(2026-06-15 8:09:08): [krb5_child[52017]] [get_and_save_tgt] (0x0020): [RID#35] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-15 8:09:08): [krb5_child[52017]] [main] (0x0400): [RID#35] krb5_child started. * (2026-06-15 8:09:08): [krb5_child[52017]] [unpack_buffer] (0x1000): [RID#35] total buffer size: [96] * (2026-06-15 8:09:08): [krb5_child[52017]] [unpack_buffer] (0x0100): [RID#35] cmd [241 (auth)] uid [628200000] gid [628200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-15 8:09:08): [krb5_child[52017]] [unpack_buffer] (0x2000): [RID#35] No old ccache * (2026-06-15 8:09:08): [krb5_child[52017]] [unpack_buffer] (0x0100): [RID#35] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-15 8:09:08): [krb5_child[52017]] [k5c_precreate_ccache] (0x4000): [RID#35] Recreating ccache * (2026-06-15 8:09:08): [krb5_child[52017]] [k5c_setup_fast] (0x0100): [RID#35] Fast principal is set to [host/np0000073844.ooo.test@OOO.TEST] * (2026-06-15 8:09:08): [krb5_child[52017]] [find_principal_in_keytab] (0x4000): [RID#35] Trying to find principal host/np0000073844.ooo.test@OOO.TEST in keytab. * (2026-06-15 8:09:08): [krb5_child[52017]] [match_principal] (0x1000): [RID#35] Principal matched to the sample (host/np0000073844.ooo.test@OOO.TEST). * (2026-06-15 8:09:08): [krb5_child[52017]] [check_fast_ccache] (0x0200): [RID#35] FAST TGT is still valid. * (2026-06-15 8:09:08): [krb5_child[52017]] [become_user] (0x0200): [RID#35] Trying to become user [628200000][628200000]. * (2026-06-15 8:09:08): [krb5_child[52017]] [main] (0x2000): [RID#35] Running as [628200000][628200000]. * (2026-06-15 8:09:08): [krb5_child[52017]] [set_lifetime_options] (0x0100): [RID#35] No specific renewable lifetime requested. * (2026-06-15 8:09:08): [krb5_child[52017]] [set_lifetime_options] (0x0100): [RID#35] No specific lifetime requested. * (2026-06-15 8:09:08): [krb5_child[52017]] [set_canonicalize_option] (0x0100): [RID#35] Canonicalization is set to [true] * (2026-06-15 8:09:08): [krb5_child[52017]] [main] (0x0400): [RID#35] Will perform auth * (2026-06-15 8:09:08): [krb5_child[52017]] [main] (0x0400): [RID#35] Will perform online auth * (2026-06-15 8:09:08): [krb5_child[52017]] [tgt_req_child] (0x1000): [RID#35] Attempting to get a TGT * (2026-06-15 8:09:08): [krb5_child[52017]] [get_and_save_tgt] (0x0400): [RID#35] Attempting kinit for realm [OOO.TEST] * (2026-06-15 8:09:08): [krb5_child[52017]] [sss_krb5_responder] (0x4000): [RID#35] Got question [password]. * (2026-06-15 8:09:08): [krb5_child[52017]] [get_and_save_tgt] (0x0020): [RID#35] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-15 8:09:08): [krb5_child[52017]] [map_krb5_error] (0x0020): [RID#35] 2138: [-1765328360][Preauthentication failed] (2026-06-15 8:09:10): [krb5_child[52020]] [get_and_save_tgt] (0x0020): [RID#37] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-15 8:09:10): [krb5_child[52020]] [main] (0x0400): [RID#37] krb5_child started. * (2026-06-15 8:09:10): [krb5_child[52020]] [unpack_buffer] (0x1000): [RID#37] total buffer size: [99] * (2026-06-15 8:09:10): [krb5_child[52020]] [unpack_buffer] (0x0100): [RID#37] cmd [241 (auth)] uid [628200000] gid [628200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-15 8:09:10): [krb5_child[52020]] [unpack_buffer] (0x2000): [RID#37] No old ccache * (2026-06-15 8:09:10): [krb5_child[52020]] [unpack_buffer] (0x0100): [RID#37] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-15 8:09:10): [krb5_child[52020]] [k5c_precreate_ccache] (0x4000): [RID#37] Recreating ccache * (2026-06-15 8:09:10): [krb5_child[52020]] [k5c_setup_fast] (0x0100): [RID#37] Fast principal is set to [host/np0000073844.ooo.test@OOO.TEST] * (2026-06-15 8:09:10): [krb5_child[52020]] [find_principal_in_keytab] (0x4000): [RID#37] Trying to find principal host/np0000073844.ooo.test@OOO.TEST in keytab. * (2026-06-15 8:09:10): [krb5_child[52020]] [match_principal] (0x1000): [RID#37] Principal matched to the sample (host/np0000073844.ooo.test@OOO.TEST). * (2026-06-15 8:09:10): [krb5_child[52020]] [check_fast_ccache] (0x0200): [RID#37] FAST TGT is still valid. * (2026-06-15 8:09:10): [krb5_child[52020]] [become_user] (0x0200): [RID#37] Trying to become user [628200000][628200000]. * (2026-06-15 8:09:10): [krb5_child[52020]] [main] (0x2000): [RID#37] Running as [628200000][628200000]. * (2026-06-15 8:09:10): [krb5_child[52020]] [set_lifetime_options] (0x0100): [RID#37] No specific renewable lifetime requested. * (2026-06-15 8:09:10): [krb5_child[52020]] [set_lifetime_options] (0x0100): [RID#37] No specific lifetime requested. * (2026-06-15 8:09:10): [krb5_child[52020]] [set_canonicalize_option] (0x0100): [RID#37] Canonicalization is set to [true] * (2026-06-15 8:09:10): [krb5_child[52020]] [main] (0x0400): [RID#37] Will perform auth * (2026-06-15 8:09:10): [krb5_child[52020]] [main] (0x0400): [RID#37] Will perform online auth * (2026-06-15 8:09:10): [krb5_child[52020]] [tgt_req_child] (0x1000): [RID#37] Attempting to get a TGT * (2026-06-15 8:09:10): [krb5_child[52020]] [get_and_save_tgt] (0x0400): [RID#37] Attempting kinit for realm [OOO.TEST] * (2026-06-15 8:09:10): [krb5_child[52020]] [sss_krb5_responder] (0x4000): [RID#37] Got question [password]. * (2026-06-15 8:09:10): [krb5_child[52020]] [get_and_save_tgt] (0x0020): [RID#37] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-15 8:09:10): [krb5_child[52020]] [map_krb5_error] (0x0020): [RID#37] 2138: [-1765328360][Preauthentication failed] (2026-06-15 9:12:21): [krb5_child[359053]] [get_and_save_tgt] (0x0020): [RID#90] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-15 9:12:21): [krb5_child[359053]] [main] (0x0400): [RID#90] krb5_child started. * (2026-06-15 9:12:21): [krb5_child[359053]] [unpack_buffer] (0x1000): [RID#90] total buffer size: [97] * (2026-06-15 9:12:21): [krb5_child[359053]] [unpack_buffer] (0x0100): [RID#90] cmd [241 (auth)] uid [628200000] gid [628200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-15 9:12:21): [krb5_child[359053]] [unpack_buffer] (0x2000): [RID#90] No old ccache * (2026-06-15 9:12:21): [krb5_child[359053]] [unpack_buffer] (0x0100): [RID#90] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-15 9:12:21): [krb5_child[359053]] [k5c_precreate_ccache] (0x4000): [RID#90] Recreating ccache * (2026-06-15 9:12:21): [krb5_child[359053]] [k5c_setup_fast] (0x0100): [RID#90] Fast principal is set to [host/np0000073844.ooo.test@OOO.TEST] * (2026-06-15 9:12:21): [krb5_child[359053]] [find_principal_in_keytab] (0x4000): [RID#90] Trying to find principal host/np0000073844.ooo.test@OOO.TEST in keytab. * (2026-06-15 9:12:21): [krb5_child[359053]] [match_principal] (0x1000): [RID#90] Principal matched to the sample (host/np0000073844.ooo.test@OOO.TEST). * (2026-06-15 9:12:21): [krb5_child[359053]] [check_fast_ccache] (0x0200): [RID#90] FAST TGT is still valid. * (2026-06-15 9:12:21): [krb5_child[359053]] [become_user] (0x0200): [RID#90] Trying to become user [628200000][628200000]. * (2026-06-15 9:12:21): [krb5_child[359053]] [main] (0x2000): [RID#90] Running as [628200000][628200000]. * (2026-06-15 9:12:21): [krb5_child[359053]] [set_lifetime_options] (0x0100): [RID#90] No specific renewable lifetime requested. * (2026-06-15 9:12:21): [krb5_child[359053]] [set_lifetime_options] (0x0100): [RID#90] No specific lifetime requested. * (2026-06-15 9:12:21): [krb5_child[359053]] [set_canonicalize_option] (0x0100): [RID#90] Canonicalization is set to [true] * (2026-06-15 9:12:21): [krb5_child[359053]] [main] (0x0400): [RID#90] Will perform auth * (2026-06-15 9:12:21): [krb5_child[359053]] [main] (0x0400): [RID#90] Will perform online auth * (2026-06-15 9:12:21): [krb5_child[359053]] [tgt_req_child] (0x1000): [RID#90] Attempting to get a TGT * (2026-06-15 9:12:21): [krb5_child[359053]] [get_and_save_tgt] (0x0400): [RID#90] Attempting kinit for realm [OOO.TEST] * (2026-06-15 9:12:21): [krb5_child[359053]] [sss_krb5_responder] (0x4000): [RID#90] Got question [password]. * (2026-06-15 9:12:21): [krb5_child[359053]] [get_and_save_tgt] (0x0020): [RID#90] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-15 9:12:21): [krb5_child[359053]] [map_krb5_error] (0x0020): [RID#90] 2138: [-1765328360][Preauthentication failed] (2026-06-15 9:21:56): [krb5_child[377441]] [get_and_save_tgt] (0x0020): [RID#179] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-15 9:21:56): [krb5_child[377441]] [main] (0x0400): [RID#179] krb5_child started. * (2026-06-15 9:21:56): [krb5_child[377441]] [unpack_buffer] (0x1000): [RID#179] total buffer size: [100] * (2026-06-15 9:21:56): [krb5_child[377441]] [unpack_buffer] (0x0100): [RID#179] cmd [241 (auth)] uid [628200000] gid [628200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-15 9:21:56): [krb5_child[377441]] [unpack_buffer] (0x2000): [RID#179] No old ccache * (2026-06-15 9:21:56): [krb5_child[377441]] [unpack_buffer] (0x0100): [RID#179] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-15 9:21:56): [krb5_child[377441]] [k5c_precreate_ccache] (0x4000): [RID#179] Recreating ccache * (2026-06-15 9:21:56): [krb5_child[377441]] [k5c_setup_fast] (0x0100): [RID#179] Fast principal is set to [host/np0000073844.ooo.test@OOO.TEST] * (2026-06-15 9:21:56): [krb5_child[377441]] [find_principal_in_keytab] (0x4000): [RID#179] Trying to find principal host/np0000073844.ooo.test@OOO.TEST in keytab. * (2026-06-15 9:21:56): [krb5_child[377441]] [match_principal] (0x1000): [RID#179] Principal matched to the sample (host/np0000073844.ooo.test@OOO.TEST). * (2026-06-15 9:21:56): [krb5_child[377441]] [check_fast_ccache] (0x0200): [RID#179] FAST TGT is still valid. * (2026-06-15 9:21:56): [krb5_child[377441]] [become_user] (0x0200): [RID#179] Trying to become user [628200000][628200000]. * (2026-06-15 9:21:56): [krb5_child[377441]] [main] (0x2000): [RID#179] Running as [628200000][628200000]. * (2026-06-15 9:21:56): [krb5_child[377441]] [set_lifetime_options] (0x0100): [RID#179] No specific renewable lifetime requested. * (2026-06-15 9:21:56): [krb5_child[377441]] [set_lifetime_options] (0x0100): [RID#179] No specific lifetime requested. * (2026-06-15 9:21:56): [krb5_child[377441]] [set_canonicalize_option] (0x0100): [RID#179] Canonicalization is set to [true] * (2026-06-15 9:21:56): [krb5_child[377441]] [main] (0x0400): [RID#179] Will perform auth * (2026-06-15 9:21:56): [krb5_child[377441]] [main] (0x0400): [RID#179] Will perform online auth * (2026-06-15 9:21:56): [krb5_child[377441]] [tgt_req_child] (0x1000): [RID#179] Attempting to get a TGT * (2026-06-15 9:21:56): [krb5_child[377441]] [get_and_save_tgt] (0x0400): [RID#179] Attempting kinit for realm [OOO.TEST] * (2026-06-15 9:21:56): [krb5_child[377441]] [get_and_save_tgt] (0x0020): [RID#179] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-15 9:21:56): [krb5_child[377441]] [map_krb5_error] (0x0020): [RID#179] 2138: [-1765328366][Client's credentials have been revoked]