> > Hi, > > 'Decrypt integrity check failed' typically means that the wrong > Kerberos password or key was used. Since you are using FAST it might > either be the user password the user is typing in or the host key which > was used to setup the FAST tunnel. Was the host key updated shortly > before the issue happened? > > Can you add 'debug_level = 9' to the [domain/...] section of sssd.conf, > restart SSSD and waiting until the issue occurs again? With this > debug_level a details Kerberos trace should be in krb5_child.log which > might help to identify with specific operation fails. > > bye, > Sumit >
Sumit, I am quite sure that the user password is right, as I have tried in both clients several times in a row, copying and pasting it. The client that works always works, the other sometimes works. The client that sometimes works is new, so the host key was recently created. I have also tried uninstalling ipa in the client, and deleting the host from IPA, but the problem was always present. I have added the debug line to sssd.conf, and I am sending krb5_child.log with one failed login (at 13:19) and one working login (at 13:20) with the same user, as the problem is very easy to reproduce. Thanks very much.
(2023-01-04 13:19:02): [krb5_child[4908]] [main] (0x0400): [RID#5] krb5_child started. (2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x1000): [RID#5] total buffer size: [162] (2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x0100): [RID#5] cmd [241 (auth)] uid [700000003] gid [700000005] validate [true] enterprise principal [false] offline [false] UPN [[email protected]] (2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x0100): [RID#5] ccname: [KEYRING:persistent:700000003] old_ccname: [KEYRING:persistent:700000003] keytab: [/etc/krb5.keytab] (2023-01-04 13:19:02): [krb5_child[4908]] [switch_creds] (0x0200): [RID#5] Switch user to [700000003][700000005]. (2023-01-04 13:19:02): [krb5_child[4908]] [sss_krb5_cc_verify_ccache] (0x2000): [RID#5] TGT not found or expired. (2023-01-04 13:19:02): [krb5_child[4908]] [switch_creds] (0x0200): [RID#5] Switch user to [0][0]. (2023-01-04 13:19:02): [krb5_child[4908]] [k5c_check_old_ccache] (0x4000): [RID#5] Ccache_file is [KEYRING:persistent:700000003] and is not active and TGT is valid. (2023-01-04 13:19:02): [krb5_child[4908]] [k5c_precreate_ccache] (0x4000): [RID#5] Recreating ccache (2023-01-04 13:19:02): [krb5_child[4908]] [k5c_setup_fast] (0x0100): [RID#5] Fast principal is set to [host/[email protected]] (2023-01-04 13:19:02): [krb5_child[4908]] [find_principal_in_keytab] (0x4000): [RID#5] Trying to find principal host/[email protected] in keytab. (2023-01-04 13:19:02): [krb5_child[4908]] [match_principal] (0x1000): [RID#5] Principal matched to the sample (host/[email protected]). (2023-01-04 13:19:02): [krb5_child[4908]] [check_fast_ccache] (0x0200): [RID#5] FAST TGT is still valid. (2023-01-04 13:19:03): [krb5_child[4908]] [privileged_krb5_setup] (0x0080): [RID#5] Cannot open the PAC responder socket (2023-01-04 13:19:03): [krb5_child[4908]] [become_user] (0x0200): [RID#5] Trying to become user [700000003][700000005]. (2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x2000): [RID#5] Running as [700000003][700000005]. (2023-01-04 13:19:03): [krb5_child[4908]] [set_lifetime_options] (0x0100): [RID#5] No specific renewable lifetime requested. (2023-01-04 13:19:03): [krb5_child[4908]] [set_lifetime_options] (0x0100): [RID#5] No specific lifetime requested. (2023-01-04 13:19:03): [krb5_child[4908]] [set_canonicalize_option] (0x0100): [RID#5] Canonicalization is set to [true] (2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x0400): [RID#5] Will perform auth (2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x0400): [RID#5] Will perform online auth (2023-01-04 13:19:03): [krb5_child[4908]] [tgt_req_child] (0x1000): [RID#5] Attempting to get a TGT (2023-01-04 13:19:03): [krb5_child[4908]] [get_and_save_tgt] (0x0400): [RID#5] Attempting kinit for realm [SMB.FNR.GUB.UY] (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849143.938451: Getting initial credentials for [email protected] (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849143.938452: Error loading plugin module pkinit: 2/unable to find plugin [/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/pkinit.so]: No such file or directory (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849143.938453: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849143.938454: Retrieving host/[email protected] -> krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849143.938456: Sending unauthenticated request (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849143.938457: Sending request (192 bytes) to SMB.FNR.GUB.UY (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849143.938458: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849143.938459: No URI records found (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849143.938460: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015791: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015792: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015793: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015794: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015795: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015796: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015797: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015798: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015799: Initiating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015800: Sending TCP request to stream 10.12.100.1:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015801: Received answer (319 bytes) from stream 10.12.100.1:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015802: Terminating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015803: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015804: No URI records found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015805: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015806: No SRV records found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015807: Response was not from primary KDC (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015808: Received error from KDC: -1765328359/Additional pre-authentication required (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015809: Upgrading to FAST due to presence of PA_FX_FAST in reply (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015810: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015811: Retrieving host/[email protected] -> krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015812: Getting credentials host/[email protected] -> krbtgt/[email protected] using ccache MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015813: Retrieving host/[email protected] -> krb5_ccache_conf_data/start_realm@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015814: Retrieving host/[email protected] -> krbtgt/[email protected] from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015815: Retrieving host/[email protected] -> krbtgt/[email protected] from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015816: Retrieving host/[email protected] -> krbtgt/[email protected] from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 0/Success (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015817: Starting with TGT for client realm: host/[email protected] -> krbtgt/[email protected] (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015818: Retrieving host/[email protected] -> krbtgt/[email protected] from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015819: Requesting TGT krbtgt/[email protected] using TGT krbtgt/[email protected] (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015820: Generated subkey for TGS request: aes256-cts/6E38 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015821: etypes requested in TGS request: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015823: Encoding request body and padata into FAST request (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015824: Sending request (2175 bytes) to IDM.FNR.GUB.UY (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015825: Initiating TCP connection to stream 10.12.100.2:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015826: Sending TCP request to stream 10.12.100.2:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015827: Received answer (2087 bytes) from stream 10.12.100.2:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015828: Terminating TCP connection to stream 10.12.100.2:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015829: Response was from primary KDC (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015830: Decoding FAST response (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015831: FAST reply key: aes256-cts/05ED (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015832: TGS reply is for host/[email protected] -> krbtgt/[email protected] with session key aes256-cts/7394 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015833: TGS request result: 0/Success (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015834: Received TGT for SMB.FNR.GUB.UY; advancing current realm (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015835: Retrieving host/[email protected] -> krbtgt/[email protected] from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015836: Requesting TGT krbtgt/[email protected] using TGT krbtgt/[email protected] (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015837: Generated subkey for TGS request: aes256-cts/E345 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015838: etypes requested in TGS request: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015840: Encoding request body and padata into FAST request (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015841: Sending request (2139 bytes) to SMB.FNR.GUB.UY (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015842: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015843: No URI records found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015844: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015845: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015846: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015847: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015848: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015849: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015850: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015851: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015852: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015853: Initiating TCP connection to stream 10.2.100.11:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015854: Sending TCP request to stream 10.2.100.11:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015855: Received answer (1979 bytes) from stream 10.2.100.11:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015856: Terminating TCP connection to stream 10.2.100.11:88 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015857: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015858: No URI records found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015859: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015860: No SRV records found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015861: Response was not from primary KDC (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015862: Decoding FAST response (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015863: FAST reply key: aes256-cts/FAF7 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015864: TGS reply is for host/[email protected] -> krbtgt/[email protected] with session key aes256-cts/5531 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015865: TGS request result: 0/Success (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015866: Storing host/[email protected] -> krbtgt/[email protected] in MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015867: Received TGT for service realm: krbtgt/[email protected] (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015868: Requesting tickets for krbtgt/[email protected], referrals on (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015869: Generated subkey for TGS request: aes256-cts/CC16 (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015870: etypes requested in TGS request: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015872: Encoding request body and padata into FAST request (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015873: Sending request (2031 bytes) to SMB.FNR.GUB.UY (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015874: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015875: No URI records found (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015876: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015877: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015878: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015879: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015880: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015881: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015882: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015883: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015884: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849144.015885: Initiating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132204: Sending TCP request to stream 10.12.100.1:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132205: Received answer (2003 bytes) from stream 10.12.100.1:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132206: Terminating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132207: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132208: No URI records found (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132209: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132210: No SRV records found (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132211: Response was not from primary KDC (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132212: Decoding FAST response (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132213: FAST reply key: aes256-cts/CFDC (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132214: TGS reply is for host/[email protected] -> krbtgt/[email protected] with session key aes256-cts/0E8E (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132215: TGS request result: 0/Success (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132216: Received creds for desired service krbtgt/[email protected] (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132217: Storing host/[email protected] -> krbtgt/[email protected] in MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132218: Armor ccache sesion key: aes256-cts/0E8E (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132220: Creating authenticator for host/[email protected] -> krbtgt/[email protected], seqnum 0, subkey aes256-cts/CB80, session key aes256-cts/0E8E (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132222: FAST armor key: aes256-cts/6F88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132224: Sending unauthenticated request (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132225: Encoding request body and padata into FAST request (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132226: Sending request (2090 bytes) to SMB.FNR.GUB.UY (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132227: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132228: No URI records found (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132229: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132230: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132231: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132232: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132233: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132234: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132235: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132236: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132237: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132238: Initiating TCP connection to stream 10.2.100.11:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132239: Sending TCP request to stream 10.2.100.11:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132240: Received answer (676 bytes) from stream 10.2.100.11:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132241: Terminating TCP connection to stream 10.2.100.11:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132242: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132243: No URI records found (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132244: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132245: No SRV records found (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132246: Response was not from primary KDC (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132247: Received error from KDC: -1765328359/Additional pre-authentication required (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132248: Decoding FAST response (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132251: Preauthenticating using KDC method data (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132252: Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD (15), PA-PKINIT-KX (147), PA-ENCRYPTED-CHALLENGE (138), PA-FX-FAST (136), 655, PA-ETYPE-INFO2 (19), PA-FX-COOKIE (133), PA-FX-ERROR (137) (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132253: Selected etype info: etype aes256-cts, salt "SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00" (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132254: Received cookie: 0S\xa0\x06\x0c\x04H5L1\xa1I0G\xa0\x03\x02\x01\x12\xa2@\x04>\xa90\x81k~Js*\xdd\xe1\xda^\x8c\xe1{s\xe0O\xe7\xf7\x86 >\xf5\x17*\x9c\xf2L*\xa2\xaeB{\x00\xa0\xee\xdd\xde\x84\xb3\xc5\x99&S\xab\xaf\xbd|\x89\x19x_Ko?\x86\x14(*\x9f\xba (2023-01-04 13:19:05): [krb5_child[4908]] [sss_krb5_responder] (0x4000): [RID#5] Got question [password]. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132256: Preauth module encrypted_challenge (138) (real) returned: 0/Success (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132257: Produced preauth for next request: PA-FX-COOKIE (133), PA-ENCRYPTED-CHALLENGE (138) (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132258: Encoding request body and padata into FAST request (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132259: Sending request (2273 bytes) to SMB.FNR.GUB.UY (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132260: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132261: No URI records found (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132262: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132263: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132264: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132265: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132266: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132267: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132268: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132269: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132270: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132271: Initiating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132272: Sending TCP request to stream 10.12.100.1:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132273: Received answer (373 bytes) from stream 10.12.100.1:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132274: Terminating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132275: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132276: No URI records found (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132277: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132278: No SRV records found (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132279: Response was not from primary KDC (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132280: Received error from KDC: -1765328353/Decrypt integrity check failed (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132281: Decoding FAST response (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132283: Recovering from KDC error 31 using preauth mech PA-ENCRYPTED-CHALLENGE (138) (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132284: Preauth tryagain input types (138): PA-FX-COOKIE (133), PA-FX-ERROR (137) (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132285: Preauth module encrypted_challenge (138) tryagain returned: 0/Success (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132286: Retrying AS request with primary KDC (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132287: Getting initial credentials for [email protected] (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132288: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132289: Retrieving host/[email protected] -> krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132291: Sending unauthenticated request (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132292: Sending request (192 bytes) to SMB.FNR.GUB.UY (primary) (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132293: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132294: No URI records found (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132295: Sending DNS SRV query for _kerberos-master._udp.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132296: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): [RID#5] [4908] 1672849145.132297: No SRV records found (2023-01-04 13:19:05): [krb5_child[4908]] [get_and_save_tgt] (0x0020): [RID#5] 1725: [-1765328353][Decrypt integrity check failed] (2023-01-04 13:19:05): [krb5_child[4908]] [map_krb5_error] (0x0020): [RID#5] 1854: [-1765328353][Decrypt integrity check failed] (2023-01-04 13:19:05): [krb5_child[4908]] [k5c_send_data] (0x0200): [RID#5] Received error code 1432158227 (2023-01-04 13:19:05): [krb5_child[4908]] [pack_response_packet] (0x2000): [RID#5] response packet size: [4] (2023-01-04 13:19:05): [krb5_child[4908]] [k5c_send_data] (0x4000): [RID#5] Response sent. (2023-01-04 13:19:05): [krb5_child[4908]] [main] (0x0400): [RID#5] krb5_child completed successfully (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] krb5_child started. (2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x1000): [RID#7] total buffer size: [162] (2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x0100): [RID#7] cmd [241 (auth)] uid [700000003] gid [700000005] validate [true] enterprise principal [false] offline [false] UPN [[email protected]] (2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x0100): [RID#7] ccname: [KEYRING:persistent:700000003] old_ccname: [KEYRING:persistent:700000003] keytab: [/etc/krb5.keytab] (2023-01-04 13:20:09): [krb5_child[4947]] [switch_creds] (0x0200): [RID#7] Switch user to [700000003][700000005]. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_krb5_cc_verify_ccache] (0x2000): [RID#7] TGT not found or expired. (2023-01-04 13:20:09): [krb5_child[4947]] [switch_creds] (0x0200): [RID#7] Switch user to [0][0]. (2023-01-04 13:20:09): [krb5_child[4947]] [k5c_check_old_ccache] (0x4000): [RID#7] Ccache_file is [KEYRING:persistent:700000003] and is not active and TGT is valid. (2023-01-04 13:20:09): [krb5_child[4947]] [k5c_precreate_ccache] (0x4000): [RID#7] Recreating ccache (2023-01-04 13:20:09): [krb5_child[4947]] [k5c_setup_fast] (0x0100): [RID#7] Fast principal is set to [host/[email protected]] (2023-01-04 13:20:09): [krb5_child[4947]] [find_principal_in_keytab] (0x4000): [RID#7] Trying to find principal host/[email protected] in keytab. (2023-01-04 13:20:09): [krb5_child[4947]] [match_principal] (0x1000): [RID#7] Principal matched to the sample (host/[email protected]). (2023-01-04 13:20:09): [krb5_child[4947]] [check_fast_ccache] (0x0200): [RID#7] FAST TGT is still valid. (2023-01-04 13:20:09): [krb5_child[4947]] [privileged_krb5_setup] (0x0080): [RID#7] Cannot open the PAC responder socket (2023-01-04 13:20:09): [krb5_child[4947]] [become_user] (0x0200): [RID#7] Trying to become user [700000003][700000005]. (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x2000): [RID#7] Running as [700000003][700000005]. (2023-01-04 13:20:09): [krb5_child[4947]] [set_lifetime_options] (0x0100): [RID#7] No specific renewable lifetime requested. (2023-01-04 13:20:09): [krb5_child[4947]] [set_lifetime_options] (0x0100): [RID#7] No specific lifetime requested. (2023-01-04 13:20:09): [krb5_child[4947]] [set_canonicalize_option] (0x0100): [RID#7] Canonicalization is set to [true] (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] Will perform auth (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] Will perform online auth (2023-01-04 13:20:09): [krb5_child[4947]] [tgt_req_child] (0x1000): [RID#7] Attempting to get a TGT (2023-01-04 13:20:09): [krb5_child[4947]] [get_and_save_tgt] (0x0400): [RID#7] Attempting kinit for realm [SMB.FNR.GUB.UY] (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814719: Getting initial credentials for [email protected] (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814720: Error loading plugin module pkinit: 2/unable to find plugin [/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/pkinit.so]: No such file or directory (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814721: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814722: Retrieving host/[email protected] -> krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814724: Sending unauthenticated request (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814725: Sending request (192 bytes) to SMB.FNR.GUB.UY (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814726: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814727: No URI records found (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814728: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814729: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814730: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814731: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814732: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814733: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814734: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814735: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814736: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814737: Initiating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814738: Sending TCP request to stream 10.12.100.1:88 (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814739: Received answer (319 bytes) from stream 10.12.100.1:88 (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814740: Terminating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814741: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814742: No URI records found (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814743: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814744: No SRV records found (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814745: Response was not from primary KDC (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814746: Received error from KDC: -1765328359/Additional pre-authentication required (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814747: Upgrading to FAST due to presence of PA_FX_FAST in reply (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814748: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814749: Retrieving host/[email protected] -> krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814750: Getting credentials host/[email protected] -> krbtgt/[email protected] using ccache MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814751: Retrieving host/[email protected] -> krb5_ccache_conf_data/start_realm@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814752: Retrieving host/[email protected] -> krbtgt/[email protected] from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814753: Retrieving host/[email protected] -> krbtgt/[email protected] from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814754: Retrieving host/[email protected] -> krbtgt/[email protected] from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 0/Success (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814755: Starting with TGT for client realm: host/[email protected] -> krbtgt/[email protected] (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814756: Retrieving host/[email protected] -> krbtgt/[email protected] from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814757: Requesting TGT krbtgt/[email protected] using TGT krbtgt/[email protected] (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814758: Generated subkey for TGS request: aes256-cts/AD9C (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814759: etypes requested in TGS request: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814761: Encoding request body and padata into FAST request (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814762: Sending request (2178 bytes) to IDM.FNR.GUB.UY (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814763: Initiating TCP connection to stream 10.2.100.13:88 (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814764: Sending TCP request to stream 10.2.100.13:88 (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814765: Received answer (2089 bytes) from stream 10.2.100.13:88 (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814766: Terminating TCP connection to stream 10.2.100.13:88 (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814767: Response was from primary KDC (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814768: Decoding FAST response (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814769: FAST reply key: aes256-cts/CB51 (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814770: TGS reply is for host/[email protected] -> krbtgt/[email protected] with session key aes256-cts/27BE (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814771: TGS request result: 0/Success (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814772: Received TGT for SMB.FNR.GUB.UY; advancing current realm (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814773: Retrieving host/[email protected] -> krbtgt/[email protected] from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: -1765328243/Matching credential not found (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814774: Requesting TGT krbtgt/[email protected] using TGT krbtgt/[email protected] (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814775: Generated subkey for TGS request: aes256-cts/542B (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814776: etypes requested in TGS request: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814778: Encoding request body and padata into FAST request (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814779: Sending request (2140 bytes) to SMB.FNR.GUB.UY (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814780: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814781: No URI records found (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814782: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814783: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814784: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814785: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814786: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814787: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814788: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814789: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814790: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849209.814791: Initiating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007134: Sending TCP request to stream 10.12.100.1:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007135: Received answer (1979 bytes) from stream 10.12.100.1:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007136: Terminating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007137: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007138: No URI records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007139: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007140: No SRV records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007141: Response was not from primary KDC (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007142: Decoding FAST response (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007143: FAST reply key: aes256-cts/C7D2 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007144: TGS reply is for host/[email protected] -> krbtgt/[email protected] with session key aes256-cts/4D87 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007145: TGS request result: 0/Success (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007146: Storing host/[email protected] -> krbtgt/[email protected] in MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007147: Received TGT for service realm: krbtgt/[email protected] (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007148: Requesting tickets for krbtgt/[email protected], referrals on (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007149: Generated subkey for TGS request: aes256-cts/8B4A (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007150: etypes requested in TGS request: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007152: Encoding request body and padata into FAST request (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007153: Sending request (2031 bytes) to SMB.FNR.GUB.UY (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007154: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007155: No URI records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007156: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007157: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007158: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007159: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007160: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007161: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007162: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007163: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007164: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007165: Initiating TCP connection to stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007166: Sending TCP request to stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007167: Received answer (2003 bytes) from stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007168: Terminating TCP connection to stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007169: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007170: No URI records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007171: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007172: No SRV records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007173: Response was not from primary KDC (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007174: Decoding FAST response (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007175: FAST reply key: aes256-cts/E6AF (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007176: TGS reply is for host/[email protected] -> krbtgt/[email protected] with session key aes256-cts/4E13 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007177: TGS request result: 0/Success (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007178: Received creds for desired service krbtgt/[email protected] (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007179: Storing host/[email protected] -> krbtgt/[email protected] in MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007180: Armor ccache sesion key: aes256-cts/4E13 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007182: Creating authenticator for host/[email protected] -> krbtgt/[email protected], seqnum 0, subkey aes256-cts/63B9, session key aes256-cts/4E13 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007184: FAST armor key: aes256-cts/D363 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007186: Sending unauthenticated request (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007187: Encoding request body and padata into FAST request (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007188: Sending request (2089 bytes) to SMB.FNR.GUB.UY (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007189: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007190: No URI records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007191: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007192: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007193: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007194: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007195: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007196: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007197: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007198: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007199: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007200: Initiating TCP connection to stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007201: Sending TCP request to stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007202: Received answer (676 bytes) from stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007203: Terminating TCP connection to stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007204: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007205: No URI records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007206: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007207: No SRV records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007208: Response was not from primary KDC (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007209: Received error from KDC: -1765328359/Additional pre-authentication required (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007210: Decoding FAST response (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007213: Preauthenticating using KDC method data (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007214: Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD (15), PA-PKINIT-KX (147), PA-ENCRYPTED-CHALLENGE (138), PA-FX-FAST (136), 655, PA-ETYPE-INFO2 (19), PA-FX-COOKIE (133), PA-FX-ERROR (137) (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007215: Selected etype info: etype aes256-cts, salt "SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00" (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007216: Received cookie: 0S\xa0\x06\x0c\x04H5L1\xa1I0G\xa0\x03\x02\x01\x12\xa2@\x04>\xa5\xa4r\xfeV\x8f\xeb\xf7i\x92\xc0\xf0\xe6\xda&\xf9\x81m\xa9s&)\x15,\xc4\x953D\xb24\x8d\xd2\x94\xbb\xbb\xbf\x08*U\xb0K\x7f\xc2IF\xf4\x88\xd2\xd3\xfdY\x80d\xd0\xdf\xd9\xee\x9e\x0b7h' (2023-01-04 13:20:10): [krb5_child[4947]] [sss_krb5_responder] (0x4000): [RID#7] Got question [password]. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007218: Preauth module encrypted_challenge (138) (real) returned: 0/Success (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007219: Produced preauth for next request: PA-FX-COOKIE (133), PA-ENCRYPTED-CHALLENGE (138) (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007220: Encoding request body and padata into FAST request (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007221: Sending request (2272 bytes) to SMB.FNR.GUB.UY (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007222: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007223: No URI records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007224: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007225: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007226: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007227: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007228: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007229: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007230: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007231: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007232: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007233: Initiating TCP connection to stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007234: Sending TCP request to stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007235: Received answer (1954 bytes) from stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007236: Terminating TCP connection to stream 10.2.100.11:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007237: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007238: No URI records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007239: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007240: No SRV records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007241: Response was not from primary KDC (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007242: Decoding FAST response (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007243: Processing preauth types: PA-ENCRYPTED-CHALLENGE (138), PA-ETYPE-INFO2 (19) (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007244: Selected etype info: etype aes256-cts, salt "SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00" (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007245: Preauth module encrypted_challenge (138) (real) returned: 0/Success (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007246: Produced preauth for next request: (empty) (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007247: AS key determined by preauth: aes256-cts/486D (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007248: FAST reply key: aes256-cts/E923 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007249: Decrypted AS reply; session key is: aes256-cts/7B52 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007250: FAST negotiation: available (2023-01-04 13:20:10): [krb5_child[4947]] [sss_krb5_expire_callback_func] (0x2000): [RID#7] exp_time: [10270225] (2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x2000): [RID#7] Keytab entry with the realm of the credential not found in keytab. Using the last entry. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007251: Retrieving host/[email protected] from MEMORY:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007252: Resolving unique ccache of type MEMORY (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007253: Initializing MEMORY:azeA6F5 with default princ [email protected] (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007254: Storing [email protected] -> krbtgt/[email protected] in MEMORY:azeA6F5 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007255: Getting credentials [email protected] -> host/[email protected] using ccache MEMORY:azeA6F5 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007256: Retrieving [email protected] -> krb5_ccache_conf_data/start_realm@X-CACHECONF: from MEMORY:azeA6F5 with result: -1765328243/Matching credential not found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007257: Retrieving [email protected] -> host/[email protected] from MEMORY:azeA6F5 with result: -1765328243/Matching credential not found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007258: Retrieving [email protected] -> krbtgt/[email protected] from MEMORY:azeA6F5 with result: -1765328243/Matching credential not found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007259: Retrieving [email protected] -> krbtgt/[email protected] from MEMORY:azeA6F5 with result: 0/Success (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007260: Starting with TGT for client realm: [email protected] -> krbtgt/[email protected] (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007261: Retrieving [email protected] -> krbtgt/[email protected] from MEMORY:azeA6F5 with result: -1765328243/Matching credential not found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007262: Requesting TGT krbtgt/[email protected] using TGT krbtgt/[email protected] (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007263: Generated subkey for TGS request: aes256-cts/4D40 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007264: etypes requested in TGS request: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007266: Encoding request body and padata into FAST request (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007267: Sending request (1785 bytes) to SMB.FNR.GUB.UY (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007268: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007269: No URI records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007270: Sending DNS SRV query for _kerberos._udp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007271: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007272: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007273: Sending DNS SRV query for _kerberos._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007274: SRV answer: 0 100 88 "samba02.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007275: SRV answer: 0 100 88 "samba01.smb.fnr.gub.uy." (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007276: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007277: Resolving hostname samba01.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007278: Resolving hostname samba02.smb.fnr.gub.uy. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007279: Initiating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007280: Sending TCP request to stream 10.12.100.1:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007281: Received answer (1747 bytes) from stream 10.12.100.1:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007282: Terminating TCP connection to stream 10.12.100.1:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007283: Sending DNS URI query for _kerberos.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007284: No URI records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007285: Sending DNS SRV query for _kerberos-master._tcp.SMB.FNR.GUB.UY. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007286: No SRV records found (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007287: Response was not from primary KDC (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007288: Decoding FAST response (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007289: FAST reply key: aes256-cts/60C7 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007290: TGS reply is for [email protected] -> krbtgt/[email protected] with session key aes256-cts/FF01 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007291: TGS request result: 0/Success (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007292: Storing [email protected] -> krbtgt/[email protected] in MEMORY:azeA6F5 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007293: Received TGT for service realm: krbtgt/[email protected] (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007294: Requesting tickets for host/[email protected], referrals on (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007295: Generated subkey for TGS request: aes256-cts/DE5B (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007296: etypes requested in TGS request: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007298: Encoding request body and padata into FAST request (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007299: Sending request (1821 bytes) to IDM.FNR.GUB.UY (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007300: Initiating TCP connection to stream 10.2.100.13:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007301: Sending TCP request to stream 10.2.100.13:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007302: Received answer (1837 bytes) from stream 10.2.100.13:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007303: Terminating TCP connection to stream 10.2.100.13:88 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007304: Response was from primary KDC (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007305: Decoding FAST response (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007306: FAST reply key: aes256-cts/B4B2 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007307: TGS reply is for [email protected] -> host/[email protected] with session key aes256-cts/AA94 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007308: TGS request result: 0/Success (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007309: Received creds for desired service host/[email protected] (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007310: Storing [email protected] -> host/[email protected] in MEMORY:azeA6F5 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007311: Creating authenticator for [email protected] -> host/[email protected], seqnum 0, subkey (null), session key aes256-cts/AA94 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007313: Retrieving host/[email protected] from MEMORY:/etc/krb5.keytab (vno 3, enctype aes256-cts) with result: 0/Success (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007314: Decrypted AP-REQ with specified server principal host/[email protected]: aes256-cts/3099 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007315: AP-REQ ticket: [email protected] -> host/[email protected], session key aes256-cts/AA94 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007316: Negotiated enctype based on authenticator: aes256-cts (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007317: Initializing MEMORY:rd_req2 with default princ [email protected] (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007318: Storing [email protected] -> host/[email protected] in MEMORY:rd_req2 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007319: Storing [email protected] -> krbtgt/[email protected] in MEMORY:rd_req2 (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007320: Destroying ccache MEMORY:azeA6F5 (2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x0400): [RID#7] TGT verified using key for [host/[email protected]]. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007321: Retrieving [email protected] -> host/[email protected] from MEMORY:rd_req2 with result: 0/Success (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007322: Retrieving host/[email protected] from MEMORY:/etc/krb5.keytab (vno 3, enctype aes256-cts) with result: 0/Success (2023-01-04 13:20:10): [krb5_child[4947]] [sss_send_pac] (0x0080): [RID#7] failed to contact PAC responder (2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x0040): [RID#7] sss_send_pac failed, group membership for user with principal [[email protected]] might not be correct. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): [RID#7] [4947] 1672849210.007323: Destroying ccache MEMORY:rd_req2 (2023-01-04 13:20:10): [krb5_child[4947]] [get_and_save_tgt] (0x2000): [RID#7] Running as [700000003][700000005]. (2023-01-04 13:20:10): [krb5_child[4947]] [sss_get_ccache_name_for_principal] (0x4000): [RID#7] Location: [KEYRING:persistent:700000003] (2023-01-04 13:20:10): [krb5_child[4947]] [sss_get_ccache_name_for_principal] (0x4000): [RID#7] tmp_ccname: [KEYRING:persistent:700000003:krb_ccache_17Y700s] (2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] Initializing ccache of type [KEYRING] (2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] CC supports switch (2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] returning: 0 (2023-01-04 13:20:10): [krb5_child[4947]] [safe_remove_old_ccache_file] (0x0400): [RID#7] New and old ccache file are the same, none will be deleted. (2023-01-04 13:20:10): [krb5_child[4947]] [k5c_send_data] (0x0200): [RID#7] Received error code 0 (2023-01-04 13:20:10): [krb5_child[4947]] [pack_response_packet] (0x2000): [RID#7] response packet size: [140] (2023-01-04 13:20:10): [krb5_child[4947]] [k5c_send_data] (0x4000): [RID#7] Response sent. (2023-01-04 13:20:10): [krb5_child[4947]] [main] (0x0400): [RID#7] krb5_child completed successfully
_______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
