(2026-06-07 8:16:02): [krb5_child[66476]] [get_and_save_tgt] (0x0020): [RID#52] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-07 8:16:02): [krb5_child[66476]] [main] (0x0400): [RID#52] krb5_child started. * (2026-06-07 8:16:02): [krb5_child[66476]] [unpack_buffer] (0x1000): [RID#52] total buffer size: [99] * (2026-06-07 8:16:02): [krb5_child[66476]] [unpack_buffer] (0x0100): [RID#52] cmd [241 (auth)] uid [1831800000] gid [1831800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-07 8:16:02): [krb5_child[66476]] [unpack_buffer] (0x2000): [RID#52] No old ccache * (2026-06-07 8:16:02): [krb5_child[66476]] [unpack_buffer] (0x0100): [RID#52] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-07 8:16:02): [krb5_child[66476]] [k5c_precreate_ccache] (0x4000): [RID#52] Recreating ccache * (2026-06-07 8:16:02): [krb5_child[66476]] [k5c_setup_fast] (0x0100): [RID#52] Fast principal is set to [host/np0000066354.ooo.test@OOO.TEST] * (2026-06-07 8:16:02): [krb5_child[66476]] [find_principal_in_keytab] (0x4000): [RID#52] Trying to find principal host/np0000066354.ooo.test@OOO.TEST in keytab. * (2026-06-07 8:16:02): [krb5_child[66476]] [match_principal] (0x1000): [RID#52] Principal matched to the sample (host/np0000066354.ooo.test@OOO.TEST). * (2026-06-07 8:16:02): [krb5_child[66476]] [check_fast_ccache] (0x0200): [RID#52] FAST TGT is still valid. * (2026-06-07 8:16:02): [krb5_child[66476]] [become_user] (0x0200): [RID#52] Trying to become user [1831800000][1831800000]. * (2026-06-07 8:16:02): [krb5_child[66476]] [main] (0x2000): [RID#52] Running as [1831800000][1831800000]. * (2026-06-07 8:16:02): [krb5_child[66476]] [set_lifetime_options] (0x0100): [RID#52] No specific renewable lifetime requested. * (2026-06-07 8:16:02): [krb5_child[66476]] [set_lifetime_options] (0x0100): [RID#52] No specific lifetime requested. * (2026-06-07 8:16:02): [krb5_child[66476]] [set_canonicalize_option] (0x0100): [RID#52] Canonicalization is set to [true] * (2026-06-07 8:16:02): [krb5_child[66476]] [main] (0x0400): [RID#52] Will perform auth * (2026-06-07 8:16:02): [krb5_child[66476]] [main] (0x0400): [RID#52] Will perform online auth * (2026-06-07 8:16:02): [krb5_child[66476]] [tgt_req_child] (0x1000): [RID#52] Attempting to get a TGT * (2026-06-07 8:16:02): [krb5_child[66476]] [get_and_save_tgt] (0x0400): [RID#52] Attempting kinit for realm [OOO.TEST] * (2026-06-07 8:16:02): [krb5_child[66476]] [sss_krb5_responder] (0x4000): [RID#52] Got question [password]. * (2026-06-07 8:16:02): [krb5_child[66476]] [get_and_save_tgt] (0x0020): [RID#52] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-07 8:16:02): [krb5_child[66476]] [map_krb5_error] (0x0020): [RID#52] 2138: [-1765328360][Preauthentication failed] (2026-06-07 8:19:21): [krb5_child[83554]] [get_and_save_tgt] (0x0020): [RID#59] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-07 8:19:21): [krb5_child[83554]] [main] (0x0400): [RID#59] krb5_child started. * (2026-06-07 8:19:21): [krb5_child[83554]] [unpack_buffer] (0x1000): [RID#59] total buffer size: [99] * (2026-06-07 8:19:21): [krb5_child[83554]] [unpack_buffer] (0x0100): [RID#59] cmd [241 (auth)] uid [1831800000] gid [1831800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-07 8:19:21): [krb5_child[83554]] [unpack_buffer] (0x2000): [RID#59] No old ccache * (2026-06-07 8:19:21): [krb5_child[83554]] [unpack_buffer] (0x0100): [RID#59] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-07 8:19:21): [krb5_child[83554]] [k5c_precreate_ccache] (0x4000): [RID#59] Recreating ccache * (2026-06-07 8:19:21): [krb5_child[83554]] [k5c_setup_fast] (0x0100): [RID#59] Fast principal is set to [host/np0000066354.ooo.test@OOO.TEST] * (2026-06-07 8:19:21): [krb5_child[83554]] [find_principal_in_keytab] (0x4000): [RID#59] Trying to find principal host/np0000066354.ooo.test@OOO.TEST in keytab. * (2026-06-07 8:19:21): [krb5_child[83554]] [match_principal] (0x1000): [RID#59] Principal matched to the sample (host/np0000066354.ooo.test@OOO.TEST). * (2026-06-07 8:19:21): [krb5_child[83554]] [check_fast_ccache] (0x0200): [RID#59] FAST TGT is still valid. * (2026-06-07 8:19:21): [krb5_child[83554]] [become_user] (0x0200): [RID#59] Trying to become user [1831800000][1831800000]. * (2026-06-07 8:19:21): [krb5_child[83554]] [main] (0x2000): [RID#59] Running as [1831800000][1831800000]. * (2026-06-07 8:19:21): [krb5_child[83554]] [set_lifetime_options] (0x0100): [RID#59] No specific renewable lifetime requested. * (2026-06-07 8:19:21): [krb5_child[83554]] [set_lifetime_options] (0x0100): [RID#59] No specific lifetime requested. * (2026-06-07 8:19:21): [krb5_child[83554]] [set_canonicalize_option] (0x0100): [RID#59] Canonicalization is set to [true] * (2026-06-07 8:19:21): [krb5_child[83554]] [main] (0x0400): [RID#59] Will perform auth * (2026-06-07 8:19:21): [krb5_child[83554]] [main] (0x0400): [RID#59] Will perform online auth * (2026-06-07 8:19:21): [krb5_child[83554]] [tgt_req_child] (0x1000): [RID#59] Attempting to get a TGT * (2026-06-07 8:19:21): [krb5_child[83554]] [get_and_save_tgt] (0x0400): [RID#59] Attempting kinit for realm [OOO.TEST] * (2026-06-07 8:19:21): [krb5_child[83554]] [sss_krb5_responder] (0x4000): [RID#59] Got question [password]. * (2026-06-07 8:19:21): [krb5_child[83554]] [get_and_save_tgt] (0x0020): [RID#59] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-07 8:19:21): [krb5_child[83554]] [map_krb5_error] (0x0020): [RID#59] 2138: [-1765328360][Preauthentication failed] (2026-06-07 8:45:59): [krb5_child[240046]] [get_and_save_tgt] (0x0020): [RID#103] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-07 8:45:59): [krb5_child[240046]] [main] (0x0400): [RID#103] krb5_child started. * (2026-06-07 8:45:59): [krb5_child[240046]] [unpack_buffer] (0x1000): [RID#103] total buffer size: [96] * (2026-06-07 8:45:59): [krb5_child[240046]] [unpack_buffer] (0x0100): [RID#103] cmd [241 (auth)] uid [1831800000] gid [1831800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-07 8:45:59): [krb5_child[240046]] [unpack_buffer] (0x2000): [RID#103] No old ccache * (2026-06-07 8:45:59): [krb5_child[240046]] [unpack_buffer] (0x0100): [RID#103] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-07 8:45:59): [krb5_child[240046]] [k5c_precreate_ccache] (0x4000): [RID#103] Recreating ccache * (2026-06-07 8:45:59): [krb5_child[240046]] [k5c_setup_fast] (0x0100): [RID#103] Fast principal is set to [host/np0000066354.ooo.test@OOO.TEST] * (2026-06-07 8:45:59): [krb5_child[240046]] [find_principal_in_keytab] (0x4000): [RID#103] Trying to find principal host/np0000066354.ooo.test@OOO.TEST in keytab. * (2026-06-07 8:45:59): [krb5_child[240046]] [match_principal] (0x1000): [RID#103] Principal matched to the sample (host/np0000066354.ooo.test@OOO.TEST). * (2026-06-07 8:45:59): [krb5_child[240046]] [check_fast_ccache] (0x0200): [RID#103] FAST TGT is still valid. * (2026-06-07 8:45:59): [krb5_child[240046]] [become_user] (0x0200): [RID#103] Trying to become user [1831800000][1831800000]. * (2026-06-07 8:45:59): [krb5_child[240046]] [main] (0x2000): [RID#103] Running as [1831800000][1831800000]. * (2026-06-07 8:45:59): [krb5_child[240046]] [set_lifetime_options] (0x0100): [RID#103] No specific renewable lifetime requested. * (2026-06-07 8:45:59): [krb5_child[240046]] [set_lifetime_options] (0x0100): [RID#103] No specific lifetime requested. * (2026-06-07 8:45:59): [krb5_child[240046]] [set_canonicalize_option] (0x0100): [RID#103] Canonicalization is set to [true] * (2026-06-07 8:45:59): [krb5_child[240046]] [main] (0x0400): [RID#103] Will perform auth * (2026-06-07 8:45:59): [krb5_child[240046]] [main] (0x0400): [RID#103] Will perform online auth * (2026-06-07 8:45:59): [krb5_child[240046]] [tgt_req_child] (0x1000): [RID#103] Attempting to get a TGT * (2026-06-07 8:45:59): [krb5_child[240046]] [get_and_save_tgt] (0x0400): [RID#103] Attempting kinit for realm [OOO.TEST] * (2026-06-07 8:45:59): [krb5_child[240046]] [sss_krb5_responder] (0x4000): [RID#103] Got question [password]. * (2026-06-07 8:45:59): [krb5_child[240046]] [get_and_save_tgt] (0x0020): [RID#103] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-07 8:45:59): [krb5_child[240046]] [map_krb5_error] (0x0020): [RID#103] 2138: [-1765328360][Preauthentication failed] (2026-06-07 8:46:02): [krb5_child[240241]] [get_and_save_tgt] (0x0020): [RID#105] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-07 8:46:02): [krb5_child[240241]] [main] (0x0400): [RID#105] krb5_child started. * (2026-06-07 8:46:02): [krb5_child[240241]] [unpack_buffer] (0x1000): [RID#105] total buffer size: [99] * (2026-06-07 8:46:02): [krb5_child[240241]] [unpack_buffer] (0x0100): [RID#105] cmd [241 (auth)] uid [1831800000] gid [1831800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-07 8:46:02): [krb5_child[240241]] [unpack_buffer] (0x2000): [RID#105] No old ccache * (2026-06-07 8:46:02): [krb5_child[240241]] [unpack_buffer] (0x0100): [RID#105] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-07 8:46:02): [krb5_child[240241]] [k5c_precreate_ccache] (0x4000): [RID#105] Recreating ccache * (2026-06-07 8:46:02): [krb5_child[240241]] [k5c_setup_fast] (0x0100): [RID#105] Fast principal is set to [host/np0000066354.ooo.test@OOO.TEST] * (2026-06-07 8:46:02): [krb5_child[240241]] [find_principal_in_keytab] (0x4000): [RID#105] Trying to find principal host/np0000066354.ooo.test@OOO.TEST in keytab. * (2026-06-07 8:46:02): [krb5_child[240241]] [match_principal] (0x1000): [RID#105] Principal matched to the sample (host/np0000066354.ooo.test@OOO.TEST). * (2026-06-07 8:46:02): [krb5_child[240241]] [check_fast_ccache] (0x0200): [RID#105] FAST TGT is still valid. * (2026-06-07 8:46:02): [krb5_child[240241]] [become_user] (0x0200): [RID#105] Trying to become user [1831800000][1831800000]. * (2026-06-07 8:46:02): [krb5_child[240241]] [main] (0x2000): [RID#105] Running as [1831800000][1831800000]. * (2026-06-07 8:46:02): [krb5_child[240241]] [set_lifetime_options] (0x0100): [RID#105] No specific renewable lifetime requested. * (2026-06-07 8:46:02): [krb5_child[240241]] [set_lifetime_options] (0x0100): [RID#105] No specific lifetime requested. * (2026-06-07 8:46:02): [krb5_child[240241]] [set_canonicalize_option] (0x0100): [RID#105] Canonicalization is set to [true] * (2026-06-07 8:46:02): [krb5_child[240241]] [main] (0x0400): [RID#105] Will perform auth * (2026-06-07 8:46:02): [krb5_child[240241]] [main] (0x0400): [RID#105] Will perform online auth * (2026-06-07 8:46:02): [krb5_child[240241]] [tgt_req_child] (0x1000): [RID#105] Attempting to get a TGT * (2026-06-07 8:46:02): [krb5_child[240241]] [get_and_save_tgt] (0x0400): [RID#105] Attempting kinit for realm [OOO.TEST] * (2026-06-07 8:46:02): [krb5_child[240241]] [sss_krb5_responder] (0x4000): [RID#105] Got question [password]. * (2026-06-07 8:46:02): [krb5_child[240241]] [get_and_save_tgt] (0x0020): [RID#105] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-07 8:46:02): [krb5_child[240241]] [map_krb5_error] (0x0020): [RID#105] 2138: [-1765328360][Preauthentication failed]