(Sun Feb 21 13:05:49 2021) [[sssd[krb5_child[155056]]]] [sss_get_ccache_name_for_principal] (0x4000): Location: [KEYRING:persistent:270401103] (Sun Feb 21 13:05:49 2021) [[sssd[krb5_child[155056]]]] [sss_get_ccache_name_for_principal] (0x4000): tmp_ccname: [KEYRING:persistent:270401103:krb_ccache_4GiWN2I] (Sun Feb 21 13:05:49 2021) [[sssd[krb5_child[155056]]]] [create_ccache] (0x4000): Initializing ccache of type [KEYRING] (Sun Feb 21 13:05:49 2021) [[sssd[krb5_child[155056]]]] [create_ccache] (0x4000): CC supports switch (Sun Feb 21 13:05:49 2021) [[sssd[krb5_child[155056]]]] [create_ccache] (0x4000): returning: 0 (Sun Feb 21 13:05:49 2021) [[sssd[krb5_child[155056]]]] [safe_remove_old_ccache_file] (0x0400): New and old ccache file are the same, none will be deleted. (Sun Feb 21 13:05:49 2021) [[sssd[krb5_child[155056]]]] [k5c_send_data] (0x0200): Received error code 0 (Sun Feb 21 13:05:49 2021) [[sssd[krb5_child[155056]]]] [pack_response_packet] (0x2000): response packet size: [125] (Sun Feb 21 13:05:49 2021) [[sssd[krb5_child[155056]]]] [k5c_send_data] (0x4000): Response sent. (Sun Feb 21 13:05:49 2021) [[sssd[krb5_child[155056]]]] [main] (0x0400): krb5_child completed successfully (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [main] (0x0400): krb5_child started. (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [unpack_buffer] (0x1000): total buffer size: [152] (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [unpack_buffer] (0x0100): cmd [249] uid [270401103] gid [270400513] validate [true] enterprise principal [true] offline [false] UPN [test_user@DOMAIN.TEST] (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:270401103] old_ccname: [KEYRING:persistent:270401103] keytab: [/etc/krb5.keytab] (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [check_use_fast] (0x0100): Not using FAST. (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [become_user] (0x0200): Trying to become user [270401103][270400513]. (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [main] (0x2000): Running as [270401103][270400513]. (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [set_lifetime_options] (0x0100): No specific lifetime requested. (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [set_canonicalize_option] (0x0100): Canonicalization is set to [true] (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [main] (0x0400): Will perform pre-auth (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [DOMAIN.TEST] (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907950.305739: Getting initial credentials for test_user\@DOMAIN.TEST@DOMAIN.TEST (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907950.305741: Sending unauthenticated request (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907950.305742: Sending request (229 bytes) to DOMAIN.TEST (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907950.305743: Sending initial UDP request to dgram 10.0.0.3:88 (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907950.305744: Received answer (197 bytes) from dgram 10.0.0.3:88 (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907950.305745: Response was from master KDC (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907950.305746: Received error from KDC: -1765328359/Additional pre-authentication required (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907950.305749: Preauthenticating using KDC method data (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907950.305750: Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD (15), PA-ETYPE-INFO2 (19), PA-ENC-TIMESTAMP (2) (Sun Feb 21 13:45:50 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907950.305751: Selected etype info: etype aes256-cts, salt "DOMAIN.TESTtest_user", params "" (Sun Feb 21 13:45:52 2021) [[sssd[krb5_child[155525]]]] [sss_krb5_responder] (0x4000): Got question [pkinit]. (Sun Feb 21 13:45:52 2021) [[sssd[krb5_child[155525]]]] [answer_pkinit] (0x4000): [0] Identity [PKCS11:module_name=/lib/libsadaptor.so:slotid=2:token=Crypto Token] flags [0]. (Sun Feb 21 13:45:52 2021) [[sssd[krb5_child[155525]]]] [answer_pkinit] (0x4000): Setting pkinit_prompting. (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL. (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Crypto Token PIN]. (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_krb5_prompter] (0x0020): Cannot handle password prompts. (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907953.178315: PKINIT client has no configured identity; giving up (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907953.178316: Preauth module pkinit (16) (real) returned: -1765328360/Preauthentication failed (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907953.178317: PKINIT client ignoring draft 9 offer from RFC 4556 KDC (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907953.178318: Preauth module pkinit (15) (real) returned: -1765328360/Preauthentication failed (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL. (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Password for test_user\@DOMAIN.TEST@DOMAIN.TEST]. (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_krb5_prompter] (0x0020): Cannot handle password prompts. (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_child_krb5_trace_cb] (0x4000): [155525] 1613907953.178319: Preauth module encrypted_timestamp (2) (real) returned: -1765328254/Cannot read password (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [sss_krb5_get_init_creds_password] (0x0020): 1627: [-1765328174][Pre-authentication failed: Preauthentication failed] (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [get_and_save_tgt] (0x0400): krb5_get_init_creds_password returned [-1765328174] during pre-auth. (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [k5c_send_data] (0x0200): Received error code 0 (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [pack_response_packet] (0x2000): response packet size: [12] (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [k5c_send_data] (0x4000): Response sent. (Sun Feb 21 13:45:53 2021) [[sssd[krb5_child[155525]]]] [main] (0x0400): krb5_child completed successfully (Sun Feb 21 13:45:56 2021) [[sssd[krb5_child[155548]]]] [main] (0x0400): krb5_child started. (Sun Feb 21 13:45:56 2021) [[sssd[krb5_child[155548]]]] [unpack_buffer] (0x1000): total buffer size: [162] (Sun Feb 21 13:45:56 2021) [[sssd[krb5_child[155548]]]] [unpack_buffer] (0x0100): cmd [241] uid [270401103] gid [270400513] validate [true] enterprise principal [true] offline [false] UPN [test_user@DOMAIN.TEST] (Sun Feb 21 13:45:56 2021) [[sssd[krb5_child[155548]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:270401103] old_ccname: [KEYRING:persistent:270401103] keytab: [/etc/krb5.keytab] (Sun Feb 21 13:45:56 2021) [[sssd[krb5_child[155548]]]] [check_use_fast] (0x0100): Not using FAST. (Sun Feb 21 13:45:56 2021) [[sssd[krb5_child[155548]]]] [switch_creds] (0x0200): Switch user to [270401103][270400513]. (Sun Feb 21 13:45:56 2021) [[sssd[krb5_child[155548]]]] [switch_creds] (0x0200): Switch user to [0][0]. (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [KEYRING:persistent:270401103] and is not active and TGT is valid. (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [k5c_precreate_ccache] (0x4000): Recreating ccache (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [become_user] (0x0200): Trying to become user [270401103][270400513]. (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [main] (0x2000): Running as [270401103][270400513]. (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [set_lifetime_options] (0x0100): No specific lifetime requested. (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [set_canonicalize_option] (0x0100): Canonicalization is set to [true] (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [main] (0x0400): Will perform online auth (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [DOMAIN.TEST] (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907957.27342: Getting initial credentials for test_user\@DOMAIN.TEST@DOMAIN.TEST (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907957.27344: Sending unauthenticated request (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907957.27345: Sending request (229 bytes) to DOMAIN.TEST (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907957.27346: Sending initial UDP request to dgram 10.0.0.3:88 (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907957.27347: Received answer (197 bytes) from dgram 10.0.0.3:88 (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907957.27348: Response was from master KDC (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907957.27349: Received error from KDC: -1765328359/Additional pre-authentication required (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907957.27352: Preauthenticating using KDC method data (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907957.27353: Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD (15), PA-ETYPE-INFO2 (19), PA-ENC-TIMESTAMP (2) (Sun Feb 21 13:45:57 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907957.27354: Selected etype info: etype aes256-cts, salt "DOMAIN.TESTtest_user", params "" (Sun Feb 21 13:45:58 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_responder] (0x4000): Got question [pkinit]. (Sun Feb 21 13:45:58 2021) [[sssd[krb5_child[155548]]]] [answer_pkinit] (0x4000): [0] Identity [PKCS11:module_name=/lib/libsadaptor.so:slotid=2:token=Crypto Token] flags [0]. (Sun Feb 21 13:45:58 2021) [[sssd[krb5_child[155548]]]] [answer_pkinit] (0x4000): Setting pkinit_prompting. (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL. (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Crypto Token PIN]. (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_prompter] (0x0020): Cannot handle password prompts. (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907959.575418: PKINIT client has no configured identity; giving up (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907959.575419: Preauth module pkinit (16) (real) returned: -1765328360/Preauthentication failed (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907959.575420: PKINIT client ignoring draft 9 offer from RFC 4556 KDC (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907959.575421: Preauth module pkinit (15) (real) returned: -1765328360/Preauthentication failed (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL. (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Password for test_user\@DOMAIN.TEST@DOMAIN.TEST]. (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_prompter] (0x0020): Cannot handle password prompts. (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_child_krb5_trace_cb] (0x4000): [155548] 1613907959.575422: Preauth module encrypted_timestamp (2) (real) returned: -1765328254/Cannot read password (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_get_init_creds_password] (0x0020): 1627: [-1765328174][Pre-authentication failed: Preauthentication failed] (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [get_and_save_tgt] (0x0020): 1704: [-1765328174][Pre-authentication failed: Preauthentication failed] (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [map_krb5_error] (0x0020): 1833: [-1765328174][Pre-authentication failed: Preauthentication failed] (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [k5c_send_data] (0x0200): Received error code 1432158222 (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [pack_response_packet] (0x2000): response packet size: [4] (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [k5c_send_data] (0x4000): Response sent. (Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [main] (0x0400): krb5_child completed successfully