(Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [main] (0x0400): krb5_child started. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [unpack_buffer] (0x1000): total buffer size: [160] (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [unpack_buffer] (0x0100): cmd [241] uid [1492001389] gid [1492000513] validate [true] enterprise principal [true] offline [false] UPN [frsc@MMDE.LOCAL] (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_1492001389_XXXXXX] old_ccname: [FILE:/tmp/krb5cc_1492001389_ycI7cp] keytab: [/etc/krb5.keytab] (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [check_use_fast] (0x0100): Not using FAST. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [old_ccache_valid] (0x0400): Saved ccache FILE:/tmp/krb5cc_1492001389_ycI7cp doesn't exist, ignoring (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [FILE:/tmp/krb5cc_1492001389_ycI7cp] and is not active and TGT is not valid. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [k5c_precreate_ccache] (0x4000): Recreating ccache (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [privileged_krb5_setup] (0x0080): Cannot open the PAC responder socket (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [become_user] (0x0200): Trying to become user [1492001389][1492000513]. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [main] (0x2000): Running as [1492001389][1492000513]. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [k5c_setup] (0x2000): Running as [1492001389][1492000513]. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true] (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [main] (0x0400): Will perform online auth (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [MMDE.LOCAL] (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.740774: Getting initial credentials for frsc\@MMDE.LOCAL@MMDE.LOCAL (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.740826: Sending request (173 bytes) to MMDE.LOCAL (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.742288: Resolving hostname dcdekon081.mmde.local. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.743377: Sending initial UDP request to dgram 172.19.0.187:88 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.744590: Received answer (178 bytes) from dgram 172.19.0.187:88 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.745300: Response was not from master KDC (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.745326: Received error from KDC: -1765328359/Additional pre-authentication required (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.745350: Processing preauth types: 16, 15, 19, 2 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.745362: Selected etype info: etype aes256-cts, salt "MMDE.LOCALfrsc", params "" (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.750707: AS key obtained for encrypted timestamp: aes256-cts/1126 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.750747: Encrypted timestamp (for 1470211019.403155): plain 301AA011180F32303136303830333037353635395AA10502030626D3, encrypted F5415E7780BA01FBC4874A25727797161E998CFEDD6D34CA06C76C333E4284AA107AE1237F72DDBDB8BE0E8B342EFFDCEB00A7902DBFEE2B (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.750767: Preauth module encrypted_timestamp (2) (real) returned: 0/Success (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.750773: Produced preauth for next request: 2 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.750785: Sending request (251 bytes) to MMDE.LOCAL (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.752107: Resolving hostname dcdekon082.mmde.local. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.752842: Sending initial UDP request to dgram 172.19.0.186:88 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.754555: Received answer (1416 bytes) from dgram 172.19.0.186:88 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755147: Response was not from master KDC (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755241: Processing preauth types: 19 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755256: Selected etype info: etype aes256-cts, salt "MMDE.LOCALfrsc", params "" (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755263: Produced preauth for next request: (empty) (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755270: AS key determined by preauth: aes256-cts/1126 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755298: Decrypted AS reply; session key is: rc4-hmac/9565 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755304: FAST negotiation: unavailable (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_krb5_expire_callback_func] (0x2000): exp_time: [9008773] (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [validate_tgt] (0x2000): Found keytab entry with the realm of the credential. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755347: Retrieving UBUNTU16$@MMDE.LOCAL from MEMORY:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755353: Resolving unique ccache of type MEMORY (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755361: Initializing MEMORY:qF5Imid with default princ frsc@MMDE.LOCAL (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755368: Storing frsc@MMDE.LOCAL -> krbtgt/MMDE.LOCAL@MMDE.LOCAL in MEMORY:qF5Imid (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755378: Getting credentials frsc@MMDE.LOCAL -> UBUNTU16$@MMDE.LOCAL using ccache MEMORY:qF5Imid (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755392: Retrieving frsc@MMDE.LOCAL -> UBUNTU16$@MMDE.LOCAL from MEMORY:qF5Imid with result: -1765328243/Matching credential not found (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755402: Retrieving frsc@MMDE.LOCAL -> krbtgt/MMDE.LOCAL@MMDE.LOCAL from MEMORY:qF5Imid with result: 0/Success (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755409: Starting with TGT for client realm: frsc@MMDE.LOCAL -> krbtgt/MMDE.LOCAL@MMDE.LOCAL (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755419: Requesting tickets for UBUNTU16$@MMDE.LOCAL, referrals on (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755431: Generated subkey for TGS request: rc4-hmac/5507 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755448: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755477: Encoding request body and padata into FAST request (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.755508: Sending request (1569 bytes) to MMDE.LOCAL (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.756667: Resolving hostname dcdekon081.mmde.local. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.757335: Sending initial UDP request to dgram 172.19.0.187:88 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.759183: Received answer (83 bytes) from dgram 172.19.0.187:88 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.759887: Response was not from master KDC (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.759909: Request or response is too big for UDP; retrying with TCP (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.759923: Sending request (1569 bytes) to MMDE.LOCAL (tcp only) (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.760409: Resolving hostname dcdekon081.mmde.local. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.761103: Initiating TCP connection to stream 172.19.0.187:88 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.761416: Sending TCP request to stream 172.19.0.187:88 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.762846: Received answer (1724 bytes) from stream 172.19.0.187:88 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.762859: Terminating TCP connection to stream 172.19.0.187:88 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.763374: Response was not from master KDC (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.763394: Decoding FAST response (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.763430: TGS reply is for frsc@MMDE.LOCAL -> UBUNTU16$@MMDE.LOCAL with session key aes256-cts/AE59 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.763445: TGS request result: 0/Success (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.763451: Received creds for desired service UBUNTU16$@MMDE.LOCAL (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.763458: Storing frsc@MMDE.LOCAL -> UBUNTU16$@MMDE.LOCAL in MEMORY:qF5Imid (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.763476: Creating authenticator for frsc@MMDE.LOCAL -> UBUNTU16$@MMDE.LOCAL, seqnum 0, subkey (null), session key aes256-cts/AE59 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.763522: Retrieving UBUNTU16$@MMDE.LOCAL from MEMORY:/etc/krb5.keytab (vno 3, enctype aes256-cts) with result: 0/Success (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.763558: Decrypted AP-REQ with specified server principal UBUNTU16$@MMDE.LOCAL: aes256-cts/09F1 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.763566: AP-REQ ticket: frsc@MMDE.LOCAL -> UBUNTU16$@MMDE.LOCAL, session key aes256-cts/AE59 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.764883: Negotiated enctype based on authenticator: aes256-cts (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.764900: Initializing MEMORY:rd_req2 with default princ frsc@MMDE.LOCAL (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.764909: Storing frsc@MMDE.LOCAL -> UBUNTU16$@MMDE.LOCAL in MEMORY:rd_req2 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.764918: Destroying ccache MEMORY:qF5Imid (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [validate_tgt] (0x0400): TGT verified using key for [UBUNTU16$@MMDE.LOCAL]. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.764940: Retrieving frsc@MMDE.LOCAL -> UBUNTU16$@MMDE.LOCAL from MEMORY:rd_req2 with result: 0/Success (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.764980: Retrieving UBUNTU16$@MMDE.LOCAL from MEMORY:/etc/krb5.keytab (vno 3, enctype aes256-cts) with result: 0/Success (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_send_pac] (0x0040): sss_pac_make_request failed [-1][2]. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [validate_tgt] (0x0040): sss_send_pac failed, group membership for user with principal [frsc\@MMDE.LOCAL@MMDE.LOCAL] might not be correct. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_child_krb5_trace_cb] (0x4000): [2703] 1470211019.765024: Destroying ccache MEMORY:rd_req2 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_get_ccache_name_for_principal] (0x4000): Location: [FILE:/tmp/krb5cc_1492001389_XXXXXX] (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_get_ccache_name_for_principal] (0x2000): krb5_cc_cache_match failed: [-1765328243][Can't find client principal frsc@MMDE.LOCAL in cache collection] (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [create_ccache] (0x4000): Initializing ccache of type [FILE] (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [create_ccache] (0x4000): returning: 0 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [switch_creds] (0x0200): Switch user to [1492001389][1492000513]. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [switch_creds] (0x0200): Already user [1492001389]. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_destroy_ccache] (0x0040): 338: [-1765328189][No credentials cache found] (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [sss_destroy_ccache] (0x0020): krb5_cc_destroy failed. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [get_and_save_tgt] (0x0080): Failed to remove old ccache file [FILE:/tmp/krb5cc_1492001389_ycI7cp], please remove it manually. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [k5c_send_data] (0x0200): Received error code 0 (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [pack_response_packet] (0x2000): response packet size: [138] (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [k5c_send_data] (0x4000): Response sent. (Wed Aug 3 09:56:59 2016) [[sssd[krb5_child[2703]]]] [main] (0x0400): krb5_child completed successfully