(2025-11-22 9:02:23): [krb5_child[67071]] [get_and_save_tgt] (0x0020): [RID#115] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-22 9:02:23): [krb5_child[67071]] [main] (0x0400): [RID#115] krb5_child started. * (2025-11-22 9:02:23): [krb5_child[67071]] [unpack_buffer] (0x1000): [RID#115] total buffer size: [99] * (2025-11-22 9:02:23): [krb5_child[67071]] [unpack_buffer] (0x0100): [RID#115] cmd [241 (auth)] uid [1262600000] gid [1262600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-22 9:02:23): [krb5_child[67071]] [unpack_buffer] (0x2000): [RID#115] No old ccache * (2025-11-22 9:02:23): [krb5_child[67071]] [unpack_buffer] (0x0100): [RID#115] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-22 9:02:23): [krb5_child[67071]] [k5c_precreate_ccache] (0x4000): [RID#115] Recreating ccache * (2025-11-22 9:02:23): [krb5_child[67071]] [k5c_setup_fast] (0x0100): [RID#115] Fast principal is set to [host/np0005531966.ooo.test@OOO.TEST] * (2025-11-22 9:02:23): [krb5_child[67071]] [find_principal_in_keytab] (0x4000): [RID#115] Trying to find principal host/np0005531966.ooo.test@OOO.TEST in keytab. * (2025-11-22 9:02:23): [krb5_child[67071]] [match_principal] (0x1000): [RID#115] Principal matched to the sample (host/np0005531966.ooo.test@OOO.TEST). * (2025-11-22 9:02:23): [krb5_child[67071]] [check_fast_ccache] (0x0200): [RID#115] FAST TGT is still valid. * (2025-11-22 9:02:23): [krb5_child[67071]] [become_user] (0x0200): [RID#115] Trying to become user [1262600000][1262600000]. * (2025-11-22 9:02:23): [krb5_child[67071]] [main] (0x2000): [RID#115] Running as [1262600000][1262600000]. * (2025-11-22 9:02:23): [krb5_child[67071]] [set_lifetime_options] (0x0100): [RID#115] No specific renewable lifetime requested. * (2025-11-22 9:02:23): [krb5_child[67071]] [set_lifetime_options] (0x0100): [RID#115] No specific lifetime requested. * (2025-11-22 9:02:23): [krb5_child[67071]] [set_canonicalize_option] (0x0100): [RID#115] Canonicalization is set to [true] * (2025-11-22 9:02:23): [krb5_child[67071]] [main] (0x0400): [RID#115] Will perform auth * (2025-11-22 9:02:23): [krb5_child[67071]] [main] (0x0400): [RID#115] Will perform online auth * (2025-11-22 9:02:23): [krb5_child[67071]] [tgt_req_child] (0x1000): [RID#115] Attempting to get a TGT * (2025-11-22 9:02:23): [krb5_child[67071]] [get_and_save_tgt] (0x0400): [RID#115] Attempting kinit for realm [OOO.TEST] * (2025-11-22 9:02:23): [krb5_child[67071]] [sss_krb5_responder] (0x4000): [RID#115] Got question [password]. * (2025-11-22 9:02:23): [krb5_child[67071]] [get_and_save_tgt] (0x0020): [RID#115] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-22 9:02:23): [krb5_child[67071]] [map_krb5_error] (0x0020): [RID#115] 2138: [-1765328360][Preauthentication failed] (2025-11-22 9:39:12): [krb5_child[84487]] [get_and_save_tgt] (0x0020): [RID#304] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-22 9:39:12): [krb5_child[84487]] [main] (0x0400): [RID#304] krb5_child started. * (2025-11-22 9:39:12): [krb5_child[84487]] [unpack_buffer] (0x1000): [RID#304] total buffer size: [99] * (2025-11-22 9:39:12): [krb5_child[84487]] [unpack_buffer] (0x0100): [RID#304] cmd [241 (auth)] uid [1262600000] gid [1262600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-22 9:39:12): [krb5_child[84487]] [unpack_buffer] (0x2000): [RID#304] No old ccache * (2025-11-22 9:39:12): [krb5_child[84487]] [unpack_buffer] (0x0100): [RID#304] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-22 9:39:12): [krb5_child[84487]] [k5c_precreate_ccache] (0x4000): [RID#304] Recreating ccache * (2025-11-22 9:39:12): [krb5_child[84487]] [k5c_setup_fast] (0x0100): [RID#304] Fast principal is set to [host/np0005531966.ooo.test@OOO.TEST] * (2025-11-22 9:39:12): [krb5_child[84487]] [find_principal_in_keytab] (0x4000): [RID#304] Trying to find principal host/np0005531966.ooo.test@OOO.TEST in keytab. * (2025-11-22 9:39:12): [krb5_child[84487]] [match_principal] (0x1000): [RID#304] Principal matched to the sample (host/np0005531966.ooo.test@OOO.TEST). * (2025-11-22 9:39:12): [krb5_child[84487]] [check_fast_ccache] (0x0200): [RID#304] FAST TGT is still valid. * (2025-11-22 9:39:12): [krb5_child[84487]] [become_user] (0x0200): [RID#304] Trying to become user [1262600000][1262600000]. * (2025-11-22 9:39:12): [krb5_child[84487]] [main] (0x2000): [RID#304] Running as [1262600000][1262600000]. * (2025-11-22 9:39:12): [krb5_child[84487]] [set_lifetime_options] (0x0100): [RID#304] No specific renewable lifetime requested. * (2025-11-22 9:39:12): [krb5_child[84487]] [set_lifetime_options] (0x0100): [RID#304] No specific lifetime requested. * (2025-11-22 9:39:12): [krb5_child[84487]] [set_canonicalize_option] (0x0100): [RID#304] Canonicalization is set to [true] * (2025-11-22 9:39:12): [krb5_child[84487]] [main] (0x0400): [RID#304] Will perform auth * (2025-11-22 9:39:12): [krb5_child[84487]] [main] (0x0400): [RID#304] Will perform online auth * (2025-11-22 9:39:12): [krb5_child[84487]] [tgt_req_child] (0x1000): [RID#304] Attempting to get a TGT * (2025-11-22 9:39:12): [krb5_child[84487]] [get_and_save_tgt] (0x0400): [RID#304] Attempting kinit for realm [OOO.TEST] * (2025-11-22 9:39:12): [krb5_child[84487]] [sss_krb5_responder] (0x4000): [RID#304] Got question [password]. * (2025-11-22 9:39:12): [krb5_child[84487]] [get_and_save_tgt] (0x0020): [RID#304] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-22 9:39:12): [krb5_child[84487]] [map_krb5_error] (0x0020): [RID#304] 2138: [-1765328360][Preauthentication failed] (2025-11-22 9:39:20): [krb5_child[84515]] [get_and_save_tgt] (0x0020): [RID#307] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-22 9:39:20): [krb5_child[84515]] [main] (0x0400): [RID#307] krb5_child started. * (2025-11-22 9:39:20): [krb5_child[84515]] [unpack_buffer] (0x1000): [RID#307] total buffer size: [100] * (2025-11-22 9:39:20): [krb5_child[84515]] [unpack_buffer] (0x0100): [RID#307] cmd [241 (auth)] uid [1262600000] gid [1262600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-22 9:39:20): [krb5_child[84515]] [unpack_buffer] (0x2000): [RID#307] No old ccache * (2025-11-22 9:39:20): [krb5_child[84515]] [unpack_buffer] (0x0100): [RID#307] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-22 9:39:20): [krb5_child[84515]] [k5c_precreate_ccache] (0x4000): [RID#307] Recreating ccache * (2025-11-22 9:39:20): [krb5_child[84515]] [k5c_setup_fast] (0x0100): [RID#307] Fast principal is set to [host/np0005531966.ooo.test@OOO.TEST] * (2025-11-22 9:39:20): [krb5_child[84515]] [find_principal_in_keytab] (0x4000): [RID#307] Trying to find principal host/np0005531966.ooo.test@OOO.TEST in keytab. * (2025-11-22 9:39:20): [krb5_child[84515]] [match_principal] (0x1000): [RID#307] Principal matched to the sample (host/np0005531966.ooo.test@OOO.TEST). * (2025-11-22 9:39:20): [krb5_child[84515]] [check_fast_ccache] (0x0200): [RID#307] FAST TGT is still valid. * (2025-11-22 9:39:20): [krb5_child[84515]] [become_user] (0x0200): [RID#307] Trying to become user [1262600000][1262600000]. * (2025-11-22 9:39:20): [krb5_child[84515]] [main] (0x2000): [RID#307] Running as [1262600000][1262600000]. * (2025-11-22 9:39:20): [krb5_child[84515]] [set_lifetime_options] (0x0100): [RID#307] No specific renewable lifetime requested. * (2025-11-22 9:39:20): [krb5_child[84515]] [set_lifetime_options] (0x0100): [RID#307] No specific lifetime requested. * (2025-11-22 9:39:20): [krb5_child[84515]] [set_canonicalize_option] (0x0100): [RID#307] Canonicalization is set to [true] * (2025-11-22 9:39:20): [krb5_child[84515]] [main] (0x0400): [RID#307] Will perform auth * (2025-11-22 9:39:20): [krb5_child[84515]] [main] (0x0400): [RID#307] Will perform online auth * (2025-11-22 9:39:20): [krb5_child[84515]] [tgt_req_child] (0x1000): [RID#307] Attempting to get a TGT * (2025-11-22 9:39:20): [krb5_child[84515]] [get_and_save_tgt] (0x0400): [RID#307] Attempting kinit for realm [OOO.TEST] * (2025-11-22 9:39:20): [krb5_child[84515]] [sss_krb5_responder] (0x4000): [RID#307] Got question [password]. * (2025-11-22 9:39:20): [krb5_child[84515]] [get_and_save_tgt] (0x0020): [RID#307] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-22 9:39:20): [krb5_child[84515]] [map_krb5_error] (0x0020): [RID#307] 2138: [-1765328360][Preauthentication failed]