(2025-11-23 8:01:12): [krb5_child[42781]] [get_and_save_tgt] (0x0020): [RID#12] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:01:12): [krb5_child[42781]] [main] (0x0400): [RID#12] krb5_child started. * (2025-11-23 8:01:12): [krb5_child[42781]] [unpack_buffer] (0x1000): [RID#12] total buffer size: [92] * (2025-11-23 8:01:12): [krb5_child[42781]] [unpack_buffer] (0x0100): [RID#12] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:01:12): [krb5_child[42781]] [unpack_buffer] (0x2000): [RID#12] No old ccache * (2025-11-23 8:01:12): [krb5_child[42781]] [unpack_buffer] (0x0100): [RID#12] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:01:12): [krb5_child[42781]] [k5c_precreate_ccache] (0x4000): [RID#12] Recreating ccache * (2025-11-23 8:01:12): [krb5_child[42781]] [k5c_setup_fast] (0x0100): [RID#12] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:01:12): [krb5_child[42781]] [find_principal_in_keytab] (0x4000): [RID#12] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:01:12): [krb5_child[42781]] [match_principal] (0x1000): [RID#12] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:01:12): [krb5_child[42781]] [check_fast_ccache] (0x0200): [RID#12] FAST TGT is still valid. * (2025-11-23 8:01:12): [krb5_child[42781]] [become_user] (0x0200): [RID#12] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:01:12): [krb5_child[42781]] [main] (0x2000): [RID#12] Running as [1827200000][1827200000]. * (2025-11-23 8:01:12): [krb5_child[42781]] [set_lifetime_options] (0x0100): [RID#12] No specific renewable lifetime requested. * (2025-11-23 8:01:12): [krb5_child[42781]] [set_lifetime_options] (0x0100): [RID#12] No specific lifetime requested. * (2025-11-23 8:01:12): [krb5_child[42781]] [set_canonicalize_option] (0x0100): [RID#12] Canonicalization is set to [true] * (2025-11-23 8:01:12): [krb5_child[42781]] [main] (0x0400): [RID#12] Will perform auth * (2025-11-23 8:01:12): [krb5_child[42781]] [main] (0x0400): [RID#12] Will perform online auth * (2025-11-23 8:01:12): [krb5_child[42781]] [tgt_req_child] (0x1000): [RID#12] Attempting to get a TGT * (2025-11-23 8:01:12): [krb5_child[42781]] [get_and_save_tgt] (0x0400): [RID#12] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:01:12): [krb5_child[42781]] [sss_krb5_responder] (0x4000): [RID#12] Got question [password]. * (2025-11-23 8:01:12): [krb5_child[42781]] [get_and_save_tgt] (0x0020): [RID#12] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:01:12): [krb5_child[42781]] [map_krb5_error] (0x0020): [RID#12] 2138: [-1765328360][Preauthentication failed] (2025-11-23 8:09:04): [krb5_child[47244]] [get_and_save_tgt] (0x0020): [RID#23] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:04): [krb5_child[47244]] [main] (0x0400): [RID#23] krb5_child started. * (2025-11-23 8:09:04): [krb5_child[47244]] [unpack_buffer] (0x1000): [RID#23] total buffer size: [96] * (2025-11-23 8:09:04): [krb5_child[47244]] [unpack_buffer] (0x0100): [RID#23] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:04): [krb5_child[47244]] [unpack_buffer] (0x2000): [RID#23] No old ccache * (2025-11-23 8:09:04): [krb5_child[47244]] [unpack_buffer] (0x0100): [RID#23] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:04): [krb5_child[47244]] [k5c_precreate_ccache] (0x4000): [RID#23] Recreating ccache * (2025-11-23 8:09:04): [krb5_child[47244]] [k5c_setup_fast] (0x0100): [RID#23] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:04): [krb5_child[47244]] [find_principal_in_keytab] (0x4000): [RID#23] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:04): [krb5_child[47244]] [match_principal] (0x1000): [RID#23] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:04): [krb5_child[47244]] [check_fast_ccache] (0x0200): [RID#23] FAST TGT is still valid. * (2025-11-23 8:09:04): [krb5_child[47244]] [become_user] (0x0200): [RID#23] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:04): [krb5_child[47244]] [main] (0x2000): [RID#23] Running as [1827200000][1827200000]. * (2025-11-23 8:09:04): [krb5_child[47244]] [set_lifetime_options] (0x0100): [RID#23] No specific renewable lifetime requested. * (2025-11-23 8:09:04): [krb5_child[47244]] [set_lifetime_options] (0x0100): [RID#23] No specific lifetime requested. * (2025-11-23 8:09:04): [krb5_child[47244]] [set_canonicalize_option] (0x0100): [RID#23] Canonicalization is set to [true] * (2025-11-23 8:09:04): [krb5_child[47244]] [main] (0x0400): [RID#23] Will perform auth * (2025-11-23 8:09:04): [krb5_child[47244]] [main] (0x0400): [RID#23] Will perform online auth * (2025-11-23 8:09:04): [krb5_child[47244]] [tgt_req_child] (0x1000): [RID#23] Attempting to get a TGT * (2025-11-23 8:09:04): [krb5_child[47244]] [get_and_save_tgt] (0x0400): [RID#23] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:04): [krb5_child[47244]] [sss_krb5_responder] (0x4000): [RID#23] Got question [password]. * (2025-11-23 8:09:04): [krb5_child[47244]] [get_and_save_tgt] (0x0020): [RID#23] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:04): [krb5_child[47244]] [map_krb5_error] (0x0020): [RID#23] 2138: [-1765328360][Preauthentication failed] (2025-11-23 8:09:08): [krb5_child[47246]] [get_and_save_tgt] (0x0020): [RID#25] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:08): [krb5_child[47246]] [main] (0x0400): [RID#25] krb5_child started. * (2025-11-23 8:09:08): [krb5_child[47246]] [unpack_buffer] (0x1000): [RID#25] total buffer size: [97] * (2025-11-23 8:09:08): [krb5_child[47246]] [unpack_buffer] (0x0100): [RID#25] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:08): [krb5_child[47246]] [unpack_buffer] (0x2000): [RID#25] No old ccache * (2025-11-23 8:09:08): [krb5_child[47246]] [unpack_buffer] (0x0100): [RID#25] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:08): [krb5_child[47246]] [k5c_precreate_ccache] (0x4000): [RID#25] Recreating ccache * (2025-11-23 8:09:08): [krb5_child[47246]] [k5c_setup_fast] (0x0100): [RID#25] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:08): [krb5_child[47246]] [find_principal_in_keytab] (0x4000): [RID#25] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:08): [krb5_child[47246]] [match_principal] (0x1000): [RID#25] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:08): [krb5_child[47246]] [check_fast_ccache] (0x0200): [RID#25] FAST TGT is still valid. * (2025-11-23 8:09:08): [krb5_child[47246]] [become_user] (0x0200): [RID#25] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:08): [krb5_child[47246]] [main] (0x2000): [RID#25] Running as [1827200000][1827200000]. * (2025-11-23 8:09:08): [krb5_child[47246]] [set_lifetime_options] (0x0100): [RID#25] No specific renewable lifetime requested. * (2025-11-23 8:09:08): [krb5_child[47246]] [set_lifetime_options] (0x0100): [RID#25] No specific lifetime requested. * (2025-11-23 8:09:08): [krb5_child[47246]] [set_canonicalize_option] (0x0100): [RID#25] Canonicalization is set to [true] * (2025-11-23 8:09:08): [krb5_child[47246]] [main] (0x0400): [RID#25] Will perform auth * (2025-11-23 8:09:08): [krb5_child[47246]] [main] (0x0400): [RID#25] Will perform online auth * (2025-11-23 8:09:08): [krb5_child[47246]] [tgt_req_child] (0x1000): [RID#25] Attempting to get a TGT * (2025-11-23 8:09:08): [krb5_child[47246]] [get_and_save_tgt] (0x0400): [RID#25] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:08): [krb5_child[47246]] [sss_krb5_responder] (0x4000): [RID#25] Got question [password]. * (2025-11-23 8:09:08): [krb5_child[47246]] [get_and_save_tgt] (0x0020): [RID#25] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:08): [krb5_child[47246]] [map_krb5_error] (0x0020): [RID#25] 2138: [-1765328360][Preauthentication failed] (2025-11-23 8:09:12): [krb5_child[47248]] [get_and_save_tgt] (0x0020): [RID#28] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:12): [krb5_child[47248]] [main] (0x0400): [RID#28] krb5_child started. * (2025-11-23 8:09:12): [krb5_child[47248]] [unpack_buffer] (0x1000): [RID#28] total buffer size: [96] * (2025-11-23 8:09:12): [krb5_child[47248]] [unpack_buffer] (0x0100): [RID#28] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:12): [krb5_child[47248]] [unpack_buffer] (0x2000): [RID#28] No old ccache * (2025-11-23 8:09:12): [krb5_child[47248]] [unpack_buffer] (0x0100): [RID#28] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:12): [krb5_child[47248]] [k5c_precreate_ccache] (0x4000): [RID#28] Recreating ccache * (2025-11-23 8:09:12): [krb5_child[47248]] [k5c_setup_fast] (0x0100): [RID#28] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:12): [krb5_child[47248]] [find_principal_in_keytab] (0x4000): [RID#28] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:12): [krb5_child[47248]] [match_principal] (0x1000): [RID#28] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:12): [krb5_child[47248]] [check_fast_ccache] (0x0200): [RID#28] FAST TGT is still valid. * (2025-11-23 8:09:12): [krb5_child[47248]] [become_user] (0x0200): [RID#28] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:12): [krb5_child[47248]] [main] (0x2000): [RID#28] Running as [1827200000][1827200000]. * (2025-11-23 8:09:12): [krb5_child[47248]] [set_lifetime_options] (0x0100): [RID#28] No specific renewable lifetime requested. * (2025-11-23 8:09:12): [krb5_child[47248]] [set_lifetime_options] (0x0100): [RID#28] No specific lifetime requested. * (2025-11-23 8:09:12): [krb5_child[47248]] [set_canonicalize_option] (0x0100): [RID#28] Canonicalization is set to [true] * (2025-11-23 8:09:12): [krb5_child[47248]] [main] (0x0400): [RID#28] Will perform auth * (2025-11-23 8:09:12): [krb5_child[47248]] [main] (0x0400): [RID#28] Will perform online auth * (2025-11-23 8:09:12): [krb5_child[47248]] [tgt_req_child] (0x1000): [RID#28] Attempting to get a TGT * (2025-11-23 8:09:12): [krb5_child[47248]] [get_and_save_tgt] (0x0400): [RID#28] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:12): [krb5_child[47248]] [sss_krb5_responder] (0x4000): [RID#28] Got question [password]. * (2025-11-23 8:09:12): [krb5_child[47248]] [get_and_save_tgt] (0x0020): [RID#28] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:12): [krb5_child[47248]] [map_krb5_error] (0x0020): [RID#28] 2138: [-1765328360][Preauthentication failed] (2025-11-23 8:09:16): [krb5_child[47250]] [get_and_save_tgt] (0x0020): [RID#30] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:15): [krb5_child[47250]] [main] (0x0400): [RID#30] krb5_child started. * (2025-11-23 8:09:15): [krb5_child[47250]] [unpack_buffer] (0x1000): [RID#30] total buffer size: [95] * (2025-11-23 8:09:15): [krb5_child[47250]] [unpack_buffer] (0x0100): [RID#30] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:15): [krb5_child[47250]] [unpack_buffer] (0x2000): [RID#30] No old ccache * (2025-11-23 8:09:15): [krb5_child[47250]] [unpack_buffer] (0x0100): [RID#30] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:15): [krb5_child[47250]] [k5c_precreate_ccache] (0x4000): [RID#30] Recreating ccache * (2025-11-23 8:09:15): [krb5_child[47250]] [k5c_setup_fast] (0x0100): [RID#30] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:15): [krb5_child[47250]] [find_principal_in_keytab] (0x4000): [RID#30] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:15): [krb5_child[47250]] [match_principal] (0x1000): [RID#30] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:15): [krb5_child[47250]] [check_fast_ccache] (0x0200): [RID#30] FAST TGT is still valid. * (2025-11-23 8:09:15): [krb5_child[47250]] [become_user] (0x0200): [RID#30] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:15): [krb5_child[47250]] [main] (0x2000): [RID#30] Running as [1827200000][1827200000]. * (2025-11-23 8:09:15): [krb5_child[47250]] [set_lifetime_options] (0x0100): [RID#30] No specific renewable lifetime requested. * (2025-11-23 8:09:15): [krb5_child[47250]] [set_lifetime_options] (0x0100): [RID#30] No specific lifetime requested. * (2025-11-23 8:09:15): [krb5_child[47250]] [set_canonicalize_option] (0x0100): [RID#30] Canonicalization is set to [true] * (2025-11-23 8:09:15): [krb5_child[47250]] [main] (0x0400): [RID#30] Will perform auth * (2025-11-23 8:09:15): [krb5_child[47250]] [main] (0x0400): [RID#30] Will perform online auth * (2025-11-23 8:09:15): [krb5_child[47250]] [tgt_req_child] (0x1000): [RID#30] Attempting to get a TGT * (2025-11-23 8:09:15): [krb5_child[47250]] [get_and_save_tgt] (0x0400): [RID#30] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:15): [krb5_child[47250]] [sss_krb5_responder] (0x4000): [RID#30] Got question [password]. * (2025-11-23 8:09:16): [krb5_child[47250]] [get_and_save_tgt] (0x0020): [RID#30] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:16): [krb5_child[47250]] [map_krb5_error] (0x0020): [RID#30] 2138: [-1765328360][Preauthentication failed] (2025-11-23 8:09:19): [krb5_child[47252]] [get_and_save_tgt] (0x0020): [RID#33] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:19): [krb5_child[47252]] [main] (0x0400): [RID#33] krb5_child started. * (2025-11-23 8:09:19): [krb5_child[47252]] [unpack_buffer] (0x1000): [RID#33] total buffer size: [96] * (2025-11-23 8:09:19): [krb5_child[47252]] [unpack_buffer] (0x0100): [RID#33] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:19): [krb5_child[47252]] [unpack_buffer] (0x2000): [RID#33] No old ccache * (2025-11-23 8:09:19): [krb5_child[47252]] [unpack_buffer] (0x0100): [RID#33] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:19): [krb5_child[47252]] [k5c_precreate_ccache] (0x4000): [RID#33] Recreating ccache * (2025-11-23 8:09:19): [krb5_child[47252]] [k5c_setup_fast] (0x0100): [RID#33] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:19): [krb5_child[47252]] [find_principal_in_keytab] (0x4000): [RID#33] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:19): [krb5_child[47252]] [match_principal] (0x1000): [RID#33] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:19): [krb5_child[47252]] [check_fast_ccache] (0x0200): [RID#33] FAST TGT is still valid. * (2025-11-23 8:09:19): [krb5_child[47252]] [become_user] (0x0200): [RID#33] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:19): [krb5_child[47252]] [main] (0x2000): [RID#33] Running as [1827200000][1827200000]. * (2025-11-23 8:09:19): [krb5_child[47252]] [set_lifetime_options] (0x0100): [RID#33] No specific renewable lifetime requested. * (2025-11-23 8:09:19): [krb5_child[47252]] [set_lifetime_options] (0x0100): [RID#33] No specific lifetime requested. * (2025-11-23 8:09:19): [krb5_child[47252]] [set_canonicalize_option] (0x0100): [RID#33] Canonicalization is set to [true] * (2025-11-23 8:09:19): [krb5_child[47252]] [main] (0x0400): [RID#33] Will perform auth * (2025-11-23 8:09:19): [krb5_child[47252]] [main] (0x0400): [RID#33] Will perform online auth * (2025-11-23 8:09:19): [krb5_child[47252]] [tgt_req_child] (0x1000): [RID#33] Attempting to get a TGT * (2025-11-23 8:09:19): [krb5_child[47252]] [get_and_save_tgt] (0x0400): [RID#33] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:19): [krb5_child[47252]] [sss_krb5_responder] (0x4000): [RID#33] Got question [password]. * (2025-11-23 8:09:19): [krb5_child[47252]] [get_and_save_tgt] (0x0020): [RID#33] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:19): [krb5_child[47252]] [map_krb5_error] (0x0020): [RID#33] 2138: [-1765328360][Preauthentication failed] (2025-11-23 8:09:23): [krb5_child[47254]] [get_and_save_tgt] (0x0020): [RID#36] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:23): [krb5_child[47254]] [main] (0x0400): [RID#36] krb5_child started. * (2025-11-23 8:09:23): [krb5_child[47254]] [unpack_buffer] (0x1000): [RID#36] total buffer size: [95] * (2025-11-23 8:09:23): [krb5_child[47254]] [unpack_buffer] (0x0100): [RID#36] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:23): [krb5_child[47254]] [unpack_buffer] (0x2000): [RID#36] No old ccache * (2025-11-23 8:09:23): [krb5_child[47254]] [unpack_buffer] (0x0100): [RID#36] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:23): [krb5_child[47254]] [k5c_precreate_ccache] (0x4000): [RID#36] Recreating ccache * (2025-11-23 8:09:23): [krb5_child[47254]] [k5c_setup_fast] (0x0100): [RID#36] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:23): [krb5_child[47254]] [find_principal_in_keytab] (0x4000): [RID#36] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:23): [krb5_child[47254]] [match_principal] (0x1000): [RID#36] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:23): [krb5_child[47254]] [check_fast_ccache] (0x0200): [RID#36] FAST TGT is still valid. * (2025-11-23 8:09:23): [krb5_child[47254]] [become_user] (0x0200): [RID#36] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:23): [krb5_child[47254]] [main] (0x2000): [RID#36] Running as [1827200000][1827200000]. * (2025-11-23 8:09:23): [krb5_child[47254]] [set_lifetime_options] (0x0100): [RID#36] No specific renewable lifetime requested. * (2025-11-23 8:09:23): [krb5_child[47254]] [set_lifetime_options] (0x0100): [RID#36] No specific lifetime requested. * (2025-11-23 8:09:23): [krb5_child[47254]] [set_canonicalize_option] (0x0100): [RID#36] Canonicalization is set to [true] * (2025-11-23 8:09:23): [krb5_child[47254]] [main] (0x0400): [RID#36] Will perform auth * (2025-11-23 8:09:23): [krb5_child[47254]] [main] (0x0400): [RID#36] Will perform online auth * (2025-11-23 8:09:23): [krb5_child[47254]] [tgt_req_child] (0x1000): [RID#36] Attempting to get a TGT * (2025-11-23 8:09:23): [krb5_child[47254]] [get_and_save_tgt] (0x0400): [RID#36] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:23): [krb5_child[47254]] [sss_krb5_responder] (0x4000): [RID#36] Got question [password]. * (2025-11-23 8:09:23): [krb5_child[47254]] [get_and_save_tgt] (0x0020): [RID#36] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:23): [krb5_child[47254]] [map_krb5_error] (0x0020): [RID#36] 2138: [-1765328360][Preauthentication failed] (2025-11-23 8:09:27): [krb5_child[47258]] [get_and_save_tgt] (0x0020): [RID#39] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:27): [krb5_child[47258]] [main] (0x0400): [RID#39] krb5_child started. * (2025-11-23 8:09:27): [krb5_child[47258]] [unpack_buffer] (0x1000): [RID#39] total buffer size: [95] * (2025-11-23 8:09:27): [krb5_child[47258]] [unpack_buffer] (0x0100): [RID#39] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:27): [krb5_child[47258]] [unpack_buffer] (0x2000): [RID#39] No old ccache * (2025-11-23 8:09:27): [krb5_child[47258]] [unpack_buffer] (0x0100): [RID#39] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:27): [krb5_child[47258]] [k5c_precreate_ccache] (0x4000): [RID#39] Recreating ccache * (2025-11-23 8:09:27): [krb5_child[47258]] [k5c_setup_fast] (0x0100): [RID#39] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:27): [krb5_child[47258]] [find_principal_in_keytab] (0x4000): [RID#39] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:27): [krb5_child[47258]] [match_principal] (0x1000): [RID#39] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:27): [krb5_child[47258]] [check_fast_ccache] (0x0200): [RID#39] FAST TGT is still valid. * (2025-11-23 8:09:27): [krb5_child[47258]] [become_user] (0x0200): [RID#39] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:27): [krb5_child[47258]] [main] (0x2000): [RID#39] Running as [1827200000][1827200000]. * (2025-11-23 8:09:27): [krb5_child[47258]] [set_lifetime_options] (0x0100): [RID#39] No specific renewable lifetime requested. * (2025-11-23 8:09:27): [krb5_child[47258]] [set_lifetime_options] (0x0100): [RID#39] No specific lifetime requested. * (2025-11-23 8:09:27): [krb5_child[47258]] [set_canonicalize_option] (0x0100): [RID#39] Canonicalization is set to [true] * (2025-11-23 8:09:27): [krb5_child[47258]] [main] (0x0400): [RID#39] Will perform auth * (2025-11-23 8:09:27): [krb5_child[47258]] [main] (0x0400): [RID#39] Will perform online auth * (2025-11-23 8:09:27): [krb5_child[47258]] [tgt_req_child] (0x1000): [RID#39] Attempting to get a TGT * (2025-11-23 8:09:27): [krb5_child[47258]] [get_and_save_tgt] (0x0400): [RID#39] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:27): [krb5_child[47258]] [get_and_save_tgt] (0x0020): [RID#39] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:27): [krb5_child[47258]] [map_krb5_error] (0x0020): [RID#39] 2138: [-1765328366][Client's credentials have been revoked] (2025-11-23 8:09:31): [krb5_child[47289]] [get_and_save_tgt] (0x0020): [RID#41] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:31): [krb5_child[47289]] [main] (0x0400): [RID#41] krb5_child started. * (2025-11-23 8:09:31): [krb5_child[47289]] [unpack_buffer] (0x1000): [RID#41] total buffer size: [94] * (2025-11-23 8:09:31): [krb5_child[47289]] [unpack_buffer] (0x0100): [RID#41] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:31): [krb5_child[47289]] [unpack_buffer] (0x2000): [RID#41] No old ccache * (2025-11-23 8:09:31): [krb5_child[47289]] [unpack_buffer] (0x0100): [RID#41] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:31): [krb5_child[47289]] [k5c_precreate_ccache] (0x4000): [RID#41] Recreating ccache * (2025-11-23 8:09:31): [krb5_child[47289]] [k5c_setup_fast] (0x0100): [RID#41] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:31): [krb5_child[47289]] [find_principal_in_keytab] (0x4000): [RID#41] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:31): [krb5_child[47289]] [match_principal] (0x1000): [RID#41] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:31): [krb5_child[47289]] [check_fast_ccache] (0x0200): [RID#41] FAST TGT is still valid. * (2025-11-23 8:09:31): [krb5_child[47289]] [become_user] (0x0200): [RID#41] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:31): [krb5_child[47289]] [main] (0x2000): [RID#41] Running as [1827200000][1827200000]. * (2025-11-23 8:09:31): [krb5_child[47289]] [set_lifetime_options] (0x0100): [RID#41] No specific renewable lifetime requested. * (2025-11-23 8:09:31): [krb5_child[47289]] [set_lifetime_options] (0x0100): [RID#41] No specific lifetime requested. * (2025-11-23 8:09:31): [krb5_child[47289]] [set_canonicalize_option] (0x0100): [RID#41] Canonicalization is set to [true] * (2025-11-23 8:09:31): [krb5_child[47289]] [main] (0x0400): [RID#41] Will perform auth * (2025-11-23 8:09:31): [krb5_child[47289]] [main] (0x0400): [RID#41] Will perform online auth * (2025-11-23 8:09:31): [krb5_child[47289]] [tgt_req_child] (0x1000): [RID#41] Attempting to get a TGT * (2025-11-23 8:09:31): [krb5_child[47289]] [get_and_save_tgt] (0x0400): [RID#41] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:31): [krb5_child[47289]] [get_and_save_tgt] (0x0020): [RID#41] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:31): [krb5_child[47289]] [map_krb5_error] (0x0020): [RID#41] 2138: [-1765328366][Client's credentials have been revoked] (2025-11-23 8:09:35): [krb5_child[47291]] [get_and_save_tgt] (0x0020): [RID#44] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:35): [krb5_child[47291]] [main] (0x0400): [RID#44] krb5_child started. * (2025-11-23 8:09:35): [krb5_child[47291]] [unpack_buffer] (0x1000): [RID#44] total buffer size: [97] * (2025-11-23 8:09:35): [krb5_child[47291]] [unpack_buffer] (0x0100): [RID#44] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:35): [krb5_child[47291]] [unpack_buffer] (0x2000): [RID#44] No old ccache * (2025-11-23 8:09:35): [krb5_child[47291]] [unpack_buffer] (0x0100): [RID#44] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:35): [krb5_child[47291]] [k5c_precreate_ccache] (0x4000): [RID#44] Recreating ccache * (2025-11-23 8:09:35): [krb5_child[47291]] [k5c_setup_fast] (0x0100): [RID#44] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:35): [krb5_child[47291]] [find_principal_in_keytab] (0x4000): [RID#44] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:35): [krb5_child[47291]] [match_principal] (0x1000): [RID#44] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:35): [krb5_child[47291]] [check_fast_ccache] (0x0200): [RID#44] FAST TGT is still valid. * (2025-11-23 8:09:35): [krb5_child[47291]] [become_user] (0x0200): [RID#44] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:35): [krb5_child[47291]] [main] (0x2000): [RID#44] Running as [1827200000][1827200000]. * (2025-11-23 8:09:35): [krb5_child[47291]] [set_lifetime_options] (0x0100): [RID#44] No specific renewable lifetime requested. * (2025-11-23 8:09:35): [krb5_child[47291]] [set_lifetime_options] (0x0100): [RID#44] No specific lifetime requested. * (2025-11-23 8:09:35): [krb5_child[47291]] [set_canonicalize_option] (0x0100): [RID#44] Canonicalization is set to [true] * (2025-11-23 8:09:35): [krb5_child[47291]] [main] (0x0400): [RID#44] Will perform auth * (2025-11-23 8:09:35): [krb5_child[47291]] [main] (0x0400): [RID#44] Will perform online auth * (2025-11-23 8:09:35): [krb5_child[47291]] [tgt_req_child] (0x1000): [RID#44] Attempting to get a TGT * (2025-11-23 8:09:35): [krb5_child[47291]] [get_and_save_tgt] (0x0400): [RID#44] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:35): [krb5_child[47291]] [get_and_save_tgt] (0x0020): [RID#44] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:35): [krb5_child[47291]] [map_krb5_error] (0x0020): [RID#44] 2138: [-1765328366][Client's credentials have been revoked] (2025-11-23 8:09:37): [krb5_child[47293]] [get_and_save_tgt] (0x0020): [RID#46] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:37): [krb5_child[47293]] [main] (0x0400): [RID#46] krb5_child started. * (2025-11-23 8:09:37): [krb5_child[47293]] [unpack_buffer] (0x1000): [RID#46] total buffer size: [95] * (2025-11-23 8:09:37): [krb5_child[47293]] [unpack_buffer] (0x0100): [RID#46] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:37): [krb5_child[47293]] [unpack_buffer] (0x2000): [RID#46] No old ccache * (2025-11-23 8:09:37): [krb5_child[47293]] [unpack_buffer] (0x0100): [RID#46] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:37): [krb5_child[47293]] [k5c_precreate_ccache] (0x4000): [RID#46] Recreating ccache * (2025-11-23 8:09:37): [krb5_child[47293]] [k5c_setup_fast] (0x0100): [RID#46] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:37): [krb5_child[47293]] [find_principal_in_keytab] (0x4000): [RID#46] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:37): [krb5_child[47293]] [match_principal] (0x1000): [RID#46] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:37): [krb5_child[47293]] [check_fast_ccache] (0x0200): [RID#46] FAST TGT is still valid. * (2025-11-23 8:09:37): [krb5_child[47293]] [become_user] (0x0200): [RID#46] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:37): [krb5_child[47293]] [main] (0x2000): [RID#46] Running as [1827200000][1827200000]. * (2025-11-23 8:09:37): [krb5_child[47293]] [set_lifetime_options] (0x0100): [RID#46] No specific renewable lifetime requested. * (2025-11-23 8:09:37): [krb5_child[47293]] [set_lifetime_options] (0x0100): [RID#46] No specific lifetime requested. * (2025-11-23 8:09:37): [krb5_child[47293]] [set_canonicalize_option] (0x0100): [RID#46] Canonicalization is set to [true] * (2025-11-23 8:09:37): [krb5_child[47293]] [main] (0x0400): [RID#46] Will perform auth * (2025-11-23 8:09:37): [krb5_child[47293]] [main] (0x0400): [RID#46] Will perform online auth * (2025-11-23 8:09:37): [krb5_child[47293]] [tgt_req_child] (0x1000): [RID#46] Attempting to get a TGT * (2025-11-23 8:09:37): [krb5_child[47293]] [get_and_save_tgt] (0x0400): [RID#46] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:37): [krb5_child[47293]] [get_and_save_tgt] (0x0020): [RID#46] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:37): [krb5_child[47293]] [map_krb5_error] (0x0020): [RID#46] 2138: [-1765328366][Client's credentials have been revoked] (2025-11-23 8:09:39): [krb5_child[47295]] [get_and_save_tgt] (0x0020): [RID#49] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:39): [krb5_child[47295]] [main] (0x0400): [RID#49] krb5_child started. * (2025-11-23 8:09:39): [krb5_child[47295]] [unpack_buffer] (0x1000): [RID#49] total buffer size: [95] * (2025-11-23 8:09:39): [krb5_child[47295]] [unpack_buffer] (0x0100): [RID#49] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:39): [krb5_child[47295]] [unpack_buffer] (0x2000): [RID#49] No old ccache * (2025-11-23 8:09:39): [krb5_child[47295]] [unpack_buffer] (0x0100): [RID#49] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:39): [krb5_child[47295]] [k5c_precreate_ccache] (0x4000): [RID#49] Recreating ccache * (2025-11-23 8:09:39): [krb5_child[47295]] [k5c_setup_fast] (0x0100): [RID#49] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:39): [krb5_child[47295]] [find_principal_in_keytab] (0x4000): [RID#49] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:39): [krb5_child[47295]] [match_principal] (0x1000): [RID#49] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:39): [krb5_child[47295]] [check_fast_ccache] (0x0200): [RID#49] FAST TGT is still valid. * (2025-11-23 8:09:39): [krb5_child[47295]] [become_user] (0x0200): [RID#49] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:39): [krb5_child[47295]] [main] (0x2000): [RID#49] Running as [1827200000][1827200000]. * (2025-11-23 8:09:39): [krb5_child[47295]] [set_lifetime_options] (0x0100): [RID#49] No specific renewable lifetime requested. * (2025-11-23 8:09:39): [krb5_child[47295]] [set_lifetime_options] (0x0100): [RID#49] No specific lifetime requested. * (2025-11-23 8:09:39): [krb5_child[47295]] [set_canonicalize_option] (0x0100): [RID#49] Canonicalization is set to [true] * (2025-11-23 8:09:39): [krb5_child[47295]] [main] (0x0400): [RID#49] Will perform auth * (2025-11-23 8:09:39): [krb5_child[47295]] [main] (0x0400): [RID#49] Will perform online auth * (2025-11-23 8:09:39): [krb5_child[47295]] [tgt_req_child] (0x1000): [RID#49] Attempting to get a TGT * (2025-11-23 8:09:39): [krb5_child[47295]] [get_and_save_tgt] (0x0400): [RID#49] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:39): [krb5_child[47295]] [get_and_save_tgt] (0x0020): [RID#49] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:39): [krb5_child[47295]] [map_krb5_error] (0x0020): [RID#49] 2138: [-1765328366][Client's credentials have been revoked] (2025-11-23 8:09:43): [krb5_child[47297]] [get_and_save_tgt] (0x0020): [RID#52] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:43): [krb5_child[47297]] [main] (0x0400): [RID#52] krb5_child started. * (2025-11-23 8:09:43): [krb5_child[47297]] [unpack_buffer] (0x1000): [RID#52] total buffer size: [98] * (2025-11-23 8:09:43): [krb5_child[47297]] [unpack_buffer] (0x0100): [RID#52] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:43): [krb5_child[47297]] [unpack_buffer] (0x2000): [RID#52] No old ccache * (2025-11-23 8:09:43): [krb5_child[47297]] [unpack_buffer] (0x0100): [RID#52] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:43): [krb5_child[47297]] [k5c_precreate_ccache] (0x4000): [RID#52] Recreating ccache * (2025-11-23 8:09:43): [krb5_child[47297]] [k5c_setup_fast] (0x0100): [RID#52] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:43): [krb5_child[47297]] [find_principal_in_keytab] (0x4000): [RID#52] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:43): [krb5_child[47297]] [match_principal] (0x1000): [RID#52] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:43): [krb5_child[47297]] [check_fast_ccache] (0x0200): [RID#52] FAST TGT is still valid. * (2025-11-23 8:09:43): [krb5_child[47297]] [become_user] (0x0200): [RID#52] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:43): [krb5_child[47297]] [main] (0x2000): [RID#52] Running as [1827200000][1827200000]. * (2025-11-23 8:09:43): [krb5_child[47297]] [set_lifetime_options] (0x0100): [RID#52] No specific renewable lifetime requested. * (2025-11-23 8:09:43): [krb5_child[47297]] [set_lifetime_options] (0x0100): [RID#52] No specific lifetime requested. * (2025-11-23 8:09:43): [krb5_child[47297]] [set_canonicalize_option] (0x0100): [RID#52] Canonicalization is set to [true] * (2025-11-23 8:09:43): [krb5_child[47297]] [main] (0x0400): [RID#52] Will perform auth * (2025-11-23 8:09:43): [krb5_child[47297]] [main] (0x0400): [RID#52] Will perform online auth * (2025-11-23 8:09:43): [krb5_child[47297]] [tgt_req_child] (0x1000): [RID#52] Attempting to get a TGT * (2025-11-23 8:09:43): [krb5_child[47297]] [get_and_save_tgt] (0x0400): [RID#52] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:43): [krb5_child[47297]] [get_and_save_tgt] (0x0020): [RID#52] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:43): [krb5_child[47297]] [map_krb5_error] (0x0020): [RID#52] 2138: [-1765328366][Client's credentials have been revoked] (2025-11-23 8:09:49): [krb5_child[47301]] [get_and_save_tgt] (0x0020): [RID#55] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:49): [krb5_child[47301]] [main] (0x0400): [RID#55] krb5_child started. * (2025-11-23 8:09:49): [krb5_child[47301]] [unpack_buffer] (0x1000): [RID#55] total buffer size: [98] * (2025-11-23 8:09:49): [krb5_child[47301]] [unpack_buffer] (0x0100): [RID#55] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:49): [krb5_child[47301]] [unpack_buffer] (0x2000): [RID#55] No old ccache * (2025-11-23 8:09:49): [krb5_child[47301]] [unpack_buffer] (0x0100): [RID#55] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:49): [krb5_child[47301]] [k5c_precreate_ccache] (0x4000): [RID#55] Recreating ccache * (2025-11-23 8:09:49): [krb5_child[47301]] [k5c_setup_fast] (0x0100): [RID#55] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:49): [krb5_child[47301]] [find_principal_in_keytab] (0x4000): [RID#55] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:49): [krb5_child[47301]] [match_principal] (0x1000): [RID#55] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:49): [krb5_child[47301]] [check_fast_ccache] (0x0200): [RID#55] FAST TGT is still valid. * (2025-11-23 8:09:49): [krb5_child[47301]] [become_user] (0x0200): [RID#55] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:49): [krb5_child[47301]] [main] (0x2000): [RID#55] Running as [1827200000][1827200000]. * (2025-11-23 8:09:49): [krb5_child[47301]] [set_lifetime_options] (0x0100): [RID#55] No specific renewable lifetime requested. * (2025-11-23 8:09:49): [krb5_child[47301]] [set_lifetime_options] (0x0100): [RID#55] No specific lifetime requested. * (2025-11-23 8:09:49): [krb5_child[47301]] [set_canonicalize_option] (0x0100): [RID#55] Canonicalization is set to [true] * (2025-11-23 8:09:49): [krb5_child[47301]] [main] (0x0400): [RID#55] Will perform auth * (2025-11-23 8:09:49): [krb5_child[47301]] [main] (0x0400): [RID#55] Will perform online auth * (2025-11-23 8:09:49): [krb5_child[47301]] [tgt_req_child] (0x1000): [RID#55] Attempting to get a TGT * (2025-11-23 8:09:49): [krb5_child[47301]] [get_and_save_tgt] (0x0400): [RID#55] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:49): [krb5_child[47301]] [get_and_save_tgt] (0x0020): [RID#55] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:49): [krb5_child[47301]] [map_krb5_error] (0x0020): [RID#55] 2138: [-1765328366][Client's credentials have been revoked] (2025-11-23 8:09:53): [krb5_child[47303]] [get_and_save_tgt] (0x0020): [RID#57] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:53): [krb5_child[47303]] [main] (0x0400): [RID#57] krb5_child started. * (2025-11-23 8:09:53): [krb5_child[47303]] [unpack_buffer] (0x1000): [RID#57] total buffer size: [97] * (2025-11-23 8:09:53): [krb5_child[47303]] [unpack_buffer] (0x0100): [RID#57] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:53): [krb5_child[47303]] [unpack_buffer] (0x2000): [RID#57] No old ccache * (2025-11-23 8:09:53): [krb5_child[47303]] [unpack_buffer] (0x0100): [RID#57] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:53): [krb5_child[47303]] [k5c_precreate_ccache] (0x4000): [RID#57] Recreating ccache * (2025-11-23 8:09:53): [krb5_child[47303]] [k5c_setup_fast] (0x0100): [RID#57] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:53): [krb5_child[47303]] [find_principal_in_keytab] (0x4000): [RID#57] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:53): [krb5_child[47303]] [match_principal] (0x1000): [RID#57] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:53): [krb5_child[47303]] [check_fast_ccache] (0x0200): [RID#57] FAST TGT is still valid. * (2025-11-23 8:09:53): [krb5_child[47303]] [become_user] (0x0200): [RID#57] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:53): [krb5_child[47303]] [main] (0x2000): [RID#57] Running as [1827200000][1827200000]. * (2025-11-23 8:09:53): [krb5_child[47303]] [set_lifetime_options] (0x0100): [RID#57] No specific renewable lifetime requested. * (2025-11-23 8:09:53): [krb5_child[47303]] [set_lifetime_options] (0x0100): [RID#57] No specific lifetime requested. * (2025-11-23 8:09:53): [krb5_child[47303]] [set_canonicalize_option] (0x0100): [RID#57] Canonicalization is set to [true] * (2025-11-23 8:09:53): [krb5_child[47303]] [main] (0x0400): [RID#57] Will perform auth * (2025-11-23 8:09:53): [krb5_child[47303]] [main] (0x0400): [RID#57] Will perform online auth * (2025-11-23 8:09:53): [krb5_child[47303]] [tgt_req_child] (0x1000): [RID#57] Attempting to get a TGT * (2025-11-23 8:09:53): [krb5_child[47303]] [get_and_save_tgt] (0x0400): [RID#57] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:53): [krb5_child[47303]] [get_and_save_tgt] (0x0020): [RID#57] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:53): [krb5_child[47303]] [map_krb5_error] (0x0020): [RID#57] 2138: [-1765328366][Client's credentials have been revoked] (2025-11-23 8:09:57): [krb5_child[47305]] [get_and_save_tgt] (0x0020): [RID#61] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:57): [krb5_child[47305]] [main] (0x0400): [RID#61] krb5_child started. * (2025-11-23 8:09:57): [krb5_child[47305]] [unpack_buffer] (0x1000): [RID#61] total buffer size: [108] * (2025-11-23 8:09:57): [krb5_child[47305]] [unpack_buffer] (0x0100): [RID#61] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:57): [krb5_child[47305]] [unpack_buffer] (0x2000): [RID#61] No old ccache * (2025-11-23 8:09:57): [krb5_child[47305]] [unpack_buffer] (0x0100): [RID#61] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:57): [krb5_child[47305]] [k5c_precreate_ccache] (0x4000): [RID#61] Recreating ccache * (2025-11-23 8:09:57): [krb5_child[47305]] [k5c_setup_fast] (0x0100): [RID#61] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:57): [krb5_child[47305]] [find_principal_in_keytab] (0x4000): [RID#61] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:57): [krb5_child[47305]] [match_principal] (0x1000): [RID#61] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:57): [krb5_child[47305]] [check_fast_ccache] (0x0200): [RID#61] FAST TGT is still valid. * (2025-11-23 8:09:57): [krb5_child[47305]] [become_user] (0x0200): [RID#61] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:57): [krb5_child[47305]] [main] (0x2000): [RID#61] Running as [1827200000][1827200000]. * (2025-11-23 8:09:57): [krb5_child[47305]] [set_lifetime_options] (0x0100): [RID#61] No specific renewable lifetime requested. * (2025-11-23 8:09:57): [krb5_child[47305]] [set_lifetime_options] (0x0100): [RID#61] No specific lifetime requested. * (2025-11-23 8:09:57): [krb5_child[47305]] [set_canonicalize_option] (0x0100): [RID#61] Canonicalization is set to [true] * (2025-11-23 8:09:57): [krb5_child[47305]] [main] (0x0400): [RID#61] Will perform auth * (2025-11-23 8:09:57): [krb5_child[47305]] [main] (0x0400): [RID#61] Will perform online auth * (2025-11-23 8:09:57): [krb5_child[47305]] [tgt_req_child] (0x1000): [RID#61] Attempting to get a TGT * (2025-11-23 8:09:57): [krb5_child[47305]] [get_and_save_tgt] (0x0400): [RID#61] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:57): [krb5_child[47305]] [get_and_save_tgt] (0x0020): [RID#61] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:57): [krb5_child[47305]] [map_krb5_error] (0x0020): [RID#61] 2138: [-1765328366][Client's credentials have been revoked] (2025-11-23 8:09:59): [krb5_child[47307]] [get_and_save_tgt] (0x0020): [RID#63] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-11-23 8:09:59): [krb5_child[47307]] [main] (0x0400): [RID#63] krb5_child started. * (2025-11-23 8:09:59): [krb5_child[47307]] [unpack_buffer] (0x1000): [RID#63] total buffer size: [110] * (2025-11-23 8:09:59): [krb5_child[47307]] [unpack_buffer] (0x0100): [RID#63] cmd [241 (auth)] uid [1827200000] gid [1827200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-11-23 8:09:59): [krb5_child[47307]] [unpack_buffer] (0x2000): [RID#63] No old ccache * (2025-11-23 8:09:59): [krb5_child[47307]] [unpack_buffer] (0x0100): [RID#63] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-11-23 8:09:59): [krb5_child[47307]] [k5c_precreate_ccache] (0x4000): [RID#63] Recreating ccache * (2025-11-23 8:09:59): [krb5_child[47307]] [k5c_setup_fast] (0x0100): [RID#63] Fast principal is set to [host/np0005532603.ooo.test@OOO.TEST] * (2025-11-23 8:09:59): [krb5_child[47307]] [find_principal_in_keytab] (0x4000): [RID#63] Trying to find principal host/np0005532603.ooo.test@OOO.TEST in keytab. * (2025-11-23 8:09:59): [krb5_child[47307]] [match_principal] (0x1000): [RID#63] Principal matched to the sample (host/np0005532603.ooo.test@OOO.TEST). * (2025-11-23 8:09:59): [krb5_child[47307]] [check_fast_ccache] (0x0200): [RID#63] FAST TGT is still valid. * (2025-11-23 8:09:59): [krb5_child[47307]] [become_user] (0x0200): [RID#63] Trying to become user [1827200000][1827200000]. * (2025-11-23 8:09:59): [krb5_child[47307]] [main] (0x2000): [RID#63] Running as [1827200000][1827200000]. * (2025-11-23 8:09:59): [krb5_child[47307]] [set_lifetime_options] (0x0100): [RID#63] No specific renewable lifetime requested. * (2025-11-23 8:09:59): [krb5_child[47307]] [set_lifetime_options] (0x0100): [RID#63] No specific lifetime requested. * (2025-11-23 8:09:59): [krb5_child[47307]] [set_canonicalize_option] (0x0100): [RID#63] Canonicalization is set to [true] * (2025-11-23 8:09:59): [krb5_child[47307]] [main] (0x0400): [RID#63] Will perform auth * (2025-11-23 8:09:59): [krb5_child[47307]] [main] (0x0400): [RID#63] Will perform online auth * (2025-11-23 8:09:59): [krb5_child[47307]] [tgt_req_child] (0x1000): [RID#63] Attempting to get a TGT * (2025-11-23 8:09:59): [krb5_child[47307]] [get_and_save_tgt] (0x0400): [RID#63] Attempting kinit for realm [OOO.TEST] * (2025-11-23 8:09:59): [krb5_child[47307]] [get_and_save_tgt] (0x0020): [RID#63] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-11-23 8:09:59): [krb5_child[47307]] [map_krb5_error] (0x0020): [RID#63] 2138: [-1765328366][Client's credentials have been revoked]