(2025-10-11 8:27:01): [krb5_child[56397]] [get_and_save_tgt] (0x0020): [RID#123] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-11 8:27:01): [krb5_child[56397]] [main] (0x0400): [RID#123] krb5_child started. * (2025-10-11 8:27:01): [krb5_child[56397]] [unpack_buffer] (0x1000): [RID#123] total buffer size: [96] * (2025-10-11 8:27:01): [krb5_child[56397]] [unpack_buffer] (0x0100): [RID#123] cmd [241 (auth)] uid [1697800000] gid [1697800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-11 8:27:01): [krb5_child[56397]] [unpack_buffer] (0x2000): [RID#123] No old ccache * (2025-10-11 8:27:01): [krb5_child[56397]] [unpack_buffer] (0x0100): [RID#123] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-11 8:27:01): [krb5_child[56397]] [k5c_precreate_ccache] (0x4000): [RID#123] Recreating ccache * (2025-10-11 8:27:01): [krb5_child[56397]] [k5c_setup_fast] (0x0100): [RID#123] Fast principal is set to [host/np0005481012.ooo.test@OOO.TEST] * (2025-10-11 8:27:01): [krb5_child[56397]] [find_principal_in_keytab] (0x4000): [RID#123] Trying to find principal host/np0005481012.ooo.test@OOO.TEST in keytab. * (2025-10-11 8:27:01): [krb5_child[56397]] [match_principal] (0x1000): [RID#123] Principal matched to the sample (host/np0005481012.ooo.test@OOO.TEST). * (2025-10-11 8:27:01): [krb5_child[56397]] [check_fast_ccache] (0x0200): [RID#123] FAST TGT is still valid. * (2025-10-11 8:27:01): [krb5_child[56397]] [become_user] (0x0200): [RID#123] Trying to become user [1697800000][1697800000]. * (2025-10-11 8:27:01): [krb5_child[56397]] [main] (0x2000): [RID#123] Running as [1697800000][1697800000]. * (2025-10-11 8:27:01): [krb5_child[56397]] [set_lifetime_options] (0x0100): [RID#123] No specific renewable lifetime requested. * (2025-10-11 8:27:01): [krb5_child[56397]] [set_lifetime_options] (0x0100): [RID#123] No specific lifetime requested. * (2025-10-11 8:27:01): [krb5_child[56397]] [set_canonicalize_option] (0x0100): [RID#123] Canonicalization is set to [true] * (2025-10-11 8:27:01): [krb5_child[56397]] [main] (0x0400): [RID#123] Will perform auth * (2025-10-11 8:27:01): [krb5_child[56397]] [main] (0x0400): [RID#123] Will perform online auth * (2025-10-11 8:27:01): [krb5_child[56397]] [tgt_req_child] (0x1000): [RID#123] Attempting to get a TGT * (2025-10-11 8:27:01): [krb5_child[56397]] [get_and_save_tgt] (0x0400): [RID#123] Attempting kinit for realm [OOO.TEST] * (2025-10-11 8:27:01): [krb5_child[56397]] [sss_krb5_responder] (0x4000): [RID#123] Got question [password]. * (2025-10-11 8:27:01): [krb5_child[56397]] [get_and_save_tgt] (0x0020): [RID#123] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-11 8:27:01): [krb5_child[56397]] [map_krb5_error] (0x0020): [RID#123] 2138: [-1765328360][Preauthentication failed] (2025-10-11 8:27:34): [krb5_child[56532]] [get_and_save_tgt] (0x0020): [RID#134] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-11 8:27:34): [krb5_child[56532]] [main] (0x0400): [RID#134] krb5_child started. * (2025-10-11 8:27:34): [krb5_child[56532]] [unpack_buffer] (0x1000): [RID#134] total buffer size: [99] * (2025-10-11 8:27:34): [krb5_child[56532]] [unpack_buffer] (0x0100): [RID#134] cmd [241 (auth)] uid [1697800000] gid [1697800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-11 8:27:34): [krb5_child[56532]] [unpack_buffer] (0x2000): [RID#134] No old ccache * (2025-10-11 8:27:34): [krb5_child[56532]] [unpack_buffer] (0x0100): [RID#134] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-11 8:27:34): [krb5_child[56532]] [k5c_precreate_ccache] (0x4000): [RID#134] Recreating ccache * (2025-10-11 8:27:34): [krb5_child[56532]] [k5c_setup_fast] (0x0100): [RID#134] Fast principal is set to [host/np0005481012.ooo.test@OOO.TEST] * (2025-10-11 8:27:34): [krb5_child[56532]] [find_principal_in_keytab] (0x4000): [RID#134] Trying to find principal host/np0005481012.ooo.test@OOO.TEST in keytab. * (2025-10-11 8:27:34): [krb5_child[56532]] [match_principal] (0x1000): [RID#134] Principal matched to the sample (host/np0005481012.ooo.test@OOO.TEST). * (2025-10-11 8:27:34): [krb5_child[56532]] [check_fast_ccache] (0x0200): [RID#134] FAST TGT is still valid. * (2025-10-11 8:27:34): [krb5_child[56532]] [become_user] (0x0200): [RID#134] Trying to become user [1697800000][1697800000]. * (2025-10-11 8:27:34): [krb5_child[56532]] [main] (0x2000): [RID#134] Running as [1697800000][1697800000]. * (2025-10-11 8:27:34): [krb5_child[56532]] [set_lifetime_options] (0x0100): [RID#134] No specific renewable lifetime requested. * (2025-10-11 8:27:34): [krb5_child[56532]] [set_lifetime_options] (0x0100): [RID#134] No specific lifetime requested. * (2025-10-11 8:27:34): [krb5_child[56532]] [set_canonicalize_option] (0x0100): [RID#134] Canonicalization is set to [true] * (2025-10-11 8:27:34): [krb5_child[56532]] [main] (0x0400): [RID#134] Will perform auth * (2025-10-11 8:27:34): [krb5_child[56532]] [main] (0x0400): [RID#134] Will perform online auth * (2025-10-11 8:27:34): [krb5_child[56532]] [tgt_req_child] (0x1000): [RID#134] Attempting to get a TGT * (2025-10-11 8:27:34): [krb5_child[56532]] [get_and_save_tgt] (0x0400): [RID#134] Attempting kinit for realm [OOO.TEST] * (2025-10-11 8:27:34): [krb5_child[56532]] [sss_krb5_responder] (0x4000): [RID#134] Got question [password]. * (2025-10-11 8:27:34): [krb5_child[56532]] [get_and_save_tgt] (0x0020): [RID#134] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-11 8:27:34): [krb5_child[56532]] [map_krb5_error] (0x0020): [RID#134] 2138: [-1765328360][Preauthentication failed] (2025-10-11 8:27:39): [krb5_child[56536]] [get_and_save_tgt] (0x0020): [RID#137] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-11 8:27:39): [krb5_child[56536]] [main] (0x0400): [RID#137] krb5_child started. * (2025-10-11 8:27:39): [krb5_child[56536]] [unpack_buffer] (0x1000): [RID#137] total buffer size: [99] * (2025-10-11 8:27:39): [krb5_child[56536]] [unpack_buffer] (0x0100): [RID#137] cmd [241 (auth)] uid [1697800000] gid [1697800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-11 8:27:39): [krb5_child[56536]] [unpack_buffer] (0x2000): [RID#137] No old ccache * (2025-10-11 8:27:39): [krb5_child[56536]] [unpack_buffer] (0x0100): [RID#137] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-11 8:27:39): [krb5_child[56536]] [k5c_precreate_ccache] (0x4000): [RID#137] Recreating ccache * (2025-10-11 8:27:39): [krb5_child[56536]] [k5c_setup_fast] (0x0100): [RID#137] Fast principal is set to [host/np0005481012.ooo.test@OOO.TEST] * (2025-10-11 8:27:39): [krb5_child[56536]] [find_principal_in_keytab] (0x4000): [RID#137] Trying to find principal host/np0005481012.ooo.test@OOO.TEST in keytab. * (2025-10-11 8:27:39): [krb5_child[56536]] [match_principal] (0x1000): [RID#137] Principal matched to the sample (host/np0005481012.ooo.test@OOO.TEST). * (2025-10-11 8:27:39): [krb5_child[56536]] [check_fast_ccache] (0x0200): [RID#137] FAST TGT is still valid. * (2025-10-11 8:27:39): [krb5_child[56536]] [become_user] (0x0200): [RID#137] Trying to become user [1697800000][1697800000]. * (2025-10-11 8:27:39): [krb5_child[56536]] [main] (0x2000): [RID#137] Running as [1697800000][1697800000]. * (2025-10-11 8:27:39): [krb5_child[56536]] [set_lifetime_options] (0x0100): [RID#137] No specific renewable lifetime requested. * (2025-10-11 8:27:39): [krb5_child[56536]] [set_lifetime_options] (0x0100): [RID#137] No specific lifetime requested. * (2025-10-11 8:27:39): [krb5_child[56536]] [set_canonicalize_option] (0x0100): [RID#137] Canonicalization is set to [true] * (2025-10-11 8:27:39): [krb5_child[56536]] [main] (0x0400): [RID#137] Will perform auth * (2025-10-11 8:27:39): [krb5_child[56536]] [main] (0x0400): [RID#137] Will perform online auth * (2025-10-11 8:27:39): [krb5_child[56536]] [tgt_req_child] (0x1000): [RID#137] Attempting to get a TGT * (2025-10-11 8:27:39): [krb5_child[56536]] [get_and_save_tgt] (0x0400): [RID#137] Attempting kinit for realm [OOO.TEST] * (2025-10-11 8:27:39): [krb5_child[56536]] [sss_krb5_responder] (0x4000): [RID#137] Got question [password]. * (2025-10-11 8:27:39): [krb5_child[56536]] [get_and_save_tgt] (0x0020): [RID#137] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-11 8:27:39): [krb5_child[56536]] [map_krb5_error] (0x0020): [RID#137] 2138: [-1765328360][Preauthentication failed] (2025-10-11 8:28:35): [krb5_child[56744]] [get_and_save_tgt] (0x0020): [RID#151] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-10-11 8:28:35): [krb5_child[56744]] [main] (0x0400): [RID#151] krb5_child started. * (2025-10-11 8:28:35): [krb5_child[56744]] [unpack_buffer] (0x1000): [RID#151] total buffer size: [95] * (2025-10-11 8:28:35): [krb5_child[56744]] [unpack_buffer] (0x0100): [RID#151] cmd [241 (auth)] uid [1697800000] gid [1697800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-10-11 8:28:35): [krb5_child[56744]] [unpack_buffer] (0x2000): [RID#151] No old ccache * (2025-10-11 8:28:35): [krb5_child[56744]] [unpack_buffer] (0x0100): [RID#151] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-10-11 8:28:35): [krb5_child[56744]] [k5c_precreate_ccache] (0x4000): [RID#151] Recreating ccache * (2025-10-11 8:28:35): [krb5_child[56744]] [k5c_setup_fast] (0x0100): [RID#151] Fast principal is set to [host/np0005481012.ooo.test@OOO.TEST] * (2025-10-11 8:28:35): [krb5_child[56744]] [find_principal_in_keytab] (0x4000): [RID#151] Trying to find principal host/np0005481012.ooo.test@OOO.TEST in keytab. * (2025-10-11 8:28:35): [krb5_child[56744]] [match_principal] (0x1000): [RID#151] Principal matched to the sample (host/np0005481012.ooo.test@OOO.TEST). * (2025-10-11 8:28:35): [krb5_child[56744]] [check_fast_ccache] (0x0200): [RID#151] FAST TGT is still valid. * (2025-10-11 8:28:35): [krb5_child[56744]] [become_user] (0x0200): [RID#151] Trying to become user [1697800000][1697800000]. * (2025-10-11 8:28:35): [krb5_child[56744]] [main] (0x2000): [RID#151] Running as [1697800000][1697800000]. * (2025-10-11 8:28:35): [krb5_child[56744]] [set_lifetime_options] (0x0100): [RID#151] No specific renewable lifetime requested. * (2025-10-11 8:28:35): [krb5_child[56744]] [set_lifetime_options] (0x0100): [RID#151] No specific lifetime requested. * (2025-10-11 8:28:35): [krb5_child[56744]] [set_canonicalize_option] (0x0100): [RID#151] Canonicalization is set to [true] * (2025-10-11 8:28:35): [krb5_child[56744]] [main] (0x0400): [RID#151] Will perform auth * (2025-10-11 8:28:35): [krb5_child[56744]] [main] (0x0400): [RID#151] Will perform online auth * (2025-10-11 8:28:35): [krb5_child[56744]] [tgt_req_child] (0x1000): [RID#151] Attempting to get a TGT * (2025-10-11 8:28:35): [krb5_child[56744]] [get_and_save_tgt] (0x0400): [RID#151] Attempting kinit for realm [OOO.TEST] * (2025-10-11 8:28:35): [krb5_child[56744]] [sss_krb5_responder] (0x4000): [RID#151] Got question [password]. * (2025-10-11 8:28:35): [krb5_child[56744]] [get_and_save_tgt] (0x0020): [RID#151] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-10-11 8:28:35): [krb5_child[56744]] [map_krb5_error] (0x0020): [RID#151] 2138: [-1765328360][Preauthentication failed]