(2026-06-14 9:02:32): [krb5_child[82502]] [get_and_save_tgt] (0x0020): [RID#134] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-14 9:02:32): [krb5_child[82502]] [main] (0x0400): [RID#134] krb5_child started. * (2026-06-14 9:02:32): [krb5_child[82502]] [unpack_buffer] (0x1000): [RID#134] total buffer size: [99] * (2026-06-14 9:02:32): [krb5_child[82502]] [unpack_buffer] (0x0100): [RID#134] cmd [241 (auth)] uid [621800000] gid [621800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-14 9:02:32): [krb5_child[82502]] [unpack_buffer] (0x2000): [RID#134] No old ccache * (2026-06-14 9:02:32): [krb5_child[82502]] [unpack_buffer] (0x0100): [RID#134] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-14 9:02:32): [krb5_child[82502]] [k5c_precreate_ccache] (0x4000): [RID#134] Recreating ccache * (2026-06-14 9:02:32): [krb5_child[82502]] [k5c_setup_fast] (0x0100): [RID#134] Fast principal is set to [host/np0000073150.ooo.test@OOO.TEST] * (2026-06-14 9:02:32): [krb5_child[82502]] [find_principal_in_keytab] (0x4000): [RID#134] Trying to find principal host/np0000073150.ooo.test@OOO.TEST in keytab. * (2026-06-14 9:02:32): [krb5_child[82502]] [match_principal] (0x1000): [RID#134] Principal matched to the sample (host/np0000073150.ooo.test@OOO.TEST). * (2026-06-14 9:02:32): [krb5_child[82502]] [check_fast_ccache] (0x0200): [RID#134] FAST TGT is still valid. * (2026-06-14 9:02:32): [krb5_child[82502]] [become_user] (0x0200): [RID#134] Trying to become user [621800000][621800000]. * (2026-06-14 9:02:32): [krb5_child[82502]] [main] (0x2000): [RID#134] Running as [621800000][621800000]. * (2026-06-14 9:02:32): [krb5_child[82502]] [set_lifetime_options] (0x0100): [RID#134] No specific renewable lifetime requested. * (2026-06-14 9:02:32): [krb5_child[82502]] [set_lifetime_options] (0x0100): [RID#134] No specific lifetime requested. * (2026-06-14 9:02:32): [krb5_child[82502]] [set_canonicalize_option] (0x0100): [RID#134] Canonicalization is set to [true] * (2026-06-14 9:02:32): [krb5_child[82502]] [main] (0x0400): [RID#134] Will perform auth * (2026-06-14 9:02:32): [krb5_child[82502]] [main] (0x0400): [RID#134] Will perform online auth * (2026-06-14 9:02:32): [krb5_child[82502]] [tgt_req_child] (0x1000): [RID#134] Attempting to get a TGT * (2026-06-14 9:02:32): [krb5_child[82502]] [get_and_save_tgt] (0x0400): [RID#134] Attempting kinit for realm [OOO.TEST] * (2026-06-14 9:02:32): [krb5_child[82502]] [sss_krb5_responder] (0x4000): [RID#134] Got question [password]. * (2026-06-14 9:02:32): [krb5_child[82502]] [get_and_save_tgt] (0x0020): [RID#134] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-14 9:02:32): [krb5_child[82502]] [map_krb5_error] (0x0020): [RID#134] 2138: [-1765328360][Preauthentication failed] (2026-06-14 9:13:02): [krb5_child[93491]] [get_and_save_tgt] (0x0020): [RID#170] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-14 9:13:02): [krb5_child[93491]] [main] (0x0400): [RID#170] krb5_child started. * (2026-06-14 9:13:02): [krb5_child[93491]] [unpack_buffer] (0x1000): [RID#170] total buffer size: [99] * (2026-06-14 9:13:02): [krb5_child[93491]] [unpack_buffer] (0x0100): [RID#170] cmd [241 (auth)] uid [621800000] gid [621800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-14 9:13:02): [krb5_child[93491]] [unpack_buffer] (0x2000): [RID#170] No old ccache * (2026-06-14 9:13:02): [krb5_child[93491]] [unpack_buffer] (0x0100): [RID#170] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-14 9:13:02): [krb5_child[93491]] [k5c_precreate_ccache] (0x4000): [RID#170] Recreating ccache * (2026-06-14 9:13:02): [krb5_child[93491]] [k5c_setup_fast] (0x0100): [RID#170] Fast principal is set to [host/np0000073150.ooo.test@OOO.TEST] * (2026-06-14 9:13:02): [krb5_child[93491]] [find_principal_in_keytab] (0x4000): [RID#170] Trying to find principal host/np0000073150.ooo.test@OOO.TEST in keytab. * (2026-06-14 9:13:02): [krb5_child[93491]] [match_principal] (0x1000): [RID#170] Principal matched to the sample (host/np0000073150.ooo.test@OOO.TEST). * (2026-06-14 9:13:02): [krb5_child[93491]] [check_fast_ccache] (0x0200): [RID#170] FAST TGT is still valid. * (2026-06-14 9:13:02): [krb5_child[93491]] [become_user] (0x0200): [RID#170] Trying to become user [621800000][621800000]. * (2026-06-14 9:13:02): [krb5_child[93491]] [main] (0x2000): [RID#170] Running as [621800000][621800000]. * (2026-06-14 9:13:02): [krb5_child[93491]] [set_lifetime_options] (0x0100): [RID#170] No specific renewable lifetime requested. * (2026-06-14 9:13:02): [krb5_child[93491]] [set_lifetime_options] (0x0100): [RID#170] No specific lifetime requested. * (2026-06-14 9:13:02): [krb5_child[93491]] [set_canonicalize_option] (0x0100): [RID#170] Canonicalization is set to [true] * (2026-06-14 9:13:02): [krb5_child[93491]] [main] (0x0400): [RID#170] Will perform auth * (2026-06-14 9:13:02): [krb5_child[93491]] [main] (0x0400): [RID#170] Will perform online auth * (2026-06-14 9:13:02): [krb5_child[93491]] [tgt_req_child] (0x1000): [RID#170] Attempting to get a TGT * (2026-06-14 9:13:02): [krb5_child[93491]] [get_and_save_tgt] (0x0400): [RID#170] Attempting kinit for realm [OOO.TEST] * (2026-06-14 9:13:02): [krb5_child[93491]] [sss_krb5_responder] (0x4000): [RID#170] Got question [password]. * (2026-06-14 9:13:02): [krb5_child[93491]] [get_and_save_tgt] (0x0020): [RID#170] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-14 9:13:02): [krb5_child[93491]] [map_krb5_error] (0x0020): [RID#170] 2138: [-1765328360][Preauthentication failed] (2026-06-14 9:16:25): [krb5_child[99710]] [get_and_save_tgt] (0x0020): [RID#183] 2009: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-14 9:16:25): [krb5_child[99710]] [main] (0x0400): [RID#183] krb5_child started. * (2026-06-14 9:16:25): [krb5_child[99710]] [unpack_buffer] (0x1000): [RID#183] total buffer size: [99] * (2026-06-14 9:16:25): [krb5_child[99710]] [unpack_buffer] (0x0100): [RID#183] cmd [241 (auth)] uid [621800000] gid [621800000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-14 9:16:25): [krb5_child[99710]] [unpack_buffer] (0x2000): [RID#183] No old ccache * (2026-06-14 9:16:25): [krb5_child[99710]] [unpack_buffer] (0x0100): [RID#183] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-14 9:16:25): [krb5_child[99710]] [k5c_precreate_ccache] (0x4000): [RID#183] Recreating ccache * (2026-06-14 9:16:25): [krb5_child[99710]] [k5c_setup_fast] (0x0100): [RID#183] Fast principal is set to [host/np0000073150.ooo.test@OOO.TEST] * (2026-06-14 9:16:25): [krb5_child[99710]] [find_principal_in_keytab] (0x4000): [RID#183] Trying to find principal host/np0000073150.ooo.test@OOO.TEST in keytab. * (2026-06-14 9:16:25): [krb5_child[99710]] [match_principal] (0x1000): [RID#183] Principal matched to the sample (host/np0000073150.ooo.test@OOO.TEST). * (2026-06-14 9:16:25): [krb5_child[99710]] [check_fast_ccache] (0x0200): [RID#183] FAST TGT is still valid. * (2026-06-14 9:16:25): [krb5_child[99710]] [become_user] (0x0200): [RID#183] Trying to become user [621800000][621800000]. * (2026-06-14 9:16:25): [krb5_child[99710]] [main] (0x2000): [RID#183] Running as [621800000][621800000]. * (2026-06-14 9:16:25): [krb5_child[99710]] [set_lifetime_options] (0x0100): [RID#183] No specific renewable lifetime requested. * (2026-06-14 9:16:25): [krb5_child[99710]] [set_lifetime_options] (0x0100): [RID#183] No specific lifetime requested. * (2026-06-14 9:16:25): [krb5_child[99710]] [set_canonicalize_option] (0x0100): [RID#183] Canonicalization is set to [true] * (2026-06-14 9:16:25): [krb5_child[99710]] [main] (0x0400): [RID#183] Will perform auth * (2026-06-14 9:16:25): [krb5_child[99710]] [main] (0x0400): [RID#183] Will perform online auth * (2026-06-14 9:16:25): [krb5_child[99710]] [tgt_req_child] (0x1000): [RID#183] Attempting to get a TGT * (2026-06-14 9:16:25): [krb5_child[99710]] [get_and_save_tgt] (0x0400): [RID#183] Attempting kinit for realm [OOO.TEST] * (2026-06-14 9:16:25): [krb5_child[99710]] [get_and_save_tgt] (0x0020): [RID#183] 2009: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-14 9:16:25): [krb5_child[99710]] [map_krb5_error] (0x0020): [RID#183] 2138: [-1765328184][Error constructing AP-REQ armor: No credentials found with supported encryption types]