(Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [main] (0x0400): krb5_child started. (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [unpack_buffer] (0x1000): total buffer size: [68] (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [unpack_buffer] (0x0100): cmd [249] uid [1759001129] gid [1759001129] validate [true] enterprise principal [false] offline [false] UPN [supratik.goswami@AD.CORP.EXAMPLE.COM] (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [k5c_setup_fast] (0x0100): SSSD_KRB5_FAST_PRINCIPAL is set to [host/sup01.sg.aws.example.com@IPA.CORP.EXAMPLE.COM] (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [find_principal_in_keytab] (0x4000): Trying to find principal host/sup01.sg.aws.example.com@IPA.CORP.EXAMPLE.COM in keytab. (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [match_principal] (0x1000): Principal matched to the sample (host/sup01.sg.aws.example.com@IPA.CORP.EXAMPLE.COM). (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [check_fast_ccache] (0x0200): FAST TGT is still valid. (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [become_user] (0x0200): Trying to become user [1759001129][1759001129]. (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [main] (0x2000): Running as [1759001129][1759001129]. (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [k5c_setup] (0x2000): Running as [1759001129][1759001129]. (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true] (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [main] (0x0400): Will perform pre-auth (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [AD.CORP.EXAMPLE.COM] (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [sss_child_krb5_trace_cb] (0x4000): [26784] 1502083806.597814: Getting initial credentials for supratik.goswami@AD.CORP.EXAMPLE.COM (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [sss_child_krb5_trace_cb] (0x4000): [26784] 1502083806.597887: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IPA.CORP.EXAMPLE.COM (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [sss_child_krb5_trace_cb] (0x4000): [26784] 1502083806.597948: Retrieving host/sup01.sg.aws.example.com@IPA.CORP.EXAMPLE.COM -> krb5_ccache_conf_data/fast_avail/krbtgt\/AD.CORP.EXAMPLE.COM\@AD.CORP.EXAMPLE.COM@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IPA.CORP.EXAMPLE.COM with result: -1765328243/Matching credential not found (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [sss_child_krb5_trace_cb] (0x4000): [26784] 1502083806.598013: Sending request (192 bytes) to AD.CORP.EXAMPLE.COM (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [sss_child_krb5_trace_cb] (0x4000): [26784] 1502083806.598140: Resolving hostname ad01.ad.corp.example.com (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [get_and_save_tgt] (0x0400): krb5_get_init_creds_password returned [-1765328228} during pre-auth. (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [k5c_send_data] (0x0200): Received error code 0 (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [pack_response_packet] (0x2000): response packet size: [4] (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [k5c_send_data] (0x4000): Response sent. (Mon Aug 7 05:30:06 2017) [[sssd[krb5_child[26784]]]] [main] (0x0400): krb5_child completed successfully (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [main] (0x0400): krb5_child started. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [unpack_buffer] (0x1000): total buffer size: [184] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [unpack_buffer] (0x0100): cmd [241] uid [1759001129] gid [1759001129] validate [true] enterprise principal [false] offline [false] UPN [supratik.goswami@AD.CORP.EXAMPLE.COM] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_1759001129_XXXXXX] old_ccname: [FILE:/tmp/krb5cc_1759001129_XXXXXX] keytab: [/etc/krb5.keytab] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [old_ccache_valid] (0x0400): Saved ccache FILE:/tmp/krb5cc_1759001129_XXXXXX doesn't exist, ignoring (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [FILE:/tmp/krb5cc_1759001129_XXXXXX] and is not active and TGT is not valid. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [k5c_precreate_ccache] (0x4000): Recreating ccache (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [k5c_setup_fast] (0x0100): SSSD_KRB5_FAST_PRINCIPAL is set to [host/sup01.sg.aws.example.com@IPA.CORP.EXAMPLE.COM] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [find_principal_in_keytab] (0x4000): Trying to find principal host/sup01.sg.aws.example.com@IPA.CORP.EXAMPLE.COM in keytab. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [match_principal] (0x1000): Principal matched to the sample (host/sup01.sg.aws.example.com@IPA.CORP.EXAMPLE.COM). (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [check_fast_ccache] (0x0200): FAST TGT is still valid. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [become_user] (0x0200): Trying to become user [1759001129][1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [main] (0x2000): Running as [1759001129][1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [k5c_setup] (0x2000): Running as [1759001129][1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [main] (0x0400): Will perform online auth (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [AD.CORP.EXAMPLE.COM] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [sss_child_krb5_trace_cb] (0x4000): [26785] 1502083811.711333: Getting initial credentials for supratik.goswami@AD.CORP.EXAMPLE.COM (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [sss_child_krb5_trace_cb] (0x4000): [26785] 1502083811.711406: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IPA.CORP.EXAMPLE.COM (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [sss_child_krb5_trace_cb] (0x4000): [26785] 1502083811.711468: Retrieving host/sup01.sg.aws.example.com@IPA.CORP.EXAMPLE.COM -> krb5_ccache_conf_data/fast_avail/krbtgt\/AD.CORP.EXAMPLE.COM\@AD.CORP.EXAMPLE.COM@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IPA.CORP.EXAMPLE.COM with result: -1765328243/Matching credential not found (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [sss_child_krb5_trace_cb] (0x4000): [26785] 1502083811.711534: Sending request (192 bytes) to AD.CORP.EXAMPLE.COM (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [sss_child_krb5_trace_cb] (0x4000): [26785] 1502083811.711658: Resolving hostname ad01.ad.corp.example.com (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [get_and_save_tgt] (0x0020): 1234: [-1765328228][Cannot contact any KDC for realm 'AD.CORP.EXAMPLE.COM'] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [map_krb5_error] (0x0020): 1303: [-1765328228][Cannot contact any KDC for realm 'AD.CORP.EXAMPLE.COM'] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [k5c_send_data] (0x0200): Received error code 1432158222 (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [pack_response_packet] (0x2000): response packet size: [4] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [k5c_send_data] (0x4000): Response sent. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26785]]]] [main] (0x0400): krb5_child completed successfully (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [main] (0x0400): krb5_child started. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [unpack_buffer] (0x1000): total buffer size: [184] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [unpack_buffer] (0x0100): cmd [241] uid [1759001129] gid [1759001129] validate [true] enterprise principal [false] offline [true] UPN [supratik.goswami@AD.CORP.EXAMPLE.COM] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_1759001129_XXXXXX] old_ccname: [FILE:/tmp/krb5cc_1759001129_XXXXXX] keytab: [/etc/krb5.keytab] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [old_ccache_valid] (0x0400): Saved ccache FILE:/tmp/krb5cc_1759001129_XXXXXX doesn't exist, ignoring (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [FILE:/tmp/krb5cc_1759001129_XXXXXX] and is not active and TGT is not valid. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [k5c_precreate_ccache] (0x4000): Recreating ccache (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [become_user] (0x0200): Trying to become user [1759001129][1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [main] (0x2000): Running as [1759001129][1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [become_user] (0x0200): Trying to become user [1759001129][1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [become_user] (0x0200): Already user [1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [k5c_setup] (0x2000): Running as [1759001129][1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [main] (0x0400): Will perform offline auth (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [create_empty_ccache] (0x1000): Creating empty ccache (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [create_empty_cred] (0x2000): Created empty krb5_creds. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [create_ccache] (0x0020): 735: [13][Permission denied] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [map_krb5_error] (0x0020): 1303: [1432158209][Unknown code UUz 1] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [k5c_send_data] (0x0200): Received error code 1432158209 (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [pack_response_packet] (0x2000): response packet size: [4] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [k5c_send_data] (0x4000): Response sent. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26786]]]] [main] (0x0400): krb5_child completed successfully (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [main] (0x0400): krb5_child started. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [unpack_buffer] (0x1000): total buffer size: [68] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [unpack_buffer] (0x0100): cmd [249] uid [1759001129] gid [1759001129] validate [true] enterprise principal [false] offline [true] UPN [supratik.goswami@AD.CORP.EXAMPLE.COM] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [become_user] (0x0200): Trying to become user [1759001129][1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [main] (0x2000): Running as [1759001129][1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [become_user] (0x0200): Trying to become user [1759001129][1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [become_user] (0x0200): Already user [1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [k5c_setup] (0x2000): Running as [1759001129][1759001129]. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [main] (0x0400): Will perform pre-auth (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [AD.CORP.EXAMPLE.COM] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [sss_child_krb5_trace_cb] (0x4000): [26788] 1502083811.772060: Getting initial credentials for supratik.goswami@AD.CORP.EXAMPLE.COM (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [sss_child_krb5_trace_cb] (0x4000): [26788] 1502083811.772173: Sending request (192 bytes) to AD.CORP.EXAMPLE.COM (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [sss_child_krb5_trace_cb] (0x4000): [26788] 1502083811.772302: Resolving hostname ad01.ad.corp.example.com (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [get_and_save_tgt] (0x0400): krb5_get_init_creds_password returned [-1765328228} during pre-auth. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [k5c_send_data] (0x0200): Received error code 0 (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [pack_response_packet] (0x2000): response packet size: [4] (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [k5c_send_data] (0x4000): Response sent. (Mon Aug 7 05:30:11 2017) [[sssd[krb5_child[26788]]]] [main] (0x0400): krb5_child completed successfully (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [main] (0x0400): krb5_child started. (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [unpack_buffer] (0x1000): total buffer size: [184] (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [unpack_buffer] (0x0100): cmd [241] uid [1759001129] gid [1759001129] validate [true] enterprise principal [false] offline [true] UPN [supratik.goswami@AD.CORP.EXAMPLE.COM] (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_1759001129_XXXXXX] old_ccname: [FILE:/tmp/krb5cc_1759001129_XXXXXX] keytab: [/etc/krb5.keytab] (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [old_ccache_valid] (0x0400): Saved ccache FILE:/tmp/krb5cc_1759001129_XXXXXX doesn't exist, ignoring (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [FILE:/tmp/krb5cc_1759001129_XXXXXX] and is not active and TGT is not valid. (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [k5c_precreate_ccache] (0x4000): Recreating ccache (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [become_user] (0x0200): Trying to become user [1759001129][1759001129]. (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [main] (0x2000): Running as [1759001129][1759001129]. (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [become_user] (0x0200): Trying to become user [1759001129][1759001129]. (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [become_user] (0x0200): Already user [1759001129]. (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [k5c_setup] (0x2000): Running as [1759001129][1759001129]. (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [main] (0x0400): Will perform offline auth (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [create_empty_ccache] (0x1000): Creating empty ccache (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [create_empty_cred] (0x2000): Created empty krb5_creds. (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [create_ccache] (0x0020): 735: [13][Permission denied] (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [map_krb5_error] (0x0020): 1303: [1432158209][Unknown code UUz 1] (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [k5c_send_data] (0x0200): Received error code 1432158209 (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [pack_response_packet] (0x2000): response packet size: [4] (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [k5c_send_data] (0x4000): Response sent. (Mon Aug 7 05:30:14 2017) [[sssd[krb5_child[26789]]]] [main] (0x0400): krb5_child completed successfully