(2026-06-13 8:11:39): [krb5_child[47442]] [get_and_save_tgt] (0x0020): [RID#14] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:11:38): [krb5_child[47442]] [main] (0x0400): [RID#14] krb5_child started. * (2026-06-13 8:11:38): [krb5_child[47442]] [unpack_buffer] (0x1000): [RID#14] total buffer size: [112] * (2026-06-13 8:11:38): [krb5_child[47442]] [unpack_buffer] (0x0100): [RID#14] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:11:38): [krb5_child[47442]] [unpack_buffer] (0x2000): [RID#14] No old ccache * (2026-06-13 8:11:38): [krb5_child[47442]] [unpack_buffer] (0x0100): [RID#14] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:11:38): [krb5_child[47442]] [k5c_precreate_ccache] (0x4000): [RID#14] Recreating ccache * (2026-06-13 8:11:38): [krb5_child[47442]] [k5c_setup_fast] (0x0100): [RID#14] Fast principal is set to [host/np0000072655.ooo.test@OOO.TEST] * (2026-06-13 8:11:38): [krb5_child[47442]] [find_principal_in_keytab] (0x4000): [RID#14] Trying to find principal host/np0000072655.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:11:38): [krb5_child[47442]] [match_principal] (0x1000): [RID#14] Principal matched to the sample (host/np0000072655.ooo.test@OOO.TEST). * (2026-06-13 8:11:38): [krb5_child[47442]] [check_fast_ccache] (0x0200): [RID#14] FAST TGT is still valid. * (2026-06-13 8:11:38): [krb5_child[47442]] [become_user] (0x0200): [RID#14] Trying to become user [171600000][171600000]. * (2026-06-13 8:11:38): [krb5_child[47442]] [main] (0x2000): [RID#14] Running as [171600000][171600000]. * (2026-06-13 8:11:38): [krb5_child[47442]] [set_lifetime_options] (0x0100): [RID#14] No specific renewable lifetime requested. * (2026-06-13 8:11:38): [krb5_child[47442]] [set_lifetime_options] (0x0100): [RID#14] No specific lifetime requested. * (2026-06-13 8:11:38): [krb5_child[47442]] [set_canonicalize_option] (0x0100): [RID#14] Canonicalization is set to [true] * (2026-06-13 8:11:38): [krb5_child[47442]] [main] (0x0400): [RID#14] Will perform auth * (2026-06-13 8:11:38): [krb5_child[47442]] [main] (0x0400): [RID#14] Will perform online auth * (2026-06-13 8:11:38): [krb5_child[47442]] [tgt_req_child] (0x1000): [RID#14] Attempting to get a TGT * (2026-06-13 8:11:38): [krb5_child[47442]] [get_and_save_tgt] (0x0400): [RID#14] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:11:38): [krb5_child[47442]] [sss_krb5_responder] (0x4000): [RID#14] Got question [password]. * (2026-06-13 8:11:39): [krb5_child[47442]] [get_and_save_tgt] (0x0020): [RID#14] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:11:39): [krb5_child[47442]] [map_krb5_error] (0x0020): [RID#14] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:13:24): [krb5_child[47564]] [get_and_save_tgt] (0x0020): [RID#18] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:13:24): [krb5_child[47564]] [main] (0x0400): [RID#18] krb5_child started. * (2026-06-13 8:13:24): [krb5_child[47564]] [unpack_buffer] (0x1000): [RID#18] total buffer size: [96] * (2026-06-13 8:13:24): [krb5_child[47564]] [unpack_buffer] (0x0100): [RID#18] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:13:24): [krb5_child[47564]] [unpack_buffer] (0x2000): [RID#18] No old ccache * (2026-06-13 8:13:24): [krb5_child[47564]] [unpack_buffer] (0x0100): [RID#18] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:13:24): [krb5_child[47564]] [k5c_precreate_ccache] (0x4000): [RID#18] Recreating ccache * (2026-06-13 8:13:24): [krb5_child[47564]] [k5c_setup_fast] (0x0100): [RID#18] Fast principal is set to [host/np0000072655.ooo.test@OOO.TEST] * (2026-06-13 8:13:24): [krb5_child[47564]] [find_principal_in_keytab] (0x4000): [RID#18] Trying to find principal host/np0000072655.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:13:24): [krb5_child[47564]] [match_principal] (0x1000): [RID#18] Principal matched to the sample (host/np0000072655.ooo.test@OOO.TEST). * (2026-06-13 8:13:24): [krb5_child[47564]] [check_fast_ccache] (0x0200): [RID#18] FAST TGT is still valid. * (2026-06-13 8:13:24): [krb5_child[47564]] [become_user] (0x0200): [RID#18] Trying to become user [171600000][171600000]. * (2026-06-13 8:13:24): [krb5_child[47564]] [main] (0x2000): [RID#18] Running as [171600000][171600000]. * (2026-06-13 8:13:24): [krb5_child[47564]] [set_lifetime_options] (0x0100): [RID#18] No specific renewable lifetime requested. * (2026-06-13 8:13:24): [krb5_child[47564]] [set_lifetime_options] (0x0100): [RID#18] No specific lifetime requested. * (2026-06-13 8:13:24): [krb5_child[47564]] [set_canonicalize_option] (0x0100): [RID#18] Canonicalization is set to [true] * (2026-06-13 8:13:24): [krb5_child[47564]] [main] (0x0400): [RID#18] Will perform auth * (2026-06-13 8:13:24): [krb5_child[47564]] [main] (0x0400): [RID#18] Will perform online auth * (2026-06-13 8:13:24): [krb5_child[47564]] [tgt_req_child] (0x1000): [RID#18] Attempting to get a TGT * (2026-06-13 8:13:24): [krb5_child[47564]] [get_and_save_tgt] (0x0400): [RID#18] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:13:24): [krb5_child[47564]] [sss_krb5_responder] (0x4000): [RID#18] Got question [password]. * (2026-06-13 8:13:24): [krb5_child[47564]] [get_and_save_tgt] (0x0020): [RID#18] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:13:24): [krb5_child[47564]] [map_krb5_error] (0x0020): [RID#18] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:13:28): [krb5_child[47567]] [get_and_save_tgt] (0x0020): [RID#20] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:13:28): [krb5_child[47567]] [main] (0x0400): [RID#20] krb5_child started. * (2026-06-13 8:13:28): [krb5_child[47567]] [unpack_buffer] (0x1000): [RID#20] total buffer size: [99] * (2026-06-13 8:13:28): [krb5_child[47567]] [unpack_buffer] (0x0100): [RID#20] cmd [241 (auth)] uid [171600000] gid [171600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:13:28): [krb5_child[47567]] [unpack_buffer] (0x2000): [RID#20] No old ccache * (2026-06-13 8:13:28): [krb5_child[47567]] [unpack_buffer] (0x0100): [RID#20] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:13:28): [krb5_child[47567]] [k5c_precreate_ccache] (0x4000): [RID#20] Recreating ccache * (2026-06-13 8:13:28): [krb5_child[47567]] [k5c_setup_fast] (0x0100): [RID#20] Fast principal is set to [host/np0000072655.ooo.test@OOO.TEST] * (2026-06-13 8:13:28): [krb5_child[47567]] [find_principal_in_keytab] (0x4000): [RID#20] Trying to find principal host/np0000072655.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:13:28): [krb5_child[47567]] [match_principal] (0x1000): [RID#20] Principal matched to the sample (host/np0000072655.ooo.test@OOO.TEST). * (2026-06-13 8:13:28): [krb5_child[47567]] [check_fast_ccache] (0x0200): [RID#20] FAST TGT is still valid. * (2026-06-13 8:13:28): [krb5_child[47567]] [become_user] (0x0200): [RID#20] Trying to become user [171600000][171600000]. * (2026-06-13 8:13:28): [krb5_child[47567]] [main] (0x2000): [RID#20] Running as [171600000][171600000]. * (2026-06-13 8:13:28): [krb5_child[47567]] [set_lifetime_options] (0x0100): [RID#20] No specific renewable lifetime requested. * (2026-06-13 8:13:28): [krb5_child[47567]] [set_lifetime_options] (0x0100): [RID#20] No specific lifetime requested. * (2026-06-13 8:13:28): [krb5_child[47567]] [set_canonicalize_option] (0x0100): [RID#20] Canonicalization is set to [true] * (2026-06-13 8:13:28): [krb5_child[47567]] [main] (0x0400): [RID#20] Will perform auth * (2026-06-13 8:13:28): [krb5_child[47567]] [main] (0x0400): [RID#20] Will perform online auth * (2026-06-13 8:13:28): [krb5_child[47567]] [tgt_req_child] (0x1000): [RID#20] Attempting to get a TGT * (2026-06-13 8:13:28): [krb5_child[47567]] [get_and_save_tgt] (0x0400): [RID#20] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:13:28): [krb5_child[47567]] [sss_krb5_responder] (0x4000): [RID#20] Got question [password]. * (2026-06-13 8:13:28): [krb5_child[47567]] [get_and_save_tgt] (0x0020): [RID#20] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:13:28): [krb5_child[47567]] [map_krb5_error] (0x0020): [RID#20] 2138: [-1765328360][Preauthentication failed]