$ env KRB5_TRACE=/dev/stdout kinit f1ash(a)FEDORAPROJECT.ORG
[9092] 1610393839.304594: Getting initial credentials for f1ash(a)FEDORAPROJECT.ORG
[9092] 1610393839.304596: Sending unauthenticated request
[9092] 1610393839.304597: Sending request (208 bytes) to
FEDORAPROJECT.ORG
[9092] 1610393839.304598: Resolving hostname
id.fedoraproject.org
[9092] 1610393840.487545: TLS certificate name matched "id.fedoraproject.org"
[9092] 1610393840.487546: Sending HTTPS request to https 209.132.190.2:443
[9092] 1610393841.217394: Received answer (311 bytes) from https 209.132.190.2:443
[9092] 1610393841.217395: Terminating TCP connection to https 209.132.190.2:443
[9092] 1610393841.217396: Sending DNS URI query for
_kerberos.FEDORAPROJECT.ORG.
[9092] 1610393841.217397: URI answer: 10 1
"krb5srv:m:kkdcp:https://id.fedoraproject.org/KdcProxy/"
[9092] 1610393841.217398: Response was from master KDC
[9092] 1610393841.217399: Received error from KDC: -1765328359/Additional
pre-authentication required
[9092] 1610393841.217402: Preauthenticating using KDC method data
[9092] 1610393841.217403: Processing preauth types: PA-PK-AS-REQ (16), PA-FX-FAST (136),
PA-ETYPE-INFO2 (19), PA-PKINIT-KX (147), PA-ENC-TIMESTAMP (2), PA_AS_FRESHNESS (150),
PA-FX-COOKIE (133)
[9092] 1610393841.217404: Selected etype info: etype aes256-cts, salt
"A7!R@cu?+A22.eW:", params ""
[9092] 1610393841.217405: Received cookie: MIT
Password for f1ash(a)FEDORAPROJECT.ORG:
[9092] 1610393929.526549: AS key obtained for encrypted timestamp: aes256-cts/6160
[9092] 1610393929.526551: Encrypted timestamp (for 1610393929.419454): plain
301AA011180F32303231303131313139333834395AA105020306667E, encrypted
6868A6998D492AF31C2C8997E8A776021F4846A0FFB7DC987FB018AD52ECFFADFC45F0CEC8842BE48070408C0718B5FC37294885BBA6F894
[9092] 1610393929.526552: Preauth module encrypted_timestamp (2) (real) returned:
0/Success
[9092] 1610393929.526553: Produced preauth for next request: PA-FX-COOKIE (133),
PA-ENC-TIMESTAMP (2)
[9092] 1610393929.526554: Sending request (303 bytes) to
FEDORAPROJECT.ORG
[9092] 1610393929.526555: Resolving hostname
id.fedoraproject.org
[9092] 1610393929.526556: TLS certificate name matched "id.fedoraproject.org"
[9092] 1610393929.526557: Sending HTTPS request to https 209.132.190.2:443
[9092] 1610393930.521673: Received answer (785 bytes) from https 209.132.190.2:443
[9092] 1610393930.521674: Terminating TCP connection to https 209.132.190.2:443
[9092] 1610393930.521675: Sending DNS URI query for
_kerberos.FEDORAPROJECT.ORG.
[9092] 1610393930.521676: URI answer: 10 1
"krb5srv:m:kkdcp:https://id.fedoraproject.org/KdcProxy/"
[9092] 1610393930.521677: Response was from master KDC
[9092] 1610393930.521678: Processing preauth types: PA-ETYPE-INFO2 (19)
[9092] 1610393930.521679: Selected etype info: etype aes256-cts, salt
"A7!R@cu?+A22.eW:", params ""
[9092] 1610393930.521680: Produced preauth for next request: (empty)
[9092] 1610393930.521681: AS key determined by preauth: aes256-cts/6160
[9092] 1610393930.521682: Decrypted AS reply; session key is: aes256-cts/02B1
[9092] 1610393930.521683: FAST negotiation: available
[9092] 1610393930.521684: Initializing KCM:1000 with default princ
f1ash(a)FEDORAPROJECT.ORG
[9092] 1610393930.521685: Storing f1ash(a)FEDORAPROJECT.ORG ->
krbtgt/FEDORAPROJECT.ORG(a)FEDORAPROJECT.ORG in KCM:1000
[9092] 1610393930.521686: Storing config in KCM:1000 for
krbtgt/FEDORAPROJECT.ORG(a)FEDORAPROJECT.ORG: fast_avail: yes
[9092] 1610393930.521687: Storing f1ash(a)FEDORAPROJECT.ORG ->
krb5_ccache_conf_data/fast_avail/krbtgt\/FEDORAPROJECT.ORG\@FEDORAPROJECT.ORG(a)X-CACHECONF:
in KCM:1000
[9092] 1610393930.521688: Storing config in KCM:1000 for
krbtgt/FEDORAPROJECT.ORG(a)FEDORAPROJECT.ORG: pa_type: 2
[9092] 1610393930.521689: Storing f1ash(a)FEDORAPROJECT.ORG ->
krb5_ccache_conf_data/pa_type/krbtgt\/FEDORAPROJECT.ORG\@FEDORAPROJECT.ORG(a)X-CACHECONF: in
KCM:1000
$