(2026-06-12 8:21:24): [krb5_child[38280]] [get_and_save_tgt] (0x0020): [RID#7] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-12 8:21:24): [krb5_child[38280]] [main] (0x0400): [RID#7] krb5_child started. * (2026-06-12 8:21:24): [krb5_child[38280]] [unpack_buffer] (0x1000): [RID#7] total buffer size: [96] * (2026-06-12 8:21:24): [krb5_child[38280]] [unpack_buffer] (0x0100): [RID#7] cmd [241 (auth)] uid [245000000] gid [245000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-12 8:21:24): [krb5_child[38280]] [unpack_buffer] (0x2000): [RID#7] No old ccache * (2026-06-12 8:21:24): [krb5_child[38280]] [unpack_buffer] (0x0100): [RID#7] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-12 8:21:24): [krb5_child[38280]] [k5c_precreate_ccache] (0x4000): [RID#7] Recreating ccache * (2026-06-12 8:21:24): [krb5_child[38280]] [k5c_setup_fast] (0x0100): [RID#7] Fast principal is set to [host/np0000071532.ooo.test@OOO.TEST] * (2026-06-12 8:21:24): [krb5_child[38280]] [find_principal_in_keytab] (0x4000): [RID#7] Trying to find principal host/np0000071532.ooo.test@OOO.TEST in keytab. * (2026-06-12 8:21:24): [krb5_child[38280]] [match_principal] (0x1000): [RID#7] Principal matched to the sample (host/np0000071532.ooo.test@OOO.TEST). * (2026-06-12 8:21:24): [krb5_child[38280]] [check_fast_ccache] (0x0200): [RID#7] FAST TGT is still valid. * (2026-06-12 8:21:24): [krb5_child[38280]] [become_user] (0x0200): [RID#7] Trying to become user [245000000][245000000]. * (2026-06-12 8:21:24): [krb5_child[38280]] [main] (0x2000): [RID#7] Running as [245000000][245000000]. * (2026-06-12 8:21:24): [krb5_child[38280]] [set_lifetime_options] (0x0100): [RID#7] No specific renewable lifetime requested. * (2026-06-12 8:21:24): [krb5_child[38280]] [set_lifetime_options] (0x0100): [RID#7] No specific lifetime requested. * (2026-06-12 8:21:24): [krb5_child[38280]] [set_canonicalize_option] (0x0100): [RID#7] Canonicalization is set to [true] * (2026-06-12 8:21:24): [krb5_child[38280]] [main] (0x0400): [RID#7] Will perform auth * (2026-06-12 8:21:24): [krb5_child[38280]] [main] (0x0400): [RID#7] Will perform online auth * (2026-06-12 8:21:24): [krb5_child[38280]] [tgt_req_child] (0x1000): [RID#7] Attempting to get a TGT * (2026-06-12 8:21:24): [krb5_child[38280]] [get_and_save_tgt] (0x0400): [RID#7] Attempting kinit for realm [OOO.TEST] * (2026-06-12 8:21:24): [krb5_child[38280]] [sss_krb5_responder] (0x4000): [RID#7] Got question [password]. * (2026-06-12 8:21:24): [krb5_child[38280]] [get_and_save_tgt] (0x0020): [RID#7] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-12 8:21:24): [krb5_child[38280]] [map_krb5_error] (0x0020): [RID#7] 2138: [-1765328360][Preauthentication failed] (2026-06-12 8:27:30): [krb5_child[47520]] [get_and_save_tgt] (0x0020): [RID#28] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-12 8:27:30): [krb5_child[47520]] [main] (0x0400): [RID#28] krb5_child started. * (2026-06-12 8:27:30): [krb5_child[47520]] [unpack_buffer] (0x1000): [RID#28] total buffer size: [100] * (2026-06-12 8:27:30): [krb5_child[47520]] [unpack_buffer] (0x0100): [RID#28] cmd [241 (auth)] uid [245000000] gid [245000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-12 8:27:30): [krb5_child[47520]] [unpack_buffer] (0x2000): [RID#28] No old ccache * (2026-06-12 8:27:30): [krb5_child[47520]] [unpack_buffer] (0x0100): [RID#28] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-12 8:27:30): [krb5_child[47520]] [k5c_precreate_ccache] (0x4000): [RID#28] Recreating ccache * (2026-06-12 8:27:30): [krb5_child[47520]] [k5c_setup_fast] (0x0100): [RID#28] Fast principal is set to [host/np0000071532.ooo.test@OOO.TEST] * (2026-06-12 8:27:30): [krb5_child[47520]] [find_principal_in_keytab] (0x4000): [RID#28] Trying to find principal host/np0000071532.ooo.test@OOO.TEST in keytab. * (2026-06-12 8:27:30): [krb5_child[47520]] [match_principal] (0x1000): [RID#28] Principal matched to the sample (host/np0000071532.ooo.test@OOO.TEST). * (2026-06-12 8:27:30): [krb5_child[47520]] [check_fast_ccache] (0x0200): [RID#28] FAST TGT is still valid. * (2026-06-12 8:27:30): [krb5_child[47520]] [become_user] (0x0200): [RID#28] Trying to become user [245000000][245000000]. * (2026-06-12 8:27:30): [krb5_child[47520]] [main] (0x2000): [RID#28] Running as [245000000][245000000]. * (2026-06-12 8:27:30): [krb5_child[47520]] [set_lifetime_options] (0x0100): [RID#28] No specific renewable lifetime requested. * (2026-06-12 8:27:30): [krb5_child[47520]] [set_lifetime_options] (0x0100): [RID#28] No specific lifetime requested. * (2026-06-12 8:27:30): [krb5_child[47520]] [set_canonicalize_option] (0x0100): [RID#28] Canonicalization is set to [true] * (2026-06-12 8:27:30): [krb5_child[47520]] [main] (0x0400): [RID#28] Will perform auth * (2026-06-12 8:27:30): [krb5_child[47520]] [main] (0x0400): [RID#28] Will perform online auth * (2026-06-12 8:27:30): [krb5_child[47520]] [tgt_req_child] (0x1000): [RID#28] Attempting to get a TGT * (2026-06-12 8:27:30): [krb5_child[47520]] [get_and_save_tgt] (0x0400): [RID#28] Attempting kinit for realm [OOO.TEST] * (2026-06-12 8:27:30): [krb5_child[47520]] [sss_krb5_responder] (0x4000): [RID#28] Got question [password]. * (2026-06-12 8:27:30): [krb5_child[47520]] [get_and_save_tgt] (0x0020): [RID#28] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-12 8:27:30): [krb5_child[47520]] [map_krb5_error] (0x0020): [RID#28] 2138: [-1765328360][Preauthentication failed] (2026-06-12 8:29:28): [krb5_child[47644]] [get_and_save_tgt] (0x0020): [RID#34] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-12 8:29:28): [krb5_child[47644]] [main] (0x0400): [RID#34] krb5_child started. * (2026-06-12 8:29:28): [krb5_child[47644]] [unpack_buffer] (0x1000): [RID#34] total buffer size: [101] * (2026-06-12 8:29:28): [krb5_child[47644]] [unpack_buffer] (0x0100): [RID#34] cmd [241 (auth)] uid [245000000] gid [245000000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-12 8:29:28): [krb5_child[47644]] [unpack_buffer] (0x2000): [RID#34] No old ccache * (2026-06-12 8:29:28): [krb5_child[47644]] [unpack_buffer] (0x0100): [RID#34] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-12 8:29:28): [krb5_child[47644]] [k5c_precreate_ccache] (0x4000): [RID#34] Recreating ccache * (2026-06-12 8:29:28): [krb5_child[47644]] [k5c_setup_fast] (0x0100): [RID#34] Fast principal is set to [host/np0000071532.ooo.test@OOO.TEST] * (2026-06-12 8:29:28): [krb5_child[47644]] [find_principal_in_keytab] (0x4000): [RID#34] Trying to find principal host/np0000071532.ooo.test@OOO.TEST in keytab. * (2026-06-12 8:29:28): [krb5_child[47644]] [match_principal] (0x1000): [RID#34] Principal matched to the sample (host/np0000071532.ooo.test@OOO.TEST). * (2026-06-12 8:29:28): [krb5_child[47644]] [check_fast_ccache] (0x0200): [RID#34] FAST TGT is still valid. * (2026-06-12 8:29:28): [krb5_child[47644]] [become_user] (0x0200): [RID#34] Trying to become user [245000000][245000000]. * (2026-06-12 8:29:28): [krb5_child[47644]] [main] (0x2000): [RID#34] Running as [245000000][245000000]. * (2026-06-12 8:29:28): [krb5_child[47644]] [set_lifetime_options] (0x0100): [RID#34] No specific renewable lifetime requested. * (2026-06-12 8:29:28): [krb5_child[47644]] [set_lifetime_options] (0x0100): [RID#34] No specific lifetime requested. * (2026-06-12 8:29:28): [krb5_child[47644]] [set_canonicalize_option] (0x0100): [RID#34] Canonicalization is set to [true] * (2026-06-12 8:29:28): [krb5_child[47644]] [main] (0x0400): [RID#34] Will perform auth * (2026-06-12 8:29:28): [krb5_child[47644]] [main] (0x0400): [RID#34] Will perform online auth * (2026-06-12 8:29:28): [krb5_child[47644]] [tgt_req_child] (0x1000): [RID#34] Attempting to get a TGT * (2026-06-12 8:29:28): [krb5_child[47644]] [get_and_save_tgt] (0x0400): [RID#34] Attempting kinit for realm [OOO.TEST] * (2026-06-12 8:29:28): [krb5_child[47644]] [sss_krb5_responder] (0x4000): [RID#34] Got question [password]. * (2026-06-12 8:29:28): [krb5_child[47644]] [get_and_save_tgt] (0x0020): [RID#34] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-12 8:29:28): [krb5_child[47644]] [map_krb5_error] (0x0020): [RID#34] 2138: [-1765328360][Preauthentication failed]