]] [k5c_setup_fast] (0x0100): [RID#174] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:45:16): [krb5_child[78169]] [find_principal_in_keytab] (0x4000): [RID#174] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:45:16): [krb5_child[78169]] [match_principal] (0x1000): [RID#174] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:45:16): [krb5_child[78169]] [check_fast_ccache] (0x0200): [RID#174] FAST TGT is still valid. * (2026-02-25 8:45:16): [krb5_child[78169]] [become_user] (0x0200): [RID#174] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:45:16): [krb5_child[78169]] [main] (0x2000): [RID#174] Running as [1388400000][1388400000]. * (2026-02-25 8:45:16): [krb5_child[78169]] [set_lifetime_options] (0x0100): [RID#174] No specific renewable lifetime requested. * (2026-02-25 8:45:16): [krb5_child[78169]] [set_lifetime_options] (0x0100): [RID#174] No specific lifetime requested. * (2026-02-25 8:45:16): [krb5_child[78169]] [set_canonicalize_option] (0x0100): [RID#174] Canonicalization is set to [true] * (2026-02-25 8:45:16): [krb5_child[78169]] [main] (0x0400): [RID#174] Will perform auth * (2026-02-25 8:45:16): [krb5_child[78169]] [main] (0x0400): [RID#174] Will perform online auth * (2026-02-25 8:45:16): [krb5_child[78169]] [tgt_req_child] (0x1000): [RID#174] Attempting to get a TGT * (2026-02-25 8:45:16): [krb5_child[78169]] [get_and_save_tgt] (0x0400): [RID#174] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:45:16): [krb5_child[78169]] [get_and_save_tgt] (0x0020): [RID#174] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:45:16): [krb5_child[78169]] [map_krb5_error] (0x0020): [RID#174] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:45:21): [krb5_child[78204]] [get_and_save_tgt] (0x0020): [RID#177] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:45:21): [krb5_child[78204]] [main] (0x0400): [RID#177] krb5_child started. * (2026-02-25 8:45:21): [krb5_child[78204]] [unpack_buffer] (0x1000): [RID#177] total buffer size: [94] * (2026-02-25 8:45:21): [krb5_child[78204]] [unpack_buffer] (0x0100): [RID#177] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:45:21): [krb5_child[78204]] [unpack_buffer] (0x2000): [RID#177] No old ccache * (2026-02-25 8:45:21): [krb5_child[78204]] [unpack_buffer] (0x0100): [RID#177] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:45:21): [krb5_child[78204]] [k5c_precreate_ccache] (0x4000): [RID#177] Recreating ccache * (2026-02-25 8:45:21): [krb5_child[78204]] [k5c_setup_fast] (0x0100): [RID#177] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:45:21): [krb5_child[78204]] [find_principal_in_keytab] (0x4000): [RID#177] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:45:21): [krb5_child[78204]] [match_principal] (0x1000): [RID#177] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:45:21): [krb5_child[78204]] [check_fast_ccache] (0x0200): [RID#177] FAST TGT is still valid. * (2026-02-25 8:45:21): [krb5_child[78204]] [become_user] (0x0200): [RID#177] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:45:21): [krb5_child[78204]] [main] (0x2000): [RID#177] Running as [1388400000][1388400000]. * (2026-02-25 8:45:21): [krb5_child[78204]] [set_lifetime_options] (0x0100): [RID#177] No specific renewable lifetime requested. * (2026-02-25 8:45:21): [krb5_child[78204]] [set_lifetime_options] (0x0100): [RID#177] No specific lifetime requested. * (2026-02-25 8:45:21): [krb5_child[78204]] [set_canonicalize_option] (0x0100): [RID#177] Canonicalization is set to [true] * (2026-02-25 8:45:21): [krb5_child[78204]] [main] (0x0400): [RID#177] Will perform auth * (2026-02-25 8:45:21): [krb5_child[78204]] [main] (0x0400): [RID#177] Will perform online auth * (2026-02-25 8:45:21): [krb5_child[78204]] [tgt_req_child] (0x1000): [RID#177] Attempting to get a TGT * (2026-02-25 8:45:21): [krb5_child[78204]] [get_and_save_tgt] (0x0400): [RID#177] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:45:21): [krb5_child[78204]] [get_and_save_tgt] (0x0020): [RID#177] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:45:21): [krb5_child[78204]] [map_krb5_error] (0x0020): [RID#177] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:45:26): [krb5_child[78324]] [get_and_save_tgt] (0x0020): [RID#180] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:45:26): [krb5_child[78324]] [main] (0x0400): [RID#180] krb5_child started. * (2026-02-25 8:45:26): [krb5_child[78324]] [unpack_buffer] (0x1000): [RID#180] total buffer size: [99] * (2026-02-25 8:45:26): [krb5_child[78324]] [unpack_buffer] (0x0100): [RID#180] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:45:26): [krb5_child[78324]] [unpack_buffer] (0x2000): [RID#180] No old ccache * (2026-02-25 8:45:26): [krb5_child[78324]] [unpack_buffer] (0x0100): [RID#180] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:45:26): [krb5_child[78324]] [k5c_precreate_ccache] (0x4000): [RID#180] Recreating ccache * (2026-02-25 8:45:26): [krb5_child[78324]] [k5c_setup_fast] (0x0100): [RID#180] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:45:26): [krb5_child[78324]] [find_principal_in_keytab] (0x4000): [RID#180] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:45:26): [krb5_child[78324]] [match_principal] (0x1000): [RID#180] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:45:26): [krb5_child[78324]] [check_fast_ccache] (0x0200): [RID#180] FAST TGT is still valid. * (2026-02-25 8:45:26): [krb5_child[78324]] [become_user] (0x0200): [RID#180] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:45:26): [krb5_child[78324]] [main] (0x2000): [RID#180] Running as [1388400000][1388400000]. * (2026-02-25 8:45:26): [krb5_child[78324]] [set_lifetime_options] (0x0100): [RID#180] No specific renewable lifetime requested. * (2026-02-25 8:45:26): [krb5_child[78324]] [set_lifetime_options] (0x0100): [RID#180] No specific lifetime requested. * (2026-02-25 8:45:26): [krb5_child[78324]] [set_canonicalize_option] (0x0100): [RID#180] Canonicalization is set to [true] * (2026-02-25 8:45:26): [krb5_child[78324]] [main] (0x0400): [RID#180] Will perform auth * (2026-02-25 8:45:26): [krb5_child[78324]] [main] (0x0400): [RID#180] Will perform online auth * (2026-02-25 8:45:26): [krb5_child[78324]] [tgt_req_child] (0x1000): [RID#180] Attempting to get a TGT * (2026-02-25 8:45:26): [krb5_child[78324]] [get_and_save_tgt] (0x0400): [RID#180] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:45:26): [krb5_child[78324]] [get_and_save_tgt] (0x0020): [RID#180] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:45:26): [krb5_child[78324]] [map_krb5_error] (0x0020): [RID#180] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:45:31): [krb5_child[78328]] [get_and_save_tgt] (0x0020): [RID#182] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:45:31): [krb5_child[78328]] [main] (0x0400): [RID#182] krb5_child started. * (2026-02-25 8:45:31): [krb5_child[78328]] [unpack_buffer] (0x1000): [RID#182] total buffer size: [96] * (2026-02-25 8:45:31): [krb5_child[78328]] [unpack_buffer] (0x0100): [RID#182] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:45:31): [krb5_child[78328]] [unpack_buffer] (0x2000): [RID#182] No old ccache * (2026-02-25 8:45:31): [krb5_child[78328]] [unpack_buffer] (0x0100): [RID#182] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:45:31): [krb5_child[78328]] [k5c_precreate_ccache] (0x4000): [RID#182] Recreating ccache * (2026-02-25 8:45:31): [krb5_child[78328]] [k5c_setup_fast] (0x0100): [RID#182] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:45:31): [krb5_child[78328]] [find_principal_in_keytab] (0x4000): [RID#182] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:45:31): [krb5_child[78328]] [match_principal] (0x1000): [RID#182] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:45:31): [krb5_child[78328]] [check_fast_ccache] (0x0200): [RID#182] FAST TGT is still valid. * (2026-02-25 8:45:31): [krb5_child[78328]] [become_user] (0x0200): [RID#182] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:45:31): [krb5_child[78328]] [main] (0x2000): [RID#182] Running as [1388400000][1388400000]. * (2026-02-25 8:45:31): [krb5_child[78328]] [set_lifetime_options] (0x0100): [RID#182] No specific renewable lifetime requested. * (2026-02-25 8:45:31): [krb5_child[78328]] [set_lifetime_options] (0x0100): [RID#182] No specific lifetime requested. * (2026-02-25 8:45:31): [krb5_child[78328]] [set_canonicalize_option] (0x0100): [RID#182] Canonicalization is set to [true] * (2026-02-25 8:45:31): [krb5_child[78328]] [main] (0x0400): [RID#182] Will perform auth * (2026-02-25 8:45:31): [krb5_child[78328]] [main] (0x0400): [RID#182] Will perform online auth * (2026-02-25 8:45:31): [krb5_child[78328]] [tgt_req_child] (0x1000): [RID#182] Attempting to get a TGT * (2026-02-25 8:45:31): [krb5_child[78328]] [get_and_save_tgt] (0x0400): [RID#182] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:45:31): [krb5_child[78328]] [get_and_save_tgt] (0x0020): [RID#182] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:45:31): [krb5_child[78328]] [map_krb5_error] (0x0020): [RID#182] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:45:34): [krb5_child[78356]] [get_and_save_tgt] (0x0020): [RID#185] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:45:34): [krb5_child[78356]] [main] (0x0400): [RID#185] krb5_child started. * (2026-02-25 8:45:34): [krb5_child[78356]] [unpack_buffer] (0x1000): [RID#185] total buffer size: [96] * (2026-02-25 8:45:34): [krb5_child[78356]] [unpack_buffer] (0x0100): [RID#185] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:45:34): [krb5_child[78356]] [unpack_buffer] (0x2000): [RID#185] No old ccache * (2026-02-25 8:45:34): [krb5_child[78356]] [unpack_buffer] (0x0100): [RID#185] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:45:34): [krb5_child[78356]] [k5c_precreate_ccache] (0x4000): [RID#185] Recreating ccache * (2026-02-25 8:45:34): [krb5_child[78356]] [k5c_setup_fast] (0x0100): [RID#185] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:45:34): [krb5_child[78356]] [find_principal_in_keytab] (0x4000): [RID#185] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:45:34): [krb5_child[78356]] [match_principal] (0x1000): [RID#185] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:45:34): [krb5_child[78356]] [check_fast_ccache] (0x0200): [RID#185] FAST TGT is still valid. * (2026-02-25 8:45:34): [krb5_child[78356]] [become_user] (0x0200): [RID#185] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:45:34): [krb5_child[78356]] [main] (0x2000): [RID#185] Running as [1388400000][1388400000]. * (2026-02-25 8:45:34): [krb5_child[78356]] [set_lifetime_options] (0x0100): [RID#185] No specific renewable lifetime requested. * (2026-02-25 8:45:34): [krb5_child[78356]] [set_lifetime_options] (0x0100): [RID#185] No specific lifetime requested. * (2026-02-25 8:45:34): [krb5_child[78356]] [set_canonicalize_option] (0x0100): [RID#185] Canonicalization is set to [true] * (2026-02-25 8:45:34): [krb5_child[78356]] [main] (0x0400): [RID#185] Will perform auth * (2026-02-25 8:45:34): [krb5_child[78356]] [main] (0x0400): [RID#185] Will perform online auth * (2026-02-25 8:45:34): [krb5_child[78356]] [tgt_req_child] (0x1000): [RID#185] Attempting to get a TGT * (2026-02-25 8:45:34): [krb5_child[78356]] [get_and_save_tgt] (0x0400): [RID#185] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:45:34): [krb5_child[78356]] [get_and_save_tgt] (0x0020): [RID#185] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:45:34): [krb5_child[78356]] [map_krb5_error] (0x0020): [RID#185] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:45:41): [krb5_child[78399]] [get_and_save_tgt] (0x0020): [RID#189] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:45:41): [krb5_child[78399]] [main] (0x0400): [RID#189] krb5_child started. * (2026-02-25 8:45:41): [krb5_child[78399]] [unpack_buffer] (0x1000): [RID#189] total buffer size: [100] * (2026-02-25 8:45:41): [krb5_child[78399]] [unpack_buffer] (0x0100): [RID#189] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:45:41): [krb5_child[78399]] [unpack_buffer] (0x2000): [RID#189] No old ccache * (2026-02-25 8:45:41): [krb5_child[78399]] [unpack_buffer] (0x0100): [RID#189] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:45:41): [krb5_child[78399]] [k5c_precreate_ccache] (0x4000): [RID#189] Recreating ccache * (2026-02-25 8:45:41): [krb5_child[78399]] [k5c_setup_fast] (0x0100): [RID#189] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:45:41): [krb5_child[78399]] [find_principal_in_keytab] (0x4000): [RID#189] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:45:41): [krb5_child[78399]] [match_principal] (0x1000): [RID#189] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:45:41): [krb5_child[78399]] [check_fast_ccache] (0x0200): [RID#189] FAST TGT is still valid. * (2026-02-25 8:45:41): [krb5_child[78399]] [become_user] (0x0200): [RID#189] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:45:41): [krb5_child[78399]] [main] (0x2000): [RID#189] Running as [1388400000][1388400000]. * (2026-02-25 8:45:41): [krb5_child[78399]] [set_lifetime_options] (0x0100): [RID#189] No specific renewable lifetime requested. * (2026-02-25 8:45:41): [krb5_child[78399]] [set_lifetime_options] (0x0100): [RID#189] No specific lifetime requested. * (2026-02-25 8:45:41): [krb5_child[78399]] [set_canonicalize_option] (0x0100): [RID#189] Canonicalization is set to [true] * (2026-02-25 8:45:41): [krb5_child[78399]] [main] (0x0400): [RID#189] Will perform auth * (2026-02-25 8:45:41): [krb5_child[78399]] [main] (0x0400): [RID#189] Will perform online auth * (2026-02-25 8:45:41): [krb5_child[78399]] [tgt_req_child] (0x1000): [RID#189] Attempting to get a TGT * (2026-02-25 8:45:41): [krb5_child[78399]] [get_and_save_tgt] (0x0400): [RID#189] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:45:41): [krb5_child[78399]] [get_and_save_tgt] (0x0020): [RID#189] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:45:41): [krb5_child[78399]] [map_krb5_error] (0x0020): [RID#189] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:45:45): [krb5_child[78430]] [get_and_save_tgt] (0x0020): [RID#191] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:45:45): [krb5_child[78430]] [main] (0x0400): [RID#191] krb5_child started. * (2026-02-25 8:45:45): [krb5_child[78430]] [unpack_buffer] (0x1000): [RID#191] total buffer size: [99] * (2026-02-25 8:45:45): [krb5_child[78430]] [unpack_buffer] (0x0100): [RID#191] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:45:45): [krb5_child[78430]] [unpack_buffer] (0x2000): [RID#191] No old ccache * (2026-02-25 8:45:45): [krb5_child[78430]] [unpack_buffer] (0x0100): [RID#191] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:45:45): [krb5_child[78430]] [k5c_precreate_ccache] (0x4000): [RID#191] Recreating ccache * (2026-02-25 8:45:45): [krb5_child[78430]] [k5c_setup_fast] (0x0100): [RID#191] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:45:45): [krb5_child[78430]] [find_principal_in_keytab] (0x4000): [RID#191] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:45:45): [krb5_child[78430]] [match_principal] (0x1000): [RID#191] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:45:45): [krb5_child[78430]] [check_fast_ccache] (0x0200): [RID#191] FAST TGT is still valid. * (2026-02-25 8:45:45): [krb5_child[78430]] [become_user] (0x0200): [RID#191] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:45:45): [krb5_child[78430]] [main] (0x2000): [RID#191] Running as [1388400000][1388400000]. * (2026-02-25 8:45:45): [krb5_child[78430]] [set_lifetime_options] (0x0100): [RID#191] No specific renewable lifetime requested. * (2026-02-25 8:45:45): [krb5_child[78430]] [set_lifetime_options] (0x0100): [RID#191] No specific lifetime requested. * (2026-02-25 8:45:45): [krb5_child[78430]] [set_canonicalize_option] (0x0100): [RID#191] Canonicalization is set to [true] * (2026-02-25 8:45:45): [krb5_child[78430]] [main] (0x0400): [RID#191] Will perform auth * (2026-02-25 8:45:45): [krb5_child[78430]] [main] (0x0400): [RID#191] Will perform online auth * (2026-02-25 8:45:45): [krb5_child[78430]] [tgt_req_child] (0x1000): [RID#191] Attempting to get a TGT * (2026-02-25 8:45:45): [krb5_child[78430]] [get_and_save_tgt] (0x0400): [RID#191] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:45:45): [krb5_child[78430]] [get_and_save_tgt] (0x0020): [RID#191] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:45:45): [krb5_child[78430]] [map_krb5_error] (0x0020): [RID#191] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:45:50): [krb5_child[78463]] [get_and_save_tgt] (0x0020): [RID#194] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:45:50): [krb5_child[78463]] [main] (0x0400): [RID#194] krb5_child started. * (2026-02-25 8:45:50): [krb5_child[78463]] [unpack_buffer] (0x1000): [RID#194] total buffer size: [97] * (2026-02-25 8:45:50): [krb5_child[78463]] [unpack_buffer] (0x0100): [RID#194] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:45:50): [krb5_child[78463]] [unpack_buffer] (0x2000): [RID#194] No old ccache * (2026-02-25 8:45:50): [krb5_child[78463]] [unpack_buffer] (0x0100): [RID#194] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:45:50): [krb5_child[78463]] [k5c_precreate_ccache] (0x4000): [RID#194] Recreating ccache * (2026-02-25 8:45:50): [krb5_child[78463]] [k5c_setup_fast] (0x0100): [RID#194] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:45:50): [krb5_child[78463]] [find_principal_in_keytab] (0x4000): [RID#194] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:45:50): [krb5_child[78463]] [match_principal] (0x1000): [RID#194] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:45:50): [krb5_child[78463]] [check_fast_ccache] (0x0200): [RID#194] FAST TGT is still valid. * (2026-02-25 8:45:50): [krb5_child[78463]] [become_user] (0x0200): [RID#194] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:45:50): [krb5_child[78463]] [main] (0x2000): [RID#194] Running as [1388400000][1388400000]. * (2026-02-25 8:45:50): [krb5_child[78463]] [set_lifetime_options] (0x0100): [RID#194] No specific renewable lifetime requested. * (2026-02-25 8:45:50): [krb5_child[78463]] [set_lifetime_options] (0x0100): [RID#194] No specific lifetime requested. * (2026-02-25 8:45:50): [krb5_child[78463]] [set_canonicalize_option] (0x0100): [RID#194] Canonicalization is set to [true] * (2026-02-25 8:45:50): [krb5_child[78463]] [main] (0x0400): [RID#194] Will perform auth * (2026-02-25 8:45:50): [krb5_child[78463]] [main] (0x0400): [RID#194] Will perform online auth * (2026-02-25 8:45:50): [krb5_child[78463]] [tgt_req_child] (0x1000): [RID#194] Attempting to get a TGT * (2026-02-25 8:45:50): [krb5_child[78463]] [get_and_save_tgt] (0x0400): [RID#194] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:45:50): [krb5_child[78463]] [get_and_save_tgt] (0x0020): [RID#194] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:45:50): [krb5_child[78463]] [map_krb5_error] (0x0020): [RID#194] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:45:55): [krb5_child[78581]] [get_and_save_tgt] (0x0020): [RID#196] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:45:55): [krb5_child[78581]] [main] (0x0400): [RID#196] krb5_child started. * (2026-02-25 8:45:55): [krb5_child[78581]] [unpack_buffer] (0x1000): [RID#196] total buffer size: [95] * (2026-02-25 8:45:55): [krb5_child[78581]] [unpack_buffer] (0x0100): [RID#196] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:45:55): [krb5_child[78581]] [unpack_buffer] (0x2000): [RID#196] No old ccache * (2026-02-25 8:45:55): [krb5_child[78581]] [unpack_buffer] (0x0100): [RID#196] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:45:55): [krb5_child[78581]] [k5c_precreate_ccache] (0x4000): [RID#196] Recreating ccache * (2026-02-25 8:45:55): [krb5_child[78581]] [k5c_setup_fast] (0x0100): [RID#196] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:45:55): [krb5_child[78581]] [find_principal_in_keytab] (0x4000): [RID#196] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:45:55): [krb5_child[78581]] [match_principal] (0x1000): [RID#196] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:45:55): [krb5_child[78581]] [check_fast_ccache] (0x0200): [RID#196] FAST TGT is still valid. * (2026-02-25 8:45:55): [krb5_child[78581]] [become_user] (0x0200): [RID#196] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:45:55): [krb5_child[78581]] [main] (0x2000): [RID#196] Running as [1388400000][1388400000]. * (2026-02-25 8:45:55): [krb5_child[78581]] [set_lifetime_options] (0x0100): [RID#196] No specific renewable lifetime requested. * (2026-02-25 8:45:55): [krb5_child[78581]] [set_lifetime_options] (0x0100): [RID#196] No specific lifetime requested. * (2026-02-25 8:45:55): [krb5_child[78581]] [set_canonicalize_option] (0x0100): [RID#196] Canonicalization is set to [true] * (2026-02-25 8:45:55): [krb5_child[78581]] [main] (0x0400): [RID#196] Will perform auth * (2026-02-25 8:45:55): [krb5_child[78581]] [main] (0x0400): [RID#196] Will perform online auth * (2026-02-25 8:45:55): [krb5_child[78581]] [tgt_req_child] (0x1000): [RID#196] Attempting to get a TGT * (2026-02-25 8:45:55): [krb5_child[78581]] [get_and_save_tgt] (0x0400): [RID#196] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:45:55): [krb5_child[78581]] [get_and_save_tgt] (0x0020): [RID#196] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:45:55): [krb5_child[78581]] [map_krb5_error] (0x0020): [RID#196] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:01): [krb5_child[78585]] [get_and_save_tgt] (0x0020): [RID#200] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:01): [krb5_child[78585]] [main] (0x0400): [RID#200] krb5_child started. * (2026-02-25 8:46:01): [krb5_child[78585]] [unpack_buffer] (0x1000): [RID#200] total buffer size: [94] * (2026-02-25 8:46:01): [krb5_child[78585]] [unpack_buffer] (0x0100): [RID#200] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:01): [krb5_child[78585]] [unpack_buffer] (0x2000): [RID#200] No old ccache * (2026-02-25 8:46:01): [krb5_child[78585]] [unpack_buffer] (0x0100): [RID#200] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:01): [krb5_child[78585]] [k5c_precreate_ccache] (0x4000): [RID#200] Recreating ccache * (2026-02-25 8:46:01): [krb5_child[78585]] [k5c_setup_fast] (0x0100): [RID#200] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:01): [krb5_child[78585]] [find_principal_in_keytab] (0x4000): [RID#200] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:01): [krb5_child[78585]] [match_principal] (0x1000): [RID#200] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:01): [krb5_child[78585]] [check_fast_ccache] (0x0200): [RID#200] FAST TGT is still valid. * (2026-02-25 8:46:01): [krb5_child[78585]] [become_user] (0x0200): [RID#200] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:01): [krb5_child[78585]] [main] (0x2000): [RID#200] Running as [1388400000][1388400000]. * (2026-02-25 8:46:01): [krb5_child[78585]] [set_lifetime_options] (0x0100): [RID#200] No specific renewable lifetime requested. * (2026-02-25 8:46:01): [krb5_child[78585]] [set_lifetime_options] (0x0100): [RID#200] No specific lifetime requested. * (2026-02-25 8:46:01): [krb5_child[78585]] [set_canonicalize_option] (0x0100): [RID#200] Canonicalization is set to [true] * (2026-02-25 8:46:01): [krb5_child[78585]] [main] (0x0400): [RID#200] Will perform auth * (2026-02-25 8:46:01): [krb5_child[78585]] [main] (0x0400): [RID#200] Will perform online auth * (2026-02-25 8:46:01): [krb5_child[78585]] [tgt_req_child] (0x1000): [RID#200] Attempting to get a TGT * (2026-02-25 8:46:01): [krb5_child[78585]] [get_and_save_tgt] (0x0400): [RID#200] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:01): [krb5_child[78585]] [get_and_save_tgt] (0x0020): [RID#200] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:01): [krb5_child[78585]] [map_krb5_error] (0x0020): [RID#200] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:06): [krb5_child[78653]] [get_and_save_tgt] (0x0020): [RID#203] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:06): [krb5_child[78653]] [main] (0x0400): [RID#203] krb5_child started. * (2026-02-25 8:46:06): [krb5_child[78653]] [unpack_buffer] (0x1000): [RID#203] total buffer size: [97] * (2026-02-25 8:46:06): [krb5_child[78653]] [unpack_buffer] (0x0100): [RID#203] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:06): [krb5_child[78653]] [unpack_buffer] (0x2000): [RID#203] No old ccache * (2026-02-25 8:46:06): [krb5_child[78653]] [unpack_buffer] (0x0100): [RID#203] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:06): [krb5_child[78653]] [k5c_precreate_ccache] (0x4000): [RID#203] Recreating ccache * (2026-02-25 8:46:06): [krb5_child[78653]] [k5c_setup_fast] (0x0100): [RID#203] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:06): [krb5_child[78653]] [find_principal_in_keytab] (0x4000): [RID#203] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:06): [krb5_child[78653]] [match_principal] (0x1000): [RID#203] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:06): [krb5_child[78653]] [check_fast_ccache] (0x0200): [RID#203] FAST TGT is still valid. * (2026-02-25 8:46:06): [krb5_child[78653]] [become_user] (0x0200): [RID#203] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:06): [krb5_child[78653]] [main] (0x2000): [RID#203] Running as [1388400000][1388400000]. * (2026-02-25 8:46:06): [krb5_child[78653]] [set_lifetime_options] (0x0100): [RID#203] No specific renewable lifetime requested. * (2026-02-25 8:46:06): [krb5_child[78653]] [set_lifetime_options] (0x0100): [RID#203] No specific lifetime requested. * (2026-02-25 8:46:06): [krb5_child[78653]] [set_canonicalize_option] (0x0100): [RID#203] Canonicalization is set to [true] * (2026-02-25 8:46:06): [krb5_child[78653]] [main] (0x0400): [RID#203] Will perform auth * (2026-02-25 8:46:06): [krb5_child[78653]] [main] (0x0400): [RID#203] Will perform online auth * (2026-02-25 8:46:06): [krb5_child[78653]] [tgt_req_child] (0x1000): [RID#203] Attempting to get a TGT * (2026-02-25 8:46:06): [krb5_child[78653]] [get_and_save_tgt] (0x0400): [RID#203] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:06): [krb5_child[78653]] [get_and_save_tgt] (0x0020): [RID#203] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:06): [krb5_child[78653]] [map_krb5_error] (0x0020): [RID#203] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:11): [krb5_child[78657]] [get_and_save_tgt] (0x0020): [RID#206] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:11): [krb5_child[78657]] [main] (0x0400): [RID#206] krb5_child started. * (2026-02-25 8:46:11): [krb5_child[78657]] [unpack_buffer] (0x1000): [RID#206] total buffer size: [95] * (2026-02-25 8:46:11): [krb5_child[78657]] [unpack_buffer] (0x0100): [RID#206] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:11): [krb5_child[78657]] [unpack_buffer] (0x2000): [RID#206] No old ccache * (2026-02-25 8:46:11): [krb5_child[78657]] [unpack_buffer] (0x0100): [RID#206] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:11): [krb5_child[78657]] [k5c_precreate_ccache] (0x4000): [RID#206] Recreating ccache * (2026-02-25 8:46:11): [krb5_child[78657]] [k5c_setup_fast] (0x0100): [RID#206] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:11): [krb5_child[78657]] [find_principal_in_keytab] (0x4000): [RID#206] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:11): [krb5_child[78657]] [match_principal] (0x1000): [RID#206] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:11): [krb5_child[78657]] [check_fast_ccache] (0x0200): [RID#206] FAST TGT is still valid. * (2026-02-25 8:46:11): [krb5_child[78657]] [become_user] (0x0200): [RID#206] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:11): [krb5_child[78657]] [main] (0x2000): [RID#206] Running as [1388400000][1388400000]. * (2026-02-25 8:46:11): [krb5_child[78657]] [set_lifetime_options] (0x0100): [RID#206] No specific renewable lifetime requested. * (2026-02-25 8:46:11): [krb5_child[78657]] [set_lifetime_options] (0x0100): [RID#206] No specific lifetime requested. * (2026-02-25 8:46:11): [krb5_child[78657]] [set_canonicalize_option] (0x0100): [RID#206] Canonicalization is set to [true] * (2026-02-25 8:46:11): [krb5_child[78657]] [main] (0x0400): [RID#206] Will perform auth * (2026-02-25 8:46:11): [krb5_child[78657]] [main] (0x0400): [RID#206] Will perform online auth * (2026-02-25 8:46:11): [krb5_child[78657]] [tgt_req_child] (0x1000): [RID#206] Attempting to get a TGT * (2026-02-25 8:46:11): [krb5_child[78657]] [get_and_save_tgt] (0x0400): [RID#206] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:11): [krb5_child[78657]] [get_and_save_tgt] (0x0020): [RID#206] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:11): [krb5_child[78657]] [map_krb5_error] (0x0020): [RID#206] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:17): [krb5_child[78688]] [get_and_save_tgt] (0x0020): [RID#210] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:17): [krb5_child[78688]] [main] (0x0400): [RID#210] krb5_child started. * (2026-02-25 8:46:17): [krb5_child[78688]] [unpack_buffer] (0x1000): [RID#210] total buffer size: [95] * (2026-02-25 8:46:17): [krb5_child[78688]] [unpack_buffer] (0x0100): [RID#210] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:17): [krb5_child[78688]] [unpack_buffer] (0x2000): [RID#210] No old ccache * (2026-02-25 8:46:17): [krb5_child[78688]] [unpack_buffer] (0x0100): [RID#210] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:17): [krb5_child[78688]] [k5c_precreate_ccache] (0x4000): [RID#210] Recreating ccache * (2026-02-25 8:46:17): [krb5_child[78688]] [k5c_setup_fast] (0x0100): [RID#210] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:17): [krb5_child[78688]] [find_principal_in_keytab] (0x4000): [RID#210] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:17): [krb5_child[78688]] [match_principal] (0x1000): [RID#210] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:17): [krb5_child[78688]] [check_fast_ccache] (0x0200): [RID#210] FAST TGT is still valid. * (2026-02-25 8:46:17): [krb5_child[78688]] [become_user] (0x0200): [RID#210] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:17): [krb5_child[78688]] [main] (0x2000): [RID#210] Running as [1388400000][1388400000]. * (2026-02-25 8:46:17): [krb5_child[78688]] [set_lifetime_options] (0x0100): [RID#210] No specific renewable lifetime requested. * (2026-02-25 8:46:17): [krb5_child[78688]] [set_lifetime_options] (0x0100): [RID#210] No specific lifetime requested. * (2026-02-25 8:46:17): [krb5_child[78688]] [set_canonicalize_option] (0x0100): [RID#210] Canonicalization is set to [true] * (2026-02-25 8:46:17): [krb5_child[78688]] [main] (0x0400): [RID#210] Will perform auth * (2026-02-25 8:46:17): [krb5_child[78688]] [main] (0x0400): [RID#210] Will perform online auth * (2026-02-25 8:46:17): [krb5_child[78688]] [tgt_req_child] (0x1000): [RID#210] Attempting to get a TGT * (2026-02-25 8:46:17): [krb5_child[78688]] [get_and_save_tgt] (0x0400): [RID#210] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:17): [krb5_child[78688]] [get_and_save_tgt] (0x0020): [RID#210] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:17): [krb5_child[78688]] [map_krb5_error] (0x0020): [RID#210] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:22): [krb5_child[78721]] [get_and_save_tgt] (0x0020): [RID#213] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:22): [krb5_child[78721]] [main] (0x0400): [RID#213] krb5_child started. * (2026-02-25 8:46:22): [krb5_child[78721]] [unpack_buffer] (0x1000): [RID#213] total buffer size: [99] * (2026-02-25 8:46:22): [krb5_child[78721]] [unpack_buffer] (0x0100): [RID#213] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:22): [krb5_child[78721]] [unpack_buffer] (0x2000): [RID#213] No old ccache * (2026-02-25 8:46:22): [krb5_child[78721]] [unpack_buffer] (0x0100): [RID#213] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:22): [krb5_child[78721]] [k5c_precreate_ccache] (0x4000): [RID#213] Recreating ccache * (2026-02-25 8:46:22): [krb5_child[78721]] [k5c_setup_fast] (0x0100): [RID#213] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:22): [krb5_child[78721]] [find_principal_in_keytab] (0x4000): [RID#213] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:22): [krb5_child[78721]] [match_principal] (0x1000): [RID#213] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:22): [krb5_child[78721]] [check_fast_ccache] (0x0200): [RID#213] FAST TGT is still valid. * (2026-02-25 8:46:22): [krb5_child[78721]] [become_user] (0x0200): [RID#213] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:22): [krb5_child[78721]] [main] (0x2000): [RID#213] Running as [1388400000][1388400000]. * (2026-02-25 8:46:22): [krb5_child[78721]] [set_lifetime_options] (0x0100): [RID#213] No specific renewable lifetime requested. * (2026-02-25 8:46:22): [krb5_child[78721]] [set_lifetime_options] (0x0100): [RID#213] No specific lifetime requested. * (2026-02-25 8:46:22): [krb5_child[78721]] [set_canonicalize_option] (0x0100): [RID#213] Canonicalization is set to [true] * (2026-02-25 8:46:22): [krb5_child[78721]] [main] (0x0400): [RID#213] Will perform auth * (2026-02-25 8:46:22): [krb5_child[78721]] [main] (0x0400): [RID#213] Will perform online auth * (2026-02-25 8:46:22): [krb5_child[78721]] [tgt_req_child] (0x1000): [RID#213] Attempting to get a TGT * (2026-02-25 8:46:22): [krb5_child[78721]] [get_and_save_tgt] (0x0400): [RID#213] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:22): [krb5_child[78721]] [get_and_save_tgt] (0x0020): [RID#213] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:22): [krb5_child[78721]] [map_krb5_error] (0x0020): [RID#213] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:27): [krb5_child[78835]] [get_and_save_tgt] (0x0020): [RID#216] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:27): [krb5_child[78835]] [main] (0x0400): [RID#216] krb5_child started. * (2026-02-25 8:46:27): [krb5_child[78835]] [unpack_buffer] (0x1000): [RID#216] total buffer size: [94] * (2026-02-25 8:46:27): [krb5_child[78835]] [unpack_buffer] (0x0100): [RID#216] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:27): [krb5_child[78835]] [unpack_buffer] (0x2000): [RID#216] No old ccache * (2026-02-25 8:46:27): [krb5_child[78835]] [unpack_buffer] (0x0100): [RID#216] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:27): [krb5_child[78835]] [k5c_precreate_ccache] (0x4000): [RID#216] Recreating ccache * (2026-02-25 8:46:27): [krb5_child[78835]] [k5c_setup_fast] (0x0100): [RID#216] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:27): [krb5_child[78835]] [find_principal_in_keytab] (0x4000): [RID#216] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:27): [krb5_child[78835]] [match_principal] (0x1000): [RID#216] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:27): [krb5_child[78835]] [check_fast_ccache] (0x0200): [RID#216] FAST TGT is still valid. * (2026-02-25 8:46:27): [krb5_child[78835]] [become_user] (0x0200): [RID#216] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:27): [krb5_child[78835]] [main] (0x2000): [RID#216] Running as [1388400000][1388400000]. * (2026-02-25 8:46:27): [krb5_child[78835]] [set_lifetime_options] (0x0100): [RID#216] No specific renewable lifetime requested. * (2026-02-25 8:46:27): [krb5_child[78835]] [set_lifetime_options] (0x0100): [RID#216] No specific lifetime requested. * (2026-02-25 8:46:27): [krb5_child[78835]] [set_canonicalize_option] (0x0100): [RID#216] Canonicalization is set to [true] * (2026-02-25 8:46:27): [krb5_child[78835]] [main] (0x0400): [RID#216] Will perform auth * (2026-02-25 8:46:27): [krb5_child[78835]] [main] (0x0400): [RID#216] Will perform online auth * (2026-02-25 8:46:27): [krb5_child[78835]] [tgt_req_child] (0x1000): [RID#216] Attempting to get a TGT * (2026-02-25 8:46:27): [krb5_child[78835]] [get_and_save_tgt] (0x0400): [RID#216] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:27): [krb5_child[78835]] [get_and_save_tgt] (0x0020): [RID#216] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:27): [krb5_child[78835]] [map_krb5_error] (0x0020): [RID#216] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:32): [krb5_child[78839]] [get_and_save_tgt] (0x0020): [RID#218] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:32): [krb5_child[78839]] [main] (0x0400): [RID#218] krb5_child started. * (2026-02-25 8:46:32): [krb5_child[78839]] [unpack_buffer] (0x1000): [RID#218] total buffer size: [92] * (2026-02-25 8:46:32): [krb5_child[78839]] [unpack_buffer] (0x0100): [RID#218] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:32): [krb5_child[78839]] [unpack_buffer] (0x2000): [RID#218] No old ccache * (2026-02-25 8:46:32): [krb5_child[78839]] [unpack_buffer] (0x0100): [RID#218] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:32): [krb5_child[78839]] [k5c_precreate_ccache] (0x4000): [RID#218] Recreating ccache * (2026-02-25 8:46:32): [krb5_child[78839]] [k5c_setup_fast] (0x0100): [RID#218] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:32): [krb5_child[78839]] [find_principal_in_keytab] (0x4000): [RID#218] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:32): [krb5_child[78839]] [match_principal] (0x1000): [RID#218] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:32): [krb5_child[78839]] [check_fast_ccache] (0x0200): [RID#218] FAST TGT is still valid. * (2026-02-25 8:46:32): [krb5_child[78839]] [become_user] (0x0200): [RID#218] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:32): [krb5_child[78839]] [main] (0x2000): [RID#218] Running as [1388400000][1388400000]. * (2026-02-25 8:46:32): [krb5_child[78839]] [set_lifetime_options] (0x0100): [RID#218] No specific renewable lifetime requested. * (2026-02-25 8:46:32): [krb5_child[78839]] [set_lifetime_options] (0x0100): [RID#218] No specific lifetime requested. * (2026-02-25 8:46:32): [krb5_child[78839]] [set_canonicalize_option] (0x0100): [RID#218] Canonicalization is set to [true] * (2026-02-25 8:46:32): [krb5_child[78839]] [main] (0x0400): [RID#218] Will perform auth * (2026-02-25 8:46:32): [krb5_child[78839]] [main] (0x0400): [RID#218] Will perform online auth * (2026-02-25 8:46:32): [krb5_child[78839]] [tgt_req_child] (0x1000): [RID#218] Attempting to get a TGT * (2026-02-25 8:46:32): [krb5_child[78839]] [get_and_save_tgt] (0x0400): [RID#218] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:32): [krb5_child[78839]] [get_and_save_tgt] (0x0020): [RID#218] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:32): [krb5_child[78839]] [map_krb5_error] (0x0020): [RID#218] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:37): [krb5_child[78906]] [get_and_save_tgt] (0x0020): [RID#222] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:37): [krb5_child[78906]] [main] (0x0400): [RID#222] krb5_child started. * (2026-02-25 8:46:37): [krb5_child[78906]] [unpack_buffer] (0x1000): [RID#222] total buffer size: [95] * (2026-02-25 8:46:37): [krb5_child[78906]] [unpack_buffer] (0x0100): [RID#222] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:37): [krb5_child[78906]] [unpack_buffer] (0x2000): [RID#222] No old ccache * (2026-02-25 8:46:37): [krb5_child[78906]] [unpack_buffer] (0x0100): [RID#222] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:37): [krb5_child[78906]] [k5c_precreate_ccache] (0x4000): [RID#222] Recreating ccache * (2026-02-25 8:46:37): [krb5_child[78906]] [k5c_setup_fast] (0x0100): [RID#222] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:37): [krb5_child[78906]] [find_principal_in_keytab] (0x4000): [RID#222] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:37): [krb5_child[78906]] [match_principal] (0x1000): [RID#222] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:37): [krb5_child[78906]] [check_fast_ccache] (0x0200): [RID#222] FAST TGT is still valid. * (2026-02-25 8:46:37): [krb5_child[78906]] [become_user] (0x0200): [RID#222] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:37): [krb5_child[78906]] [main] (0x2000): [RID#222] Running as [1388400000][1388400000]. * (2026-02-25 8:46:37): [krb5_child[78906]] [set_lifetime_options] (0x0100): [RID#222] No specific renewable lifetime requested. * (2026-02-25 8:46:37): [krb5_child[78906]] [set_lifetime_options] (0x0100): [RID#222] No specific lifetime requested. * (2026-02-25 8:46:37): [krb5_child[78906]] [set_canonicalize_option] (0x0100): [RID#222] Canonicalization is set to [true] * (2026-02-25 8:46:37): [krb5_child[78906]] [main] (0x0400): [RID#222] Will perform auth * (2026-02-25 8:46:37): [krb5_child[78906]] [main] (0x0400): [RID#222] Will perform online auth * (2026-02-25 8:46:37): [krb5_child[78906]] [tgt_req_child] (0x1000): [RID#222] Attempting to get a TGT * (2026-02-25 8:46:37): [krb5_child[78906]] [get_and_save_tgt] (0x0400): [RID#222] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:37): [krb5_child[78906]] [get_and_save_tgt] (0x0020): [RID#222] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:37): [krb5_child[78906]] [map_krb5_error] (0x0020): [RID#222] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:42): [krb5_child[78910]] [get_and_save_tgt] (0x0020): [RID#224] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:42): [krb5_child[78910]] [main] (0x0400): [RID#224] krb5_child started. * (2026-02-25 8:46:42): [krb5_child[78910]] [unpack_buffer] (0x1000): [RID#224] total buffer size: [95] * (2026-02-25 8:46:42): [krb5_child[78910]] [unpack_buffer] (0x0100): [RID#224] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:42): [krb5_child[78910]] [unpack_buffer] (0x2000): [RID#224] No old ccache * (2026-02-25 8:46:42): [krb5_child[78910]] [unpack_buffer] (0x0100): [RID#224] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:42): [krb5_child[78910]] [k5c_precreate_ccache] (0x4000): [RID#224] Recreating ccache * (2026-02-25 8:46:42): [krb5_child[78910]] [k5c_setup_fast] (0x0100): [RID#224] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:42): [krb5_child[78910]] [find_principal_in_keytab] (0x4000): [RID#224] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:42): [krb5_child[78910]] [match_principal] (0x1000): [RID#224] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:42): [krb5_child[78910]] [check_fast_ccache] (0x0200): [RID#224] FAST TGT is still valid. * (2026-02-25 8:46:42): [krb5_child[78910]] [become_user] (0x0200): [RID#224] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:42): [krb5_child[78910]] [main] (0x2000): [RID#224] Running as [1388400000][1388400000]. * (2026-02-25 8:46:42): [krb5_child[78910]] [set_lifetime_options] (0x0100): [RID#224] No specific renewable lifetime requested. * (2026-02-25 8:46:42): [krb5_child[78910]] [set_lifetime_options] (0x0100): [RID#224] No specific lifetime requested. * (2026-02-25 8:46:42): [krb5_child[78910]] [set_canonicalize_option] (0x0100): [RID#224] Canonicalization is set to [true] * (2026-02-25 8:46:42): [krb5_child[78910]] [main] (0x0400): [RID#224] Will perform auth * (2026-02-25 8:46:42): [krb5_child[78910]] [main] (0x0400): [RID#224] Will perform online auth * (2026-02-25 8:46:42): [krb5_child[78910]] [tgt_req_child] (0x1000): [RID#224] Attempting to get a TGT * (2026-02-25 8:46:42): [krb5_child[78910]] [get_and_save_tgt] (0x0400): [RID#224] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:42): [krb5_child[78910]] [get_and_save_tgt] (0x0020): [RID#224] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:42): [krb5_child[78910]] [map_krb5_error] (0x0020): [RID#224] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:46): [krb5_child[78940]] [get_and_save_tgt] (0x0020): [RID#227] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:46): [krb5_child[78940]] [main] (0x0400): [RID#227] krb5_child started. * (2026-02-25 8:46:46): [krb5_child[78940]] [unpack_buffer] (0x1000): [RID#227] total buffer size: [95] * (2026-02-25 8:46:46): [krb5_child[78940]] [unpack_buffer] (0x0100): [RID#227] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:46): [krb5_child[78940]] [unpack_buffer] (0x2000): [RID#227] No old ccache * (2026-02-25 8:46:46): [krb5_child[78940]] [unpack_buffer] (0x0100): [RID#227] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:46): [krb5_child[78940]] [k5c_precreate_ccache] (0x4000): [RID#227] Recreating ccache * (2026-02-25 8:46:46): [krb5_child[78940]] [k5c_setup_fast] (0x0100): [RID#227] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:46): [krb5_child[78940]] [find_principal_in_keytab] (0x4000): [RID#227] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:46): [krb5_child[78940]] [match_principal] (0x1000): [RID#227] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:46): [krb5_child[78940]] [check_fast_ccache] (0x0200): [RID#227] FAST TGT is still valid. * (2026-02-25 8:46:46): [krb5_child[78940]] [become_user] (0x0200): [RID#227] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:46): [krb5_child[78940]] [main] (0x2000): [RID#227] Running as [1388400000][1388400000]. * (2026-02-25 8:46:46): [krb5_child[78940]] [set_lifetime_options] (0x0100): [RID#227] No specific renewable lifetime requested. * (2026-02-25 8:46:46): [krb5_child[78940]] [set_lifetime_options] (0x0100): [RID#227] No specific lifetime requested. * (2026-02-25 8:46:46): [krb5_child[78940]] [set_canonicalize_option] (0x0100): [RID#227] Canonicalization is set to [true] * (2026-02-25 8:46:46): [krb5_child[78940]] [main] (0x0400): [RID#227] Will perform auth * (2026-02-25 8:46:46): [krb5_child[78940]] [main] (0x0400): [RID#227] Will perform online auth * (2026-02-25 8:46:46): [krb5_child[78940]] [tgt_req_child] (0x1000): [RID#227] Attempting to get a TGT * (2026-02-25 8:46:46): [krb5_child[78940]] [get_and_save_tgt] (0x0400): [RID#227] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:46): [krb5_child[78940]] [get_and_save_tgt] (0x0020): [RID#227] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:46): [krb5_child[78940]] [map_krb5_error] (0x0020): [RID#227] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:52): [krb5_child[78974]] [get_and_save_tgt] (0x0020): [RID#230] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:52): [krb5_child[78974]] [main] (0x0400): [RID#230] krb5_child started. * (2026-02-25 8:46:52): [krb5_child[78974]] [unpack_buffer] (0x1000): [RID#230] total buffer size: [95] * (2026-02-25 8:46:52): [krb5_child[78974]] [unpack_buffer] (0x0100): [RID#230] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:52): [krb5_child[78974]] [unpack_buffer] (0x2000): [RID#230] No old ccache * (2026-02-25 8:46:52): [krb5_child[78974]] [unpack_buffer] (0x0100): [RID#230] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:52): [krb5_child[78974]] [k5c_precreate_ccache] (0x4000): [RID#230] Recreating ccache * (2026-02-25 8:46:52): [krb5_child[78974]] [k5c_setup_fast] (0x0100): [RID#230] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:52): [krb5_child[78974]] [find_principal_in_keytab] (0x4000): [RID#230] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:52): [krb5_child[78974]] [match_principal] (0x1000): [RID#230] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:52): [krb5_child[78974]] [check_fast_ccache] (0x0200): [RID#230] FAST TGT is still valid. * (2026-02-25 8:46:52): [krb5_child[78974]] [become_user] (0x0200): [RID#230] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:52): [krb5_child[78974]] [main] (0x2000): [RID#230] Running as [1388400000][1388400000]. * (2026-02-25 8:46:52): [krb5_child[78974]] [set_lifetime_options] (0x0100): [RID#230] No specific renewable lifetime requested. * (2026-02-25 8:46:52): [krb5_child[78974]] [set_lifetime_options] (0x0100): [RID#230] No specific lifetime requested. * (2026-02-25 8:46:52): [krb5_child[78974]] [set_canonicalize_option] (0x0100): [RID#230] Canonicalization is set to [true] * (2026-02-25 8:46:52): [krb5_child[78974]] [main] (0x0400): [RID#230] Will perform auth * (2026-02-25 8:46:52): [krb5_child[78974]] [main] (0x0400): [RID#230] Will perform online auth * (2026-02-25 8:46:52): [krb5_child[78974]] [tgt_req_child] (0x1000): [RID#230] Attempting to get a TGT * (2026-02-25 8:46:52): [krb5_child[78974]] [get_and_save_tgt] (0x0400): [RID#230] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:52): [krb5_child[78974]] [get_and_save_tgt] (0x0020): [RID#230] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:52): [krb5_child[78974]] [map_krb5_error] (0x0020): [RID#230] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:46:56): [krb5_child[79088]] [get_and_save_tgt] (0x0020): [RID#233] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:46:56): [krb5_child[79088]] [main] (0x0400): [RID#233] krb5_child started. * (2026-02-25 8:46:56): [krb5_child[79088]] [unpack_buffer] (0x1000): [RID#233] total buffer size: [96] * (2026-02-25 8:46:56): [krb5_child[79088]] [unpack_buffer] (0x0100): [RID#233] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:46:56): [krb5_child[79088]] [unpack_buffer] (0x2000): [RID#233] No old ccache * (2026-02-25 8:46:56): [krb5_child[79088]] [unpack_buffer] (0x0100): [RID#233] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:46:56): [krb5_child[79088]] [k5c_precreate_ccache] (0x4000): [RID#233] Recreating ccache * (2026-02-25 8:46:56): [krb5_child[79088]] [k5c_setup_fast] (0x0100): [RID#233] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:46:56): [krb5_child[79088]] [find_principal_in_keytab] (0x4000): [RID#233] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:46:56): [krb5_child[79088]] [match_principal] (0x1000): [RID#233] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:46:56): [krb5_child[79088]] [check_fast_ccache] (0x0200): [RID#233] FAST TGT is still valid. * (2026-02-25 8:46:56): [krb5_child[79088]] [become_user] (0x0200): [RID#233] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:46:56): [krb5_child[79088]] [main] (0x2000): [RID#233] Running as [1388400000][1388400000]. * (2026-02-25 8:46:56): [krb5_child[79088]] [set_lifetime_options] (0x0100): [RID#233] No specific renewable lifetime requested. * (2026-02-25 8:46:56): [krb5_child[79088]] [set_lifetime_options] (0x0100): [RID#233] No specific lifetime requested. * (2026-02-25 8:46:56): [krb5_child[79088]] [set_canonicalize_option] (0x0100): [RID#233] Canonicalization is set to [true] * (2026-02-25 8:46:56): [krb5_child[79088]] [main] (0x0400): [RID#233] Will perform auth * (2026-02-25 8:46:56): [krb5_child[79088]] [main] (0x0400): [RID#233] Will perform online auth * (2026-02-25 8:46:56): [krb5_child[79088]] [tgt_req_child] (0x1000): [RID#233] Attempting to get a TGT * (2026-02-25 8:46:56): [krb5_child[79088]] [get_and_save_tgt] (0x0400): [RID#233] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:46:56): [krb5_child[79088]] [get_and_save_tgt] (0x0020): [RID#233] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:46:56): [krb5_child[79088]] [map_krb5_error] (0x0020): [RID#233] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:01): [krb5_child[79092]] [get_and_save_tgt] (0x0020): [RID#236] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:01): [krb5_child[79092]] [main] (0x0400): [RID#236] krb5_child started. * (2026-02-25 8:47:01): [krb5_child[79092]] [unpack_buffer] (0x1000): [RID#236] total buffer size: [108] * (2026-02-25 8:47:01): [krb5_child[79092]] [unpack_buffer] (0x0100): [RID#236] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:01): [krb5_child[79092]] [unpack_buffer] (0x2000): [RID#236] No old ccache * (2026-02-25 8:47:01): [krb5_child[79092]] [unpack_buffer] (0x0100): [RID#236] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:01): [krb5_child[79092]] [k5c_precreate_ccache] (0x4000): [RID#236] Recreating ccache * (2026-02-25 8:47:01): [krb5_child[79092]] [k5c_setup_fast] (0x0100): [RID#236] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:01): [krb5_child[79092]] [find_principal_in_keytab] (0x4000): [RID#236] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:01): [krb5_child[79092]] [match_principal] (0x1000): [RID#236] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:01): [krb5_child[79092]] [check_fast_ccache] (0x0200): [RID#236] FAST TGT is still valid. * (2026-02-25 8:47:01): [krb5_child[79092]] [become_user] (0x0200): [RID#236] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:01): [krb5_child[79092]] [main] (0x2000): [RID#236] Running as [1388400000][1388400000]. * (2026-02-25 8:47:01): [krb5_child[79092]] [set_lifetime_options] (0x0100): [RID#236] No specific renewable lifetime requested. * (2026-02-25 8:47:01): [krb5_child[79092]] [set_lifetime_options] (0x0100): [RID#236] No specific lifetime requested. * (2026-02-25 8:47:01): [krb5_child[79092]] [set_canonicalize_option] (0x0100): [RID#236] Canonicalization is set to [true] * (2026-02-25 8:47:01): [krb5_child[79092]] [main] (0x0400): [RID#236] Will perform auth * (2026-02-25 8:47:01): [krb5_child[79092]] [main] (0x0400): [RID#236] Will perform online auth * (2026-02-25 8:47:01): [krb5_child[79092]] [tgt_req_child] (0x1000): [RID#236] Attempting to get a TGT * (2026-02-25 8:47:01): [krb5_child[79092]] [get_and_save_tgt] (0x0400): [RID#236] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:01): [krb5_child[79092]] [get_and_save_tgt] (0x0020): [RID#236] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:01): [krb5_child[79092]] [map_krb5_error] (0x0020): [RID#236] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:06): [krb5_child[79148]] [get_and_save_tgt] (0x0020): [RID#238] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:05): [krb5_child[79148]] [main] (0x0400): [RID#238] krb5_child started. * (2026-02-25 8:47:05): [krb5_child[79148]] [unpack_buffer] (0x1000): [RID#238] total buffer size: [97] * (2026-02-25 8:47:05): [krb5_child[79148]] [unpack_buffer] (0x0100): [RID#238] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:05): [krb5_child[79148]] [unpack_buffer] (0x2000): [RID#238] No old ccache * (2026-02-25 8:47:05): [krb5_child[79148]] [unpack_buffer] (0x0100): [RID#238] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:05): [krb5_child[79148]] [k5c_precreate_ccache] (0x4000): [RID#238] Recreating ccache * (2026-02-25 8:47:05): [krb5_child[79148]] [k5c_setup_fast] (0x0100): [RID#238] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:05): [krb5_child[79148]] [find_principal_in_keytab] (0x4000): [RID#238] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:05): [krb5_child[79148]] [match_principal] (0x1000): [RID#238] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:05): [krb5_child[79148]] [check_fast_ccache] (0x0200): [RID#238] FAST TGT is still valid. * (2026-02-25 8:47:05): [krb5_child[79148]] [become_user] (0x0200): [RID#238] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:05): [krb5_child[79148]] [main] (0x2000): [RID#238] Running as [1388400000][1388400000]. * (2026-02-25 8:47:05): [krb5_child[79148]] [set_lifetime_options] (0x0100): [RID#238] No specific renewable lifetime requested. * (2026-02-25 8:47:05): [krb5_child[79148]] [set_lifetime_options] (0x0100): [RID#238] No specific lifetime requested. * (2026-02-25 8:47:05): [krb5_child[79148]] [set_canonicalize_option] (0x0100): [RID#238] Canonicalization is set to [true] * (2026-02-25 8:47:05): [krb5_child[79148]] [main] (0x0400): [RID#238] Will perform auth * (2026-02-25 8:47:05): [krb5_child[79148]] [main] (0x0400): [RID#238] Will perform online auth * (2026-02-25 8:47:05): [krb5_child[79148]] [tgt_req_child] (0x1000): [RID#238] Attempting to get a TGT * (2026-02-25 8:47:05): [krb5_child[79148]] [get_and_save_tgt] (0x0400): [RID#238] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:06): [krb5_child[79148]] [get_and_save_tgt] (0x0020): [RID#238] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:06): [krb5_child[79148]] [map_krb5_error] (0x0020): [RID#238] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:10): [krb5_child[79161]] [get_and_save_tgt] (0x0020): [RID#241] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:10): [krb5_child[79161]] [main] (0x0400): [RID#241] krb5_child started. * (2026-02-25 8:47:10): [krb5_child[79161]] [unpack_buffer] (0x1000): [RID#241] total buffer size: [92] * (2026-02-25 8:47:10): [krb5_child[79161]] [unpack_buffer] (0x0100): [RID#241] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:10): [krb5_child[79161]] [unpack_buffer] (0x2000): [RID#241] No old ccache * (2026-02-25 8:47:10): [krb5_child[79161]] [unpack_buffer] (0x0100): [RID#241] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:10): [krb5_child[79161]] [k5c_precreate_ccache] (0x4000): [RID#241] Recreating ccache * (2026-02-25 8:47:10): [krb5_child[79161]] [k5c_setup_fast] (0x0100): [RID#241] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:10): [krb5_child[79161]] [find_principal_in_keytab] (0x4000): [RID#241] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:10): [krb5_child[79161]] [match_principal] (0x1000): [RID#241] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:10): [krb5_child[79161]] [check_fast_ccache] (0x0200): [RID#241] FAST TGT is still valid. * (2026-02-25 8:47:10): [krb5_child[79161]] [become_user] (0x0200): [RID#241] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:10): [krb5_child[79161]] [main] (0x2000): [RID#241] Running as [1388400000][1388400000]. * (2026-02-25 8:47:10): [krb5_child[79161]] [set_lifetime_options] (0x0100): [RID#241] No specific renewable lifetime requested. * (2026-02-25 8:47:10): [krb5_child[79161]] [set_lifetime_options] (0x0100): [RID#241] No specific lifetime requested. * (2026-02-25 8:47:10): [krb5_child[79161]] [set_canonicalize_option] (0x0100): [RID#241] Canonicalization is set to [true] * (2026-02-25 8:47:10): [krb5_child[79161]] [main] (0x0400): [RID#241] Will perform auth * (2026-02-25 8:47:10): [krb5_child[79161]] [main] (0x0400): [RID#241] Will perform online auth * (2026-02-25 8:47:10): [krb5_child[79161]] [tgt_req_child] (0x1000): [RID#241] Attempting to get a TGT * (2026-02-25 8:47:10): [krb5_child[79161]] [get_and_save_tgt] (0x0400): [RID#241] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:10): [krb5_child[79161]] [get_and_save_tgt] (0x0020): [RID#241] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:10): [krb5_child[79161]] [map_krb5_error] (0x0020): [RID#241] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:15): [krb5_child[79193]] [get_and_save_tgt] (0x0020): [RID#245] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:15): [krb5_child[79193]] [main] (0x0400): [RID#245] krb5_child started. * (2026-02-25 8:47:15): [krb5_child[79193]] [unpack_buffer] (0x1000): [RID#245] total buffer size: [92] * (2026-02-25 8:47:15): [krb5_child[79193]] [unpack_buffer] (0x0100): [RID#245] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:15): [krb5_child[79193]] [unpack_buffer] (0x2000): [RID#245] No old ccache * (2026-02-25 8:47:15): [krb5_child[79193]] [unpack_buffer] (0x0100): [RID#245] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:15): [krb5_child[79193]] [k5c_precreate_ccache] (0x4000): [RID#245] Recreating ccache * (2026-02-25 8:47:15): [krb5_child[79193]] [k5c_setup_fast] (0x0100): [RID#245] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:15): [krb5_child[79193]] [find_principal_in_keytab] (0x4000): [RID#245] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:15): [krb5_child[79193]] [match_principal] (0x1000): [RID#245] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:15): [krb5_child[79193]] [check_fast_ccache] (0x0200): [RID#245] FAST TGT is still valid. * (2026-02-25 8:47:15): [krb5_child[79193]] [become_user] (0x0200): [RID#245] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:15): [krb5_child[79193]] [main] (0x2000): [RID#245] Running as [1388400000][1388400000]. * (2026-02-25 8:47:15): [krb5_child[79193]] [set_lifetime_options] (0x0100): [RID#245] No specific renewable lifetime requested. * (2026-02-25 8:47:15): [krb5_child[79193]] [set_lifetime_options] (0x0100): [RID#245] No specific lifetime requested. * (2026-02-25 8:47:15): [krb5_child[79193]] [set_canonicalize_option] (0x0100): [RID#245] Canonicalization is set to [true] * (2026-02-25 8:47:15): [krb5_child[79193]] [main] (0x0400): [RID#245] Will perform auth * (2026-02-25 8:47:15): [krb5_child[79193]] [main] (0x0400): [RID#245] Will perform online auth * (2026-02-25 8:47:15): [krb5_child[79193]] [tgt_req_child] (0x1000): [RID#245] Attempting to get a TGT * (2026-02-25 8:47:15): [krb5_child[79193]] [get_and_save_tgt] (0x0400): [RID#245] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:15): [krb5_child[79193]] [get_and_save_tgt] (0x0020): [RID#245] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:15): [krb5_child[79193]] [map_krb5_error] (0x0020): [RID#245] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:21): [krb5_child[79199]] [get_and_save_tgt] (0x0020): [RID#248] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:21): [krb5_child[79199]] [main] (0x0400): [RID#248] krb5_child started. * (2026-02-25 8:47:21): [krb5_child[79199]] [unpack_buffer] (0x1000): [RID#248] total buffer size: [92] * (2026-02-25 8:47:21): [krb5_child[79199]] [unpack_buffer] (0x0100): [RID#248] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:21): [krb5_child[79199]] [unpack_buffer] (0x2000): [RID#248] No old ccache * (2026-02-25 8:47:21): [krb5_child[79199]] [unpack_buffer] (0x0100): [RID#248] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:21): [krb5_child[79199]] [k5c_precreate_ccache] (0x4000): [RID#248] Recreating ccache * (2026-02-25 8:47:21): [krb5_child[79199]] [k5c_setup_fast] (0x0100): [RID#248] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:21): [krb5_child[79199]] [find_principal_in_keytab] (0x4000): [RID#248] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:21): [krb5_child[79199]] [match_principal] (0x1000): [RID#248] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:21): [krb5_child[79199]] [check_fast_ccache] (0x0200): [RID#248] FAST TGT is still valid. * (2026-02-25 8:47:21): [krb5_child[79199]] [become_user] (0x0200): [RID#248] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:21): [krb5_child[79199]] [main] (0x2000): [RID#248] Running as [1388400000][1388400000]. * (2026-02-25 8:47:21): [krb5_child[79199]] [set_lifetime_options] (0x0100): [RID#248] No specific renewable lifetime requested. * (2026-02-25 8:47:21): [krb5_child[79199]] [set_lifetime_options] (0x0100): [RID#248] No specific lifetime requested. * (2026-02-25 8:47:21): [krb5_child[79199]] [set_canonicalize_option] (0x0100): [RID#248] Canonicalization is set to [true] * (2026-02-25 8:47:21): [krb5_child[79199]] [main] (0x0400): [RID#248] Will perform auth * (2026-02-25 8:47:21): [krb5_child[79199]] [main] (0x0400): [RID#248] Will perform online auth * (2026-02-25 8:47:21): [krb5_child[79199]] [tgt_req_child] (0x1000): [RID#248] Attempting to get a TGT * (2026-02-25 8:47:21): [krb5_child[79199]] [get_and_save_tgt] (0x0400): [RID#248] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:21): [krb5_child[79199]] [get_and_save_tgt] (0x0020): [RID#248] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:21): [krb5_child[79199]] [map_krb5_error] (0x0020): [RID#248] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:26): [krb5_child[79278]] [get_and_save_tgt] (0x0020): [RID#250] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:26): [krb5_child[79278]] [main] (0x0400): [RID#250] krb5_child started. * (2026-02-25 8:47:26): [krb5_child[79278]] [unpack_buffer] (0x1000): [RID#250] total buffer size: [92] * (2026-02-25 8:47:26): [krb5_child[79278]] [unpack_buffer] (0x0100): [RID#250] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:26): [krb5_child[79278]] [unpack_buffer] (0x2000): [RID#250] No old ccache * (2026-02-25 8:47:26): [krb5_child[79278]] [unpack_buffer] (0x0100): [RID#250] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:26): [krb5_child[79278]] [k5c_precreate_ccache] (0x4000): [RID#250] Recreating ccache * (2026-02-25 8:47:26): [krb5_child[79278]] [k5c_setup_fast] (0x0100): [RID#250] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:26): [krb5_child[79278]] [find_principal_in_keytab] (0x4000): [RID#250] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:26): [krb5_child[79278]] [match_principal] (0x1000): [RID#250] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:26): [krb5_child[79278]] [check_fast_ccache] (0x0200): [RID#250] FAST TGT is still valid. * (2026-02-25 8:47:26): [krb5_child[79278]] [become_user] (0x0200): [RID#250] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:26): [krb5_child[79278]] [main] (0x2000): [RID#250] Running as [1388400000][1388400000]. * (2026-02-25 8:47:26): [krb5_child[79278]] [set_lifetime_options] (0x0100): [RID#250] No specific renewable lifetime requested. * (2026-02-25 8:47:26): [krb5_child[79278]] [set_lifetime_options] (0x0100): [RID#250] No specific lifetime requested. * (2026-02-25 8:47:26): [krb5_child[79278]] [set_canonicalize_option] (0x0100): [RID#250] Canonicalization is set to [true] * (2026-02-25 8:47:26): [krb5_child[79278]] [main] (0x0400): [RID#250] Will perform auth * (2026-02-25 8:47:26): [krb5_child[79278]] [main] (0x0400): [RID#250] Will perform online auth * (2026-02-25 8:47:26): [krb5_child[79278]] [tgt_req_child] (0x1000): [RID#250] Attempting to get a TGT * (2026-02-25 8:47:26): [krb5_child[79278]] [get_and_save_tgt] (0x0400): [RID#250] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:26): [krb5_child[79278]] [get_and_save_tgt] (0x0020): [RID#250] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:26): [krb5_child[79278]] [map_krb5_error] (0x0020): [RID#250] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:31): [krb5_child[79347]] [get_and_save_tgt] (0x0020): [RID#254] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:31): [krb5_child[79347]] [main] (0x0400): [RID#254] krb5_child started. * (2026-02-25 8:47:31): [krb5_child[79347]] [unpack_buffer] (0x1000): [RID#254] total buffer size: [92] * (2026-02-25 8:47:31): [krb5_child[79347]] [unpack_buffer] (0x0100): [RID#254] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:31): [krb5_child[79347]] [unpack_buffer] (0x2000): [RID#254] No old ccache * (2026-02-25 8:47:31): [krb5_child[79347]] [unpack_buffer] (0x0100): [RID#254] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:31): [krb5_child[79347]] [k5c_precreate_ccache] (0x4000): [RID#254] Recreating ccache * (2026-02-25 8:47:31): [krb5_child[79347]] [k5c_setup_fast] (0x0100): [RID#254] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:31): [krb5_child[79347]] [find_principal_in_keytab] (0x4000): [RID#254] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:31): [krb5_child[79347]] [match_principal] (0x1000): [RID#254] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:31): [krb5_child[79347]] [check_fast_ccache] (0x0200): [RID#254] FAST TGT is still valid. * (2026-02-25 8:47:31): [krb5_child[79347]] [become_user] (0x0200): [RID#254] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:31): [krb5_child[79347]] [main] (0x2000): [RID#254] Running as [1388400000][1388400000]. * (2026-02-25 8:47:31): [krb5_child[79347]] [set_lifetime_options] (0x0100): [RID#254] No specific renewable lifetime requested. * (2026-02-25 8:47:31): [krb5_child[79347]] [set_lifetime_options] (0x0100): [RID#254] No specific lifetime requested. * (2026-02-25 8:47:31): [krb5_child[79347]] [set_canonicalize_option] (0x0100): [RID#254] Canonicalization is set to [true] * (2026-02-25 8:47:31): [krb5_child[79347]] [main] (0x0400): [RID#254] Will perform auth * (2026-02-25 8:47:31): [krb5_child[79347]] [main] (0x0400): [RID#254] Will perform online auth * (2026-02-25 8:47:31): [krb5_child[79347]] [tgt_req_child] (0x1000): [RID#254] Attempting to get a TGT * (2026-02-25 8:47:31): [krb5_child[79347]] [get_and_save_tgt] (0x0400): [RID#254] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:31): [krb5_child[79347]] [get_and_save_tgt] (0x0020): [RID#254] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:31): [krb5_child[79347]] [map_krb5_error] (0x0020): [RID#254] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:35): [krb5_child[79351]] [get_and_save_tgt] (0x0020): [RID#256] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:35): [krb5_child[79351]] [main] (0x0400): [RID#256] krb5_child started. * (2026-02-25 8:47:35): [krb5_child[79351]] [unpack_buffer] (0x1000): [RID#256] total buffer size: [92] * (2026-02-25 8:47:35): [krb5_child[79351]] [unpack_buffer] (0x0100): [RID#256] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:35): [krb5_child[79351]] [unpack_buffer] (0x2000): [RID#256] No old ccache * (2026-02-25 8:47:35): [krb5_child[79351]] [unpack_buffer] (0x0100): [RID#256] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:35): [krb5_child[79351]] [k5c_precreate_ccache] (0x4000): [RID#256] Recreating ccache * (2026-02-25 8:47:35): [krb5_child[79351]] [k5c_setup_fast] (0x0100): [RID#256] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:35): [krb5_child[79351]] [find_principal_in_keytab] (0x4000): [RID#256] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:35): [krb5_child[79351]] [match_principal] (0x1000): [RID#256] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:35): [krb5_child[79351]] [check_fast_ccache] (0x0200): [RID#256] FAST TGT is still valid. * (2026-02-25 8:47:35): [krb5_child[79351]] [become_user] (0x0200): [RID#256] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:35): [krb5_child[79351]] [main] (0x2000): [RID#256] Running as [1388400000][1388400000]. * (2026-02-25 8:47:35): [krb5_child[79351]] [set_lifetime_options] (0x0100): [RID#256] No specific renewable lifetime requested. * (2026-02-25 8:47:35): [krb5_child[79351]] [set_lifetime_options] (0x0100): [RID#256] No specific lifetime requested. * (2026-02-25 8:47:35): [krb5_child[79351]] [set_canonicalize_option] (0x0100): [RID#256] Canonicalization is set to [true] * (2026-02-25 8:47:35): [krb5_child[79351]] [main] (0x0400): [RID#256] Will perform auth * (2026-02-25 8:47:35): [krb5_child[79351]] [main] (0x0400): [RID#256] Will perform online auth * (2026-02-25 8:47:35): [krb5_child[79351]] [tgt_req_child] (0x1000): [RID#256] Attempting to get a TGT * (2026-02-25 8:47:35): [krb5_child[79351]] [get_and_save_tgt] (0x0400): [RID#256] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:35): [krb5_child[79351]] [get_and_save_tgt] (0x0020): [RID#256] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:35): [krb5_child[79351]] [map_krb5_error] (0x0020): [RID#256] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:42): [krb5_child[79418]] [get_and_save_tgt] (0x0020): [RID#259] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:42): [krb5_child[79418]] [main] (0x0400): [RID#259] krb5_child started. * (2026-02-25 8:47:42): [krb5_child[79418]] [unpack_buffer] (0x1000): [RID#259] total buffer size: [92] * (2026-02-25 8:47:42): [krb5_child[79418]] [unpack_buffer] (0x0100): [RID#259] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:42): [krb5_child[79418]] [unpack_buffer] (0x2000): [RID#259] No old ccache * (2026-02-25 8:47:42): [krb5_child[79418]] [unpack_buffer] (0x0100): [RID#259] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:42): [krb5_child[79418]] [k5c_precreate_ccache] (0x4000): [RID#259] Recreating ccache * (2026-02-25 8:47:42): [krb5_child[79418]] [k5c_setup_fast] (0x0100): [RID#259] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:42): [krb5_child[79418]] [find_principal_in_keytab] (0x4000): [RID#259] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:42): [krb5_child[79418]] [match_principal] (0x1000): [RID#259] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:42): [krb5_child[79418]] [check_fast_ccache] (0x0200): [RID#259] FAST TGT is still valid. * (2026-02-25 8:47:42): [krb5_child[79418]] [become_user] (0x0200): [RID#259] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:42): [krb5_child[79418]] [main] (0x2000): [RID#259] Running as [1388400000][1388400000]. * (2026-02-25 8:47:42): [krb5_child[79418]] [set_lifetime_options] (0x0100): [RID#259] No specific renewable lifetime requested. * (2026-02-25 8:47:42): [krb5_child[79418]] [set_lifetime_options] (0x0100): [RID#259] No specific lifetime requested. * (2026-02-25 8:47:42): [krb5_child[79418]] [set_canonicalize_option] (0x0100): [RID#259] Canonicalization is set to [true] * (2026-02-25 8:47:42): [krb5_child[79418]] [main] (0x0400): [RID#259] Will perform auth * (2026-02-25 8:47:42): [krb5_child[79418]] [main] (0x0400): [RID#259] Will perform online auth * (2026-02-25 8:47:42): [krb5_child[79418]] [tgt_req_child] (0x1000): [RID#259] Attempting to get a TGT * (2026-02-25 8:47:42): [krb5_child[79418]] [get_and_save_tgt] (0x0400): [RID#259] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:42): [krb5_child[79418]] [get_and_save_tgt] (0x0020): [RID#259] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:42): [krb5_child[79418]] [map_krb5_error] (0x0020): [RID#259] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:47): [krb5_child[79448]] [get_and_save_tgt] (0x0020): [RID#262] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:47): [krb5_child[79448]] [main] (0x0400): [RID#262] krb5_child started. * (2026-02-25 8:47:47): [krb5_child[79448]] [unpack_buffer] (0x1000): [RID#262] total buffer size: [92] * (2026-02-25 8:47:47): [krb5_child[79448]] [unpack_buffer] (0x0100): [RID#262] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:47): [krb5_child[79448]] [unpack_buffer] (0x2000): [RID#262] No old ccache * (2026-02-25 8:47:47): [krb5_child[79448]] [unpack_buffer] (0x0100): [RID#262] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:47): [krb5_child[79448]] [k5c_precreate_ccache] (0x4000): [RID#262] Recreating ccache * (2026-02-25 8:47:47): [krb5_child[79448]] [k5c_setup_fast] (0x0100): [RID#262] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:47): [krb5_child[79448]] [find_principal_in_keytab] (0x4000): [RID#262] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:47): [krb5_child[79448]] [match_principal] (0x1000): [RID#262] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:47): [krb5_child[79448]] [check_fast_ccache] (0x0200): [RID#262] FAST TGT is still valid. * (2026-02-25 8:47:47): [krb5_child[79448]] [become_user] (0x0200): [RID#262] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:47): [krb5_child[79448]] [main] (0x2000): [RID#262] Running as [1388400000][1388400000]. * (2026-02-25 8:47:47): [krb5_child[79448]] [set_lifetime_options] (0x0100): [RID#262] No specific renewable lifetime requested. * (2026-02-25 8:47:47): [krb5_child[79448]] [set_lifetime_options] (0x0100): [RID#262] No specific lifetime requested. * (2026-02-25 8:47:47): [krb5_child[79448]] [set_canonicalize_option] (0x0100): [RID#262] Canonicalization is set to [true] * (2026-02-25 8:47:47): [krb5_child[79448]] [main] (0x0400): [RID#262] Will perform auth * (2026-02-25 8:47:47): [krb5_child[79448]] [main] (0x0400): [RID#262] Will perform online auth * (2026-02-25 8:47:47): [krb5_child[79448]] [tgt_req_child] (0x1000): [RID#262] Attempting to get a TGT * (2026-02-25 8:47:47): [krb5_child[79448]] [get_and_save_tgt] (0x0400): [RID#262] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:47): [krb5_child[79448]] [get_and_save_tgt] (0x0020): [RID#262] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:47): [krb5_child[79448]] [map_krb5_error] (0x0020): [RID#262] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:52): [krb5_child[79452]] [get_and_save_tgt] (0x0020): [RID#265] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:52): [krb5_child[79452]] [main] (0x0400): [RID#265] krb5_child started. * (2026-02-25 8:47:52): [krb5_child[79452]] [unpack_buffer] (0x1000): [RID#265] total buffer size: [92] * (2026-02-25 8:47:52): [krb5_child[79452]] [unpack_buffer] (0x0100): [RID#265] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:52): [krb5_child[79452]] [unpack_buffer] (0x2000): [RID#265] No old ccache * (2026-02-25 8:47:52): [krb5_child[79452]] [unpack_buffer] (0x0100): [RID#265] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:52): [krb5_child[79452]] [k5c_precreate_ccache] (0x4000): [RID#265] Recreating ccache * (2026-02-25 8:47:52): [krb5_child[79452]] [k5c_setup_fast] (0x0100): [RID#265] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:52): [krb5_child[79452]] [find_principal_in_keytab] (0x4000): [RID#265] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:52): [krb5_child[79452]] [match_principal] (0x1000): [RID#265] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:52): [krb5_child[79452]] [check_fast_ccache] (0x0200): [RID#265] FAST TGT is still valid. * (2026-02-25 8:47:52): [krb5_child[79452]] [become_user] (0x0200): [RID#265] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:52): [krb5_child[79452]] [main] (0x2000): [RID#265] Running as [1388400000][1388400000]. * (2026-02-25 8:47:52): [krb5_child[79452]] [set_lifetime_options] (0x0100): [RID#265] No specific renewable lifetime requested. * (2026-02-25 8:47:52): [krb5_child[79452]] [set_lifetime_options] (0x0100): [RID#265] No specific lifetime requested. * (2026-02-25 8:47:52): [krb5_child[79452]] [set_canonicalize_option] (0x0100): [RID#265] Canonicalization is set to [true] * (2026-02-25 8:47:52): [krb5_child[79452]] [main] (0x0400): [RID#265] Will perform auth * (2026-02-25 8:47:52): [krb5_child[79452]] [main] (0x0400): [RID#265] Will perform online auth * (2026-02-25 8:47:52): [krb5_child[79452]] [tgt_req_child] (0x1000): [RID#265] Attempting to get a TGT * (2026-02-25 8:47:52): [krb5_child[79452]] [get_and_save_tgt] (0x0400): [RID#265] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:52): [krb5_child[79452]] [get_and_save_tgt] (0x0020): [RID#265] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:52): [krb5_child[79452]] [map_krb5_error] (0x0020): [RID#265] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:47:57): [krb5_child[79589]] [get_and_save_tgt] (0x0020): [RID#268] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:47:57): [krb5_child[79589]] [main] (0x0400): [RID#268] krb5_child started. * (2026-02-25 8:47:57): [krb5_child[79589]] [unpack_buffer] (0x1000): [RID#268] total buffer size: [92] * (2026-02-25 8:47:57): [krb5_child[79589]] [unpack_buffer] (0x0100): [RID#268] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:47:57): [krb5_child[79589]] [unpack_buffer] (0x2000): [RID#268] No old ccache * (2026-02-25 8:47:57): [krb5_child[79589]] [unpack_buffer] (0x0100): [RID#268] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:47:57): [krb5_child[79589]] [k5c_precreate_ccache] (0x4000): [RID#268] Recreating ccache * (2026-02-25 8:47:57): [krb5_child[79589]] [k5c_setup_fast] (0x0100): [RID#268] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:47:57): [krb5_child[79589]] [find_principal_in_keytab] (0x4000): [RID#268] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:47:57): [krb5_child[79589]] [match_principal] (0x1000): [RID#268] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:47:57): [krb5_child[79589]] [check_fast_ccache] (0x0200): [RID#268] FAST TGT is still valid. * (2026-02-25 8:47:57): [krb5_child[79589]] [become_user] (0x0200): [RID#268] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:47:57): [krb5_child[79589]] [main] (0x2000): [RID#268] Running as [1388400000][1388400000]. * (2026-02-25 8:47:57): [krb5_child[79589]] [set_lifetime_options] (0x0100): [RID#268] No specific renewable lifetime requested. * (2026-02-25 8:47:57): [krb5_child[79589]] [set_lifetime_options] (0x0100): [RID#268] No specific lifetime requested. * (2026-02-25 8:47:57): [krb5_child[79589]] [set_canonicalize_option] (0x0100): [RID#268] Canonicalization is set to [true] * (2026-02-25 8:47:57): [krb5_child[79589]] [main] (0x0400): [RID#268] Will perform auth * (2026-02-25 8:47:57): [krb5_child[79589]] [main] (0x0400): [RID#268] Will perform online auth * (2026-02-25 8:47:57): [krb5_child[79589]] [tgt_req_child] (0x1000): [RID#268] Attempting to get a TGT * (2026-02-25 8:47:57): [krb5_child[79589]] [get_and_save_tgt] (0x0400): [RID#268] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:47:57): [krb5_child[79589]] [get_and_save_tgt] (0x0020): [RID#268] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:47:57): [krb5_child[79589]] [map_krb5_error] (0x0020): [RID#268] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:02): [krb5_child[79604]] [get_and_save_tgt] (0x0020): [RID#270] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:02): [krb5_child[79604]] [main] (0x0400): [RID#270] krb5_child started. * (2026-02-25 8:48:02): [krb5_child[79604]] [unpack_buffer] (0x1000): [RID#270] total buffer size: [92] * (2026-02-25 8:48:02): [krb5_child[79604]] [unpack_buffer] (0x0100): [RID#270] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:02): [krb5_child[79604]] [unpack_buffer] (0x2000): [RID#270] No old ccache * (2026-02-25 8:48:02): [krb5_child[79604]] [unpack_buffer] (0x0100): [RID#270] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:02): [krb5_child[79604]] [k5c_precreate_ccache] (0x4000): [RID#270] Recreating ccache * (2026-02-25 8:48:02): [krb5_child[79604]] [k5c_setup_fast] (0x0100): [RID#270] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:02): [krb5_child[79604]] [find_principal_in_keytab] (0x4000): [RID#270] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:02): [krb5_child[79604]] [match_principal] (0x1000): [RID#270] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:02): [krb5_child[79604]] [check_fast_ccache] (0x0200): [RID#270] FAST TGT is still valid. * (2026-02-25 8:48:02): [krb5_child[79604]] [become_user] (0x0200): [RID#270] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:02): [krb5_child[79604]] [main] (0x2000): [RID#270] Running as [1388400000][1388400000]. * (2026-02-25 8:48:02): [krb5_child[79604]] [set_lifetime_options] (0x0100): [RID#270] No specific renewable lifetime requested. * (2026-02-25 8:48:02): [krb5_child[79604]] [set_lifetime_options] (0x0100): [RID#270] No specific lifetime requested. * (2026-02-25 8:48:02): [krb5_child[79604]] [set_canonicalize_option] (0x0100): [RID#270] Canonicalization is set to [true] * (2026-02-25 8:48:02): [krb5_child[79604]] [main] (0x0400): [RID#270] Will perform auth * (2026-02-25 8:48:02): [krb5_child[79604]] [main] (0x0400): [RID#270] Will perform online auth * (2026-02-25 8:48:02): [krb5_child[79604]] [tgt_req_child] (0x1000): [RID#270] Attempting to get a TGT * (2026-02-25 8:48:02): [krb5_child[79604]] [get_and_save_tgt] (0x0400): [RID#270] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:02): [krb5_child[79604]] [get_and_save_tgt] (0x0020): [RID#270] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:02): [krb5_child[79604]] [map_krb5_error] (0x0020): [RID#270] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:06): [krb5_child[79608]] [get_and_save_tgt] (0x0020): [RID#274] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:06): [krb5_child[79608]] [main] (0x0400): [RID#274] krb5_child started. * (2026-02-25 8:48:06): [krb5_child[79608]] [unpack_buffer] (0x1000): [RID#274] total buffer size: [92] * (2026-02-25 8:48:06): [krb5_child[79608]] [unpack_buffer] (0x0100): [RID#274] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:06): [krb5_child[79608]] [unpack_buffer] (0x2000): [RID#274] No old ccache * (2026-02-25 8:48:06): [krb5_child[79608]] [unpack_buffer] (0x0100): [RID#274] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:06): [krb5_child[79608]] [k5c_precreate_ccache] (0x4000): [RID#274] Recreating ccache * (2026-02-25 8:48:06): [krb5_child[79608]] [k5c_setup_fast] (0x0100): [RID#274] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:06): [krb5_child[79608]] [find_principal_in_keytab] (0x4000): [RID#274] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:06): [krb5_child[79608]] [match_principal] (0x1000): [RID#274] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:06): [krb5_child[79608]] [check_fast_ccache] (0x0200): [RID#274] FAST TGT is still valid. * (2026-02-25 8:48:06): [krb5_child[79608]] [become_user] (0x0200): [RID#274] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:06): [krb5_child[79608]] [main] (0x2000): [RID#274] Running as [1388400000][1388400000]. * (2026-02-25 8:48:06): [krb5_child[79608]] [set_lifetime_options] (0x0100): [RID#274] No specific renewable lifetime requested. * (2026-02-25 8:48:06): [krb5_child[79608]] [set_lifetime_options] (0x0100): [RID#274] No specific lifetime requested. * (2026-02-25 8:48:06): [krb5_child[79608]] [set_canonicalize_option] (0x0100): [RID#274] Canonicalization is set to [true] * (2026-02-25 8:48:06): [krb5_child[79608]] [main] (0x0400): [RID#274] Will perform auth * (2026-02-25 8:48:06): [krb5_child[79608]] [main] (0x0400): [RID#274] Will perform online auth * (2026-02-25 8:48:06): [krb5_child[79608]] [tgt_req_child] (0x1000): [RID#274] Attempting to get a TGT * (2026-02-25 8:48:06): [krb5_child[79608]] [get_and_save_tgt] (0x0400): [RID#274] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:06): [krb5_child[79608]] [get_and_save_tgt] (0x0020): [RID#274] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:06): [krb5_child[79608]] [map_krb5_error] (0x0020): [RID#274] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:12): [krb5_child[79673]] [get_and_save_tgt] (0x0020): [RID#277] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:12): [krb5_child[79673]] [main] (0x0400): [RID#277] krb5_child started. * (2026-02-25 8:48:12): [krb5_child[79673]] [unpack_buffer] (0x1000): [RID#277] total buffer size: [92] * (2026-02-25 8:48:12): [krb5_child[79673]] [unpack_buffer] (0x0100): [RID#277] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:12): [krb5_child[79673]] [unpack_buffer] (0x2000): [RID#277] No old ccache * (2026-02-25 8:48:12): [krb5_child[79673]] [unpack_buffer] (0x0100): [RID#277] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:12): [krb5_child[79673]] [k5c_precreate_ccache] (0x4000): [RID#277] Recreating ccache * (2026-02-25 8:48:12): [krb5_child[79673]] [k5c_setup_fast] (0x0100): [RID#277] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:12): [krb5_child[79673]] [find_principal_in_keytab] (0x4000): [RID#277] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:12): [krb5_child[79673]] [match_principal] (0x1000): [RID#277] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:12): [krb5_child[79673]] [check_fast_ccache] (0x0200): [RID#277] FAST TGT is still valid. * (2026-02-25 8:48:12): [krb5_child[79673]] [become_user] (0x0200): [RID#277] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:12): [krb5_child[79673]] [main] (0x2000): [RID#277] Running as [1388400000][1388400000]. * (2026-02-25 8:48:12): [krb5_child[79673]] [set_lifetime_options] (0x0100): [RID#277] No specific renewable lifetime requested. * (2026-02-25 8:48:12): [krb5_child[79673]] [set_lifetime_options] (0x0100): [RID#277] No specific lifetime requested. * (2026-02-25 8:48:12): [krb5_child[79673]] [set_canonicalize_option] (0x0100): [RID#277] Canonicalization is set to [true] * (2026-02-25 8:48:12): [krb5_child[79673]] [main] (0x0400): [RID#277] Will perform auth * (2026-02-25 8:48:12): [krb5_child[79673]] [main] (0x0400): [RID#277] Will perform online auth * (2026-02-25 8:48:12): [krb5_child[79673]] [tgt_req_child] (0x1000): [RID#277] Attempting to get a TGT * (2026-02-25 8:48:12): [krb5_child[79673]] [get_and_save_tgt] (0x0400): [RID#277] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:12): [krb5_child[79673]] [get_and_save_tgt] (0x0020): [RID#277] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:12): [krb5_child[79673]] [map_krb5_error] (0x0020): [RID#277] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:17): [krb5_child[79702]] [get_and_save_tgt] (0x0020): [RID#280] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:17): [krb5_child[79702]] [main] (0x0400): [RID#280] krb5_child started. * (2026-02-25 8:48:17): [krb5_child[79702]] [unpack_buffer] (0x1000): [RID#280] total buffer size: [92] * (2026-02-25 8:48:17): [krb5_child[79702]] [unpack_buffer] (0x0100): [RID#280] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:17): [krb5_child[79702]] [unpack_buffer] (0x2000): [RID#280] No old ccache * (2026-02-25 8:48:17): [krb5_child[79702]] [unpack_buffer] (0x0100): [RID#280] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:17): [krb5_child[79702]] [k5c_precreate_ccache] (0x4000): [RID#280] Recreating ccache * (2026-02-25 8:48:17): [krb5_child[79702]] [k5c_setup_fast] (0x0100): [RID#280] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:17): [krb5_child[79702]] [find_principal_in_keytab] (0x4000): [RID#280] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:17): [krb5_child[79702]] [match_principal] (0x1000): [RID#280] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:17): [krb5_child[79702]] [check_fast_ccache] (0x0200): [RID#280] FAST TGT is still valid. * (2026-02-25 8:48:17): [krb5_child[79702]] [become_user] (0x0200): [RID#280] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:17): [krb5_child[79702]] [main] (0x2000): [RID#280] Running as [1388400000][1388400000]. * (2026-02-25 8:48:17): [krb5_child[79702]] [set_lifetime_options] (0x0100): [RID#280] No specific renewable lifetime requested. * (2026-02-25 8:48:17): [krb5_child[79702]] [set_lifetime_options] (0x0100): [RID#280] No specific lifetime requested. * (2026-02-25 8:48:17): [krb5_child[79702]] [set_canonicalize_option] (0x0100): [RID#280] Canonicalization is set to [true] * (2026-02-25 8:48:17): [krb5_child[79702]] [main] (0x0400): [RID#280] Will perform auth * (2026-02-25 8:48:17): [krb5_child[79702]] [main] (0x0400): [RID#280] Will perform online auth * (2026-02-25 8:48:17): [krb5_child[79702]] [tgt_req_child] (0x1000): [RID#280] Attempting to get a TGT * (2026-02-25 8:48:17): [krb5_child[79702]] [get_and_save_tgt] (0x0400): [RID#280] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:17): [krb5_child[79702]] [get_and_save_tgt] (0x0020): [RID#280] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:17): [krb5_child[79702]] [map_krb5_error] (0x0020): [RID#280] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:21): [krb5_child[79708]] [get_and_save_tgt] (0x0020): [RID#282] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:21): [krb5_child[79708]] [main] (0x0400): [RID#282] krb5_child started. * (2026-02-25 8:48:21): [krb5_child[79708]] [unpack_buffer] (0x1000): [RID#282] total buffer size: [92] * (2026-02-25 8:48:21): [krb5_child[79708]] [unpack_buffer] (0x0100): [RID#282] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:21): [krb5_child[79708]] [unpack_buffer] (0x2000): [RID#282] No old ccache * (2026-02-25 8:48:21): [krb5_child[79708]] [unpack_buffer] (0x0100): [RID#282] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:21): [krb5_child[79708]] [k5c_precreate_ccache] (0x4000): [RID#282] Recreating ccache * (2026-02-25 8:48:21): [krb5_child[79708]] [k5c_setup_fast] (0x0100): [RID#282] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:21): [krb5_child[79708]] [find_principal_in_keytab] (0x4000): [RID#282] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:21): [krb5_child[79708]] [match_principal] (0x1000): [RID#282] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:21): [krb5_child[79708]] [check_fast_ccache] (0x0200): [RID#282] FAST TGT is still valid. * (2026-02-25 8:48:21): [krb5_child[79708]] [become_user] (0x0200): [RID#282] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:21): [krb5_child[79708]] [main] (0x2000): [RID#282] Running as [1388400000][1388400000]. * (2026-02-25 8:48:21): [krb5_child[79708]] [set_lifetime_options] (0x0100): [RID#282] No specific renewable lifetime requested. * (2026-02-25 8:48:21): [krb5_child[79708]] [set_lifetime_options] (0x0100): [RID#282] No specific lifetime requested. * (2026-02-25 8:48:21): [krb5_child[79708]] [set_canonicalize_option] (0x0100): [RID#282] Canonicalization is set to [true] * (2026-02-25 8:48:21): [krb5_child[79708]] [main] (0x0400): [RID#282] Will perform auth * (2026-02-25 8:48:21): [krb5_child[79708]] [main] (0x0400): [RID#282] Will perform online auth * (2026-02-25 8:48:21): [krb5_child[79708]] [tgt_req_child] (0x1000): [RID#282] Attempting to get a TGT * (2026-02-25 8:48:21): [krb5_child[79708]] [get_and_save_tgt] (0x0400): [RID#282] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:21): [krb5_child[79708]] [get_and_save_tgt] (0x0020): [RID#282] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:21): [krb5_child[79708]] [map_krb5_error] (0x0020): [RID#282] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:26): [krb5_child[79739]] [get_and_save_tgt] (0x0020): [RID#286] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:26): [krb5_child[79739]] [main] (0x0400): [RID#286] krb5_child started. * (2026-02-25 8:48:26): [krb5_child[79739]] [unpack_buffer] (0x1000): [RID#286] total buffer size: [92] * (2026-02-25 8:48:26): [krb5_child[79739]] [unpack_buffer] (0x0100): [RID#286] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:26): [krb5_child[79739]] [unpack_buffer] (0x2000): [RID#286] No old ccache * (2026-02-25 8:48:26): [krb5_child[79739]] [unpack_buffer] (0x0100): [RID#286] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:26): [krb5_child[79739]] [k5c_precreate_ccache] (0x4000): [RID#286] Recreating ccache * (2026-02-25 8:48:26): [krb5_child[79739]] [k5c_setup_fast] (0x0100): [RID#286] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:26): [krb5_child[79739]] [find_principal_in_keytab] (0x4000): [RID#286] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:26): [krb5_child[79739]] [match_principal] (0x1000): [RID#286] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:26): [krb5_child[79739]] [check_fast_ccache] (0x0200): [RID#286] FAST TGT is still valid. * (2026-02-25 8:48:26): [krb5_child[79739]] [become_user] (0x0200): [RID#286] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:26): [krb5_child[79739]] [main] (0x2000): [RID#286] Running as [1388400000][1388400000]. * (2026-02-25 8:48:26): [krb5_child[79739]] [set_lifetime_options] (0x0100): [RID#286] No specific renewable lifetime requested. * (2026-02-25 8:48:26): [krb5_child[79739]] [set_lifetime_options] (0x0100): [RID#286] No specific lifetime requested. * (2026-02-25 8:48:26): [krb5_child[79739]] [set_canonicalize_option] (0x0100): [RID#286] Canonicalization is set to [true] * (2026-02-25 8:48:26): [krb5_child[79739]] [main] (0x0400): [RID#286] Will perform auth * (2026-02-25 8:48:26): [krb5_child[79739]] [main] (0x0400): [RID#286] Will perform online auth * (2026-02-25 8:48:26): [krb5_child[79739]] [tgt_req_child] (0x1000): [RID#286] Attempting to get a TGT * (2026-02-25 8:48:26): [krb5_child[79739]] [get_and_save_tgt] (0x0400): [RID#286] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:26): [krb5_child[79739]] [get_and_save_tgt] (0x0020): [RID#286] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:26): [krb5_child[79739]] [map_krb5_error] (0x0020): [RID#286] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:30): [krb5_child[79856]] [get_and_save_tgt] (0x0020): [RID#288] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:30): [krb5_child[79856]] [main] (0x0400): [RID#288] krb5_child started. * (2026-02-25 8:48:30): [krb5_child[79856]] [unpack_buffer] (0x1000): [RID#288] total buffer size: [92] * (2026-02-25 8:48:30): [krb5_child[79856]] [unpack_buffer] (0x0100): [RID#288] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:30): [krb5_child[79856]] [unpack_buffer] (0x2000): [RID#288] No old ccache * (2026-02-25 8:48:30): [krb5_child[79856]] [unpack_buffer] (0x0100): [RID#288] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:30): [krb5_child[79856]] [k5c_precreate_ccache] (0x4000): [RID#288] Recreating ccache * (2026-02-25 8:48:30): [krb5_child[79856]] [k5c_setup_fast] (0x0100): [RID#288] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:30): [krb5_child[79856]] [find_principal_in_keytab] (0x4000): [RID#288] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:30): [krb5_child[79856]] [match_principal] (0x1000): [RID#288] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:30): [krb5_child[79856]] [check_fast_ccache] (0x0200): [RID#288] FAST TGT is still valid. * (2026-02-25 8:48:30): [krb5_child[79856]] [become_user] (0x0200): [RID#288] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:30): [krb5_child[79856]] [main] (0x2000): [RID#288] Running as [1388400000][1388400000]. * (2026-02-25 8:48:30): [krb5_child[79856]] [set_lifetime_options] (0x0100): [RID#288] No specific renewable lifetime requested. * (2026-02-25 8:48:30): [krb5_child[79856]] [set_lifetime_options] (0x0100): [RID#288] No specific lifetime requested. * (2026-02-25 8:48:30): [krb5_child[79856]] [set_canonicalize_option] (0x0100): [RID#288] Canonicalization is set to [true] * (2026-02-25 8:48:30): [krb5_child[79856]] [main] (0x0400): [RID#288] Will perform auth * (2026-02-25 8:48:30): [krb5_child[79856]] [main] (0x0400): [RID#288] Will perform online auth * (2026-02-25 8:48:30): [krb5_child[79856]] [tgt_req_child] (0x1000): [RID#288] Attempting to get a TGT * (2026-02-25 8:48:30): [krb5_child[79856]] [get_and_save_tgt] (0x0400): [RID#288] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:30): [krb5_child[79856]] [get_and_save_tgt] (0x0020): [RID#288] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:30): [krb5_child[79856]] [map_krb5_error] (0x0020): [RID#288] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:36): [krb5_child[79860]] [get_and_save_tgt] (0x0020): [RID#291] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:36): [krb5_child[79860]] [main] (0x0400): [RID#291] krb5_child started. * (2026-02-25 8:48:36): [krb5_child[79860]] [unpack_buffer] (0x1000): [RID#291] total buffer size: [92] * (2026-02-25 8:48:36): [krb5_child[79860]] [unpack_buffer] (0x0100): [RID#291] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:36): [krb5_child[79860]] [unpack_buffer] (0x2000): [RID#291] No old ccache * (2026-02-25 8:48:36): [krb5_child[79860]] [unpack_buffer] (0x0100): [RID#291] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:36): [krb5_child[79860]] [k5c_precreate_ccache] (0x4000): [RID#291] Recreating ccache * (2026-02-25 8:48:36): [krb5_child[79860]] [k5c_setup_fast] (0x0100): [RID#291] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:36): [krb5_child[79860]] [find_principal_in_keytab] (0x4000): [RID#291] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:36): [krb5_child[79860]] [match_principal] (0x1000): [RID#291] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:36): [krb5_child[79860]] [check_fast_ccache] (0x0200): [RID#291] FAST TGT is still valid. * (2026-02-25 8:48:36): [krb5_child[79860]] [become_user] (0x0200): [RID#291] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:36): [krb5_child[79860]] [main] (0x2000): [RID#291] Running as [1388400000][1388400000]. * (2026-02-25 8:48:36): [krb5_child[79860]] [set_lifetime_options] (0x0100): [RID#291] No specific renewable lifetime requested. * (2026-02-25 8:48:36): [krb5_child[79860]] [set_lifetime_options] (0x0100): [RID#291] No specific lifetime requested. * (2026-02-25 8:48:36): [krb5_child[79860]] [set_canonicalize_option] (0x0100): [RID#291] Canonicalization is set to [true] * (2026-02-25 8:48:36): [krb5_child[79860]] [main] (0x0400): [RID#291] Will perform auth * (2026-02-25 8:48:36): [krb5_child[79860]] [main] (0x0400): [RID#291] Will perform online auth * (2026-02-25 8:48:36): [krb5_child[79860]] [tgt_req_child] (0x1000): [RID#291] Attempting to get a TGT * (2026-02-25 8:48:36): [krb5_child[79860]] [get_and_save_tgt] (0x0400): [RID#291] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:36): [krb5_child[79860]] [get_and_save_tgt] (0x0020): [RID#291] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:36): [krb5_child[79860]] [map_krb5_error] (0x0020): [RID#291] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:40): [krb5_child[79922]] [get_and_save_tgt] (0x0020): [RID#293] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:40): [krb5_child[79922]] [main] (0x0400): [RID#293] krb5_child started. * (2026-02-25 8:48:40): [krb5_child[79922]] [unpack_buffer] (0x1000): [RID#293] total buffer size: [92] * (2026-02-25 8:48:40): [krb5_child[79922]] [unpack_buffer] (0x0100): [RID#293] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:40): [krb5_child[79922]] [unpack_buffer] (0x2000): [RID#293] No old ccache * (2026-02-25 8:48:40): [krb5_child[79922]] [unpack_buffer] (0x0100): [RID#293] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:40): [krb5_child[79922]] [k5c_precreate_ccache] (0x4000): [RID#293] Recreating ccache * (2026-02-25 8:48:40): [krb5_child[79922]] [k5c_setup_fast] (0x0100): [RID#293] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:40): [krb5_child[79922]] [find_principal_in_keytab] (0x4000): [RID#293] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:40): [krb5_child[79922]] [match_principal] (0x1000): [RID#293] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:40): [krb5_child[79922]] [check_fast_ccache] (0x0200): [RID#293] FAST TGT is still valid. * (2026-02-25 8:48:40): [krb5_child[79922]] [become_user] (0x0200): [RID#293] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:40): [krb5_child[79922]] [main] (0x2000): [RID#293] Running as [1388400000][1388400000]. * (2026-02-25 8:48:40): [krb5_child[79922]] [set_lifetime_options] (0x0100): [RID#293] No specific renewable lifetime requested. * (2026-02-25 8:48:40): [krb5_child[79922]] [set_lifetime_options] (0x0100): [RID#293] No specific lifetime requested. * (2026-02-25 8:48:40): [krb5_child[79922]] [set_canonicalize_option] (0x0100): [RID#293] Canonicalization is set to [true] * (2026-02-25 8:48:40): [krb5_child[79922]] [main] (0x0400): [RID#293] Will perform auth * (2026-02-25 8:48:40): [krb5_child[79922]] [main] (0x0400): [RID#293] Will perform online auth * (2026-02-25 8:48:40): [krb5_child[79922]] [tgt_req_child] (0x1000): [RID#293] Attempting to get a TGT * (2026-02-25 8:48:40): [krb5_child[79922]] [get_and_save_tgt] (0x0400): [RID#293] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:40): [krb5_child[79922]] [get_and_save_tgt] (0x0020): [RID#293] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:40): [krb5_child[79922]] [map_krb5_error] (0x0020): [RID#293] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:45): [krb5_child[79926]] [get_and_save_tgt] (0x0020): [RID#297] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:45): [krb5_child[79926]] [main] (0x0400): [RID#297] krb5_child started. * (2026-02-25 8:48:45): [krb5_child[79926]] [unpack_buffer] (0x1000): [RID#297] total buffer size: [92] * (2026-02-25 8:48:45): [krb5_child[79926]] [unpack_buffer] (0x0100): [RID#297] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:45): [krb5_child[79926]] [unpack_buffer] (0x2000): [RID#297] No old ccache * (2026-02-25 8:48:45): [krb5_child[79926]] [unpack_buffer] (0x0100): [RID#297] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:45): [krb5_child[79926]] [k5c_precreate_ccache] (0x4000): [RID#297] Recreating ccache * (2026-02-25 8:48:45): [krb5_child[79926]] [k5c_setup_fast] (0x0100): [RID#297] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:45): [krb5_child[79926]] [find_principal_in_keytab] (0x4000): [RID#297] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:45): [krb5_child[79926]] [match_principal] (0x1000): [RID#297] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:45): [krb5_child[79926]] [check_fast_ccache] (0x0200): [RID#297] FAST TGT is still valid. * (2026-02-25 8:48:45): [krb5_child[79926]] [become_user] (0x0200): [RID#297] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:45): [krb5_child[79926]] [main] (0x2000): [RID#297] Running as [1388400000][1388400000]. * (2026-02-25 8:48:45): [krb5_child[79926]] [set_lifetime_options] (0x0100): [RID#297] No specific renewable lifetime requested. * (2026-02-25 8:48:45): [krb5_child[79926]] [set_lifetime_options] (0x0100): [RID#297] No specific lifetime requested. * (2026-02-25 8:48:45): [krb5_child[79926]] [set_canonicalize_option] (0x0100): [RID#297] Canonicalization is set to [true] * (2026-02-25 8:48:45): [krb5_child[79926]] [main] (0x0400): [RID#297] Will perform auth * (2026-02-25 8:48:45): [krb5_child[79926]] [main] (0x0400): [RID#297] Will perform online auth * (2026-02-25 8:48:45): [krb5_child[79926]] [tgt_req_child] (0x1000): [RID#297] Attempting to get a TGT * (2026-02-25 8:48:45): [krb5_child[79926]] [get_and_save_tgt] (0x0400): [RID#297] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:45): [krb5_child[79926]] [get_and_save_tgt] (0x0020): [RID#297] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:45): [krb5_child[79926]] [map_krb5_error] (0x0020): [RID#297] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:50): [krb5_child[79957]] [get_and_save_tgt] (0x0020): [RID#299] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:49): [krb5_child[79957]] [main] (0x0400): [RID#299] krb5_child started. * (2026-02-25 8:48:49): [krb5_child[79957]] [unpack_buffer] (0x1000): [RID#299] total buffer size: [92] * (2026-02-25 8:48:49): [krb5_child[79957]] [unpack_buffer] (0x0100): [RID#299] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:49): [krb5_child[79957]] [unpack_buffer] (0x2000): [RID#299] No old ccache * (2026-02-25 8:48:49): [krb5_child[79957]] [unpack_buffer] (0x0100): [RID#299] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:49): [krb5_child[79957]] [k5c_precreate_ccache] (0x4000): [RID#299] Recreating ccache * (2026-02-25 8:48:49): [krb5_child[79957]] [k5c_setup_fast] (0x0100): [RID#299] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:49): [krb5_child[79957]] [find_principal_in_keytab] (0x4000): [RID#299] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:49): [krb5_child[79957]] [match_principal] (0x1000): [RID#299] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:49): [krb5_child[79957]] [check_fast_ccache] (0x0200): [RID#299] FAST TGT is still valid. * (2026-02-25 8:48:49): [krb5_child[79957]] [become_user] (0x0200): [RID#299] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:49): [krb5_child[79957]] [main] (0x2000): [RID#299] Running as [1388400000][1388400000]. * (2026-02-25 8:48:49): [krb5_child[79957]] [set_lifetime_options] (0x0100): [RID#299] No specific renewable lifetime requested. * (2026-02-25 8:48:49): [krb5_child[79957]] [set_lifetime_options] (0x0100): [RID#299] No specific lifetime requested. * (2026-02-25 8:48:49): [krb5_child[79957]] [set_canonicalize_option] (0x0100): [RID#299] Canonicalization is set to [true] * (2026-02-25 8:48:49): [krb5_child[79957]] [main] (0x0400): [RID#299] Will perform auth * (2026-02-25 8:48:49): [krb5_child[79957]] [main] (0x0400): [RID#299] Will perform online auth * (2026-02-25 8:48:49): [krb5_child[79957]] [tgt_req_child] (0x1000): [RID#299] Attempting to get a TGT * (2026-02-25 8:48:49): [krb5_child[79957]] [get_and_save_tgt] (0x0400): [RID#299] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:50): [krb5_child[79957]] [get_and_save_tgt] (0x0020): [RID#299] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:50): [krb5_child[79957]] [map_krb5_error] (0x0020): [RID#299] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:48:54): [krb5_child[79961]] [get_and_save_tgt] (0x0020): [RID#302] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:48:54): [krb5_child[79961]] [main] (0x0400): [RID#302] krb5_child started. * (2026-02-25 8:48:54): [krb5_child[79961]] [unpack_buffer] (0x1000): [RID#302] total buffer size: [92] * (2026-02-25 8:48:54): [krb5_child[79961]] [unpack_buffer] (0x0100): [RID#302] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:48:54): [krb5_child[79961]] [unpack_buffer] (0x2000): [RID#302] No old ccache * (2026-02-25 8:48:54): [krb5_child[79961]] [unpack_buffer] (0x0100): [RID#302] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:48:54): [krb5_child[79961]] [k5c_precreate_ccache] (0x4000): [RID#302] Recreating ccache * (2026-02-25 8:48:54): [krb5_child[79961]] [k5c_setup_fast] (0x0100): [RID#302] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:48:54): [krb5_child[79961]] [find_principal_in_keytab] (0x4000): [RID#302] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:48:54): [krb5_child[79961]] [match_principal] (0x1000): [RID#302] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:48:54): [krb5_child[79961]] [check_fast_ccache] (0x0200): [RID#302] FAST TGT is still valid. * (2026-02-25 8:48:54): [krb5_child[79961]] [become_user] (0x0200): [RID#302] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:48:54): [krb5_child[79961]] [main] (0x2000): [RID#302] Running as [1388400000][1388400000]. * (2026-02-25 8:48:54): [krb5_child[79961]] [set_lifetime_options] (0x0100): [RID#302] No specific renewable lifetime requested. * (2026-02-25 8:48:54): [krb5_child[79961]] [set_lifetime_options] (0x0100): [RID#302] No specific lifetime requested. * (2026-02-25 8:48:54): [krb5_child[79961]] [set_canonicalize_option] (0x0100): [RID#302] Canonicalization is set to [true] * (2026-02-25 8:48:54): [krb5_child[79961]] [main] (0x0400): [RID#302] Will perform auth * (2026-02-25 8:48:54): [krb5_child[79961]] [main] (0x0400): [RID#302] Will perform online auth * (2026-02-25 8:48:54): [krb5_child[79961]] [tgt_req_child] (0x1000): [RID#302] Attempting to get a TGT * (2026-02-25 8:48:54): [krb5_child[79961]] [get_and_save_tgt] (0x0400): [RID#302] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:48:54): [krb5_child[79961]] [get_and_save_tgt] (0x0020): [RID#302] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:48:54): [krb5_child[79961]] [map_krb5_error] (0x0020): [RID#302] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:00): [krb5_child[80105]] [get_and_save_tgt] (0x0020): [RID#305] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:00): [krb5_child[80105]] [main] (0x0400): [RID#305] krb5_child started. * (2026-02-25 8:49:00): [krb5_child[80105]] [unpack_buffer] (0x1000): [RID#305] total buffer size: [92] * (2026-02-25 8:49:00): [krb5_child[80105]] [unpack_buffer] (0x0100): [RID#305] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:00): [krb5_child[80105]] [unpack_buffer] (0x2000): [RID#305] No old ccache * (2026-02-25 8:49:00): [krb5_child[80105]] [unpack_buffer] (0x0100): [RID#305] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:00): [krb5_child[80105]] [k5c_precreate_ccache] (0x4000): [RID#305] Recreating ccache * (2026-02-25 8:49:00): [krb5_child[80105]] [k5c_setup_fast] (0x0100): [RID#305] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:00): [krb5_child[80105]] [find_principal_in_keytab] (0x4000): [RID#305] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:00): [krb5_child[80105]] [match_principal] (0x1000): [RID#305] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:00): [krb5_child[80105]] [check_fast_ccache] (0x0200): [RID#305] FAST TGT is still valid. * (2026-02-25 8:49:00): [krb5_child[80105]] [become_user] (0x0200): [RID#305] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:00): [krb5_child[80105]] [main] (0x2000): [RID#305] Running as [1388400000][1388400000]. * (2026-02-25 8:49:00): [krb5_child[80105]] [set_lifetime_options] (0x0100): [RID#305] No specific renewable lifetime requested. * (2026-02-25 8:49:00): [krb5_child[80105]] [set_lifetime_options] (0x0100): [RID#305] No specific lifetime requested. * (2026-02-25 8:49:00): [krb5_child[80105]] [set_canonicalize_option] (0x0100): [RID#305] Canonicalization is set to [true] * (2026-02-25 8:49:00): [krb5_child[80105]] [main] (0x0400): [RID#305] Will perform auth * (2026-02-25 8:49:00): [krb5_child[80105]] [main] (0x0400): [RID#305] Will perform online auth * (2026-02-25 8:49:00): [krb5_child[80105]] [tgt_req_child] (0x1000): [RID#305] Attempting to get a TGT * (2026-02-25 8:49:00): [krb5_child[80105]] [get_and_save_tgt] (0x0400): [RID#305] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:00): [krb5_child[80105]] [get_and_save_tgt] (0x0020): [RID#305] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:00): [krb5_child[80105]] [map_krb5_error] (0x0020): [RID#305] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:05): [krb5_child[80109]] [get_and_save_tgt] (0x0020): [RID#309] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:05): [krb5_child[80109]] [main] (0x0400): [RID#309] krb5_child started. * (2026-02-25 8:49:05): [krb5_child[80109]] [unpack_buffer] (0x1000): [RID#309] total buffer size: [92] * (2026-02-25 8:49:05): [krb5_child[80109]] [unpack_buffer] (0x0100): [RID#309] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:05): [krb5_child[80109]] [unpack_buffer] (0x2000): [RID#309] No old ccache * (2026-02-25 8:49:05): [krb5_child[80109]] [unpack_buffer] (0x0100): [RID#309] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:05): [krb5_child[80109]] [k5c_precreate_ccache] (0x4000): [RID#309] Recreating ccache * (2026-02-25 8:49:05): [krb5_child[80109]] [k5c_setup_fast] (0x0100): [RID#309] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:05): [krb5_child[80109]] [find_principal_in_keytab] (0x4000): [RID#309] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:05): [krb5_child[80109]] [match_principal] (0x1000): [RID#309] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:05): [krb5_child[80109]] [check_fast_ccache] (0x0200): [RID#309] FAST TGT is still valid. * (2026-02-25 8:49:05): [krb5_child[80109]] [become_user] (0x0200): [RID#309] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:05): [krb5_child[80109]] [main] (0x2000): [RID#309] Running as [1388400000][1388400000]. * (2026-02-25 8:49:05): [krb5_child[80109]] [set_lifetime_options] (0x0100): [RID#309] No specific renewable lifetime requested. * (2026-02-25 8:49:05): [krb5_child[80109]] [set_lifetime_options] (0x0100): [RID#309] No specific lifetime requested. * (2026-02-25 8:49:05): [krb5_child[80109]] [set_canonicalize_option] (0x0100): [RID#309] Canonicalization is set to [true] * (2026-02-25 8:49:05): [krb5_child[80109]] [main] (0x0400): [RID#309] Will perform auth * (2026-02-25 8:49:05): [krb5_child[80109]] [main] (0x0400): [RID#309] Will perform online auth * (2026-02-25 8:49:05): [krb5_child[80109]] [tgt_req_child] (0x1000): [RID#309] Attempting to get a TGT * (2026-02-25 8:49:05): [krb5_child[80109]] [get_and_save_tgt] (0x0400): [RID#309] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:05): [krb5_child[80109]] [get_and_save_tgt] (0x0020): [RID#309] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:05): [krb5_child[80109]] [map_krb5_error] (0x0020): [RID#309] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:09): [krb5_child[80173]] [get_and_save_tgt] (0x0020): [RID#311] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:09): [krb5_child[80173]] [main] (0x0400): [RID#311] krb5_child started. * (2026-02-25 8:49:09): [krb5_child[80173]] [unpack_buffer] (0x1000): [RID#311] total buffer size: [92] * (2026-02-25 8:49:09): [krb5_child[80173]] [unpack_buffer] (0x0100): [RID#311] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:09): [krb5_child[80173]] [unpack_buffer] (0x2000): [RID#311] No old ccache * (2026-02-25 8:49:09): [krb5_child[80173]] [unpack_buffer] (0x0100): [RID#311] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:09): [krb5_child[80173]] [k5c_precreate_ccache] (0x4000): [RID#311] Recreating ccache * (2026-02-25 8:49:09): [krb5_child[80173]] [k5c_setup_fast] (0x0100): [RID#311] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:09): [krb5_child[80173]] [find_principal_in_keytab] (0x4000): [RID#311] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:09): [krb5_child[80173]] [match_principal] (0x1000): [RID#311] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:09): [krb5_child[80173]] [check_fast_ccache] (0x0200): [RID#311] FAST TGT is still valid. * (2026-02-25 8:49:09): [krb5_child[80173]] [become_user] (0x0200): [RID#311] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:09): [krb5_child[80173]] [main] (0x2000): [RID#311] Running as [1388400000][1388400000]. * (2026-02-25 8:49:09): [krb5_child[80173]] [set_lifetime_options] (0x0100): [RID#311] No specific renewable lifetime requested. * (2026-02-25 8:49:09): [krb5_child[80173]] [set_lifetime_options] (0x0100): [RID#311] No specific lifetime requested. * (2026-02-25 8:49:09): [krb5_child[80173]] [set_canonicalize_option] (0x0100): [RID#311] Canonicalization is set to [true] * (2026-02-25 8:49:09): [krb5_child[80173]] [main] (0x0400): [RID#311] Will perform auth * (2026-02-25 8:49:09): [krb5_child[80173]] [main] (0x0400): [RID#311] Will perform online auth * (2026-02-25 8:49:09): [krb5_child[80173]] [tgt_req_child] (0x1000): [RID#311] Attempting to get a TGT * (2026-02-25 8:49:09): [krb5_child[80173]] [get_and_save_tgt] (0x0400): [RID#311] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:09): [krb5_child[80173]] [get_and_save_tgt] (0x0020): [RID#311] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:09): [krb5_child[80173]] [map_krb5_error] (0x0020): [RID#311] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:14): [krb5_child[80178]] [get_and_save_tgt] (0x0020): [RID#314] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:14): [krb5_child[80178]] [main] (0x0400): [RID#314] krb5_child started. * (2026-02-25 8:49:14): [krb5_child[80178]] [unpack_buffer] (0x1000): [RID#314] total buffer size: [92] * (2026-02-25 8:49:14): [krb5_child[80178]] [unpack_buffer] (0x0100): [RID#314] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:14): [krb5_child[80178]] [unpack_buffer] (0x2000): [RID#314] No old ccache * (2026-02-25 8:49:14): [krb5_child[80178]] [unpack_buffer] (0x0100): [RID#314] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:14): [krb5_child[80178]] [k5c_precreate_ccache] (0x4000): [RID#314] Recreating ccache * (2026-02-25 8:49:14): [krb5_child[80178]] [k5c_setup_fast] (0x0100): [RID#314] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:14): [krb5_child[80178]] [find_principal_in_keytab] (0x4000): [RID#314] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:14): [krb5_child[80178]] [match_principal] (0x1000): [RID#314] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:14): [krb5_child[80178]] [check_fast_ccache] (0x0200): [RID#314] FAST TGT is still valid. * (2026-02-25 8:49:14): [krb5_child[80178]] [become_user] (0x0200): [RID#314] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:14): [krb5_child[80178]] [main] (0x2000): [RID#314] Running as [1388400000][1388400000]. * (2026-02-25 8:49:14): [krb5_child[80178]] [set_lifetime_options] (0x0100): [RID#314] No specific renewable lifetime requested. * (2026-02-25 8:49:14): [krb5_child[80178]] [set_lifetime_options] (0x0100): [RID#314] No specific lifetime requested. * (2026-02-25 8:49:14): [krb5_child[80178]] [set_canonicalize_option] (0x0100): [RID#314] Canonicalization is set to [true] * (2026-02-25 8:49:14): [krb5_child[80178]] [main] (0x0400): [RID#314] Will perform auth * (2026-02-25 8:49:14): [krb5_child[80178]] [main] (0x0400): [RID#314] Will perform online auth * (2026-02-25 8:49:14): [krb5_child[80178]] [tgt_req_child] (0x1000): [RID#314] Attempting to get a TGT * (2026-02-25 8:49:14): [krb5_child[80178]] [get_and_save_tgt] (0x0400): [RID#314] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:14): [krb5_child[80178]] [get_and_save_tgt] (0x0020): [RID#314] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:14): [krb5_child[80178]] [map_krb5_error] (0x0020): [RID#314] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:19): [krb5_child[80208]] [get_and_save_tgt] (0x0020): [RID#316] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:19): [krb5_child[80208]] [main] (0x0400): [RID#316] krb5_child started. * (2026-02-25 8:49:19): [krb5_child[80208]] [unpack_buffer] (0x1000): [RID#316] total buffer size: [92] * (2026-02-25 8:49:19): [krb5_child[80208]] [unpack_buffer] (0x0100): [RID#316] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:19): [krb5_child[80208]] [unpack_buffer] (0x2000): [RID#316] No old ccache * (2026-02-25 8:49:19): [krb5_child[80208]] [unpack_buffer] (0x0100): [RID#316] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:19): [krb5_child[80208]] [k5c_precreate_ccache] (0x4000): [RID#316] Recreating ccache * (2026-02-25 8:49:19): [krb5_child[80208]] [k5c_setup_fast] (0x0100): [RID#316] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:19): [krb5_child[80208]] [find_principal_in_keytab] (0x4000): [RID#316] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:19): [krb5_child[80208]] [match_principal] (0x1000): [RID#316] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:19): [krb5_child[80208]] [check_fast_ccache] (0x0200): [RID#316] FAST TGT is still valid. * (2026-02-25 8:49:19): [krb5_child[80208]] [become_user] (0x0200): [RID#316] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:19): [krb5_child[80208]] [main] (0x2000): [RID#316] Running as [1388400000][1388400000]. * (2026-02-25 8:49:19): [krb5_child[80208]] [set_lifetime_options] (0x0100): [RID#316] No specific renewable lifetime requested. * (2026-02-25 8:49:19): [krb5_child[80208]] [set_lifetime_options] (0x0100): [RID#316] No specific lifetime requested. * (2026-02-25 8:49:19): [krb5_child[80208]] [set_canonicalize_option] (0x0100): [RID#316] Canonicalization is set to [true] * (2026-02-25 8:49:19): [krb5_child[80208]] [main] (0x0400): [RID#316] Will perform auth * (2026-02-25 8:49:19): [krb5_child[80208]] [main] (0x0400): [RID#316] Will perform online auth * (2026-02-25 8:49:19): [krb5_child[80208]] [tgt_req_child] (0x1000): [RID#316] Attempting to get a TGT * (2026-02-25 8:49:19): [krb5_child[80208]] [get_and_save_tgt] (0x0400): [RID#316] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:19): [krb5_child[80208]] [get_and_save_tgt] (0x0020): [RID#316] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:19): [krb5_child[80208]] [map_krb5_error] (0x0020): [RID#316] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:22): [krb5_child[80212]] [get_and_save_tgt] (0x0020): [RID#320] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:22): [krb5_child[80212]] [main] (0x0400): [RID#320] krb5_child started. * (2026-02-25 8:49:22): [krb5_child[80212]] [unpack_buffer] (0x1000): [RID#320] total buffer size: [92] * (2026-02-25 8:49:22): [krb5_child[80212]] [unpack_buffer] (0x0100): [RID#320] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:22): [krb5_child[80212]] [unpack_buffer] (0x2000): [RID#320] No old ccache * (2026-02-25 8:49:22): [krb5_child[80212]] [unpack_buffer] (0x0100): [RID#320] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:22): [krb5_child[80212]] [k5c_precreate_ccache] (0x4000): [RID#320] Recreating ccache * (2026-02-25 8:49:22): [krb5_child[80212]] [k5c_setup_fast] (0x0100): [RID#320] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:22): [krb5_child[80212]] [find_principal_in_keytab] (0x4000): [RID#320] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:22): [krb5_child[80212]] [match_principal] (0x1000): [RID#320] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:22): [krb5_child[80212]] [check_fast_ccache] (0x0200): [RID#320] FAST TGT is still valid. * (2026-02-25 8:49:22): [krb5_child[80212]] [become_user] (0x0200): [RID#320] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:22): [krb5_child[80212]] [main] (0x2000): [RID#320] Running as [1388400000][1388400000]. * (2026-02-25 8:49:22): [krb5_child[80212]] [set_lifetime_options] (0x0100): [RID#320] No specific renewable lifetime requested. * (2026-02-25 8:49:22): [krb5_child[80212]] [set_lifetime_options] (0x0100): [RID#320] No specific lifetime requested. * (2026-02-25 8:49:22): [krb5_child[80212]] [set_canonicalize_option] (0x0100): [RID#320] Canonicalization is set to [true] * (2026-02-25 8:49:22): [krb5_child[80212]] [main] (0x0400): [RID#320] Will perform auth * (2026-02-25 8:49:22): [krb5_child[80212]] [main] (0x0400): [RID#320] Will perform online auth * (2026-02-25 8:49:22): [krb5_child[80212]] [tgt_req_child] (0x1000): [RID#320] Attempting to get a TGT * (2026-02-25 8:49:22): [krb5_child[80212]] [get_and_save_tgt] (0x0400): [RID#320] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:22): [krb5_child[80212]] [get_and_save_tgt] (0x0020): [RID#320] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:22): [krb5_child[80212]] [map_krb5_error] (0x0020): [RID#320] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:27): [krb5_child[80247]] [get_and_save_tgt] (0x0020): [RID#322] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:27): [krb5_child[80247]] [main] (0x0400): [RID#322] krb5_child started. * (2026-02-25 8:49:27): [krb5_child[80247]] [unpack_buffer] (0x1000): [RID#322] total buffer size: [92] * (2026-02-25 8:49:27): [krb5_child[80247]] [unpack_buffer] (0x0100): [RID#322] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:27): [krb5_child[80247]] [unpack_buffer] (0x2000): [RID#322] No old ccache * (2026-02-25 8:49:27): [krb5_child[80247]] [unpack_buffer] (0x0100): [RID#322] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:27): [krb5_child[80247]] [k5c_precreate_ccache] (0x4000): [RID#322] Recreating ccache * (2026-02-25 8:49:27): [krb5_child[80247]] [k5c_setup_fast] (0x0100): [RID#322] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:27): [krb5_child[80247]] [find_principal_in_keytab] (0x4000): [RID#322] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:27): [krb5_child[80247]] [match_principal] (0x1000): [RID#322] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:27): [krb5_child[80247]] [check_fast_ccache] (0x0200): [RID#322] FAST TGT is still valid. * (2026-02-25 8:49:27): [krb5_child[80247]] [become_user] (0x0200): [RID#322] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:27): [krb5_child[80247]] [main] (0x2000): [RID#322] Running as [1388400000][1388400000]. * (2026-02-25 8:49:27): [krb5_child[80247]] [set_lifetime_options] (0x0100): [RID#322] No specific renewable lifetime requested. * (2026-02-25 8:49:27): [krb5_child[80247]] [set_lifetime_options] (0x0100): [RID#322] No specific lifetime requested. * (2026-02-25 8:49:27): [krb5_child[80247]] [set_canonicalize_option] (0x0100): [RID#322] Canonicalization is set to [true] * (2026-02-25 8:49:27): [krb5_child[80247]] [main] (0x0400): [RID#322] Will perform auth * (2026-02-25 8:49:27): [krb5_child[80247]] [main] (0x0400): [RID#322] Will perform online auth * (2026-02-25 8:49:27): [krb5_child[80247]] [tgt_req_child] (0x1000): [RID#322] Attempting to get a TGT * (2026-02-25 8:49:27): [krb5_child[80247]] [get_and_save_tgt] (0x0400): [RID#322] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:27): [krb5_child[80247]] [get_and_save_tgt] (0x0020): [RID#322] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:27): [krb5_child[80247]] [map_krb5_error] (0x0020): [RID#322] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:31): [krb5_child[80366]] [get_and_save_tgt] (0x0020): [RID#326] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:31): [krb5_child[80366]] [main] (0x0400): [RID#326] krb5_child started. * (2026-02-25 8:49:31): [krb5_child[80366]] [unpack_buffer] (0x1000): [RID#326] total buffer size: [92] * (2026-02-25 8:49:31): [krb5_child[80366]] [unpack_buffer] (0x0100): [RID#326] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:31): [krb5_child[80366]] [unpack_buffer] (0x2000): [RID#326] No old ccache * (2026-02-25 8:49:31): [krb5_child[80366]] [unpack_buffer] (0x0100): [RID#326] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:31): [krb5_child[80366]] [k5c_precreate_ccache] (0x4000): [RID#326] Recreating ccache * (2026-02-25 8:49:31): [krb5_child[80366]] [k5c_setup_fast] (0x0100): [RID#326] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:31): [krb5_child[80366]] [find_principal_in_keytab] (0x4000): [RID#326] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:31): [krb5_child[80366]] [match_principal] (0x1000): [RID#326] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:31): [krb5_child[80366]] [check_fast_ccache] (0x0200): [RID#326] FAST TGT is still valid. * (2026-02-25 8:49:31): [krb5_child[80366]] [become_user] (0x0200): [RID#326] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:31): [krb5_child[80366]] [main] (0x2000): [RID#326] Running as [1388400000][1388400000]. * (2026-02-25 8:49:31): [krb5_child[80366]] [set_lifetime_options] (0x0100): [RID#326] No specific renewable lifetime requested. * (2026-02-25 8:49:31): [krb5_child[80366]] [set_lifetime_options] (0x0100): [RID#326] No specific lifetime requested. * (2026-02-25 8:49:31): [krb5_child[80366]] [set_canonicalize_option] (0x0100): [RID#326] Canonicalization is set to [true] * (2026-02-25 8:49:31): [krb5_child[80366]] [main] (0x0400): [RID#326] Will perform auth * (2026-02-25 8:49:31): [krb5_child[80366]] [main] (0x0400): [RID#326] Will perform online auth * (2026-02-25 8:49:31): [krb5_child[80366]] [tgt_req_child] (0x1000): [RID#326] Attempting to get a TGT * (2026-02-25 8:49:31): [krb5_child[80366]] [get_and_save_tgt] (0x0400): [RID#326] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:31): [krb5_child[80366]] [get_and_save_tgt] (0x0020): [RID#326] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:31): [krb5_child[80366]] [map_krb5_error] (0x0020): [RID#326] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:35): [krb5_child[80370]] [get_and_save_tgt] (0x0020): [RID#328] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:35): [krb5_child[80370]] [main] (0x0400): [RID#328] krb5_child started. * (2026-02-25 8:49:35): [krb5_child[80370]] [unpack_buffer] (0x1000): [RID#328] total buffer size: [92] * (2026-02-25 8:49:35): [krb5_child[80370]] [unpack_buffer] (0x0100): [RID#328] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:35): [krb5_child[80370]] [unpack_buffer] (0x2000): [RID#328] No old ccache * (2026-02-25 8:49:35): [krb5_child[80370]] [unpack_buffer] (0x0100): [RID#328] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:35): [krb5_child[80370]] [k5c_precreate_ccache] (0x4000): [RID#328] Recreating ccache * (2026-02-25 8:49:35): [krb5_child[80370]] [k5c_setup_fast] (0x0100): [RID#328] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:35): [krb5_child[80370]] [find_principal_in_keytab] (0x4000): [RID#328] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:35): [krb5_child[80370]] [match_principal] (0x1000): [RID#328] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:35): [krb5_child[80370]] [check_fast_ccache] (0x0200): [RID#328] FAST TGT is still valid. * (2026-02-25 8:49:35): [krb5_child[80370]] [become_user] (0x0200): [RID#328] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:35): [krb5_child[80370]] [main] (0x2000): [RID#328] Running as [1388400000][1388400000]. * (2026-02-25 8:49:35): [krb5_child[80370]] [set_lifetime_options] (0x0100): [RID#328] No specific renewable lifetime requested. * (2026-02-25 8:49:35): [krb5_child[80370]] [set_lifetime_options] (0x0100): [RID#328] No specific lifetime requested. * (2026-02-25 8:49:35): [krb5_child[80370]] [set_canonicalize_option] (0x0100): [RID#328] Canonicalization is set to [true] * (2026-02-25 8:49:35): [krb5_child[80370]] [main] (0x0400): [RID#328] Will perform auth * (2026-02-25 8:49:35): [krb5_child[80370]] [main] (0x0400): [RID#328] Will perform online auth * (2026-02-25 8:49:35): [krb5_child[80370]] [tgt_req_child] (0x1000): [RID#328] Attempting to get a TGT * (2026-02-25 8:49:35): [krb5_child[80370]] [get_and_save_tgt] (0x0400): [RID#328] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:35): [krb5_child[80370]] [get_and_save_tgt] (0x0020): [RID#328] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:35): [krb5_child[80370]] [map_krb5_error] (0x0020): [RID#328] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:39): [krb5_child[80374]] [get_and_save_tgt] (0x0020): [RID#332] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:39): [krb5_child[80374]] [main] (0x0400): [RID#332] krb5_child started. * (2026-02-25 8:49:39): [krb5_child[80374]] [unpack_buffer] (0x1000): [RID#332] total buffer size: [92] * (2026-02-25 8:49:39): [krb5_child[80374]] [unpack_buffer] (0x0100): [RID#332] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:39): [krb5_child[80374]] [unpack_buffer] (0x2000): [RID#332] No old ccache * (2026-02-25 8:49:39): [krb5_child[80374]] [unpack_buffer] (0x0100): [RID#332] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:39): [krb5_child[80374]] [k5c_precreate_ccache] (0x4000): [RID#332] Recreating ccache * (2026-02-25 8:49:39): [krb5_child[80374]] [k5c_setup_fast] (0x0100): [RID#332] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:39): [krb5_child[80374]] [find_principal_in_keytab] (0x4000): [RID#332] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:39): [krb5_child[80374]] [match_principal] (0x1000): [RID#332] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:39): [krb5_child[80374]] [check_fast_ccache] (0x0200): [RID#332] FAST TGT is still valid. * (2026-02-25 8:49:39): [krb5_child[80374]] [become_user] (0x0200): [RID#332] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:39): [krb5_child[80374]] [main] (0x2000): [RID#332] Running as [1388400000][1388400000]. * (2026-02-25 8:49:39): [krb5_child[80374]] [set_lifetime_options] (0x0100): [RID#332] No specific renewable lifetime requested. * (2026-02-25 8:49:39): [krb5_child[80374]] [set_lifetime_options] (0x0100): [RID#332] No specific lifetime requested. * (2026-02-25 8:49:39): [krb5_child[80374]] [set_canonicalize_option] (0x0100): [RID#332] Canonicalization is set to [true] * (2026-02-25 8:49:39): [krb5_child[80374]] [main] (0x0400): [RID#332] Will perform auth * (2026-02-25 8:49:39): [krb5_child[80374]] [main] (0x0400): [RID#332] Will perform online auth * (2026-02-25 8:49:39): [krb5_child[80374]] [tgt_req_child] (0x1000): [RID#332] Attempting to get a TGT * (2026-02-25 8:49:39): [krb5_child[80374]] [get_and_save_tgt] (0x0400): [RID#332] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:39): [krb5_child[80374]] [get_and_save_tgt] (0x0020): [RID#332] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:39): [krb5_child[80374]] [map_krb5_error] (0x0020): [RID#332] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:45): [krb5_child[80438]] [get_and_save_tgt] (0x0020): [RID#335] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:45): [krb5_child[80438]] [main] (0x0400): [RID#335] krb5_child started. * (2026-02-25 8:49:45): [krb5_child[80438]] [unpack_buffer] (0x1000): [RID#335] total buffer size: [92] * (2026-02-25 8:49:45): [krb5_child[80438]] [unpack_buffer] (0x0100): [RID#335] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:45): [krb5_child[80438]] [unpack_buffer] (0x2000): [RID#335] No old ccache * (2026-02-25 8:49:45): [krb5_child[80438]] [unpack_buffer] (0x0100): [RID#335] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:45): [krb5_child[80438]] [k5c_precreate_ccache] (0x4000): [RID#335] Recreating ccache * (2026-02-25 8:49:45): [krb5_child[80438]] [k5c_setup_fast] (0x0100): [RID#335] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:45): [krb5_child[80438]] [find_principal_in_keytab] (0x4000): [RID#335] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:45): [krb5_child[80438]] [match_principal] (0x1000): [RID#335] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:45): [krb5_child[80438]] [check_fast_ccache] (0x0200): [RID#335] FAST TGT is still valid. * (2026-02-25 8:49:45): [krb5_child[80438]] [become_user] (0x0200): [RID#335] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:45): [krb5_child[80438]] [main] (0x2000): [RID#335] Running as [1388400000][1388400000]. * (2026-02-25 8:49:45): [krb5_child[80438]] [set_lifetime_options] (0x0100): [RID#335] No specific renewable lifetime requested. * (2026-02-25 8:49:45): [krb5_child[80438]] [set_lifetime_options] (0x0100): [RID#335] No specific lifetime requested. * (2026-02-25 8:49:45): [krb5_child[80438]] [set_canonicalize_option] (0x0100): [RID#335] Canonicalization is set to [true] * (2026-02-25 8:49:45): [krb5_child[80438]] [main] (0x0400): [RID#335] Will perform auth * (2026-02-25 8:49:45): [krb5_child[80438]] [main] (0x0400): [RID#335] Will perform online auth * (2026-02-25 8:49:45): [krb5_child[80438]] [tgt_req_child] (0x1000): [RID#335] Attempting to get a TGT * (2026-02-25 8:49:45): [krb5_child[80438]] [get_and_save_tgt] (0x0400): [RID#335] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:45): [krb5_child[80438]] [get_and_save_tgt] (0x0020): [RID#335] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:45): [krb5_child[80438]] [map_krb5_error] (0x0020): [RID#335] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:50): [krb5_child[80468]] [get_and_save_tgt] (0x0020): [RID#337] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:50): [krb5_child[80468]] [main] (0x0400): [RID#337] krb5_child started. * (2026-02-25 8:49:50): [krb5_child[80468]] [unpack_buffer] (0x1000): [RID#337] total buffer size: [92] * (2026-02-25 8:49:50): [krb5_child[80468]] [unpack_buffer] (0x0100): [RID#337] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:50): [krb5_child[80468]] [unpack_buffer] (0x2000): [RID#337] No old ccache * (2026-02-25 8:49:50): [krb5_child[80468]] [unpack_buffer] (0x0100): [RID#337] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:50): [krb5_child[80468]] [k5c_precreate_ccache] (0x4000): [RID#337] Recreating ccache * (2026-02-25 8:49:50): [krb5_child[80468]] [k5c_setup_fast] (0x0100): [RID#337] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:50): [krb5_child[80468]] [find_principal_in_keytab] (0x4000): [RID#337] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:50): [krb5_child[80468]] [match_principal] (0x1000): [RID#337] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:50): [krb5_child[80468]] [check_fast_ccache] (0x0200): [RID#337] FAST TGT is still valid. * (2026-02-25 8:49:50): [krb5_child[80468]] [become_user] (0x0200): [RID#337] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:50): [krb5_child[80468]] [main] (0x2000): [RID#337] Running as [1388400000][1388400000]. * (2026-02-25 8:49:50): [krb5_child[80468]] [set_lifetime_options] (0x0100): [RID#337] No specific renewable lifetime requested. * (2026-02-25 8:49:50): [krb5_child[80468]] [set_lifetime_options] (0x0100): [RID#337] No specific lifetime requested. * (2026-02-25 8:49:50): [krb5_child[80468]] [set_canonicalize_option] (0x0100): [RID#337] Canonicalization is set to [true] * (2026-02-25 8:49:50): [krb5_child[80468]] [main] (0x0400): [RID#337] Will perform auth * (2026-02-25 8:49:50): [krb5_child[80468]] [main] (0x0400): [RID#337] Will perform online auth * (2026-02-25 8:49:50): [krb5_child[80468]] [tgt_req_child] (0x1000): [RID#337] Attempting to get a TGT * (2026-02-25 8:49:50): [krb5_child[80468]] [get_and_save_tgt] (0x0400): [RID#337] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:50): [krb5_child[80468]] [get_and_save_tgt] (0x0020): [RID#337] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:50): [krb5_child[80468]] [map_krb5_error] (0x0020): [RID#337] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:55): [krb5_child[80472]] [get_and_save_tgt] (0x0020): [RID#340] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:55): [krb5_child[80472]] [main] (0x0400): [RID#340] krb5_child started. * (2026-02-25 8:49:55): [krb5_child[80472]] [unpack_buffer] (0x1000): [RID#340] total buffer size: [92] * (2026-02-25 8:49:55): [krb5_child[80472]] [unpack_buffer] (0x0100): [RID#340] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:55): [krb5_child[80472]] [unpack_buffer] (0x2000): [RID#340] No old ccache * (2026-02-25 8:49:55): [krb5_child[80472]] [unpack_buffer] (0x0100): [RID#340] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:55): [krb5_child[80472]] [k5c_precreate_ccache] (0x4000): [RID#340] Recreating ccache * (2026-02-25 8:49:55): [krb5_child[80472]] [k5c_setup_fast] (0x0100): [RID#340] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:55): [krb5_child[80472]] [find_principal_in_keytab] (0x4000): [RID#340] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:55): [krb5_child[80472]] [match_principal] (0x1000): [RID#340] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:55): [krb5_child[80472]] [check_fast_ccache] (0x0200): [RID#340] FAST TGT is still valid. * (2026-02-25 8:49:55): [krb5_child[80472]] [become_user] (0x0200): [RID#340] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:55): [krb5_child[80472]] [main] (0x2000): [RID#340] Running as [1388400000][1388400000]. * (2026-02-25 8:49:55): [krb5_child[80472]] [set_lifetime_options] (0x0100): [RID#340] No specific renewable lifetime requested. * (2026-02-25 8:49:55): [krb5_child[80472]] [set_lifetime_options] (0x0100): [RID#340] No specific lifetime requested. * (2026-02-25 8:49:55): [krb5_child[80472]] [set_canonicalize_option] (0x0100): [RID#340] Canonicalization is set to [true] * (2026-02-25 8:49:55): [krb5_child[80472]] [main] (0x0400): [RID#340] Will perform auth * (2026-02-25 8:49:55): [krb5_child[80472]] [main] (0x0400): [RID#340] Will perform online auth * (2026-02-25 8:49:55): [krb5_child[80472]] [tgt_req_child] (0x1000): [RID#340] Attempting to get a TGT * (2026-02-25 8:49:55): [krb5_child[80472]] [get_and_save_tgt] (0x0400): [RID#340] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:55): [krb5_child[80472]] [get_and_save_tgt] (0x0020): [RID#340] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:55): [krb5_child[80472]] [map_krb5_error] (0x0020): [RID#340] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:49:59): [krb5_child[80506]] [get_and_save_tgt] (0x0020): [RID#343] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:49:59): [krb5_child[80506]] [main] (0x0400): [RID#343] krb5_child started. * (2026-02-25 8:49:59): [krb5_child[80506]] [unpack_buffer] (0x1000): [RID#343] total buffer size: [92] * (2026-02-25 8:49:59): [krb5_child[80506]] [unpack_buffer] (0x0100): [RID#343] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:49:59): [krb5_child[80506]] [unpack_buffer] (0x2000): [RID#343] No old ccache * (2026-02-25 8:49:59): [krb5_child[80506]] [unpack_buffer] (0x0100): [RID#343] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:49:59): [krb5_child[80506]] [k5c_precreate_ccache] (0x4000): [RID#343] Recreating ccache * (2026-02-25 8:49:59): [krb5_child[80506]] [k5c_setup_fast] (0x0100): [RID#343] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:49:59): [krb5_child[80506]] [find_principal_in_keytab] (0x4000): [RID#343] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:49:59): [krb5_child[80506]] [match_principal] (0x1000): [RID#343] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:49:59): [krb5_child[80506]] [check_fast_ccache] (0x0200): [RID#343] FAST TGT is still valid. * (2026-02-25 8:49:59): [krb5_child[80506]] [become_user] (0x0200): [RID#343] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:49:59): [krb5_child[80506]] [main] (0x2000): [RID#343] Running as [1388400000][1388400000]. * (2026-02-25 8:49:59): [krb5_child[80506]] [set_lifetime_options] (0x0100): [RID#343] No specific renewable lifetime requested. * (2026-02-25 8:49:59): [krb5_child[80506]] [set_lifetime_options] (0x0100): [RID#343] No specific lifetime requested. * (2026-02-25 8:49:59): [krb5_child[80506]] [set_canonicalize_option] (0x0100): [RID#343] Canonicalization is set to [true] * (2026-02-25 8:49:59): [krb5_child[80506]] [main] (0x0400): [RID#343] Will perform auth * (2026-02-25 8:49:59): [krb5_child[80506]] [main] (0x0400): [RID#343] Will perform online auth * (2026-02-25 8:49:59): [krb5_child[80506]] [tgt_req_child] (0x1000): [RID#343] Attempting to get a TGT * (2026-02-25 8:49:59): [krb5_child[80506]] [get_and_save_tgt] (0x0400): [RID#343] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:49:59): [krb5_child[80506]] [get_and_save_tgt] (0x0020): [RID#343] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:49:59): [krb5_child[80506]] [map_krb5_error] (0x0020): [RID#343] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:50:05): [krb5_child[80626]] [get_and_save_tgt] (0x0020): [RID#347] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:50:05): [krb5_child[80626]] [main] (0x0400): [RID#347] krb5_child started. * (2026-02-25 8:50:05): [krb5_child[80626]] [unpack_buffer] (0x1000): [RID#347] total buffer size: [94] * (2026-02-25 8:50:05): [krb5_child[80626]] [unpack_buffer] (0x0100): [RID#347] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:50:05): [krb5_child[80626]] [unpack_buffer] (0x2000): [RID#347] No old ccache * (2026-02-25 8:50:05): [krb5_child[80626]] [unpack_buffer] (0x0100): [RID#347] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:50:05): [krb5_child[80626]] [k5c_precreate_ccache] (0x4000): [RID#347] Recreating ccache * (2026-02-25 8:50:05): [krb5_child[80626]] [k5c_setup_fast] (0x0100): [RID#347] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:50:05): [krb5_child[80626]] [find_principal_in_keytab] (0x4000): [RID#347] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:50:05): [krb5_child[80626]] [match_principal] (0x1000): [RID#347] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:50:05): [krb5_child[80626]] [check_fast_ccache] (0x0200): [RID#347] FAST TGT is still valid. * (2026-02-25 8:50:05): [krb5_child[80626]] [become_user] (0x0200): [RID#347] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:50:05): [krb5_child[80626]] [main] (0x2000): [RID#347] Running as [1388400000][1388400000]. * (2026-02-25 8:50:05): [krb5_child[80626]] [set_lifetime_options] (0x0100): [RID#347] No specific renewable lifetime requested. * (2026-02-25 8:50:05): [krb5_child[80626]] [set_lifetime_options] (0x0100): [RID#347] No specific lifetime requested. * (2026-02-25 8:50:05): [krb5_child[80626]] [set_canonicalize_option] (0x0100): [RID#347] Canonicalization is set to [true] * (2026-02-25 8:50:05): [krb5_child[80626]] [main] (0x0400): [RID#347] Will perform auth * (2026-02-25 8:50:05): [krb5_child[80626]] [main] (0x0400): [RID#347] Will perform online auth * (2026-02-25 8:50:05): [krb5_child[80626]] [tgt_req_child] (0x1000): [RID#347] Attempting to get a TGT * (2026-02-25 8:50:05): [krb5_child[80626]] [get_and_save_tgt] (0x0400): [RID#347] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:50:05): [krb5_child[80626]] [get_and_save_tgt] (0x0020): [RID#347] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:50:05): [krb5_child[80626]] [map_krb5_error] (0x0020): [RID#347] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:50:10): [krb5_child[80630]] [get_and_save_tgt] (0x0020): [RID#349] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:50:10): [krb5_child[80630]] [main] (0x0400): [RID#349] krb5_child started. * (2026-02-25 8:50:10): [krb5_child[80630]] [unpack_buffer] (0x1000): [RID#349] total buffer size: [96] * (2026-02-25 8:50:10): [krb5_child[80630]] [unpack_buffer] (0x0100): [RID#349] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:50:10): [krb5_child[80630]] [unpack_buffer] (0x2000): [RID#349] No old ccache * (2026-02-25 8:50:10): [krb5_child[80630]] [unpack_buffer] (0x0100): [RID#349] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:50:10): [krb5_child[80630]] [k5c_precreate_ccache] (0x4000): [RID#349] Recreating ccache * (2026-02-25 8:50:10): [krb5_child[80630]] [k5c_setup_fast] (0x0100): [RID#349] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:50:10): [krb5_child[80630]] [find_principal_in_keytab] (0x4000): [RID#349] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:50:10): [krb5_child[80630]] [match_principal] (0x1000): [RID#349] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:50:10): [krb5_child[80630]] [check_fast_ccache] (0x0200): [RID#349] FAST TGT is still valid. * (2026-02-25 8:50:10): [krb5_child[80630]] [become_user] (0x0200): [RID#349] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:50:10): [krb5_child[80630]] [main] (0x2000): [RID#349] Running as [1388400000][1388400000]. * (2026-02-25 8:50:10): [krb5_child[80630]] [set_lifetime_options] (0x0100): [RID#349] No specific renewable lifetime requested. * (2026-02-25 8:50:10): [krb5_child[80630]] [set_lifetime_options] (0x0100): [RID#349] No specific lifetime requested. * (2026-02-25 8:50:10): [krb5_child[80630]] [set_canonicalize_option] (0x0100): [RID#349] Canonicalization is set to [true] * (2026-02-25 8:50:10): [krb5_child[80630]] [main] (0x0400): [RID#349] Will perform auth * (2026-02-25 8:50:10): [krb5_child[80630]] [main] (0x0400): [RID#349] Will perform online auth * (2026-02-25 8:50:10): [krb5_child[80630]] [tgt_req_child] (0x1000): [RID#349] Attempting to get a TGT * (2026-02-25 8:50:10): [krb5_child[80630]] [get_and_save_tgt] (0x0400): [RID#349] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:50:10): [krb5_child[80630]] [get_and_save_tgt] (0x0020): [RID#349] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:50:10): [krb5_child[80630]] [map_krb5_error] (0x0020): [RID#349] 2138: [-1765328366][Client's credentials have been revoked] (2026-02-25 8:50:15): [krb5_child[80695]] [get_and_save_tgt] (0x0020): [RID#353] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-02-25 8:50:15): [krb5_child[80695]] [main] (0x0400): [RID#353] krb5_child started. * (2026-02-25 8:50:15): [krb5_child[80695]] [unpack_buffer] (0x1000): [RID#353] total buffer size: [118] * (2026-02-25 8:50:15): [krb5_child[80695]] [unpack_buffer] (0x0100): [RID#353] cmd [241 (auth)] uid [1388400000] gid [1388400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-02-25 8:50:15): [krb5_child[80695]] [unpack_buffer] (0x2000): [RID#353] No old ccache * (2026-02-25 8:50:15): [krb5_child[80695]] [unpack_buffer] (0x0100): [RID#353] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-02-25 8:50:15): [krb5_child[80695]] [k5c_precreate_ccache] (0x4000): [RID#353] Recreating ccache * (2026-02-25 8:50:15): [krb5_child[80695]] [k5c_setup_fast] (0x0100): [RID#353] Fast principal is set to [host/np0005629057.ooo.test@OOO.TEST] * (2026-02-25 8:50:15): [krb5_child[80695]] [find_principal_in_keytab] (0x4000): [RID#353] Trying to find principal host/np0005629057.ooo.test@OOO.TEST in keytab. * (2026-02-25 8:50:15): [krb5_child[80695]] [match_principal] (0x1000): [RID#353] Principal matched to the sample (host/np0005629057.ooo.test@OOO.TEST). * (2026-02-25 8:50:15): [krb5_child[80695]] [check_fast_ccache] (0x0200): [RID#353] FAST TGT is still valid. * (2026-02-25 8:50:15): [krb5_child[80695]] [become_user] (0x0200): [RID#353] Trying to become user [1388400000][1388400000]. * (2026-02-25 8:50:15): [krb5_child[80695]] [main] (0x2000): [RID#353] Running as [1388400000][1388400000]. * (2026-02-25 8:50:15): [krb5_child[80695]] [set_lifetime_options] (0x0100): [RID#353] No specific renewable lifetime requested. * (2026-02-25 8:50:15): [krb5_child[80695]] [set_lifetime_options] (0x0100): [RID#353] No specific lifetime requested. * (2026-02-25 8:50:15): [krb5_child[80695]] [set_canonicalize_option] (0x0100): [RID#353] Canonicalization is set to [true] * (2026-02-25 8:50:15): [krb5_child[80695]] [main] (0x0400): [RID#353] Will perform auth * (2026-02-25 8:50:15): [krb5_child[80695]] [main] (0x0400): [RID#353] Will perform online auth * (2026-02-25 8:50:15): [krb5_child[80695]] [tgt_req_child] (0x1000): [RID#353] Attempting to get a TGT * (2026-02-25 8:50:15): [krb5_child[80695]] [get_and_save_tgt] (0x0400): [RID#353] Attempting kinit for realm [OOO.TEST] * (2026-02-25 8:50:15): [krb5_child[80695]] [get_and_save_tgt] (0x0020): [RID#353] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-02-25 8:50:15): [krb5_child[80695]] [map_krb5_error] (0x0020): [RID#353] 2138: [-1765328366][Client's credentials have been revoked]