(2026-01-23 8:39:46): [krb5_child[39797]] [get_and_save_tgt] (0x0020): [RID#83] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:39:46): [krb5_child[39797]] [main] (0x0400): [RID#83] krb5_child started. * (2026-01-23 8:39:46): [krb5_child[39797]] [unpack_buffer] (0x1000): [RID#83] total buffer size: [96] * (2026-01-23 8:39:46): [krb5_child[39797]] [unpack_buffer] (0x0100): [RID#83] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:39:46): [krb5_child[39797]] [unpack_buffer] (0x2000): [RID#83] No old ccache * (2026-01-23 8:39:46): [krb5_child[39797]] [unpack_buffer] (0x0100): [RID#83] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:39:46): [krb5_child[39797]] [k5c_precreate_ccache] (0x4000): [RID#83] Recreating ccache * (2026-01-23 8:39:46): [krb5_child[39797]] [k5c_setup_fast] (0x0100): [RID#83] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:39:46): [krb5_child[39797]] [find_principal_in_keytab] (0x4000): [RID#83] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:39:46): [krb5_child[39797]] [match_principal] (0x1000): [RID#83] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:39:46): [krb5_child[39797]] [check_fast_ccache] (0x0200): [RID#83] FAST TGT is still valid. * (2026-01-23 8:39:46): [krb5_child[39797]] [become_user] (0x0200): [RID#83] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:39:46): [krb5_child[39797]] [main] (0x2000): [RID#83] Running as [1833000000][1833000000]. * (2026-01-23 8:39:46): [krb5_child[39797]] [set_lifetime_options] (0x0100): [RID#83] No specific renewable lifetime requested. * (2026-01-23 8:39:46): [krb5_child[39797]] [set_lifetime_options] (0x0100): [RID#83] No specific lifetime requested. * (2026-01-23 8:39:46): [krb5_child[39797]] [set_canonicalize_option] (0x0100): [RID#83] Canonicalization is set to [true] * (2026-01-23 8:39:46): [krb5_child[39797]] [main] (0x0400): [RID#83] Will perform auth * (2026-01-23 8:39:46): [krb5_child[39797]] [main] (0x0400): [RID#83] Will perform online auth * (2026-01-23 8:39:46): [krb5_child[39797]] [tgt_req_child] (0x1000): [RID#83] Attempting to get a TGT * (2026-01-23 8:39:46): [krb5_child[39797]] [get_and_save_tgt] (0x0400): [RID#83] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:39:46): [krb5_child[39797]] [sss_krb5_responder] (0x4000): [RID#83] Got question [password]. * (2026-01-23 8:39:46): [krb5_child[39797]] [get_and_save_tgt] (0x0020): [RID#83] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:39:46): [krb5_child[39797]] [map_krb5_error] (0x0020): [RID#83] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:40:56): [krb5_child[39837]] [get_and_save_tgt] (0x0020): [RID#91] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:40:56): [krb5_child[39837]] [main] (0x0400): [RID#91] krb5_child started. * (2026-01-23 8:40:56): [krb5_child[39837]] [unpack_buffer] (0x1000): [RID#91] total buffer size: [97] * (2026-01-23 8:40:56): [krb5_child[39837]] [unpack_buffer] (0x0100): [RID#91] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:40:56): [krb5_child[39837]] [unpack_buffer] (0x2000): [RID#91] No old ccache * (2026-01-23 8:40:56): [krb5_child[39837]] [unpack_buffer] (0x0100): [RID#91] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:40:56): [krb5_child[39837]] [k5c_precreate_ccache] (0x4000): [RID#91] Recreating ccache * (2026-01-23 8:40:56): [krb5_child[39837]] [k5c_setup_fast] (0x0100): [RID#91] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:40:56): [krb5_child[39837]] [find_principal_in_keytab] (0x4000): [RID#91] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:40:56): [krb5_child[39837]] [match_principal] (0x1000): [RID#91] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:40:56): [krb5_child[39837]] [check_fast_ccache] (0x0200): [RID#91] FAST TGT is still valid. * (2026-01-23 8:40:56): [krb5_child[39837]] [become_user] (0x0200): [RID#91] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:40:56): [krb5_child[39837]] [main] (0x2000): [RID#91] Running as [1833000000][1833000000]. * (2026-01-23 8:40:56): [krb5_child[39837]] [set_lifetime_options] (0x0100): [RID#91] No specific renewable lifetime requested. * (2026-01-23 8:40:56): [krb5_child[39837]] [set_lifetime_options] (0x0100): [RID#91] No specific lifetime requested. * (2026-01-23 8:40:56): [krb5_child[39837]] [set_canonicalize_option] (0x0100): [RID#91] Canonicalization is set to [true] * (2026-01-23 8:40:56): [krb5_child[39837]] [main] (0x0400): [RID#91] Will perform auth * (2026-01-23 8:40:56): [krb5_child[39837]] [main] (0x0400): [RID#91] Will perform online auth * (2026-01-23 8:40:56): [krb5_child[39837]] [tgt_req_child] (0x1000): [RID#91] Attempting to get a TGT * (2026-01-23 8:40:56): [krb5_child[39837]] [get_and_save_tgt] (0x0400): [RID#91] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:40:56): [krb5_child[39837]] [sss_krb5_responder] (0x4000): [RID#91] Got question [password]. * (2026-01-23 8:40:56): [krb5_child[39837]] [get_and_save_tgt] (0x0020): [RID#91] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:40:56): [krb5_child[39837]] [map_krb5_error] (0x0020): [RID#91] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:41:01): [krb5_child[39841]] [get_and_save_tgt] (0x0020): [RID#94] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:01): [krb5_child[39841]] [main] (0x0400): [RID#94] krb5_child started. * (2026-01-23 8:41:01): [krb5_child[39841]] [unpack_buffer] (0x1000): [RID#94] total buffer size: [97] * (2026-01-23 8:41:01): [krb5_child[39841]] [unpack_buffer] (0x0100): [RID#94] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:01): [krb5_child[39841]] [unpack_buffer] (0x2000): [RID#94] No old ccache * (2026-01-23 8:41:01): [krb5_child[39841]] [unpack_buffer] (0x0100): [RID#94] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:01): [krb5_child[39841]] [k5c_precreate_ccache] (0x4000): [RID#94] Recreating ccache * (2026-01-23 8:41:01): [krb5_child[39841]] [k5c_setup_fast] (0x0100): [RID#94] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:01): [krb5_child[39841]] [find_principal_in_keytab] (0x4000): [RID#94] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:01): [krb5_child[39841]] [match_principal] (0x1000): [RID#94] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:01): [krb5_child[39841]] [check_fast_ccache] (0x0200): [RID#94] FAST TGT is still valid. * (2026-01-23 8:41:01): [krb5_child[39841]] [become_user] (0x0200): [RID#94] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:01): [krb5_child[39841]] [main] (0x2000): [RID#94] Running as [1833000000][1833000000]. * (2026-01-23 8:41:01): [krb5_child[39841]] [set_lifetime_options] (0x0100): [RID#94] No specific renewable lifetime requested. * (2026-01-23 8:41:01): [krb5_child[39841]] [set_lifetime_options] (0x0100): [RID#94] No specific lifetime requested. * (2026-01-23 8:41:01): [krb5_child[39841]] [set_canonicalize_option] (0x0100): [RID#94] Canonicalization is set to [true] * (2026-01-23 8:41:01): [krb5_child[39841]] [main] (0x0400): [RID#94] Will perform auth * (2026-01-23 8:41:01): [krb5_child[39841]] [main] (0x0400): [RID#94] Will perform online auth * (2026-01-23 8:41:01): [krb5_child[39841]] [tgt_req_child] (0x1000): [RID#94] Attempting to get a TGT * (2026-01-23 8:41:01): [krb5_child[39841]] [get_and_save_tgt] (0x0400): [RID#94] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:01): [krb5_child[39841]] [sss_krb5_responder] (0x4000): [RID#94] Got question [password]. * (2026-01-23 8:41:01): [krb5_child[39841]] [get_and_save_tgt] (0x0020): [RID#94] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:01): [krb5_child[39841]] [map_krb5_error] (0x0020): [RID#94] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:41:04): [krb5_child[39846]] [get_and_save_tgt] (0x0020): [RID#96] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:04): [krb5_child[39846]] [main] (0x0400): [RID#96] krb5_child started. * (2026-01-23 8:41:04): [krb5_child[39846]] [unpack_buffer] (0x1000): [RID#96] total buffer size: [97] * (2026-01-23 8:41:04): [krb5_child[39846]] [unpack_buffer] (0x0100): [RID#96] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:04): [krb5_child[39846]] [unpack_buffer] (0x2000): [RID#96] No old ccache * (2026-01-23 8:41:04): [krb5_child[39846]] [unpack_buffer] (0x0100): [RID#96] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:04): [krb5_child[39846]] [k5c_precreate_ccache] (0x4000): [RID#96] Recreating ccache * (2026-01-23 8:41:04): [krb5_child[39846]] [k5c_setup_fast] (0x0100): [RID#96] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:04): [krb5_child[39846]] [find_principal_in_keytab] (0x4000): [RID#96] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:04): [krb5_child[39846]] [match_principal] (0x1000): [RID#96] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:04): [krb5_child[39846]] [check_fast_ccache] (0x0200): [RID#96] FAST TGT is still valid. * (2026-01-23 8:41:04): [krb5_child[39846]] [become_user] (0x0200): [RID#96] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:04): [krb5_child[39846]] [main] (0x2000): [RID#96] Running as [1833000000][1833000000]. * (2026-01-23 8:41:04): [krb5_child[39846]] [set_lifetime_options] (0x0100): [RID#96] No specific renewable lifetime requested. * (2026-01-23 8:41:04): [krb5_child[39846]] [set_lifetime_options] (0x0100): [RID#96] No specific lifetime requested. * (2026-01-23 8:41:04): [krb5_child[39846]] [set_canonicalize_option] (0x0100): [RID#96] Canonicalization is set to [true] * (2026-01-23 8:41:04): [krb5_child[39846]] [main] (0x0400): [RID#96] Will perform auth * (2026-01-23 8:41:04): [krb5_child[39846]] [main] (0x0400): [RID#96] Will perform online auth * (2026-01-23 8:41:04): [krb5_child[39846]] [tgt_req_child] (0x1000): [RID#96] Attempting to get a TGT * (2026-01-23 8:41:04): [krb5_child[39846]] [get_and_save_tgt] (0x0400): [RID#96] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:04): [krb5_child[39846]] [sss_krb5_responder] (0x4000): [RID#96] Got question [password]. * (2026-01-23 8:41:04): [krb5_child[39846]] [get_and_save_tgt] (0x0020): [RID#96] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:04): [krb5_child[39846]] [map_krb5_error] (0x0020): [RID#96] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:41:07): [krb5_child[39850]] [get_and_save_tgt] (0x0020): [RID#99] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:07): [krb5_child[39850]] [main] (0x0400): [RID#99] krb5_child started. * (2026-01-23 8:41:07): [krb5_child[39850]] [unpack_buffer] (0x1000): [RID#99] total buffer size: [96] * (2026-01-23 8:41:07): [krb5_child[39850]] [unpack_buffer] (0x0100): [RID#99] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:07): [krb5_child[39850]] [unpack_buffer] (0x2000): [RID#99] No old ccache * (2026-01-23 8:41:07): [krb5_child[39850]] [unpack_buffer] (0x0100): [RID#99] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:07): [krb5_child[39850]] [k5c_precreate_ccache] (0x4000): [RID#99] Recreating ccache * (2026-01-23 8:41:07): [krb5_child[39850]] [k5c_setup_fast] (0x0100): [RID#99] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:07): [krb5_child[39850]] [find_principal_in_keytab] (0x4000): [RID#99] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:07): [krb5_child[39850]] [match_principal] (0x1000): [RID#99] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:07): [krb5_child[39850]] [check_fast_ccache] (0x0200): [RID#99] FAST TGT is still valid. * (2026-01-23 8:41:07): [krb5_child[39850]] [become_user] (0x0200): [RID#99] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:07): [krb5_child[39850]] [main] (0x2000): [RID#99] Running as [1833000000][1833000000]. * (2026-01-23 8:41:07): [krb5_child[39850]] [set_lifetime_options] (0x0100): [RID#99] No specific renewable lifetime requested. * (2026-01-23 8:41:07): [krb5_child[39850]] [set_lifetime_options] (0x0100): [RID#99] No specific lifetime requested. * (2026-01-23 8:41:07): [krb5_child[39850]] [set_canonicalize_option] (0x0100): [RID#99] Canonicalization is set to [true] * (2026-01-23 8:41:07): [krb5_child[39850]] [main] (0x0400): [RID#99] Will perform auth * (2026-01-23 8:41:07): [krb5_child[39850]] [main] (0x0400): [RID#99] Will perform online auth * (2026-01-23 8:41:07): [krb5_child[39850]] [tgt_req_child] (0x1000): [RID#99] Attempting to get a TGT * (2026-01-23 8:41:07): [krb5_child[39850]] [get_and_save_tgt] (0x0400): [RID#99] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:07): [krb5_child[39850]] [sss_krb5_responder] (0x4000): [RID#99] Got question [password]. * (2026-01-23 8:41:07): [krb5_child[39850]] [get_and_save_tgt] (0x0020): [RID#99] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:07): [krb5_child[39850]] [map_krb5_error] (0x0020): [RID#99] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:41:13): [krb5_child[39854]] [get_and_save_tgt] (0x0020): [RID#103] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:13): [krb5_child[39854]] [main] (0x0400): [RID#103] krb5_child started. * (2026-01-23 8:41:13): [krb5_child[39854]] [unpack_buffer] (0x1000): [RID#103] total buffer size: [96] * (2026-01-23 8:41:13): [krb5_child[39854]] [unpack_buffer] (0x0100): [RID#103] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:13): [krb5_child[39854]] [unpack_buffer] (0x2000): [RID#103] No old ccache * (2026-01-23 8:41:13): [krb5_child[39854]] [unpack_buffer] (0x0100): [RID#103] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:13): [krb5_child[39854]] [k5c_precreate_ccache] (0x4000): [RID#103] Recreating ccache * (2026-01-23 8:41:13): [krb5_child[39854]] [k5c_setup_fast] (0x0100): [RID#103] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:13): [krb5_child[39854]] [find_principal_in_keytab] (0x4000): [RID#103] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:13): [krb5_child[39854]] [match_principal] (0x1000): [RID#103] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:13): [krb5_child[39854]] [check_fast_ccache] (0x0200): [RID#103] FAST TGT is still valid. * (2026-01-23 8:41:13): [krb5_child[39854]] [become_user] (0x0200): [RID#103] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:13): [krb5_child[39854]] [main] (0x2000): [RID#103] Running as [1833000000][1833000000]. * (2026-01-23 8:41:13): [krb5_child[39854]] [set_lifetime_options] (0x0100): [RID#103] No specific renewable lifetime requested. * (2026-01-23 8:41:13): [krb5_child[39854]] [set_lifetime_options] (0x0100): [RID#103] No specific lifetime requested. * (2026-01-23 8:41:13): [krb5_child[39854]] [set_canonicalize_option] (0x0100): [RID#103] Canonicalization is set to [true] * (2026-01-23 8:41:13): [krb5_child[39854]] [main] (0x0400): [RID#103] Will perform auth * (2026-01-23 8:41:13): [krb5_child[39854]] [main] (0x0400): [RID#103] Will perform online auth * (2026-01-23 8:41:13): [krb5_child[39854]] [tgt_req_child] (0x1000): [RID#103] Attempting to get a TGT * (2026-01-23 8:41:13): [krb5_child[39854]] [get_and_save_tgt] (0x0400): [RID#103] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:13): [krb5_child[39854]] [sss_krb5_responder] (0x4000): [RID#103] Got question [password]. * (2026-01-23 8:41:13): [krb5_child[39854]] [get_and_save_tgt] (0x0020): [RID#103] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:13): [krb5_child[39854]] [map_krb5_error] (0x0020): [RID#103] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:41:16): [krb5_child[39858]] [get_and_save_tgt] (0x0020): [RID#105] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:16): [krb5_child[39858]] [main] (0x0400): [RID#105] krb5_child started. * (2026-01-23 8:41:16): [krb5_child[39858]] [unpack_buffer] (0x1000): [RID#105] total buffer size: [96] * (2026-01-23 8:41:16): [krb5_child[39858]] [unpack_buffer] (0x0100): [RID#105] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:16): [krb5_child[39858]] [unpack_buffer] (0x2000): [RID#105] No old ccache * (2026-01-23 8:41:16): [krb5_child[39858]] [unpack_buffer] (0x0100): [RID#105] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:16): [krb5_child[39858]] [k5c_precreate_ccache] (0x4000): [RID#105] Recreating ccache * (2026-01-23 8:41:16): [krb5_child[39858]] [k5c_setup_fast] (0x0100): [RID#105] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:16): [krb5_child[39858]] [find_principal_in_keytab] (0x4000): [RID#105] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:16): [krb5_child[39858]] [match_principal] (0x1000): [RID#105] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:16): [krb5_child[39858]] [check_fast_ccache] (0x0200): [RID#105] FAST TGT is still valid. * (2026-01-23 8:41:16): [krb5_child[39858]] [become_user] (0x0200): [RID#105] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:16): [krb5_child[39858]] [main] (0x2000): [RID#105] Running as [1833000000][1833000000]. * (2026-01-23 8:41:16): [krb5_child[39858]] [set_lifetime_options] (0x0100): [RID#105] No specific renewable lifetime requested. * (2026-01-23 8:41:16): [krb5_child[39858]] [set_lifetime_options] (0x0100): [RID#105] No specific lifetime requested. * (2026-01-23 8:41:16): [krb5_child[39858]] [set_canonicalize_option] (0x0100): [RID#105] Canonicalization is set to [true] * (2026-01-23 8:41:16): [krb5_child[39858]] [main] (0x0400): [RID#105] Will perform auth * (2026-01-23 8:41:16): [krb5_child[39858]] [main] (0x0400): [RID#105] Will perform online auth * (2026-01-23 8:41:16): [krb5_child[39858]] [tgt_req_child] (0x1000): [RID#105] Attempting to get a TGT * (2026-01-23 8:41:16): [krb5_child[39858]] [get_and_save_tgt] (0x0400): [RID#105] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:16): [krb5_child[39858]] [get_and_save_tgt] (0x0020): [RID#105] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:16): [krb5_child[39858]] [map_krb5_error] (0x0020): [RID#105] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:41:19): [krb5_child[39862]] [get_and_save_tgt] (0x0020): [RID#108] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:19): [krb5_child[39862]] [main] (0x0400): [RID#108] krb5_child started. * (2026-01-23 8:41:19): [krb5_child[39862]] [unpack_buffer] (0x1000): [RID#108] total buffer size: [97] * (2026-01-23 8:41:19): [krb5_child[39862]] [unpack_buffer] (0x0100): [RID#108] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:19): [krb5_child[39862]] [unpack_buffer] (0x2000): [RID#108] No old ccache * (2026-01-23 8:41:19): [krb5_child[39862]] [unpack_buffer] (0x0100): [RID#108] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:19): [krb5_child[39862]] [k5c_precreate_ccache] (0x4000): [RID#108] Recreating ccache * (2026-01-23 8:41:19): [krb5_child[39862]] [k5c_setup_fast] (0x0100): [RID#108] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:19): [krb5_child[39862]] [find_principal_in_keytab] (0x4000): [RID#108] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:19): [krb5_child[39862]] [match_principal] (0x1000): [RID#108] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:19): [krb5_child[39862]] [check_fast_ccache] (0x0200): [RID#108] FAST TGT is still valid. * (2026-01-23 8:41:19): [krb5_child[39862]] [become_user] (0x0200): [RID#108] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:19): [krb5_child[39862]] [main] (0x2000): [RID#108] Running as [1833000000][1833000000]. * (2026-01-23 8:41:19): [krb5_child[39862]] [set_lifetime_options] (0x0100): [RID#108] No specific renewable lifetime requested. * (2026-01-23 8:41:19): [krb5_child[39862]] [set_lifetime_options] (0x0100): [RID#108] No specific lifetime requested. * (2026-01-23 8:41:19): [krb5_child[39862]] [set_canonicalize_option] (0x0100): [RID#108] Canonicalization is set to [true] * (2026-01-23 8:41:19): [krb5_child[39862]] [main] (0x0400): [RID#108] Will perform auth * (2026-01-23 8:41:19): [krb5_child[39862]] [main] (0x0400): [RID#108] Will perform online auth * (2026-01-23 8:41:19): [krb5_child[39862]] [tgt_req_child] (0x1000): [RID#108] Attempting to get a TGT * (2026-01-23 8:41:19): [krb5_child[39862]] [get_and_save_tgt] (0x0400): [RID#108] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:19): [krb5_child[39862]] [get_and_save_tgt] (0x0020): [RID#108] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:19): [krb5_child[39862]] [map_krb5_error] (0x0020): [RID#108] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:41:24): [krb5_child[39866]] [get_and_save_tgt] (0x0020): [RID#111] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:24): [krb5_child[39866]] [main] (0x0400): [RID#111] krb5_child started. * (2026-01-23 8:41:24): [krb5_child[39866]] [unpack_buffer] (0x1000): [RID#111] total buffer size: [97] * (2026-01-23 8:41:24): [krb5_child[39866]] [unpack_buffer] (0x0100): [RID#111] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:24): [krb5_child[39866]] [unpack_buffer] (0x2000): [RID#111] No old ccache * (2026-01-23 8:41:24): [krb5_child[39866]] [unpack_buffer] (0x0100): [RID#111] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:24): [krb5_child[39866]] [k5c_precreate_ccache] (0x4000): [RID#111] Recreating ccache * (2026-01-23 8:41:24): [krb5_child[39866]] [k5c_setup_fast] (0x0100): [RID#111] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:24): [krb5_child[39866]] [find_principal_in_keytab] (0x4000): [RID#111] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:24): [krb5_child[39866]] [match_principal] (0x1000): [RID#111] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:24): [krb5_child[39866]] [check_fast_ccache] (0x0200): [RID#111] FAST TGT is still valid. * (2026-01-23 8:41:24): [krb5_child[39866]] [become_user] (0x0200): [RID#111] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:24): [krb5_child[39866]] [main] (0x2000): [RID#111] Running as [1833000000][1833000000]. * (2026-01-23 8:41:24): [krb5_child[39866]] [set_lifetime_options] (0x0100): [RID#111] No specific renewable lifetime requested. * (2026-01-23 8:41:24): [krb5_child[39866]] [set_lifetime_options] (0x0100): [RID#111] No specific lifetime requested. * (2026-01-23 8:41:24): [krb5_child[39866]] [set_canonicalize_option] (0x0100): [RID#111] Canonicalization is set to [true] * (2026-01-23 8:41:24): [krb5_child[39866]] [main] (0x0400): [RID#111] Will perform auth * (2026-01-23 8:41:24): [krb5_child[39866]] [main] (0x0400): [RID#111] Will perform online auth * (2026-01-23 8:41:24): [krb5_child[39866]] [tgt_req_child] (0x1000): [RID#111] Attempting to get a TGT * (2026-01-23 8:41:24): [krb5_child[39866]] [get_and_save_tgt] (0x0400): [RID#111] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:24): [krb5_child[39866]] [get_and_save_tgt] (0x0020): [RID#111] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:24): [krb5_child[39866]] [map_krb5_error] (0x0020): [RID#111] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:41:29): [krb5_child[39870]] [get_and_save_tgt] (0x0020): [RID#115] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:29): [krb5_child[39870]] [main] (0x0400): [RID#115] krb5_child started. * (2026-01-23 8:41:29): [krb5_child[39870]] [unpack_buffer] (0x1000): [RID#115] total buffer size: [94] * (2026-01-23 8:41:29): [krb5_child[39870]] [unpack_buffer] (0x0100): [RID#115] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:29): [krb5_child[39870]] [unpack_buffer] (0x2000): [RID#115] No old ccache * (2026-01-23 8:41:29): [krb5_child[39870]] [unpack_buffer] (0x0100): [RID#115] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:29): [krb5_child[39870]] [k5c_precreate_ccache] (0x4000): [RID#115] Recreating ccache * (2026-01-23 8:41:29): [krb5_child[39870]] [k5c_setup_fast] (0x0100): [RID#115] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:29): [krb5_child[39870]] [find_principal_in_keytab] (0x4000): [RID#115] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:29): [krb5_child[39870]] [match_principal] (0x1000): [RID#115] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:29): [krb5_child[39870]] [check_fast_ccache] (0x0200): [RID#115] FAST TGT is still valid. * (2026-01-23 8:41:29): [krb5_child[39870]] [become_user] (0x0200): [RID#115] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:29): [krb5_child[39870]] [main] (0x2000): [RID#115] Running as [1833000000][1833000000]. * (2026-01-23 8:41:29): [krb5_child[39870]] [set_lifetime_options] (0x0100): [RID#115] No specific renewable lifetime requested. * (2026-01-23 8:41:29): [krb5_child[39870]] [set_lifetime_options] (0x0100): [RID#115] No specific lifetime requested. * (2026-01-23 8:41:29): [krb5_child[39870]] [set_canonicalize_option] (0x0100): [RID#115] Canonicalization is set to [true] * (2026-01-23 8:41:29): [krb5_child[39870]] [main] (0x0400): [RID#115] Will perform auth * (2026-01-23 8:41:29): [krb5_child[39870]] [main] (0x0400): [RID#115] Will perform online auth * (2026-01-23 8:41:29): [krb5_child[39870]] [tgt_req_child] (0x1000): [RID#115] Attempting to get a TGT * (2026-01-23 8:41:29): [krb5_child[39870]] [get_and_save_tgt] (0x0400): [RID#115] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:29): [krb5_child[39870]] [get_and_save_tgt] (0x0020): [RID#115] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:29): [krb5_child[39870]] [map_krb5_error] (0x0020): [RID#115] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:41:32): [krb5_child[39874]] [get_and_save_tgt] (0x0020): [RID#117] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:32): [krb5_child[39874]] [main] (0x0400): [RID#117] krb5_child started. * (2026-01-23 8:41:32): [krb5_child[39874]] [unpack_buffer] (0x1000): [RID#117] total buffer size: [95] * (2026-01-23 8:41:32): [krb5_child[39874]] [unpack_buffer] (0x0100): [RID#117] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:32): [krb5_child[39874]] [unpack_buffer] (0x2000): [RID#117] No old ccache * (2026-01-23 8:41:32): [krb5_child[39874]] [unpack_buffer] (0x0100): [RID#117] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:32): [krb5_child[39874]] [k5c_precreate_ccache] (0x4000): [RID#117] Recreating ccache * (2026-01-23 8:41:32): [krb5_child[39874]] [k5c_setup_fast] (0x0100): [RID#117] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:32): [krb5_child[39874]] [find_principal_in_keytab] (0x4000): [RID#117] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:32): [krb5_child[39874]] [match_principal] (0x1000): [RID#117] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:32): [krb5_child[39874]] [check_fast_ccache] (0x0200): [RID#117] FAST TGT is still valid. * (2026-01-23 8:41:32): [krb5_child[39874]] [become_user] (0x0200): [RID#117] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:32): [krb5_child[39874]] [main] (0x2000): [RID#117] Running as [1833000000][1833000000]. * (2026-01-23 8:41:32): [krb5_child[39874]] [set_lifetime_options] (0x0100): [RID#117] No specific renewable lifetime requested. * (2026-01-23 8:41:32): [krb5_child[39874]] [set_lifetime_options] (0x0100): [RID#117] No specific lifetime requested. * (2026-01-23 8:41:32): [krb5_child[39874]] [set_canonicalize_option] (0x0100): [RID#117] Canonicalization is set to [true] * (2026-01-23 8:41:32): [krb5_child[39874]] [main] (0x0400): [RID#117] Will perform auth * (2026-01-23 8:41:32): [krb5_child[39874]] [main] (0x0400): [RID#117] Will perform online auth * (2026-01-23 8:41:32): [krb5_child[39874]] [tgt_req_child] (0x1000): [RID#117] Attempting to get a TGT * (2026-01-23 8:41:32): [krb5_child[39874]] [get_and_save_tgt] (0x0400): [RID#117] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:32): [krb5_child[39874]] [get_and_save_tgt] (0x0020): [RID#117] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:32): [krb5_child[39874]] [map_krb5_error] (0x0020): [RID#117] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:41:35): [krb5_child[39878]] [get_and_save_tgt] (0x0020): [RID#120] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:35): [krb5_child[39878]] [main] (0x0400): [RID#120] krb5_child started. * (2026-01-23 8:41:35): [krb5_child[39878]] [unpack_buffer] (0x1000): [RID#120] total buffer size: [94] * (2026-01-23 8:41:35): [krb5_child[39878]] [unpack_buffer] (0x0100): [RID#120] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:35): [krb5_child[39878]] [unpack_buffer] (0x2000): [RID#120] No old ccache * (2026-01-23 8:41:35): [krb5_child[39878]] [unpack_buffer] (0x0100): [RID#120] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:35): [krb5_child[39878]] [k5c_precreate_ccache] (0x4000): [RID#120] Recreating ccache * (2026-01-23 8:41:35): [krb5_child[39878]] [k5c_setup_fast] (0x0100): [RID#120] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:35): [krb5_child[39878]] [find_principal_in_keytab] (0x4000): [RID#120] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:35): [krb5_child[39878]] [match_principal] (0x1000): [RID#120] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:35): [krb5_child[39878]] [check_fast_ccache] (0x0200): [RID#120] FAST TGT is still valid. * (2026-01-23 8:41:35): [krb5_child[39878]] [become_user] (0x0200): [RID#120] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:35): [krb5_child[39878]] [main] (0x2000): [RID#120] Running as [1833000000][1833000000]. * (2026-01-23 8:41:35): [krb5_child[39878]] [set_lifetime_options] (0x0100): [RID#120] No specific renewable lifetime requested. * (2026-01-23 8:41:35): [krb5_child[39878]] [set_lifetime_options] (0x0100): [RID#120] No specific lifetime requested. * (2026-01-23 8:41:35): [krb5_child[39878]] [set_canonicalize_option] (0x0100): [RID#120] Canonicalization is set to [true] * (2026-01-23 8:41:35): [krb5_child[39878]] [main] (0x0400): [RID#120] Will perform auth * (2026-01-23 8:41:35): [krb5_child[39878]] [main] (0x0400): [RID#120] Will perform online auth * (2026-01-23 8:41:35): [krb5_child[39878]] [tgt_req_child] (0x1000): [RID#120] Attempting to get a TGT * (2026-01-23 8:41:35): [krb5_child[39878]] [get_and_save_tgt] (0x0400): [RID#120] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:35): [krb5_child[39878]] [get_and_save_tgt] (0x0020): [RID#120] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:35): [krb5_child[39878]] [map_krb5_error] (0x0020): [RID#120] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:41:38): [krb5_child[39882]] [get_and_save_tgt] (0x0020): [RID#122] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:38): [krb5_child[39882]] [main] (0x0400): [RID#122] krb5_child started. * (2026-01-23 8:41:38): [krb5_child[39882]] [unpack_buffer] (0x1000): [RID#122] total buffer size: [94] * (2026-01-23 8:41:38): [krb5_child[39882]] [unpack_buffer] (0x0100): [RID#122] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:38): [krb5_child[39882]] [unpack_buffer] (0x2000): [RID#122] No old ccache * (2026-01-23 8:41:38): [krb5_child[39882]] [unpack_buffer] (0x0100): [RID#122] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:38): [krb5_child[39882]] [k5c_precreate_ccache] (0x4000): [RID#122] Recreating ccache * (2026-01-23 8:41:38): [krb5_child[39882]] [k5c_setup_fast] (0x0100): [RID#122] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:38): [krb5_child[39882]] [find_principal_in_keytab] (0x4000): [RID#122] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:38): [krb5_child[39882]] [match_principal] (0x1000): [RID#122] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:38): [krb5_child[39882]] [check_fast_ccache] (0x0200): [RID#122] FAST TGT is still valid. * (2026-01-23 8:41:38): [krb5_child[39882]] [become_user] (0x0200): [RID#122] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:38): [krb5_child[39882]] [main] (0x2000): [RID#122] Running as [1833000000][1833000000]. * (2026-01-23 8:41:38): [krb5_child[39882]] [set_lifetime_options] (0x0100): [RID#122] No specific renewable lifetime requested. * (2026-01-23 8:41:38): [krb5_child[39882]] [set_lifetime_options] (0x0100): [RID#122] No specific lifetime requested. * (2026-01-23 8:41:38): [krb5_child[39882]] [set_canonicalize_option] (0x0100): [RID#122] Canonicalization is set to [true] * (2026-01-23 8:41:38): [krb5_child[39882]] [main] (0x0400): [RID#122] Will perform auth * (2026-01-23 8:41:38): [krb5_child[39882]] [main] (0x0400): [RID#122] Will perform online auth * (2026-01-23 8:41:38): [krb5_child[39882]] [tgt_req_child] (0x1000): [RID#122] Attempting to get a TGT * (2026-01-23 8:41:38): [krb5_child[39882]] [get_and_save_tgt] (0x0400): [RID#122] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:38): [krb5_child[39882]] [get_and_save_tgt] (0x0020): [RID#122] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:38): [krb5_child[39882]] [map_krb5_error] (0x0020): [RID#122] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:41:44): [krb5_child[39886]] [get_and_save_tgt] (0x0020): [RID#125] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:44): [krb5_child[39886]] [main] (0x0400): [RID#125] krb5_child started. * (2026-01-23 8:41:44): [krb5_child[39886]] [unpack_buffer] (0x1000): [RID#125] total buffer size: [98] * (2026-01-23 8:41:44): [krb5_child[39886]] [unpack_buffer] (0x0100): [RID#125] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:44): [krb5_child[39886]] [unpack_buffer] (0x2000): [RID#125] No old ccache * (2026-01-23 8:41:44): [krb5_child[39886]] [unpack_buffer] (0x0100): [RID#125] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:44): [krb5_child[39886]] [k5c_precreate_ccache] (0x4000): [RID#125] Recreating ccache * (2026-01-23 8:41:44): [krb5_child[39886]] [k5c_setup_fast] (0x0100): [RID#125] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:44): [krb5_child[39886]] [find_principal_in_keytab] (0x4000): [RID#125] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:44): [krb5_child[39886]] [match_principal] (0x1000): [RID#125] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:44): [krb5_child[39886]] [check_fast_ccache] (0x0200): [RID#125] FAST TGT is still valid. * (2026-01-23 8:41:44): [krb5_child[39886]] [become_user] (0x0200): [RID#125] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:44): [krb5_child[39886]] [main] (0x2000): [RID#125] Running as [1833000000][1833000000]. * (2026-01-23 8:41:44): [krb5_child[39886]] [set_lifetime_options] (0x0100): [RID#125] No specific renewable lifetime requested. * (2026-01-23 8:41:44): [krb5_child[39886]] [set_lifetime_options] (0x0100): [RID#125] No specific lifetime requested. * (2026-01-23 8:41:44): [krb5_child[39886]] [set_canonicalize_option] (0x0100): [RID#125] Canonicalization is set to [true] * (2026-01-23 8:41:44): [krb5_child[39886]] [main] (0x0400): [RID#125] Will perform auth * (2026-01-23 8:41:44): [krb5_child[39886]] [main] (0x0400): [RID#125] Will perform online auth * (2026-01-23 8:41:44): [krb5_child[39886]] [tgt_req_child] (0x1000): [RID#125] Attempting to get a TGT * (2026-01-23 8:41:44): [krb5_child[39886]] [get_and_save_tgt] (0x0400): [RID#125] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:44): [krb5_child[39886]] [get_and_save_tgt] (0x0020): [RID#125] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:44): [krb5_child[39886]] [map_krb5_error] (0x0020): [RID#125] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:41:47): [krb5_child[39890]] [get_and_save_tgt] (0x0020): [RID#128] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:47): [krb5_child[39890]] [main] (0x0400): [RID#128] krb5_child started. * (2026-01-23 8:41:47): [krb5_child[39890]] [unpack_buffer] (0x1000): [RID#128] total buffer size: [104] * (2026-01-23 8:41:47): [krb5_child[39890]] [unpack_buffer] (0x0100): [RID#128] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:47): [krb5_child[39890]] [unpack_buffer] (0x2000): [RID#128] No old ccache * (2026-01-23 8:41:47): [krb5_child[39890]] [unpack_buffer] (0x0100): [RID#128] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:47): [krb5_child[39890]] [k5c_precreate_ccache] (0x4000): [RID#128] Recreating ccache * (2026-01-23 8:41:47): [krb5_child[39890]] [k5c_setup_fast] (0x0100): [RID#128] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:47): [krb5_child[39890]] [find_principal_in_keytab] (0x4000): [RID#128] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:47): [krb5_child[39890]] [match_principal] (0x1000): [RID#128] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:47): [krb5_child[39890]] [check_fast_ccache] (0x0200): [RID#128] FAST TGT is still valid. * (2026-01-23 8:41:47): [krb5_child[39890]] [become_user] (0x0200): [RID#128] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:47): [krb5_child[39890]] [main] (0x2000): [RID#128] Running as [1833000000][1833000000]. * (2026-01-23 8:41:47): [krb5_child[39890]] [set_lifetime_options] (0x0100): [RID#128] No specific renewable lifetime requested. * (2026-01-23 8:41:47): [krb5_child[39890]] [set_lifetime_options] (0x0100): [RID#128] No specific lifetime requested. * (2026-01-23 8:41:47): [krb5_child[39890]] [set_canonicalize_option] (0x0100): [RID#128] Canonicalization is set to [true] * (2026-01-23 8:41:47): [krb5_child[39890]] [main] (0x0400): [RID#128] Will perform auth * (2026-01-23 8:41:47): [krb5_child[39890]] [main] (0x0400): [RID#128] Will perform online auth * (2026-01-23 8:41:47): [krb5_child[39890]] [tgt_req_child] (0x1000): [RID#128] Attempting to get a TGT * (2026-01-23 8:41:47): [krb5_child[39890]] [get_and_save_tgt] (0x0400): [RID#128] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:47): [krb5_child[39890]] [get_and_save_tgt] (0x0020): [RID#128] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:47): [krb5_child[39890]] [map_krb5_error] (0x0020): [RID#128] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:41:50): [krb5_child[39894]] [get_and_save_tgt] (0x0020): [RID#131] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:50): [krb5_child[39894]] [main] (0x0400): [RID#131] krb5_child started. * (2026-01-23 8:41:50): [krb5_child[39894]] [unpack_buffer] (0x1000): [RID#131] total buffer size: [96] * (2026-01-23 8:41:50): [krb5_child[39894]] [unpack_buffer] (0x0100): [RID#131] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:50): [krb5_child[39894]] [unpack_buffer] (0x2000): [RID#131] No old ccache * (2026-01-23 8:41:50): [krb5_child[39894]] [unpack_buffer] (0x0100): [RID#131] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:50): [krb5_child[39894]] [k5c_precreate_ccache] (0x4000): [RID#131] Recreating ccache * (2026-01-23 8:41:50): [krb5_child[39894]] [k5c_setup_fast] (0x0100): [RID#131] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:50): [krb5_child[39894]] [find_principal_in_keytab] (0x4000): [RID#131] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:50): [krb5_child[39894]] [match_principal] (0x1000): [RID#131] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:50): [krb5_child[39894]] [check_fast_ccache] (0x0200): [RID#131] FAST TGT is still valid. * (2026-01-23 8:41:50): [krb5_child[39894]] [become_user] (0x0200): [RID#131] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:50): [krb5_child[39894]] [main] (0x2000): [RID#131] Running as [1833000000][1833000000]. * (2026-01-23 8:41:50): [krb5_child[39894]] [set_lifetime_options] (0x0100): [RID#131] No specific renewable lifetime requested. * (2026-01-23 8:41:50): [krb5_child[39894]] [set_lifetime_options] (0x0100): [RID#131] No specific lifetime requested. * (2026-01-23 8:41:50): [krb5_child[39894]] [set_canonicalize_option] (0x0100): [RID#131] Canonicalization is set to [true] * (2026-01-23 8:41:50): [krb5_child[39894]] [main] (0x0400): [RID#131] Will perform auth * (2026-01-23 8:41:50): [krb5_child[39894]] [main] (0x0400): [RID#131] Will perform online auth * (2026-01-23 8:41:50): [krb5_child[39894]] [tgt_req_child] (0x1000): [RID#131] Attempting to get a TGT * (2026-01-23 8:41:50): [krb5_child[39894]] [get_and_save_tgt] (0x0400): [RID#131] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:50): [krb5_child[39894]] [get_and_save_tgt] (0x0020): [RID#131] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:50): [krb5_child[39894]] [map_krb5_error] (0x0020): [RID#131] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:41:55): [krb5_child[39898]] [get_and_save_tgt] (0x0020): [RID#134] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:41:55): [krb5_child[39898]] [main] (0x0400): [RID#134] krb5_child started. * (2026-01-23 8:41:55): [krb5_child[39898]] [unpack_buffer] (0x1000): [RID#134] total buffer size: [99] * (2026-01-23 8:41:55): [krb5_child[39898]] [unpack_buffer] (0x0100): [RID#134] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:41:55): [krb5_child[39898]] [unpack_buffer] (0x2000): [RID#134] No old ccache * (2026-01-23 8:41:55): [krb5_child[39898]] [unpack_buffer] (0x0100): [RID#134] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:41:55): [krb5_child[39898]] [k5c_precreate_ccache] (0x4000): [RID#134] Recreating ccache * (2026-01-23 8:41:55): [krb5_child[39898]] [k5c_setup_fast] (0x0100): [RID#134] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:41:55): [krb5_child[39898]] [find_principal_in_keytab] (0x4000): [RID#134] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:41:55): [krb5_child[39898]] [match_principal] (0x1000): [RID#134] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:41:55): [krb5_child[39898]] [check_fast_ccache] (0x0200): [RID#134] FAST TGT is still valid. * (2026-01-23 8:41:55): [krb5_child[39898]] [become_user] (0x0200): [RID#134] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:41:55): [krb5_child[39898]] [main] (0x2000): [RID#134] Running as [1833000000][1833000000]. * (2026-01-23 8:41:55): [krb5_child[39898]] [set_lifetime_options] (0x0100): [RID#134] No specific renewable lifetime requested. * (2026-01-23 8:41:55): [krb5_child[39898]] [set_lifetime_options] (0x0100): [RID#134] No specific lifetime requested. * (2026-01-23 8:41:55): [krb5_child[39898]] [set_canonicalize_option] (0x0100): [RID#134] Canonicalization is set to [true] * (2026-01-23 8:41:55): [krb5_child[39898]] [main] (0x0400): [RID#134] Will perform auth * (2026-01-23 8:41:55): [krb5_child[39898]] [main] (0x0400): [RID#134] Will perform online auth * (2026-01-23 8:41:55): [krb5_child[39898]] [tgt_req_child] (0x1000): [RID#134] Attempting to get a TGT * (2026-01-23 8:41:55): [krb5_child[39898]] [get_and_save_tgt] (0x0400): [RID#134] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:41:55): [krb5_child[39898]] [get_and_save_tgt] (0x0020): [RID#134] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:41:55): [krb5_child[39898]] [map_krb5_error] (0x0020): [RID#134] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:00): [krb5_child[39902]] [get_and_save_tgt] (0x0020): [RID#137] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:00): [krb5_child[39902]] [main] (0x0400): [RID#137] krb5_child started. * (2026-01-23 8:42:00): [krb5_child[39902]] [unpack_buffer] (0x1000): [RID#137] total buffer size: [95] * (2026-01-23 8:42:00): [krb5_child[39902]] [unpack_buffer] (0x0100): [RID#137] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:00): [krb5_child[39902]] [unpack_buffer] (0x2000): [RID#137] No old ccache * (2026-01-23 8:42:00): [krb5_child[39902]] [unpack_buffer] (0x0100): [RID#137] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:00): [krb5_child[39902]] [k5c_precreate_ccache] (0x4000): [RID#137] Recreating ccache * (2026-01-23 8:42:00): [krb5_child[39902]] [k5c_setup_fast] (0x0100): [RID#137] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:00): [krb5_child[39902]] [find_principal_in_keytab] (0x4000): [RID#137] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:00): [krb5_child[39902]] [match_principal] (0x1000): [RID#137] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:00): [krb5_child[39902]] [check_fast_ccache] (0x0200): [RID#137] FAST TGT is still valid. * (2026-01-23 8:42:00): [krb5_child[39902]] [become_user] (0x0200): [RID#137] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:00): [krb5_child[39902]] [main] (0x2000): [RID#137] Running as [1833000000][1833000000]. * (2026-01-23 8:42:00): [krb5_child[39902]] [set_lifetime_options] (0x0100): [RID#137] No specific renewable lifetime requested. * (2026-01-23 8:42:00): [krb5_child[39902]] [set_lifetime_options] (0x0100): [RID#137] No specific lifetime requested. * (2026-01-23 8:42:00): [krb5_child[39902]] [set_canonicalize_option] (0x0100): [RID#137] Canonicalization is set to [true] * (2026-01-23 8:42:00): [krb5_child[39902]] [main] (0x0400): [RID#137] Will perform auth * (2026-01-23 8:42:00): [krb5_child[39902]] [main] (0x0400): [RID#137] Will perform online auth * (2026-01-23 8:42:00): [krb5_child[39902]] [tgt_req_child] (0x1000): [RID#137] Attempting to get a TGT * (2026-01-23 8:42:00): [krb5_child[39902]] [get_and_save_tgt] (0x0400): [RID#137] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:00): [krb5_child[39902]] [get_and_save_tgt] (0x0020): [RID#137] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:00): [krb5_child[39902]] [map_krb5_error] (0x0020): [RID#137] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:06): [krb5_child[39906]] [get_and_save_tgt] (0x0020): [RID#141] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:06): [krb5_child[39906]] [main] (0x0400): [RID#141] krb5_child started. * (2026-01-23 8:42:06): [krb5_child[39906]] [unpack_buffer] (0x1000): [RID#141] total buffer size: [97] * (2026-01-23 8:42:06): [krb5_child[39906]] [unpack_buffer] (0x0100): [RID#141] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:06): [krb5_child[39906]] [unpack_buffer] (0x2000): [RID#141] No old ccache * (2026-01-23 8:42:06): [krb5_child[39906]] [unpack_buffer] (0x0100): [RID#141] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:06): [krb5_child[39906]] [k5c_precreate_ccache] (0x4000): [RID#141] Recreating ccache * (2026-01-23 8:42:06): [krb5_child[39906]] [k5c_setup_fast] (0x0100): [RID#141] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:06): [krb5_child[39906]] [find_principal_in_keytab] (0x4000): [RID#141] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:06): [krb5_child[39906]] [match_principal] (0x1000): [RID#141] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:06): [krb5_child[39906]] [check_fast_ccache] (0x0200): [RID#141] FAST TGT is still valid. * (2026-01-23 8:42:06): [krb5_child[39906]] [become_user] (0x0200): [RID#141] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:06): [krb5_child[39906]] [main] (0x2000): [RID#141] Running as [1833000000][1833000000]. * (2026-01-23 8:42:06): [krb5_child[39906]] [set_lifetime_options] (0x0100): [RID#141] No specific renewable lifetime requested. * (2026-01-23 8:42:06): [krb5_child[39906]] [set_lifetime_options] (0x0100): [RID#141] No specific lifetime requested. * (2026-01-23 8:42:06): [krb5_child[39906]] [set_canonicalize_option] (0x0100): [RID#141] Canonicalization is set to [true] * (2026-01-23 8:42:06): [krb5_child[39906]] [main] (0x0400): [RID#141] Will perform auth * (2026-01-23 8:42:06): [krb5_child[39906]] [main] (0x0400): [RID#141] Will perform online auth * (2026-01-23 8:42:06): [krb5_child[39906]] [tgt_req_child] (0x1000): [RID#141] Attempting to get a TGT * (2026-01-23 8:42:06): [krb5_child[39906]] [get_and_save_tgt] (0x0400): [RID#141] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:06): [krb5_child[39906]] [get_and_save_tgt] (0x0020): [RID#141] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:06): [krb5_child[39906]] [map_krb5_error] (0x0020): [RID#141] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:10): [krb5_child[39910]] [get_and_save_tgt] (0x0020): [RID#143] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:10): [krb5_child[39910]] [main] (0x0400): [RID#143] krb5_child started. * (2026-01-23 8:42:10): [krb5_child[39910]] [unpack_buffer] (0x1000): [RID#143] total buffer size: [95] * (2026-01-23 8:42:10): [krb5_child[39910]] [unpack_buffer] (0x0100): [RID#143] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:10): [krb5_child[39910]] [unpack_buffer] (0x2000): [RID#143] No old ccache * (2026-01-23 8:42:10): [krb5_child[39910]] [unpack_buffer] (0x0100): [RID#143] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:10): [krb5_child[39910]] [k5c_precreate_ccache] (0x4000): [RID#143] Recreating ccache * (2026-01-23 8:42:10): [krb5_child[39910]] [k5c_setup_fast] (0x0100): [RID#143] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:10): [krb5_child[39910]] [find_principal_in_keytab] (0x4000): [RID#143] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:10): [krb5_child[39910]] [match_principal] (0x1000): [RID#143] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:10): [krb5_child[39910]] [check_fast_ccache] (0x0200): [RID#143] FAST TGT is still valid. * (2026-01-23 8:42:10): [krb5_child[39910]] [become_user] (0x0200): [RID#143] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:10): [krb5_child[39910]] [main] (0x2000): [RID#143] Running as [1833000000][1833000000]. * (2026-01-23 8:42:10): [krb5_child[39910]] [set_lifetime_options] (0x0100): [RID#143] No specific renewable lifetime requested. * (2026-01-23 8:42:10): [krb5_child[39910]] [set_lifetime_options] (0x0100): [RID#143] No specific lifetime requested. * (2026-01-23 8:42:10): [krb5_child[39910]] [set_canonicalize_option] (0x0100): [RID#143] Canonicalization is set to [true] * (2026-01-23 8:42:10): [krb5_child[39910]] [main] (0x0400): [RID#143] Will perform auth * (2026-01-23 8:42:10): [krb5_child[39910]] [main] (0x0400): [RID#143] Will perform online auth * (2026-01-23 8:42:10): [krb5_child[39910]] [tgt_req_child] (0x1000): [RID#143] Attempting to get a TGT * (2026-01-23 8:42:10): [krb5_child[39910]] [get_and_save_tgt] (0x0400): [RID#143] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:10): [krb5_child[39910]] [get_and_save_tgt] (0x0020): [RID#143] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:10): [krb5_child[39910]] [map_krb5_error] (0x0020): [RID#143] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:13): [krb5_child[39914]] [get_and_save_tgt] (0x0020): [RID#146] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:13): [krb5_child[39914]] [main] (0x0400): [RID#146] krb5_child started. * (2026-01-23 8:42:13): [krb5_child[39914]] [unpack_buffer] (0x1000): [RID#146] total buffer size: [95] * (2026-01-23 8:42:13): [krb5_child[39914]] [unpack_buffer] (0x0100): [RID#146] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:13): [krb5_child[39914]] [unpack_buffer] (0x2000): [RID#146] No old ccache * (2026-01-23 8:42:13): [krb5_child[39914]] [unpack_buffer] (0x0100): [RID#146] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:13): [krb5_child[39914]] [k5c_precreate_ccache] (0x4000): [RID#146] Recreating ccache * (2026-01-23 8:42:13): [krb5_child[39914]] [k5c_setup_fast] (0x0100): [RID#146] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:13): [krb5_child[39914]] [find_principal_in_keytab] (0x4000): [RID#146] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:13): [krb5_child[39914]] [match_principal] (0x1000): [RID#146] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:13): [krb5_child[39914]] [check_fast_ccache] (0x0200): [RID#146] FAST TGT is still valid. * (2026-01-23 8:42:13): [krb5_child[39914]] [become_user] (0x0200): [RID#146] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:13): [krb5_child[39914]] [main] (0x2000): [RID#146] Running as [1833000000][1833000000]. * (2026-01-23 8:42:13): [krb5_child[39914]] [set_lifetime_options] (0x0100): [RID#146] No specific renewable lifetime requested. * (2026-01-23 8:42:13): [krb5_child[39914]] [set_lifetime_options] (0x0100): [RID#146] No specific lifetime requested. * (2026-01-23 8:42:13): [krb5_child[39914]] [set_canonicalize_option] (0x0100): [RID#146] Canonicalization is set to [true] * (2026-01-23 8:42:13): [krb5_child[39914]] [main] (0x0400): [RID#146] Will perform auth * (2026-01-23 8:42:13): [krb5_child[39914]] [main] (0x0400): [RID#146] Will perform online auth * (2026-01-23 8:42:13): [krb5_child[39914]] [tgt_req_child] (0x1000): [RID#146] Attempting to get a TGT * (2026-01-23 8:42:13): [krb5_child[39914]] [get_and_save_tgt] (0x0400): [RID#146] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:13): [krb5_child[39914]] [get_and_save_tgt] (0x0020): [RID#146] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:13): [krb5_child[39914]] [map_krb5_error] (0x0020): [RID#146] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:16): [krb5_child[39918]] [get_and_save_tgt] (0x0020): [RID#148] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:16): [krb5_child[39918]] [main] (0x0400): [RID#148] krb5_child started. * (2026-01-23 8:42:16): [krb5_child[39918]] [unpack_buffer] (0x1000): [RID#148] total buffer size: [97] * (2026-01-23 8:42:16): [krb5_child[39918]] [unpack_buffer] (0x0100): [RID#148] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:16): [krb5_child[39918]] [unpack_buffer] (0x2000): [RID#148] No old ccache * (2026-01-23 8:42:16): [krb5_child[39918]] [unpack_buffer] (0x0100): [RID#148] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:16): [krb5_child[39918]] [k5c_precreate_ccache] (0x4000): [RID#148] Recreating ccache * (2026-01-23 8:42:16): [krb5_child[39918]] [k5c_setup_fast] (0x0100): [RID#148] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:16): [krb5_child[39918]] [find_principal_in_keytab] (0x4000): [RID#148] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:16): [krb5_child[39918]] [match_principal] (0x1000): [RID#148] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:16): [krb5_child[39918]] [check_fast_ccache] (0x0200): [RID#148] FAST TGT is still valid. * (2026-01-23 8:42:16): [krb5_child[39918]] [become_user] (0x0200): [RID#148] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:16): [krb5_child[39918]] [main] (0x2000): [RID#148] Running as [1833000000][1833000000]. * (2026-01-23 8:42:16): [krb5_child[39918]] [set_lifetime_options] (0x0100): [RID#148] No specific renewable lifetime requested. * (2026-01-23 8:42:16): [krb5_child[39918]] [set_lifetime_options] (0x0100): [RID#148] No specific lifetime requested. * (2026-01-23 8:42:16): [krb5_child[39918]] [set_canonicalize_option] (0x0100): [RID#148] Canonicalization is set to [true] * (2026-01-23 8:42:16): [krb5_child[39918]] [main] (0x0400): [RID#148] Will perform auth * (2026-01-23 8:42:16): [krb5_child[39918]] [main] (0x0400): [RID#148] Will perform online auth * (2026-01-23 8:42:16): [krb5_child[39918]] [tgt_req_child] (0x1000): [RID#148] Attempting to get a TGT * (2026-01-23 8:42:16): [krb5_child[39918]] [get_and_save_tgt] (0x0400): [RID#148] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:16): [krb5_child[39918]] [get_and_save_tgt] (0x0020): [RID#148] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:16): [krb5_child[39918]] [map_krb5_error] (0x0020): [RID#148] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:21): [krb5_child[39922]] [get_and_save_tgt] (0x0020): [RID#151] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:21): [krb5_child[39922]] [main] (0x0400): [RID#151] krb5_child started. * (2026-01-23 8:42:21): [krb5_child[39922]] [unpack_buffer] (0x1000): [RID#151] total buffer size: [94] * (2026-01-23 8:42:21): [krb5_child[39922]] [unpack_buffer] (0x0100): [RID#151] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:21): [krb5_child[39922]] [unpack_buffer] (0x2000): [RID#151] No old ccache * (2026-01-23 8:42:21): [krb5_child[39922]] [unpack_buffer] (0x0100): [RID#151] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:21): [krb5_child[39922]] [k5c_precreate_ccache] (0x4000): [RID#151] Recreating ccache * (2026-01-23 8:42:21): [krb5_child[39922]] [k5c_setup_fast] (0x0100): [RID#151] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:21): [krb5_child[39922]] [find_principal_in_keytab] (0x4000): [RID#151] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:21): [krb5_child[39922]] [match_principal] (0x1000): [RID#151] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:21): [krb5_child[39922]] [check_fast_ccache] (0x0200): [RID#151] FAST TGT is still valid. * (2026-01-23 8:42:21): [krb5_child[39922]] [become_user] (0x0200): [RID#151] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:21): [krb5_child[39922]] [main] (0x2000): [RID#151] Running as [1833000000][1833000000]. * (2026-01-23 8:42:21): [krb5_child[39922]] [set_lifetime_options] (0x0100): [RID#151] No specific renewable lifetime requested. * (2026-01-23 8:42:21): [krb5_child[39922]] [set_lifetime_options] (0x0100): [RID#151] No specific lifetime requested. * (2026-01-23 8:42:21): [krb5_child[39922]] [set_canonicalize_option] (0x0100): [RID#151] Canonicalization is set to [true] * (2026-01-23 8:42:21): [krb5_child[39922]] [main] (0x0400): [RID#151] Will perform auth * (2026-01-23 8:42:21): [krb5_child[39922]] [main] (0x0400): [RID#151] Will perform online auth * (2026-01-23 8:42:21): [krb5_child[39922]] [tgt_req_child] (0x1000): [RID#151] Attempting to get a TGT * (2026-01-23 8:42:21): [krb5_child[39922]] [get_and_save_tgt] (0x0400): [RID#151] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:21): [krb5_child[39922]] [get_and_save_tgt] (0x0020): [RID#151] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:21): [krb5_child[39922]] [map_krb5_error] (0x0020): [RID#151] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:25): [krb5_child[39926]] [get_and_save_tgt] (0x0020): [RID#154] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:25): [krb5_child[39926]] [main] (0x0400): [RID#154] krb5_child started. * (2026-01-23 8:42:25): [krb5_child[39926]] [unpack_buffer] (0x1000): [RID#154] total buffer size: [99] * (2026-01-23 8:42:25): [krb5_child[39926]] [unpack_buffer] (0x0100): [RID#154] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:25): [krb5_child[39926]] [unpack_buffer] (0x2000): [RID#154] No old ccache * (2026-01-23 8:42:25): [krb5_child[39926]] [unpack_buffer] (0x0100): [RID#154] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:25): [krb5_child[39926]] [k5c_precreate_ccache] (0x4000): [RID#154] Recreating ccache * (2026-01-23 8:42:25): [krb5_child[39926]] [k5c_setup_fast] (0x0100): [RID#154] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:25): [krb5_child[39926]] [find_principal_in_keytab] (0x4000): [RID#154] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:25): [krb5_child[39926]] [match_principal] (0x1000): [RID#154] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:25): [krb5_child[39926]] [check_fast_ccache] (0x0200): [RID#154] FAST TGT is still valid. * (2026-01-23 8:42:25): [krb5_child[39926]] [become_user] (0x0200): [RID#154] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:25): [krb5_child[39926]] [main] (0x2000): [RID#154] Running as [1833000000][1833000000]. * (2026-01-23 8:42:25): [krb5_child[39926]] [set_lifetime_options] (0x0100): [RID#154] No specific renewable lifetime requested. * (2026-01-23 8:42:25): [krb5_child[39926]] [set_lifetime_options] (0x0100): [RID#154] No specific lifetime requested. * (2026-01-23 8:42:25): [krb5_child[39926]] [set_canonicalize_option] (0x0100): [RID#154] Canonicalization is set to [true] * (2026-01-23 8:42:25): [krb5_child[39926]] [main] (0x0400): [RID#154] Will perform auth * (2026-01-23 8:42:25): [krb5_child[39926]] [main] (0x0400): [RID#154] Will perform online auth * (2026-01-23 8:42:25): [krb5_child[39926]] [tgt_req_child] (0x1000): [RID#154] Attempting to get a TGT * (2026-01-23 8:42:25): [krb5_child[39926]] [get_and_save_tgt] (0x0400): [RID#154] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:25): [krb5_child[39926]] [get_and_save_tgt] (0x0020): [RID#154] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:25): [krb5_child[39926]] [map_krb5_error] (0x0020): [RID#154] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:28): [krb5_child[39930]] [get_and_save_tgt] (0x0020): [RID#157] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:28): [krb5_child[39930]] [main] (0x0400): [RID#157] krb5_child started. * (2026-01-23 8:42:28): [krb5_child[39930]] [unpack_buffer] (0x1000): [RID#157] total buffer size: [96] * (2026-01-23 8:42:28): [krb5_child[39930]] [unpack_buffer] (0x0100): [RID#157] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:28): [krb5_child[39930]] [unpack_buffer] (0x2000): [RID#157] No old ccache * (2026-01-23 8:42:28): [krb5_child[39930]] [unpack_buffer] (0x0100): [RID#157] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:28): [krb5_child[39930]] [k5c_precreate_ccache] (0x4000): [RID#157] Recreating ccache * (2026-01-23 8:42:28): [krb5_child[39930]] [k5c_setup_fast] (0x0100): [RID#157] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:28): [krb5_child[39930]] [find_principal_in_keytab] (0x4000): [RID#157] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:28): [krb5_child[39930]] [match_principal] (0x1000): [RID#157] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:28): [krb5_child[39930]] [check_fast_ccache] (0x0200): [RID#157] FAST TGT is still valid. * (2026-01-23 8:42:28): [krb5_child[39930]] [become_user] (0x0200): [RID#157] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:28): [krb5_child[39930]] [main] (0x2000): [RID#157] Running as [1833000000][1833000000]. * (2026-01-23 8:42:28): [krb5_child[39930]] [set_lifetime_options] (0x0100): [RID#157] No specific renewable lifetime requested. * (2026-01-23 8:42:28): [krb5_child[39930]] [set_lifetime_options] (0x0100): [RID#157] No specific lifetime requested. * (2026-01-23 8:42:28): [krb5_child[39930]] [set_canonicalize_option] (0x0100): [RID#157] Canonicalization is set to [true] * (2026-01-23 8:42:28): [krb5_child[39930]] [main] (0x0400): [RID#157] Will perform auth * (2026-01-23 8:42:28): [krb5_child[39930]] [main] (0x0400): [RID#157] Will perform online auth * (2026-01-23 8:42:28): [krb5_child[39930]] [tgt_req_child] (0x1000): [RID#157] Attempting to get a TGT * (2026-01-23 8:42:28): [krb5_child[39930]] [get_and_save_tgt] (0x0400): [RID#157] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:28): [krb5_child[39930]] [get_and_save_tgt] (0x0020): [RID#157] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:28): [krb5_child[39930]] [map_krb5_error] (0x0020): [RID#157] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:33): [krb5_child[39934]] [get_and_save_tgt] (0x0020): [RID#160] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:33): [krb5_child[39934]] [main] (0x0400): [RID#160] krb5_child started. * (2026-01-23 8:42:33): [krb5_child[39934]] [unpack_buffer] (0x1000): [RID#160] total buffer size: [96] * (2026-01-23 8:42:33): [krb5_child[39934]] [unpack_buffer] (0x0100): [RID#160] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:33): [krb5_child[39934]] [unpack_buffer] (0x2000): [RID#160] No old ccache * (2026-01-23 8:42:33): [krb5_child[39934]] [unpack_buffer] (0x0100): [RID#160] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:33): [krb5_child[39934]] [k5c_precreate_ccache] (0x4000): [RID#160] Recreating ccache * (2026-01-23 8:42:33): [krb5_child[39934]] [k5c_setup_fast] (0x0100): [RID#160] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:33): [krb5_child[39934]] [find_principal_in_keytab] (0x4000): [RID#160] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:33): [krb5_child[39934]] [match_principal] (0x1000): [RID#160] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:33): [krb5_child[39934]] [check_fast_ccache] (0x0200): [RID#160] FAST TGT is still valid. * (2026-01-23 8:42:33): [krb5_child[39934]] [become_user] (0x0200): [RID#160] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:33): [krb5_child[39934]] [main] (0x2000): [RID#160] Running as [1833000000][1833000000]. * (2026-01-23 8:42:33): [krb5_child[39934]] [set_lifetime_options] (0x0100): [RID#160] No specific renewable lifetime requested. * (2026-01-23 8:42:33): [krb5_child[39934]] [set_lifetime_options] (0x0100): [RID#160] No specific lifetime requested. * (2026-01-23 8:42:33): [krb5_child[39934]] [set_canonicalize_option] (0x0100): [RID#160] Canonicalization is set to [true] * (2026-01-23 8:42:33): [krb5_child[39934]] [main] (0x0400): [RID#160] Will perform auth * (2026-01-23 8:42:33): [krb5_child[39934]] [main] (0x0400): [RID#160] Will perform online auth * (2026-01-23 8:42:33): [krb5_child[39934]] [tgt_req_child] (0x1000): [RID#160] Attempting to get a TGT * (2026-01-23 8:42:33): [krb5_child[39934]] [get_and_save_tgt] (0x0400): [RID#160] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:33): [krb5_child[39934]] [get_and_save_tgt] (0x0020): [RID#160] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:33): [krb5_child[39934]] [map_krb5_error] (0x0020): [RID#160] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:36): [krb5_child[39938]] [get_and_save_tgt] (0x0020): [RID#162] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:36): [krb5_child[39938]] [main] (0x0400): [RID#162] krb5_child started. * (2026-01-23 8:42:36): [krb5_child[39938]] [unpack_buffer] (0x1000): [RID#162] total buffer size: [100] * (2026-01-23 8:42:36): [krb5_child[39938]] [unpack_buffer] (0x0100): [RID#162] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:36): [krb5_child[39938]] [unpack_buffer] (0x2000): [RID#162] No old ccache * (2026-01-23 8:42:36): [krb5_child[39938]] [unpack_buffer] (0x0100): [RID#162] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:36): [krb5_child[39938]] [k5c_precreate_ccache] (0x4000): [RID#162] Recreating ccache * (2026-01-23 8:42:36): [krb5_child[39938]] [k5c_setup_fast] (0x0100): [RID#162] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:36): [krb5_child[39938]] [find_principal_in_keytab] (0x4000): [RID#162] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:36): [krb5_child[39938]] [match_principal] (0x1000): [RID#162] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:36): [krb5_child[39938]] [check_fast_ccache] (0x0200): [RID#162] FAST TGT is still valid. * (2026-01-23 8:42:36): [krb5_child[39938]] [become_user] (0x0200): [RID#162] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:36): [krb5_child[39938]] [main] (0x2000): [RID#162] Running as [1833000000][1833000000]. * (2026-01-23 8:42:36): [krb5_child[39938]] [set_lifetime_options] (0x0100): [RID#162] No specific renewable lifetime requested. * (2026-01-23 8:42:36): [krb5_child[39938]] [set_lifetime_options] (0x0100): [RID#162] No specific lifetime requested. * (2026-01-23 8:42:36): [krb5_child[39938]] [set_canonicalize_option] (0x0100): [RID#162] Canonicalization is set to [true] * (2026-01-23 8:42:36): [krb5_child[39938]] [main] (0x0400): [RID#162] Will perform auth * (2026-01-23 8:42:36): [krb5_child[39938]] [main] (0x0400): [RID#162] Will perform online auth * (2026-01-23 8:42:36): [krb5_child[39938]] [tgt_req_child] (0x1000): [RID#162] Attempting to get a TGT * (2026-01-23 8:42:36): [krb5_child[39938]] [get_and_save_tgt] (0x0400): [RID#162] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:36): [krb5_child[39938]] [get_and_save_tgt] (0x0020): [RID#162] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:36): [krb5_child[39938]] [map_krb5_error] (0x0020): [RID#162] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:39): [krb5_child[39943]] [get_and_save_tgt] (0x0020): [RID#165] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:39): [krb5_child[39943]] [main] (0x0400): [RID#165] krb5_child started. * (2026-01-23 8:42:39): [krb5_child[39943]] [unpack_buffer] (0x1000): [RID#165] total buffer size: [99] * (2026-01-23 8:42:39): [krb5_child[39943]] [unpack_buffer] (0x0100): [RID#165] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:39): [krb5_child[39943]] [unpack_buffer] (0x2000): [RID#165] No old ccache * (2026-01-23 8:42:39): [krb5_child[39943]] [unpack_buffer] (0x0100): [RID#165] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:39): [krb5_child[39943]] [k5c_precreate_ccache] (0x4000): [RID#165] Recreating ccache * (2026-01-23 8:42:39): [krb5_child[39943]] [k5c_setup_fast] (0x0100): [RID#165] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:39): [krb5_child[39943]] [find_principal_in_keytab] (0x4000): [RID#165] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:39): [krb5_child[39943]] [match_principal] (0x1000): [RID#165] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:39): [krb5_child[39943]] [check_fast_ccache] (0x0200): [RID#165] FAST TGT is still valid. * (2026-01-23 8:42:39): [krb5_child[39943]] [become_user] (0x0200): [RID#165] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:39): [krb5_child[39943]] [main] (0x2000): [RID#165] Running as [1833000000][1833000000]. * (2026-01-23 8:42:39): [krb5_child[39943]] [set_lifetime_options] (0x0100): [RID#165] No specific renewable lifetime requested. * (2026-01-23 8:42:39): [krb5_child[39943]] [set_lifetime_options] (0x0100): [RID#165] No specific lifetime requested. * (2026-01-23 8:42:39): [krb5_child[39943]] [set_canonicalize_option] (0x0100): [RID#165] Canonicalization is set to [true] * (2026-01-23 8:42:39): [krb5_child[39943]] [main] (0x0400): [RID#165] Will perform auth * (2026-01-23 8:42:39): [krb5_child[39943]] [main] (0x0400): [RID#165] Will perform online auth * (2026-01-23 8:42:39): [krb5_child[39943]] [tgt_req_child] (0x1000): [RID#165] Attempting to get a TGT * (2026-01-23 8:42:39): [krb5_child[39943]] [get_and_save_tgt] (0x0400): [RID#165] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:39): [krb5_child[39943]] [get_and_save_tgt] (0x0020): [RID#165] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:39): [krb5_child[39943]] [map_krb5_error] (0x0020): [RID#165] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:44): [krb5_child[39947]] [get_and_save_tgt] (0x0020): [RID#169] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:44): [krb5_child[39947]] [main] (0x0400): [RID#169] krb5_child started. * (2026-01-23 8:42:44): [krb5_child[39947]] [unpack_buffer] (0x1000): [RID#169] total buffer size: [97] * (2026-01-23 8:42:44): [krb5_child[39947]] [unpack_buffer] (0x0100): [RID#169] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:44): [krb5_child[39947]] [unpack_buffer] (0x2000): [RID#169] No old ccache * (2026-01-23 8:42:44): [krb5_child[39947]] [unpack_buffer] (0x0100): [RID#169] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:44): [krb5_child[39947]] [k5c_precreate_ccache] (0x4000): [RID#169] Recreating ccache * (2026-01-23 8:42:44): [krb5_child[39947]] [k5c_setup_fast] (0x0100): [RID#169] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:44): [krb5_child[39947]] [find_principal_in_keytab] (0x4000): [RID#169] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:44): [krb5_child[39947]] [match_principal] (0x1000): [RID#169] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:44): [krb5_child[39947]] [check_fast_ccache] (0x0200): [RID#169] FAST TGT is still valid. * (2026-01-23 8:42:44): [krb5_child[39947]] [become_user] (0x0200): [RID#169] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:44): [krb5_child[39947]] [main] (0x2000): [RID#169] Running as [1833000000][1833000000]. * (2026-01-23 8:42:44): [krb5_child[39947]] [set_lifetime_options] (0x0100): [RID#169] No specific renewable lifetime requested. * (2026-01-23 8:42:44): [krb5_child[39947]] [set_lifetime_options] (0x0100): [RID#169] No specific lifetime requested. * (2026-01-23 8:42:44): [krb5_child[39947]] [set_canonicalize_option] (0x0100): [RID#169] Canonicalization is set to [true] * (2026-01-23 8:42:44): [krb5_child[39947]] [main] (0x0400): [RID#169] Will perform auth * (2026-01-23 8:42:44): [krb5_child[39947]] [main] (0x0400): [RID#169] Will perform online auth * (2026-01-23 8:42:44): [krb5_child[39947]] [tgt_req_child] (0x1000): [RID#169] Attempting to get a TGT * (2026-01-23 8:42:44): [krb5_child[39947]] [get_and_save_tgt] (0x0400): [RID#169] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:44): [krb5_child[39947]] [get_and_save_tgt] (0x0020): [RID#169] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:44): [krb5_child[39947]] [map_krb5_error] (0x0020): [RID#169] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:50): [krb5_child[39951]] [get_and_save_tgt] (0x0020): [RID#172] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:49): [krb5_child[39951]] [main] (0x0400): [RID#172] krb5_child started. * (2026-01-23 8:42:49): [krb5_child[39951]] [unpack_buffer] (0x1000): [RID#172] total buffer size: [95] * (2026-01-23 8:42:49): [krb5_child[39951]] [unpack_buffer] (0x0100): [RID#172] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:49): [krb5_child[39951]] [unpack_buffer] (0x2000): [RID#172] No old ccache * (2026-01-23 8:42:49): [krb5_child[39951]] [unpack_buffer] (0x0100): [RID#172] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:49): [krb5_child[39951]] [k5c_precreate_ccache] (0x4000): [RID#172] Recreating ccache * (2026-01-23 8:42:49): [krb5_child[39951]] [k5c_setup_fast] (0x0100): [RID#172] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:49): [krb5_child[39951]] [find_principal_in_keytab] (0x4000): [RID#172] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:49): [krb5_child[39951]] [match_principal] (0x1000): [RID#172] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:49): [krb5_child[39951]] [check_fast_ccache] (0x0200): [RID#172] FAST TGT is still valid. * (2026-01-23 8:42:49): [krb5_child[39951]] [become_user] (0x0200): [RID#172] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:49): [krb5_child[39951]] [main] (0x2000): [RID#172] Running as [1833000000][1833000000]. * (2026-01-23 8:42:49): [krb5_child[39951]] [set_lifetime_options] (0x0100): [RID#172] No specific renewable lifetime requested. * (2026-01-23 8:42:49): [krb5_child[39951]] [set_lifetime_options] (0x0100): [RID#172] No specific lifetime requested. * (2026-01-23 8:42:49): [krb5_child[39951]] [set_canonicalize_option] (0x0100): [RID#172] Canonicalization is set to [true] * (2026-01-23 8:42:49): [krb5_child[39951]] [main] (0x0400): [RID#172] Will perform auth * (2026-01-23 8:42:49): [krb5_child[39951]] [main] (0x0400): [RID#172] Will perform online auth * (2026-01-23 8:42:49): [krb5_child[39951]] [tgt_req_child] (0x1000): [RID#172] Attempting to get a TGT * (2026-01-23 8:42:49): [krb5_child[39951]] [get_and_save_tgt] (0x0400): [RID#172] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:50): [krb5_child[39951]] [get_and_save_tgt] (0x0020): [RID#172] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:50): [krb5_child[39951]] [map_krb5_error] (0x0020): [RID#172] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:42:55): [krb5_child[39955]] [get_and_save_tgt] (0x0020): [RID#175] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:42:55): [krb5_child[39955]] [main] (0x0400): [RID#175] krb5_child started. * (2026-01-23 8:42:55): [krb5_child[39955]] [unpack_buffer] (0x1000): [RID#175] total buffer size: [94] * (2026-01-23 8:42:55): [krb5_child[39955]] [unpack_buffer] (0x0100): [RID#175] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:42:55): [krb5_child[39955]] [unpack_buffer] (0x2000): [RID#175] No old ccache * (2026-01-23 8:42:55): [krb5_child[39955]] [unpack_buffer] (0x0100): [RID#175] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:42:55): [krb5_child[39955]] [k5c_precreate_ccache] (0x4000): [RID#175] Recreating ccache * (2026-01-23 8:42:55): [krb5_child[39955]] [k5c_setup_fast] (0x0100): [RID#175] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:42:55): [krb5_child[39955]] [find_principal_in_keytab] (0x4000): [RID#175] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:42:55): [krb5_child[39955]] [match_principal] (0x1000): [RID#175] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:42:55): [krb5_child[39955]] [check_fast_ccache] (0x0200): [RID#175] FAST TGT is still valid. * (2026-01-23 8:42:55): [krb5_child[39955]] [become_user] (0x0200): [RID#175] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:42:55): [krb5_child[39955]] [main] (0x2000): [RID#175] Running as [1833000000][1833000000]. * (2026-01-23 8:42:55): [krb5_child[39955]] [set_lifetime_options] (0x0100): [RID#175] No specific renewable lifetime requested. * (2026-01-23 8:42:55): [krb5_child[39955]] [set_lifetime_options] (0x0100): [RID#175] No specific lifetime requested. * (2026-01-23 8:42:55): [krb5_child[39955]] [set_canonicalize_option] (0x0100): [RID#175] Canonicalization is set to [true] * (2026-01-23 8:42:55): [krb5_child[39955]] [main] (0x0400): [RID#175] Will perform auth * (2026-01-23 8:42:55): [krb5_child[39955]] [main] (0x0400): [RID#175] Will perform online auth * (2026-01-23 8:42:55): [krb5_child[39955]] [tgt_req_child] (0x1000): [RID#175] Attempting to get a TGT * (2026-01-23 8:42:55): [krb5_child[39955]] [get_and_save_tgt] (0x0400): [RID#175] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:42:55): [krb5_child[39955]] [get_and_save_tgt] (0x0020): [RID#175] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:42:55): [krb5_child[39955]] [map_krb5_error] (0x0020): [RID#175] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:00): [krb5_child[39959]] [get_and_save_tgt] (0x0020): [RID#179] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:00): [krb5_child[39959]] [main] (0x0400): [RID#179] krb5_child started. * (2026-01-23 8:43:00): [krb5_child[39959]] [unpack_buffer] (0x1000): [RID#179] total buffer size: [97] * (2026-01-23 8:43:00): [krb5_child[39959]] [unpack_buffer] (0x0100): [RID#179] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:00): [krb5_child[39959]] [unpack_buffer] (0x2000): [RID#179] No old ccache * (2026-01-23 8:43:00): [krb5_child[39959]] [unpack_buffer] (0x0100): [RID#179] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:00): [krb5_child[39959]] [k5c_precreate_ccache] (0x4000): [RID#179] Recreating ccache * (2026-01-23 8:43:00): [krb5_child[39959]] [k5c_setup_fast] (0x0100): [RID#179] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:00): [krb5_child[39959]] [find_principal_in_keytab] (0x4000): [RID#179] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:00): [krb5_child[39959]] [match_principal] (0x1000): [RID#179] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:00): [krb5_child[39959]] [check_fast_ccache] (0x0200): [RID#179] FAST TGT is still valid. * (2026-01-23 8:43:00): [krb5_child[39959]] [become_user] (0x0200): [RID#179] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:00): [krb5_child[39959]] [main] (0x2000): [RID#179] Running as [1833000000][1833000000]. * (2026-01-23 8:43:00): [krb5_child[39959]] [set_lifetime_options] (0x0100): [RID#179] No specific renewable lifetime requested. * (2026-01-23 8:43:00): [krb5_child[39959]] [set_lifetime_options] (0x0100): [RID#179] No specific lifetime requested. * (2026-01-23 8:43:00): [krb5_child[39959]] [set_canonicalize_option] (0x0100): [RID#179] Canonicalization is set to [true] * (2026-01-23 8:43:00): [krb5_child[39959]] [main] (0x0400): [RID#179] Will perform auth * (2026-01-23 8:43:00): [krb5_child[39959]] [main] (0x0400): [RID#179] Will perform online auth * (2026-01-23 8:43:00): [krb5_child[39959]] [tgt_req_child] (0x1000): [RID#179] Attempting to get a TGT * (2026-01-23 8:43:00): [krb5_child[39959]] [get_and_save_tgt] (0x0400): [RID#179] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:00): [krb5_child[39959]] [get_and_save_tgt] (0x0020): [RID#179] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:00): [krb5_child[39959]] [map_krb5_error] (0x0020): [RID#179] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:05): [krb5_child[39963]] [get_and_save_tgt] (0x0020): [RID#182] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:05): [krb5_child[39963]] [main] (0x0400): [RID#182] krb5_child started. * (2026-01-23 8:43:05): [krb5_child[39963]] [unpack_buffer] (0x1000): [RID#182] total buffer size: [95] * (2026-01-23 8:43:05): [krb5_child[39963]] [unpack_buffer] (0x0100): [RID#182] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:05): [krb5_child[39963]] [unpack_buffer] (0x2000): [RID#182] No old ccache * (2026-01-23 8:43:05): [krb5_child[39963]] [unpack_buffer] (0x0100): [RID#182] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:05): [krb5_child[39963]] [k5c_precreate_ccache] (0x4000): [RID#182] Recreating ccache * (2026-01-23 8:43:05): [krb5_child[39963]] [k5c_setup_fast] (0x0100): [RID#182] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:05): [krb5_child[39963]] [find_principal_in_keytab] (0x4000): [RID#182] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:05): [krb5_child[39963]] [match_principal] (0x1000): [RID#182] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:05): [krb5_child[39963]] [check_fast_ccache] (0x0200): [RID#182] FAST TGT is still valid. * (2026-01-23 8:43:05): [krb5_child[39963]] [become_user] (0x0200): [RID#182] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:05): [krb5_child[39963]] [main] (0x2000): [RID#182] Running as [1833000000][1833000000]. * (2026-01-23 8:43:05): [krb5_child[39963]] [set_lifetime_options] (0x0100): [RID#182] No specific renewable lifetime requested. * (2026-01-23 8:43:05): [krb5_child[39963]] [set_lifetime_options] (0x0100): [RID#182] No specific lifetime requested. * (2026-01-23 8:43:05): [krb5_child[39963]] [set_canonicalize_option] (0x0100): [RID#182] Canonicalization is set to [true] * (2026-01-23 8:43:05): [krb5_child[39963]] [main] (0x0400): [RID#182] Will perform auth * (2026-01-23 8:43:05): [krb5_child[39963]] [main] (0x0400): [RID#182] Will perform online auth * (2026-01-23 8:43:05): [krb5_child[39963]] [tgt_req_child] (0x1000): [RID#182] Attempting to get a TGT * (2026-01-23 8:43:05): [krb5_child[39963]] [get_and_save_tgt] (0x0400): [RID#182] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:05): [krb5_child[39963]] [get_and_save_tgt] (0x0020): [RID#182] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:05): [krb5_child[39963]] [map_krb5_error] (0x0020): [RID#182] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:10): [krb5_child[39967]] [get_and_save_tgt] (0x0020): [RID#185] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:10): [krb5_child[39967]] [main] (0x0400): [RID#185] krb5_child started. * (2026-01-23 8:43:10): [krb5_child[39967]] [unpack_buffer] (0x1000): [RID#185] total buffer size: [95] * (2026-01-23 8:43:10): [krb5_child[39967]] [unpack_buffer] (0x0100): [RID#185] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:10): [krb5_child[39967]] [unpack_buffer] (0x2000): [RID#185] No old ccache * (2026-01-23 8:43:10): [krb5_child[39967]] [unpack_buffer] (0x0100): [RID#185] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:10): [krb5_child[39967]] [k5c_precreate_ccache] (0x4000): [RID#185] Recreating ccache * (2026-01-23 8:43:10): [krb5_child[39967]] [k5c_setup_fast] (0x0100): [RID#185] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:10): [krb5_child[39967]] [find_principal_in_keytab] (0x4000): [RID#185] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:10): [krb5_child[39967]] [match_principal] (0x1000): [RID#185] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:10): [krb5_child[39967]] [check_fast_ccache] (0x0200): [RID#185] FAST TGT is still valid. * (2026-01-23 8:43:10): [krb5_child[39967]] [become_user] (0x0200): [RID#185] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:10): [krb5_child[39967]] [main] (0x2000): [RID#185] Running as [1833000000][1833000000]. * (2026-01-23 8:43:10): [krb5_child[39967]] [set_lifetime_options] (0x0100): [RID#185] No specific renewable lifetime requested. * (2026-01-23 8:43:10): [krb5_child[39967]] [set_lifetime_options] (0x0100): [RID#185] No specific lifetime requested. * (2026-01-23 8:43:10): [krb5_child[39967]] [set_canonicalize_option] (0x0100): [RID#185] Canonicalization is set to [true] * (2026-01-23 8:43:10): [krb5_child[39967]] [main] (0x0400): [RID#185] Will perform auth * (2026-01-23 8:43:10): [krb5_child[39967]] [main] (0x0400): [RID#185] Will perform online auth * (2026-01-23 8:43:10): [krb5_child[39967]] [tgt_req_child] (0x1000): [RID#185] Attempting to get a TGT * (2026-01-23 8:43:10): [krb5_child[39967]] [get_and_save_tgt] (0x0400): [RID#185] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:10): [krb5_child[39967]] [get_and_save_tgt] (0x0020): [RID#185] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:10): [krb5_child[39967]] [map_krb5_error] (0x0020): [RID#185] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:13): [krb5_child[39971]] [get_and_save_tgt] (0x0020): [RID#187] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:13): [krb5_child[39971]] [main] (0x0400): [RID#187] krb5_child started. * (2026-01-23 8:43:13): [krb5_child[39971]] [unpack_buffer] (0x1000): [RID#187] total buffer size: [99] * (2026-01-23 8:43:13): [krb5_child[39971]] [unpack_buffer] (0x0100): [RID#187] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:13): [krb5_child[39971]] [unpack_buffer] (0x2000): [RID#187] No old ccache * (2026-01-23 8:43:13): [krb5_child[39971]] [unpack_buffer] (0x0100): [RID#187] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:13): [krb5_child[39971]] [k5c_precreate_ccache] (0x4000): [RID#187] Recreating ccache * (2026-01-23 8:43:13): [krb5_child[39971]] [k5c_setup_fast] (0x0100): [RID#187] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:13): [krb5_child[39971]] [find_principal_in_keytab] (0x4000): [RID#187] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:13): [krb5_child[39971]] [match_principal] (0x1000): [RID#187] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:13): [krb5_child[39971]] [check_fast_ccache] (0x0200): [RID#187] FAST TGT is still valid. * (2026-01-23 8:43:13): [krb5_child[39971]] [become_user] (0x0200): [RID#187] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:13): [krb5_child[39971]] [main] (0x2000): [RID#187] Running as [1833000000][1833000000]. * (2026-01-23 8:43:13): [krb5_child[39971]] [set_lifetime_options] (0x0100): [RID#187] No specific renewable lifetime requested. * (2026-01-23 8:43:13): [krb5_child[39971]] [set_lifetime_options] (0x0100): [RID#187] No specific lifetime requested. * (2026-01-23 8:43:13): [krb5_child[39971]] [set_canonicalize_option] (0x0100): [RID#187] Canonicalization is set to [true] * (2026-01-23 8:43:13): [krb5_child[39971]] [main] (0x0400): [RID#187] Will perform auth * (2026-01-23 8:43:13): [krb5_child[39971]] [main] (0x0400): [RID#187] Will perform online auth * (2026-01-23 8:43:13): [krb5_child[39971]] [tgt_req_child] (0x1000): [RID#187] Attempting to get a TGT * (2026-01-23 8:43:13): [krb5_child[39971]] [get_and_save_tgt] (0x0400): [RID#187] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:13): [krb5_child[39971]] [get_and_save_tgt] (0x0020): [RID#187] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:13): [krb5_child[39971]] [map_krb5_error] (0x0020): [RID#187] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:18): [krb5_child[39975]] [get_and_save_tgt] (0x0020): [RID#191] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:18): [krb5_child[39975]] [main] (0x0400): [RID#191] krb5_child started. * (2026-01-23 8:43:18): [krb5_child[39975]] [unpack_buffer] (0x1000): [RID#191] total buffer size: [94] * (2026-01-23 8:43:18): [krb5_child[39975]] [unpack_buffer] (0x0100): [RID#191] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:18): [krb5_child[39975]] [unpack_buffer] (0x2000): [RID#191] No old ccache * (2026-01-23 8:43:18): [krb5_child[39975]] [unpack_buffer] (0x0100): [RID#191] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:18): [krb5_child[39975]] [k5c_precreate_ccache] (0x4000): [RID#191] Recreating ccache * (2026-01-23 8:43:18): [krb5_child[39975]] [k5c_setup_fast] (0x0100): [RID#191] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:18): [krb5_child[39975]] [find_principal_in_keytab] (0x4000): [RID#191] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:18): [krb5_child[39975]] [match_principal] (0x1000): [RID#191] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:18): [krb5_child[39975]] [check_fast_ccache] (0x0200): [RID#191] FAST TGT is still valid. * (2026-01-23 8:43:18): [krb5_child[39975]] [become_user] (0x0200): [RID#191] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:18): [krb5_child[39975]] [main] (0x2000): [RID#191] Running as [1833000000][1833000000]. * (2026-01-23 8:43:18): [krb5_child[39975]] [set_lifetime_options] (0x0100): [RID#191] No specific renewable lifetime requested. * (2026-01-23 8:43:18): [krb5_child[39975]] [set_lifetime_options] (0x0100): [RID#191] No specific lifetime requested. * (2026-01-23 8:43:18): [krb5_child[39975]] [set_canonicalize_option] (0x0100): [RID#191] Canonicalization is set to [true] * (2026-01-23 8:43:18): [krb5_child[39975]] [main] (0x0400): [RID#191] Will perform auth * (2026-01-23 8:43:18): [krb5_child[39975]] [main] (0x0400): [RID#191] Will perform online auth * (2026-01-23 8:43:18): [krb5_child[39975]] [tgt_req_child] (0x1000): [RID#191] Attempting to get a TGT * (2026-01-23 8:43:18): [krb5_child[39975]] [get_and_save_tgt] (0x0400): [RID#191] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:18): [krb5_child[39975]] [get_and_save_tgt] (0x0020): [RID#191] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:18): [krb5_child[39975]] [map_krb5_error] (0x0020): [RID#191] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:21): [krb5_child[39979]] [get_and_save_tgt] (0x0020): [RID#193] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:21): [krb5_child[39979]] [main] (0x0400): [RID#193] krb5_child started. * (2026-01-23 8:43:21): [krb5_child[39979]] [unpack_buffer] (0x1000): [RID#193] total buffer size: [92] * (2026-01-23 8:43:21): [krb5_child[39979]] [unpack_buffer] (0x0100): [RID#193] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:21): [krb5_child[39979]] [unpack_buffer] (0x2000): [RID#193] No old ccache * (2026-01-23 8:43:21): [krb5_child[39979]] [unpack_buffer] (0x0100): [RID#193] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:21): [krb5_child[39979]] [k5c_precreate_ccache] (0x4000): [RID#193] Recreating ccache * (2026-01-23 8:43:21): [krb5_child[39979]] [k5c_setup_fast] (0x0100): [RID#193] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:21): [krb5_child[39979]] [find_principal_in_keytab] (0x4000): [RID#193] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:21): [krb5_child[39979]] [match_principal] (0x1000): [RID#193] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:21): [krb5_child[39979]] [check_fast_ccache] (0x0200): [RID#193] FAST TGT is still valid. * (2026-01-23 8:43:21): [krb5_child[39979]] [become_user] (0x0200): [RID#193] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:21): [krb5_child[39979]] [main] (0x2000): [RID#193] Running as [1833000000][1833000000]. * (2026-01-23 8:43:21): [krb5_child[39979]] [set_lifetime_options] (0x0100): [RID#193] No specific renewable lifetime requested. * (2026-01-23 8:43:21): [krb5_child[39979]] [set_lifetime_options] (0x0100): [RID#193] No specific lifetime requested. * (2026-01-23 8:43:21): [krb5_child[39979]] [set_canonicalize_option] (0x0100): [RID#193] Canonicalization is set to [true] * (2026-01-23 8:43:21): [krb5_child[39979]] [main] (0x0400): [RID#193] Will perform auth * (2026-01-23 8:43:21): [krb5_child[39979]] [main] (0x0400): [RID#193] Will perform online auth * (2026-01-23 8:43:21): [krb5_child[39979]] [tgt_req_child] (0x1000): [RID#193] Attempting to get a TGT * (2026-01-23 8:43:21): [krb5_child[39979]] [get_and_save_tgt] (0x0400): [RID#193] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:21): [krb5_child[39979]] [get_and_save_tgt] (0x0020): [RID#193] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:21): [krb5_child[39979]] [map_krb5_error] (0x0020): [RID#193] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:25): [krb5_child[39983]] [get_and_save_tgt] (0x0020): [RID#196] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:25): [krb5_child[39983]] [main] (0x0400): [RID#196] krb5_child started. * (2026-01-23 8:43:25): [krb5_child[39983]] [unpack_buffer] (0x1000): [RID#196] total buffer size: [95] * (2026-01-23 8:43:25): [krb5_child[39983]] [unpack_buffer] (0x0100): [RID#196] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:25): [krb5_child[39983]] [unpack_buffer] (0x2000): [RID#196] No old ccache * (2026-01-23 8:43:25): [krb5_child[39983]] [unpack_buffer] (0x0100): [RID#196] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:25): [krb5_child[39983]] [k5c_precreate_ccache] (0x4000): [RID#196] Recreating ccache * (2026-01-23 8:43:25): [krb5_child[39983]] [k5c_setup_fast] (0x0100): [RID#196] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:25): [krb5_child[39983]] [find_principal_in_keytab] (0x4000): [RID#196] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:25): [krb5_child[39983]] [match_principal] (0x1000): [RID#196] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:25): [krb5_child[39983]] [check_fast_ccache] (0x0200): [RID#196] FAST TGT is still valid. * (2026-01-23 8:43:25): [krb5_child[39983]] [become_user] (0x0200): [RID#196] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:25): [krb5_child[39983]] [main] (0x2000): [RID#196] Running as [1833000000][1833000000]. * (2026-01-23 8:43:25): [krb5_child[39983]] [set_lifetime_options] (0x0100): [RID#196] No specific renewable lifetime requested. * (2026-01-23 8:43:25): [krb5_child[39983]] [set_lifetime_options] (0x0100): [RID#196] No specific lifetime requested. * (2026-01-23 8:43:25): [krb5_child[39983]] [set_canonicalize_option] (0x0100): [RID#196] Canonicalization is set to [true] * (2026-01-23 8:43:25): [krb5_child[39983]] [main] (0x0400): [RID#196] Will perform auth * (2026-01-23 8:43:25): [krb5_child[39983]] [main] (0x0400): [RID#196] Will perform online auth * (2026-01-23 8:43:25): [krb5_child[39983]] [tgt_req_child] (0x1000): [RID#196] Attempting to get a TGT * (2026-01-23 8:43:25): [krb5_child[39983]] [get_and_save_tgt] (0x0400): [RID#196] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:25): [krb5_child[39983]] [get_and_save_tgt] (0x0020): [RID#196] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:25): [krb5_child[39983]] [map_krb5_error] (0x0020): [RID#196] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:30): [krb5_child[39990]] [get_and_save_tgt] (0x0020): [RID#199] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:30): [krb5_child[39990]] [main] (0x0400): [RID#199] krb5_child started. * (2026-01-23 8:43:30): [krb5_child[39990]] [unpack_buffer] (0x1000): [RID#199] total buffer size: [95] * (2026-01-23 8:43:30): [krb5_child[39990]] [unpack_buffer] (0x0100): [RID#199] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:30): [krb5_child[39990]] [unpack_buffer] (0x2000): [RID#199] No old ccache * (2026-01-23 8:43:30): [krb5_child[39990]] [unpack_buffer] (0x0100): [RID#199] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:30): [krb5_child[39990]] [k5c_precreate_ccache] (0x4000): [RID#199] Recreating ccache * (2026-01-23 8:43:30): [krb5_child[39990]] [k5c_setup_fast] (0x0100): [RID#199] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:30): [krb5_child[39990]] [find_principal_in_keytab] (0x4000): [RID#199] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:30): [krb5_child[39990]] [match_principal] (0x1000): [RID#199] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:30): [krb5_child[39990]] [check_fast_ccache] (0x0200): [RID#199] FAST TGT is still valid. * (2026-01-23 8:43:30): [krb5_child[39990]] [become_user] (0x0200): [RID#199] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:30): [krb5_child[39990]] [main] (0x2000): [RID#199] Running as [1833000000][1833000000]. * (2026-01-23 8:43:30): [krb5_child[39990]] [set_lifetime_options] (0x0100): [RID#199] No specific renewable lifetime requested. * (2026-01-23 8:43:30): [krb5_child[39990]] [set_lifetime_options] (0x0100): [RID#199] No specific lifetime requested. * (2026-01-23 8:43:30): [krb5_child[39990]] [set_canonicalize_option] (0x0100): [RID#199] Canonicalization is set to [true] * (2026-01-23 8:43:30): [krb5_child[39990]] [main] (0x0400): [RID#199] Will perform auth * (2026-01-23 8:43:30): [krb5_child[39990]] [main] (0x0400): [RID#199] Will perform online auth * (2026-01-23 8:43:30): [krb5_child[39990]] [tgt_req_child] (0x1000): [RID#199] Attempting to get a TGT * (2026-01-23 8:43:30): [krb5_child[39990]] [get_and_save_tgt] (0x0400): [RID#199] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:30): [krb5_child[39990]] [get_and_save_tgt] (0x0020): [RID#199] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:30): [krb5_child[39990]] [map_krb5_error] (0x0020): [RID#199] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:33): [krb5_child[39994]] [get_and_save_tgt] (0x0020): [RID#201] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:33): [krb5_child[39994]] [main] (0x0400): [RID#201] krb5_child started. * (2026-01-23 8:43:33): [krb5_child[39994]] [unpack_buffer] (0x1000): [RID#201] total buffer size: [95] * (2026-01-23 8:43:33): [krb5_child[39994]] [unpack_buffer] (0x0100): [RID#201] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:33): [krb5_child[39994]] [unpack_buffer] (0x2000): [RID#201] No old ccache * (2026-01-23 8:43:33): [krb5_child[39994]] [unpack_buffer] (0x0100): [RID#201] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:33): [krb5_child[39994]] [k5c_precreate_ccache] (0x4000): [RID#201] Recreating ccache * (2026-01-23 8:43:33): [krb5_child[39994]] [k5c_setup_fast] (0x0100): [RID#201] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:33): [krb5_child[39994]] [find_principal_in_keytab] (0x4000): [RID#201] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:33): [krb5_child[39994]] [match_principal] (0x1000): [RID#201] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:33): [krb5_child[39994]] [check_fast_ccache] (0x0200): [RID#201] FAST TGT is still valid. * (2026-01-23 8:43:33): [krb5_child[39994]] [become_user] (0x0200): [RID#201] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:33): [krb5_child[39994]] [main] (0x2000): [RID#201] Running as [1833000000][1833000000]. * (2026-01-23 8:43:33): [krb5_child[39994]] [set_lifetime_options] (0x0100): [RID#201] No specific renewable lifetime requested. * (2026-01-23 8:43:33): [krb5_child[39994]] [set_lifetime_options] (0x0100): [RID#201] No specific lifetime requested. * (2026-01-23 8:43:33): [krb5_child[39994]] [set_canonicalize_option] (0x0100): [RID#201] Canonicalization is set to [true] * (2026-01-23 8:43:33): [krb5_child[39994]] [main] (0x0400): [RID#201] Will perform auth * (2026-01-23 8:43:33): [krb5_child[39994]] [main] (0x0400): [RID#201] Will perform online auth * (2026-01-23 8:43:33): [krb5_child[39994]] [tgt_req_child] (0x1000): [RID#201] Attempting to get a TGT * (2026-01-23 8:43:33): [krb5_child[39994]] [get_and_save_tgt] (0x0400): [RID#201] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:33): [krb5_child[39994]] [get_and_save_tgt] (0x0020): [RID#201] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:33): [krb5_child[39994]] [map_krb5_error] (0x0020): [RID#201] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:36): [krb5_child[39998]] [get_and_save_tgt] (0x0020): [RID#205] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:36): [krb5_child[39998]] [main] (0x0400): [RID#205] krb5_child started. * (2026-01-23 8:43:36): [krb5_child[39998]] [unpack_buffer] (0x1000): [RID#205] total buffer size: [95] * (2026-01-23 8:43:36): [krb5_child[39998]] [unpack_buffer] (0x0100): [RID#205] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:36): [krb5_child[39998]] [unpack_buffer] (0x2000): [RID#205] No old ccache * (2026-01-23 8:43:36): [krb5_child[39998]] [unpack_buffer] (0x0100): [RID#205] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:36): [krb5_child[39998]] [k5c_precreate_ccache] (0x4000): [RID#205] Recreating ccache * (2026-01-23 8:43:36): [krb5_child[39998]] [k5c_setup_fast] (0x0100): [RID#205] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:36): [krb5_child[39998]] [find_principal_in_keytab] (0x4000): [RID#205] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:36): [krb5_child[39998]] [match_principal] (0x1000): [RID#205] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:36): [krb5_child[39998]] [check_fast_ccache] (0x0200): [RID#205] FAST TGT is still valid. * (2026-01-23 8:43:36): [krb5_child[39998]] [become_user] (0x0200): [RID#205] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:36): [krb5_child[39998]] [main] (0x2000): [RID#205] Running as [1833000000][1833000000]. * (2026-01-23 8:43:36): [krb5_child[39998]] [set_lifetime_options] (0x0100): [RID#205] No specific renewable lifetime requested. * (2026-01-23 8:43:36): [krb5_child[39998]] [set_lifetime_options] (0x0100): [RID#205] No specific lifetime requested. * (2026-01-23 8:43:36): [krb5_child[39998]] [set_canonicalize_option] (0x0100): [RID#205] Canonicalization is set to [true] * (2026-01-23 8:43:36): [krb5_child[39998]] [main] (0x0400): [RID#205] Will perform auth * (2026-01-23 8:43:36): [krb5_child[39998]] [main] (0x0400): [RID#205] Will perform online auth * (2026-01-23 8:43:36): [krb5_child[39998]] [tgt_req_child] (0x1000): [RID#205] Attempting to get a TGT * (2026-01-23 8:43:36): [krb5_child[39998]] [get_and_save_tgt] (0x0400): [RID#205] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:36): [krb5_child[39998]] [get_and_save_tgt] (0x0020): [RID#205] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:36): [krb5_child[39998]] [map_krb5_error] (0x0020): [RID#205] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:41): [krb5_child[40002]] [get_and_save_tgt] (0x0020): [RID#208] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:41): [krb5_child[40002]] [main] (0x0400): [RID#208] krb5_child started. * (2026-01-23 8:43:41): [krb5_child[40002]] [unpack_buffer] (0x1000): [RID#208] total buffer size: [96] * (2026-01-23 8:43:41): [krb5_child[40002]] [unpack_buffer] (0x0100): [RID#208] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:41): [krb5_child[40002]] [unpack_buffer] (0x2000): [RID#208] No old ccache * (2026-01-23 8:43:41): [krb5_child[40002]] [unpack_buffer] (0x0100): [RID#208] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:41): [krb5_child[40002]] [k5c_precreate_ccache] (0x4000): [RID#208] Recreating ccache * (2026-01-23 8:43:41): [krb5_child[40002]] [k5c_setup_fast] (0x0100): [RID#208] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:41): [krb5_child[40002]] [find_principal_in_keytab] (0x4000): [RID#208] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:41): [krb5_child[40002]] [match_principal] (0x1000): [RID#208] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:41): [krb5_child[40002]] [check_fast_ccache] (0x0200): [RID#208] FAST TGT is still valid. * (2026-01-23 8:43:41): [krb5_child[40002]] [become_user] (0x0200): [RID#208] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:41): [krb5_child[40002]] [main] (0x2000): [RID#208] Running as [1833000000][1833000000]. * (2026-01-23 8:43:41): [krb5_child[40002]] [set_lifetime_options] (0x0100): [RID#208] No specific renewable lifetime requested. * (2026-01-23 8:43:41): [krb5_child[40002]] [set_lifetime_options] (0x0100): [RID#208] No specific lifetime requested. * (2026-01-23 8:43:41): [krb5_child[40002]] [set_canonicalize_option] (0x0100): [RID#208] Canonicalization is set to [true] * (2026-01-23 8:43:41): [krb5_child[40002]] [main] (0x0400): [RID#208] Will perform auth * (2026-01-23 8:43:41): [krb5_child[40002]] [main] (0x0400): [RID#208] Will perform online auth * (2026-01-23 8:43:41): [krb5_child[40002]] [tgt_req_child] (0x1000): [RID#208] Attempting to get a TGT * (2026-01-23 8:43:41): [krb5_child[40002]] [get_and_save_tgt] (0x0400): [RID#208] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:41): [krb5_child[40002]] [get_and_save_tgt] (0x0020): [RID#208] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:41): [krb5_child[40002]] [map_krb5_error] (0x0020): [RID#208] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:47): [krb5_child[40006]] [get_and_save_tgt] (0x0020): [RID#211] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:47): [krb5_child[40006]] [main] (0x0400): [RID#211] krb5_child started. * (2026-01-23 8:43:47): [krb5_child[40006]] [unpack_buffer] (0x1000): [RID#211] total buffer size: [108] * (2026-01-23 8:43:47): [krb5_child[40006]] [unpack_buffer] (0x0100): [RID#211] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:47): [krb5_child[40006]] [unpack_buffer] (0x2000): [RID#211] No old ccache * (2026-01-23 8:43:47): [krb5_child[40006]] [unpack_buffer] (0x0100): [RID#211] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:47): [krb5_child[40006]] [k5c_precreate_ccache] (0x4000): [RID#211] Recreating ccache * (2026-01-23 8:43:47): [krb5_child[40006]] [k5c_setup_fast] (0x0100): [RID#211] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:47): [krb5_child[40006]] [find_principal_in_keytab] (0x4000): [RID#211] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:47): [krb5_child[40006]] [match_principal] (0x1000): [RID#211] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:47): [krb5_child[40006]] [check_fast_ccache] (0x0200): [RID#211] FAST TGT is still valid. * (2026-01-23 8:43:47): [krb5_child[40006]] [become_user] (0x0200): [RID#211] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:47): [krb5_child[40006]] [main] (0x2000): [RID#211] Running as [1833000000][1833000000]. * (2026-01-23 8:43:47): [krb5_child[40006]] [set_lifetime_options] (0x0100): [RID#211] No specific renewable lifetime requested. * (2026-01-23 8:43:47): [krb5_child[40006]] [set_lifetime_options] (0x0100): [RID#211] No specific lifetime requested. * (2026-01-23 8:43:47): [krb5_child[40006]] [set_canonicalize_option] (0x0100): [RID#211] Canonicalization is set to [true] * (2026-01-23 8:43:47): [krb5_child[40006]] [main] (0x0400): [RID#211] Will perform auth * (2026-01-23 8:43:47): [krb5_child[40006]] [main] (0x0400): [RID#211] Will perform online auth * (2026-01-23 8:43:47): [krb5_child[40006]] [tgt_req_child] (0x1000): [RID#211] Attempting to get a TGT * (2026-01-23 8:43:47): [krb5_child[40006]] [get_and_save_tgt] (0x0400): [RID#211] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:47): [krb5_child[40006]] [get_and_save_tgt] (0x0020): [RID#211] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:47): [krb5_child[40006]] [map_krb5_error] (0x0020): [RID#211] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:52): [krb5_child[40010]] [get_and_save_tgt] (0x0020): [RID#215] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:52): [krb5_child[40010]] [main] (0x0400): [RID#215] krb5_child started. * (2026-01-23 8:43:52): [krb5_child[40010]] [unpack_buffer] (0x1000): [RID#215] total buffer size: [97] * (2026-01-23 8:43:52): [krb5_child[40010]] [unpack_buffer] (0x0100): [RID#215] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:52): [krb5_child[40010]] [unpack_buffer] (0x2000): [RID#215] No old ccache * (2026-01-23 8:43:52): [krb5_child[40010]] [unpack_buffer] (0x0100): [RID#215] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:52): [krb5_child[40010]] [k5c_precreate_ccache] (0x4000): [RID#215] Recreating ccache * (2026-01-23 8:43:52): [krb5_child[40010]] [k5c_setup_fast] (0x0100): [RID#215] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:52): [krb5_child[40010]] [find_principal_in_keytab] (0x4000): [RID#215] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:52): [krb5_child[40010]] [match_principal] (0x1000): [RID#215] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:52): [krb5_child[40010]] [check_fast_ccache] (0x0200): [RID#215] FAST TGT is still valid. * (2026-01-23 8:43:52): [krb5_child[40010]] [become_user] (0x0200): [RID#215] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:52): [krb5_child[40010]] [main] (0x2000): [RID#215] Running as [1833000000][1833000000]. * (2026-01-23 8:43:52): [krb5_child[40010]] [set_lifetime_options] (0x0100): [RID#215] No specific renewable lifetime requested. * (2026-01-23 8:43:52): [krb5_child[40010]] [set_lifetime_options] (0x0100): [RID#215] No specific lifetime requested. * (2026-01-23 8:43:52): [krb5_child[40010]] [set_canonicalize_option] (0x0100): [RID#215] Canonicalization is set to [true] * (2026-01-23 8:43:52): [krb5_child[40010]] [main] (0x0400): [RID#215] Will perform auth * (2026-01-23 8:43:52): [krb5_child[40010]] [main] (0x0400): [RID#215] Will perform online auth * (2026-01-23 8:43:52): [krb5_child[40010]] [tgt_req_child] (0x1000): [RID#215] Attempting to get a TGT * (2026-01-23 8:43:52): [krb5_child[40010]] [get_and_save_tgt] (0x0400): [RID#215] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:52): [krb5_child[40010]] [get_and_save_tgt] (0x0020): [RID#215] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:52): [krb5_child[40010]] [map_krb5_error] (0x0020): [RID#215] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:43:55): [krb5_child[40014]] [get_and_save_tgt] (0x0020): [RID#217] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:43:55): [krb5_child[40014]] [main] (0x0400): [RID#217] krb5_child started. * (2026-01-23 8:43:55): [krb5_child[40014]] [unpack_buffer] (0x1000): [RID#217] total buffer size: [92] * (2026-01-23 8:43:55): [krb5_child[40014]] [unpack_buffer] (0x0100): [RID#217] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:43:55): [krb5_child[40014]] [unpack_buffer] (0x2000): [RID#217] No old ccache * (2026-01-23 8:43:55): [krb5_child[40014]] [unpack_buffer] (0x0100): [RID#217] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:43:55): [krb5_child[40014]] [k5c_precreate_ccache] (0x4000): [RID#217] Recreating ccache * (2026-01-23 8:43:55): [krb5_child[40014]] [k5c_setup_fast] (0x0100): [RID#217] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:43:55): [krb5_child[40014]] [find_principal_in_keytab] (0x4000): [RID#217] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:43:55): [krb5_child[40014]] [match_principal] (0x1000): [RID#217] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:43:55): [krb5_child[40014]] [check_fast_ccache] (0x0200): [RID#217] FAST TGT is still valid. * (2026-01-23 8:43:55): [krb5_child[40014]] [become_user] (0x0200): [RID#217] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:43:55): [krb5_child[40014]] [main] (0x2000): [RID#217] Running as [1833000000][1833000000]. * (2026-01-23 8:43:55): [krb5_child[40014]] [set_lifetime_options] (0x0100): [RID#217] No specific renewable lifetime requested. * (2026-01-23 8:43:55): [krb5_child[40014]] [set_lifetime_options] (0x0100): [RID#217] No specific lifetime requested. * (2026-01-23 8:43:55): [krb5_child[40014]] [set_canonicalize_option] (0x0100): [RID#217] Canonicalization is set to [true] * (2026-01-23 8:43:55): [krb5_child[40014]] [main] (0x0400): [RID#217] Will perform auth * (2026-01-23 8:43:55): [krb5_child[40014]] [main] (0x0400): [RID#217] Will perform online auth * (2026-01-23 8:43:55): [krb5_child[40014]] [tgt_req_child] (0x1000): [RID#217] Attempting to get a TGT * (2026-01-23 8:43:55): [krb5_child[40014]] [get_and_save_tgt] (0x0400): [RID#217] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:43:55): [krb5_child[40014]] [get_and_save_tgt] (0x0020): [RID#217] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:43:55): [krb5_child[40014]] [map_krb5_error] (0x0020): [RID#217] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:00): [krb5_child[40018]] [get_and_save_tgt] (0x0020): [RID#220] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:00): [krb5_child[40018]] [main] (0x0400): [RID#220] krb5_child started. * (2026-01-23 8:44:00): [krb5_child[40018]] [unpack_buffer] (0x1000): [RID#220] total buffer size: [92] * (2026-01-23 8:44:00): [krb5_child[40018]] [unpack_buffer] (0x0100): [RID#220] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:00): [krb5_child[40018]] [unpack_buffer] (0x2000): [RID#220] No old ccache * (2026-01-23 8:44:00): [krb5_child[40018]] [unpack_buffer] (0x0100): [RID#220] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:00): [krb5_child[40018]] [k5c_precreate_ccache] (0x4000): [RID#220] Recreating ccache * (2026-01-23 8:44:00): [krb5_child[40018]] [k5c_setup_fast] (0x0100): [RID#220] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:00): [krb5_child[40018]] [find_principal_in_keytab] (0x4000): [RID#220] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:00): [krb5_child[40018]] [match_principal] (0x1000): [RID#220] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:00): [krb5_child[40018]] [check_fast_ccache] (0x0200): [RID#220] FAST TGT is still valid. * (2026-01-23 8:44:00): [krb5_child[40018]] [become_user] (0x0200): [RID#220] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:00): [krb5_child[40018]] [main] (0x2000): [RID#220] Running as [1833000000][1833000000]. * (2026-01-23 8:44:00): [krb5_child[40018]] [set_lifetime_options] (0x0100): [RID#220] No specific renewable lifetime requested. * (2026-01-23 8:44:00): [krb5_child[40018]] [set_lifetime_options] (0x0100): [RID#220] No specific lifetime requested. * (2026-01-23 8:44:00): [krb5_child[40018]] [set_canonicalize_option] (0x0100): [RID#220] Canonicalization is set to [true] * (2026-01-23 8:44:00): [krb5_child[40018]] [main] (0x0400): [RID#220] Will perform auth * (2026-01-23 8:44:00): [krb5_child[40018]] [main] (0x0400): [RID#220] Will perform online auth * (2026-01-23 8:44:00): [krb5_child[40018]] [tgt_req_child] (0x1000): [RID#220] Attempting to get a TGT * (2026-01-23 8:44:00): [krb5_child[40018]] [get_and_save_tgt] (0x0400): [RID#220] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:00): [krb5_child[40018]] [get_and_save_tgt] (0x0020): [RID#220] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:00): [krb5_child[40018]] [map_krb5_error] (0x0020): [RID#220] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:06): [krb5_child[40022]] [get_and_save_tgt] (0x0020): [RID#223] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:06): [krb5_child[40022]] [main] (0x0400): [RID#223] krb5_child started. * (2026-01-23 8:44:06): [krb5_child[40022]] [unpack_buffer] (0x1000): [RID#223] total buffer size: [92] * (2026-01-23 8:44:06): [krb5_child[40022]] [unpack_buffer] (0x0100): [RID#223] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:06): [krb5_child[40022]] [unpack_buffer] (0x2000): [RID#223] No old ccache * (2026-01-23 8:44:06): [krb5_child[40022]] [unpack_buffer] (0x0100): [RID#223] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:06): [krb5_child[40022]] [k5c_precreate_ccache] (0x4000): [RID#223] Recreating ccache * (2026-01-23 8:44:06): [krb5_child[40022]] [k5c_setup_fast] (0x0100): [RID#223] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:06): [krb5_child[40022]] [find_principal_in_keytab] (0x4000): [RID#223] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:06): [krb5_child[40022]] [match_principal] (0x1000): [RID#223] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:06): [krb5_child[40022]] [check_fast_ccache] (0x0200): [RID#223] FAST TGT is still valid. * (2026-01-23 8:44:06): [krb5_child[40022]] [become_user] (0x0200): [RID#223] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:06): [krb5_child[40022]] [main] (0x2000): [RID#223] Running as [1833000000][1833000000]. * (2026-01-23 8:44:06): [krb5_child[40022]] [set_lifetime_options] (0x0100): [RID#223] No specific renewable lifetime requested. * (2026-01-23 8:44:06): [krb5_child[40022]] [set_lifetime_options] (0x0100): [RID#223] No specific lifetime requested. * (2026-01-23 8:44:06): [krb5_child[40022]] [set_canonicalize_option] (0x0100): [RID#223] Canonicalization is set to [true] * (2026-01-23 8:44:06): [krb5_child[40022]] [main] (0x0400): [RID#223] Will perform auth * (2026-01-23 8:44:06): [krb5_child[40022]] [main] (0x0400): [RID#223] Will perform online auth * (2026-01-23 8:44:06): [krb5_child[40022]] [tgt_req_child] (0x1000): [RID#223] Attempting to get a TGT * (2026-01-23 8:44:06): [krb5_child[40022]] [get_and_save_tgt] (0x0400): [RID#223] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:06): [krb5_child[40022]] [get_and_save_tgt] (0x0020): [RID#223] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:06): [krb5_child[40022]] [map_krb5_error] (0x0020): [RID#223] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:09): [krb5_child[40026]] [get_and_save_tgt] (0x0020): [RID#226] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:09): [krb5_child[40026]] [main] (0x0400): [RID#226] krb5_child started. * (2026-01-23 8:44:09): [krb5_child[40026]] [unpack_buffer] (0x1000): [RID#226] total buffer size: [92] * (2026-01-23 8:44:09): [krb5_child[40026]] [unpack_buffer] (0x0100): [RID#226] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:09): [krb5_child[40026]] [unpack_buffer] (0x2000): [RID#226] No old ccache * (2026-01-23 8:44:09): [krb5_child[40026]] [unpack_buffer] (0x0100): [RID#226] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:09): [krb5_child[40026]] [k5c_precreate_ccache] (0x4000): [RID#226] Recreating ccache * (2026-01-23 8:44:09): [krb5_child[40026]] [k5c_setup_fast] (0x0100): [RID#226] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:09): [krb5_child[40026]] [find_principal_in_keytab] (0x4000): [RID#226] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:09): [krb5_child[40026]] [match_principal] (0x1000): [RID#226] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:09): [krb5_child[40026]] [check_fast_ccache] (0x0200): [RID#226] FAST TGT is still valid. * (2026-01-23 8:44:09): [krb5_child[40026]] [become_user] (0x0200): [RID#226] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:09): [krb5_child[40026]] [main] (0x2000): [RID#226] Running as [1833000000][1833000000]. * (2026-01-23 8:44:09): [krb5_child[40026]] [set_lifetime_options] (0x0100): [RID#226] No specific renewable lifetime requested. * (2026-01-23 8:44:09): [krb5_child[40026]] [set_lifetime_options] (0x0100): [RID#226] No specific lifetime requested. * (2026-01-23 8:44:09): [krb5_child[40026]] [set_canonicalize_option] (0x0100): [RID#226] Canonicalization is set to [true] * (2026-01-23 8:44:09): [krb5_child[40026]] [main] (0x0400): [RID#226] Will perform auth * (2026-01-23 8:44:09): [krb5_child[40026]] [main] (0x0400): [RID#226] Will perform online auth * (2026-01-23 8:44:09): [krb5_child[40026]] [tgt_req_child] (0x1000): [RID#226] Attempting to get a TGT * (2026-01-23 8:44:09): [krb5_child[40026]] [get_and_save_tgt] (0x0400): [RID#226] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:09): [krb5_child[40026]] [get_and_save_tgt] (0x0020): [RID#226] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:09): [krb5_child[40026]] [map_krb5_error] (0x0020): [RID#226] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:14): [krb5_child[40030]] [get_and_save_tgt] (0x0020): [RID#229] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:14): [krb5_child[40030]] [main] (0x0400): [RID#229] krb5_child started. * (2026-01-23 8:44:14): [krb5_child[40030]] [unpack_buffer] (0x1000): [RID#229] total buffer size: [92] * (2026-01-23 8:44:14): [krb5_child[40030]] [unpack_buffer] (0x0100): [RID#229] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:14): [krb5_child[40030]] [unpack_buffer] (0x2000): [RID#229] No old ccache * (2026-01-23 8:44:14): [krb5_child[40030]] [unpack_buffer] (0x0100): [RID#229] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:14): [krb5_child[40030]] [k5c_precreate_ccache] (0x4000): [RID#229] Recreating ccache * (2026-01-23 8:44:14): [krb5_child[40030]] [k5c_setup_fast] (0x0100): [RID#229] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:14): [krb5_child[40030]] [find_principal_in_keytab] (0x4000): [RID#229] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:14): [krb5_child[40030]] [match_principal] (0x1000): [RID#229] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:14): [krb5_child[40030]] [check_fast_ccache] (0x0200): [RID#229] FAST TGT is still valid. * (2026-01-23 8:44:14): [krb5_child[40030]] [become_user] (0x0200): [RID#229] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:14): [krb5_child[40030]] [main] (0x2000): [RID#229] Running as [1833000000][1833000000]. * (2026-01-23 8:44:14): [krb5_child[40030]] [set_lifetime_options] (0x0100): [RID#229] No specific renewable lifetime requested. * (2026-01-23 8:44:14): [krb5_child[40030]] [set_lifetime_options] (0x0100): [RID#229] No specific lifetime requested. * (2026-01-23 8:44:14): [krb5_child[40030]] [set_canonicalize_option] (0x0100): [RID#229] Canonicalization is set to [true] * (2026-01-23 8:44:14): [krb5_child[40030]] [main] (0x0400): [RID#229] Will perform auth * (2026-01-23 8:44:14): [krb5_child[40030]] [main] (0x0400): [RID#229] Will perform online auth * (2026-01-23 8:44:14): [krb5_child[40030]] [tgt_req_child] (0x1000): [RID#229] Attempting to get a TGT * (2026-01-23 8:44:14): [krb5_child[40030]] [get_and_save_tgt] (0x0400): [RID#229] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:14): [krb5_child[40030]] [get_and_save_tgt] (0x0020): [RID#229] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:14): [krb5_child[40030]] [map_krb5_error] (0x0020): [RID#229] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:19): [krb5_child[40034]] [get_and_save_tgt] (0x0020): [RID#232] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:19): [krb5_child[40034]] [main] (0x0400): [RID#232] krb5_child started. * (2026-01-23 8:44:19): [krb5_child[40034]] [unpack_buffer] (0x1000): [RID#232] total buffer size: [92] * (2026-01-23 8:44:19): [krb5_child[40034]] [unpack_buffer] (0x0100): [RID#232] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:19): [krb5_child[40034]] [unpack_buffer] (0x2000): [RID#232] No old ccache * (2026-01-23 8:44:19): [krb5_child[40034]] [unpack_buffer] (0x0100): [RID#232] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:19): [krb5_child[40034]] [k5c_precreate_ccache] (0x4000): [RID#232] Recreating ccache * (2026-01-23 8:44:19): [krb5_child[40034]] [k5c_setup_fast] (0x0100): [RID#232] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:19): [krb5_child[40034]] [find_principal_in_keytab] (0x4000): [RID#232] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:19): [krb5_child[40034]] [match_principal] (0x1000): [RID#232] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:19): [krb5_child[40034]] [check_fast_ccache] (0x0200): [RID#232] FAST TGT is still valid. * (2026-01-23 8:44:19): [krb5_child[40034]] [become_user] (0x0200): [RID#232] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:19): [krb5_child[40034]] [main] (0x2000): [RID#232] Running as [1833000000][1833000000]. * (2026-01-23 8:44:19): [krb5_child[40034]] [set_lifetime_options] (0x0100): [RID#232] No specific renewable lifetime requested. * (2026-01-23 8:44:19): [krb5_child[40034]] [set_lifetime_options] (0x0100): [RID#232] No specific lifetime requested. * (2026-01-23 8:44:19): [krb5_child[40034]] [set_canonicalize_option] (0x0100): [RID#232] Canonicalization is set to [true] * (2026-01-23 8:44:19): [krb5_child[40034]] [main] (0x0400): [RID#232] Will perform auth * (2026-01-23 8:44:19): [krb5_child[40034]] [main] (0x0400): [RID#232] Will perform online auth * (2026-01-23 8:44:19): [krb5_child[40034]] [tgt_req_child] (0x1000): [RID#232] Attempting to get a TGT * (2026-01-23 8:44:19): [krb5_child[40034]] [get_and_save_tgt] (0x0400): [RID#232] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:19): [krb5_child[40034]] [get_and_save_tgt] (0x0020): [RID#232] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:19): [krb5_child[40034]] [map_krb5_error] (0x0020): [RID#232] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:24): [krb5_child[40038]] [get_and_save_tgt] (0x0020): [RID#235] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:24): [krb5_child[40038]] [main] (0x0400): [RID#235] krb5_child started. * (2026-01-23 8:44:24): [krb5_child[40038]] [unpack_buffer] (0x1000): [RID#235] total buffer size: [92] * (2026-01-23 8:44:24): [krb5_child[40038]] [unpack_buffer] (0x0100): [RID#235] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:24): [krb5_child[40038]] [unpack_buffer] (0x2000): [RID#235] No old ccache * (2026-01-23 8:44:24): [krb5_child[40038]] [unpack_buffer] (0x0100): [RID#235] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:24): [krb5_child[40038]] [k5c_precreate_ccache] (0x4000): [RID#235] Recreating ccache * (2026-01-23 8:44:24): [krb5_child[40038]] [k5c_setup_fast] (0x0100): [RID#235] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:24): [krb5_child[40038]] [find_principal_in_keytab] (0x4000): [RID#235] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:24): [krb5_child[40038]] [match_principal] (0x1000): [RID#235] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:24): [krb5_child[40038]] [check_fast_ccache] (0x0200): [RID#235] FAST TGT is still valid. * (2026-01-23 8:44:24): [krb5_child[40038]] [become_user] (0x0200): [RID#235] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:24): [krb5_child[40038]] [main] (0x2000): [RID#235] Running as [1833000000][1833000000]. * (2026-01-23 8:44:24): [krb5_child[40038]] [set_lifetime_options] (0x0100): [RID#235] No specific renewable lifetime requested. * (2026-01-23 8:44:24): [krb5_child[40038]] [set_lifetime_options] (0x0100): [RID#235] No specific lifetime requested. * (2026-01-23 8:44:24): [krb5_child[40038]] [set_canonicalize_option] (0x0100): [RID#235] Canonicalization is set to [true] * (2026-01-23 8:44:24): [krb5_child[40038]] [main] (0x0400): [RID#235] Will perform auth * (2026-01-23 8:44:24): [krb5_child[40038]] [main] (0x0400): [RID#235] Will perform online auth * (2026-01-23 8:44:24): [krb5_child[40038]] [tgt_req_child] (0x1000): [RID#235] Attempting to get a TGT * (2026-01-23 8:44:24): [krb5_child[40038]] [get_and_save_tgt] (0x0400): [RID#235] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:24): [krb5_child[40038]] [get_and_save_tgt] (0x0020): [RID#235] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:24): [krb5_child[40038]] [map_krb5_error] (0x0020): [RID#235] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:27): [krb5_child[40042]] [get_and_save_tgt] (0x0020): [RID#238] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:27): [krb5_child[40042]] [main] (0x0400): [RID#238] krb5_child started. * (2026-01-23 8:44:27): [krb5_child[40042]] [unpack_buffer] (0x1000): [RID#238] total buffer size: [92] * (2026-01-23 8:44:27): [krb5_child[40042]] [unpack_buffer] (0x0100): [RID#238] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:27): [krb5_child[40042]] [unpack_buffer] (0x2000): [RID#238] No old ccache * (2026-01-23 8:44:27): [krb5_child[40042]] [unpack_buffer] (0x0100): [RID#238] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:27): [krb5_child[40042]] [k5c_precreate_ccache] (0x4000): [RID#238] Recreating ccache * (2026-01-23 8:44:27): [krb5_child[40042]] [k5c_setup_fast] (0x0100): [RID#238] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:27): [krb5_child[40042]] [find_principal_in_keytab] (0x4000): [RID#238] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:27): [krb5_child[40042]] [match_principal] (0x1000): [RID#238] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:27): [krb5_child[40042]] [check_fast_ccache] (0x0200): [RID#238] FAST TGT is still valid. * (2026-01-23 8:44:27): [krb5_child[40042]] [become_user] (0x0200): [RID#238] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:27): [krb5_child[40042]] [main] (0x2000): [RID#238] Running as [1833000000][1833000000]. * (2026-01-23 8:44:27): [krb5_child[40042]] [set_lifetime_options] (0x0100): [RID#238] No specific renewable lifetime requested. * (2026-01-23 8:44:27): [krb5_child[40042]] [set_lifetime_options] (0x0100): [RID#238] No specific lifetime requested. * (2026-01-23 8:44:27): [krb5_child[40042]] [set_canonicalize_option] (0x0100): [RID#238] Canonicalization is set to [true] * (2026-01-23 8:44:27): [krb5_child[40042]] [main] (0x0400): [RID#238] Will perform auth * (2026-01-23 8:44:27): [krb5_child[40042]] [main] (0x0400): [RID#238] Will perform online auth * (2026-01-23 8:44:27): [krb5_child[40042]] [tgt_req_child] (0x1000): [RID#238] Attempting to get a TGT * (2026-01-23 8:44:27): [krb5_child[40042]] [get_and_save_tgt] (0x0400): [RID#238] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:27): [krb5_child[40042]] [get_and_save_tgt] (0x0020): [RID#238] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:27): [krb5_child[40042]] [map_krb5_error] (0x0020): [RID#238] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:30): [krb5_child[40046]] [get_and_save_tgt] (0x0020): [RID#241] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:30): [krb5_child[40046]] [main] (0x0400): [RID#241] krb5_child started. * (2026-01-23 8:44:30): [krb5_child[40046]] [unpack_buffer] (0x1000): [RID#241] total buffer size: [92] * (2026-01-23 8:44:30): [krb5_child[40046]] [unpack_buffer] (0x0100): [RID#241] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:30): [krb5_child[40046]] [unpack_buffer] (0x2000): [RID#241] No old ccache * (2026-01-23 8:44:30): [krb5_child[40046]] [unpack_buffer] (0x0100): [RID#241] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:30): [krb5_child[40046]] [k5c_precreate_ccache] (0x4000): [RID#241] Recreating ccache * (2026-01-23 8:44:30): [krb5_child[40046]] [k5c_setup_fast] (0x0100): [RID#241] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:30): [krb5_child[40046]] [find_principal_in_keytab] (0x4000): [RID#241] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:30): [krb5_child[40046]] [match_principal] (0x1000): [RID#241] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:30): [krb5_child[40046]] [check_fast_ccache] (0x0200): [RID#241] FAST TGT is still valid. * (2026-01-23 8:44:30): [krb5_child[40046]] [become_user] (0x0200): [RID#241] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:30): [krb5_child[40046]] [main] (0x2000): [RID#241] Running as [1833000000][1833000000]. * (2026-01-23 8:44:30): [krb5_child[40046]] [set_lifetime_options] (0x0100): [RID#241] No specific renewable lifetime requested. * (2026-01-23 8:44:30): [krb5_child[40046]] [set_lifetime_options] (0x0100): [RID#241] No specific lifetime requested. * (2026-01-23 8:44:30): [krb5_child[40046]] [set_canonicalize_option] (0x0100): [RID#241] Canonicalization is set to [true] * (2026-01-23 8:44:30): [krb5_child[40046]] [main] (0x0400): [RID#241] Will perform auth * (2026-01-23 8:44:30): [krb5_child[40046]] [main] (0x0400): [RID#241] Will perform online auth * (2026-01-23 8:44:30): [krb5_child[40046]] [tgt_req_child] (0x1000): [RID#241] Attempting to get a TGT * (2026-01-23 8:44:30): [krb5_child[40046]] [get_and_save_tgt] (0x0400): [RID#241] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:30): [krb5_child[40046]] [get_and_save_tgt] (0x0020): [RID#241] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:30): [krb5_child[40046]] [map_krb5_error] (0x0020): [RID#241] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:36): [krb5_child[40050]] [get_and_save_tgt] (0x0020): [RID#244] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:35): [krb5_child[40050]] [main] (0x0400): [RID#244] krb5_child started. * (2026-01-23 8:44:35): [krb5_child[40050]] [unpack_buffer] (0x1000): [RID#244] total buffer size: [92] * (2026-01-23 8:44:35): [krb5_child[40050]] [unpack_buffer] (0x0100): [RID#244] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:35): [krb5_child[40050]] [unpack_buffer] (0x2000): [RID#244] No old ccache * (2026-01-23 8:44:35): [krb5_child[40050]] [unpack_buffer] (0x0100): [RID#244] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:35): [krb5_child[40050]] [k5c_precreate_ccache] (0x4000): [RID#244] Recreating ccache * (2026-01-23 8:44:35): [krb5_child[40050]] [k5c_setup_fast] (0x0100): [RID#244] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:35): [krb5_child[40050]] [find_principal_in_keytab] (0x4000): [RID#244] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:35): [krb5_child[40050]] [match_principal] (0x1000): [RID#244] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:35): [krb5_child[40050]] [check_fast_ccache] (0x0200): [RID#244] FAST TGT is still valid. * (2026-01-23 8:44:35): [krb5_child[40050]] [become_user] (0x0200): [RID#244] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:35): [krb5_child[40050]] [main] (0x2000): [RID#244] Running as [1833000000][1833000000]. * (2026-01-23 8:44:35): [krb5_child[40050]] [set_lifetime_options] (0x0100): [RID#244] No specific renewable lifetime requested. * (2026-01-23 8:44:35): [krb5_child[40050]] [set_lifetime_options] (0x0100): [RID#244] No specific lifetime requested. * (2026-01-23 8:44:35): [krb5_child[40050]] [set_canonicalize_option] (0x0100): [RID#244] Canonicalization is set to [true] * (2026-01-23 8:44:35): [krb5_child[40050]] [main] (0x0400): [RID#244] Will perform auth * (2026-01-23 8:44:35): [krb5_child[40050]] [main] (0x0400): [RID#244] Will perform online auth * (2026-01-23 8:44:35): [krb5_child[40050]] [tgt_req_child] (0x1000): [RID#244] Attempting to get a TGT * (2026-01-23 8:44:35): [krb5_child[40050]] [get_and_save_tgt] (0x0400): [RID#244] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:36): [krb5_child[40050]] [get_and_save_tgt] (0x0020): [RID#244] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:36): [krb5_child[40050]] [map_krb5_error] (0x0020): [RID#244] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:41): [krb5_child[40054]] [get_and_save_tgt] (0x0020): [RID#247] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:41): [krb5_child[40054]] [main] (0x0400): [RID#247] krb5_child started. * (2026-01-23 8:44:41): [krb5_child[40054]] [unpack_buffer] (0x1000): [RID#247] total buffer size: [92] * (2026-01-23 8:44:41): [krb5_child[40054]] [unpack_buffer] (0x0100): [RID#247] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:41): [krb5_child[40054]] [unpack_buffer] (0x2000): [RID#247] No old ccache * (2026-01-23 8:44:41): [krb5_child[40054]] [unpack_buffer] (0x0100): [RID#247] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:41): [krb5_child[40054]] [k5c_precreate_ccache] (0x4000): [RID#247] Recreating ccache * (2026-01-23 8:44:41): [krb5_child[40054]] [k5c_setup_fast] (0x0100): [RID#247] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:41): [krb5_child[40054]] [find_principal_in_keytab] (0x4000): [RID#247] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:41): [krb5_child[40054]] [match_principal] (0x1000): [RID#247] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:41): [krb5_child[40054]] [check_fast_ccache] (0x0200): [RID#247] FAST TGT is still valid. * (2026-01-23 8:44:41): [krb5_child[40054]] [become_user] (0x0200): [RID#247] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:41): [krb5_child[40054]] [main] (0x2000): [RID#247] Running as [1833000000][1833000000]. * (2026-01-23 8:44:41): [krb5_child[40054]] [set_lifetime_options] (0x0100): [RID#247] No specific renewable lifetime requested. * (2026-01-23 8:44:41): [krb5_child[40054]] [set_lifetime_options] (0x0100): [RID#247] No specific lifetime requested. * (2026-01-23 8:44:41): [krb5_child[40054]] [set_canonicalize_option] (0x0100): [RID#247] Canonicalization is set to [true] * (2026-01-23 8:44:41): [krb5_child[40054]] [main] (0x0400): [RID#247] Will perform auth * (2026-01-23 8:44:41): [krb5_child[40054]] [main] (0x0400): [RID#247] Will perform online auth * (2026-01-23 8:44:41): [krb5_child[40054]] [tgt_req_child] (0x1000): [RID#247] Attempting to get a TGT * (2026-01-23 8:44:41): [krb5_child[40054]] [get_and_save_tgt] (0x0400): [RID#247] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:41): [krb5_child[40054]] [get_and_save_tgt] (0x0020): [RID#247] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:41): [krb5_child[40054]] [map_krb5_error] (0x0020): [RID#247] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:46): [krb5_child[40058]] [get_and_save_tgt] (0x0020): [RID#251] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:46): [krb5_child[40058]] [main] (0x0400): [RID#251] krb5_child started. * (2026-01-23 8:44:46): [krb5_child[40058]] [unpack_buffer] (0x1000): [RID#251] total buffer size: [92] * (2026-01-23 8:44:46): [krb5_child[40058]] [unpack_buffer] (0x0100): [RID#251] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:46): [krb5_child[40058]] [unpack_buffer] (0x2000): [RID#251] No old ccache * (2026-01-23 8:44:46): [krb5_child[40058]] [unpack_buffer] (0x0100): [RID#251] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:46): [krb5_child[40058]] [k5c_precreate_ccache] (0x4000): [RID#251] Recreating ccache * (2026-01-23 8:44:46): [krb5_child[40058]] [k5c_setup_fast] (0x0100): [RID#251] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:46): [krb5_child[40058]] [find_principal_in_keytab] (0x4000): [RID#251] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:46): [krb5_child[40058]] [match_principal] (0x1000): [RID#251] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:46): [krb5_child[40058]] [check_fast_ccache] (0x0200): [RID#251] FAST TGT is still valid. * (2026-01-23 8:44:46): [krb5_child[40058]] [become_user] (0x0200): [RID#251] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:46): [krb5_child[40058]] [main] (0x2000): [RID#251] Running as [1833000000][1833000000]. * (2026-01-23 8:44:46): [krb5_child[40058]] [set_lifetime_options] (0x0100): [RID#251] No specific renewable lifetime requested. * (2026-01-23 8:44:46): [krb5_child[40058]] [set_lifetime_options] (0x0100): [RID#251] No specific lifetime requested. * (2026-01-23 8:44:46): [krb5_child[40058]] [set_canonicalize_option] (0x0100): [RID#251] Canonicalization is set to [true] * (2026-01-23 8:44:46): [krb5_child[40058]] [main] (0x0400): [RID#251] Will perform auth * (2026-01-23 8:44:46): [krb5_child[40058]] [main] (0x0400): [RID#251] Will perform online auth * (2026-01-23 8:44:46): [krb5_child[40058]] [tgt_req_child] (0x1000): [RID#251] Attempting to get a TGT * (2026-01-23 8:44:46): [krb5_child[40058]] [get_and_save_tgt] (0x0400): [RID#251] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:46): [krb5_child[40058]] [get_and_save_tgt] (0x0020): [RID#251] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:46): [krb5_child[40058]] [map_krb5_error] (0x0020): [RID#251] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:50): [krb5_child[40062]] [get_and_save_tgt] (0x0020): [RID#253] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:50): [krb5_child[40062]] [main] (0x0400): [RID#253] krb5_child started. * (2026-01-23 8:44:50): [krb5_child[40062]] [unpack_buffer] (0x1000): [RID#253] total buffer size: [92] * (2026-01-23 8:44:50): [krb5_child[40062]] [unpack_buffer] (0x0100): [RID#253] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:50): [krb5_child[40062]] [unpack_buffer] (0x2000): [RID#253] No old ccache * (2026-01-23 8:44:50): [krb5_child[40062]] [unpack_buffer] (0x0100): [RID#253] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:50): [krb5_child[40062]] [k5c_precreate_ccache] (0x4000): [RID#253] Recreating ccache * (2026-01-23 8:44:50): [krb5_child[40062]] [k5c_setup_fast] (0x0100): [RID#253] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:50): [krb5_child[40062]] [find_principal_in_keytab] (0x4000): [RID#253] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:50): [krb5_child[40062]] [match_principal] (0x1000): [RID#253] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:50): [krb5_child[40062]] [check_fast_ccache] (0x0200): [RID#253] FAST TGT is still valid. * (2026-01-23 8:44:50): [krb5_child[40062]] [become_user] (0x0200): [RID#253] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:50): [krb5_child[40062]] [main] (0x2000): [RID#253] Running as [1833000000][1833000000]. * (2026-01-23 8:44:50): [krb5_child[40062]] [set_lifetime_options] (0x0100): [RID#253] No specific renewable lifetime requested. * (2026-01-23 8:44:50): [krb5_child[40062]] [set_lifetime_options] (0x0100): [RID#253] No specific lifetime requested. * (2026-01-23 8:44:50): [krb5_child[40062]] [set_canonicalize_option] (0x0100): [RID#253] Canonicalization is set to [true] * (2026-01-23 8:44:50): [krb5_child[40062]] [main] (0x0400): [RID#253] Will perform auth * (2026-01-23 8:44:50): [krb5_child[40062]] [main] (0x0400): [RID#253] Will perform online auth * (2026-01-23 8:44:50): [krb5_child[40062]] [tgt_req_child] (0x1000): [RID#253] Attempting to get a TGT * (2026-01-23 8:44:50): [krb5_child[40062]] [get_and_save_tgt] (0x0400): [RID#253] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:50): [krb5_child[40062]] [get_and_save_tgt] (0x0020): [RID#253] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:50): [krb5_child[40062]] [map_krb5_error] (0x0020): [RID#253] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:44:54): [krb5_child[40066]] [get_and_save_tgt] (0x0020): [RID#256] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:44:54): [krb5_child[40066]] [main] (0x0400): [RID#256] krb5_child started. * (2026-01-23 8:44:54): [krb5_child[40066]] [unpack_buffer] (0x1000): [RID#256] total buffer size: [92] * (2026-01-23 8:44:54): [krb5_child[40066]] [unpack_buffer] (0x0100): [RID#256] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:44:54): [krb5_child[40066]] [unpack_buffer] (0x2000): [RID#256] No old ccache * (2026-01-23 8:44:54): [krb5_child[40066]] [unpack_buffer] (0x0100): [RID#256] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:44:54): [krb5_child[40066]] [k5c_precreate_ccache] (0x4000): [RID#256] Recreating ccache * (2026-01-23 8:44:54): [krb5_child[40066]] [k5c_setup_fast] (0x0100): [RID#256] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:44:54): [krb5_child[40066]] [find_principal_in_keytab] (0x4000): [RID#256] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:44:54): [krb5_child[40066]] [match_principal] (0x1000): [RID#256] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:44:54): [krb5_child[40066]] [check_fast_ccache] (0x0200): [RID#256] FAST TGT is still valid. * (2026-01-23 8:44:54): [krb5_child[40066]] [become_user] (0x0200): [RID#256] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:44:54): [krb5_child[40066]] [main] (0x2000): [RID#256] Running as [1833000000][1833000000]. * (2026-01-23 8:44:54): [krb5_child[40066]] [set_lifetime_options] (0x0100): [RID#256] No specific renewable lifetime requested. * (2026-01-23 8:44:54): [krb5_child[40066]] [set_lifetime_options] (0x0100): [RID#256] No specific lifetime requested. * (2026-01-23 8:44:54): [krb5_child[40066]] [set_canonicalize_option] (0x0100): [RID#256] Canonicalization is set to [true] * (2026-01-23 8:44:54): [krb5_child[40066]] [main] (0x0400): [RID#256] Will perform auth * (2026-01-23 8:44:54): [krb5_child[40066]] [main] (0x0400): [RID#256] Will perform online auth * (2026-01-23 8:44:54): [krb5_child[40066]] [tgt_req_child] (0x1000): [RID#256] Attempting to get a TGT * (2026-01-23 8:44:54): [krb5_child[40066]] [get_and_save_tgt] (0x0400): [RID#256] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:44:54): [krb5_child[40066]] [get_and_save_tgt] (0x0020): [RID#256] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:44:54): [krb5_child[40066]] [map_krb5_error] (0x0020): [RID#256] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:00): [krb5_child[40070]] [get_and_save_tgt] (0x0020): [RID#259] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:00): [krb5_child[40070]] [main] (0x0400): [RID#259] krb5_child started. * (2026-01-23 8:45:00): [krb5_child[40070]] [unpack_buffer] (0x1000): [RID#259] total buffer size: [92] * (2026-01-23 8:45:00): [krb5_child[40070]] [unpack_buffer] (0x0100): [RID#259] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:00): [krb5_child[40070]] [unpack_buffer] (0x2000): [RID#259] No old ccache * (2026-01-23 8:45:00): [krb5_child[40070]] [unpack_buffer] (0x0100): [RID#259] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:00): [krb5_child[40070]] [k5c_precreate_ccache] (0x4000): [RID#259] Recreating ccache * (2026-01-23 8:45:00): [krb5_child[40070]] [k5c_setup_fast] (0x0100): [RID#259] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:00): [krb5_child[40070]] [find_principal_in_keytab] (0x4000): [RID#259] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:00): [krb5_child[40070]] [match_principal] (0x1000): [RID#259] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:00): [krb5_child[40070]] [check_fast_ccache] (0x0200): [RID#259] FAST TGT is still valid. * (2026-01-23 8:45:00): [krb5_child[40070]] [become_user] (0x0200): [RID#259] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:00): [krb5_child[40070]] [main] (0x2000): [RID#259] Running as [1833000000][1833000000]. * (2026-01-23 8:45:00): [krb5_child[40070]] [set_lifetime_options] (0x0100): [RID#259] No specific renewable lifetime requested. * (2026-01-23 8:45:00): [krb5_child[40070]] [set_lifetime_options] (0x0100): [RID#259] No specific lifetime requested. * (2026-01-23 8:45:00): [krb5_child[40070]] [set_canonicalize_option] (0x0100): [RID#259] Canonicalization is set to [true] * (2026-01-23 8:45:00): [krb5_child[40070]] [main] (0x0400): [RID#259] Will perform auth * (2026-01-23 8:45:00): [krb5_child[40070]] [main] (0x0400): [RID#259] Will perform online auth * (2026-01-23 8:45:00): [krb5_child[40070]] [tgt_req_child] (0x1000): [RID#259] Attempting to get a TGT * (2026-01-23 8:45:00): [krb5_child[40070]] [get_and_save_tgt] (0x0400): [RID#259] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:00): [krb5_child[40070]] [get_and_save_tgt] (0x0020): [RID#259] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:00): [krb5_child[40070]] [map_krb5_error] (0x0020): [RID#259] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:05): [krb5_child[40074]] [get_and_save_tgt] (0x0020): [RID#263] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:05): [krb5_child[40074]] [main] (0x0400): [RID#263] krb5_child started. * (2026-01-23 8:45:05): [krb5_child[40074]] [unpack_buffer] (0x1000): [RID#263] total buffer size: [92] * (2026-01-23 8:45:05): [krb5_child[40074]] [unpack_buffer] (0x0100): [RID#263] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:05): [krb5_child[40074]] [unpack_buffer] (0x2000): [RID#263] No old ccache * (2026-01-23 8:45:05): [krb5_child[40074]] [unpack_buffer] (0x0100): [RID#263] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:05): [krb5_child[40074]] [k5c_precreate_ccache] (0x4000): [RID#263] Recreating ccache * (2026-01-23 8:45:05): [krb5_child[40074]] [k5c_setup_fast] (0x0100): [RID#263] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:05): [krb5_child[40074]] [find_principal_in_keytab] (0x4000): [RID#263] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:05): [krb5_child[40074]] [match_principal] (0x1000): [RID#263] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:05): [krb5_child[40074]] [check_fast_ccache] (0x0200): [RID#263] FAST TGT is still valid. * (2026-01-23 8:45:05): [krb5_child[40074]] [become_user] (0x0200): [RID#263] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:05): [krb5_child[40074]] [main] (0x2000): [RID#263] Running as [1833000000][1833000000]. * (2026-01-23 8:45:05): [krb5_child[40074]] [set_lifetime_options] (0x0100): [RID#263] No specific renewable lifetime requested. * (2026-01-23 8:45:05): [krb5_child[40074]] [set_lifetime_options] (0x0100): [RID#263] No specific lifetime requested. * (2026-01-23 8:45:05): [krb5_child[40074]] [set_canonicalize_option] (0x0100): [RID#263] Canonicalization is set to [true] * (2026-01-23 8:45:05): [krb5_child[40074]] [main] (0x0400): [RID#263] Will perform auth * (2026-01-23 8:45:05): [krb5_child[40074]] [main] (0x0400): [RID#263] Will perform online auth * (2026-01-23 8:45:05): [krb5_child[40074]] [tgt_req_child] (0x1000): [RID#263] Attempting to get a TGT * (2026-01-23 8:45:05): [krb5_child[40074]] [get_and_save_tgt] (0x0400): [RID#263] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:05): [krb5_child[40074]] [get_and_save_tgt] (0x0020): [RID#263] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:05): [krb5_child[40074]] [map_krb5_error] (0x0020): [RID#263] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:10): [krb5_child[40078]] [get_and_save_tgt] (0x0020): [RID#265] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:10): [krb5_child[40078]] [main] (0x0400): [RID#265] krb5_child started. * (2026-01-23 8:45:10): [krb5_child[40078]] [unpack_buffer] (0x1000): [RID#265] total buffer size: [92] * (2026-01-23 8:45:10): [krb5_child[40078]] [unpack_buffer] (0x0100): [RID#265] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:10): [krb5_child[40078]] [unpack_buffer] (0x2000): [RID#265] No old ccache * (2026-01-23 8:45:10): [krb5_child[40078]] [unpack_buffer] (0x0100): [RID#265] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:10): [krb5_child[40078]] [k5c_precreate_ccache] (0x4000): [RID#265] Recreating ccache * (2026-01-23 8:45:10): [krb5_child[40078]] [k5c_setup_fast] (0x0100): [RID#265] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:10): [krb5_child[40078]] [find_principal_in_keytab] (0x4000): [RID#265] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:10): [krb5_child[40078]] [match_principal] (0x1000): [RID#265] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:10): [krb5_child[40078]] [check_fast_ccache] (0x0200): [RID#265] FAST TGT is still valid. * (2026-01-23 8:45:10): [krb5_child[40078]] [become_user] (0x0200): [RID#265] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:10): [krb5_child[40078]] [main] (0x2000): [RID#265] Running as [1833000000][1833000000]. * (2026-01-23 8:45:10): [krb5_child[40078]] [set_lifetime_options] (0x0100): [RID#265] No specific renewable lifetime requested. * (2026-01-23 8:45:10): [krb5_child[40078]] [set_lifetime_options] (0x0100): [RID#265] No specific lifetime requested. * (2026-01-23 8:45:10): [krb5_child[40078]] [set_canonicalize_option] (0x0100): [RID#265] Canonicalization is set to [true] * (2026-01-23 8:45:10): [krb5_child[40078]] [main] (0x0400): [RID#265] Will perform auth * (2026-01-23 8:45:10): [krb5_child[40078]] [main] (0x0400): [RID#265] Will perform online auth * (2026-01-23 8:45:10): [krb5_child[40078]] [tgt_req_child] (0x1000): [RID#265] Attempting to get a TGT * (2026-01-23 8:45:10): [krb5_child[40078]] [get_and_save_tgt] (0x0400): [RID#265] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:10): [krb5_child[40078]] [get_and_save_tgt] (0x0020): [RID#265] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:10): [krb5_child[40078]] [map_krb5_error] (0x0020): [RID#265] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:13): [krb5_child[40082]] [get_and_save_tgt] (0x0020): [RID#268] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:13): [krb5_child[40082]] [main] (0x0400): [RID#268] krb5_child started. * (2026-01-23 8:45:13): [krb5_child[40082]] [unpack_buffer] (0x1000): [RID#268] total buffer size: [92] * (2026-01-23 8:45:13): [krb5_child[40082]] [unpack_buffer] (0x0100): [RID#268] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:13): [krb5_child[40082]] [unpack_buffer] (0x2000): [RID#268] No old ccache * (2026-01-23 8:45:13): [krb5_child[40082]] [unpack_buffer] (0x0100): [RID#268] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:13): [krb5_child[40082]] [k5c_precreate_ccache] (0x4000): [RID#268] Recreating ccache * (2026-01-23 8:45:13): [krb5_child[40082]] [k5c_setup_fast] (0x0100): [RID#268] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:13): [krb5_child[40082]] [find_principal_in_keytab] (0x4000): [RID#268] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:13): [krb5_child[40082]] [match_principal] (0x1000): [RID#268] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:13): [krb5_child[40082]] [check_fast_ccache] (0x0200): [RID#268] FAST TGT is still valid. * (2026-01-23 8:45:13): [krb5_child[40082]] [become_user] (0x0200): [RID#268] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:13): [krb5_child[40082]] [main] (0x2000): [RID#268] Running as [1833000000][1833000000]. * (2026-01-23 8:45:13): [krb5_child[40082]] [set_lifetime_options] (0x0100): [RID#268] No specific renewable lifetime requested. * (2026-01-23 8:45:13): [krb5_child[40082]] [set_lifetime_options] (0x0100): [RID#268] No specific lifetime requested. * (2026-01-23 8:45:13): [krb5_child[40082]] [set_canonicalize_option] (0x0100): [RID#268] Canonicalization is set to [true] * (2026-01-23 8:45:13): [krb5_child[40082]] [main] (0x0400): [RID#268] Will perform auth * (2026-01-23 8:45:13): [krb5_child[40082]] [main] (0x0400): [RID#268] Will perform online auth * (2026-01-23 8:45:13): [krb5_child[40082]] [tgt_req_child] (0x1000): [RID#268] Attempting to get a TGT * (2026-01-23 8:45:13): [krb5_child[40082]] [get_and_save_tgt] (0x0400): [RID#268] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:13): [krb5_child[40082]] [get_and_save_tgt] (0x0020): [RID#268] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:13): [krb5_child[40082]] [map_krb5_error] (0x0020): [RID#268] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:18): [krb5_child[40086]] [get_and_save_tgt] (0x0020): [RID#271] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:18): [krb5_child[40086]] [main] (0x0400): [RID#271] krb5_child started. * (2026-01-23 8:45:18): [krb5_child[40086]] [unpack_buffer] (0x1000): [RID#271] total buffer size: [92] * (2026-01-23 8:45:18): [krb5_child[40086]] [unpack_buffer] (0x0100): [RID#271] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:18): [krb5_child[40086]] [unpack_buffer] (0x2000): [RID#271] No old ccache * (2026-01-23 8:45:18): [krb5_child[40086]] [unpack_buffer] (0x0100): [RID#271] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:18): [krb5_child[40086]] [k5c_precreate_ccache] (0x4000): [RID#271] Recreating ccache * (2026-01-23 8:45:18): [krb5_child[40086]] [k5c_setup_fast] (0x0100): [RID#271] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:18): [krb5_child[40086]] [find_principal_in_keytab] (0x4000): [RID#271] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:18): [krb5_child[40086]] [match_principal] (0x1000): [RID#271] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:18): [krb5_child[40086]] [check_fast_ccache] (0x0200): [RID#271] FAST TGT is still valid. * (2026-01-23 8:45:18): [krb5_child[40086]] [become_user] (0x0200): [RID#271] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:18): [krb5_child[40086]] [main] (0x2000): [RID#271] Running as [1833000000][1833000000]. * (2026-01-23 8:45:18): [krb5_child[40086]] [set_lifetime_options] (0x0100): [RID#271] No specific renewable lifetime requested. * (2026-01-23 8:45:18): [krb5_child[40086]] [set_lifetime_options] (0x0100): [RID#271] No specific lifetime requested. * (2026-01-23 8:45:18): [krb5_child[40086]] [set_canonicalize_option] (0x0100): [RID#271] Canonicalization is set to [true] * (2026-01-23 8:45:18): [krb5_child[40086]] [main] (0x0400): [RID#271] Will perform auth * (2026-01-23 8:45:18): [krb5_child[40086]] [main] (0x0400): [RID#271] Will perform online auth * (2026-01-23 8:45:18): [krb5_child[40086]] [tgt_req_child] (0x1000): [RID#271] Attempting to get a TGT * (2026-01-23 8:45:18): [krb5_child[40086]] [get_and_save_tgt] (0x0400): [RID#271] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:18): [krb5_child[40086]] [get_and_save_tgt] (0x0020): [RID#271] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:18): [krb5_child[40086]] [map_krb5_error] (0x0020): [RID#271] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:23): [krb5_child[40090]] [get_and_save_tgt] (0x0020): [RID#275] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:23): [krb5_child[40090]] [main] (0x0400): [RID#275] krb5_child started. * (2026-01-23 8:45:23): [krb5_child[40090]] [unpack_buffer] (0x1000): [RID#275] total buffer size: [92] * (2026-01-23 8:45:23): [krb5_child[40090]] [unpack_buffer] (0x0100): [RID#275] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:23): [krb5_child[40090]] [unpack_buffer] (0x2000): [RID#275] No old ccache * (2026-01-23 8:45:23): [krb5_child[40090]] [unpack_buffer] (0x0100): [RID#275] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:23): [krb5_child[40090]] [k5c_precreate_ccache] (0x4000): [RID#275] Recreating ccache * (2026-01-23 8:45:23): [krb5_child[40090]] [k5c_setup_fast] (0x0100): [RID#275] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:23): [krb5_child[40090]] [find_principal_in_keytab] (0x4000): [RID#275] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:23): [krb5_child[40090]] [match_principal] (0x1000): [RID#275] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:23): [krb5_child[40090]] [check_fast_ccache] (0x0200): [RID#275] FAST TGT is still valid. * (2026-01-23 8:45:23): [krb5_child[40090]] [become_user] (0x0200): [RID#275] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:23): [krb5_child[40090]] [main] (0x2000): [RID#275] Running as [1833000000][1833000000]. * (2026-01-23 8:45:23): [krb5_child[40090]] [set_lifetime_options] (0x0100): [RID#275] No specific renewable lifetime requested. * (2026-01-23 8:45:23): [krb5_child[40090]] [set_lifetime_options] (0x0100): [RID#275] No specific lifetime requested. * (2026-01-23 8:45:23): [krb5_child[40090]] [set_canonicalize_option] (0x0100): [RID#275] Canonicalization is set to [true] * (2026-01-23 8:45:23): [krb5_child[40090]] [main] (0x0400): [RID#275] Will perform auth * (2026-01-23 8:45:23): [krb5_child[40090]] [main] (0x0400): [RID#275] Will perform online auth * (2026-01-23 8:45:23): [krb5_child[40090]] [tgt_req_child] (0x1000): [RID#275] Attempting to get a TGT * (2026-01-23 8:45:23): [krb5_child[40090]] [get_and_save_tgt] (0x0400): [RID#275] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:23): [krb5_child[40090]] [get_and_save_tgt] (0x0020): [RID#275] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:23): [krb5_child[40090]] [map_krb5_error] (0x0020): [RID#275] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:26): [krb5_child[40094]] [get_and_save_tgt] (0x0020): [RID#277] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:26): [krb5_child[40094]] [main] (0x0400): [RID#277] krb5_child started. * (2026-01-23 8:45:26): [krb5_child[40094]] [unpack_buffer] (0x1000): [RID#277] total buffer size: [92] * (2026-01-23 8:45:26): [krb5_child[40094]] [unpack_buffer] (0x0100): [RID#277] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:26): [krb5_child[40094]] [unpack_buffer] (0x2000): [RID#277] No old ccache * (2026-01-23 8:45:26): [krb5_child[40094]] [unpack_buffer] (0x0100): [RID#277] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:26): [krb5_child[40094]] [k5c_precreate_ccache] (0x4000): [RID#277] Recreating ccache * (2026-01-23 8:45:26): [krb5_child[40094]] [k5c_setup_fast] (0x0100): [RID#277] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:26): [krb5_child[40094]] [find_principal_in_keytab] (0x4000): [RID#277] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:26): [krb5_child[40094]] [match_principal] (0x1000): [RID#277] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:26): [krb5_child[40094]] [check_fast_ccache] (0x0200): [RID#277] FAST TGT is still valid. * (2026-01-23 8:45:26): [krb5_child[40094]] [become_user] (0x0200): [RID#277] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:26): [krb5_child[40094]] [main] (0x2000): [RID#277] Running as [1833000000][1833000000]. * (2026-01-23 8:45:26): [krb5_child[40094]] [set_lifetime_options] (0x0100): [RID#277] No specific renewable lifetime requested. * (2026-01-23 8:45:26): [krb5_child[40094]] [set_lifetime_options] (0x0100): [RID#277] No specific lifetime requested. * (2026-01-23 8:45:26): [krb5_child[40094]] [set_canonicalize_option] (0x0100): [RID#277] Canonicalization is set to [true] * (2026-01-23 8:45:26): [krb5_child[40094]] [main] (0x0400): [RID#277] Will perform auth * (2026-01-23 8:45:26): [krb5_child[40094]] [main] (0x0400): [RID#277] Will perform online auth * (2026-01-23 8:45:26): [krb5_child[40094]] [tgt_req_child] (0x1000): [RID#277] Attempting to get a TGT * (2026-01-23 8:45:26): [krb5_child[40094]] [get_and_save_tgt] (0x0400): [RID#277] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:26): [krb5_child[40094]] [get_and_save_tgt] (0x0020): [RID#277] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:26): [krb5_child[40094]] [map_krb5_error] (0x0020): [RID#277] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:32): [krb5_child[40098]] [get_and_save_tgt] (0x0020): [RID#280] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:32): [krb5_child[40098]] [main] (0x0400): [RID#280] krb5_child started. * (2026-01-23 8:45:32): [krb5_child[40098]] [unpack_buffer] (0x1000): [RID#280] total buffer size: [92] * (2026-01-23 8:45:32): [krb5_child[40098]] [unpack_buffer] (0x0100): [RID#280] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:32): [krb5_child[40098]] [unpack_buffer] (0x2000): [RID#280] No old ccache * (2026-01-23 8:45:32): [krb5_child[40098]] [unpack_buffer] (0x0100): [RID#280] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:32): [krb5_child[40098]] [k5c_precreate_ccache] (0x4000): [RID#280] Recreating ccache * (2026-01-23 8:45:32): [krb5_child[40098]] [k5c_setup_fast] (0x0100): [RID#280] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:32): [krb5_child[40098]] [find_principal_in_keytab] (0x4000): [RID#280] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:32): [krb5_child[40098]] [match_principal] (0x1000): [RID#280] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:32): [krb5_child[40098]] [check_fast_ccache] (0x0200): [RID#280] FAST TGT is still valid. * (2026-01-23 8:45:32): [krb5_child[40098]] [become_user] (0x0200): [RID#280] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:32): [krb5_child[40098]] [main] (0x2000): [RID#280] Running as [1833000000][1833000000]. * (2026-01-23 8:45:32): [krb5_child[40098]] [set_lifetime_options] (0x0100): [RID#280] No specific renewable lifetime requested. * (2026-01-23 8:45:32): [krb5_child[40098]] [set_lifetime_options] (0x0100): [RID#280] No specific lifetime requested. * (2026-01-23 8:45:32): [krb5_child[40098]] [set_canonicalize_option] (0x0100): [RID#280] Canonicalization is set to [true] * (2026-01-23 8:45:32): [krb5_child[40098]] [main] (0x0400): [RID#280] Will perform auth * (2026-01-23 8:45:32): [krb5_child[40098]] [main] (0x0400): [RID#280] Will perform online auth * (2026-01-23 8:45:32): [krb5_child[40098]] [tgt_req_child] (0x1000): [RID#280] Attempting to get a TGT * (2026-01-23 8:45:32): [krb5_child[40098]] [get_and_save_tgt] (0x0400): [RID#280] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:32): [krb5_child[40098]] [get_and_save_tgt] (0x0020): [RID#280] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:32): [krb5_child[40098]] [map_krb5_error] (0x0020): [RID#280] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:37): [krb5_child[40102]] [get_and_save_tgt] (0x0020): [RID#283] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:37): [krb5_child[40102]] [main] (0x0400): [RID#283] krb5_child started. * (2026-01-23 8:45:37): [krb5_child[40102]] [unpack_buffer] (0x1000): [RID#283] total buffer size: [92] * (2026-01-23 8:45:37): [krb5_child[40102]] [unpack_buffer] (0x0100): [RID#283] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:37): [krb5_child[40102]] [unpack_buffer] (0x2000): [RID#283] No old ccache * (2026-01-23 8:45:37): [krb5_child[40102]] [unpack_buffer] (0x0100): [RID#283] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:37): [krb5_child[40102]] [k5c_precreate_ccache] (0x4000): [RID#283] Recreating ccache * (2026-01-23 8:45:37): [krb5_child[40102]] [k5c_setup_fast] (0x0100): [RID#283] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:37): [krb5_child[40102]] [find_principal_in_keytab] (0x4000): [RID#283] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:37): [krb5_child[40102]] [match_principal] (0x1000): [RID#283] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:37): [krb5_child[40102]] [check_fast_ccache] (0x0200): [RID#283] FAST TGT is still valid. * (2026-01-23 8:45:37): [krb5_child[40102]] [become_user] (0x0200): [RID#283] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:37): [krb5_child[40102]] [main] (0x2000): [RID#283] Running as [1833000000][1833000000]. * (2026-01-23 8:45:37): [krb5_child[40102]] [set_lifetime_options] (0x0100): [RID#283] No specific renewable lifetime requested. * (2026-01-23 8:45:37): [krb5_child[40102]] [set_lifetime_options] (0x0100): [RID#283] No specific lifetime requested. * (2026-01-23 8:45:37): [krb5_child[40102]] [set_canonicalize_option] (0x0100): [RID#283] Canonicalization is set to [true] * (2026-01-23 8:45:37): [krb5_child[40102]] [main] (0x0400): [RID#283] Will perform auth * (2026-01-23 8:45:37): [krb5_child[40102]] [main] (0x0400): [RID#283] Will perform online auth * (2026-01-23 8:45:37): [krb5_child[40102]] [tgt_req_child] (0x1000): [RID#283] Attempting to get a TGT * (2026-01-23 8:45:37): [krb5_child[40102]] [get_and_save_tgt] (0x0400): [RID#283] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:37): [krb5_child[40102]] [get_and_save_tgt] (0x0020): [RID#283] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:37): [krb5_child[40102]] [map_krb5_error] (0x0020): [RID#283] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:42): [krb5_child[40106]] [get_and_save_tgt] (0x0020): [RID#287] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:42): [krb5_child[40106]] [main] (0x0400): [RID#287] krb5_child started. * (2026-01-23 8:45:42): [krb5_child[40106]] [unpack_buffer] (0x1000): [RID#287] total buffer size: [92] * (2026-01-23 8:45:42): [krb5_child[40106]] [unpack_buffer] (0x0100): [RID#287] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:42): [krb5_child[40106]] [unpack_buffer] (0x2000): [RID#287] No old ccache * (2026-01-23 8:45:42): [krb5_child[40106]] [unpack_buffer] (0x0100): [RID#287] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:42): [krb5_child[40106]] [k5c_precreate_ccache] (0x4000): [RID#287] Recreating ccache * (2026-01-23 8:45:42): [krb5_child[40106]] [k5c_setup_fast] (0x0100): [RID#287] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:42): [krb5_child[40106]] [find_principal_in_keytab] (0x4000): [RID#287] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:42): [krb5_child[40106]] [match_principal] (0x1000): [RID#287] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:42): [krb5_child[40106]] [check_fast_ccache] (0x0200): [RID#287] FAST TGT is still valid. * (2026-01-23 8:45:42): [krb5_child[40106]] [become_user] (0x0200): [RID#287] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:42): [krb5_child[40106]] [main] (0x2000): [RID#287] Running as [1833000000][1833000000]. * (2026-01-23 8:45:42): [krb5_child[40106]] [set_lifetime_options] (0x0100): [RID#287] No specific renewable lifetime requested. * (2026-01-23 8:45:42): [krb5_child[40106]] [set_lifetime_options] (0x0100): [RID#287] No specific lifetime requested. * (2026-01-23 8:45:42): [krb5_child[40106]] [set_canonicalize_option] (0x0100): [RID#287] Canonicalization is set to [true] * (2026-01-23 8:45:42): [krb5_child[40106]] [main] (0x0400): [RID#287] Will perform auth * (2026-01-23 8:45:42): [krb5_child[40106]] [main] (0x0400): [RID#287] Will perform online auth * (2026-01-23 8:45:42): [krb5_child[40106]] [tgt_req_child] (0x1000): [RID#287] Attempting to get a TGT * (2026-01-23 8:45:42): [krb5_child[40106]] [get_and_save_tgt] (0x0400): [RID#287] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:42): [krb5_child[40106]] [get_and_save_tgt] (0x0020): [RID#287] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:42): [krb5_child[40106]] [map_krb5_error] (0x0020): [RID#287] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:45): [krb5_child[40110]] [get_and_save_tgt] (0x0020): [RID#289] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:45): [krb5_child[40110]] [main] (0x0400): [RID#289] krb5_child started. * (2026-01-23 8:45:45): [krb5_child[40110]] [unpack_buffer] (0x1000): [RID#289] total buffer size: [92] * (2026-01-23 8:45:45): [krb5_child[40110]] [unpack_buffer] (0x0100): [RID#289] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:45): [krb5_child[40110]] [unpack_buffer] (0x2000): [RID#289] No old ccache * (2026-01-23 8:45:45): [krb5_child[40110]] [unpack_buffer] (0x0100): [RID#289] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:45): [krb5_child[40110]] [k5c_precreate_ccache] (0x4000): [RID#289] Recreating ccache * (2026-01-23 8:45:45): [krb5_child[40110]] [k5c_setup_fast] (0x0100): [RID#289] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:45): [krb5_child[40110]] [find_principal_in_keytab] (0x4000): [RID#289] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:45): [krb5_child[40110]] [match_principal] (0x1000): [RID#289] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:45): [krb5_child[40110]] [check_fast_ccache] (0x0200): [RID#289] FAST TGT is still valid. * (2026-01-23 8:45:45): [krb5_child[40110]] [become_user] (0x0200): [RID#289] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:45): [krb5_child[40110]] [main] (0x2000): [RID#289] Running as [1833000000][1833000000]. * (2026-01-23 8:45:45): [krb5_child[40110]] [set_lifetime_options] (0x0100): [RID#289] No specific renewable lifetime requested. * (2026-01-23 8:45:45): [krb5_child[40110]] [set_lifetime_options] (0x0100): [RID#289] No specific lifetime requested. * (2026-01-23 8:45:45): [krb5_child[40110]] [set_canonicalize_option] (0x0100): [RID#289] Canonicalization is set to [true] * (2026-01-23 8:45:45): [krb5_child[40110]] [main] (0x0400): [RID#289] Will perform auth * (2026-01-23 8:45:45): [krb5_child[40110]] [main] (0x0400): [RID#289] Will perform online auth * (2026-01-23 8:45:45): [krb5_child[40110]] [tgt_req_child] (0x1000): [RID#289] Attempting to get a TGT * (2026-01-23 8:45:45): [krb5_child[40110]] [get_and_save_tgt] (0x0400): [RID#289] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:45): [krb5_child[40110]] [get_and_save_tgt] (0x0020): [RID#289] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:45): [krb5_child[40110]] [map_krb5_error] (0x0020): [RID#289] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:48): [krb5_child[40114]] [get_and_save_tgt] (0x0020): [RID#292] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:48): [krb5_child[40114]] [main] (0x0400): [RID#292] krb5_child started. * (2026-01-23 8:45:48): [krb5_child[40114]] [unpack_buffer] (0x1000): [RID#292] total buffer size: [92] * (2026-01-23 8:45:48): [krb5_child[40114]] [unpack_buffer] (0x0100): [RID#292] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:48): [krb5_child[40114]] [unpack_buffer] (0x2000): [RID#292] No old ccache * (2026-01-23 8:45:48): [krb5_child[40114]] [unpack_buffer] (0x0100): [RID#292] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:48): [krb5_child[40114]] [k5c_precreate_ccache] (0x4000): [RID#292] Recreating ccache * (2026-01-23 8:45:48): [krb5_child[40114]] [k5c_setup_fast] (0x0100): [RID#292] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:48): [krb5_child[40114]] [find_principal_in_keytab] (0x4000): [RID#292] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:48): [krb5_child[40114]] [match_principal] (0x1000): [RID#292] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:48): [krb5_child[40114]] [check_fast_ccache] (0x0200): [RID#292] FAST TGT is still valid. * (2026-01-23 8:45:48): [krb5_child[40114]] [become_user] (0x0200): [RID#292] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:48): [krb5_child[40114]] [main] (0x2000): [RID#292] Running as [1833000000][1833000000]. * (2026-01-23 8:45:48): [krb5_child[40114]] [set_lifetime_options] (0x0100): [RID#292] No specific renewable lifetime requested. * (2026-01-23 8:45:48): [krb5_child[40114]] [set_lifetime_options] (0x0100): [RID#292] No specific lifetime requested. * (2026-01-23 8:45:48): [krb5_child[40114]] [set_canonicalize_option] (0x0100): [RID#292] Canonicalization is set to [true] * (2026-01-23 8:45:48): [krb5_child[40114]] [main] (0x0400): [RID#292] Will perform auth * (2026-01-23 8:45:48): [krb5_child[40114]] [main] (0x0400): [RID#292] Will perform online auth * (2026-01-23 8:45:48): [krb5_child[40114]] [tgt_req_child] (0x1000): [RID#292] Attempting to get a TGT * (2026-01-23 8:45:48): [krb5_child[40114]] [get_and_save_tgt] (0x0400): [RID#292] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:48): [krb5_child[40114]] [get_and_save_tgt] (0x0020): [RID#292] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:48): [krb5_child[40114]] [map_krb5_error] (0x0020): [RID#292] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:53): [krb5_child[40119]] [get_and_save_tgt] (0x0020): [RID#295] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:53): [krb5_child[40119]] [main] (0x0400): [RID#295] krb5_child started. * (2026-01-23 8:45:53): [krb5_child[40119]] [unpack_buffer] (0x1000): [RID#295] total buffer size: [92] * (2026-01-23 8:45:53): [krb5_child[40119]] [unpack_buffer] (0x0100): [RID#295] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:53): [krb5_child[40119]] [unpack_buffer] (0x2000): [RID#295] No old ccache * (2026-01-23 8:45:53): [krb5_child[40119]] [unpack_buffer] (0x0100): [RID#295] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:53): [krb5_child[40119]] [k5c_precreate_ccache] (0x4000): [RID#295] Recreating ccache * (2026-01-23 8:45:53): [krb5_child[40119]] [k5c_setup_fast] (0x0100): [RID#295] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:53): [krb5_child[40119]] [find_principal_in_keytab] (0x4000): [RID#295] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:53): [krb5_child[40119]] [match_principal] (0x1000): [RID#295] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:53): [krb5_child[40119]] [check_fast_ccache] (0x0200): [RID#295] FAST TGT is still valid. * (2026-01-23 8:45:53): [krb5_child[40119]] [become_user] (0x0200): [RID#295] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:53): [krb5_child[40119]] [main] (0x2000): [RID#295] Running as [1833000000][1833000000]. * (2026-01-23 8:45:53): [krb5_child[40119]] [set_lifetime_options] (0x0100): [RID#295] No specific renewable lifetime requested. * (2026-01-23 8:45:53): [krb5_child[40119]] [set_lifetime_options] (0x0100): [RID#295] No specific lifetime requested. * (2026-01-23 8:45:53): [krb5_child[40119]] [set_canonicalize_option] (0x0100): [RID#295] Canonicalization is set to [true] * (2026-01-23 8:45:53): [krb5_child[40119]] [main] (0x0400): [RID#295] Will perform auth * (2026-01-23 8:45:53): [krb5_child[40119]] [main] (0x0400): [RID#295] Will perform online auth * (2026-01-23 8:45:53): [krb5_child[40119]] [tgt_req_child] (0x1000): [RID#295] Attempting to get a TGT * (2026-01-23 8:45:53): [krb5_child[40119]] [get_and_save_tgt] (0x0400): [RID#295] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:53): [krb5_child[40119]] [get_and_save_tgt] (0x0020): [RID#295] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:53): [krb5_child[40119]] [map_krb5_error] (0x0020): [RID#295] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:45:57): [krb5_child[40123]] [get_and_save_tgt] (0x0020): [RID#297] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:45:56): [krb5_child[40123]] [main] (0x0400): [RID#297] krb5_child started. * (2026-01-23 8:45:56): [krb5_child[40123]] [unpack_buffer] (0x1000): [RID#297] total buffer size: [92] * (2026-01-23 8:45:56): [krb5_child[40123]] [unpack_buffer] (0x0100): [RID#297] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:45:56): [krb5_child[40123]] [unpack_buffer] (0x2000): [RID#297] No old ccache * (2026-01-23 8:45:56): [krb5_child[40123]] [unpack_buffer] (0x0100): [RID#297] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:45:56): [krb5_child[40123]] [k5c_precreate_ccache] (0x4000): [RID#297] Recreating ccache * (2026-01-23 8:45:56): [krb5_child[40123]] [k5c_setup_fast] (0x0100): [RID#297] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:45:56): [krb5_child[40123]] [find_principal_in_keytab] (0x4000): [RID#297] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:45:56): [krb5_child[40123]] [match_principal] (0x1000): [RID#297] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:45:56): [krb5_child[40123]] [check_fast_ccache] (0x0200): [RID#297] FAST TGT is still valid. * (2026-01-23 8:45:56): [krb5_child[40123]] [become_user] (0x0200): [RID#297] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:45:56): [krb5_child[40123]] [main] (0x2000): [RID#297] Running as [1833000000][1833000000]. * (2026-01-23 8:45:56): [krb5_child[40123]] [set_lifetime_options] (0x0100): [RID#297] No specific renewable lifetime requested. * (2026-01-23 8:45:56): [krb5_child[40123]] [set_lifetime_options] (0x0100): [RID#297] No specific lifetime requested. * (2026-01-23 8:45:56): [krb5_child[40123]] [set_canonicalize_option] (0x0100): [RID#297] Canonicalization is set to [true] * (2026-01-23 8:45:56): [krb5_child[40123]] [main] (0x0400): [RID#297] Will perform auth * (2026-01-23 8:45:56): [krb5_child[40123]] [main] (0x0400): [RID#297] Will perform online auth * (2026-01-23 8:45:56): [krb5_child[40123]] [tgt_req_child] (0x1000): [RID#297] Attempting to get a TGT * (2026-01-23 8:45:56): [krb5_child[40123]] [get_and_save_tgt] (0x0400): [RID#297] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:45:57): [krb5_child[40123]] [get_and_save_tgt] (0x0020): [RID#297] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:45:57): [krb5_child[40123]] [map_krb5_error] (0x0020): [RID#297] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:46:02): [krb5_child[40127]] [get_and_save_tgt] (0x0020): [RID#301] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:46:02): [krb5_child[40127]] [main] (0x0400): [RID#301] krb5_child started. * (2026-01-23 8:46:02): [krb5_child[40127]] [unpack_buffer] (0x1000): [RID#301] total buffer size: [92] * (2026-01-23 8:46:02): [krb5_child[40127]] [unpack_buffer] (0x0100): [RID#301] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:46:02): [krb5_child[40127]] [unpack_buffer] (0x2000): [RID#301] No old ccache * (2026-01-23 8:46:02): [krb5_child[40127]] [unpack_buffer] (0x0100): [RID#301] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:46:02): [krb5_child[40127]] [k5c_precreate_ccache] (0x4000): [RID#301] Recreating ccache * (2026-01-23 8:46:02): [krb5_child[40127]] [k5c_setup_fast] (0x0100): [RID#301] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:46:02): [krb5_child[40127]] [find_principal_in_keytab] (0x4000): [RID#301] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:46:02): [krb5_child[40127]] [match_principal] (0x1000): [RID#301] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:46:02): [krb5_child[40127]] [check_fast_ccache] (0x0200): [RID#301] FAST TGT is still valid. * (2026-01-23 8:46:02): [krb5_child[40127]] [become_user] (0x0200): [RID#301] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:46:02): [krb5_child[40127]] [main] (0x2000): [RID#301] Running as [1833000000][1833000000]. * (2026-01-23 8:46:02): [krb5_child[40127]] [set_lifetime_options] (0x0100): [RID#301] No specific renewable lifetime requested. * (2026-01-23 8:46:02): [krb5_child[40127]] [set_lifetime_options] (0x0100): [RID#301] No specific lifetime requested. * (2026-01-23 8:46:02): [krb5_child[40127]] [set_canonicalize_option] (0x0100): [RID#301] Canonicalization is set to [true] * (2026-01-23 8:46:02): [krb5_child[40127]] [main] (0x0400): [RID#301] Will perform auth * (2026-01-23 8:46:02): [krb5_child[40127]] [main] (0x0400): [RID#301] Will perform online auth * (2026-01-23 8:46:02): [krb5_child[40127]] [tgt_req_child] (0x1000): [RID#301] Attempting to get a TGT * (2026-01-23 8:46:02): [krb5_child[40127]] [get_and_save_tgt] (0x0400): [RID#301] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:46:02): [krb5_child[40127]] [get_and_save_tgt] (0x0020): [RID#301] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:46:02): [krb5_child[40127]] [map_krb5_error] (0x0020): [RID#301] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:46:07): [krb5_child[40131]] [get_and_save_tgt] (0x0020): [RID#304] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:46:07): [krb5_child[40131]] [main] (0x0400): [RID#304] krb5_child started. * (2026-01-23 8:46:07): [krb5_child[40131]] [unpack_buffer] (0x1000): [RID#304] total buffer size: [92] * (2026-01-23 8:46:07): [krb5_child[40131]] [unpack_buffer] (0x0100): [RID#304] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:46:07): [krb5_child[40131]] [unpack_buffer] (0x2000): [RID#304] No old ccache * (2026-01-23 8:46:07): [krb5_child[40131]] [unpack_buffer] (0x0100): [RID#304] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:46:07): [krb5_child[40131]] [k5c_precreate_ccache] (0x4000): [RID#304] Recreating ccache * (2026-01-23 8:46:07): [krb5_child[40131]] [k5c_setup_fast] (0x0100): [RID#304] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:46:07): [krb5_child[40131]] [find_principal_in_keytab] (0x4000): [RID#304] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:46:07): [krb5_child[40131]] [match_principal] (0x1000): [RID#304] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:46:07): [krb5_child[40131]] [check_fast_ccache] (0x0200): [RID#304] FAST TGT is still valid. * (2026-01-23 8:46:07): [krb5_child[40131]] [become_user] (0x0200): [RID#304] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:46:07): [krb5_child[40131]] [main] (0x2000): [RID#304] Running as [1833000000][1833000000]. * (2026-01-23 8:46:07): [krb5_child[40131]] [set_lifetime_options] (0x0100): [RID#304] No specific renewable lifetime requested. * (2026-01-23 8:46:07): [krb5_child[40131]] [set_lifetime_options] (0x0100): [RID#304] No specific lifetime requested. * (2026-01-23 8:46:07): [krb5_child[40131]] [set_canonicalize_option] (0x0100): [RID#304] Canonicalization is set to [true] * (2026-01-23 8:46:07): [krb5_child[40131]] [main] (0x0400): [RID#304] Will perform auth * (2026-01-23 8:46:07): [krb5_child[40131]] [main] (0x0400): [RID#304] Will perform online auth * (2026-01-23 8:46:07): [krb5_child[40131]] [tgt_req_child] (0x1000): [RID#304] Attempting to get a TGT * (2026-01-23 8:46:07): [krb5_child[40131]] [get_and_save_tgt] (0x0400): [RID#304] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:46:07): [krb5_child[40131]] [get_and_save_tgt] (0x0020): [RID#304] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:46:07): [krb5_child[40131]] [map_krb5_error] (0x0020): [RID#304] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:46:12): [krb5_child[40135]] [get_and_save_tgt] (0x0020): [RID#307] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:46:12): [krb5_child[40135]] [main] (0x0400): [RID#307] krb5_child started. * (2026-01-23 8:46:12): [krb5_child[40135]] [unpack_buffer] (0x1000): [RID#307] total buffer size: [92] * (2026-01-23 8:46:12): [krb5_child[40135]] [unpack_buffer] (0x0100): [RID#307] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:46:12): [krb5_child[40135]] [unpack_buffer] (0x2000): [RID#307] No old ccache * (2026-01-23 8:46:12): [krb5_child[40135]] [unpack_buffer] (0x0100): [RID#307] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:46:12): [krb5_child[40135]] [k5c_precreate_ccache] (0x4000): [RID#307] Recreating ccache * (2026-01-23 8:46:12): [krb5_child[40135]] [k5c_setup_fast] (0x0100): [RID#307] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:46:12): [krb5_child[40135]] [find_principal_in_keytab] (0x4000): [RID#307] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:46:12): [krb5_child[40135]] [match_principal] (0x1000): [RID#307] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:46:12): [krb5_child[40135]] [check_fast_ccache] (0x0200): [RID#307] FAST TGT is still valid. * (2026-01-23 8:46:12): [krb5_child[40135]] [become_user] (0x0200): [RID#307] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:46:12): [krb5_child[40135]] [main] (0x2000): [RID#307] Running as [1833000000][1833000000]. * (2026-01-23 8:46:12): [krb5_child[40135]] [set_lifetime_options] (0x0100): [RID#307] No specific renewable lifetime requested. * (2026-01-23 8:46:12): [krb5_child[40135]] [set_lifetime_options] (0x0100): [RID#307] No specific lifetime requested. * (2026-01-23 8:46:12): [krb5_child[40135]] [set_canonicalize_option] (0x0100): [RID#307] Canonicalization is set to [true] * (2026-01-23 8:46:12): [krb5_child[40135]] [main] (0x0400): [RID#307] Will perform auth * (2026-01-23 8:46:12): [krb5_child[40135]] [main] (0x0400): [RID#307] Will perform online auth * (2026-01-23 8:46:12): [krb5_child[40135]] [tgt_req_child] (0x1000): [RID#307] Attempting to get a TGT * (2026-01-23 8:46:12): [krb5_child[40135]] [get_and_save_tgt] (0x0400): [RID#307] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:46:12): [krb5_child[40135]] [get_and_save_tgt] (0x0020): [RID#307] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:46:12): [krb5_child[40135]] [map_krb5_error] (0x0020): [RID#307] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:46:17): [krb5_child[40139]] [get_and_save_tgt] (0x0020): [RID#310] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:46:17): [krb5_child[40139]] [main] (0x0400): [RID#310] krb5_child started. * (2026-01-23 8:46:17): [krb5_child[40139]] [unpack_buffer] (0x1000): [RID#310] total buffer size: [92] * (2026-01-23 8:46:17): [krb5_child[40139]] [unpack_buffer] (0x0100): [RID#310] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:46:17): [krb5_child[40139]] [unpack_buffer] (0x2000): [RID#310] No old ccache * (2026-01-23 8:46:17): [krb5_child[40139]] [unpack_buffer] (0x0100): [RID#310] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:46:17): [krb5_child[40139]] [k5c_precreate_ccache] (0x4000): [RID#310] Recreating ccache * (2026-01-23 8:46:17): [krb5_child[40139]] [k5c_setup_fast] (0x0100): [RID#310] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:46:17): [krb5_child[40139]] [find_principal_in_keytab] (0x4000): [RID#310] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:46:17): [krb5_child[40139]] [match_principal] (0x1000): [RID#310] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:46:17): [krb5_child[40139]] [check_fast_ccache] (0x0200): [RID#310] FAST TGT is still valid. * (2026-01-23 8:46:17): [krb5_child[40139]] [become_user] (0x0200): [RID#310] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:46:17): [krb5_child[40139]] [main] (0x2000): [RID#310] Running as [1833000000][1833000000]. * (2026-01-23 8:46:17): [krb5_child[40139]] [set_lifetime_options] (0x0100): [RID#310] No specific renewable lifetime requested. * (2026-01-23 8:46:17): [krb5_child[40139]] [set_lifetime_options] (0x0100): [RID#310] No specific lifetime requested. * (2026-01-23 8:46:17): [krb5_child[40139]] [set_canonicalize_option] (0x0100): [RID#310] Canonicalization is set to [true] * (2026-01-23 8:46:17): [krb5_child[40139]] [main] (0x0400): [RID#310] Will perform auth * (2026-01-23 8:46:17): [krb5_child[40139]] [main] (0x0400): [RID#310] Will perform online auth * (2026-01-23 8:46:17): [krb5_child[40139]] [tgt_req_child] (0x1000): [RID#310] Attempting to get a TGT * (2026-01-23 8:46:17): [krb5_child[40139]] [get_and_save_tgt] (0x0400): [RID#310] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:46:17): [krb5_child[40139]] [get_and_save_tgt] (0x0020): [RID#310] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:46:17): [krb5_child[40139]] [map_krb5_error] (0x0020): [RID#310] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:46:22): [krb5_child[40143]] [get_and_save_tgt] (0x0020): [RID#314] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:46:22): [krb5_child[40143]] [main] (0x0400): [RID#314] krb5_child started. * (2026-01-23 8:46:22): [krb5_child[40143]] [unpack_buffer] (0x1000): [RID#314] total buffer size: [92] * (2026-01-23 8:46:22): [krb5_child[40143]] [unpack_buffer] (0x0100): [RID#314] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:46:22): [krb5_child[40143]] [unpack_buffer] (0x2000): [RID#314] No old ccache * (2026-01-23 8:46:22): [krb5_child[40143]] [unpack_buffer] (0x0100): [RID#314] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:46:22): [krb5_child[40143]] [k5c_precreate_ccache] (0x4000): [RID#314] Recreating ccache * (2026-01-23 8:46:22): [krb5_child[40143]] [k5c_setup_fast] (0x0100): [RID#314] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:46:22): [krb5_child[40143]] [find_principal_in_keytab] (0x4000): [RID#314] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:46:22): [krb5_child[40143]] [match_principal] (0x1000): [RID#314] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:46:22): [krb5_child[40143]] [check_fast_ccache] (0x0200): [RID#314] FAST TGT is still valid. * (2026-01-23 8:46:22): [krb5_child[40143]] [become_user] (0x0200): [RID#314] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:46:22): [krb5_child[40143]] [main] (0x2000): [RID#314] Running as [1833000000][1833000000]. * (2026-01-23 8:46:22): [krb5_child[40143]] [set_lifetime_options] (0x0100): [RID#314] No specific renewable lifetime requested. * (2026-01-23 8:46:22): [krb5_child[40143]] [set_lifetime_options] (0x0100): [RID#314] No specific lifetime requested. * (2026-01-23 8:46:22): [krb5_child[40143]] [set_canonicalize_option] (0x0100): [RID#314] Canonicalization is set to [true] * (2026-01-23 8:46:22): [krb5_child[40143]] [main] (0x0400): [RID#314] Will perform auth * (2026-01-23 8:46:22): [krb5_child[40143]] [main] (0x0400): [RID#314] Will perform online auth * (2026-01-23 8:46:22): [krb5_child[40143]] [tgt_req_child] (0x1000): [RID#314] Attempting to get a TGT * (2026-01-23 8:46:22): [krb5_child[40143]] [get_and_save_tgt] (0x0400): [RID#314] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:46:22): [krb5_child[40143]] [get_and_save_tgt] (0x0020): [RID#314] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:46:22): [krb5_child[40143]] [map_krb5_error] (0x0020): [RID#314] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:46:26): [krb5_child[40147]] [get_and_save_tgt] (0x0020): [RID#316] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:46:26): [krb5_child[40147]] [main] (0x0400): [RID#316] krb5_child started. * (2026-01-23 8:46:26): [krb5_child[40147]] [unpack_buffer] (0x1000): [RID#316] total buffer size: [92] * (2026-01-23 8:46:26): [krb5_child[40147]] [unpack_buffer] (0x0100): [RID#316] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:46:26): [krb5_child[40147]] [unpack_buffer] (0x2000): [RID#316] No old ccache * (2026-01-23 8:46:26): [krb5_child[40147]] [unpack_buffer] (0x0100): [RID#316] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:46:26): [krb5_child[40147]] [k5c_precreate_ccache] (0x4000): [RID#316] Recreating ccache * (2026-01-23 8:46:26): [krb5_child[40147]] [k5c_setup_fast] (0x0100): [RID#316] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:46:26): [krb5_child[40147]] [find_principal_in_keytab] (0x4000): [RID#316] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:46:26): [krb5_child[40147]] [match_principal] (0x1000): [RID#316] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:46:26): [krb5_child[40147]] [check_fast_ccache] (0x0200): [RID#316] FAST TGT is still valid. * (2026-01-23 8:46:26): [krb5_child[40147]] [become_user] (0x0200): [RID#316] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:46:26): [krb5_child[40147]] [main] (0x2000): [RID#316] Running as [1833000000][1833000000]. * (2026-01-23 8:46:26): [krb5_child[40147]] [set_lifetime_options] (0x0100): [RID#316] No specific renewable lifetime requested. * (2026-01-23 8:46:26): [krb5_child[40147]] [set_lifetime_options] (0x0100): [RID#316] No specific lifetime requested. * (2026-01-23 8:46:26): [krb5_child[40147]] [set_canonicalize_option] (0x0100): [RID#316] Canonicalization is set to [true] * (2026-01-23 8:46:26): [krb5_child[40147]] [main] (0x0400): [RID#316] Will perform auth * (2026-01-23 8:46:26): [krb5_child[40147]] [main] (0x0400): [RID#316] Will perform online auth * (2026-01-23 8:46:26): [krb5_child[40147]] [tgt_req_child] (0x1000): [RID#316] Attempting to get a TGT * (2026-01-23 8:46:26): [krb5_child[40147]] [get_and_save_tgt] (0x0400): [RID#316] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:46:26): [krb5_child[40147]] [get_and_save_tgt] (0x0020): [RID#316] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:46:26): [krb5_child[40147]] [map_krb5_error] (0x0020): [RID#316] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:46:31): [krb5_child[40151]] [get_and_save_tgt] (0x0020): [RID#319] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:46:31): [krb5_child[40151]] [main] (0x0400): [RID#319] krb5_child started. * (2026-01-23 8:46:31): [krb5_child[40151]] [unpack_buffer] (0x1000): [RID#319] total buffer size: [92] * (2026-01-23 8:46:31): [krb5_child[40151]] [unpack_buffer] (0x0100): [RID#319] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:46:31): [krb5_child[40151]] [unpack_buffer] (0x2000): [RID#319] No old ccache * (2026-01-23 8:46:31): [krb5_child[40151]] [unpack_buffer] (0x0100): [RID#319] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:46:31): [krb5_child[40151]] [k5c_precreate_ccache] (0x4000): [RID#319] Recreating ccache * (2026-01-23 8:46:31): [krb5_child[40151]] [k5c_setup_fast] (0x0100): [RID#319] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:46:31): [krb5_child[40151]] [find_principal_in_keytab] (0x4000): [RID#319] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:46:31): [krb5_child[40151]] [match_principal] (0x1000): [RID#319] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:46:31): [krb5_child[40151]] [check_fast_ccache] (0x0200): [RID#319] FAST TGT is still valid. * (2026-01-23 8:46:31): [krb5_child[40151]] [become_user] (0x0200): [RID#319] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:46:31): [krb5_child[40151]] [main] (0x2000): [RID#319] Running as [1833000000][1833000000]. * (2026-01-23 8:46:31): [krb5_child[40151]] [set_lifetime_options] (0x0100): [RID#319] No specific renewable lifetime requested. * (2026-01-23 8:46:31): [krb5_child[40151]] [set_lifetime_options] (0x0100): [RID#319] No specific lifetime requested. * (2026-01-23 8:46:31): [krb5_child[40151]] [set_canonicalize_option] (0x0100): [RID#319] Canonicalization is set to [true] * (2026-01-23 8:46:31): [krb5_child[40151]] [main] (0x0400): [RID#319] Will perform auth * (2026-01-23 8:46:31): [krb5_child[40151]] [main] (0x0400): [RID#319] Will perform online auth * (2026-01-23 8:46:31): [krb5_child[40151]] [tgt_req_child] (0x1000): [RID#319] Attempting to get a TGT * (2026-01-23 8:46:31): [krb5_child[40151]] [get_and_save_tgt] (0x0400): [RID#319] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:46:31): [krb5_child[40151]] [get_and_save_tgt] (0x0020): [RID#319] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:46:31): [krb5_child[40151]] [map_krb5_error] (0x0020): [RID#319] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:46:34): [krb5_child[40155]] [get_and_save_tgt] (0x0020): [RID#321] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:46:34): [krb5_child[40155]] [main] (0x0400): [RID#321] krb5_child started. * (2026-01-23 8:46:34): [krb5_child[40155]] [unpack_buffer] (0x1000): [RID#321] total buffer size: [92] * (2026-01-23 8:46:34): [krb5_child[40155]] [unpack_buffer] (0x0100): [RID#321] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:46:34): [krb5_child[40155]] [unpack_buffer] (0x2000): [RID#321] No old ccache * (2026-01-23 8:46:34): [krb5_child[40155]] [unpack_buffer] (0x0100): [RID#321] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:46:34): [krb5_child[40155]] [k5c_precreate_ccache] (0x4000): [RID#321] Recreating ccache * (2026-01-23 8:46:34): [krb5_child[40155]] [k5c_setup_fast] (0x0100): [RID#321] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:46:34): [krb5_child[40155]] [find_principal_in_keytab] (0x4000): [RID#321] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:46:34): [krb5_child[40155]] [match_principal] (0x1000): [RID#321] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:46:34): [krb5_child[40155]] [check_fast_ccache] (0x0200): [RID#321] FAST TGT is still valid. * (2026-01-23 8:46:34): [krb5_child[40155]] [become_user] (0x0200): [RID#321] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:46:34): [krb5_child[40155]] [main] (0x2000): [RID#321] Running as [1833000000][1833000000]. * (2026-01-23 8:46:34): [krb5_child[40155]] [set_lifetime_options] (0x0100): [RID#321] No specific renewable lifetime requested. * (2026-01-23 8:46:34): [krb5_child[40155]] [set_lifetime_options] (0x0100): [RID#321] No specific lifetime requested. * (2026-01-23 8:46:34): [krb5_child[40155]] [set_canonicalize_option] (0x0100): [RID#321] Canonicalization is set to [true] * (2026-01-23 8:46:34): [krb5_child[40155]] [main] (0x0400): [RID#321] Will perform auth * (2026-01-23 8:46:34): [krb5_child[40155]] [main] (0x0400): [RID#321] Will perform online auth * (2026-01-23 8:46:34): [krb5_child[40155]] [tgt_req_child] (0x1000): [RID#321] Attempting to get a TGT * (2026-01-23 8:46:34): [krb5_child[40155]] [get_and_save_tgt] (0x0400): [RID#321] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:46:34): [krb5_child[40155]] [get_and_save_tgt] (0x0020): [RID#321] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:46:34): [krb5_child[40155]] [map_krb5_error] (0x0020): [RID#321] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:46:37): [krb5_child[40159]] [get_and_save_tgt] (0x0020): [RID#324] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:46:37): [krb5_child[40159]] [main] (0x0400): [RID#324] krb5_child started. * (2026-01-23 8:46:37): [krb5_child[40159]] [unpack_buffer] (0x1000): [RID#324] total buffer size: [94] * (2026-01-23 8:46:37): [krb5_child[40159]] [unpack_buffer] (0x0100): [RID#324] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:46:37): [krb5_child[40159]] [unpack_buffer] (0x2000): [RID#324] No old ccache * (2026-01-23 8:46:37): [krb5_child[40159]] [unpack_buffer] (0x0100): [RID#324] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:46:37): [krb5_child[40159]] [k5c_precreate_ccache] (0x4000): [RID#324] Recreating ccache * (2026-01-23 8:46:37): [krb5_child[40159]] [k5c_setup_fast] (0x0100): [RID#324] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:46:37): [krb5_child[40159]] [find_principal_in_keytab] (0x4000): [RID#324] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:46:37): [krb5_child[40159]] [match_principal] (0x1000): [RID#324] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:46:37): [krb5_child[40159]] [check_fast_ccache] (0x0200): [RID#324] FAST TGT is still valid. * (2026-01-23 8:46:37): [krb5_child[40159]] [become_user] (0x0200): [RID#324] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:46:37): [krb5_child[40159]] [main] (0x2000): [RID#324] Running as [1833000000][1833000000]. * (2026-01-23 8:46:37): [krb5_child[40159]] [set_lifetime_options] (0x0100): [RID#324] No specific renewable lifetime requested. * (2026-01-23 8:46:37): [krb5_child[40159]] [set_lifetime_options] (0x0100): [RID#324] No specific lifetime requested. * (2026-01-23 8:46:37): [krb5_child[40159]] [set_canonicalize_option] (0x0100): [RID#324] Canonicalization is set to [true] * (2026-01-23 8:46:37): [krb5_child[40159]] [main] (0x0400): [RID#324] Will perform auth * (2026-01-23 8:46:37): [krb5_child[40159]] [main] (0x0400): [RID#324] Will perform online auth * (2026-01-23 8:46:37): [krb5_child[40159]] [tgt_req_child] (0x1000): [RID#324] Attempting to get a TGT * (2026-01-23 8:46:37): [krb5_child[40159]] [get_and_save_tgt] (0x0400): [RID#324] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:46:37): [krb5_child[40159]] [get_and_save_tgt] (0x0020): [RID#324] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:46:37): [krb5_child[40159]] [map_krb5_error] (0x0020): [RID#324] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:46:42): [krb5_child[40163]] [get_and_save_tgt] (0x0020): [RID#328] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:46:42): [krb5_child[40163]] [main] (0x0400): [RID#328] krb5_child started. * (2026-01-23 8:46:42): [krb5_child[40163]] [unpack_buffer] (0x1000): [RID#328] total buffer size: [96] * (2026-01-23 8:46:42): [krb5_child[40163]] [unpack_buffer] (0x0100): [RID#328] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:46:42): [krb5_child[40163]] [unpack_buffer] (0x2000): [RID#328] No old ccache * (2026-01-23 8:46:42): [krb5_child[40163]] [unpack_buffer] (0x0100): [RID#328] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:46:42): [krb5_child[40163]] [k5c_precreate_ccache] (0x4000): [RID#328] Recreating ccache * (2026-01-23 8:46:42): [krb5_child[40163]] [k5c_setup_fast] (0x0100): [RID#328] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:46:42): [krb5_child[40163]] [find_principal_in_keytab] (0x4000): [RID#328] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:46:42): [krb5_child[40163]] [match_principal] (0x1000): [RID#328] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:46:42): [krb5_child[40163]] [check_fast_ccache] (0x0200): [RID#328] FAST TGT is still valid. * (2026-01-23 8:46:42): [krb5_child[40163]] [become_user] (0x0200): [RID#328] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:46:42): [krb5_child[40163]] [main] (0x2000): [RID#328] Running as [1833000000][1833000000]. * (2026-01-23 8:46:42): [krb5_child[40163]] [set_lifetime_options] (0x0100): [RID#328] No specific renewable lifetime requested. * (2026-01-23 8:46:42): [krb5_child[40163]] [set_lifetime_options] (0x0100): [RID#328] No specific lifetime requested. * (2026-01-23 8:46:42): [krb5_child[40163]] [set_canonicalize_option] (0x0100): [RID#328] Canonicalization is set to [true] * (2026-01-23 8:46:42): [krb5_child[40163]] [main] (0x0400): [RID#328] Will perform auth * (2026-01-23 8:46:42): [krb5_child[40163]] [main] (0x0400): [RID#328] Will perform online auth * (2026-01-23 8:46:42): [krb5_child[40163]] [tgt_req_child] (0x1000): [RID#328] Attempting to get a TGT * (2026-01-23 8:46:42): [krb5_child[40163]] [get_and_save_tgt] (0x0400): [RID#328] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:46:42): [krb5_child[40163]] [get_and_save_tgt] (0x0020): [RID#328] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:46:42): [krb5_child[40163]] [map_krb5_error] (0x0020): [RID#328] 2138: [-1765328366][Client's credentials have been revoked] (2026-01-23 8:46:45): [krb5_child[40167]] [get_and_save_tgt] (0x0020): [RID#330] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:46:45): [krb5_child[40167]] [main] (0x0400): [RID#330] krb5_child started. * (2026-01-23 8:46:45): [krb5_child[40167]] [unpack_buffer] (0x1000): [RID#330] total buffer size: [118] * (2026-01-23 8:46:45): [krb5_child[40167]] [unpack_buffer] (0x0100): [RID#330] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:46:45): [krb5_child[40167]] [unpack_buffer] (0x2000): [RID#330] No old ccache * (2026-01-23 8:46:45): [krb5_child[40167]] [unpack_buffer] (0x0100): [RID#330] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:46:45): [krb5_child[40167]] [k5c_precreate_ccache] (0x4000): [RID#330] Recreating ccache * (2026-01-23 8:46:45): [krb5_child[40167]] [k5c_setup_fast] (0x0100): [RID#330] Fast principal is set to [host/np0005593101.ooo.test@OOO.TEST] * (2026-01-23 8:46:45): [krb5_child[40167]] [find_principal_in_keytab] (0x4000): [RID#330] Trying to find principal host/np0005593101.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:46:45): [krb5_child[40167]] [match_principal] (0x1000): [RID#330] Principal matched to the sample (host/np0005593101.ooo.test@OOO.TEST). * (2026-01-23 8:46:45): [krb5_child[40167]] [check_fast_ccache] (0x0200): [RID#330] FAST TGT is still valid. * (2026-01-23 8:46:45): [krb5_child[40167]] [become_user] (0x0200): [RID#330] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:46:45): [krb5_child[40167]] [main] (0x2000): [RID#330] Running as [1833000000][1833000000]. * (2026-01-23 8:46:45): [krb5_child[40167]] [set_lifetime_options] (0x0100): [RID#330] No specific renewable lifetime requested. * (2026-01-23 8:46:45): [krb5_child[40167]] [set_lifetime_options] (0x0100): [RID#330] No specific lifetime requested. * (2026-01-23 8:46:45): [krb5_child[40167]] [set_canonicalize_option] (0x0100): [RID#330] Canonicalization is set to [true] * (2026-01-23 8:46:45): [krb5_child[40167]] [main] (0x0400): [RID#330] Will perform auth * (2026-01-23 8:46:45): [krb5_child[40167]] [main] (0x0400): [RID#330] Will perform online auth * (2026-01-23 8:46:45): [krb5_child[40167]] [tgt_req_child] (0x1000): [RID#330] Attempting to get a TGT * (2026-01-23 8:46:45): [krb5_child[40167]] [get_and_save_tgt] (0x0400): [RID#330] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:46:45): [krb5_child[40167]] [get_and_save_tgt] (0x0020): [RID#330] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:46:45): [krb5_child[40167]] [map_krb5_error] (0x0020): [RID#330] 2138: [-1765328366][Client's credentials have been revoked]