(2025-12-16 8:19:40): [krb5_child[49164]] [get_and_save_tgt] (0x0020): [RID#19] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-16 8:19:40): [krb5_child[49164]] [main] (0x0400): [RID#19] krb5_child started. * (2025-12-16 8:19:40): [krb5_child[49164]] [unpack_buffer] (0x1000): [RID#19] total buffer size: [92] * (2025-12-16 8:19:40): [krb5_child[49164]] [unpack_buffer] (0x0100): [RID#19] cmd [241 (auth)] uid [1763800000] gid [1763800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-16 8:19:40): [krb5_child[49164]] [unpack_buffer] (0x2000): [RID#19] No old ccache * (2025-12-16 8:19:40): [krb5_child[49164]] [unpack_buffer] (0x0100): [RID#19] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-16 8:19:40): [krb5_child[49164]] [k5c_precreate_ccache] (0x4000): [RID#19] Recreating ccache * (2025-12-16 8:19:40): [krb5_child[49164]] [k5c_setup_fast] (0x0100): [RID#19] Fast principal is set to [host/np0005561304.ooo.test@OOO.TEST] * (2025-12-16 8:19:40): [krb5_child[49164]] [find_principal_in_keytab] (0x4000): [RID#19] Trying to find principal host/np0005561304.ooo.test@OOO.TEST in keytab. * (2025-12-16 8:19:40): [krb5_child[49164]] [match_principal] (0x1000): [RID#19] Principal matched to the sample (host/np0005561304.ooo.test@OOO.TEST). * (2025-12-16 8:19:40): [krb5_child[49164]] [check_fast_ccache] (0x0200): [RID#19] FAST TGT is still valid. * (2025-12-16 8:19:40): [krb5_child[49164]] [become_user] (0x0200): [RID#19] Trying to become user [1763800000][1763800000]. * (2025-12-16 8:19:40): [krb5_child[49164]] [main] (0x2000): [RID#19] Running as [1763800000][1763800000]. * (2025-12-16 8:19:40): [krb5_child[49164]] [set_lifetime_options] (0x0100): [RID#19] No specific renewable lifetime requested. * (2025-12-16 8:19:40): [krb5_child[49164]] [set_lifetime_options] (0x0100): [RID#19] No specific lifetime requested. * (2025-12-16 8:19:40): [krb5_child[49164]] [set_canonicalize_option] (0x0100): [RID#19] Canonicalization is set to [true] * (2025-12-16 8:19:40): [krb5_child[49164]] [main] (0x0400): [RID#19] Will perform auth * (2025-12-16 8:19:40): [krb5_child[49164]] [main] (0x0400): [RID#19] Will perform online auth * (2025-12-16 8:19:40): [krb5_child[49164]] [tgt_req_child] (0x1000): [RID#19] Attempting to get a TGT * (2025-12-16 8:19:40): [krb5_child[49164]] [get_and_save_tgt] (0x0400): [RID#19] Attempting kinit for realm [OOO.TEST] * (2025-12-16 8:19:40): [krb5_child[49164]] [sss_krb5_responder] (0x4000): [RID#19] Got question [password]. * (2025-12-16 8:19:40): [krb5_child[49164]] [get_and_save_tgt] (0x0020): [RID#19] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-16 8:19:40): [krb5_child[49164]] [map_krb5_error] (0x0020): [RID#19] 2138: [-1765328360][Preauthentication failed] (2025-12-16 8:32:53): [krb5_child[65285]] [get_and_save_tgt] (0x0020): [RID#34] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-16 8:32:53): [krb5_child[65285]] [main] (0x0400): [RID#34] krb5_child started. * (2025-12-16 8:32:53): [krb5_child[65285]] [unpack_buffer] (0x1000): [RID#34] total buffer size: [97] * (2025-12-16 8:32:53): [krb5_child[65285]] [unpack_buffer] (0x0100): [RID#34] cmd [241 (auth)] uid [1763800000] gid [1763800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-16 8:32:53): [krb5_child[65285]] [unpack_buffer] (0x2000): [RID#34] No old ccache * (2025-12-16 8:32:53): [krb5_child[65285]] [unpack_buffer] (0x0100): [RID#34] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-16 8:32:53): [krb5_child[65285]] [k5c_precreate_ccache] (0x4000): [RID#34] Recreating ccache * (2025-12-16 8:32:53): [krb5_child[65285]] [k5c_setup_fast] (0x0100): [RID#34] Fast principal is set to [host/np0005561304.ooo.test@OOO.TEST] * (2025-12-16 8:32:53): [krb5_child[65285]] [find_principal_in_keytab] (0x4000): [RID#34] Trying to find principal host/np0005561304.ooo.test@OOO.TEST in keytab. * (2025-12-16 8:32:53): [krb5_child[65285]] [match_principal] (0x1000): [RID#34] Principal matched to the sample (host/np0005561304.ooo.test@OOO.TEST). * (2025-12-16 8:32:53): [krb5_child[65285]] [check_fast_ccache] (0x0200): [RID#34] FAST TGT is still valid. * (2025-12-16 8:32:53): [krb5_child[65285]] [become_user] (0x0200): [RID#34] Trying to become user [1763800000][1763800000]. * (2025-12-16 8:32:53): [krb5_child[65285]] [main] (0x2000): [RID#34] Running as [1763800000][1763800000]. * (2025-12-16 8:32:53): [krb5_child[65285]] [set_lifetime_options] (0x0100): [RID#34] No specific renewable lifetime requested. * (2025-12-16 8:32:53): [krb5_child[65285]] [set_lifetime_options] (0x0100): [RID#34] No specific lifetime requested. * (2025-12-16 8:32:53): [krb5_child[65285]] [set_canonicalize_option] (0x0100): [RID#34] Canonicalization is set to [true] * (2025-12-16 8:32:53): [krb5_child[65285]] [main] (0x0400): [RID#34] Will perform auth * (2025-12-16 8:32:53): [krb5_child[65285]] [main] (0x0400): [RID#34] Will perform online auth * (2025-12-16 8:32:53): [krb5_child[65285]] [tgt_req_child] (0x1000): [RID#34] Attempting to get a TGT * (2025-12-16 8:32:53): [krb5_child[65285]] [get_and_save_tgt] (0x0400): [RID#34] Attempting kinit for realm [OOO.TEST] * (2025-12-16 8:32:53): [krb5_child[65285]] [sss_krb5_responder] (0x4000): [RID#34] Got question [password]. * (2025-12-16 8:32:53): [krb5_child[65285]] [get_and_save_tgt] (0x0020): [RID#34] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-16 8:32:53): [krb5_child[65285]] [map_krb5_error] (0x0020): [RID#34] 2138: [-1765328360][Preauthentication failed] (2025-12-16 8:43:41): [krb5_child[70667]] [get_and_save_tgt] (0x0020): [RID#43] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-16 8:43:41): [krb5_child[70667]] [main] (0x0400): [RID#43] krb5_child started. * (2025-12-16 8:43:41): [krb5_child[70667]] [unpack_buffer] (0x1000): [RID#43] total buffer size: [97] * (2025-12-16 8:43:41): [krb5_child[70667]] [unpack_buffer] (0x0100): [RID#43] cmd [241 (auth)] uid [1763800000] gid [1763800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-16 8:43:41): [krb5_child[70667]] [unpack_buffer] (0x2000): [RID#43] No old ccache * (2025-12-16 8:43:41): [krb5_child[70667]] [unpack_buffer] (0x0100): [RID#43] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-16 8:43:41): [krb5_child[70667]] [k5c_precreate_ccache] (0x4000): [RID#43] Recreating ccache * (2025-12-16 8:43:41): [krb5_child[70667]] [k5c_setup_fast] (0x0100): [RID#43] Fast principal is set to [host/np0005561304.ooo.test@OOO.TEST] * (2025-12-16 8:43:41): [krb5_child[70667]] [find_principal_in_keytab] (0x4000): [RID#43] Trying to find principal host/np0005561304.ooo.test@OOO.TEST in keytab. * (2025-12-16 8:43:41): [krb5_child[70667]] [match_principal] (0x1000): [RID#43] Principal matched to the sample (host/np0005561304.ooo.test@OOO.TEST). * (2025-12-16 8:43:41): [krb5_child[70667]] [check_fast_ccache] (0x0200): [RID#43] FAST TGT is still valid. * (2025-12-16 8:43:41): [krb5_child[70667]] [become_user] (0x0200): [RID#43] Trying to become user [1763800000][1763800000]. * (2025-12-16 8:43:41): [krb5_child[70667]] [main] (0x2000): [RID#43] Running as [1763800000][1763800000]. * (2025-12-16 8:43:41): [krb5_child[70667]] [set_lifetime_options] (0x0100): [RID#43] No specific renewable lifetime requested. * (2025-12-16 8:43:41): [krb5_child[70667]] [set_lifetime_options] (0x0100): [RID#43] No specific lifetime requested. * (2025-12-16 8:43:41): [krb5_child[70667]] [set_canonicalize_option] (0x0100): [RID#43] Canonicalization is set to [true] * (2025-12-16 8:43:41): [krb5_child[70667]] [main] (0x0400): [RID#43] Will perform auth * (2025-12-16 8:43:41): [krb5_child[70667]] [main] (0x0400): [RID#43] Will perform online auth * (2025-12-16 8:43:41): [krb5_child[70667]] [tgt_req_child] (0x1000): [RID#43] Attempting to get a TGT * (2025-12-16 8:43:41): [krb5_child[70667]] [get_and_save_tgt] (0x0400): [RID#43] Attempting kinit for realm [OOO.TEST] * (2025-12-16 8:43:41): [krb5_child[70667]] [sss_krb5_responder] (0x4000): [RID#43] Got question [password]. * (2025-12-16 8:43:41): [krb5_child[70667]] [get_and_save_tgt] (0x0020): [RID#43] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-16 8:43:41): [krb5_child[70667]] [map_krb5_error] (0x0020): [RID#43] 2138: [-1765328360][Preauthentication failed] (2025-12-16 8:47:46): [krb5_child[72560]] [get_and_save_tgt] (0x0020): [RID#48] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2025-12-16 8:47:46): [krb5_child[72560]] [main] (0x0400): [RID#48] krb5_child started. * (2025-12-16 8:47:46): [krb5_child[72560]] [unpack_buffer] (0x1000): [RID#48] total buffer size: [96] * (2025-12-16 8:47:46): [krb5_child[72560]] [unpack_buffer] (0x0100): [RID#48] cmd [241 (auth)] uid [1763800000] gid [1763800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2025-12-16 8:47:46): [krb5_child[72560]] [unpack_buffer] (0x2000): [RID#48] No old ccache * (2025-12-16 8:47:46): [krb5_child[72560]] [unpack_buffer] (0x0100): [RID#48] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2025-12-16 8:47:46): [krb5_child[72560]] [k5c_precreate_ccache] (0x4000): [RID#48] Recreating ccache * (2025-12-16 8:47:46): [krb5_child[72560]] [k5c_setup_fast] (0x0100): [RID#48] Fast principal is set to [host/np0005561304.ooo.test@OOO.TEST] * (2025-12-16 8:47:46): [krb5_child[72560]] [find_principal_in_keytab] (0x4000): [RID#48] Trying to find principal host/np0005561304.ooo.test@OOO.TEST in keytab. * (2025-12-16 8:47:46): [krb5_child[72560]] [match_principal] (0x1000): [RID#48] Principal matched to the sample (host/np0005561304.ooo.test@OOO.TEST). * (2025-12-16 8:47:46): [krb5_child[72560]] [check_fast_ccache] (0x0200): [RID#48] FAST TGT is still valid. * (2025-12-16 8:47:46): [krb5_child[72560]] [become_user] (0x0200): [RID#48] Trying to become user [1763800000][1763800000]. * (2025-12-16 8:47:46): [krb5_child[72560]] [main] (0x2000): [RID#48] Running as [1763800000][1763800000]. * (2025-12-16 8:47:46): [krb5_child[72560]] [set_lifetime_options] (0x0100): [RID#48] No specific renewable lifetime requested. * (2025-12-16 8:47:46): [krb5_child[72560]] [set_lifetime_options] (0x0100): [RID#48] No specific lifetime requested. * (2025-12-16 8:47:46): [krb5_child[72560]] [set_canonicalize_option] (0x0100): [RID#48] Canonicalization is set to [true] * (2025-12-16 8:47:46): [krb5_child[72560]] [main] (0x0400): [RID#48] Will perform auth * (2025-12-16 8:47:46): [krb5_child[72560]] [main] (0x0400): [RID#48] Will perform online auth * (2025-12-16 8:47:46): [krb5_child[72560]] [tgt_req_child] (0x1000): [RID#48] Attempting to get a TGT * (2025-12-16 8:47:46): [krb5_child[72560]] [get_and_save_tgt] (0x0400): [RID#48] Attempting kinit for realm [OOO.TEST] * (2025-12-16 8:47:46): [krb5_child[72560]] [sss_krb5_responder] (0x4000): [RID#48] Got question [password]. * (2025-12-16 8:47:46): [krb5_child[72560]] [get_and_save_tgt] (0x0020): [RID#48] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2025-12-16 8:47:46): [krb5_child[72560]] [map_krb5_error] (0x0020): [RID#48] 2138: [-1765328360][Preauthentication failed]