(2026-01-23 8:08:26): [krb5_child[46135]] [get_and_save_tgt] (0x0020): [RID#22] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:08:26): [krb5_child[46135]] [main] (0x0400): [RID#22] krb5_child started. * (2026-01-23 8:08:26): [krb5_child[46135]] [unpack_buffer] (0x1000): [RID#22] total buffer size: [96] * (2026-01-23 8:08:26): [krb5_child[46135]] [unpack_buffer] (0x0100): [RID#22] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:08:26): [krb5_child[46135]] [unpack_buffer] (0x2000): [RID#22] No old ccache * (2026-01-23 8:08:26): [krb5_child[46135]] [unpack_buffer] (0x0100): [RID#22] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:08:26): [krb5_child[46135]] [k5c_precreate_ccache] (0x4000): [RID#22] Recreating ccache * (2026-01-23 8:08:26): [krb5_child[46135]] [k5c_setup_fast] (0x0100): [RID#22] Fast principal is set to [host/np0005593102.ooo.test@OOO.TEST] * (2026-01-23 8:08:26): [krb5_child[46135]] [find_principal_in_keytab] (0x4000): [RID#22] Trying to find principal host/np0005593102.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:08:26): [krb5_child[46135]] [match_principal] (0x1000): [RID#22] Principal matched to the sample (host/np0005593102.ooo.test@OOO.TEST). * (2026-01-23 8:08:26): [krb5_child[46135]] [check_fast_ccache] (0x0200): [RID#22] FAST TGT is still valid. * (2026-01-23 8:08:26): [krb5_child[46135]] [become_user] (0x0200): [RID#22] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:08:26): [krb5_child[46135]] [main] (0x2000): [RID#22] Running as [1833000000][1833000000]. * (2026-01-23 8:08:26): [krb5_child[46135]] [set_lifetime_options] (0x0100): [RID#22] No specific renewable lifetime requested. * (2026-01-23 8:08:26): [krb5_child[46135]] [set_lifetime_options] (0x0100): [RID#22] No specific lifetime requested. * (2026-01-23 8:08:26): [krb5_child[46135]] [set_canonicalize_option] (0x0100): [RID#22] Canonicalization is set to [true] * (2026-01-23 8:08:26): [krb5_child[46135]] [main] (0x0400): [RID#22] Will perform auth * (2026-01-23 8:08:26): [krb5_child[46135]] [main] (0x0400): [RID#22] Will perform online auth * (2026-01-23 8:08:26): [krb5_child[46135]] [tgt_req_child] (0x1000): [RID#22] Attempting to get a TGT * (2026-01-23 8:08:26): [krb5_child[46135]] [get_and_save_tgt] (0x0400): [RID#22] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:08:26): [krb5_child[46135]] [sss_krb5_responder] (0x4000): [RID#22] Got question [password]. * (2026-01-23 8:08:26): [krb5_child[46135]] [get_and_save_tgt] (0x0020): [RID#22] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:08:26): [krb5_child[46135]] [map_krb5_error] (0x0020): [RID#22] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:32:11): [krb5_child[55684]] [get_and_save_tgt] (0x0020): [RID#163] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:32:11): [krb5_child[55684]] [main] (0x0400): [RID#163] krb5_child started. * (2026-01-23 8:32:11): [krb5_child[55684]] [unpack_buffer] (0x1000): [RID#163] total buffer size: [99] * (2026-01-23 8:32:11): [krb5_child[55684]] [unpack_buffer] (0x0100): [RID#163] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:32:11): [krb5_child[55684]] [unpack_buffer] (0x2000): [RID#163] No old ccache * (2026-01-23 8:32:11): [krb5_child[55684]] [unpack_buffer] (0x0100): [RID#163] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:32:11): [krb5_child[55684]] [k5c_precreate_ccache] (0x4000): [RID#163] Recreating ccache * (2026-01-23 8:32:11): [krb5_child[55684]] [k5c_setup_fast] (0x0100): [RID#163] Fast principal is set to [host/np0005593102.ooo.test@OOO.TEST] * (2026-01-23 8:32:11): [krb5_child[55684]] [find_principal_in_keytab] (0x4000): [RID#163] Trying to find principal host/np0005593102.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:32:11): [krb5_child[55684]] [match_principal] (0x1000): [RID#163] Principal matched to the sample (host/np0005593102.ooo.test@OOO.TEST). * (2026-01-23 8:32:11): [krb5_child[55684]] [check_fast_ccache] (0x0200): [RID#163] FAST TGT is still valid. * (2026-01-23 8:32:11): [krb5_child[55684]] [become_user] (0x0200): [RID#163] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:32:11): [krb5_child[55684]] [main] (0x2000): [RID#163] Running as [1833000000][1833000000]. * (2026-01-23 8:32:11): [krb5_child[55684]] [set_lifetime_options] (0x0100): [RID#163] No specific renewable lifetime requested. * (2026-01-23 8:32:11): [krb5_child[55684]] [set_lifetime_options] (0x0100): [RID#163] No specific lifetime requested. * (2026-01-23 8:32:11): [krb5_child[55684]] [set_canonicalize_option] (0x0100): [RID#163] Canonicalization is set to [true] * (2026-01-23 8:32:11): [krb5_child[55684]] [main] (0x0400): [RID#163] Will perform auth * (2026-01-23 8:32:11): [krb5_child[55684]] [main] (0x0400): [RID#163] Will perform online auth * (2026-01-23 8:32:11): [krb5_child[55684]] [tgt_req_child] (0x1000): [RID#163] Attempting to get a TGT * (2026-01-23 8:32:11): [krb5_child[55684]] [get_and_save_tgt] (0x0400): [RID#163] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:32:11): [krb5_child[55684]] [sss_krb5_responder] (0x4000): [RID#163] Got question [password]. * (2026-01-23 8:32:11): [krb5_child[55684]] [get_and_save_tgt] (0x0020): [RID#163] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:32:11): [krb5_child[55684]] [map_krb5_error] (0x0020): [RID#163] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:38:34): [krb5_child[56886]] [get_and_save_tgt] (0x0020): [RID#203] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:38:34): [krb5_child[56886]] [main] (0x0400): [RID#203] krb5_child started. * (2026-01-23 8:38:34): [krb5_child[56886]] [unpack_buffer] (0x1000): [RID#203] total buffer size: [96] * (2026-01-23 8:38:34): [krb5_child[56886]] [unpack_buffer] (0x0100): [RID#203] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:38:34): [krb5_child[56886]] [unpack_buffer] (0x2000): [RID#203] No old ccache * (2026-01-23 8:38:34): [krb5_child[56886]] [unpack_buffer] (0x0100): [RID#203] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:38:34): [krb5_child[56886]] [k5c_precreate_ccache] (0x4000): [RID#203] Recreating ccache * (2026-01-23 8:38:34): [krb5_child[56886]] [k5c_setup_fast] (0x0100): [RID#203] Fast principal is set to [host/np0005593102.ooo.test@OOO.TEST] * (2026-01-23 8:38:34): [krb5_child[56886]] [find_principal_in_keytab] (0x4000): [RID#203] Trying to find principal host/np0005593102.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:38:34): [krb5_child[56886]] [match_principal] (0x1000): [RID#203] Principal matched to the sample (host/np0005593102.ooo.test@OOO.TEST). * (2026-01-23 8:38:34): [krb5_child[56886]] [check_fast_ccache] (0x0200): [RID#203] FAST TGT is still valid. * (2026-01-23 8:38:34): [krb5_child[56886]] [become_user] (0x0200): [RID#203] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:38:34): [krb5_child[56886]] [main] (0x2000): [RID#203] Running as [1833000000][1833000000]. * (2026-01-23 8:38:34): [krb5_child[56886]] [set_lifetime_options] (0x0100): [RID#203] No specific renewable lifetime requested. * (2026-01-23 8:38:34): [krb5_child[56886]] [set_lifetime_options] (0x0100): [RID#203] No specific lifetime requested. * (2026-01-23 8:38:34): [krb5_child[56886]] [set_canonicalize_option] (0x0100): [RID#203] Canonicalization is set to [true] * (2026-01-23 8:38:34): [krb5_child[56886]] [main] (0x0400): [RID#203] Will perform auth * (2026-01-23 8:38:34): [krb5_child[56886]] [main] (0x0400): [RID#203] Will perform online auth * (2026-01-23 8:38:34): [krb5_child[56886]] [tgt_req_child] (0x1000): [RID#203] Attempting to get a TGT * (2026-01-23 8:38:34): [krb5_child[56886]] [get_and_save_tgt] (0x0400): [RID#203] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:38:34): [krb5_child[56886]] [sss_krb5_responder] (0x4000): [RID#203] Got question [password]. * (2026-01-23 8:38:34): [krb5_child[56886]] [get_and_save_tgt] (0x0020): [RID#203] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:38:34): [krb5_child[56886]] [map_krb5_error] (0x0020): [RID#203] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:40:55): [krb5_child[57321]] [get_and_save_tgt] (0x0020): [RID#219] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:40:55): [krb5_child[57321]] [main] (0x0400): [RID#219] krb5_child started. * (2026-01-23 8:40:55): [krb5_child[57321]] [unpack_buffer] (0x1000): [RID#219] total buffer size: [99] * (2026-01-23 8:40:55): [krb5_child[57321]] [unpack_buffer] (0x0100): [RID#219] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:40:55): [krb5_child[57321]] [unpack_buffer] (0x2000): [RID#219] No old ccache * (2026-01-23 8:40:55): [krb5_child[57321]] [unpack_buffer] (0x0100): [RID#219] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:40:55): [krb5_child[57321]] [k5c_precreate_ccache] (0x4000): [RID#219] Recreating ccache * (2026-01-23 8:40:55): [krb5_child[57321]] [k5c_setup_fast] (0x0100): [RID#219] Fast principal is set to [host/np0005593102.ooo.test@OOO.TEST] * (2026-01-23 8:40:55): [krb5_child[57321]] [find_principal_in_keytab] (0x4000): [RID#219] Trying to find principal host/np0005593102.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:40:55): [krb5_child[57321]] [match_principal] (0x1000): [RID#219] Principal matched to the sample (host/np0005593102.ooo.test@OOO.TEST). * (2026-01-23 8:40:55): [krb5_child[57321]] [check_fast_ccache] (0x0200): [RID#219] FAST TGT is still valid. * (2026-01-23 8:40:55): [krb5_child[57321]] [become_user] (0x0200): [RID#219] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:40:55): [krb5_child[57321]] [main] (0x2000): [RID#219] Running as [1833000000][1833000000]. * (2026-01-23 8:40:55): [krb5_child[57321]] [set_lifetime_options] (0x0100): [RID#219] No specific renewable lifetime requested. * (2026-01-23 8:40:55): [krb5_child[57321]] [set_lifetime_options] (0x0100): [RID#219] No specific lifetime requested. * (2026-01-23 8:40:55): [krb5_child[57321]] [set_canonicalize_option] (0x0100): [RID#219] Canonicalization is set to [true] * (2026-01-23 8:40:55): [krb5_child[57321]] [main] (0x0400): [RID#219] Will perform auth * (2026-01-23 8:40:55): [krb5_child[57321]] [main] (0x0400): [RID#219] Will perform online auth * (2026-01-23 8:40:55): [krb5_child[57321]] [tgt_req_child] (0x1000): [RID#219] Attempting to get a TGT * (2026-01-23 8:40:55): [krb5_child[57321]] [get_and_save_tgt] (0x0400): [RID#219] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:40:55): [krb5_child[57321]] [sss_krb5_responder] (0x4000): [RID#219] Got question [password]. * (2026-01-23 8:40:55): [krb5_child[57321]] [get_and_save_tgt] (0x0020): [RID#219] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:40:55): [krb5_child[57321]] [map_krb5_error] (0x0020): [RID#219] 2138: [-1765328360][Preauthentication failed]