(2026-06-13 8:37:24): [krb5_child[69309]] [get_and_save_tgt] (0x0020): [RID#56] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:37:24): [krb5_child[69309]] [main] (0x0400): [RID#56] krb5_child started. * (2026-06-13 8:37:24): [krb5_child[69309]] [unpack_buffer] (0x1000): [RID#56] total buffer size: [96] * (2026-06-13 8:37:24): [krb5_child[69309]] [unpack_buffer] (0x0100): [RID#56] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:37:24): [krb5_child[69309]] [unpack_buffer] (0x2000): [RID#56] No old ccache * (2026-06-13 8:37:24): [krb5_child[69309]] [unpack_buffer] (0x0100): [RID#56] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:37:24): [krb5_child[69309]] [k5c_precreate_ccache] (0x4000): [RID#56] Recreating ccache * (2026-06-13 8:37:24): [krb5_child[69309]] [k5c_setup_fast] (0x0100): [RID#56] Fast principal is set to [host/np0000072653.ooo.test@OOO.TEST] * (2026-06-13 8:37:24): [krb5_child[69309]] [find_principal_in_keytab] (0x4000): [RID#56] Trying to find principal host/np0000072653.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:37:24): [krb5_child[69309]] [match_principal] (0x1000): [RID#56] Principal matched to the sample (host/np0000072653.ooo.test@OOO.TEST). * (2026-06-13 8:37:24): [krb5_child[69309]] [check_fast_ccache] (0x0200): [RID#56] FAST TGT is still valid. * (2026-06-13 8:37:24): [krb5_child[69309]] [become_user] (0x0200): [RID#56] Trying to become user [171600000][171600000]. * (2026-06-13 8:37:24): [krb5_child[69309]] [main] (0x2000): [RID#56] Running as [171600000][171600000]. * (2026-06-13 8:37:24): [krb5_child[69309]] [set_lifetime_options] (0x0100): [RID#56] No specific renewable lifetime requested. * (2026-06-13 8:37:24): [krb5_child[69309]] [set_lifetime_options] (0x0100): [RID#56] No specific lifetime requested. * (2026-06-13 8:37:24): [krb5_child[69309]] [set_canonicalize_option] (0x0100): [RID#56] Canonicalization is set to [true] * (2026-06-13 8:37:24): [krb5_child[69309]] [main] (0x0400): [RID#56] Will perform auth * (2026-06-13 8:37:24): [krb5_child[69309]] [main] (0x0400): [RID#56] Will perform online auth * (2026-06-13 8:37:24): [krb5_child[69309]] [tgt_req_child] (0x1000): [RID#56] Attempting to get a TGT * (2026-06-13 8:37:24): [krb5_child[69309]] [get_and_save_tgt] (0x0400): [RID#56] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:37:24): [krb5_child[69309]] [sss_krb5_responder] (0x4000): [RID#56] Got question [password]. * (2026-06-13 8:37:24): [krb5_child[69309]] [get_and_save_tgt] (0x0020): [RID#56] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:37:24): [krb5_child[69309]] [map_krb5_error] (0x0020): [RID#56] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:37:27): [krb5_child[69312]] [get_and_save_tgt] (0x0020): [RID#58] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:37:27): [krb5_child[69312]] [main] (0x0400): [RID#58] krb5_child started. * (2026-06-13 8:37:27): [krb5_child[69312]] [unpack_buffer] (0x1000): [RID#58] total buffer size: [99] * (2026-06-13 8:37:27): [krb5_child[69312]] [unpack_buffer] (0x0100): [RID#58] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:37:27): [krb5_child[69312]] [unpack_buffer] (0x2000): [RID#58] No old ccache * (2026-06-13 8:37:27): [krb5_child[69312]] [unpack_buffer] (0x0100): [RID#58] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:37:27): [krb5_child[69312]] [k5c_precreate_ccache] (0x4000): [RID#58] Recreating ccache * (2026-06-13 8:37:27): [krb5_child[69312]] [k5c_setup_fast] (0x0100): [RID#58] Fast principal is set to [host/np0000072653.ooo.test@OOO.TEST] * (2026-06-13 8:37:27): [krb5_child[69312]] [find_principal_in_keytab] (0x4000): [RID#58] Trying to find principal host/np0000072653.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:37:27): [krb5_child[69312]] [match_principal] (0x1000): [RID#58] Principal matched to the sample (host/np0000072653.ooo.test@OOO.TEST). * (2026-06-13 8:37:27): [krb5_child[69312]] [check_fast_ccache] (0x0200): [RID#58] FAST TGT is still valid. * (2026-06-13 8:37:27): [krb5_child[69312]] [become_user] (0x0200): [RID#58] Trying to become user [171600000][171600000]. * (2026-06-13 8:37:27): [krb5_child[69312]] [main] (0x2000): [RID#58] Running as [171600000][171600000]. * (2026-06-13 8:37:27): [krb5_child[69312]] [set_lifetime_options] (0x0100): [RID#58] No specific renewable lifetime requested. * (2026-06-13 8:37:27): [krb5_child[69312]] [set_lifetime_options] (0x0100): [RID#58] No specific lifetime requested. * (2026-06-13 8:37:27): [krb5_child[69312]] [set_canonicalize_option] (0x0100): [RID#58] Canonicalization is set to [true] * (2026-06-13 8:37:27): [krb5_child[69312]] [main] (0x0400): [RID#58] Will perform auth * (2026-06-13 8:37:27): [krb5_child[69312]] [main] (0x0400): [RID#58] Will perform online auth * (2026-06-13 8:37:27): [krb5_child[69312]] [tgt_req_child] (0x1000): [RID#58] Attempting to get a TGT * (2026-06-13 8:37:27): [krb5_child[69312]] [get_and_save_tgt] (0x0400): [RID#58] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:37:27): [krb5_child[69312]] [sss_krb5_responder] (0x4000): [RID#58] Got question [password]. * (2026-06-13 8:37:27): [krb5_child[69312]] [get_and_save_tgt] (0x0020): [RID#58] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:37:27): [krb5_child[69312]] [map_krb5_error] (0x0020): [RID#58] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:26:07): [krb5_child[106001]] [get_and_save_tgt] (0x0020): [RID#147] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:26:07): [krb5_child[106001]] [main] (0x0400): [RID#147] krb5_child started. * (2026-06-13 9:26:07): [krb5_child[106001]] [unpack_buffer] (0x1000): [RID#147] total buffer size: [100] * (2026-06-13 9:26:07): [krb5_child[106001]] [unpack_buffer] (0x0100): [RID#147] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:26:07): [krb5_child[106001]] [unpack_buffer] (0x2000): [RID#147] No old ccache * (2026-06-13 9:26:07): [krb5_child[106001]] [unpack_buffer] (0x0100): [RID#147] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:26:07): [krb5_child[106001]] [k5c_precreate_ccache] (0x4000): [RID#147] Recreating ccache * (2026-06-13 9:26:07): [krb5_child[106001]] [k5c_setup_fast] (0x0100): [RID#147] Fast principal is set to [host/np0000072653.ooo.test@OOO.TEST] * (2026-06-13 9:26:07): [krb5_child[106001]] [find_principal_in_keytab] (0x4000): [RID#147] Trying to find principal host/np0000072653.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:26:07): [krb5_child[106001]] [match_principal] (0x1000): [RID#147] Principal matched to the sample (host/np0000072653.ooo.test@OOO.TEST). * (2026-06-13 9:26:07): [krb5_child[106001]] [check_fast_ccache] (0x0200): [RID#147] FAST TGT is still valid. * (2026-06-13 9:26:07): [krb5_child[106001]] [become_user] (0x0200): [RID#147] Trying to become user [171600000][171600000]. * (2026-06-13 9:26:07): [krb5_child[106001]] [main] (0x2000): [RID#147] Running as [171600000][171600000]. * (2026-06-13 9:26:07): [krb5_child[106001]] [set_lifetime_options] (0x0100): [RID#147] No specific renewable lifetime requested. * (2026-06-13 9:26:07): [krb5_child[106001]] [set_lifetime_options] (0x0100): [RID#147] No specific lifetime requested. * (2026-06-13 9:26:07): [krb5_child[106001]] [set_canonicalize_option] (0x0100): [RID#147] Canonicalization is set to [true] * (2026-06-13 9:26:07): [krb5_child[106001]] [main] (0x0400): [RID#147] Will perform auth * (2026-06-13 9:26:07): [krb5_child[106001]] [main] (0x0400): [RID#147] Will perform online auth * (2026-06-13 9:26:07): [krb5_child[106001]] [tgt_req_child] (0x1000): [RID#147] Attempting to get a TGT * (2026-06-13 9:26:07): [krb5_child[106001]] [get_and_save_tgt] (0x0400): [RID#147] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:26:07): [krb5_child[106001]] [get_and_save_tgt] (0x0020): [RID#147] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:26:07): [krb5_child[106001]] [map_krb5_error] (0x0020): [RID#147] 2138: [-1765328366][Client's credentials have been revoked]