(2026-01-23 8:15:01): [krb5_child[48058]] [get_and_save_tgt] (0x0020): [RID#44] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:15:01): [krb5_child[48058]] [main] (0x0400): [RID#44] krb5_child started. * (2026-01-23 8:15:01): [krb5_child[48058]] [unpack_buffer] (0x1000): [RID#44] total buffer size: [99] * (2026-01-23 8:15:01): [krb5_child[48058]] [unpack_buffer] (0x0100): [RID#44] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:15:01): [krb5_child[48058]] [unpack_buffer] (0x2000): [RID#44] No old ccache * (2026-01-23 8:15:01): [krb5_child[48058]] [unpack_buffer] (0x0100): [RID#44] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:15:01): [krb5_child[48058]] [k5c_precreate_ccache] (0x4000): [RID#44] Recreating ccache * (2026-01-23 8:15:01): [krb5_child[48058]] [k5c_setup_fast] (0x0100): [RID#44] Fast principal is set to [host/np0005593105.ooo.test@OOO.TEST] * (2026-01-23 8:15:01): [krb5_child[48058]] [find_principal_in_keytab] (0x4000): [RID#44] Trying to find principal host/np0005593105.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:15:01): [krb5_child[48058]] [match_principal] (0x1000): [RID#44] Principal matched to the sample (host/np0005593105.ooo.test@OOO.TEST). * (2026-01-23 8:15:01): [krb5_child[48058]] [check_fast_ccache] (0x0200): [RID#44] FAST TGT is still valid. * (2026-01-23 8:15:01): [krb5_child[48058]] [become_user] (0x0200): [RID#44] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:15:01): [krb5_child[48058]] [main] (0x2000): [RID#44] Running as [1833000000][1833000000]. * (2026-01-23 8:15:01): [krb5_child[48058]] [set_lifetime_options] (0x0100): [RID#44] No specific renewable lifetime requested. * (2026-01-23 8:15:01): [krb5_child[48058]] [set_lifetime_options] (0x0100): [RID#44] No specific lifetime requested. * (2026-01-23 8:15:01): [krb5_child[48058]] [set_canonicalize_option] (0x0100): [RID#44] Canonicalization is set to [true] * (2026-01-23 8:15:01): [krb5_child[48058]] [main] (0x0400): [RID#44] Will perform auth * (2026-01-23 8:15:01): [krb5_child[48058]] [main] (0x0400): [RID#44] Will perform online auth * (2026-01-23 8:15:01): [krb5_child[48058]] [tgt_req_child] (0x1000): [RID#44] Attempting to get a TGT * (2026-01-23 8:15:01): [krb5_child[48058]] [get_and_save_tgt] (0x0400): [RID#44] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:15:01): [krb5_child[48058]] [sss_krb5_responder] (0x4000): [RID#44] Got question [password]. * (2026-01-23 8:15:01): [krb5_child[48058]] [get_and_save_tgt] (0x0020): [RID#44] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:15:01): [krb5_child[48058]] [map_krb5_error] (0x0020): [RID#44] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:15:01): [krb5_child[48060]] [get_and_save_tgt] (0x0020): [RID#46] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:15:01): [krb5_child[48060]] [main] (0x0400): [RID#46] krb5_child started. * (2026-01-23 8:15:01): [krb5_child[48060]] [unpack_buffer] (0x1000): [RID#46] total buffer size: [99] * (2026-01-23 8:15:01): [krb5_child[48060]] [unpack_buffer] (0x0100): [RID#46] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:15:01): [krb5_child[48060]] [unpack_buffer] (0x2000): [RID#46] No old ccache * (2026-01-23 8:15:01): [krb5_child[48060]] [unpack_buffer] (0x0100): [RID#46] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:15:01): [krb5_child[48060]] [k5c_precreate_ccache] (0x4000): [RID#46] Recreating ccache * (2026-01-23 8:15:01): [krb5_child[48060]] [k5c_setup_fast] (0x0100): [RID#46] Fast principal is set to [host/np0005593105.ooo.test@OOO.TEST] * (2026-01-23 8:15:01): [krb5_child[48060]] [find_principal_in_keytab] (0x4000): [RID#46] Trying to find principal host/np0005593105.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:15:01): [krb5_child[48060]] [match_principal] (0x1000): [RID#46] Principal matched to the sample (host/np0005593105.ooo.test@OOO.TEST). * (2026-01-23 8:15:01): [krb5_child[48060]] [check_fast_ccache] (0x0200): [RID#46] FAST TGT is still valid. * (2026-01-23 8:15:01): [krb5_child[48060]] [become_user] (0x0200): [RID#46] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:15:01): [krb5_child[48060]] [main] (0x2000): [RID#46] Running as [1833000000][1833000000]. * (2026-01-23 8:15:01): [krb5_child[48060]] [set_lifetime_options] (0x0100): [RID#46] No specific renewable lifetime requested. * (2026-01-23 8:15:01): [krb5_child[48060]] [set_lifetime_options] (0x0100): [RID#46] No specific lifetime requested. * (2026-01-23 8:15:01): [krb5_child[48060]] [set_canonicalize_option] (0x0100): [RID#46] Canonicalization is set to [true] * (2026-01-23 8:15:01): [krb5_child[48060]] [main] (0x0400): [RID#46] Will perform auth * (2026-01-23 8:15:01): [krb5_child[48060]] [main] (0x0400): [RID#46] Will perform online auth * (2026-01-23 8:15:01): [krb5_child[48060]] [tgt_req_child] (0x1000): [RID#46] Attempting to get a TGT * (2026-01-23 8:15:01): [krb5_child[48060]] [get_and_save_tgt] (0x0400): [RID#46] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:15:01): [krb5_child[48060]] [sss_krb5_responder] (0x4000): [RID#46] Got question [password]. * (2026-01-23 8:15:01): [krb5_child[48060]] [get_and_save_tgt] (0x0020): [RID#46] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:15:01): [krb5_child[48060]] [map_krb5_error] (0x0020): [RID#46] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:15:05): [krb5_child[48066]] [get_and_save_tgt] (0x0020): [RID#48] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:15:05): [krb5_child[48066]] [main] (0x0400): [RID#48] krb5_child started. * (2026-01-23 8:15:05): [krb5_child[48066]] [unpack_buffer] (0x1000): [RID#48] total buffer size: [100] * (2026-01-23 8:15:05): [krb5_child[48066]] [unpack_buffer] (0x0100): [RID#48] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:15:05): [krb5_child[48066]] [unpack_buffer] (0x2000): [RID#48] No old ccache * (2026-01-23 8:15:05): [krb5_child[48066]] [unpack_buffer] (0x0100): [RID#48] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:15:05): [krb5_child[48066]] [k5c_precreate_ccache] (0x4000): [RID#48] Recreating ccache * (2026-01-23 8:15:05): [krb5_child[48066]] [k5c_setup_fast] (0x0100): [RID#48] Fast principal is set to [host/np0005593105.ooo.test@OOO.TEST] * (2026-01-23 8:15:05): [krb5_child[48066]] [find_principal_in_keytab] (0x4000): [RID#48] Trying to find principal host/np0005593105.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:15:05): [krb5_child[48066]] [match_principal] (0x1000): [RID#48] Principal matched to the sample (host/np0005593105.ooo.test@OOO.TEST). * (2026-01-23 8:15:05): [krb5_child[48066]] [check_fast_ccache] (0x0200): [RID#48] FAST TGT is still valid. * (2026-01-23 8:15:05): [krb5_child[48066]] [become_user] (0x0200): [RID#48] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:15:05): [krb5_child[48066]] [main] (0x2000): [RID#48] Running as [1833000000][1833000000]. * (2026-01-23 8:15:05): [krb5_child[48066]] [set_lifetime_options] (0x0100): [RID#48] No specific renewable lifetime requested. * (2026-01-23 8:15:05): [krb5_child[48066]] [set_lifetime_options] (0x0100): [RID#48] No specific lifetime requested. * (2026-01-23 8:15:05): [krb5_child[48066]] [set_canonicalize_option] (0x0100): [RID#48] Canonicalization is set to [true] * (2026-01-23 8:15:05): [krb5_child[48066]] [main] (0x0400): [RID#48] Will perform auth * (2026-01-23 8:15:05): [krb5_child[48066]] [main] (0x0400): [RID#48] Will perform online auth * (2026-01-23 8:15:05): [krb5_child[48066]] [tgt_req_child] (0x1000): [RID#48] Attempting to get a TGT * (2026-01-23 8:15:05): [krb5_child[48066]] [get_and_save_tgt] (0x0400): [RID#48] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:15:05): [krb5_child[48066]] [sss_krb5_responder] (0x4000): [RID#48] Got question [password]. * (2026-01-23 8:15:05): [krb5_child[48066]] [get_and_save_tgt] (0x0020): [RID#48] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:15:05): [krb5_child[48066]] [map_krb5_error] (0x0020): [RID#48] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:15:06): [krb5_child[48068]] [get_and_save_tgt] (0x0020): [RID#50] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:15:06): [krb5_child[48068]] [main] (0x0400): [RID#50] krb5_child started. * (2026-01-23 8:15:06): [krb5_child[48068]] [unpack_buffer] (0x1000): [RID#50] total buffer size: [100] * (2026-01-23 8:15:06): [krb5_child[48068]] [unpack_buffer] (0x0100): [RID#50] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:15:06): [krb5_child[48068]] [unpack_buffer] (0x2000): [RID#50] No old ccache * (2026-01-23 8:15:06): [krb5_child[48068]] [unpack_buffer] (0x0100): [RID#50] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:15:06): [krb5_child[48068]] [k5c_precreate_ccache] (0x4000): [RID#50] Recreating ccache * (2026-01-23 8:15:06): [krb5_child[48068]] [k5c_setup_fast] (0x0100): [RID#50] Fast principal is set to [host/np0005593105.ooo.test@OOO.TEST] * (2026-01-23 8:15:06): [krb5_child[48068]] [find_principal_in_keytab] (0x4000): [RID#50] Trying to find principal host/np0005593105.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:15:06): [krb5_child[48068]] [match_principal] (0x1000): [RID#50] Principal matched to the sample (host/np0005593105.ooo.test@OOO.TEST). * (2026-01-23 8:15:06): [krb5_child[48068]] [check_fast_ccache] (0x0200): [RID#50] FAST TGT is still valid. * (2026-01-23 8:15:06): [krb5_child[48068]] [become_user] (0x0200): [RID#50] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:15:06): [krb5_child[48068]] [main] (0x2000): [RID#50] Running as [1833000000][1833000000]. * (2026-01-23 8:15:06): [krb5_child[48068]] [set_lifetime_options] (0x0100): [RID#50] No specific renewable lifetime requested. * (2026-01-23 8:15:06): [krb5_child[48068]] [set_lifetime_options] (0x0100): [RID#50] No specific lifetime requested. * (2026-01-23 8:15:06): [krb5_child[48068]] [set_canonicalize_option] (0x0100): [RID#50] Canonicalization is set to [true] * (2026-01-23 8:15:06): [krb5_child[48068]] [main] (0x0400): [RID#50] Will perform auth * (2026-01-23 8:15:06): [krb5_child[48068]] [main] (0x0400): [RID#50] Will perform online auth * (2026-01-23 8:15:06): [krb5_child[48068]] [tgt_req_child] (0x1000): [RID#50] Attempting to get a TGT * (2026-01-23 8:15:06): [krb5_child[48068]] [get_and_save_tgt] (0x0400): [RID#50] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:15:06): [krb5_child[48068]] [sss_krb5_responder] (0x4000): [RID#50] Got question [password]. * (2026-01-23 8:15:06): [krb5_child[48068]] [get_and_save_tgt] (0x0020): [RID#50] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:15:06): [krb5_child[48068]] [map_krb5_error] (0x0020): [RID#50] 2138: [-1765328360][Preauthentication failed] (2026-01-23 8:59:07): [krb5_child[50665]] [get_and_save_tgt] (0x0020): [RID#72] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-01-23 8:59:07): [krb5_child[50665]] [main] (0x0400): [RID#72] krb5_child started. * (2026-01-23 8:59:07): [krb5_child[50665]] [unpack_buffer] (0x1000): [RID#72] total buffer size: [96] * (2026-01-23 8:59:07): [krb5_child[50665]] [unpack_buffer] (0x0100): [RID#72] cmd [241 (auth)] uid [1833000000] gid [1833000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-01-23 8:59:07): [krb5_child[50665]] [unpack_buffer] (0x2000): [RID#72] No old ccache * (2026-01-23 8:59:07): [krb5_child[50665]] [unpack_buffer] (0x0100): [RID#72] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-01-23 8:59:07): [krb5_child[50665]] [k5c_precreate_ccache] (0x4000): [RID#72] Recreating ccache * (2026-01-23 8:59:07): [krb5_child[50665]] [k5c_setup_fast] (0x0100): [RID#72] Fast principal is set to [host/np0005593105.ooo.test@OOO.TEST] * (2026-01-23 8:59:07): [krb5_child[50665]] [find_principal_in_keytab] (0x4000): [RID#72] Trying to find principal host/np0005593105.ooo.test@OOO.TEST in keytab. * (2026-01-23 8:59:07): [krb5_child[50665]] [match_principal] (0x1000): [RID#72] Principal matched to the sample (host/np0005593105.ooo.test@OOO.TEST). * (2026-01-23 8:59:07): [krb5_child[50665]] [check_fast_ccache] (0x0200): [RID#72] FAST TGT is still valid. * (2026-01-23 8:59:07): [krb5_child[50665]] [become_user] (0x0200): [RID#72] Trying to become user [1833000000][1833000000]. * (2026-01-23 8:59:07): [krb5_child[50665]] [main] (0x2000): [RID#72] Running as [1833000000][1833000000]. * (2026-01-23 8:59:07): [krb5_child[50665]] [set_lifetime_options] (0x0100): [RID#72] No specific renewable lifetime requested. * (2026-01-23 8:59:07): [krb5_child[50665]] [set_lifetime_options] (0x0100): [RID#72] No specific lifetime requested. * (2026-01-23 8:59:07): [krb5_child[50665]] [set_canonicalize_option] (0x0100): [RID#72] Canonicalization is set to [true] * (2026-01-23 8:59:07): [krb5_child[50665]] [main] (0x0400): [RID#72] Will perform auth * (2026-01-23 8:59:07): [krb5_child[50665]] [main] (0x0400): [RID#72] Will perform online auth * (2026-01-23 8:59:07): [krb5_child[50665]] [tgt_req_child] (0x1000): [RID#72] Attempting to get a TGT * (2026-01-23 8:59:07): [krb5_child[50665]] [get_and_save_tgt] (0x0400): [RID#72] Attempting kinit for realm [OOO.TEST] * (2026-01-23 8:59:07): [krb5_child[50665]] [sss_krb5_responder] (0x4000): [RID#72] Got question [password]. * (2026-01-23 8:59:07): [krb5_child[50665]] [get_and_save_tgt] (0x0020): [RID#72] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-01-23 8:59:07): [krb5_child[50665]] [map_krb5_error] (0x0020): [RID#72] 2138: [-1765328360][Preauthentication failed]