(2026-06-13 8:12:36): [krb5_child[46061]] [get_and_save_tgt] (0x0020): [RID#28] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:12:36): [krb5_child[46061]] [main] (0x0400): [RID#28] krb5_child started. * (2026-06-13 8:12:36): [krb5_child[46061]] [unpack_buffer] (0x1000): [RID#28] total buffer size: [96] * (2026-06-13 8:12:36): [krb5_child[46061]] [unpack_buffer] (0x0100): [RID#28] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:12:36): [krb5_child[46061]] [unpack_buffer] (0x2000): [RID#28] No old ccache * (2026-06-13 8:12:36): [krb5_child[46061]] [unpack_buffer] (0x0100): [RID#28] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:12:36): [krb5_child[46061]] [k5c_precreate_ccache] (0x4000): [RID#28] Recreating ccache * (2026-06-13 8:12:36): [krb5_child[46061]] [k5c_setup_fast] (0x0100): [RID#28] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:12:36): [krb5_child[46061]] [find_principal_in_keytab] (0x4000): [RID#28] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:12:36): [krb5_child[46061]] [match_principal] (0x1000): [RID#28] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:12:36): [krb5_child[46061]] [check_fast_ccache] (0x0200): [RID#28] FAST TGT is still valid. * (2026-06-13 8:12:36): [krb5_child[46061]] [become_user] (0x0200): [RID#28] Trying to become user [868600000][868600000]. * (2026-06-13 8:12:36): [krb5_child[46061]] [main] (0x2000): [RID#28] Running as [868600000][868600000]. * (2026-06-13 8:12:36): [krb5_child[46061]] [set_lifetime_options] (0x0100): [RID#28] No specific renewable lifetime requested. * (2026-06-13 8:12:36): [krb5_child[46061]] [set_lifetime_options] (0x0100): [RID#28] No specific lifetime requested. * (2026-06-13 8:12:36): [krb5_child[46061]] [set_canonicalize_option] (0x0100): [RID#28] Canonicalization is set to [true] * (2026-06-13 8:12:36): [krb5_child[46061]] [main] (0x0400): [RID#28] Will perform auth * (2026-06-13 8:12:36): [krb5_child[46061]] [main] (0x0400): [RID#28] Will perform online auth * (2026-06-13 8:12:36): [krb5_child[46061]] [tgt_req_child] (0x1000): [RID#28] Attempting to get a TGT * (2026-06-13 8:12:36): [krb5_child[46061]] [get_and_save_tgt] (0x0400): [RID#28] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:12:36): [krb5_child[46061]] [sss_krb5_responder] (0x4000): [RID#28] Got question [password]. * (2026-06-13 8:12:36): [krb5_child[46061]] [get_and_save_tgt] (0x0020): [RID#28] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:12:36): [krb5_child[46061]] [map_krb5_error] (0x0020): [RID#28] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:18:58): [krb5_child[64718]] [get_and_save_tgt] (0x0020): [RID#64] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:18:58): [krb5_child[64718]] [main] (0x0400): [RID#64] krb5_child started. * (2026-06-13 8:18:58): [krb5_child[64718]] [unpack_buffer] (0x1000): [RID#64] total buffer size: [99] * (2026-06-13 8:18:58): [krb5_child[64718]] [unpack_buffer] (0x0100): [RID#64] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:18:58): [krb5_child[64718]] [unpack_buffer] (0x2000): [RID#64] No old ccache * (2026-06-13 8:18:58): [krb5_child[64718]] [unpack_buffer] (0x0100): [RID#64] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:18:58): [krb5_child[64718]] [k5c_precreate_ccache] (0x4000): [RID#64] Recreating ccache * (2026-06-13 8:18:58): [krb5_child[64718]] [k5c_setup_fast] (0x0100): [RID#64] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:18:58): [krb5_child[64718]] [find_principal_in_keytab] (0x4000): [RID#64] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:18:58): [krb5_child[64718]] [match_principal] (0x1000): [RID#64] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:18:58): [krb5_child[64718]] [check_fast_ccache] (0x0200): [RID#64] FAST TGT is still valid. * (2026-06-13 8:18:58): [krb5_child[64718]] [become_user] (0x0200): [RID#64] Trying to become user [868600000][868600000]. * (2026-06-13 8:18:58): [krb5_child[64718]] [main] (0x2000): [RID#64] Running as [868600000][868600000]. * (2026-06-13 8:18:58): [krb5_child[64718]] [set_lifetime_options] (0x0100): [RID#64] No specific renewable lifetime requested. * (2026-06-13 8:18:58): [krb5_child[64718]] [set_lifetime_options] (0x0100): [RID#64] No specific lifetime requested. * (2026-06-13 8:18:58): [krb5_child[64718]] [set_canonicalize_option] (0x0100): [RID#64] Canonicalization is set to [true] * (2026-06-13 8:18:58): [krb5_child[64718]] [main] (0x0400): [RID#64] Will perform auth * (2026-06-13 8:18:58): [krb5_child[64718]] [main] (0x0400): [RID#64] Will perform online auth * (2026-06-13 8:18:58): [krb5_child[64718]] [tgt_req_child] (0x1000): [RID#64] Attempting to get a TGT * (2026-06-13 8:18:58): [krb5_child[64718]] [get_and_save_tgt] (0x0400): [RID#64] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:18:58): [krb5_child[64718]] [sss_krb5_responder] (0x4000): [RID#64] Got question [password]. * (2026-06-13 8:18:58): [krb5_child[64718]] [get_and_save_tgt] (0x0020): [RID#64] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:18:58): [krb5_child[64718]] [map_krb5_error] (0x0020): [RID#64] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:21:13): [krb5_child[71926]] [get_and_save_tgt] (0x0020): [RID#74] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:21:13): [krb5_child[71926]] [main] (0x0400): [RID#74] krb5_child started. * (2026-06-13 8:21:13): [krb5_child[71926]] [unpack_buffer] (0x1000): [RID#74] total buffer size: [99] * (2026-06-13 8:21:13): [krb5_child[71926]] [unpack_buffer] (0x0100): [RID#74] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:21:13): [krb5_child[71926]] [unpack_buffer] (0x2000): [RID#74] No old ccache * (2026-06-13 8:21:13): [krb5_child[71926]] [unpack_buffer] (0x0100): [RID#74] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:21:13): [krb5_child[71926]] [k5c_precreate_ccache] (0x4000): [RID#74] Recreating ccache * (2026-06-13 8:21:13): [krb5_child[71926]] [k5c_setup_fast] (0x0100): [RID#74] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:21:13): [krb5_child[71926]] [find_principal_in_keytab] (0x4000): [RID#74] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:21:13): [krb5_child[71926]] [match_principal] (0x1000): [RID#74] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:21:13): [krb5_child[71926]] [check_fast_ccache] (0x0200): [RID#74] FAST TGT is still valid. * (2026-06-13 8:21:13): [krb5_child[71926]] [become_user] (0x0200): [RID#74] Trying to become user [868600000][868600000]. * (2026-06-13 8:21:13): [krb5_child[71926]] [main] (0x2000): [RID#74] Running as [868600000][868600000]. * (2026-06-13 8:21:13): [krb5_child[71926]] [set_lifetime_options] (0x0100): [RID#74] No specific renewable lifetime requested. * (2026-06-13 8:21:13): [krb5_child[71926]] [set_lifetime_options] (0x0100): [RID#74] No specific lifetime requested. * (2026-06-13 8:21:13): [krb5_child[71926]] [set_canonicalize_option] (0x0100): [RID#74] Canonicalization is set to [true] * (2026-06-13 8:21:13): [krb5_child[71926]] [main] (0x0400): [RID#74] Will perform auth * (2026-06-13 8:21:13): [krb5_child[71926]] [main] (0x0400): [RID#74] Will perform online auth * (2026-06-13 8:21:13): [krb5_child[71926]] [tgt_req_child] (0x1000): [RID#74] Attempting to get a TGT * (2026-06-13 8:21:13): [krb5_child[71926]] [get_and_save_tgt] (0x0400): [RID#74] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:21:13): [krb5_child[71926]] [sss_krb5_responder] (0x4000): [RID#74] Got question [password]. * (2026-06-13 8:21:13): [krb5_child[71926]] [get_and_save_tgt] (0x0020): [RID#74] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:21:13): [krb5_child[71926]] [map_krb5_error] (0x0020): [RID#74] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:31:42): [krb5_child[139887]] [get_and_save_tgt] (0x0020): [RID#109] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:31:42): [krb5_child[139887]] [main] (0x0400): [RID#109] krb5_child started. * (2026-06-13 8:31:42): [krb5_child[139887]] [unpack_buffer] (0x1000): [RID#109] total buffer size: [92] * (2026-06-13 8:31:42): [krb5_child[139887]] [unpack_buffer] (0x0100): [RID#109] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:31:42): [krb5_child[139887]] [unpack_buffer] (0x2000): [RID#109] No old ccache * (2026-06-13 8:31:42): [krb5_child[139887]] [unpack_buffer] (0x0100): [RID#109] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:31:42): [krb5_child[139887]] [k5c_precreate_ccache] (0x4000): [RID#109] Recreating ccache * (2026-06-13 8:31:42): [krb5_child[139887]] [k5c_setup_fast] (0x0100): [RID#109] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:31:42): [krb5_child[139887]] [find_principal_in_keytab] (0x4000): [RID#109] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:31:42): [krb5_child[139887]] [match_principal] (0x1000): [RID#109] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:31:42): [krb5_child[139887]] [check_fast_ccache] (0x0200): [RID#109] FAST TGT is still valid. * (2026-06-13 8:31:42): [krb5_child[139887]] [become_user] (0x0200): [RID#109] Trying to become user [868600000][868600000]. * (2026-06-13 8:31:42): [krb5_child[139887]] [main] (0x2000): [RID#109] Running as [868600000][868600000]. * (2026-06-13 8:31:42): [krb5_child[139887]] [set_lifetime_options] (0x0100): [RID#109] No specific renewable lifetime requested. * (2026-06-13 8:31:42): [krb5_child[139887]] [set_lifetime_options] (0x0100): [RID#109] No specific lifetime requested. * (2026-06-13 8:31:42): [krb5_child[139887]] [set_canonicalize_option] (0x0100): [RID#109] Canonicalization is set to [true] * (2026-06-13 8:31:42): [krb5_child[139887]] [main] (0x0400): [RID#109] Will perform auth * (2026-06-13 8:31:42): [krb5_child[139887]] [main] (0x0400): [RID#109] Will perform online auth * (2026-06-13 8:31:42): [krb5_child[139887]] [tgt_req_child] (0x1000): [RID#109] Attempting to get a TGT * (2026-06-13 8:31:42): [krb5_child[139887]] [get_and_save_tgt] (0x0400): [RID#109] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:31:42): [krb5_child[139887]] [get_and_save_tgt] (0x0020): [RID#109] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:31:42): [krb5_child[139887]] [map_krb5_error] (0x0020): [RID#109] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:33:52): [krb5_child[154049]] [get_and_save_tgt] (0x0020): [RID#117] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:33:52): [krb5_child[154049]] [main] (0x0400): [RID#117] krb5_child started. * (2026-06-13 8:33:52): [krb5_child[154049]] [unpack_buffer] (0x1000): [RID#117] total buffer size: [96] * (2026-06-13 8:33:52): [krb5_child[154049]] [unpack_buffer] (0x0100): [RID#117] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:33:52): [krb5_child[154049]] [unpack_buffer] (0x2000): [RID#117] No old ccache * (2026-06-13 8:33:52): [krb5_child[154049]] [unpack_buffer] (0x0100): [RID#117] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:33:52): [krb5_child[154049]] [k5c_precreate_ccache] (0x4000): [RID#117] Recreating ccache * (2026-06-13 8:33:52): [krb5_child[154049]] [k5c_setup_fast] (0x0100): [RID#117] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:33:52): [krb5_child[154049]] [find_principal_in_keytab] (0x4000): [RID#117] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:33:52): [krb5_child[154049]] [match_principal] (0x1000): [RID#117] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:33:52): [krb5_child[154049]] [check_fast_ccache] (0x0200): [RID#117] FAST TGT is still valid. * (2026-06-13 8:33:52): [krb5_child[154049]] [become_user] (0x0200): [RID#117] Trying to become user [868600000][868600000]. * (2026-06-13 8:33:52): [krb5_child[154049]] [main] (0x2000): [RID#117] Running as [868600000][868600000]. * (2026-06-13 8:33:52): [krb5_child[154049]] [set_lifetime_options] (0x0100): [RID#117] No specific renewable lifetime requested. * (2026-06-13 8:33:52): [krb5_child[154049]] [set_lifetime_options] (0x0100): [RID#117] No specific lifetime requested. * (2026-06-13 8:33:52): [krb5_child[154049]] [set_canonicalize_option] (0x0100): [RID#117] Canonicalization is set to [true] * (2026-06-13 8:33:52): [krb5_child[154049]] [main] (0x0400): [RID#117] Will perform auth * (2026-06-13 8:33:52): [krb5_child[154049]] [main] (0x0400): [RID#117] Will perform online auth * (2026-06-13 8:33:52): [krb5_child[154049]] [tgt_req_child] (0x1000): [RID#117] Attempting to get a TGT * (2026-06-13 8:33:52): [krb5_child[154049]] [get_and_save_tgt] (0x0400): [RID#117] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:33:52): [krb5_child[154049]] [get_and_save_tgt] (0x0020): [RID#117] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:33:52): [krb5_child[154049]] [map_krb5_error] (0x0020): [RID#117] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:33:56): [krb5_child[154364]] [get_and_save_tgt] (0x0020): [RID#119] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:33:56): [krb5_child[154364]] [main] (0x0400): [RID#119] krb5_child started. * (2026-06-13 8:33:56): [krb5_child[154364]] [unpack_buffer] (0x1000): [RID#119] total buffer size: [99] * (2026-06-13 8:33:56): [krb5_child[154364]] [unpack_buffer] (0x0100): [RID#119] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:33:56): [krb5_child[154364]] [unpack_buffer] (0x2000): [RID#119] No old ccache * (2026-06-13 8:33:56): [krb5_child[154364]] [unpack_buffer] (0x0100): [RID#119] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:33:56): [krb5_child[154364]] [k5c_precreate_ccache] (0x4000): [RID#119] Recreating ccache * (2026-06-13 8:33:56): [krb5_child[154364]] [k5c_setup_fast] (0x0100): [RID#119] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:33:56): [krb5_child[154364]] [find_principal_in_keytab] (0x4000): [RID#119] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:33:56): [krb5_child[154364]] [match_principal] (0x1000): [RID#119] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:33:56): [krb5_child[154364]] [check_fast_ccache] (0x0200): [RID#119] FAST TGT is still valid. * (2026-06-13 8:33:56): [krb5_child[154364]] [become_user] (0x0200): [RID#119] Trying to become user [868600000][868600000]. * (2026-06-13 8:33:56): [krb5_child[154364]] [main] (0x2000): [RID#119] Running as [868600000][868600000]. * (2026-06-13 8:33:56): [krb5_child[154364]] [set_lifetime_options] (0x0100): [RID#119] No specific renewable lifetime requested. * (2026-06-13 8:33:56): [krb5_child[154364]] [set_lifetime_options] (0x0100): [RID#119] No specific lifetime requested. * (2026-06-13 8:33:56): [krb5_child[154364]] [set_canonicalize_option] (0x0100): [RID#119] Canonicalization is set to [true] * (2026-06-13 8:33:56): [krb5_child[154364]] [main] (0x0400): [RID#119] Will perform auth * (2026-06-13 8:33:56): [krb5_child[154364]] [main] (0x0400): [RID#119] Will perform online auth * (2026-06-13 8:33:56): [krb5_child[154364]] [tgt_req_child] (0x1000): [RID#119] Attempting to get a TGT * (2026-06-13 8:33:56): [krb5_child[154364]] [get_and_save_tgt] (0x0400): [RID#119] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:33:56): [krb5_child[154364]] [get_and_save_tgt] (0x0020): [RID#119] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:33:56): [krb5_child[154364]] [map_krb5_error] (0x0020): [RID#119] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:34:34): [krb5_child[158784]] [get_and_save_tgt] (0x0020): [RID#128] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:34:34): [krb5_child[158784]] [main] (0x0400): [RID#128] krb5_child started. * (2026-06-13 8:34:34): [krb5_child[158784]] [unpack_buffer] (0x1000): [RID#128] total buffer size: [97] * (2026-06-13 8:34:34): [krb5_child[158784]] [unpack_buffer] (0x0100): [RID#128] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:34:34): [krb5_child[158784]] [unpack_buffer] (0x2000): [RID#128] No old ccache * (2026-06-13 8:34:34): [krb5_child[158784]] [unpack_buffer] (0x0100): [RID#128] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:34:34): [krb5_child[158784]] [k5c_precreate_ccache] (0x4000): [RID#128] Recreating ccache * (2026-06-13 8:34:34): [krb5_child[158784]] [k5c_setup_fast] (0x0100): [RID#128] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:34:34): [krb5_child[158784]] [find_principal_in_keytab] (0x4000): [RID#128] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:34:34): [krb5_child[158784]] [match_principal] (0x1000): [RID#128] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:34:34): [krb5_child[158784]] [check_fast_ccache] (0x0200): [RID#128] FAST TGT is still valid. * (2026-06-13 8:34:34): [krb5_child[158784]] [become_user] (0x0200): [RID#128] Trying to become user [868600000][868600000]. * (2026-06-13 8:34:34): [krb5_child[158784]] [main] (0x2000): [RID#128] Running as [868600000][868600000]. * (2026-06-13 8:34:34): [krb5_child[158784]] [set_lifetime_options] (0x0100): [RID#128] No specific renewable lifetime requested. * (2026-06-13 8:34:34): [krb5_child[158784]] [set_lifetime_options] (0x0100): [RID#128] No specific lifetime requested. * (2026-06-13 8:34:34): [krb5_child[158784]] [set_canonicalize_option] (0x0100): [RID#128] Canonicalization is set to [true] * (2026-06-13 8:34:34): [krb5_child[158784]] [main] (0x0400): [RID#128] Will perform auth * (2026-06-13 8:34:34): [krb5_child[158784]] [main] (0x0400): [RID#128] Will perform online auth * (2026-06-13 8:34:34): [krb5_child[158784]] [tgt_req_child] (0x1000): [RID#128] Attempting to get a TGT * (2026-06-13 8:34:34): [krb5_child[158784]] [get_and_save_tgt] (0x0400): [RID#128] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:34:34): [krb5_child[158784]] [get_and_save_tgt] (0x0020): [RID#128] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:34:34): [krb5_child[158784]] [map_krb5_error] (0x0020): [RID#128] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:36:54): [krb5_child[172849]] [get_and_save_tgt] (0x0020): [RID#137] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:36:54): [krb5_child[172849]] [main] (0x0400): [RID#137] krb5_child started. * (2026-06-13 8:36:54): [krb5_child[172849]] [unpack_buffer] (0x1000): [RID#137] total buffer size: [97] * (2026-06-13 8:36:54): [krb5_child[172849]] [unpack_buffer] (0x0100): [RID#137] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:36:54): [krb5_child[172849]] [unpack_buffer] (0x2000): [RID#137] No old ccache * (2026-06-13 8:36:54): [krb5_child[172849]] [unpack_buffer] (0x0100): [RID#137] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:36:54): [krb5_child[172849]] [k5c_precreate_ccache] (0x4000): [RID#137] Recreating ccache * (2026-06-13 8:36:54): [krb5_child[172849]] [k5c_setup_fast] (0x0100): [RID#137] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:36:54): [krb5_child[172849]] [find_principal_in_keytab] (0x4000): [RID#137] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:36:54): [krb5_child[172849]] [match_principal] (0x1000): [RID#137] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:36:54): [krb5_child[172849]] [check_fast_ccache] (0x0200): [RID#137] FAST TGT is still valid. * (2026-06-13 8:36:54): [krb5_child[172849]] [become_user] (0x0200): [RID#137] Trying to become user [868600000][868600000]. * (2026-06-13 8:36:54): [krb5_child[172849]] [main] (0x2000): [RID#137] Running as [868600000][868600000]. * (2026-06-13 8:36:54): [krb5_child[172849]] [set_lifetime_options] (0x0100): [RID#137] No specific renewable lifetime requested. * (2026-06-13 8:36:54): [krb5_child[172849]] [set_lifetime_options] (0x0100): [RID#137] No specific lifetime requested. * (2026-06-13 8:36:54): [krb5_child[172849]] [set_canonicalize_option] (0x0100): [RID#137] Canonicalization is set to [true] * (2026-06-13 8:36:54): [krb5_child[172849]] [main] (0x0400): [RID#137] Will perform auth * (2026-06-13 8:36:54): [krb5_child[172849]] [main] (0x0400): [RID#137] Will perform online auth * (2026-06-13 8:36:54): [krb5_child[172849]] [tgt_req_child] (0x1000): [RID#137] Attempting to get a TGT * (2026-06-13 8:36:54): [krb5_child[172849]] [get_and_save_tgt] (0x0400): [RID#137] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:36:54): [krb5_child[172849]] [get_and_save_tgt] (0x0020): [RID#137] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:36:54): [krb5_child[172849]] [map_krb5_error] (0x0020): [RID#137] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:37:31): [krb5_child[176101]] [get_and_save_tgt] (0x0020): [RID#141] 2009: [-1765328366][Client's credentials have been revoked] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:37:31): [krb5_child[176101]] [main] (0x0400): [RID#141] krb5_child started. * (2026-06-13 8:37:31): [krb5_child[176101]] [unpack_buffer] (0x1000): [RID#141] total buffer size: [99] * (2026-06-13 8:37:31): [krb5_child[176101]] [unpack_buffer] (0x0100): [RID#141] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:37:31): [krb5_child[176101]] [unpack_buffer] (0x2000): [RID#141] No old ccache * (2026-06-13 8:37:31): [krb5_child[176101]] [unpack_buffer] (0x0100): [RID#141] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:37:31): [krb5_child[176101]] [k5c_precreate_ccache] (0x4000): [RID#141] Recreating ccache * (2026-06-13 8:37:31): [krb5_child[176101]] [k5c_setup_fast] (0x0100): [RID#141] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:37:31): [krb5_child[176101]] [find_principal_in_keytab] (0x4000): [RID#141] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:37:31): [krb5_child[176101]] [match_principal] (0x1000): [RID#141] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:37:31): [krb5_child[176101]] [check_fast_ccache] (0x0200): [RID#141] FAST TGT is still valid. * (2026-06-13 8:37:31): [krb5_child[176101]] [become_user] (0x0200): [RID#141] Trying to become user [868600000][868600000]. * (2026-06-13 8:37:31): [krb5_child[176101]] [main] (0x2000): [RID#141] Running as [868600000][868600000]. * (2026-06-13 8:37:31): [krb5_child[176101]] [set_lifetime_options] (0x0100): [RID#141] No specific renewable lifetime requested. * (2026-06-13 8:37:31): [krb5_child[176101]] [set_lifetime_options] (0x0100): [RID#141] No specific lifetime requested. * (2026-06-13 8:37:31): [krb5_child[176101]] [set_canonicalize_option] (0x0100): [RID#141] Canonicalization is set to [true] * (2026-06-13 8:37:31): [krb5_child[176101]] [main] (0x0400): [RID#141] Will perform auth * (2026-06-13 8:37:31): [krb5_child[176101]] [main] (0x0400): [RID#141] Will perform online auth * (2026-06-13 8:37:31): [krb5_child[176101]] [tgt_req_child] (0x1000): [RID#141] Attempting to get a TGT * (2026-06-13 8:37:31): [krb5_child[176101]] [get_and_save_tgt] (0x0400): [RID#141] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:37:31): [krb5_child[176101]] [get_and_save_tgt] (0x0020): [RID#141] 2009: [-1765328366][Client's credentials have been revoked] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:37:31): [krb5_child[176101]] [map_krb5_error] (0x0020): [RID#141] 2138: [-1765328366][Client's credentials have been revoked] (2026-06-13 8:58:09): [krb5_child[282307]] [get_and_save_tgt] (0x0020): [RID#182] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:58:09): [krb5_child[282307]] [main] (0x0400): [RID#182] krb5_child started. * (2026-06-13 8:58:09): [krb5_child[282307]] [unpack_buffer] (0x1000): [RID#182] total buffer size: [99] * (2026-06-13 8:58:09): [krb5_child[282307]] [unpack_buffer] (0x0100): [RID#182] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:58:09): [krb5_child[282307]] [unpack_buffer] (0x2000): [RID#182] No old ccache * (2026-06-13 8:58:09): [krb5_child[282307]] [unpack_buffer] (0x0100): [RID#182] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:58:09): [krb5_child[282307]] [k5c_precreate_ccache] (0x4000): [RID#182] Recreating ccache * (2026-06-13 8:58:09): [krb5_child[282307]] [k5c_setup_fast] (0x0100): [RID#182] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:58:09): [krb5_child[282307]] [find_principal_in_keytab] (0x4000): [RID#182] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:58:09): [krb5_child[282307]] [match_principal] (0x1000): [RID#182] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:58:09): [krb5_child[282307]] [check_fast_ccache] (0x0200): [RID#182] FAST TGT is still valid. * (2026-06-13 8:58:09): [krb5_child[282307]] [become_user] (0x0200): [RID#182] Trying to become user [868600000][868600000]. * (2026-06-13 8:58:09): [krb5_child[282307]] [main] (0x2000): [RID#182] Running as [868600000][868600000]. * (2026-06-13 8:58:09): [krb5_child[282307]] [set_lifetime_options] (0x0100): [RID#182] No specific renewable lifetime requested. * (2026-06-13 8:58:09): [krb5_child[282307]] [set_lifetime_options] (0x0100): [RID#182] No specific lifetime requested. * (2026-06-13 8:58:09): [krb5_child[282307]] [set_canonicalize_option] (0x0100): [RID#182] Canonicalization is set to [true] * (2026-06-13 8:58:09): [krb5_child[282307]] [main] (0x0400): [RID#182] Will perform auth * (2026-06-13 8:58:09): [krb5_child[282307]] [main] (0x0400): [RID#182] Will perform online auth * (2026-06-13 8:58:09): [krb5_child[282307]] [tgt_req_child] (0x1000): [RID#182] Attempting to get a TGT * (2026-06-13 8:58:09): [krb5_child[282307]] [get_and_save_tgt] (0x0400): [RID#182] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:58:09): [krb5_child[282307]] [sss_krb5_responder] (0x4000): [RID#182] Got question [password]. * (2026-06-13 8:58:09): [krb5_child[282307]] [get_and_save_tgt] (0x0020): [RID#182] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:58:09): [krb5_child[282307]] [map_krb5_error] (0x0020): [RID#182] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:58:30): [krb5_child[283834]] [get_and_save_tgt] (0x0020): [RID#186] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:58:30): [krb5_child[283834]] [main] (0x0400): [RID#186] krb5_child started. * (2026-06-13 8:58:30): [krb5_child[283834]] [unpack_buffer] (0x1000): [RID#186] total buffer size: [96] * (2026-06-13 8:58:30): [krb5_child[283834]] [unpack_buffer] (0x0100): [RID#186] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:58:30): [krb5_child[283834]] [unpack_buffer] (0x2000): [RID#186] No old ccache * (2026-06-13 8:58:30): [krb5_child[283834]] [unpack_buffer] (0x0100): [RID#186] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:58:30): [krb5_child[283834]] [k5c_precreate_ccache] (0x4000): [RID#186] Recreating ccache * (2026-06-13 8:58:30): [krb5_child[283834]] [k5c_setup_fast] (0x0100): [RID#186] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:58:30): [krb5_child[283834]] [find_principal_in_keytab] (0x4000): [RID#186] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:58:30): [krb5_child[283834]] [match_principal] (0x1000): [RID#186] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:58:30): [krb5_child[283834]] [check_fast_ccache] (0x0200): [RID#186] FAST TGT is still valid. * (2026-06-13 8:58:30): [krb5_child[283834]] [become_user] (0x0200): [RID#186] Trying to become user [868600000][868600000]. * (2026-06-13 8:58:30): [krb5_child[283834]] [main] (0x2000): [RID#186] Running as [868600000][868600000]. * (2026-06-13 8:58:30): [krb5_child[283834]] [set_lifetime_options] (0x0100): [RID#186] No specific renewable lifetime requested. * (2026-06-13 8:58:30): [krb5_child[283834]] [set_lifetime_options] (0x0100): [RID#186] No specific lifetime requested. * (2026-06-13 8:58:30): [krb5_child[283834]] [set_canonicalize_option] (0x0100): [RID#186] Canonicalization is set to [true] * (2026-06-13 8:58:30): [krb5_child[283834]] [main] (0x0400): [RID#186] Will perform auth * (2026-06-13 8:58:30): [krb5_child[283834]] [main] (0x0400): [RID#186] Will perform online auth * (2026-06-13 8:58:30): [krb5_child[283834]] [tgt_req_child] (0x1000): [RID#186] Attempting to get a TGT * (2026-06-13 8:58:30): [krb5_child[283834]] [get_and_save_tgt] (0x0400): [RID#186] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:58:30): [krb5_child[283834]] [sss_krb5_responder] (0x4000): [RID#186] Got question [password]. * (2026-06-13 8:58:30): [krb5_child[283834]] [get_and_save_tgt] (0x0020): [RID#186] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:58:30): [krb5_child[283834]] [map_krb5_error] (0x0020): [RID#186] 2138: [-1765328360][Preauthentication failed] (2026-06-13 8:58:37): [krb5_child[284484]] [get_and_save_tgt] (0x0020): [RID#189] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 8:58:37): [krb5_child[284484]] [main] (0x0400): [RID#189] krb5_child started. * (2026-06-13 8:58:37): [krb5_child[284484]] [unpack_buffer] (0x1000): [RID#189] total buffer size: [100] * (2026-06-13 8:58:37): [krb5_child[284484]] [unpack_buffer] (0x0100): [RID#189] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 8:58:37): [krb5_child[284484]] [unpack_buffer] (0x2000): [RID#189] No old ccache * (2026-06-13 8:58:37): [krb5_child[284484]] [unpack_buffer] (0x0100): [RID#189] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 8:58:37): [krb5_child[284484]] [k5c_precreate_ccache] (0x4000): [RID#189] Recreating ccache * (2026-06-13 8:58:37): [krb5_child[284484]] [k5c_setup_fast] (0x0100): [RID#189] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 8:58:37): [krb5_child[284484]] [find_principal_in_keytab] (0x4000): [RID#189] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 8:58:37): [krb5_child[284484]] [match_principal] (0x1000): [RID#189] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 8:58:37): [krb5_child[284484]] [check_fast_ccache] (0x0200): [RID#189] FAST TGT is still valid. * (2026-06-13 8:58:37): [krb5_child[284484]] [become_user] (0x0200): [RID#189] Trying to become user [868600000][868600000]. * (2026-06-13 8:58:37): [krb5_child[284484]] [main] (0x2000): [RID#189] Running as [868600000][868600000]. * (2026-06-13 8:58:37): [krb5_child[284484]] [set_lifetime_options] (0x0100): [RID#189] No specific renewable lifetime requested. * (2026-06-13 8:58:37): [krb5_child[284484]] [set_lifetime_options] (0x0100): [RID#189] No specific lifetime requested. * (2026-06-13 8:58:37): [krb5_child[284484]] [set_canonicalize_option] (0x0100): [RID#189] Canonicalization is set to [true] * (2026-06-13 8:58:37): [krb5_child[284484]] [main] (0x0400): [RID#189] Will perform auth * (2026-06-13 8:58:37): [krb5_child[284484]] [main] (0x0400): [RID#189] Will perform online auth * (2026-06-13 8:58:37): [krb5_child[284484]] [tgt_req_child] (0x1000): [RID#189] Attempting to get a TGT * (2026-06-13 8:58:37): [krb5_child[284484]] [get_and_save_tgt] (0x0400): [RID#189] Attempting kinit for realm [OOO.TEST] * (2026-06-13 8:58:37): [krb5_child[284484]] [sss_krb5_responder] (0x4000): [RID#189] Got question [password]. * (2026-06-13 8:58:37): [krb5_child[284484]] [get_and_save_tgt] (0x0020): [RID#189] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 8:58:37): [krb5_child[284484]] [map_krb5_error] (0x0020): [RID#189] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:05:18): [krb5_child[314077]] [get_and_save_tgt] (0x0020): [RID#248] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:05:18): [krb5_child[314077]] [main] (0x0400): [RID#248] krb5_child started. * (2026-06-13 9:05:18): [krb5_child[314077]] [unpack_buffer] (0x1000): [RID#248] total buffer size: [99] * (2026-06-13 9:05:18): [krb5_child[314077]] [unpack_buffer] (0x0100): [RID#248] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:05:18): [krb5_child[314077]] [unpack_buffer] (0x2000): [RID#248] No old ccache * (2026-06-13 9:05:18): [krb5_child[314077]] [unpack_buffer] (0x0100): [RID#248] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:05:18): [krb5_child[314077]] [k5c_precreate_ccache] (0x4000): [RID#248] Recreating ccache * (2026-06-13 9:05:18): [krb5_child[314077]] [k5c_setup_fast] (0x0100): [RID#248] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 9:05:18): [krb5_child[314077]] [find_principal_in_keytab] (0x4000): [RID#248] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:05:18): [krb5_child[314077]] [match_principal] (0x1000): [RID#248] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 9:05:18): [krb5_child[314077]] [check_fast_ccache] (0x0200): [RID#248] FAST TGT is still valid. * (2026-06-13 9:05:18): [krb5_child[314077]] [become_user] (0x0200): [RID#248] Trying to become user [868600000][868600000]. * (2026-06-13 9:05:18): [krb5_child[314077]] [main] (0x2000): [RID#248] Running as [868600000][868600000]. * (2026-06-13 9:05:18): [krb5_child[314077]] [set_lifetime_options] (0x0100): [RID#248] No specific renewable lifetime requested. * (2026-06-13 9:05:18): [krb5_child[314077]] [set_lifetime_options] (0x0100): [RID#248] No specific lifetime requested. * (2026-06-13 9:05:18): [krb5_child[314077]] [set_canonicalize_option] (0x0100): [RID#248] Canonicalization is set to [true] * (2026-06-13 9:05:18): [krb5_child[314077]] [main] (0x0400): [RID#248] Will perform auth * (2026-06-13 9:05:18): [krb5_child[314077]] [main] (0x0400): [RID#248] Will perform online auth * (2026-06-13 9:05:18): [krb5_child[314077]] [tgt_req_child] (0x1000): [RID#248] Attempting to get a TGT * (2026-06-13 9:05:18): [krb5_child[314077]] [get_and_save_tgt] (0x0400): [RID#248] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:05:18): [krb5_child[314077]] [sss_krb5_responder] (0x4000): [RID#248] Got question [password]. * (2026-06-13 9:05:18): [krb5_child[314077]] [get_and_save_tgt] (0x0020): [RID#248] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:05:18): [krb5_child[314077]] [map_krb5_error] (0x0020): [RID#248] 2138: [-1765328360][Preauthentication failed] (2026-06-13 9:12:10): [krb5_child[344369]] [get_and_save_tgt] (0x0020): [RID#311] 2009: [-1765328360][Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2026-06-13 9:12:10): [krb5_child[344369]] [main] (0x0400): [RID#311] krb5_child started. * (2026-06-13 9:12:10): [krb5_child[344369]] [unpack_buffer] (0x1000): [RID#311] total buffer size: [97] * (2026-06-13 9:12:10): [krb5_child[344369]] [unpack_buffer] (0x0100): [RID#311] cmd [241 (auth)] uid [868600000] gid [868600000] validate [true] enterprise principal [false] offline [false] UPN [admin@OOO.TEST] * (2026-06-13 9:12:10): [krb5_child[344369]] [unpack_buffer] (0x2000): [RID#311] No old ccache * (2026-06-13 9:12:10): [krb5_child[344369]] [unpack_buffer] (0x0100): [RID#311] ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2026-06-13 9:12:10): [krb5_child[344369]] [k5c_precreate_ccache] (0x4000): [RID#311] Recreating ccache * (2026-06-13 9:12:10): [krb5_child[344369]] [k5c_setup_fast] (0x0100): [RID#311] Fast principal is set to [host/np0000072659.ooo.test@OOO.TEST] * (2026-06-13 9:12:10): [krb5_child[344369]] [find_principal_in_keytab] (0x4000): [RID#311] Trying to find principal host/np0000072659.ooo.test@OOO.TEST in keytab. * (2026-06-13 9:12:10): [krb5_child[344369]] [match_principal] (0x1000): [RID#311] Principal matched to the sample (host/np0000072659.ooo.test@OOO.TEST). * (2026-06-13 9:12:10): [krb5_child[344369]] [check_fast_ccache] (0x0200): [RID#311] FAST TGT is still valid. * (2026-06-13 9:12:10): [krb5_child[344369]] [become_user] (0x0200): [RID#311] Trying to become user [868600000][868600000]. * (2026-06-13 9:12:10): [krb5_child[344369]] [main] (0x2000): [RID#311] Running as [868600000][868600000]. * (2026-06-13 9:12:10): [krb5_child[344369]] [set_lifetime_options] (0x0100): [RID#311] No specific renewable lifetime requested. * (2026-06-13 9:12:10): [krb5_child[344369]] [set_lifetime_options] (0x0100): [RID#311] No specific lifetime requested. * (2026-06-13 9:12:10): [krb5_child[344369]] [set_canonicalize_option] (0x0100): [RID#311] Canonicalization is set to [true] * (2026-06-13 9:12:10): [krb5_child[344369]] [main] (0x0400): [RID#311] Will perform auth * (2026-06-13 9:12:10): [krb5_child[344369]] [main] (0x0400): [RID#311] Will perform online auth * (2026-06-13 9:12:10): [krb5_child[344369]] [tgt_req_child] (0x1000): [RID#311] Attempting to get a TGT * (2026-06-13 9:12:10): [krb5_child[344369]] [get_and_save_tgt] (0x0400): [RID#311] Attempting kinit for realm [OOO.TEST] * (2026-06-13 9:12:10): [krb5_child[344369]] [sss_krb5_responder] (0x4000): [RID#311] Got question [password]. * (2026-06-13 9:12:10): [krb5_child[344369]] [get_and_save_tgt] (0x0020): [RID#311] 2009: [-1765328360][Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2026-06-13 9:12:10): [krb5_child[344369]] [map_krb5_error] (0x0020): [RID#311] 2138: [-1765328360][Preauthentication failed]