(2026-06-14 8:03:18): [krb5_child[40256]] [get_and_save_tgt] (0x0020): [RID#11] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-14 8:03:18): [krb5_child[40256]] [main] (0x0400): [RID#11] krb5_child started. * (2026-06-14 8:03:18): [krb5_child[40256]] [unpack_buffer] (0x1000): [RID#11] total buffer size: [96] * (2026-06-14 8:03:18): [krb5_child[40256]] [unpack_buffer] (0x0100): [RID#11] cmd [241 (auth)] uid [910600000] gid [910600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-14 8:03:18): [krb5_child[40256]] [unpack_buffer] (0x2000): [RID#11] No old ccache * (2026-06-14 8:03:18): [krb5_child[40256]] [unpack_buffer] (0x0100): [RID#11] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-14 8:03:18): [krb5_child[40256]] [k5c_precreate_ccache] (0x4000): [RID#11] Recreating ccache * (2026-06-14 8:03:18): [krb5_child[40256]] [k5c_setup_fast] (0x0100): [RID#11] Fast principal is set to [host/np0000073154.ooo.test@OOO.TEST] * (2026-06-14 8:03:18): [krb5_child[40256]] [find_principal_in_keytab] (0x4000): [RID#11] Trying to find principal host/np0000073154.ooo.test@OOO.TEST in keytab. * (2026-06-14 8:03:18): [krb5_child[40256]] [match_principal] (0x1000): [RID#11] Principal matched to the sample (host/np0000073154.ooo.test@OOO.TEST). * (2026-06-14 8:03:18): [krb5_child[40256]] [check_fast_ccache] (0x0200): [RID#11] FAST TGT is still valid. * (2026-06-14 8:03:18): [krb5_child[40256]] [become_user] (0x0200): [RID#11] Trying to become user [910600000][910600000]. * (2026-06-14 8:03:18): [krb5_child[40256]] [main] (0x2000): [RID#11] Running as [910600000][910600000]. * (2026-06-14 8:03:18): [krb5_child[40256]] [set_lifetime_options] (0x0100): [RID#11] No specific renewable lifetime requested. * (2026-06-14 8:03:18): [krb5_child[40256]] [set_lifetime_options] (0x0100): [RID#11] No specific lifetime requested. * (2026-06-14 8:03:18): [krb5_child[40256]] [set_canonicalize_option] (0x0100): [RID#11] Canonicalization is set to [true] * (2026-06-14 8:03:18): [krb5_child[40256]] [main] (0x0400): [RID#11] Will perform auth * (2026-06-14 8:03:18): [krb5_child[40256]] [main] (0x0400): [RID#11] Will perform online auth * (2026-06-14 8:03:18): [krb5_child[40256]] [tgt_req_child] (0x1000): [RID#11] Attempting to get a TGT * (2026-06-14 8:03:18): [krb5_child[40256]] [get_and_save_tgt] (0x0400): [RID#11] Attempting kinit for realm [OOO.TEST] * (2026-06-14 8:03:18): [krb5_child[40256]] [sss_krb5_responder] (0x4000): [RID#11] Got question [password]. * (2026-06-14 8:03:18): [krb5_child[40256]] [get_and_save_tgt] (0x0020): [RID#11] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-14 8:03:18): [krb5_child[40256]] [map_krb5_error] (0x0020): [RID#11] 2138: [-1765328360][Preauthentication failed] (2026-06-14 9:00:17): [krb5_child[310679]] [get_and_save_tgt] (0x0020): [RID#188] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-14 9:00:17): [krb5_child[310679]] [main] (0x0400): [RID#188] krb5_child started. * (2026-06-14 9:00:17): [krb5_child[310679]] [unpack_buffer] (0x1000): [RID#188] total buffer size: [99] * (2026-06-14 9:00:17): [krb5_child[310679]] [unpack_buffer] (0x0100): [RID#188] cmd [241 (auth)] uid [910600000] gid [910600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-14 9:00:17): [krb5_child[310679]] [unpack_buffer] (0x2000): [RID#188] No old ccache * (2026-06-14 9:00:17): [krb5_child[310679]] [unpack_buffer] (0x0100): [RID#188] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-14 9:00:17): [krb5_child[310679]] [k5c_precreate_ccache] (0x4000): [RID#188] Recreating ccache * (2026-06-14 9:00:17): [krb5_child[310679]] [k5c_setup_fast] (0x0100): [RID#188] Fast principal is set to [host/np0000073154.ooo.test@OOO.TEST] * (2026-06-14 9:00:17): [krb5_child[310679]] [find_principal_in_keytab] (0x4000): [RID#188] Trying to find principal host/np0000073154.ooo.test@OOO.TEST in keytab. * (2026-06-14 9:00:17): [krb5_child[310679]] [match_principal] (0x1000): [RID#188] Principal matched to the sample (host/np0000073154.ooo.test@OOO.TEST). * (2026-06-14 9:00:17): [krb5_child[310679]] [check_fast_ccache] (0x0200): [RID#188] FAST TGT is still valid. * (2026-06-14 9:00:17): [krb5_child[310679]] [become_user] (0x0200): [RID#188] Trying to become user [910600000][910600000]. * (2026-06-14 9:00:17): [krb5_child[310679]] [main] (0x2000): [RID#188] Running as [910600000][910600000]. * (2026-06-14 9:00:17): [krb5_child[310679]] [set_lifetime_options] (0x0100): [RID#188] No specific renewable lifetime requested. * (2026-06-14 9:00:17): [krb5_child[310679]] [set_lifetime_options] (0x0100): [RID#188] No specific lifetime requested. * (2026-06-14 9:00:17): [krb5_child[310679]] [set_canonicalize_option] (0x0100): [RID#188] Canonicalization is set to [true] * (2026-06-14 9:00:17): [krb5_child[310679]] [main] (0x0400): [RID#188] Will perform auth * (2026-06-14 9:00:17): [krb5_child[310679]] [main] (0x0400): [RID#188] Will perform online auth * (2026-06-14 9:00:17): [krb5_child[310679]] [tgt_req_child] (0x1000): [RID#188] Attempting to get a TGT * (2026-06-14 9:00:17): [krb5_child[310679]] [get_and_save_tgt] (0x0400): [RID#188] Attempting kinit for realm [OOO.TEST] * (2026-06-14 9:00:17): [krb5_child[310679]] [sss_krb5_responder] (0x4000): [RID#188] Got question [password]. * (2026-06-14 9:00:17): [krb5_child[310679]] [get_and_save_tgt] (0x0020): [RID#188] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-14 9:00:17): [krb5_child[310679]] [map_krb5_error] (0x0020): [RID#188] 2138: [-1765328360][Preauthentication failed]