(2026-03-20 8:03:00): [krb5_child[43142]] [get_and_save_tgt] (0x0020): [RID#17] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-20 8:03:00): [krb5_child[43142]] [main] (0x0400): [RID#17] krb5_child started. * (2026-03-20 8:03:00): [krb5_child[43142]] [unpack_buffer] (0x1000): [RID#17] total buffer size: [100] * (2026-03-20 8:03:00): [krb5_child[43142]] [unpack_buffer] (0x0100): [RID#17] cmd [241 (auth)] uid [879400000] gid [879400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-20 8:03:00): [krb5_child[43142]] [unpack_buffer] (0x2000): [RID#17] No old ccache * (2026-03-20 8:03:00): [krb5_child[43142]] [unpack_buffer] (0x0100): [RID#17] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-20 8:03:00): [krb5_child[43142]] [k5c_precreate_ccache] (0x4000): [RID#17] Recreating ccache * (2026-03-20 8:03:00): [krb5_child[43142]] [k5c_setup_fast] (0x0100): [RID#17] Fast principal is set to [host/np0005652777.ooo.test@OOO.TEST] * (2026-03-20 8:03:00): [krb5_child[43142]] [find_principal_in_keytab] (0x4000): [RID#17] Trying to find principal host/np0005652777.ooo.test@OOO.TEST in keytab. * (2026-03-20 8:03:00): [krb5_child[43142]] [match_principal] (0x1000): [RID#17] Principal matched to the sample (host/np0005652777.ooo.test@OOO.TEST). * (2026-03-20 8:03:00): [krb5_child[43142]] [check_fast_ccache] (0x0200): [RID#17] FAST TGT is still valid. * (2026-03-20 8:03:00): [krb5_child[43142]] [become_user] (0x0200): [RID#17] Trying to become user [879400000][879400000]. * (2026-03-20 8:03:00): [krb5_child[43142]] [main] (0x2000): [RID#17] Running as [879400000][879400000]. * (2026-03-20 8:03:00): [krb5_child[43142]] [set_lifetime_options] (0x0100): [RID#17] No specific renewable lifetime requested. * (2026-03-20 8:03:00): [krb5_child[43142]] [set_lifetime_options] (0x0100): [RID#17] No specific lifetime requested. * (2026-03-20 8:03:00): [krb5_child[43142]] [set_canonicalize_option] (0x0100): [RID#17] Canonicalization is set to [true] * (2026-03-20 8:03:00): [krb5_child[43142]] [main] (0x0400): [RID#17] Will perform auth * (2026-03-20 8:03:00): [krb5_child[43142]] [main] (0x0400): [RID#17] Will perform online auth * (2026-03-20 8:03:00): [krb5_child[43142]] [tgt_req_child] (0x1000): [RID#17] Attempting to get a TGT * (2026-03-20 8:03:00): [krb5_child[43142]] [get_and_save_tgt] (0x0400): [RID#17] Attempting kinit for realm [OOO.TEST] * (2026-03-20 8:03:00): [krb5_child[43142]] [sss_krb5_responder] (0x4000): [RID#17] Got question [password]. * (2026-03-20 8:03:00): [krb5_child[43142]] [get_and_save_tgt] (0x0020): [RID#17] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-20 8:03:00): [krb5_child[43142]] [map_krb5_error] (0x0020): [RID#17] 2138: [-1765328360][Preauthentication failed] (2026-03-20 8:06:47): [krb5_child[48333]] [get_and_save_tgt] (0x0020): [RID#39] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-20 8:06:47): [krb5_child[48333]] [main] (0x0400): [RID#39] krb5_child started. * (2026-03-20 8:06:47): [krb5_child[48333]] [unpack_buffer] (0x1000): [RID#39] total buffer size: [96] * (2026-03-20 8:06:47): [krb5_child[48333]] [unpack_buffer] (0x0100): [RID#39] cmd [241 (auth)] uid [879400000] gid [879400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-20 8:06:47): [krb5_child[48333]] [unpack_buffer] (0x2000): [RID#39] No old ccache * (2026-03-20 8:06:47): [krb5_child[48333]] [unpack_buffer] (0x0100): [RID#39] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-20 8:06:47): [krb5_child[48333]] [k5c_precreate_ccache] (0x4000): [RID#39] Recreating ccache * (2026-03-20 8:06:47): [krb5_child[48333]] [k5c_setup_fast] (0x0100): [RID#39] Fast principal is set to [host/np0005652777.ooo.test@OOO.TEST] * (2026-03-20 8:06:47): [krb5_child[48333]] [find_principal_in_keytab] (0x4000): [RID#39] Trying to find principal host/np0005652777.ooo.test@OOO.TEST in keytab. * (2026-03-20 8:06:47): [krb5_child[48333]] [match_principal] (0x1000): [RID#39] Principal matched to the sample (host/np0005652777.ooo.test@OOO.TEST). * (2026-03-20 8:06:47): [krb5_child[48333]] [check_fast_ccache] (0x0200): [RID#39] FAST TGT is still valid. * (2026-03-20 8:06:47): [krb5_child[48333]] [become_user] (0x0200): [RID#39] Trying to become user [879400000][879400000]. * (2026-03-20 8:06:47): [krb5_child[48333]] [main] (0x2000): [RID#39] Running as [879400000][879400000]. * (2026-03-20 8:06:47): [krb5_child[48333]] [set_lifetime_options] (0x0100): [RID#39] No specific renewable lifetime requested. * (2026-03-20 8:06:47): [krb5_child[48333]] [set_lifetime_options] (0x0100): [RID#39] No specific lifetime requested. * (2026-03-20 8:06:47): [krb5_child[48333]] [set_canonicalize_option] (0x0100): [RID#39] Canonicalization is set to [true] * (2026-03-20 8:06:47): [krb5_child[48333]] [main] (0x0400): [RID#39] Will perform auth * (2026-03-20 8:06:47): [krb5_child[48333]] [main] (0x0400): [RID#39] Will perform online auth * (2026-03-20 8:06:47): [krb5_child[48333]] [tgt_req_child] (0x1000): [RID#39] Attempting to get a TGT * (2026-03-20 8:06:47): [krb5_child[48333]] [get_and_save_tgt] (0x0400): [RID#39] Attempting kinit for realm [OOO.TEST] * (2026-03-20 8:06:47): [krb5_child[48333]] [sss_krb5_responder] (0x4000): [RID#39] Got question [password]. * (2026-03-20 8:06:47): [krb5_child[48333]] [get_and_save_tgt] (0x0020): [RID#39] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-20 8:06:47): [krb5_child[48333]] [map_krb5_error] (0x0020): [RID#39] 2138: [-1765328360][Preauthentication failed] (2026-03-20 8:10:16): [krb5_child[62125]] [get_and_save_tgt] (0x0020): [RID#59] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-20 8:10:16): [krb5_child[62125]] [main] (0x0400): [RID#59] krb5_child started. * (2026-03-20 8:10:16): [krb5_child[62125]] [unpack_buffer] (0x1000): [RID#59] total buffer size: [95] * (2026-03-20 8:10:16): [krb5_child[62125]] [unpack_buffer] (0x0100): [RID#59] cmd [241 (auth)] uid [879400000] gid [879400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-20 8:10:16): [krb5_child[62125]] [unpack_buffer] (0x2000): [RID#59] No old ccache * (2026-03-20 8:10:16): [krb5_child[62125]] [unpack_buffer] (0x0100): [RID#59] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-20 8:10:16): [krb5_child[62125]] [k5c_precreate_ccache] (0x4000): [RID#59] Recreating ccache * (2026-03-20 8:10:16): [krb5_child[62125]] [k5c_setup_fast] (0x0100): [RID#59] Fast principal is set to [host/np0005652777.ooo.test@OOO.TEST] * (2026-03-20 8:10:16): [krb5_child[62125]] [find_principal_in_keytab] (0x4000): [RID#59] Trying to find principal host/np0005652777.ooo.test@OOO.TEST in keytab. * (2026-03-20 8:10:16): [krb5_child[62125]] [match_principal] (0x1000): [RID#59] Principal matched to the sample (host/np0005652777.ooo.test@OOO.TEST). * (2026-03-20 8:10:16): [krb5_child[62125]] [check_fast_ccache] (0x0200): [RID#59] FAST TGT is still valid. * (2026-03-20 8:10:16): [krb5_child[62125]] [become_user] (0x0200): [RID#59] Trying to become user [879400000][879400000]. * (2026-03-20 8:10:16): [krb5_child[62125]] [main] (0x2000): [RID#59] Running as [879400000][879400000]. * (2026-03-20 8:10:16): [krb5_child[62125]] [set_lifetime_options] (0x0100): [RID#59] No specific renewable lifetime requested. * (2026-03-20 8:10:16): [krb5_child[62125]] [set_lifetime_options] (0x0100): [RID#59] No specific lifetime requested. * (2026-03-20 8:10:16): [krb5_child[62125]] [set_canonicalize_option] (0x0100): [RID#59] Canonicalization is set to [true] * (2026-03-20 8:10:16): [krb5_child[62125]] [main] (0x0400): [RID#59] Will perform auth * (2026-03-20 8:10:16): [krb5_child[62125]] [main] (0x0400): [RID#59] Will perform online auth * (2026-03-20 8:10:16): [krb5_child[62125]] [tgt_req_child] (0x1000): [RID#59] Attempting to get a TGT * (2026-03-20 8:10:16): [krb5_child[62125]] [get_and_save_tgt] (0x0400): [RID#59] Attempting kinit for realm [OOO.TEST] * (2026-03-20 8:10:16): [krb5_child[62125]] [sss_krb5_responder] (0x4000): [RID#59] Got question [password]. * (2026-03-20 8:10:16): [krb5_child[62125]] [get_and_save_tgt] (0x0020): [RID#59] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-20 8:10:16): [krb5_child[62125]] [map_krb5_error] (0x0020): [RID#59] 2138: [-1765328360][Preauthentication failed] (2026-03-20 8:31:35): [krb5_child[183825]] [get_and_save_tgt] (0x0020): [RID#125] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-20 8:31:35): [krb5_child[183825]] [main] (0x0400): [RID#125] krb5_child started. * (2026-03-20 8:31:35): [krb5_child[183825]] [unpack_buffer] (0x1000): [RID#125] total buffer size: [99] * (2026-03-20 8:31:35): [krb5_child[183825]] [unpack_buffer] (0x0100): [RID#125] cmd [241 (auth)] uid [879400000] gid [879400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-20 8:31:35): [krb5_child[183825]] [unpack_buffer] (0x2000): [RID#125] No old ccache * (2026-03-20 8:31:35): [krb5_child[183825]] [unpack_buffer] (0x0100): [RID#125] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-20 8:31:35): [krb5_child[183825]] [k5c_precreate_ccache] (0x4000): [RID#125] Recreating ccache * (2026-03-20 8:31:35): [krb5_child[183825]] [k5c_setup_fast] (0x0100): [RID#125] Fast principal is set to [host/np0005652777.ooo.test@OOO.TEST] * (2026-03-20 8:31:35): [krb5_child[183825]] [find_principal_in_keytab] (0x4000): [RID#125] Trying to find principal host/np0005652777.ooo.test@OOO.TEST in keytab. * (2026-03-20 8:31:35): [krb5_child[183825]] [match_principal] (0x1000): [RID#125] Principal matched to the sample (host/np0005652777.ooo.test@OOO.TEST). * (2026-03-20 8:31:35): [krb5_child[183825]] [check_fast_ccache] (0x0200): [RID#125] FAST TGT is still valid. * (2026-03-20 8:31:35): [krb5_child[183825]] [become_user] (0x0200): [RID#125] Trying to become user [879400000][879400000]. * (2026-03-20 8:31:35): [krb5_child[183825]] [main] (0x2000): [RID#125] Running as [879400000][879400000]. * (2026-03-20 8:31:35): [krb5_child[183825]] [set_lifetime_options] (0x0100): [RID#125] No specific renewable lifetime requested. * (2026-03-20 8:31:35): [krb5_child[183825]] [set_lifetime_options] (0x0100): [RID#125] No specific lifetime requested. * (2026-03-20 8:31:35): [krb5_child[183825]] [set_canonicalize_option] (0x0100): [RID#125] Canonicalization is set to [true] * (2026-03-20 8:31:35): [krb5_child[183825]] [main] (0x0400): [RID#125] Will perform auth * (2026-03-20 8:31:35): [krb5_child[183825]] [main] (0x0400): [RID#125] Will perform online auth * (2026-03-20 8:31:35): [krb5_child[183825]] [tgt_req_child] (0x1000): [RID#125] Attempting to get a TGT * (2026-03-20 8:31:35): [krb5_child[183825]] [get_and_save_tgt] (0x0400): [RID#125] Attempting kinit for realm [OOO.TEST] * (2026-03-20 8:31:35): [krb5_child[183825]] [sss_krb5_responder] (0x4000): [RID#125] Got question [password]. * (2026-03-20 8:31:35): [krb5_child[183825]] [get_and_save_tgt] (0x0020): [RID#125] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-20 8:31:35): [krb5_child[183825]] [map_krb5_error] (0x0020): [RID#125] 2138: [-1765328360][Preauthentication failed] (2026-03-20 8:34:00): [krb5_child[196686]] [get_and_save_tgt] (0x0020): [RID#132] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-03-20 8:34:00): [krb5_child[196686]] [main] (0x0400): [RID#132] krb5_child started. * (2026-03-20 8:34:00): [krb5_child[196686]] [unpack_buffer] (0x1000): [RID#132] total buffer size: [101] * (2026-03-20 8:34:00): [krb5_child[196686]] [unpack_buffer] (0x0100): [RID#132] cmd [241 (auth)] uid [879400000] gid [879400000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-03-20 8:34:00): [krb5_child[196686]] [unpack_buffer] (0x2000): [RID#132] No old ccache * (2026-03-20 8:34:00): [krb5_child[196686]] [unpack_buffer] (0x0100): [RID#132] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-03-20 8:34:00): [krb5_child[196686]] [k5c_precreate_ccache] (0x4000): [RID#132] Recreating ccache * (2026-03-20 8:34:00): [krb5_child[196686]] [k5c_setup_fast] (0x0100): [RID#132] Fast principal is set to [host/np0005652777.ooo.test@OOO.TEST] * (2026-03-20 8:34:00): [krb5_child[196686]] [find_principal_in_keytab] (0x4000): [RID#132] Trying to find principal host/np0005652777.ooo.test@OOO.TEST in keytab. * (2026-03-20 8:34:00): [krb5_child[196686]] [match_principal] (0x1000): [RID#132] Principal matched to the sample (host/np0005652777.ooo.test@OOO.TEST). * (2026-03-20 8:34:00): [krb5_child[196686]] [check_fast_ccache] (0x0200): [RID#132] FAST TGT is still valid. * (2026-03-20 8:34:00): [krb5_child[196686]] [become_user] (0x0200): [RID#132] Trying to become user [879400000][879400000]. * (2026-03-20 8:34:00): [krb5_child[196686]] [main] (0x2000): [RID#132] Running as [879400000][879400000]. * (2026-03-20 8:34:00): [krb5_child[196686]] [set_lifetime_options] (0x0100): [RID#132] No specific renewable lifetime requested. * (2026-03-20 8:34:00): [krb5_child[196686]] [set_lifetime_options] (0x0100): [RID#132] No specific lifetime requested. * (2026-03-20 8:34:00): [krb5_child[196686]] [set_canonicalize_option] (0x0100): [RID#132] Canonicalization is set to [true] * (2026-03-20 8:34:00): [krb5_child[196686]] [main] (0x0400): [RID#132] Will perform auth * (2026-03-20 8:34:00): [krb5_child[196686]] [main] (0x0400): [RID#132] Will perform online auth * (2026-03-20 8:34:00): [krb5_child[196686]] [tgt_req_child] (0x1000): [RID#132] Attempting to get a TGT * (2026-03-20 8:34:00): [krb5_child[196686]] [get_and_save_tgt] (0x0400): [RID#132] Attempting kinit for realm [OOO.TEST] * (2026-03-20 8:34:00): [krb5_child[196686]] [sss_krb5_responder] (0x4000): [RID#132] Got question [password]. * (2026-03-20 8:34:00): [krb5_child[196686]] [get_and_save_tgt] (0x0020): [RID#132] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-03-20 8:34:00): [krb5_child[196686]] [map_krb5_error] (0x0020): [RID#132] 2138: [-1765328360][Preauthentication failed]