(Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [main] (0x0400): krb5_child started. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [unpack_buffer] (0x1000): total buffer size: [181] (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [unpack_buffer] (0x0100): cmd [241] uid [xxxxx6683] gid [xxxxx6683] validate [true] enterprise principal [true] offline [false] UPN [first.last@COMPANY.COM] (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_xxxxx6683_XXXXXX] old_ccname: [FILE:/tmp/krb5cc_xxxxx6683_9sctMM] keytab: [/etc/krb5.keytab] (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [check_use_fast] (0x0100): Not using FAST. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [switch_creds] (0x0200): Switch user to [xxxxx6683][xxxxx6683]. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [switch_creds] (0x0200): Switch user to [0][0]. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [FILE:/tmp/krb5cc_xxxxx6683_9sctMM] and is not active and TGT is valid. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [k5c_precreate_ccache] (0x4000): Recreating ccache (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [privileged_krb5_setup] (0x0080): Cannot open the PAC responder socket (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [become_user] (0x0200): Trying to become user [xxxxx6683][xxxxx6683]. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [main] (0x2000): Running as [xxxxx6683][xxxxx6683]. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [k5c_setup] (0x2000): Running as [xxxxx6683][xxxxx6683]. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true] (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [main] (0x0400): Will perform online auth (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [DEF.XYZ.LOCAL] (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740561.404421: Getting initial credentials for first.last\@COMPANY.COM@DEF.XYZ.LOCAL (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740561.404689: Sending request (232 bytes) to DEF.XYZ.LOCAL (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740561.405090: Sending initial UDP request to dgram X.X.37.26:88 (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740561.421768: Received answer from dgram X.X.37.26:88 (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740561.421909: Response was from master KDC (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740561.421969: Received error from KDC: -1765328316/Realm not local to KDC (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740561.422005: Following referral to realm ABC.XYZ.LOCAL (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740561.422094: Sending request (232 bytes) to ABC.XYZ.LOCAL (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740561.423635: Resolving hostname ecwatlad01.abc.xyz.local. (Thu Jun 29 08:49:21 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740561.424972: Sending initial UDP request to dgram X.X.0.28:88 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.426138: Resolving hostname abcdc003.abc.xyz.local. (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.427378: Sending initial UDP request to dgram X.X.90.128:88 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.536293: Received answer from dgram X.X.90.128:88 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.537164: Response was not from master KDC (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.537226: Received error from KDC: -1765328359/Additional pre-authentication required (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.537316: Processing preauth types: 16, 15, 19, 2 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.537372: Selected etype info: etype aes256-cts, salt "ABC.XYZ.LOCALfirst.last", params "" (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.561537: AS key obtained for encrypted timestamp: aes256-cts/11B0 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.561658: Encrypted timestamp (for 1498740562.561577): plain 301AA011180F32303137303632393132343932325AA10502030891A9, encrypted 597847F67E5070A4DD16010BCCB17A45548BA976A1895F9571C95DA80AC497FF91A7E8CF358BA6EC55896C26CCCA715CA0256B74C5273129 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.561706: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.561733: Produced preauth for next request: 2 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.561779: Sending request (312 bytes) to ABC.XYZ.LOCAL (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.563400: Resolving hostname abcdc003.abc.xyz.local. (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.620396: Sending initial UDP request to dgram X.X.90.128:88 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.650990: Received answer from dgram X.X.90.128:88 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.651742: Response was not from master KDC (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.651819: Received error from KDC: -1765328332/Response too big for UDP, retry with TCP (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.651851: Request or response is too big for UDP; retrying with TCP (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.651877: Sending request (312 bytes) to ABC.XYZ.LOCAL (tcp only) (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.652629: Resolving hostname abcdc004.abc.xyz.local. (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.654453: Initiating TCP connection to stream X.X.90.128:88 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.706241: Sending TCP request to stream X.X.90.128:88 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.760320: Received answer from stream X.X.90.128:88 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761034: Response was not from master KDC (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761135: Processing preauth types: 19 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761171: Selected etype info: etype aes256-cts, salt "ABC.XYZ.LOCALfirst.last", params "" (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761199: Produced preauth for next request: (empty) (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761230: AS key determined by preauth: aes256-cts/11B0 (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761368: Decrypted AS reply; session key is: aes256-cts/F2DF (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761434: FAST negotiation: unavailable (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_krb5_expire_callback_func] (0x2000): exp_time: [862656] (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [validate_tgt] (0x2000): Found keytab entry with the realm of the credential. (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761624: Retrieving host/hostname.def.xyz.local@ABC.XYZ.LOCAL from MEMORY:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761657: Resolving unique ccache of type MEMORY (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761700: Initializing MEMORY:vYTaYHg with default princ first.last@ABC.XYZ.LOCAL (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761736: Removing first.last@ABC.XYZ.LOCAL -> krbtgt/ABC.XYZ.LOCAL@ABC.XYZ.LOCAL from MEMORY:vYTaYHg (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761765: Storing first.last@ABC.XYZ.LOCAL -> krbtgt/ABC.XYZ.LOCAL@ABC.XYZ.LOCAL in MEMORY:vYTaYHg (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761821: Getting credentials first.last@ABC.XYZ.LOCAL -> host/hostname.def.xyz.local@ABC.XYZ.LOCAL using ccache MEMORY:vYTaYHg (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761890: Retrieving first.last@ABC.XYZ.LOCAL -> host/hostname.def.xyz.local@ABC.XYZ.LOCAL from MEMORY:vYTaYHg with result: -1765328243/Matching credential not found (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761942: Retrieving first.last@ABC.XYZ.LOCAL -> krbtgt/ABC.XYZ.LOCAL@ABC.XYZ.LOCAL from MEMORY:vYTaYHg with result: 0/Success (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.761974: Found cached TGT for service realm: first.last@ABC.XYZ.LOCAL -> krbtgt/ABC.XYZ.LOCAL@ABC.XYZ.LOCAL (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.762003: Requesting tickets for host/hostname.def.xyz.local@ABC.XYZ.LOCAL, referrals on (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.762059: Generated subkey for TGS request: aes256-cts/DA5C (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.762096: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.762262: Sending request (1750 bytes) to ABC.XYZ.LOCAL (Thu Jun 29 08:49:22 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740562.816233: Initiating TCP connection to stream X.X.10.26:88 (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.817384: Resolving hostname abcdc001.abc.xyz.local. (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.818340: Initiating TCP connection to stream X.X.20.66:88 (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.827860: Sending TCP request to stream X.X.20.66:88 (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.839766: Received answer from stream X.X.20.66:88 (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.840644: Response was not from master KDC (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.840805: TGS reply is for first.last@ABC.XYZ.LOCAL -> krbtgt/DEF.XYZ.LOCAL@ABC.XYZ.LOCAL with session key rc4-hmac/FA70 (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.840877: TGS request result: 0/Success (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.840917: Removing first.last@ABC.XYZ.LOCAL -> krbtgt/DEF.XYZ.LOCAL@ABC.XYZ.LOCAL from MEMORY:vYTaYHg (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.840948: Storing first.last@ABC.XYZ.LOCAL -> krbtgt/DEF.XYZ.LOCAL@ABC.XYZ.LOCAL in MEMORY:vYTaYHg (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.840990: Following referral TGT krbtgt/DEF.XYZ.LOCAL@ABC.XYZ.LOCAL (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.841018: Requesting tickets for host/hostname.def.xyz.local@DEF.XYZ.LOCAL, referrals on (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.841063: Generated subkey for TGS request: rc4-hmac/0F9F (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.841114: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.841258: Sending request (1722 bytes) to DEF.XYZ.LOCAL (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.841378: Initiating TCP connection to stream X.X.37.26:88 (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.841867: Sending TCP request to stream X.X.37.26:88 (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.863590: Received answer from stream X.X.37.26:88 (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.863737: Response was from master KDC (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.863852: TGS reply is for first.last@ABC.XYZ.LOCAL -> host/hostname.def.xyz.local@DEF.XYZ.LOCAL with session key aes256-cts/AC69 (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.863981: TGS request result: 0/Success (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.864017: Received creds for desired service host/hostname.def.xyz.local@DEF.XYZ.LOCAL (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.864048: Removing first.last@ABC.XYZ.LOCAL -> host/hostname.def.xyz.local@ABC.XYZ.LOCAL from MEMORY:vYTaYHg (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.864077: Storing first.last@ABC.XYZ.LOCAL -> host/hostname.def.xyz.local@ABC.XYZ.LOCAL in MEMORY:vYTaYHg (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.864119: Also storing first.last@ABC.XYZ.LOCAL -> host/hostname.def.xyz.local@DEF.XYZ.LOCAL based on ticket (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.864150: Removing first.last@ABC.XYZ.LOCAL -> host/hostname.def.xyz.local@DEF.XYZ.LOCAL from MEMORY:vYTaYHg (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.864229: Creating authenticator for first.last@ABC.XYZ.LOCAL -> host/hostname.def.xyz.local@ABC.XYZ.LOCAL, seqnum 0, subkey (null, session key aes256-cts/AC69 (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.864407: Retrieving host/hostname.def.xyz.local@ABC.XYZ.LOCAL from MEMORY:/etc/krb5.keytab (vno 3, enctype aes256-cts) with result: -1765328154/Key version number for principal in key table is incorrect (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [sss_child_krb5_trace_cb] (0x4000): [2358] 1498740563.864450: Destroying ccache MEMORY:vYTaYHg (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [validate_tgt] (0x0020): TGT failed verification using key for [host/hostname.def.xyz.local@ABC.XYZ.LOCAL]. (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [get_and_save_tgt] (0x0020): 1240: [-1765328154][Key version number for principal in key table is incorrect] (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [map_krb5_error] (0x0020): 1301: [-1765328154][Key version number for principal in key table is incorrect] (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [k5c_send_data] (0x0200): Received error code 1432158209 (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [pack_response_packet] (0x2000): response packet size: [20] (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [k5c_send_data] (0x4000): Response sent. (Thu Jun 29 08:49:23 2017) [[sssd[krb5_child[2358]]]] [main] (0x0400): krb5_child completed successfully