Am Wed, Jan 04, 2023 at 01:23:53PM -0300 schrieb tizo:
>
> Hi,
>
> 'Decrypt integrity check failed' typically means that the wrong
> Kerberos password or key was used. Since you are using FAST it might
> either be the user password the user is typing in or the host key which
> was used to setup the FAST tunnel. Was the host key updated shortly
> before the issue happened?
>
> Can you add 'debug_level = 9' to the [domain/...] section of sssd.conf,
> restart SSSD and waiting until the issue occurs again? With this
> debug_level a details Kerberos trace should be in krb5_child.log which
> might help to identify with specific operation fails.
>
> bye,
> Sumit
>
Sumit,
I am quite sure that the user password is right, as I have tried in
both clients several times in a row, copying and pasting it. The
client that works always works, the other sometimes works. The client
that sometimes works is new, so the host key was recently created. I
have also tried uninstalling ipa in the client, and deleting the host
from IPA, but the problem was always present.
I have added the debug line to sssd.conf, and I am sending
krb5_child.log with one failed login (at 13:19) and one working login
(at 13:20) with the same user, as the problem is very easy to
reproduce.
Hi,
it looks like if the client is talking to 10.2.100.11 it is
working as expected but with 10.12.100.1 it fails. Are there any details
in the logs of those servers?
bye,
Sumit
Thanks very much.
(2023-01-04 13:19:02): [krb5_child[4908]] [main] (0x0400): [RID#5]
krb5_child started.
(2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x1000): [RID#5] total buffer
size: [162]
(2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x0100): [RID#5] cmd [241
(auth)] uid [700000003] gid [700000005] validate [true] enterprise principal [false]
offline [false] UPN [mduffour(a)SMB.FNR.GUB.UY]
(2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x0100): [RID#5] ccname:
[KEYRING:persistent:700000003] old_ccname: [KEYRING:persistent:700000003] keytab:
[/etc/krb5.keytab]
(2023-01-04 13:19:02): [krb5_child[4908]] [switch_creds] (0x0200): [RID#5] Switch user to
[700000003][700000005].
(2023-01-04 13:19:02): [krb5_child[4908]] [sss_krb5_cc_verify_ccache] (0x2000): [RID#5]
TGT not found or expired.
(2023-01-04 13:19:02): [krb5_child[4908]] [switch_creds] (0x0200): [RID#5] Switch user to
[0][0].
(2023-01-04 13:19:02): [krb5_child[4908]] [k5c_check_old_ccache] (0x4000): [RID#5]
Ccache_file is [KEYRING:persistent:700000003] and is not active and TGT is valid.
(2023-01-04 13:19:02): [krb5_child[4908]] [k5c_precreate_ccache] (0x4000): [RID#5]
Recreating ccache
(2023-01-04 13:19:02): [krb5_child[4908]] [k5c_setup_fast] (0x0100): [RID#5] Fast
principal is set to [host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY]
(2023-01-04 13:19:02): [krb5_child[4908]] [find_principal_in_keytab] (0x4000): [RID#5]
Trying to find principal host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY in keytab.
(2023-01-04 13:19:02): [krb5_child[4908]] [match_principal] (0x1000): [RID#5] Principal
matched to the sample (host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY).
(2023-01-04 13:19:02): [krb5_child[4908]] [check_fast_ccache] (0x0200): [RID#5] FAST TGT
is still valid.
(2023-01-04 13:19:03): [krb5_child[4908]] [privileged_krb5_setup] (0x0080): [RID#5]
Cannot open the PAC responder socket
(2023-01-04 13:19:03): [krb5_child[4908]] [become_user] (0x0200): [RID#5] Trying to
become user [700000003][700000005].
(2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x2000): [RID#5] Running as
[700000003][700000005].
(2023-01-04 13:19:03): [krb5_child[4908]] [set_lifetime_options] (0x0100): [RID#5] No
specific renewable lifetime requested.
(2023-01-04 13:19:03): [krb5_child[4908]] [set_lifetime_options] (0x0100): [RID#5] No
specific lifetime requested.
(2023-01-04 13:19:03): [krb5_child[4908]] [set_canonicalize_option] (0x0100): [RID#5]
Canonicalization is set to [true]
(2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x0400): [RID#5] Will perform auth
(2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x0400): [RID#5] Will perform online
auth
(2023-01-04 13:19:03): [krb5_child[4908]] [tgt_req_child] (0x1000): [RID#5] Attempting to
get a TGT
(2023-01-04 13:19:03): [krb5_child[4908]] [get_and_save_tgt] (0x0400): [RID#5] Attempting
kinit for realm [SMB.FNR.GUB.UY]
(2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849143.938451: Getting initial credentials for mduffour(a)SMB.FNR.GUB.UY
(2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849143.938452: Error loading plugin module pkinit: 2/unable to find plugin
[/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/pkinit.so]: No such file or directory
(2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849143.938453: FAST armor ccache:
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
(2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849143.938454: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY(a)X-CACHECONF: from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849143.938456: Sending unauthenticated request
(2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849143.938457: Sending request (192 bytes) to SMB.FNR.GUB.UY
(2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849143.938458: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849143.938459: No URI records found
(2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849143.938460: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015791: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015792: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015793: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015794: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015795: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015796: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015797: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015798: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015799: Initiating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015800: Sending TCP request to stream 10.12.100.1:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015801: Received answer (319 bytes) from stream 10.12.100.1:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015802: Terminating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015803: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015804: No URI records found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015805: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015806: No SRV records found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015807: Response was not from primary KDC
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015808: Received error from KDC: -1765328359/Additional
pre-authentication required
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015809: Upgrading to FAST due to presence of PA_FX_FAST in reply
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015810: FAST armor ccache:
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015811: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY(a)X-CACHECONF: from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015812: Getting credentials
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY -> krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY
using ccache MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015813: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krb5_ccache_conf_data/start_realm@X-CACHECONF: from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015814: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015815: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015816: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/IDM.FNR.GUB.UY(a)IDM.FNR.GUB.UY from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 0/Success
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015817: Starting with TGT for client realm:
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY -> krbtgt/IDM.FNR.GUB.UY(a)IDM.FNR.GUB.UY
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015818: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015819: Requesting TGT krbtgt/SMB.FNR.GUB.UY(a)IDM.FNR.GUB.UY using TGT
krbtgt/IDM.FNR.GUB.UY(a)IDM.FNR.GUB.UY
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015820: Generated subkey for TGS request: aes256-cts/6E38
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015821: etypes requested in TGS request: aes256-cts, aes128-cts,
aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015823: Encoding request body and padata into FAST request
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015824: Sending request (2175 bytes) to IDM.FNR.GUB.UY
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015825: Initiating TCP connection to stream 10.12.100.2:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015826: Sending TCP request to stream 10.12.100.2:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015827: Received answer (2087 bytes) from stream 10.12.100.2:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015828: Terminating TCP connection to stream 10.12.100.2:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015829: Response was from primary KDC
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015830: Decoding FAST response
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015831: FAST reply key: aes256-cts/05ED
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015832: TGS reply is for host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY
-> krbtgt/SMB.FNR.GUB.UY(a)IDM.FNR.GUB.UY with session key aes256-cts/7394
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015833: TGS request result: 0/Success
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015834: Received TGT for SMB.FNR.GUB.UY; advancing current realm
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015835: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015836: Requesting TGT krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY using TGT
krbtgt/SMB.FNR.GUB.UY(a)IDM.FNR.GUB.UY
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015837: Generated subkey for TGS request: aes256-cts/E345
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015838: etypes requested in TGS request: aes256-cts, aes128-cts,
aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015840: Encoding request body and padata into FAST request
G
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015841: Sending request (2139 bytes) to SMB.FNR.GUB.UY
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015842: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015843: No URI records found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015844: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015845: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015846: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015847: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015848: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015849: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015850: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015851: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015852: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015853: Initiating TCP connection to stream 10.2.100.11:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015854: Sending TCP request to stream 10.2.100.11:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015855: Received answer (1979 bytes) from stream 10.2.100.11:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015856: Terminating TCP connection to stream 10.2.100.11:88
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015857: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015858: No URI records found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015859: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015860: No SRV records found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015861: Response was not from primary KDC
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015862: Decoding FAST response
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015863: FAST reply key: aes256-cts/FAF7
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015864: TGS reply is for host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY
-> krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY with session key aes256-cts/5531
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015865: TGS request result: 0/Success
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015866: Storing host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY in MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015867: Received TGT for service realm:
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015868: Requesting tickets for krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY,
referrals on
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015869: Generated subkey for TGS request: aes256-cts/CC16
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015870: etypes requested in TGS request: aes256-cts, aes128-cts,
aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015872: Encoding request body and padata into FAST request
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015873: Sending request (2031 bytes) to SMB.FNR.GUB.UY
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015874: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015875: No URI records found
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015876: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015877: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015878: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015879: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015880: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015881: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015882: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015883: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015884: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849144.015885: Initiating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132204: Sending TCP request to stream 10.12.100.1:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132205: Received answer (2003 bytes) from stream 10.12.100.1:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132206: Terminating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132207: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132208: No URI records found
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132209: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132210: No SRV records found
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132211: Response was not from primary KDC
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132212: Decoding FAST response
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132213: FAST reply key: aes256-cts/CFDC
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132214: TGS reply is for host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY
-> krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY with session key aes256-cts/0E8E
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132215: TGS request result: 0/Success
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132216: Received creds for desired service
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132217: Storing host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY in MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132218: Armor ccache sesion key: aes256-cts/0E8E
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132220: Creating authenticator for
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY -> krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY,
seqnum 0, subkey aes256-cts/CB80, session key aes256-cts/0E8E
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132222: FAST armor key: aes256-cts/6F88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132224: Sending unauthenticated request
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132225: Encoding request body and padata into FAST request
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132226: Sending request (2090 bytes) to SMB.FNR.GUB.UY
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132227: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132228: No URI records found
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132229: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132230: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132231: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132232: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132233: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132234: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132235: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132236: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132237: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132238: Initiating TCP connection to stream 10.2.100.11:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132239: Sending TCP request to stream 10.2.100.11:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132240: Received answer (676 bytes) from stream 10.2.100.11:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132241: Terminating TCP connection to stream 10.2.100.11:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132242: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132243: No URI records found
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132244: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132245: No SRV records found
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132246: Response was not from primary KDC
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132247: Received error from KDC: -1765328359/Additional
pre-authentication required
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132248: Decoding FAST response
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132251: Preauthenticating using KDC method data
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132252: Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD
(15), PA-PKINIT-KX (147), PA-ENCRYPTED-CHALLENGE (138), PA-FX-FAST (136), 655,
PA-ETYPE-INFO2 (19), PA-FX-COOKIE (133), PA-FX-ERROR (137)
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132253: Selected etype info: etype aes256-cts, salt
"SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00"
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132254: Received cookie:
0S\xa0\x06\x0c\x04H5L1\xa1I0G\xa0\x03\x02\x01\x12\xa2@\x04>\xa90\x81k~Js*\xdd\xe1\xda^\x8c\xe1{s\xe0O\xe7\xf7\x86
>\xf5\x17*\x9c\xf2L*\xa2\xaeB{\x00\xa0\xee\xdd\xde\x84\xb3\xc5\x99&S\xab\xaf\xbd|\x89\x19x_Ko?\x86\x14(*\x9f\xba
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_krb5_responder] (0x4000): [RID#5] Got
question [password].
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132256: Preauth module encrypted_challenge (138) (real) returned:
0/Success
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132257: Produced preauth for next request: PA-FX-COOKIE (133),
PA-ENCRYPTED-CHALLENGE (138)
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132258: Encoding request body and padata into FAST request
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132259: Sending request (2273 bytes) to SMB.FNR.GUB.UY
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132260: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132261: No URI records found
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132262: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132263: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132264: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132265: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132266: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132267: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132268: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132269: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132270: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132271: Initiating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132272: Sending TCP request to stream 10.12.100.1:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132273: Received answer (373 bytes) from stream 10.12.100.1:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132274: Terminating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132275: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132276: No URI records found
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132277: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132278: No SRV records found
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132279: Response was not from primary KDC
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132280: Received error from KDC: -1765328353/Decrypt integrity check
failed
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132281: Decoding FAST response
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132283: Recovering from KDC error 31 using preauth mech
PA-ENCRYPTED-CHALLENGE (138)
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132284: Preauth tryagain input types (138): PA-FX-COOKIE (133),
PA-FX-ERROR (137)
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132285: Preauth module encrypted_challenge (138) tryagain returned:
0/Success
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132286: Retrying AS request with primary KDC
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132287: Getting initial credentials for mduffour(a)SMB.FNR.GUB.UY
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132288: FAST armor ccache:
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132289: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY(a)X-CACHECONF: from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132291: Sending unauthenticated request
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132292: Sending request (192 bytes) to SMB.FNR.GUB.UY (primary)
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132293: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132294: No URI records found
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132295: Sending DNS SRV query for _kerberos-master._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132296: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5]
[4908] 1672849145.132297: No SRV records found
(2023-01-04 13:19:05): [krb5_child[4908]] [get_and_save_tgt] (0x0020): [RID#5] 1725:
[-1765328353][Decrypt integrity check failed]
(2023-01-04 13:19:05): [krb5_child[4908]] [map_krb5_error] (0x0020): [RID#5] 1854:
[-1765328353][Decrypt integrity check failed]
(2023-01-04 13:19:05): [krb5_child[4908]] [k5c_send_data] (0x0200): [RID#5] Received
error code 1432158227
(2023-01-04 13:19:05): [krb5_child[4908]] [pack_response_packet] (0x2000): [RID#5]
response packet size: [4]
(2023-01-04 13:19:05): [krb5_child[4908]] [k5c_send_data] (0x4000): [RID#5] Response
sent.
(2023-01-04 13:19:05): [krb5_child[4908]] [main] (0x0400): [RID#5] krb5_child completed
successfully
(2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] krb5_child started.
(2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x1000): [RID#7] total buffer
size: [162]
(2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x0100): [RID#7] cmd [241
(auth)] uid [700000003] gid [700000005] validate [true] enterprise principal [false]
offline [false] UPN [mduffour(a)SMB.FNR.GUB.UY]
(2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x0100): [RID#7] ccname:
[KEYRING:persistent:700000003] old_ccname: [KEYRING:persistent:700000003] keytab:
[/etc/krb5.keytab]
(2023-01-04 13:20:09): [krb5_child[4947]] [switch_creds] (0x0200): [RID#7] Switch user to
[700000003][700000005].
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_krb5_cc_verify_ccache] (0x2000): [RID#7]
TGT not found or expired.
(2023-01-04 13:20:09): [krb5_child[4947]] [switch_creds] (0x0200): [RID#7] Switch user to
[0][0].
(2023-01-04 13:20:09): [krb5_child[4947]] [k5c_check_old_ccache] (0x4000): [RID#7]
Ccache_file is [KEYRING:persistent:700000003] and is not active and TGT is valid.
(2023-01-04 13:20:09): [krb5_child[4947]] [k5c_precreate_ccache] (0x4000): [RID#7]
Recreating ccache
(2023-01-04 13:20:09): [krb5_child[4947]] [k5c_setup_fast] (0x0100): [RID#7] Fast
principal is set to [host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY]
(2023-01-04 13:20:09): [krb5_child[4947]] [find_principal_in_keytab] (0x4000): [RID#7]
Trying to find principal host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY in keytab.
(2023-01-04 13:20:09): [krb5_child[4947]] [match_principal] (0x1000): [RID#7] Principal
matched to the sample (host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY).
(2023-01-04 13:20:09): [krb5_child[4947]] [check_fast_ccache] (0x0200): [RID#7] FAST TGT
is still valid.
(2023-01-04 13:20:09): [krb5_child[4947]] [privileged_krb5_setup] (0x0080): [RID#7]
Cannot open the PAC responder socket
(2023-01-04 13:20:09): [krb5_child[4947]] [become_user] (0x0200): [RID#7] Trying to
become user [700000003][700000005].
(2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x2000): [RID#7] Running as
[700000003][700000005].
(2023-01-04 13:20:09): [krb5_child[4947]] [set_lifetime_options] (0x0100): [RID#7] No
specific renewable lifetime requested.
(2023-01-04 13:20:09): [krb5_child[4947]] [set_lifetime_options] (0x0100): [RID#7] No
specific lifetime requested.
(2023-01-04 13:20:09): [krb5_child[4947]] [set_canonicalize_option] (0x0100): [RID#7]
Canonicalization is set to [true]
(2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] Will perform auth
(2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] Will perform online
auth
(2023-01-04 13:20:09): [krb5_child[4947]] [tgt_req_child] (0x1000): [RID#7] Attempting to
get a TGT
(2023-01-04 13:20:09): [krb5_child[4947]] [get_and_save_tgt] (0x0400): [RID#7] Attempting
kinit for realm [SMB.FNR.GUB.UY]
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814719: Getting initial credentials for mduffour(a)SMB.FNR.GUB.UY
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814720: Error loading plugin module pkinit: 2/unable to find plugin
[/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/pkinit.so]: No such file or directory
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814721: FAST armor ccache:
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814722: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY(a)X-CACHECONF: from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814724: Sending unauthenticated request
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814725: Sending request (192 bytes) to SMB.FNR.GUB.UY
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814726: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814727: No URI records found
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814728: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814729: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814730: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814731: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814732: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814733: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814734: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814735: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814736: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814737: Initiating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814738: Sending TCP request to stream 10.12.100.1:88
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814739: Received answer (319 bytes) from stream 10.12.100.1:88
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814740: Terminating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814741: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814742: No URI records found
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814743: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814744: No SRV records found
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814745: Response was not from primary KDC
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814746: Received error from KDC: -1765328359/Additional
pre-authentication required
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814747: Upgrading to FAST due to presence of PA_FX_FAST in reply
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814748: FAST armor ccache:
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814749: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY(a)X-CACHECONF: from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814750: Getting credentials
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY -> krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY
using ccache MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814751: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krb5_ccache_conf_data/start_realm@X-CACHECONF: from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814752: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814753: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814754: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/IDM.FNR.GUB.UY(a)IDM.FNR.GUB.UY from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 0/Success
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814755: Starting with TGT for client realm:
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY -> krbtgt/IDM.FNR.GUB.UY(a)IDM.FNR.GUB.UY
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814756: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814757: Requesting TGT krbtgt/SMB.FNR.GUB.UY(a)IDM.FNR.GUB.UY using TGT
krbtgt/IDM.FNR.GUB.UY(a)IDM.FNR.GUB.UY
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814758: Generated subkey for TGS request: aes256-cts/AD9C
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814759: etypes requested in TGS request: aes256-cts, aes128-cts,
aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814761: Encoding request body and padata into FAST request
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814762: Sending request (2178 bytes) to IDM.FNR.GUB.UY
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814763: Initiating TCP connection to stream 10.2.100.13:88
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814764: Sending TCP request to stream 10.2.100.13:88
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814765: Received answer (2089 bytes) from stream 10.2.100.13:88
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814766: Terminating TCP connection to stream 10.2.100.13:88
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814767: Response was from primary KDC
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814768: Decoding FAST response
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814769: FAST reply key: aes256-cts/CB51
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814770: TGS reply is for host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY
-> krbtgt/SMB.FNR.GUB.UY(a)IDM.FNR.GUB.UY with session key aes256-cts/27BE
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814771: TGS request result: 0/Success
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814772: Received TGT for SMB.FNR.GUB.UY; advancing current realm
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814773: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY from
MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching
credential not found
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814774: Requesting TGT krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY using TGT
krbtgt/SMB.FNR.GUB.UY(a)IDM.FNR.GUB.UY
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814775: Generated subkey for TGS request: aes256-cts/542B
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814776: etypes requested in TGS request: aes256-cts, aes128-cts,
aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814778: Encoding request body and padata into FAST request
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814779: Sending request (2140 bytes) to SMB.FNR.GUB.UY
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814780: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814781: No URI records found
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814782: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814783: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814784: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814785: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814786: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814787: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814788: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814789: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814790: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849209.814791: Initiating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007134: Sending TCP request to stream 10.12.100.1:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007135: Received answer (1979 bytes) from stream 10.12.100.1:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007136: Terminating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007137: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007138: No URI records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007139: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007140: No SRV records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007141: Response was not from primary KDC
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007142: Decoding FAST response
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007143: FAST reply key: aes256-cts/C7D2
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007144: TGS reply is for host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY
-> krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY with session key aes256-cts/4D87
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007145: TGS request result: 0/Success
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007146: Storing host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY in MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007147: Received TGT for service realm:
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007148: Requesting tickets for krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY,
referrals on
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007149: Generated subkey for TGS request: aes256-cts/8B4A
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007150: etypes requested in TGS request: aes256-cts, aes128-cts,
aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007152: Encoding request body and padata into FAST request
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007153: Sending request (2031 bytes) to SMB.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007154: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007155: No URI records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007156: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007157: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007158: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007159: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007160: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007161: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007162: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007163: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007164: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007165: Initiating TCP connection to stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007166: Sending TCP request to stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007167: Received answer (2003 bytes) from stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007168: Terminating TCP connection to stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007169: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007170: No URI records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007171: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007172: No SRV records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007173: Response was not from primary KDC
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007174: Decoding FAST response
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007175: FAST reply key: aes256-cts/E6AF
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007176: TGS reply is for host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY
-> krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY with session key aes256-cts/4E13
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007177: TGS request result: 0/Success
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007178: Received creds for desired service
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007179: Storing host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY in MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007180: Armor ccache sesion key: aes256-cts/4E13
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007182: Creating authenticator for
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY -> krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY,
seqnum 0, subkey aes256-cts/63B9, session key aes256-cts/4E13
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007184: FAST armor key: aes256-cts/D363
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007186: Sending unauthenticated request
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007187: Encoding request body and padata into FAST request
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007188: Sending request (2089 bytes) to SMB.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007189: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007190: No URI records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007191: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007192: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007193: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007194: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007195: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007196: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007197: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007198: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007199: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007200: Initiating TCP connection to stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007201: Sending TCP request to stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007202: Received answer (676 bytes) from stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007203: Terminating TCP connection to stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007204: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007205: No URI records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007206: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007207: No SRV records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007208: Response was not from primary KDC
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007209: Received error from KDC: -1765328359/Additional
pre-authentication required
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007210: Decoding FAST response
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007213: Preauthenticating using KDC method data
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007214: Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD
(15), PA-PKINIT-KX (147), PA-ENCRYPTED-CHALLENGE (138), PA-FX-FAST (136), 655,
PA-ETYPE-INFO2 (19), PA-FX-COOKIE (133), PA-FX-ERROR (137)
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007215: Selected etype info: etype aes256-cts, salt
"SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00"
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007216: Received cookie:
0S\xa0\x06\x0c\x04H5L1\xa1I0G\xa0\x03\x02\x01\x12\xa2@\x04>\xa5\xa4r\xfeV\x8f\xeb\xf7i\x92\xc0\xf0\xe6\xda&\xf9\x81m\xa9s&)\x15,\xc4\x953D\xb24\x8d\xd2\x94\xbb\xbb\xbf\x08*U\xb0K\x7f\xc2IF\xf4\x88\xd2\xd3\xfdY\x80d\xd0\xdf\xd9\xee\x9e\x0b7h'
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_krb5_responder] (0x4000): [RID#7] Got
question [password].
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007218: Preauth module encrypted_challenge (138) (real) returned:
0/Success
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007219: Produced preauth for next request: PA-FX-COOKIE (133),
PA-ENCRYPTED-CHALLENGE (138)
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007220: Encoding request body and padata into FAST request
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007221: Sending request (2272 bytes) to SMB.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007222: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007223: No URI records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007224: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007225: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007226: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007227: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007228: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007229: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007230: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007231: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007232: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007233: Initiating TCP connection to stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007234: Sending TCP request to stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007235: Received answer (1954 bytes) from stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007236: Terminating TCP connection to stream 10.2.100.11:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007237: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007238: No URI records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007239: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007240: No SRV records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007241: Response was not from primary KDC
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007242: Decoding FAST response
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007243: Processing preauth types: PA-ENCRYPTED-CHALLENGE (138),
PA-ETYPE-INFO2 (19)
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007244: Selected etype info: etype aes256-cts, salt
"SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00"
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007245: Preauth module encrypted_challenge (138) (real) returned:
0/Success
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007246: Produced preauth for next request: (empty)
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007247: AS key determined by preauth: aes256-cts/486D
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007248: FAST reply key: aes256-cts/E923
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007249: Decrypted AS reply; session key is: aes256-cts/7B52
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007250: FAST negotiation: available
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_krb5_expire_callback_func] (0x2000):
[RID#7] exp_time: [10270225]
(2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x2000): [RID#7] Keytab entry
with the realm of the credential not found in keytab. Using the last entry.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007251: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY from
MEMORY:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007252: Resolving unique ccache of type MEMORY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007253: Initializing MEMORY:azeA6F5 with default princ
mduffour(a)SMB.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007254: Storing mduffour(a)SMB.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY in MEMORY:azeA6F5
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007255: Getting credentials mduffour(a)SMB.FNR.GUB.UY ->
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY using ccache MEMORY:azeA6F5
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007256: Retrieving mduffour(a)SMB.FNR.GUB.UY ->
krb5_ccache_conf_data/start_realm@X-CACHECONF: from MEMORY:azeA6F5 with result:
-1765328243/Matching credential not found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007257: Retrieving mduffour(a)SMB.FNR.GUB.UY ->
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY from MEMORY:azeA6F5 with result:
-1765328243/Matching credential not found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007258: Retrieving mduffour(a)SMB.FNR.GUB.UY ->
krbtgt/IDM.FNR.GUB.UY(a)IDM.FNR.GUB.UY from MEMORY:azeA6F5 with result: -1765328243/Matching
credential not found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007259: Retrieving mduffour(a)SMB.FNR.GUB.UY ->
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY from MEMORY:azeA6F5 with result: 0/Success
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007260: Starting with TGT for client realm: mduffour(a)SMB.FNR.GUB.UY
-> krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007261: Retrieving mduffour(a)SMB.FNR.GUB.UY ->
krbtgt/IDM.FNR.GUB.UY(a)IDM.FNR.GUB.UY from MEMORY:azeA6F5 with result: -1765328243/Matching
credential not found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007262: Requesting TGT krbtgt/IDM.FNR.GUB.UY(a)SMB.FNR.GUB.UY using TGT
krbtgt/SMB.FNR.GUB.UY(a)SMB.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007263: Generated subkey for TGS request: aes256-cts/4D40
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007264: etypes requested in TGS request: aes256-cts, aes128-cts,
aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007266: Encoding request body and padata into FAST request
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007267: Sending request (1785 bytes) to SMB.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007268: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007269: No URI records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007270: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007271: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007272: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007273: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007274: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007275: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy."
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007276: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007277: Resolving hostname samba01.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007278: Resolving hostname samba02.smb.fnr.gub.uy.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007279: Initiating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007280: Sending TCP request to stream 10.12.100.1:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007281: Received answer (1747 bytes) from stream 10.12.100.1:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007282: Terminating TCP connection to stream 10.12.100.1:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007283: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007284: No URI records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007285: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007286: No SRV records found
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007287: Response was not from primary KDC
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007288: Decoding FAST response
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007289: FAST reply key: aes256-cts/60C7
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007290: TGS reply is for mduffour(a)SMB.FNR.GUB.UY ->
krbtgt/IDM.FNR.GUB.UY(a)SMB.FNR.GUB.UY with session key aes256-cts/FF01
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007291: TGS request result: 0/Success
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007292: Storing mduffour(a)SMB.FNR.GUB.UY ->
krbtgt/IDM.FNR.GUB.UY(a)SMB.FNR.GUB.UY in MEMORY:azeA6F5
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007293: Received TGT for service realm:
krbtgt/IDM.FNR.GUB.UY(a)SMB.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007294: Requesting tickets for
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY, referrals on
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007295: Generated subkey for TGS request: aes256-cts/DE5B
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007296: etypes requested in TGS request: aes256-cts, aes128-cts,
aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007298: Encoding request body and padata into FAST request
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007299: Sending request (1821 bytes) to IDM.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007300: Initiating TCP connection to stream 10.2.100.13:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007301: Sending TCP request to stream 10.2.100.13:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007302: Received answer (1837 bytes) from stream 10.2.100.13:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007303: Terminating TCP connection to stream 10.2.100.13:88
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007304: Response was from primary KDC
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007305: Decoding FAST response
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007306: FAST reply key: aes256-cts/B4B2
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007307: TGS reply is for mduffour(a)SMB.FNR.GUB.UY ->
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY with session key aes256-cts/AA94
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007308: TGS request result: 0/Success
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007309: Received creds for desired service
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007310: Storing mduffour(a)SMB.FNR.GUB.UY ->
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY in MEMORY:azeA6F5
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007311: Creating authenticator for mduffour(a)SMB.FNR.GUB.UY ->
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY, seqnum 0, subkey (null), session key
aes256-cts/AA94
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007313: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY from
MEMORY:/etc/krb5.keytab (vno 3, enctype aes256-cts) with result: 0/Success
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007314: Decrypted AP-REQ with specified server principal
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY: aes256-cts/3099
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007315: AP-REQ ticket: mduffour(a)SMB.FNR.GUB.UY ->
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY, session key aes256-cts/AA94
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007316: Negotiated enctype based on authenticator: aes256-cts
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007317: Initializing MEMORY:rd_req2 with default princ
mduffour(a)SMB.FNR.GUB.UY
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007318: Storing mduffour(a)SMB.FNR.GUB.UY ->
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY in MEMORY:rd_req2
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007319: Storing mduffour(a)SMB.FNR.GUB.UY ->
krbtgt/IDM.FNR.GUB.UY(a)SMB.FNR.GUB.UY in MEMORY:rd_req2
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007320: Destroying ccache MEMORY:azeA6F5
(2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x0400): [RID#7] TGT verified
using key for [host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY].
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007321: Retrieving mduffour(a)SMB.FNR.GUB.UY ->
host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY from MEMORY:rd_req2 with result: 0/Success
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007322: Retrieving host/laptingw02.idm.fnr.gub.uy(a)IDM.FNR.GUB.UY from
MEMORY:/etc/krb5.keytab (vno 3, enctype aes256-cts) with result: 0/Success
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_send_pac] (0x0080): [RID#7] failed to
contact PAC responder
(2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x0040): [RID#7] sss_send_pac
failed, group membership for user with principal [mduffour(a)SMB.FNR.GUB.UY] might not be
correct.
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7]
[4947] 1672849210.007323: Destroying ccache MEMORY:rd_req2
(2023-01-04 13:20:10): [krb5_child[4947]] [get_and_save_tgt] (0x2000): [RID#7] Running as
[700000003][700000005].
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_get_ccache_name_for_principal] (0x4000):
[RID#7] Location: [KEYRING:persistent:700000003]
(2023-01-04 13:20:10): [krb5_child[4947]] [sss_get_ccache_name_for_principal] (0x4000):
[RID#7] tmp_ccname: [KEYRING:persistent:700000003:krb_ccache_17Y700s]
(2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] Initializing
ccache of type [KEYRING]
(2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] CC supports
switch
(2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] returning: 0
(2023-01-04 13:20:10): [krb5_child[4947]] [safe_remove_old_ccache_file] (0x0400): [RID#7]
New and old ccache file are the same, none will be deleted.
(2023-01-04 13:20:10): [krb5_child[4947]] [k5c_send_data] (0x0200): [RID#7] Received
error code 0
(2023-01-04 13:20:10): [krb5_child[4947]] [pack_response_packet] (0x2000): [RID#7]
response packet size: [140]
(2023-01-04 13:20:10): [krb5_child[4947]] [k5c_send_data] (0x4000): [RID#7] Response
sent.
(2023-01-04 13:20:10): [krb5_child[4947]] [main] (0x0400): [RID#7] krb5_child completed
successfully