(2026-06-15 8:36:58): [krb5_child[71167]] [get_and_save_tgt] (0x0020): [RID#36] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-15 8:36:58): [krb5_child[71167]] [main] (0x0400): [RID#36] krb5_child started. * (2026-06-15 8:36:58): [krb5_child[71167]] [unpack_buffer] (0x1000): [RID#36] total buffer size: [103] * (2026-06-15 8:36:58): [krb5_child[71167]] [unpack_buffer] (0x0100): [RID#36] cmd [241 (auth)] uid [628200000] gid [628200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-15 8:36:58): [krb5_child[71167]] [unpack_buffer] (0x2000): [RID#36] No old ccache * (2026-06-15 8:36:58): [krb5_child[71167]] [unpack_buffer] (0x0100): [RID#36] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-15 8:36:58): [krb5_child[71167]] [k5c_precreate_ccache] (0x4000): [RID#36] Recreating ccache * (2026-06-15 8:36:58): [krb5_child[71167]] [k5c_setup_fast] (0x0100): [RID#36] Fast principal is set to [host/np0000073848.ooo.test@OOO.TEST] * (2026-06-15 8:36:58): [krb5_child[71167]] [find_principal_in_keytab] (0x4000): [RID#36] Trying to find principal host/np0000073848.ooo.test@OOO.TEST in keytab. * (2026-06-15 8:36:58): [krb5_child[71167]] [match_principal] (0x1000): [RID#36] Principal matched to the sample (host/np0000073848.ooo.test@OOO.TEST). * (2026-06-15 8:36:58): [krb5_child[71167]] [check_fast_ccache] (0x0200): [RID#36] FAST TGT is still valid. * (2026-06-15 8:36:58): [krb5_child[71167]] [become_user] (0x0200): [RID#36] Trying to become user [628200000][628200000]. * (2026-06-15 8:36:58): [krb5_child[71167]] [main] (0x2000): [RID#36] Running as [628200000][628200000]. * (2026-06-15 8:36:58): [krb5_child[71167]] [set_lifetime_options] (0x0100): [RID#36] No specific renewable lifetime requested. * (2026-06-15 8:36:58): [krb5_child[71167]] [set_lifetime_options] (0x0100): [RID#36] No specific lifetime requested. * (2026-06-15 8:36:58): [krb5_child[71167]] [set_canonicalize_option] (0x0100): [RID#36] Canonicalization is set to [true] * (2026-06-15 8:36:58): [krb5_child[71167]] [main] (0x0400): [RID#36] Will perform auth * (2026-06-15 8:36:58): [krb5_child[71167]] [main] (0x0400): [RID#36] Will perform online auth * (2026-06-15 8:36:58): [krb5_child[71167]] [tgt_req_child] (0x1000): [RID#36] Attempting to get a TGT * (2026-06-15 8:36:58): [krb5_child[71167]] [get_and_save_tgt] (0x0400): [RID#36] Attempting kinit for realm [OOO.TEST] * (2026-06-15 8:36:58): [krb5_child[71167]] [sss_krb5_responder] (0x4000): [RID#36] Got question [password]. * (2026-06-15 8:36:58): [krb5_child[71167]] [get_and_save_tgt] (0x0020): [RID#36] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-15 8:36:58): [krb5_child[71167]] [map_krb5_error] (0x0020): [RID#36] 2138: [-1765328360][Preauthentication failed] (2026-06-15 9:09:43): [krb5_child[88794]] [get_and_save_tgt] (0x0020): [RID#105] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-15 9:09:43): [krb5_child[88794]] [main] (0x0400): [RID#105] krb5_child started. * (2026-06-15 9:09:43): [krb5_child[88794]] [unpack_buffer] (0x1000): [RID#105] total buffer size: [103] * (2026-06-15 9:09:43): [krb5_child[88794]] [unpack_buffer] (0x0100): [RID#105] cmd [241 (auth)] uid [628200000] gid [628200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-15 9:09:43): [krb5_child[88794]] [unpack_buffer] (0x2000): [RID#105] No old ccache * (2026-06-15 9:09:43): [krb5_child[88794]] [unpack_buffer] (0x0100): [RID#105] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-15 9:09:43): [krb5_child[88794]] [k5c_precreate_ccache] (0x4000): [RID#105] Recreating ccache * (2026-06-15 9:09:43): [krb5_child[88794]] [k5c_setup_fast] (0x0100): [RID#105] Fast principal is set to [host/np0000073848.ooo.test@OOO.TEST] * (2026-06-15 9:09:43): [krb5_child[88794]] [find_principal_in_keytab] (0x4000): [RID#105] Trying to find principal host/np0000073848.ooo.test@OOO.TEST in keytab. * (2026-06-15 9:09:43): [krb5_child[88794]] [match_principal] (0x1000): [RID#105] Principal matched to the sample (host/np0000073848.ooo.test@OOO.TEST). * (2026-06-15 9:09:43): [krb5_child[88794]] [check_fast_ccache] (0x0200): [RID#105] FAST TGT is still valid. * (2026-06-15 9:09:43): [krb5_child[88794]] [become_user] (0x0200): [RID#105] Trying to become user [628200000][628200000]. * (2026-06-15 9:09:43): [krb5_child[88794]] [main] (0x2000): [RID#105] Running as [628200000][628200000]. * (2026-06-15 9:09:43): [krb5_child[88794]] [set_lifetime_options] (0x0100): [RID#105] No specific renewable lifetime requested. * (2026-06-15 9:09:43): [krb5_child[88794]] [set_lifetime_options] (0x0100): [RID#105] No specific lifetime requested. * (2026-06-15 9:09:43): [krb5_child[88794]] [set_canonicalize_option] (0x0100): [RID#105] Canonicalization is set to [true] * (2026-06-15 9:09:43): [krb5_child[88794]] [main] (0x0400): [RID#105] Will perform auth * (2026-06-15 9:09:43): [krb5_child[88794]] [main] (0x0400): [RID#105] Will perform online auth * (2026-06-15 9:09:43): [krb5_child[88794]] [tgt_req_child] (0x1000): [RID#105] Attempting to get a TGT * (2026-06-15 9:09:43): [krb5_child[88794]] [get_and_save_tgt] (0x0400): [RID#105] Attempting kinit for realm [OOO.TEST] * (2026-06-15 9:09:43): [krb5_child[88794]] [sss_krb5_responder] (0x4000): [RID#105] Got question [password]. * (2026-06-15 9:09:43): [krb5_child[88794]] [get_and_save_tgt] (0x0020): [RID#105] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-15 9:09:43): [krb5_child[88794]] [map_krb5_error] (0x0020): [RID#105] 2138: [-1765328360][Preauthentication failed] (2026-06-15 9:14:03): [krb5_child[92490]] [get_and_save_tgt] (0x0020): [RID#116] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-15 9:14:03): [krb5_child[92490]] [main] (0x0400): [RID#116] krb5_child started. * (2026-06-15 9:14:03): [krb5_child[92490]] [unpack_buffer] (0x1000): [RID#116] total buffer size: [99] * (2026-06-15 9:14:03): [krb5_child[92490]] [unpack_buffer] (0x0100): [RID#116] cmd [241 (auth)] uid [628200000] gid [628200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-15 9:14:03): [krb5_child[92490]] [unpack_buffer] (0x2000): [RID#116] No old ccache * (2026-06-15 9:14:03): [krb5_child[92490]] [unpack_buffer] (0x0100): [RID#116] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-15 9:14:03): [krb5_child[92490]] [k5c_precreate_ccache] (0x4000): [RID#116] Recreating ccache * (2026-06-15 9:14:03): [krb5_child[92490]] [k5c_setup_fast] (0x0100): [RID#116] Fast principal is set to [host/np0000073848.ooo.test@OOO.TEST] * (2026-06-15 9:14:03): [krb5_child[92490]] [find_principal_in_keytab] (0x4000): [RID#116] Trying to find principal host/np0000073848.ooo.test@OOO.TEST in keytab. * (2026-06-15 9:14:03): [krb5_child[92490]] [match_principal] (0x1000): [RID#116] Principal matched to the sample (host/np0000073848.ooo.test@OOO.TEST). * (2026-06-15 9:14:03): [krb5_child[92490]] [check_fast_ccache] (0x0200): [RID#116] FAST TGT is still valid. * (2026-06-15 9:14:03): [krb5_child[92490]] [become_user] (0x0200): [RID#116] Trying to become user [628200000][628200000]. * (2026-06-15 9:14:03): [krb5_child[92490]] [main] (0x2000): [RID#116] Running as [628200000][628200000]. * (2026-06-15 9:14:03): [krb5_child[92490]] [set_lifetime_options] (0x0100): [RID#116] No specific renewable lifetime requested. * (2026-06-15 9:14:03): [krb5_child[92490]] [set_lifetime_options] (0x0100): [RID#116] No specific lifetime requested. * (2026-06-15 9:14:03): [krb5_child[92490]] [set_canonicalize_option] (0x0100): [RID#116] Canonicalization is set to [true] * (2026-06-15 9:14:03): [krb5_child[92490]] [main] (0x0400): [RID#116] Will perform auth * (2026-06-15 9:14:03): [krb5_child[92490]] [main] (0x0400): [RID#116] Will perform online auth * (2026-06-15 9:14:03): [krb5_child[92490]] [tgt_req_child] (0x1000): [RID#116] Attempting to get a TGT * (2026-06-15 9:14:03): [krb5_child[92490]] [get_and_save_tgt] (0x0400): [RID#116] Attempting kinit for realm [OOO.TEST] * (2026-06-15 9:14:03): [krb5_child[92490]] [get_and_save_tgt] (0x0020): [RID#116] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-15 9:14:03): [krb5_child[92490]] [map_krb5_error] (0x0020): [RID#116] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-15 9:16:52): [krb5_child[98604]] [get_and_save_tgt] (0x0020): [RID#124] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-15 9:16:52): [krb5_child[98604]] [main] (0x0400): [RID#124] krb5_child started. * (2026-06-15 9:16:52): [krb5_child[98604]] [unpack_buffer] (0x1000): [RID#124] total buffer size: [99] * (2026-06-15 9:16:52): [krb5_child[98604]] [unpack_buffer] (0x0100): [RID#124] cmd [241 (auth)] uid [628200000] gid [628200000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-15 9:16:52): [krb5_child[98604]] [unpack_buffer] (0x2000): [RID#124] No old ccache * (2026-06-15 9:16:52): [krb5_child[98604]] [unpack_buffer] (0x0100): [RID#124] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-15 9:16:52): [krb5_child[98604]] [k5c_precreate_ccache] (0x4000): [RID#124] Recreating ccache * (2026-06-15 9:16:52): [krb5_child[98604]] [k5c_setup_fast] (0x0100): [RID#124] Fast principal is set to [host/np0000073848.ooo.test@OOO.TEST] * (2026-06-15 9:16:52): [krb5_child[98604]] [find_principal_in_keytab] (0x4000): [RID#124] Trying to find principal host/np0000073848.ooo.test@OOO.TEST in keytab. * (2026-06-15 9:16:52): [krb5_child[98604]] [match_principal] (0x1000): [RID#124] Principal matched to the sample (host/np0000073848.ooo.test@OOO.TEST). * (2026-06-15 9:16:52): [krb5_child[98604]] [check_fast_ccache] (0x0200): [RID#124] FAST TGT is still valid. * (2026-06-15 9:16:52): [krb5_child[98604]] [become_user] (0x0200): [RID#124] Trying to become user [628200000][628200000]. * (2026-06-15 9:16:52): [krb5_child[98604]] [main] (0x2000): [RID#124] Running as [628200000][628200000]. * (2026-06-15 9:16:52): [krb5_child[98604]] [set_lifetime_options] (0x0100): [RID#124] No specific renewable lifetime requested. * (2026-06-15 9:16:52): [krb5_child[98604]] [set_lifetime_options] (0x0100): [RID#124] No specific lifetime requested. * (2026-06-15 9:16:52): [krb5_child[98604]] [set_canonicalize_option] (0x0100): [RID#124] Canonicalization is set to [true] * (2026-06-15 9:16:52): [krb5_child[98604]] [main] (0x0400): [RID#124] Will perform auth * (2026-06-15 9:16:52): [krb5_child[98604]] [main] (0x0400): [RID#124] Will perform online auth * (2026-06-15 9:16:52): [krb5_child[98604]] [tgt_req_child] (0x1000): [RID#124] Attempting to get a TGT * (2026-06-15 9:16:52): [krb5_child[98604]] [get_and_save_tgt] (0x0400): [RID#124] Attempting kinit for realm [OOO.TEST] * (2026-06-15 9:16:52): [krb5_child[98604]] [get_and_save_tgt] (0x0020): [RID#124] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-15 9:16:52): [krb5_child[98604]] [map_krb5_error] (0x0020): [RID#124] 2138: [-1765328366][Client's credentials have been revoked]