(2026-06-13 8:27:19): [krb5_child[106103]] [get_and_save_tgt] (0x0020): [RID#45] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:27:19): [krb5_child[106103]] [main] (0x0400): [RID#45] krb5_child started. * (2026-06-13 8:27:19): [krb5_child[106103]] [unpack_buffer] (0x1000): [RID#45] total buffer size: [96] * (2026-06-13 8:27:19): [krb5_child[106103]] [unpack_buffer] (0x0100): [RID#45] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:27:19): [krb5_child[106103]] [unpack_buffer] (0x2000): [RID#45] No old ccache * (2026-06-13 8:27:19): [krb5_child[106103]] [unpack_buffer] (0x0100): [RID#45] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:27:19): [krb5_child[106103]] [k5c_precreate_ccache] (0x4000): [RID#45] Recreating ccache * (2026-06-13 8:27:19): [krb5_child[106103]] [k5c_setup_fast] (0x0100): [RID#45] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:27:19): [krb5_child[106103]] [find_principal_in_keytab] (0x4000): [RID#45] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:27:19): [krb5_child[106103]] [match_principal] (0x1000): [RID#45] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:27:19): [krb5_child[106103]] [check_fast_ccache] (0x0200): [RID#45] FAST TGT is still valid. * (2026-06-13 8:27:19): [krb5_child[106103]] [become_user] (0x0200): [RID#45] Trying to become user [171600000][171600000]. * (2026-06-13 8:27:19): [krb5_child[106103]] [main] (0x2000): [RID#45] Running as [171600000][171600000]. * (2026-06-13 8:27:19): [krb5_child[106103]] [set_lifetime_options] (0x0100): [RID#45] No specific renewable lifetime requested. * (2026-06-13 8:27:19): [krb5_child[106103]] [set_lifetime_options] (0x0100): [RID#45] No specific lifetime requested. * (2026-06-13 8:27:19): [krb5_child[106103]] [set_canonicalize_option] (0x0100): [RID#45] Canonicalization is set to [true] * (2026-06-13 8:27:19): [krb5_child[106103]] [main] (0x0400): [RID#45] Will perform auth * (2026-06-13 8:27:19): [krb5_child[106103]] [main] (0x0400): [RID#45] Will perform online auth * (2026-06-13 8:27:19): [krb5_child[106103]] [tgt_req_child] (0x1000): [RID#45] Attempting to get a TGT * (2026-06-13 8:27:19): [krb5_child[106103]] [get_and_save_tgt] (0x0400): [RID#45] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:27:19): [krb5_child[106103]] [sss_krb5_responder] (0x4000): [RID#45] Got question [password]. * (2026-06-13 8:27:19): [krb5_child[106103]] [get_and_save_tgt] (0x0020): [RID#45] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:27:19): [krb5_child[106103]] [map_krb5_error] (0x0020): [RID#45] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:27:22): [krb5_child[106394]] [get_and_save_tgt] (0x0020): [RID#47] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:27:22): [krb5_child[106394]] [main] (0x0400): [RID#47] krb5_child started. * (2026-06-13 8:27:22): [krb5_child[106394]] [unpack_buffer] (0x1000): [RID#47] total buffer size: [99] * (2026-06-13 8:27:22): [krb5_child[106394]] [unpack_buffer] (0x0100): [RID#47] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:27:22): [krb5_child[106394]] [unpack_buffer] (0x2000): [RID#47] No old ccache * (2026-06-13 8:27:22): [krb5_child[106394]] [unpack_buffer] (0x0100): [RID#47] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:27:22): [krb5_child[106394]] [k5c_precreate_ccache] (0x4000): [RID#47] Recreating ccache * (2026-06-13 8:27:22): [krb5_child[106394]] [k5c_setup_fast] (0x0100): [RID#47] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:27:22): [krb5_child[106394]] [find_principal_in_keytab] (0x4000): [RID#47] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:27:22): [krb5_child[106394]] [match_principal] (0x1000): [RID#47] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:27:22): [krb5_child[106394]] [check_fast_ccache] (0x0200): [RID#47] FAST TGT is still valid. * (2026-06-13 8:27:22): [krb5_child[106394]] [become_user] (0x0200): [RID#47] Trying to become user [171600000][171600000]. * (2026-06-13 8:27:22): [krb5_child[106394]] [main] (0x2000): [RID#47] Running as [171600000][171600000]. * (2026-06-13 8:27:22): [krb5_child[106394]] [set_lifetime_options] (0x0100): [RID#47] No specific renewable lifetime requested. * (2026-06-13 8:27:22): [krb5_child[106394]] [set_lifetime_options] (0x0100): [RID#47] No specific lifetime requested. * (2026-06-13 8:27:22): [krb5_child[106394]] [set_canonicalize_option] (0x0100): [RID#47] Canonicalization is set to [true] * (2026-06-13 8:27:22): [krb5_child[106394]] [main] (0x0400): [RID#47] Will perform auth * (2026-06-13 8:27:22): [krb5_child[106394]] [main] (0x0400): [RID#47] Will perform online auth * (2026-06-13 8:27:22): [krb5_child[106394]] [tgt_req_child] (0x1000): [RID#47] Attempting to get a TGT * (2026-06-13 8:27:22): [krb5_child[106394]] [get_and_save_tgt] (0x0400): [RID#47] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:27:22): [krb5_child[106394]] [sss_krb5_responder] (0x4000): [RID#47] Got question [password]. * (2026-06-13 8:27:22): [krb5_child[106394]] [get_and_save_tgt] (0x0020): [RID#47] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:27:22): [krb5_child[106394]] [map_krb5_error] (0x0020): [RID#47] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:41:30): [krb5_child[196823]] [get_and_save_tgt] (0x0020): [RID#123] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:41:30): [krb5_child[196823]] [main] (0x0400): [RID#123] krb5_child started. * (2026-06-13 8:41:30): [krb5_child[196823]] [unpack_buffer] (0x1000): [RID#123] total buffer size: [97] * (2026-06-13 8:41:30): [krb5_child[196823]] [unpack_buffer] (0x0100): [RID#123] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:41:30): [krb5_child[196823]] [unpack_buffer] (0x2000): [RID#123] No old ccache * (2026-06-13 8:41:30): [krb5_child[196823]] [unpack_buffer] (0x0100): [RID#123] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:41:30): [krb5_child[196823]] [k5c_precreate_ccache] (0x4000): [RID#123] Recreating ccache * (2026-06-13 8:41:30): [krb5_child[196823]] [k5c_setup_fast] (0x0100): [RID#123] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:41:30): [krb5_child[196823]] [find_principal_in_keytab] (0x4000): [RID#123] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:41:30): [krb5_child[196823]] [match_principal] (0x1000): [RID#123] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:41:30): [krb5_child[196823]] [check_fast_ccache] (0x0200): [RID#123] FAST TGT is still valid. * (2026-06-13 8:41:30): [krb5_child[196823]] [become_user] (0x0200): [RID#123] Trying to become user [171600000][171600000]. * (2026-06-13 8:41:30): [krb5_child[196823]] [main] (0x2000): [RID#123] Running as [171600000][171600000]. * (2026-06-13 8:41:30): [krb5_child[196823]] [set_lifetime_options] (0x0100): [RID#123] No specific renewable lifetime requested. * (2026-06-13 8:41:30): [krb5_child[196823]] [set_lifetime_options] (0x0100): [RID#123] No specific lifetime requested. * (2026-06-13 8:41:30): [krb5_child[196823]] [set_canonicalize_option] (0x0100): [RID#123] Canonicalization is set to [true] * (2026-06-13 8:41:30): [krb5_child[196823]] [main] (0x0400): [RID#123] Will perform auth * (2026-06-13 8:41:30): [krb5_child[196823]] [main] (0x0400): [RID#123] Will perform online auth * (2026-06-13 8:41:30): [krb5_child[196823]] [tgt_req_child] (0x1000): [RID#123] Attempting to get a TGT * (2026-06-13 8:41:30): [krb5_child[196823]] [get_and_save_tgt] (0x0400): [RID#123] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:41:30): [krb5_child[196823]] [sss_krb5_responder] (0x4000): [RID#123] Got question [password]. * (2026-06-13 8:41:30): [krb5_child[196823]] [get_and_save_tgt] (0x0020): [RID#123] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:41:30): [krb5_child[196823]] [map_krb5_error] (0x0020): [RID#123] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:42:09): [krb5_child[200609]] [get_and_save_tgt] (0x0020): [RID#136] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:42:09): [krb5_child[200609]] [main] (0x0400): [RID#136] krb5_child started. * (2026-06-13 8:42:09): [krb5_child[200609]] [unpack_buffer] (0x1000): [RID#136] total buffer size: [101] * (2026-06-13 8:42:09): [krb5_child[200609]] [unpack_buffer] (0x0100): [RID#136] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:42:09): [krb5_child[200609]] [unpack_buffer] (0x2000): [RID#136] No old ccache * (2026-06-13 8:42:09): [krb5_child[200609]] [unpack_buffer] (0x0100): [RID#136] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:42:09): [krb5_child[200609]] [k5c_precreate_ccache] (0x4000): [RID#136] Recreating ccache * (2026-06-13 8:42:09): [krb5_child[200609]] [k5c_setup_fast] (0x0100): [RID#136] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:42:09): [krb5_child[200609]] [find_principal_in_keytab] (0x4000): [RID#136] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:42:09): [krb5_child[200609]] [match_principal] (0x1000): [RID#136] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:42:09): [krb5_child[200609]] [check_fast_ccache] (0x0200): [RID#136] FAST TGT is still valid. * (2026-06-13 8:42:09): [krb5_child[200609]] [become_user] (0x0200): [RID#136] Trying to become user [171600000][171600000]. * (2026-06-13 8:42:09): [krb5_child[200609]] [main] (0x2000): [RID#136] Running as [171600000][171600000]. * (2026-06-13 8:42:09): [krb5_child[200609]] [set_lifetime_options] (0x0100): [RID#136] No specific renewable lifetime requested. * (2026-06-13 8:42:09): [krb5_child[200609]] [set_lifetime_options] (0x0100): [RID#136] No specific lifetime requested. * (2026-06-13 8:42:09): [krb5_child[200609]] [set_canonicalize_option] (0x0100): [RID#136] Canonicalization is set to [true] * (2026-06-13 8:42:09): [krb5_child[200609]] [main] (0x0400): [RID#136] Will perform auth * (2026-06-13 8:42:09): [krb5_child[200609]] [main] (0x0400): [RID#136] Will perform online auth * (2026-06-13 8:42:09): [krb5_child[200609]] [tgt_req_child] (0x1000): [RID#136] Attempting to get a TGT * (2026-06-13 8:42:09): [krb5_child[200609]] [get_and_save_tgt] (0x0400): [RID#136] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:42:09): [krb5_child[200609]] [sss_krb5_responder] (0x4000): [RID#136] Got question [password]. * (2026-06-13 8:42:09): [krb5_child[200609]] [get_and_save_tgt] (0x0020): [RID#136] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:42:09): [krb5_child[200609]] [map_krb5_error] (0x0020): [RID#136] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:42:38): [krb5_child[203392]] [get_and_save_tgt] (0x0020): [RID#147] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:42:38): [krb5_child[203392]] [main] (0x0400): [RID#147] krb5_child started. * (2026-06-13 8:42:38): [krb5_child[203392]] [unpack_buffer] (0x1000): [RID#147] total buffer size: [102] * (2026-06-13 8:42:38): [krb5_child[203392]] [unpack_buffer] (0x0100): [RID#147] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:42:38): [krb5_child[203392]] [unpack_buffer] (0x2000): [RID#147] No old ccache * (2026-06-13 8:42:38): [krb5_child[203392]] [unpack_buffer] (0x0100): [RID#147] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:42:38): [krb5_child[203392]] [k5c_precreate_ccache] (0x4000): [RID#147] Recreating ccache * (2026-06-13 8:42:38): [krb5_child[203392]] [k5c_setup_fast] (0x0100): [RID#147] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:42:38): [krb5_child[203392]] [find_principal_in_keytab] (0x4000): [RID#147] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:42:38): [krb5_child[203392]] [match_principal] (0x1000): [RID#147] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:42:38): [krb5_child[203392]] [check_fast_ccache] (0x0200): [RID#147] FAST TGT is still valid. * (2026-06-13 8:42:38): [krb5_child[203392]] [become_user] (0x0200): [RID#147] Trying to become user [171600000][171600000]. * (2026-06-13 8:42:38): [krb5_child[203392]] [main] (0x2000): [RID#147] Running as [171600000][171600000]. * (2026-06-13 8:42:38): [krb5_child[203392]] [set_lifetime_options] (0x0100): [RID#147] No specific renewable lifetime requested. * (2026-06-13 8:42:38): [krb5_child[203392]] [set_lifetime_options] (0x0100): [RID#147] No specific lifetime requested. * (2026-06-13 8:42:38): [krb5_child[203392]] [set_canonicalize_option] (0x0100): [RID#147] Canonicalization is set to [true] * (2026-06-13 8:42:38): [krb5_child[203392]] [main] (0x0400): [RID#147] Will perform auth * (2026-06-13 8:42:38): [krb5_child[203392]] [main] (0x0400): [RID#147] Will perform online auth * (2026-06-13 8:42:38): [krb5_child[203392]] [tgt_req_child] (0x1000): [RID#147] Attempting to get a TGT * (2026-06-13 8:42:38): [krb5_child[203392]] [get_and_save_tgt] (0x0400): [RID#147] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:42:38): [krb5_child[203392]] [sss_krb5_responder] (0x4000): [RID#147] Got question [password]. * (2026-06-13 8:42:38): [krb5_child[203392]] [get_and_save_tgt] (0x0020): [RID#147] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:42:38): [krb5_child[203392]] [map_krb5_error] (0x0020): [RID#147] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:42:42): [krb5_child[203428]] [get_and_save_tgt] (0x0020): [RID#147] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:42:38): [krb5_child[203428]] [main] (0x0400): [RID#147] krb5_child started. * (2026-06-13 8:42:38): [krb5_child[203428]] [unpack_buffer] (0x1000): [RID#147] total buffer size: [98] * (2026-06-13 8:42:38): [krb5_child[203428]] [unpack_buffer] (0x0100): [RID#147] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:42:38): [krb5_child[203428]] [unpack_buffer] (0x2000): [RID#147] No old ccache * (2026-06-13 8:42:38): [krb5_child[203428]] [unpack_buffer] (0x0100): [RID#147] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:42:38): [krb5_child[203428]] [k5c_precreate_ccache] (0x4000): [RID#147] Recreating ccache * (2026-06-13 8:42:38): [krb5_child[203428]] [k5c_setup_fast] (0x0100): [RID#147] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:42:38): [krb5_child[203428]] [find_principal_in_keytab] (0x4000): [RID#147] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:42:38): [krb5_child[203428]] [match_principal] (0x1000): [RID#147] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:42:38): [krb5_child[203428]] [check_fast_ccache] (0x0200): [RID#147] FAST TGT is still valid. * (2026-06-13 8:42:38): [krb5_child[203428]] [become_user] (0x0200): [RID#147] Trying to become user [171600000][171600000]. * (2026-06-13 8:42:38): [krb5_child[203428]] [main] (0x2000): [RID#147] Running as [171600000][171600000]. * (2026-06-13 8:42:38): [krb5_child[203428]] [set_lifetime_options] (0x0100): [RID#147] No specific renewable lifetime requested. * (2026-06-13 8:42:38): [krb5_child[203428]] [set_lifetime_options] (0x0100): [RID#147] No specific lifetime requested. * (2026-06-13 8:42:38): [krb5_child[203428]] [set_canonicalize_option] (0x0100): [RID#147] Canonicalization is set to [true] * (2026-06-13 8:42:38): [krb5_child[203428]] [main] (0x0400): [RID#147] Will perform auth * (2026-06-13 8:42:38): [krb5_child[203428]] [main] (0x0400): [RID#147] Will perform online auth * (2026-06-13 8:42:38): [krb5_child[203428]] [tgt_req_child] (0x1000): [RID#147] Attempting to get a TGT * (2026-06-13 8:42:38): [krb5_child[203428]] [get_and_save_tgt] (0x0400): [RID#147] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:42:41): [krb5_child[203428]] [sss_krb5_responder] (0x4000): [RID#147] Got question [password]. * (2026-06-13 8:42:42): [krb5_child[203428]] [get_and_save_tgt] (0x0020): [RID#147] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:42:42): [krb5_child[203428]] [map_krb5_error] (0x0020): [RID#147] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:43:47): [krb5_child[210058]] [get_and_save_tgt] (0x0020): [RID#174] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:43:47): [krb5_child[210058]] [main] (0x0400): [RID#174] krb5_child started. * (2026-06-13 8:43:47): [krb5_child[210058]] [unpack_buffer] (0x1000): [RID#174] total buffer size: [101] * (2026-06-13 8:43:47): [krb5_child[210058]] [unpack_buffer] (0x0100): [RID#174] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:43:47): [krb5_child[210058]] [unpack_buffer] (0x2000): [RID#174] No old ccache * (2026-06-13 8:43:47): [krb5_child[210058]] [unpack_buffer] (0x0100): [RID#174] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:43:47): [krb5_child[210058]] [k5c_precreate_ccache] (0x4000): [RID#174] Recreating ccache * (2026-06-13 8:43:47): [krb5_child[210058]] [k5c_setup_fast] (0x0100): [RID#174] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:43:47): [krb5_child[210058]] [find_principal_in_keytab] (0x4000): [RID#174] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:43:47): [krb5_child[210058]] [match_principal] (0x1000): [RID#174] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:43:47): [krb5_child[210058]] [check_fast_ccache] (0x0200): [RID#174] FAST TGT is still valid. * (2026-06-13 8:43:47): [krb5_child[210058]] [become_user] (0x0200): [RID#174] Trying to become user [171600000][171600000]. * (2026-06-13 8:43:47): [krb5_child[210058]] [main] (0x2000): [RID#174] Running as [171600000][171600000]. * (2026-06-13 8:43:47): [krb5_child[210058]] [set_lifetime_options] (0x0100): [RID#174] No specific renewable lifetime requested. * (2026-06-13 8:43:47): [krb5_child[210058]] [set_lifetime_options] (0x0100): [RID#174] No specific lifetime requested. * (2026-06-13 8:43:47): [krb5_child[210058]] [set_canonicalize_option] (0x0100): [RID#174] Canonicalization is set to [true] * (2026-06-13 8:43:47): [krb5_child[210058]] [main] (0x0400): [RID#174] Will perform auth * (2026-06-13 8:43:47): [krb5_child[210058]] [main] (0x0400): [RID#174] Will perform online auth * (2026-06-13 8:43:47): [krb5_child[210058]] [tgt_req_child] (0x1000): [RID#174] Attempting to get a TGT * (2026-06-13 8:43:47): [krb5_child[210058]] [get_and_save_tgt] (0x0400): [RID#174] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:43:47): [krb5_child[210058]] [get_and_save_tgt] (0x0020): [RID#174] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:43:47): [krb5_child[210058]] [map_krb5_error] (0x0020): [RID#174] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:44:33): [krb5_child[213469]] [get_and_save_tgt] (0x0020): [RID#189] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:44:33): [krb5_child[213469]] [main] (0x0400): [RID#189] krb5_child started. * (2026-06-13 8:44:33): [krb5_child[213469]] [unpack_buffer] (0x1000): [RID#189] total buffer size: [98] * (2026-06-13 8:44:33): [krb5_child[213469]] [unpack_buffer] (0x0100): [RID#189] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:44:33): [krb5_child[213469]] [unpack_buffer] (0x2000): [RID#189] No old ccache * (2026-06-13 8:44:33): [krb5_child[213469]] [unpack_buffer] (0x0100): [RID#189] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:44:33): [krb5_child[213469]] [k5c_precreate_ccache] (0x4000): [RID#189] Recreating ccache * (2026-06-13 8:44:33): [krb5_child[213469]] [k5c_setup_fast] (0x0100): [RID#189] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:44:33): [krb5_child[213469]] [find_principal_in_keytab] (0x4000): [RID#189] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:44:33): [krb5_child[213469]] [match_principal] (0x1000): [RID#189] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:44:33): [krb5_child[213469]] [check_fast_ccache] (0x0200): [RID#189] FAST TGT is still valid. * (2026-06-13 8:44:33): [krb5_child[213469]] [become_user] (0x0200): [RID#189] Trying to become user [171600000][171600000]. * (2026-06-13 8:44:33): [krb5_child[213469]] [main] (0x2000): [RID#189] Running as [171600000][171600000]. * (2026-06-13 8:44:33): [krb5_child[213469]] [set_lifetime_options] (0x0100): [RID#189] No specific renewable lifetime requested. * (2026-06-13 8:44:33): [krb5_child[213469]] [set_lifetime_options] (0x0100): [RID#189] No specific lifetime requested. * (2026-06-13 8:44:33): [krb5_child[213469]] [set_canonicalize_option] (0x0100): [RID#189] Canonicalization is set to [true] * (2026-06-13 8:44:33): [krb5_child[213469]] [main] (0x0400): [RID#189] Will perform auth * (2026-06-13 8:44:33): [krb5_child[213469]] [main] (0x0400): [RID#189] Will perform online auth * (2026-06-13 8:44:33): [krb5_child[213469]] [tgt_req_child] (0x1000): [RID#189] Attempting to get a TGT * (2026-06-13 8:44:33): [krb5_child[213469]] [get_and_save_tgt] (0x0400): [RID#189] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:44:33): [krb5_child[213469]] [get_and_save_tgt] (0x0020): [RID#189] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:44:33): [krb5_child[213469]] [map_krb5_error] (0x0020): [RID#189] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:44:49): [krb5_child[214727]] [get_and_save_tgt] (0x0020): [RID#200] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:44:49): [krb5_child[214727]] [main] (0x0400): [RID#200] krb5_child started. * (2026-06-13 8:44:49): [krb5_child[214727]] [unpack_buffer] (0x1000): [RID#200] total buffer size: [99] * (2026-06-13 8:44:49): [krb5_child[214727]] [unpack_buffer] (0x0100): [RID#200] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:44:49): [krb5_child[214727]] [unpack_buffer] (0x2000): [RID#200] No old ccache * (2026-06-13 8:44:49): [krb5_child[214727]] [unpack_buffer] (0x0100): [RID#200] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:44:49): [krb5_child[214727]] [k5c_precreate_ccache] (0x4000): [RID#200] Recreating ccache * (2026-06-13 8:44:49): [krb5_child[214727]] [k5c_setup_fast] (0x0100): [RID#200] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:44:49): [krb5_child[214727]] [find_principal_in_keytab] (0x4000): [RID#200] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:44:49): [krb5_child[214727]] [match_principal] (0x1000): [RID#200] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:44:49): [krb5_child[214727]] [check_fast_ccache] (0x0200): [RID#200] FAST TGT is still valid. * (2026-06-13 8:44:49): [krb5_child[214727]] [become_user] (0x0200): [RID#200] Trying to become user [171600000][171600000]. * (2026-06-13 8:44:49): [krb5_child[214727]] [main] (0x2000): [RID#200] Running as [171600000][171600000]. * (2026-06-13 8:44:49): [krb5_child[214727]] [set_lifetime_options] (0x0100): [RID#200] No specific renewable lifetime requested. * (2026-06-13 8:44:49): [krb5_child[214727]] [set_lifetime_options] (0x0100): [RID#200] No specific lifetime requested. * (2026-06-13 8:44:49): [krb5_child[214727]] [set_canonicalize_option] (0x0100): [RID#200] Canonicalization is set to [true] * (2026-06-13 8:44:49): [krb5_child[214727]] [main] (0x0400): [RID#200] Will perform auth * (2026-06-13 8:44:49): [krb5_child[214727]] [main] (0x0400): [RID#200] Will perform online auth * (2026-06-13 8:44:49): [krb5_child[214727]] [tgt_req_child] (0x1000): [RID#200] Attempting to get a TGT * (2026-06-13 8:44:49): [krb5_child[214727]] [get_and_save_tgt] (0x0400): [RID#200] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:44:49): [krb5_child[214727]] [get_and_save_tgt] (0x0020): [RID#200] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:44:49): [krb5_child[214727]] [map_krb5_error] (0x0020): [RID#200] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:45:20): [krb5_child[217173]] [get_and_save_tgt] (0x0020): [RID#211] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:45:20): [krb5_child[217173]] [main] (0x0400): [RID#211] krb5_child started. * (2026-06-13 8:45:20): [krb5_child[217173]] [unpack_buffer] (0x1000): [RID#211] total buffer size: [103] * (2026-06-13 8:45:20): [krb5_child[217173]] [unpack_buffer] (0x0100): [RID#211] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:45:20): [krb5_child[217173]] [unpack_buffer] (0x2000): [RID#211] No old ccache * (2026-06-13 8:45:20): [krb5_child[217173]] [unpack_buffer] (0x0100): [RID#211] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:45:20): [krb5_child[217173]] [k5c_precreate_ccache] (0x4000): [RID#211] Recreating ccache * (2026-06-13 8:45:20): [krb5_child[217173]] [k5c_setup_fast] (0x0100): [RID#211] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:45:20): [krb5_child[217173]] [find_principal_in_keytab] (0x4000): [RID#211] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:45:20): [krb5_child[217173]] [match_principal] (0x1000): [RID#211] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:45:20): [krb5_child[217173]] [check_fast_ccache] (0x0200): [RID#211] FAST TGT is still valid. * (2026-06-13 8:45:20): [krb5_child[217173]] [become_user] (0x0200): [RID#211] Trying to become user [171600000][171600000]. * (2026-06-13 8:45:20): [krb5_child[217173]] [main] (0x2000): [RID#211] Running as [171600000][171600000]. * (2026-06-13 8:45:20): [krb5_child[217173]] [set_lifetime_options] (0x0100): [RID#211] No specific renewable lifetime requested. * (2026-06-13 8:45:20): [krb5_child[217173]] [set_lifetime_options] (0x0100): [RID#211] No specific lifetime requested. * (2026-06-13 8:45:20): [krb5_child[217173]] [set_canonicalize_option] (0x0100): [RID#211] Canonicalization is set to [true] * (2026-06-13 8:45:20): [krb5_child[217173]] [main] (0x0400): [RID#211] Will perform auth * (2026-06-13 8:45:20): [krb5_child[217173]] [main] (0x0400): [RID#211] Will perform online auth * (2026-06-13 8:45:20): [krb5_child[217173]] [tgt_req_child] (0x1000): [RID#211] Attempting to get a TGT * (2026-06-13 8:45:20): [krb5_child[217173]] [get_and_save_tgt] (0x0400): [RID#211] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:45:20): [krb5_child[217173]] [get_and_save_tgt] (0x0020): [RID#211] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:45:20): [krb5_child[217173]] [map_krb5_error] (0x0020): [RID#211] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:45:48): [krb5_child[219787]] [get_and_save_tgt] (0x0020): [RID#223] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:45:48): [krb5_child[219787]] [main] (0x0400): [RID#223] krb5_child started. * (2026-06-13 8:45:48): [krb5_child[219787]] [unpack_buffer] (0x1000): [RID#223] total buffer size: [98] * (2026-06-13 8:45:48): [krb5_child[219787]] [unpack_buffer] (0x0100): [RID#223] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:45:48): [krb5_child[219787]] [unpack_buffer] (0x2000): [RID#223] No old ccache * (2026-06-13 8:45:48): [krb5_child[219787]] [unpack_buffer] (0x0100): [RID#223] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:45:48): [krb5_child[219787]] [k5c_precreate_ccache] (0x4000): [RID#223] Recreating ccache * (2026-06-13 8:45:48): [krb5_child[219787]] [k5c_setup_fast] (0x0100): [RID#223] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:45:48): [krb5_child[219787]] [find_principal_in_keytab] (0x4000): [RID#223] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:45:48): [krb5_child[219787]] [match_principal] (0x1000): [RID#223] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:45:48): [krb5_child[219787]] [check_fast_ccache] (0x0200): [RID#223] FAST TGT is still valid. * (2026-06-13 8:45:48): [krb5_child[219787]] [become_user] (0x0200): [RID#223] Trying to become user [171600000][171600000]. * (2026-06-13 8:45:48): [krb5_child[219787]] [main] (0x2000): [RID#223] Running as [171600000][171600000]. * (2026-06-13 8:45:48): [krb5_child[219787]] [set_lifetime_options] (0x0100): [RID#223] No specific renewable lifetime requested. * (2026-06-13 8:45:48): [krb5_child[219787]] [set_lifetime_options] (0x0100): [RID#223] No specific lifetime requested. * (2026-06-13 8:45:48): [krb5_child[219787]] [set_canonicalize_option] (0x0100): [RID#223] Canonicalization is set to [true] * (2026-06-13 8:45:48): [krb5_child[219787]] [main] (0x0400): [RID#223] Will perform auth * (2026-06-13 8:45:48): [krb5_child[219787]] [main] (0x0400): [RID#223] Will perform online auth * (2026-06-13 8:45:48): [krb5_child[219787]] [tgt_req_child] (0x1000): [RID#223] Attempting to get a TGT * (2026-06-13 8:45:48): [krb5_child[219787]] [get_and_save_tgt] (0x0400): [RID#223] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:45:48): [krb5_child[219787]] [get_and_save_tgt] (0x0020): [RID#223] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:45:48): [krb5_child[219787]] [map_krb5_error] (0x0020): [RID#223] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:48:32): [krb5_child[233731]] [get_and_save_tgt] (0x0020): [RID#275] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:48:32): [krb5_child[233731]] [main] (0x0400): [RID#275] krb5_child started. * (2026-06-13 8:48:32): [krb5_child[233731]] [unpack_buffer] (0x1000): [RID#275] total buffer size: [98] * (2026-06-13 8:48:32): [krb5_child[233731]] [unpack_buffer] (0x0100): [RID#275] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:48:32): [krb5_child[233731]] [unpack_buffer] (0x2000): [RID#275] No old ccache * (2026-06-13 8:48:32): [krb5_child[233731]] [unpack_buffer] (0x0100): [RID#275] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:48:32): [krb5_child[233731]] [k5c_precreate_ccache] (0x4000): [RID#275] Recreating ccache * (2026-06-13 8:48:32): [krb5_child[233731]] [k5c_setup_fast] (0x0100): [RID#275] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:48:32): [krb5_child[233731]] [find_principal_in_keytab] (0x4000): [RID#275] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:48:32): [krb5_child[233731]] [match_principal] (0x1000): [RID#275] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:48:32): [krb5_child[233731]] [check_fast_ccache] (0x0200): [RID#275] FAST TGT is still valid. * (2026-06-13 8:48:32): [krb5_child[233731]] [become_user] (0x0200): [RID#275] Trying to become user [171600000][171600000]. * (2026-06-13 8:48:32): [krb5_child[233731]] [main] (0x2000): [RID#275] Running as [171600000][171600000]. * (2026-06-13 8:48:32): [krb5_child[233731]] [set_lifetime_options] (0x0100): [RID#275] No specific renewable lifetime requested. * (2026-06-13 8:48:32): [krb5_child[233731]] [set_lifetime_options] (0x0100): [RID#275] No specific lifetime requested. * (2026-06-13 8:48:32): [krb5_child[233731]] [set_canonicalize_option] (0x0100): [RID#275] Canonicalization is set to [true] * (2026-06-13 8:48:32): [krb5_child[233731]] [main] (0x0400): [RID#275] Will perform auth * (2026-06-13 8:48:32): [krb5_child[233731]] [main] (0x0400): [RID#275] Will perform online auth * (2026-06-13 8:48:32): [krb5_child[233731]] [tgt_req_child] (0x1000): [RID#275] Attempting to get a TGT * (2026-06-13 8:48:32): [krb5_child[233731]] [get_and_save_tgt] (0x0400): [RID#275] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:48:32): [krb5_child[233731]] [get_and_save_tgt] (0x0020): [RID#275] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:48:32): [krb5_child[233731]] [map_krb5_error] (0x0020): [RID#275] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:51:35): [krb5_child[249331]] [get_and_save_tgt] (0x0020): [RID#326] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:51:35): [krb5_child[249331]] [main] (0x0400): [RID#326] krb5_child started. * (2026-06-13 8:51:35): [krb5_child[249331]] [unpack_buffer] (0x1000): [RID#326] total buffer size: [101] * (2026-06-13 8:51:35): [krb5_child[249331]] [unpack_buffer] (0x0100): [RID#326] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:51:35): [krb5_child[249331]] [unpack_buffer] (0x2000): [RID#326] No old ccache * (2026-06-13 8:51:35): [krb5_child[249331]] [unpack_buffer] (0x0100): [RID#326] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:51:35): [krb5_child[249331]] [k5c_precreate_ccache] (0x4000): [RID#326] Recreating ccache * (2026-06-13 8:51:35): [krb5_child[249331]] [k5c_setup_fast] (0x0100): [RID#326] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:51:35): [krb5_child[249331]] [find_principal_in_keytab] (0x4000): [RID#326] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:51:35): [krb5_child[249331]] [match_principal] (0x1000): [RID#326] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:51:35): [krb5_child[249331]] [check_fast_ccache] (0x0200): [RID#326] FAST TGT is still valid. * (2026-06-13 8:51:35): [krb5_child[249331]] [become_user] (0x0200): [RID#326] Trying to become user [171600000][171600000]. * (2026-06-13 8:51:35): [krb5_child[249331]] [main] (0x2000): [RID#326] Running as [171600000][171600000]. * (2026-06-13 8:51:35): [krb5_child[249331]] [set_lifetime_options] (0x0100): [RID#326] No specific renewable lifetime requested. * (2026-06-13 8:51:35): [krb5_child[249331]] [set_lifetime_options] (0x0100): [RID#326] No specific lifetime requested. * (2026-06-13 8:51:35): [krb5_child[249331]] [set_canonicalize_option] (0x0100): [RID#326] Canonicalization is set to [true] * (2026-06-13 8:51:35): [krb5_child[249331]] [main] (0x0400): [RID#326] Will perform auth * (2026-06-13 8:51:35): [krb5_child[249331]] [main] (0x0400): [RID#326] Will perform online auth * (2026-06-13 8:51:35): [krb5_child[249331]] [tgt_req_child] (0x1000): [RID#326] Attempting to get a TGT * (2026-06-13 8:51:35): [krb5_child[249331]] [get_and_save_tgt] (0x0400): [RID#326] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:51:35): [krb5_child[249331]] [get_and_save_tgt] (0x0020): [RID#326] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:51:35): [krb5_child[249331]] [map_krb5_error] (0x0020): [RID#326] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:54:58): [krb5_child[264193]] [get_and_save_tgt] (0x0020): [RID#383] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:54:58): [krb5_child[264193]] [main] (0x0400): [RID#383] krb5_child started. * (2026-06-13 8:54:58): [krb5_child[264193]] [unpack_buffer] (0x1000): [RID#383] total buffer size: [98] * (2026-06-13 8:54:58): [krb5_child[264193]] [unpack_buffer] (0x0100): [RID#383] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:54:58): [krb5_child[264193]] [unpack_buffer] (0x2000): [RID#383] No old ccache * (2026-06-13 8:54:58): [krb5_child[264193]] [unpack_buffer] (0x0100): [RID#383] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:54:58): [krb5_child[264193]] [k5c_precreate_ccache] (0x4000): [RID#383] Recreating ccache * (2026-06-13 8:54:58): [krb5_child[264193]] [k5c_setup_fast] (0x0100): [RID#383] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:54:58): [krb5_child[264193]] [find_principal_in_keytab] (0x4000): [RID#383] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:54:58): [krb5_child[264193]] [match_principal] (0x1000): [RID#383] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:54:58): [krb5_child[264193]] [check_fast_ccache] (0x0200): [RID#383] FAST TGT is still valid. * (2026-06-13 8:54:58): [krb5_child[264193]] [become_user] (0x0200): [RID#383] Trying to become user [171600000][171600000]. * (2026-06-13 8:54:58): [krb5_child[264193]] [main] (0x2000): [RID#383] Running as [171600000][171600000]. * (2026-06-13 8:54:58): [krb5_child[264193]] [set_lifetime_options] (0x0100): [RID#383] No specific renewable lifetime requested. * (2026-06-13 8:54:58): [krb5_child[264193]] [set_lifetime_options] (0x0100): [RID#383] No specific lifetime requested. * (2026-06-13 8:54:58): [krb5_child[264193]] [set_canonicalize_option] (0x0100): [RID#383] Canonicalization is set to [true] * (2026-06-13 8:54:58): [krb5_child[264193]] [main] (0x0400): [RID#383] Will perform auth * (2026-06-13 8:54:58): [krb5_child[264193]] [main] (0x0400): [RID#383] Will perform online auth * (2026-06-13 8:54:58): [krb5_child[264193]] [tgt_req_child] (0x1000): [RID#383] Attempting to get a TGT * (2026-06-13 8:54:58): [krb5_child[264193]] [get_and_save_tgt] (0x0400): [RID#383] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:54:58): [krb5_child[264193]] [sss_krb5_responder] (0x4000): [RID#383] Got question [password]. * (2026-06-13 8:54:58): [krb5_child[264193]] [get_and_save_tgt] (0x0020): [RID#383] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:54:58): [krb5_child[264193]] [map_krb5_error] (0x0020): [RID#383] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:56:19): [krb5_child[270179]] [get_and_save_tgt] (0x0020): [RID#407] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:56:19): [krb5_child[270179]] [main] (0x0400): [RID#407] krb5_child started. * (2026-06-13 8:56:19): [krb5_child[270179]] [unpack_buffer] (0x1000): [RID#407] total buffer size: [96] * (2026-06-13 8:56:19): [krb5_child[270179]] [unpack_buffer] (0x0100): [RID#407] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:56:19): [krb5_child[270179]] [unpack_buffer] (0x2000): [RID#407] No old ccache * (2026-06-13 8:56:19): [krb5_child[270179]] [unpack_buffer] (0x0100): [RID#407] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:56:19): [krb5_child[270179]] [k5c_precreate_ccache] (0x4000): [RID#407] Recreating ccache * (2026-06-13 8:56:19): [krb5_child[270179]] [k5c_setup_fast] (0x0100): [RID#407] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:56:19): [krb5_child[270179]] [find_principal_in_keytab] (0x4000): [RID#407] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:56:19): [krb5_child[270179]] [match_principal] (0x1000): [RID#407] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:56:19): [krb5_child[270179]] [check_fast_ccache] (0x0200): [RID#407] FAST TGT is still valid. * (2026-06-13 8:56:19): [krb5_child[270179]] [become_user] (0x0200): [RID#407] Trying to become user [171600000][171600000]. * (2026-06-13 8:56:19): [krb5_child[270179]] [main] (0x2000): [RID#407] Running as [171600000][171600000]. * (2026-06-13 8:56:19): [krb5_child[270179]] [set_lifetime_options] (0x0100): [RID#407] No specific renewable lifetime requested. * (2026-06-13 8:56:19): [krb5_child[270179]] [set_lifetime_options] (0x0100): [RID#407] No specific lifetime requested. * (2026-06-13 8:56:19): [krb5_child[270179]] [set_canonicalize_option] (0x0100): [RID#407] Canonicalization is set to [true] * (2026-06-13 8:56:19): [krb5_child[270179]] [main] (0x0400): [RID#407] Will perform auth * (2026-06-13 8:56:19): [krb5_child[270179]] [main] (0x0400): [RID#407] Will perform online auth * (2026-06-13 8:56:19): [krb5_child[270179]] [tgt_req_child] (0x1000): [RID#407] Attempting to get a TGT * (2026-06-13 8:56:19): [krb5_child[270179]] [get_and_save_tgt] (0x0400): [RID#407] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:56:19): [krb5_child[270179]] [sss_krb5_responder] (0x4000): [RID#407] Got question [password]. * (2026-06-13 8:56:19): [krb5_child[270179]] [get_and_save_tgt] (0x0020): [RID#407] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:56:19): [krb5_child[270179]] [map_krb5_error] (0x0020): [RID#407] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:57:06): [krb5_child[273687]] [get_and_save_tgt] (0x0020): [RID#424] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:57:06): [krb5_child[273687]] [main] (0x0400): [RID#424] krb5_child started. * (2026-06-13 8:57:06): [krb5_child[273687]] [unpack_buffer] (0x1000): [RID#424] total buffer size: [99] * (2026-06-13 8:57:06): [krb5_child[273687]] [unpack_buffer] (0x0100): [RID#424] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:57:06): [krb5_child[273687]] [unpack_buffer] (0x2000): [RID#424] No old ccache * (2026-06-13 8:57:06): [krb5_child[273687]] [unpack_buffer] (0x0100): [RID#424] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:57:06): [krb5_child[273687]] [k5c_precreate_ccache] (0x4000): [RID#424] Recreating ccache * (2026-06-13 8:57:06): [krb5_child[273687]] [k5c_setup_fast] (0x0100): [RID#424] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:57:06): [krb5_child[273687]] [find_principal_in_keytab] (0x4000): [RID#424] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:57:06): [krb5_child[273687]] [match_principal] (0x1000): [RID#424] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:57:06): [krb5_child[273687]] [check_fast_ccache] (0x0200): [RID#424] FAST TGT is still valid. * (2026-06-13 8:57:06): [krb5_child[273687]] [become_user] (0x0200): [RID#424] Trying to become user [171600000][171600000]. * (2026-06-13 8:57:06): [krb5_child[273687]] [main] (0x2000): [RID#424] Running as [171600000][171600000]. * (2026-06-13 8:57:06): [krb5_child[273687]] [set_lifetime_options] (0x0100): [RID#424] No specific renewable lifetime requested. * (2026-06-13 8:57:06): [krb5_child[273687]] [set_lifetime_options] (0x0100): [RID#424] No specific lifetime requested. * (2026-06-13 8:57:06): [krb5_child[273687]] [set_canonicalize_option] (0x0100): [RID#424] Canonicalization is set to [true] * (2026-06-13 8:57:06): [krb5_child[273687]] [main] (0x0400): [RID#424] Will perform auth * (2026-06-13 8:57:06): [krb5_child[273687]] [main] (0x0400): [RID#424] Will perform online auth * (2026-06-13 8:57:06): [krb5_child[273687]] [tgt_req_child] (0x1000): [RID#424] Attempting to get a TGT * (2026-06-13 8:57:06): [krb5_child[273687]] [get_and_save_tgt] (0x0400): [RID#424] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:57:06): [krb5_child[273687]] [sss_krb5_responder] (0x4000): [RID#424] Got question [password]. * (2026-06-13 8:57:06): [krb5_child[273687]] [get_and_save_tgt] (0x0020): [RID#424] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:57:06): [krb5_child[273687]] [map_krb5_error] (0x0020): [RID#424] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:57:42): [krb5_child[276413]] [get_and_save_tgt] (0x0020): [RID#439] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:57:42): [krb5_child[276413]] [main] (0x0400): [RID#439] krb5_child started. * (2026-06-13 8:57:42): [krb5_child[276413]] [unpack_buffer] (0x1000): [RID#439] total buffer size: [94] * (2026-06-13 8:57:42): [krb5_child[276413]] [unpack_buffer] (0x0100): [RID#439] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:57:42): [krb5_child[276413]] [unpack_buffer] (0x2000): [RID#439] No old ccache * (2026-06-13 8:57:42): [krb5_child[276413]] [unpack_buffer] (0x0100): [RID#439] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:57:42): [krb5_child[276413]] [k5c_precreate_ccache] (0x4000): [RID#439] Recreating ccache * (2026-06-13 8:57:42): [krb5_child[276413]] [k5c_setup_fast] (0x0100): [RID#439] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 8:57:42): [krb5_child[276413]] [find_principal_in_keytab] (0x4000): [RID#439] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:57:42): [krb5_child[276413]] [match_principal] (0x1000): [RID#439] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 8:57:42): [krb5_child[276413]] [check_fast_ccache] (0x0200): [RID#439] FAST TGT is still valid. * (2026-06-13 8:57:42): [krb5_child[276413]] [become_user] (0x0200): [RID#439] Trying to become user [171600000][171600000]. * (2026-06-13 8:57:42): [krb5_child[276413]] [main] (0x2000): [RID#439] Running as [171600000][171600000]. * (2026-06-13 8:57:42): [krb5_child[276413]] [set_lifetime_options] (0x0100): [RID#439] No specific renewable lifetime requested. * (2026-06-13 8:57:42): [krb5_child[276413]] [set_lifetime_options] (0x0100): [RID#439] No specific lifetime requested. * (2026-06-13 8:57:42): [krb5_child[276413]] [set_canonicalize_option] (0x0100): [RID#439] Canonicalization is set to [true] * (2026-06-13 8:57:42): [krb5_child[276413]] [main] (0x0400): [RID#439] Will perform auth * (2026-06-13 8:57:42): [krb5_child[276413]] [main] (0x0400): [RID#439] Will perform online auth * (2026-06-13 8:57:42): [krb5_child[276413]] [tgt_req_child] (0x1000): [RID#439] Attempting to get a TGT * (2026-06-13 8:57:42): [krb5_child[276413]] [get_and_save_tgt] (0x0400): [RID#439] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:57:42): [krb5_child[276413]] [sss_krb5_responder] (0x4000): [RID#439] Got question [password]. * (2026-06-13 8:57:42): [krb5_child[276413]] [get_and_save_tgt] (0x0020): [RID#439] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:57:42): [krb5_child[276413]] [map_krb5_error] (0x0020): [RID#439] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:00:52): [krb5_child[290159]] [get_and_save_tgt] (0x0020): [RID#490] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:00:52): [krb5_child[290159]] [main] (0x0400): [RID#490] krb5_child started. * (2026-06-13 9:00:52): [krb5_child[290159]] [unpack_buffer] (0x1000): [RID#490] total buffer size: [99] * (2026-06-13 9:00:52): [krb5_child[290159]] [unpack_buffer] (0x0100): [RID#490] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:00:52): [krb5_child[290159]] [unpack_buffer] (0x2000): [RID#490] No old ccache * (2026-06-13 9:00:52): [krb5_child[290159]] [unpack_buffer] (0x0100): [RID#490] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:00:52): [krb5_child[290159]] [k5c_precreate_ccache] (0x4000): [RID#490] Recreating ccache * (2026-06-13 9:00:52): [krb5_child[290159]] [k5c_setup_fast] (0x0100): [RID#490] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:00:52): [krb5_child[290159]] [find_principal_in_keytab] (0x4000): [RID#490] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:00:52): [krb5_child[290159]] [match_principal] (0x1000): [RID#490] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:00:52): [krb5_child[290159]] [check_fast_ccache] (0x0200): [RID#490] FAST TGT is still valid. * (2026-06-13 9:00:52): [krb5_child[290159]] [become_user] (0x0200): [RID#490] Trying to become user [171600000][171600000]. * (2026-06-13 9:00:52): [krb5_child[290159]] [main] (0x2000): [RID#490] Running as [171600000][171600000]. * (2026-06-13 9:00:52): [krb5_child[290159]] [set_lifetime_options] (0x0100): [RID#490] No specific renewable lifetime requested. * (2026-06-13 9:00:52): [krb5_child[290159]] [set_lifetime_options] (0x0100): [RID#490] No specific lifetime requested. * (2026-06-13 9:00:52): [krb5_child[290159]] [set_canonicalize_option] (0x0100): [RID#490] Canonicalization is set to [true] * (2026-06-13 9:00:52): [krb5_child[290159]] [main] (0x0400): [RID#490] Will perform auth * (2026-06-13 9:00:52): [krb5_child[290159]] [main] (0x0400): [RID#490] Will perform online auth * (2026-06-13 9:00:52): [krb5_child[290159]] [tgt_req_child] (0x1000): [RID#490] Attempting to get a TGT * (2026-06-13 9:00:52): [krb5_child[290159]] [get_and_save_tgt] (0x0400): [RID#490] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:00:52): [krb5_child[290159]] [sss_krb5_responder] (0x4000): [RID#490] Got question [password]. * (2026-06-13 9:00:52): [krb5_child[290159]] [get_and_save_tgt] (0x0020): [RID#490] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:00:52): [krb5_child[290159]] [map_krb5_error] (0x0020): [RID#490] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:01:45): [krb5_child[294150]] [get_and_save_tgt] (0x0020): [RID#506] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:01:45): [krb5_child[294150]] [main] (0x0400): [RID#506] krb5_child started. * (2026-06-13 9:01:45): [krb5_child[294150]] [unpack_buffer] (0x1000): [RID#506] total buffer size: [98] * (2026-06-13 9:01:45): [krb5_child[294150]] [unpack_buffer] (0x0100): [RID#506] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:01:45): [krb5_child[294150]] [unpack_buffer] (0x2000): [RID#506] No old ccache * (2026-06-13 9:01:45): [krb5_child[294150]] [unpack_buffer] (0x0100): [RID#506] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:01:45): [krb5_child[294150]] [k5c_precreate_ccache] (0x4000): [RID#506] Recreating ccache * (2026-06-13 9:01:45): [krb5_child[294150]] [k5c_setup_fast] (0x0100): [RID#506] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:01:45): [krb5_child[294150]] [find_principal_in_keytab] (0x4000): [RID#506] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:01:45): [krb5_child[294150]] [match_principal] (0x1000): [RID#506] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:01:45): [krb5_child[294150]] [check_fast_ccache] (0x0200): [RID#506] FAST TGT is still valid. * (2026-06-13 9:01:45): [krb5_child[294150]] [become_user] (0x0200): [RID#506] Trying to become user [171600000][171600000]. * (2026-06-13 9:01:45): [krb5_child[294150]] [main] (0x2000): [RID#506] Running as [171600000][171600000]. * (2026-06-13 9:01:45): [krb5_child[294150]] [set_lifetime_options] (0x0100): [RID#506] No specific renewable lifetime requested. * (2026-06-13 9:01:45): [krb5_child[294150]] [set_lifetime_options] (0x0100): [RID#506] No specific lifetime requested. * (2026-06-13 9:01:45): [krb5_child[294150]] [set_canonicalize_option] (0x0100): [RID#506] Canonicalization is set to [true] * (2026-06-13 9:01:45): [krb5_child[294150]] [main] (0x0400): [RID#506] Will perform auth * (2026-06-13 9:01:45): [krb5_child[294150]] [main] (0x0400): [RID#506] Will perform online auth * (2026-06-13 9:01:45): [krb5_child[294150]] [tgt_req_child] (0x1000): [RID#506] Attempting to get a TGT * (2026-06-13 9:01:45): [krb5_child[294150]] [get_and_save_tgt] (0x0400): [RID#506] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:01:45): [krb5_child[294150]] [sss_krb5_responder] (0x4000): [RID#506] Got question [password]. * (2026-06-13 9:01:45): [krb5_child[294150]] [get_and_save_tgt] (0x0020): [RID#506] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:01:45): [krb5_child[294150]] [map_krb5_error] (0x0020): [RID#506] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:03:25): [krb5_child[301272]] [get_and_save_tgt] (0x0020): [RID#534] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:03:25): [krb5_child[301272]] [main] (0x0400): [RID#534] krb5_child started. * (2026-06-13 9:03:25): [krb5_child[301272]] [unpack_buffer] (0x1000): [RID#534] total buffer size: [97] * (2026-06-13 9:03:25): [krb5_child[301272]] [unpack_buffer] (0x0100): [RID#534] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:03:25): [krb5_child[301272]] [unpack_buffer] (0x2000): [RID#534] No old ccache * (2026-06-13 9:03:25): [krb5_child[301272]] [unpack_buffer] (0x0100): [RID#534] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:03:25): [krb5_child[301272]] [k5c_precreate_ccache] (0x4000): [RID#534] Recreating ccache * (2026-06-13 9:03:25): [krb5_child[301272]] [k5c_setup_fast] (0x0100): [RID#534] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:03:25): [krb5_child[301272]] [find_principal_in_keytab] (0x4000): [RID#534] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:03:25): [krb5_child[301272]] [match_principal] (0x1000): [RID#534] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:03:25): [krb5_child[301272]] [check_fast_ccache] (0x0200): [RID#534] FAST TGT is still valid. * (2026-06-13 9:03:25): [krb5_child[301272]] [become_user] (0x0200): [RID#534] Trying to become user [171600000][171600000]. * (2026-06-13 9:03:25): [krb5_child[301272]] [main] (0x2000): [RID#534] Running as [171600000][171600000]. * (2026-06-13 9:03:25): [krb5_child[301272]] [set_lifetime_options] (0x0100): [RID#534] No specific renewable lifetime requested. * (2026-06-13 9:03:25): [krb5_child[301272]] [set_lifetime_options] (0x0100): [RID#534] No specific lifetime requested. * (2026-06-13 9:03:25): [krb5_child[301272]] [set_canonicalize_option] (0x0100): [RID#534] Canonicalization is set to [true] * (2026-06-13 9:03:25): [krb5_child[301272]] [main] (0x0400): [RID#534] Will perform auth * (2026-06-13 9:03:25): [krb5_child[301272]] [main] (0x0400): [RID#534] Will perform online auth * (2026-06-13 9:03:25): [krb5_child[301272]] [tgt_req_child] (0x1000): [RID#534] Attempting to get a TGT * (2026-06-13 9:03:25): [krb5_child[301272]] [get_and_save_tgt] (0x0400): [RID#534] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:03:25): [krb5_child[301272]] [sss_krb5_responder] (0x4000): [RID#534] Got question [password]. * (2026-06-13 9:03:25): [krb5_child[301272]] [get_and_save_tgt] (0x0020): [RID#534] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:03:25): [krb5_child[301272]] [map_krb5_error] (0x0020): [RID#534] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:05:39): [krb5_child[310654]] [get_and_save_tgt] (0x0020): [RID#574] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:05:39): [krb5_child[310654]] [main] (0x0400): [RID#574] krb5_child started. * (2026-06-13 9:05:39): [krb5_child[310654]] [unpack_buffer] (0x1000): [RID#574] total buffer size: [95] * (2026-06-13 9:05:39): [krb5_child[310654]] [unpack_buffer] (0x0100): [RID#574] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:05:39): [krb5_child[310654]] [unpack_buffer] (0x2000): [RID#574] No old ccache * (2026-06-13 9:05:39): [krb5_child[310654]] [unpack_buffer] (0x0100): [RID#574] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:05:39): [krb5_child[310654]] [k5c_precreate_ccache] (0x4000): [RID#574] Recreating ccache * (2026-06-13 9:05:39): [krb5_child[310654]] [k5c_setup_fast] (0x0100): [RID#574] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:05:39): [krb5_child[310654]] [find_principal_in_keytab] (0x4000): [RID#574] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:05:39): [krb5_child[310654]] [match_principal] (0x1000): [RID#574] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:05:39): [krb5_child[310654]] [check_fast_ccache] (0x0200): [RID#574] FAST TGT is still valid. * (2026-06-13 9:05:39): [krb5_child[310654]] [become_user] (0x0200): [RID#574] Trying to become user [171600000][171600000]. * (2026-06-13 9:05:39): [krb5_child[310654]] [main] (0x2000): [RID#574] Running as [171600000][171600000]. * (2026-06-13 9:05:39): [krb5_child[310654]] [set_lifetime_options] (0x0100): [RID#574] No specific renewable lifetime requested. * (2026-06-13 9:05:39): [krb5_child[310654]] [set_lifetime_options] (0x0100): [RID#574] No specific lifetime requested. * (2026-06-13 9:05:39): [krb5_child[310654]] [set_canonicalize_option] (0x0100): [RID#574] Canonicalization is set to [true] * (2026-06-13 9:05:39): [krb5_child[310654]] [main] (0x0400): [RID#574] Will perform auth * (2026-06-13 9:05:39): [krb5_child[310654]] [main] (0x0400): [RID#574] Will perform online auth * (2026-06-13 9:05:39): [krb5_child[310654]] [tgt_req_child] (0x1000): [RID#574] Attempting to get a TGT * (2026-06-13 9:05:39): [krb5_child[310654]] [get_and_save_tgt] (0x0400): [RID#574] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:05:39): [krb5_child[310654]] [sss_krb5_responder] (0x4000): [RID#574] Got question [password]. * (2026-06-13 9:05:39): [krb5_child[310654]] [get_and_save_tgt] (0x0020): [RID#574] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:05:39): [krb5_child[310654]] [map_krb5_error] (0x0020): [RID#574] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:09:18): [krb5_child[326547]] [get_and_save_tgt] (0x0020): [RID#639] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:09:18): [krb5_child[326547]] [main] (0x0400): [RID#639] krb5_child started. * (2026-06-13 9:09:18): [krb5_child[326547]] [unpack_buffer] (0x1000): [RID#639] total buffer size: [103] * (2026-06-13 9:09:18): [krb5_child[326547]] [unpack_buffer] (0x0100): [RID#639] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:09:18): [krb5_child[326547]] [unpack_buffer] (0x2000): [RID#639] No old ccache * (2026-06-13 9:09:18): [krb5_child[326547]] [unpack_buffer] (0x0100): [RID#639] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:09:18): [krb5_child[326547]] [k5c_precreate_ccache] (0x4000): [RID#639] Recreating ccache * (2026-06-13 9:09:18): [krb5_child[326547]] [k5c_setup_fast] (0x0100): [RID#639] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:09:18): [krb5_child[326547]] [find_principal_in_keytab] (0x4000): [RID#639] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:09:18): [krb5_child[326547]] [match_principal] (0x1000): [RID#639] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:09:18): [krb5_child[326547]] [check_fast_ccache] (0x0200): [RID#639] FAST TGT is still valid. * (2026-06-13 9:09:18): [krb5_child[326547]] [become_user] (0x0200): [RID#639] Trying to become user [171600000][171600000]. * (2026-06-13 9:09:18): [krb5_child[326547]] [main] (0x2000): [RID#639] Running as [171600000][171600000]. * (2026-06-13 9:09:18): [krb5_child[326547]] [set_lifetime_options] (0x0100): [RID#639] No specific renewable lifetime requested. * (2026-06-13 9:09:18): [krb5_child[326547]] [set_lifetime_options] (0x0100): [RID#639] No specific lifetime requested. * (2026-06-13 9:09:18): [krb5_child[326547]] [set_canonicalize_option] (0x0100): [RID#639] Canonicalization is set to [true] * (2026-06-13 9:09:18): [krb5_child[326547]] [main] (0x0400): [RID#639] Will perform auth * (2026-06-13 9:09:18): [krb5_child[326547]] [main] (0x0400): [RID#639] Will perform online auth * (2026-06-13 9:09:18): [krb5_child[326547]] [tgt_req_child] (0x1000): [RID#639] Attempting to get a TGT * (2026-06-13 9:09:18): [krb5_child[326547]] [get_and_save_tgt] (0x0400): [RID#639] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:09:18): [krb5_child[326547]] [sss_krb5_responder] (0x4000): [RID#639] Got question [password]. * (2026-06-13 9:09:18): [krb5_child[326547]] [get_and_save_tgt] (0x0020): [RID#639] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:09:18): [krb5_child[326547]] [map_krb5_error] (0x0020): [RID#639] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:11:09): [krb5_child[333318]] [get_and_save_tgt] (0x0020): [RID#678] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:11:09): [krb5_child[333318]] [main] (0x0400): [RID#678] krb5_child started. * (2026-06-13 9:11:09): [krb5_child[333318]] [unpack_buffer] (0x1000): [RID#678] total buffer size: [99] * (2026-06-13 9:11:09): [krb5_child[333318]] [unpack_buffer] (0x0100): [RID#678] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:11:09): [krb5_child[333318]] [unpack_buffer] (0x2000): [RID#678] No old ccache * (2026-06-13 9:11:09): [krb5_child[333318]] [unpack_buffer] (0x0100): [RID#678] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:11:09): [krb5_child[333318]] [k5c_precreate_ccache] (0x4000): [RID#678] Recreating ccache * (2026-06-13 9:11:09): [krb5_child[333318]] [k5c_setup_fast] (0x0100): [RID#678] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:11:09): [krb5_child[333318]] [find_principal_in_keytab] (0x4000): [RID#678] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:11:09): [krb5_child[333318]] [match_principal] (0x1000): [RID#678] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:11:09): [krb5_child[333318]] [check_fast_ccache] (0x0200): [RID#678] FAST TGT is still valid. * (2026-06-13 9:11:09): [krb5_child[333318]] [become_user] (0x0200): [RID#678] Trying to become user [171600000][171600000]. * (2026-06-13 9:11:09): [krb5_child[333318]] [main] (0x2000): [RID#678] Running as [171600000][171600000]. * (2026-06-13 9:11:09): [krb5_child[333318]] [set_lifetime_options] (0x0100): [RID#678] No specific renewable lifetime requested. * (2026-06-13 9:11:09): [krb5_child[333318]] [set_lifetime_options] (0x0100): [RID#678] No specific lifetime requested. * (2026-06-13 9:11:09): [krb5_child[333318]] [set_canonicalize_option] (0x0100): [RID#678] Canonicalization is set to [true] * (2026-06-13 9:11:09): [krb5_child[333318]] [main] (0x0400): [RID#678] Will perform auth * (2026-06-13 9:11:09): [krb5_child[333318]] [main] (0x0400): [RID#678] Will perform online auth * (2026-06-13 9:11:09): [krb5_child[333318]] [tgt_req_child] (0x1000): [RID#678] Attempting to get a TGT * (2026-06-13 9:11:09): [krb5_child[333318]] [get_and_save_tgt] (0x0400): [RID#678] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:11:09): [krb5_child[333318]] [sss_krb5_responder] (0x4000): [RID#678] Got question [password]. * (2026-06-13 9:11:09): [krb5_child[333318]] [get_and_save_tgt] (0x0020): [RID#678] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:11:09): [krb5_child[333318]] [map_krb5_error] (0x0020): [RID#678] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:13:04): [krb5_child[339277]] [get_and_save_tgt] (0x0020): [RID#714] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:13:04): [krb5_child[339277]] [main] (0x0400): [RID#714] krb5_child started. * (2026-06-13 9:13:04): [krb5_child[339277]] [unpack_buffer] (0x1000): [RID#714] total buffer size: [102] * (2026-06-13 9:13:04): [krb5_child[339277]] [unpack_buffer] (0x0100): [RID#714] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:13:04): [krb5_child[339277]] [unpack_buffer] (0x2000): [RID#714] No old ccache * (2026-06-13 9:13:04): [krb5_child[339277]] [unpack_buffer] (0x0100): [RID#714] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:13:04): [krb5_child[339277]] [k5c_precreate_ccache] (0x4000): [RID#714] Recreating ccache * (2026-06-13 9:13:04): [krb5_child[339277]] [k5c_setup_fast] (0x0100): [RID#714] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:13:04): [krb5_child[339277]] [find_principal_in_keytab] (0x4000): [RID#714] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:13:04): [krb5_child[339277]] [match_principal] (0x1000): [RID#714] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:13:04): [krb5_child[339277]] [check_fast_ccache] (0x0200): [RID#714] FAST TGT is still valid. * (2026-06-13 9:13:04): [krb5_child[339277]] [become_user] (0x0200): [RID#714] Trying to become user [171600000][171600000]. * (2026-06-13 9:13:04): [krb5_child[339277]] [main] (0x2000): [RID#714] Running as [171600000][171600000]. * (2026-06-13 9:13:04): [krb5_child[339277]] [set_lifetime_options] (0x0100): [RID#714] No specific renewable lifetime requested. * (2026-06-13 9:13:04): [krb5_child[339277]] [set_lifetime_options] (0x0100): [RID#714] No specific lifetime requested. * (2026-06-13 9:13:04): [krb5_child[339277]] [set_canonicalize_option] (0x0100): [RID#714] Canonicalization is set to [true] * (2026-06-13 9:13:04): [krb5_child[339277]] [main] (0x0400): [RID#714] Will perform auth * (2026-06-13 9:13:04): [krb5_child[339277]] [main] (0x0400): [RID#714] Will perform online auth * (2026-06-13 9:13:04): [krb5_child[339277]] [tgt_req_child] (0x1000): [RID#714] Attempting to get a TGT * (2026-06-13 9:13:04): [krb5_child[339277]] [get_and_save_tgt] (0x0400): [RID#714] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:13:04): [krb5_child[339277]] [sss_krb5_responder] (0x4000): [RID#714] Got question [password]. * (2026-06-13 9:13:04): [krb5_child[339277]] [get_and_save_tgt] (0x0020): [RID#714] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:13:04): [krb5_child[339277]] [map_krb5_error] (0x0020): [RID#714] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:13:16): [krb5_child[339400]] [get_and_save_tgt] (0x0020): [RID#721] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:13:16): [krb5_child[339400]] [main] (0x0400): [RID#721] krb5_child started. * (2026-06-13 9:13:16): [krb5_child[339400]] [unpack_buffer] (0x1000): [RID#721] total buffer size: [100] * (2026-06-13 9:13:16): [krb5_child[339400]] [unpack_buffer] (0x0100): [RID#721] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:13:16): [krb5_child[339400]] [unpack_buffer] (0x2000): [RID#721] No old ccache * (2026-06-13 9:13:16): [krb5_child[339400]] [unpack_buffer] (0x0100): [RID#721] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:13:16): [krb5_child[339400]] [k5c_precreate_ccache] (0x4000): [RID#721] Recreating ccache * (2026-06-13 9:13:16): [krb5_child[339400]] [k5c_setup_fast] (0x0100): [RID#721] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:13:16): [krb5_child[339400]] [find_principal_in_keytab] (0x4000): [RID#721] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:13:16): [krb5_child[339400]] [match_principal] (0x1000): [RID#721] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:13:16): [krb5_child[339400]] [check_fast_ccache] (0x0200): [RID#721] FAST TGT is still valid. * (2026-06-13 9:13:16): [krb5_child[339400]] [become_user] (0x0200): [RID#721] Trying to become user [171600000][171600000]. * (2026-06-13 9:13:16): [krb5_child[339400]] [main] (0x2000): [RID#721] Running as [171600000][171600000]. * (2026-06-13 9:13:16): [krb5_child[339400]] [set_lifetime_options] (0x0100): [RID#721] No specific renewable lifetime requested. * (2026-06-13 9:13:16): [krb5_child[339400]] [set_lifetime_options] (0x0100): [RID#721] No specific lifetime requested. * (2026-06-13 9:13:16): [krb5_child[339400]] [set_canonicalize_option] (0x0100): [RID#721] Canonicalization is set to [true] * (2026-06-13 9:13:16): [krb5_child[339400]] [main] (0x0400): [RID#721] Will perform auth * (2026-06-13 9:13:16): [krb5_child[339400]] [main] (0x0400): [RID#721] Will perform online auth * (2026-06-13 9:13:16): [krb5_child[339400]] [tgt_req_child] (0x1000): [RID#721] Attempting to get a TGT * (2026-06-13 9:13:16): [krb5_child[339400]] [get_and_save_tgt] (0x0400): [RID#721] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:13:16): [krb5_child[339400]] [sss_krb5_responder] (0x4000): [RID#721] Got question [password]. * (2026-06-13 9:13:16): [krb5_child[339400]] [get_and_save_tgt] (0x0020): [RID#721] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:13:16): [krb5_child[339400]] [map_krb5_error] (0x0020): [RID#721] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:14:40): [krb5_child[344884]] [get_and_save_tgt] (0x0020): [RID#746] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:14:40): [krb5_child[344884]] [main] (0x0400): [RID#746] krb5_child started. * (2026-06-13 9:14:40): [krb5_child[344884]] [unpack_buffer] (0x1000): [RID#746] total buffer size: [100] * (2026-06-13 9:14:40): [krb5_child[344884]] [unpack_buffer] (0x0100): [RID#746] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:14:40): [krb5_child[344884]] [unpack_buffer] (0x2000): [RID#746] No old ccache * (2026-06-13 9:14:40): [krb5_child[344884]] [unpack_buffer] (0x0100): [RID#746] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:14:40): [krb5_child[344884]] [k5c_precreate_ccache] (0x4000): [RID#746] Recreating ccache * (2026-06-13 9:14:40): [krb5_child[344884]] [k5c_setup_fast] (0x0100): [RID#746] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:14:40): [krb5_child[344884]] [find_principal_in_keytab] (0x4000): [RID#746] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:14:40): [krb5_child[344884]] [match_principal] (0x1000): [RID#746] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:14:40): [krb5_child[344884]] [check_fast_ccache] (0x0200): [RID#746] FAST TGT is still valid. * (2026-06-13 9:14:40): [krb5_child[344884]] [become_user] (0x0200): [RID#746] Trying to become user [171600000][171600000]. * (2026-06-13 9:14:40): [krb5_child[344884]] [main] (0x2000): [RID#746] Running as [171600000][171600000]. * (2026-06-13 9:14:40): [krb5_child[344884]] [set_lifetime_options] (0x0100): [RID#746] No specific renewable lifetime requested. * (2026-06-13 9:14:40): [krb5_child[344884]] [set_lifetime_options] (0x0100): [RID#746] No specific lifetime requested. * (2026-06-13 9:14:40): [krb5_child[344884]] [set_canonicalize_option] (0x0100): [RID#746] Canonicalization is set to [true] * (2026-06-13 9:14:40): [krb5_child[344884]] [main] (0x0400): [RID#746] Will perform auth * (2026-06-13 9:14:40): [krb5_child[344884]] [main] (0x0400): [RID#746] Will perform online auth * (2026-06-13 9:14:40): [krb5_child[344884]] [tgt_req_child] (0x1000): [RID#746] Attempting to get a TGT * (2026-06-13 9:14:40): [krb5_child[344884]] [get_and_save_tgt] (0x0400): [RID#746] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:14:40): [krb5_child[344884]] [sss_krb5_responder] (0x4000): [RID#746] Got question [password]. * (2026-06-13 9:14:40): [krb5_child[344884]] [get_and_save_tgt] (0x0020): [RID#746] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:14:40): [krb5_child[344884]] [map_krb5_error] (0x0020): [RID#746] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:15:38): [krb5_child[352894]] [get_and_save_tgt] (0x0020): [RID#765] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:15:38): [krb5_child[352894]] [main] (0x0400): [RID#765] krb5_child started. * (2026-06-13 9:15:38): [krb5_child[352894]] [unpack_buffer] (0x1000): [RID#765] total buffer size: [97] * (2026-06-13 9:15:38): [krb5_child[352894]] [unpack_buffer] (0x0100): [RID#765] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:15:38): [krb5_child[352894]] [unpack_buffer] (0x2000): [RID#765] No old ccache * (2026-06-13 9:15:38): [krb5_child[352894]] [unpack_buffer] (0x0100): [RID#765] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:15:38): [krb5_child[352894]] [k5c_precreate_ccache] (0x4000): [RID#765] Recreating ccache * (2026-06-13 9:15:38): [krb5_child[352894]] [k5c_setup_fast] (0x0100): [RID#765] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:15:38): [krb5_child[352894]] [find_principal_in_keytab] (0x4000): [RID#765] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:15:38): [krb5_child[352894]] [match_principal] (0x1000): [RID#765] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:15:38): [krb5_child[352894]] [check_fast_ccache] (0x0200): [RID#765] FAST TGT is still valid. * (2026-06-13 9:15:38): [krb5_child[352894]] [become_user] (0x0200): [RID#765] Trying to become user [171600000][171600000]. * (2026-06-13 9:15:38): [krb5_child[352894]] [main] (0x2000): [RID#765] Running as [171600000][171600000]. * (2026-06-13 9:15:38): [krb5_child[352894]] [set_lifetime_options] (0x0100): [RID#765] No specific renewable lifetime requested. * (2026-06-13 9:15:38): [krb5_child[352894]] [set_lifetime_options] (0x0100): [RID#765] No specific lifetime requested. * (2026-06-13 9:15:38): [krb5_child[352894]] [set_canonicalize_option] (0x0100): [RID#765] Canonicalization is set to [true] * (2026-06-13 9:15:38): [krb5_child[352894]] [main] (0x0400): [RID#765] Will perform auth * (2026-06-13 9:15:38): [krb5_child[352894]] [main] (0x0400): [RID#765] Will perform online auth * (2026-06-13 9:15:38): [krb5_child[352894]] [tgt_req_child] (0x1000): [RID#765] Attempting to get a TGT * (2026-06-13 9:15:38): [krb5_child[352894]] [get_and_save_tgt] (0x0400): [RID#765] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:15:38): [krb5_child[352894]] [sss_krb5_responder] (0x4000): [RID#765] Got question [password]. * (2026-06-13 9:15:38): [krb5_child[352894]] [get_and_save_tgt] (0x0020): [RID#765] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:15:38): [krb5_child[352894]] [map_krb5_error] (0x0020): [RID#765] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:15:47): [krb5_child[354193]] [get_and_save_tgt] (0x0020): [RID#771] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:15:47): [krb5_child[354193]] [main] (0x0400): [RID#771] krb5_child started. * (2026-06-13 9:15:47): [krb5_child[354193]] [unpack_buffer] (0x1000): [RID#771] total buffer size: [99] * (2026-06-13 9:15:47): [krb5_child[354193]] [unpack_buffer] (0x0100): [RID#771] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:15:47): [krb5_child[354193]] [unpack_buffer] (0x2000): [RID#771] No old ccache * (2026-06-13 9:15:47): [krb5_child[354193]] [unpack_buffer] (0x0100): [RID#771] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:15:47): [krb5_child[354193]] [k5c_precreate_ccache] (0x4000): [RID#771] Recreating ccache * (2026-06-13 9:15:47): [krb5_child[354193]] [k5c_setup_fast] (0x0100): [RID#771] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:15:47): [krb5_child[354193]] [find_principal_in_keytab] (0x4000): [RID#771] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:15:47): [krb5_child[354193]] [match_principal] (0x1000): [RID#771] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:15:47): [krb5_child[354193]] [check_fast_ccache] (0x0200): [RID#771] FAST TGT is still valid. * (2026-06-13 9:15:47): [krb5_child[354193]] [become_user] (0x0200): [RID#771] Trying to become user [171600000][171600000]. * (2026-06-13 9:15:47): [krb5_child[354193]] [main] (0x2000): [RID#771] Running as [171600000][171600000]. * (2026-06-13 9:15:47): [krb5_child[354193]] [set_lifetime_options] (0x0100): [RID#771] No specific renewable lifetime requested. * (2026-06-13 9:15:47): [krb5_child[354193]] [set_lifetime_options] (0x0100): [RID#771] No specific lifetime requested. * (2026-06-13 9:15:47): [krb5_child[354193]] [set_canonicalize_option] (0x0100): [RID#771] Canonicalization is set to [true] * (2026-06-13 9:15:47): [krb5_child[354193]] [main] (0x0400): [RID#771] Will perform auth * (2026-06-13 9:15:47): [krb5_child[354193]] [main] (0x0400): [RID#771] Will perform online auth * (2026-06-13 9:15:47): [krb5_child[354193]] [tgt_req_child] (0x1000): [RID#771] Attempting to get a TGT * (2026-06-13 9:15:47): [krb5_child[354193]] [get_and_save_tgt] (0x0400): [RID#771] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:15:47): [krb5_child[354193]] [sss_krb5_responder] (0x4000): [RID#771] Got question [password]. * (2026-06-13 9:15:47): [krb5_child[354193]] [get_and_save_tgt] (0x0020): [RID#771] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:15:47): [krb5_child[354193]] [map_krb5_error] (0x0020): [RID#771] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:16:13): [krb5_child[357472]] [get_and_save_tgt] (0x0020): [RID#778] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:16:13): [krb5_child[357472]] [main] (0x0400): [RID#778] krb5_child started. * (2026-06-13 9:16:13): [krb5_child[357472]] [unpack_buffer] (0x1000): [RID#778] total buffer size: [99] * (2026-06-13 9:16:13): [krb5_child[357472]] [unpack_buffer] (0x0100): [RID#778] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:16:13): [krb5_child[357472]] [unpack_buffer] (0x2000): [RID#778] No old ccache * (2026-06-13 9:16:13): [krb5_child[357472]] [unpack_buffer] (0x0100): [RID#778] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:16:13): [krb5_child[357472]] [k5c_precreate_ccache] (0x4000): [RID#778] Recreating ccache * (2026-06-13 9:16:13): [krb5_child[357472]] [k5c_setup_fast] (0x0100): [RID#778] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:16:13): [krb5_child[357472]] [find_principal_in_keytab] (0x4000): [RID#778] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:16:13): [krb5_child[357472]] [match_principal] (0x1000): [RID#778] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:16:13): [krb5_child[357472]] [check_fast_ccache] (0x0200): [RID#778] FAST TGT is still valid. * (2026-06-13 9:16:13): [krb5_child[357472]] [become_user] (0x0200): [RID#778] Trying to become user [171600000][171600000]. * (2026-06-13 9:16:13): [krb5_child[357472]] [main] (0x2000): [RID#778] Running as [171600000][171600000]. * (2026-06-13 9:16:13): [krb5_child[357472]] [set_lifetime_options] (0x0100): [RID#778] No specific renewable lifetime requested. * (2026-06-13 9:16:13): [krb5_child[357472]] [set_lifetime_options] (0x0100): [RID#778] No specific lifetime requested. * (2026-06-13 9:16:13): [krb5_child[357472]] [set_canonicalize_option] (0x0100): [RID#778] Canonicalization is set to [true] * (2026-06-13 9:16:13): [krb5_child[357472]] [main] (0x0400): [RID#778] Will perform auth * (2026-06-13 9:16:13): [krb5_child[357472]] [main] (0x0400): [RID#778] Will perform online auth * (2026-06-13 9:16:13): [krb5_child[357472]] [tgt_req_child] (0x1000): [RID#778] Attempting to get a TGT * (2026-06-13 9:16:13): [krb5_child[357472]] [get_and_save_tgt] (0x0400): [RID#778] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:16:13): [krb5_child[357472]] [sss_krb5_responder] (0x4000): [RID#778] Got question [password]. * (2026-06-13 9:16:13): [krb5_child[357472]] [get_and_save_tgt] (0x0020): [RID#778] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:16:13): [krb5_child[357472]] [map_krb5_error] (0x0020): [RID#778] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:16:49): [krb5_child[359337]] [get_and_save_tgt] (0x0020): [RID#791] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:16:49): [krb5_child[359337]] [main] (0x0400): [RID#791] krb5_child started. * (2026-06-13 9:16:49): [krb5_child[359337]] [unpack_buffer] (0x1000): [RID#791] total buffer size: [99] * (2026-06-13 9:16:49): [krb5_child[359337]] [unpack_buffer] (0x0100): [RID#791] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:16:49): [krb5_child[359337]] [unpack_buffer] (0x2000): [RID#791] No old ccache * (2026-06-13 9:16:49): [krb5_child[359337]] [unpack_buffer] (0x0100): [RID#791] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:16:49): [krb5_child[359337]] [k5c_precreate_ccache] (0x4000): [RID#791] Recreating ccache * (2026-06-13 9:16:49): [krb5_child[359337]] [k5c_setup_fast] (0x0100): [RID#791] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:16:49): [krb5_child[359337]] [find_principal_in_keytab] (0x4000): [RID#791] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:16:49): [krb5_child[359337]] [match_principal] (0x1000): [RID#791] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:16:49): [krb5_child[359337]] [check_fast_ccache] (0x0200): [RID#791] FAST TGT is still valid. * (2026-06-13 9:16:49): [krb5_child[359337]] [become_user] (0x0200): [RID#791] Trying to become user [171600000][171600000]. * (2026-06-13 9:16:49): [krb5_child[359337]] [main] (0x2000): [RID#791] Running as [171600000][171600000]. * (2026-06-13 9:16:49): [krb5_child[359337]] [set_lifetime_options] (0x0100): [RID#791] No specific renewable lifetime requested. * (2026-06-13 9:16:49): [krb5_child[359337]] [set_lifetime_options] (0x0100): [RID#791] No specific lifetime requested. * (2026-06-13 9:16:49): [krb5_child[359337]] [set_canonicalize_option] (0x0100): [RID#791] Canonicalization is set to [true] * (2026-06-13 9:16:49): [krb5_child[359337]] [main] (0x0400): [RID#791] Will perform auth * (2026-06-13 9:16:49): [krb5_child[359337]] [main] (0x0400): [RID#791] Will perform online auth * (2026-06-13 9:16:49): [krb5_child[359337]] [tgt_req_child] (0x1000): [RID#791] Attempting to get a TGT * (2026-06-13 9:16:49): [krb5_child[359337]] [get_and_save_tgt] (0x0400): [RID#791] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:16:49): [krb5_child[359337]] [sss_krb5_responder] (0x4000): [RID#791] Got question [password]. * (2026-06-13 9:16:49): [krb5_child[359337]] [get_and_save_tgt] (0x0020): [RID#791] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:16:49): [krb5_child[359337]] [map_krb5_error] (0x0020): [RID#791] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:17:37): [krb5_child[359843]] [get_and_save_tgt] (0x0020): [RID#809] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:17:37): [krb5_child[359843]] [main] (0x0400): [RID#809] krb5_child started. * (2026-06-13 9:17:37): [krb5_child[359843]] [unpack_buffer] (0x1000): [RID#809] total buffer size: [98] * (2026-06-13 9:17:37): [krb5_child[359843]] [unpack_buffer] (0x0100): [RID#809] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:17:37): [krb5_child[359843]] [unpack_buffer] (0x2000): [RID#809] No old ccache * (2026-06-13 9:17:37): [krb5_child[359843]] [unpack_buffer] (0x0100): [RID#809] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:17:37): [krb5_child[359843]] [k5c_precreate_ccache] (0x4000): [RID#809] Recreating ccache * (2026-06-13 9:17:37): [krb5_child[359843]] [k5c_setup_fast] (0x0100): [RID#809] Fast principal is set to [host/np0000072652.ooo.test@OOO.TEST] * (2026-06-13 9:17:37): [krb5_child[359843]] [find_principal_in_keytab] (0x4000): [RID#809] Trying to find principal host/np0000072652.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:17:37): [krb5_child[359843]] [match_principal] (0x1000): [RID#809] Principal matched to the sample (host/np0000072652.ooo.test@OOO.TEST). * (2026-06-13 9:17:37): [krb5_child[359843]] [check_fast_ccache] (0x0200): [RID#809] FAST TGT is still valid. * (2026-06-13 9:17:37): [krb5_child[359843]] [become_user] (0x0200): [RID#809] Trying to become user [171600000][171600000]. * (2026-06-13 9:17:37): [krb5_child[359843]] [main] (0x2000): [RID#809] Running as [171600000][171600000]. * (2026-06-13 9:17:37): [krb5_child[359843]] [set_lifetime_options] (0x0100): [RID#809] No specific renewable lifetime requested. * (2026-06-13 9:17:37): [krb5_child[359843]] [set_lifetime_options] (0x0100): [RID#809] No specific lifetime requested. * (2026-06-13 9:17:37): [krb5_child[359843]] [set_canonicalize_option] (0x0100): [RID#809] Canonicalization is set to [true] * (2026-06-13 9:17:37): [krb5_child[359843]] [main] (0x0400): [RID#809] Will perform auth * (2026-06-13 9:17:37): [krb5_child[359843]] [main] (0x0400): [RID#809] Will perform online auth * (2026-06-13 9:17:37): [krb5_child[359843]] [tgt_req_child] (0x1000): [RID#809] Attempting to get a TGT * (2026-06-13 9:17:37): [krb5_child[359843]] [get_and_save_tgt] (0x0400): [RID#809] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:17:37): [krb5_child[359843]] [get_and_save_tgt] (0x0020): [RID#809] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:17:37): [krb5_child[359843]] [map_krb5_error] (0x0020): [RID#809] 2138: [-1765328366][Client's credentials have been revoked]