(Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [main] (0x0400): ldap_child started. (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [main] (0x2000): context initialized (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [unpack_buffer] (0x1000): total buffer size: 59 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [unpack_buffer] (0x1000): realm_str size: 20 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [unpack_buffer] (0x1000): got realm_str: DOMAIN.SUBDOMAIN.COM (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [unpack_buffer] (0x1000): princ_str size: 15 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [unpack_buffer] (0x1000): got princ_str: COMPUTERNAME$ (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [unpack_buffer] (0x1000): keytab_name size: 0 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [unpack_buffer] (0x1000): lifetime: 86400 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [unpack_buffer] (0x0200): Will run as [0][0]. (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [privileged_krb5_setup] (0x2000): Kerberos context initialized (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [main] (0x2000): Kerberos context initialized (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [become_user] (0x0200): Trying to become user [0][0]. (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [become_user] (0x0200): Already user [0]. (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [main] (0x2000): Running as [0][0]. (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [main] (0x2000): getting TGT sync (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [ldap_child_get_tgt_sync] (0x2000): got realm_name: [DOMAIN.SUBDOMAIN.COM] (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [ldap_child_get_tgt_sync] (0x0100): Principal name is: [COMPUTERNAME$@DOMAIN.SUBDOMAIN.COM] (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [ldap_child_get_tgt_sync] (0x0100): Using keytab [MEMORY:/etc/krb5.keytab] (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.158075: Getting initial credentials for COMPUTERNAME$@DOMAIN.SUBDOMAIN.COM (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.158336: Looked up etypes in keytab: des-cbc-crc, des, des-cbc-crc, aes128-cts, aes256-cts, rc4-hmac (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.158435: Sending request (225 bytes) to DOMAIN.SUBDOMAIN.COM (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.158817: Sending initial UDP request to dgram :88 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.171563: Received answer from dgram :88 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.171693: Response was from master KDC (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.171757: Received error from KDC: -1765328359/Additional pre-authentication required (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.171841: Processing preauth types: 16, 15, 19, 2 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.171885: Selected etype info: etype aes256-cts, salt "DOMAIN.SUBDOMAIN.COMhostcomputername.domain.subdomain.com", params "" (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.171941: Retrieving COMPUTERNAME$@DOMAIN.SUBDOMAIN.COM from MEMORY:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.172003: AS key obtained for encrypted timestamp: aes256-cts/1D8B (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.172121: Encrypted timestamp (for 1459933276.172029): plain 301AA011180F32303136303430363039303131365AA1050203029FFD, encrypted AA175C742B38C5FACAF3C71125A5A7FAA449833272F9D26DD79370BE6BC6F4E4663B6A5A8CEC9F6C8605E726A7D36115E52E9CF10C091CD4 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.172175: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.172204: Produced preauth for next request: 2 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.172251: Sending request (305 bytes) to DOMAIN.SUBDOMAIN.COM (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.172407: Sending initial UDP request to dgram :88 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.177690: Received answer from dgram :88 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.177805: Response was from master KDC (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.177852: Received error from KDC: -1765328332/Response too big for UDP, retry with TCP (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.177882: Request or response is too big for UDP; retrying with TCP (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.177907: Sending request (305 bytes) to DOMAIN.SUBDOMAIN.COM (tcp only) (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.177999: Initiating TCP connection to stream :88 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.181384: Sending TCP request to stream :88 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.186761: Received answer from stream :88 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.186913: Response was from master KDC (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.186991: Processing preauth types: 19 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.187029: Selected etype info: etype aes256-cts, salt "DOMAIN.SUBDOMAIN.COMhostcomputername.domain.subdomain.com", params "" (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.187058: Produced preauth for next request: (empty) (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.187091: AS key determined by preauth: aes256-cts/1D8B (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.187240: Decrypted AS reply; session key is: aes256-cts/9058 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.187302: FAST negotiation: unavailable (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [ldap_child_get_tgt_sync] (0x2000): credentials initialized (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [ldap_child_get_tgt_sync] (0x2000): keytab ccname: [FILE:/var/lib/sss/db/ccache_DOMAIN.SUBDOMAIN.COM_3x1ZEK] (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.187469: Initializing FILE:/var/lib/sss/db/ccache_DOMAIN.SUBDOMAIN.COM_3x1ZEK with default princ COMPUTERNAME$@DOMAIN.SUBDOMAIN.COM (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.313859: Removing COMPUTERNAME$@DOMAIN.SUBDOMAIN.COM -> krbtgt/DOMAIN.SUBDOMAIN.COM@DOMAIN.SUBDOMAIN.COM from FILE:/var/lib/sss/db/ccache_DOMAIN.SUBDOMAIN.COM_3x1ZEK (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [sss_child_krb5_trace_cb] (0x4000): [11933] 1459933276.313896: Storing COMPUTERNAME$@DOMAIN.SUBDOMAIN.COM -> krbtgt/DOMAIN.SUBDOMAIN.COM@DOMAIN.SUBDOMAIN.COM in FILE:/var/lib/sss/db/ccache_DOMAIN.SUBDOMAIN.COM_3x1ZEK (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [ldap_child_get_tgt_sync] (0x2000): credentials stored (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [ldap_child_get_tgt_sync] (0x2000): Got KDC time offset (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [ldap_child_get_tgt_sync] (0x2000): Renaming [/var/lib/sss/db/ccache_DOMAIN.SUBDOMAIN.COM_3x1ZEK] to [/var/lib/sss/db/ccache_DOMAIN.SUBDOMAIN.COM] (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [prepare_response] (0x0400): Building response for result [0] (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [pack_buffer] (0x2000): response size: 68 (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [48] msg [FILE:/var/lib/sss/db/ccache_DOMAIN.SUBDOMAIN.COM] (Wed Apr 6 19:01:16 2016) [[sssd[ldap_child[11933]]]] [main] (0x0400): ldap_child completed successfully