Am Wed, Jan 04, 2023 at 01:23:53PM -0300 schrieb tizo: > > > > Hi, > > > > 'Decrypt integrity check failed' typically means that the wrong > > Kerberos password or key was used. Since you are using FAST it might > > either be the user password the user is typing in or the host key which > > was used to setup the FAST tunnel. Was the host key updated shortly > > before the issue happened? > > > > Can you add 'debug_level = 9' to the [domain/...] section of sssd.conf, > > restart SSSD and waiting until the issue occurs again? With this > > debug_level a details Kerberos trace should be in krb5_child.log which > > might help to identify with specific operation fails. > > > > bye, > > Sumit > > > > Sumit, > > I am quite sure that the user password is right, as I have tried in > both clients several times in a row, copying and pasting it. The > client that works always works, the other sometimes works. The client > that sometimes works is new, so the host key was recently created. I > have also tried uninstalling ipa in the client, and deleting the host > from IPA, but the problem was always present. > > I have added the debug line to sssd.conf, and I am sending > krb5_child.log with one failed login (at 13:19) and one working login > (at 13:20) with the same user, as the problem is very easy to > reproduce.
Hi, it looks like if the client is talking to 10.2.100.11 it is working as expected but with 10.12.100.1 it fails. Are there any details in the logs of those servers? bye, Sumit > > Thanks very much. > (2023-01-04 13:19:02): [krb5_child[4908]] [main] (0x0400): [RID#5] krb5_child > started. > (2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x1000): [RID#5] > total buffer size: [162] > (2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x0100): [RID#5] > cmd [241 (auth)] uid [700000003] gid [700000005] validate [true] enterprise > principal [false] offline [false] UPN [[email protected]] > (2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x0100): [RID#5] > ccname: [KEYRING:persistent:700000003] old_ccname: > [KEYRING:persistent:700000003] keytab: [/etc/krb5.keytab] > (2023-01-04 13:19:02): [krb5_child[4908]] [switch_creds] (0x0200): [RID#5] > Switch user to [700000003][700000005]. > (2023-01-04 13:19:02): [krb5_child[4908]] [sss_krb5_cc_verify_ccache] > (0x2000): [RID#5] TGT not found or expired. > (2023-01-04 13:19:02): [krb5_child[4908]] [switch_creds] (0x0200): [RID#5] > Switch user to [0][0]. > (2023-01-04 13:19:02): [krb5_child[4908]] [k5c_check_old_ccache] (0x4000): > [RID#5] Ccache_file is [KEYRING:persistent:700000003] and is not active and > TGT is valid. > (2023-01-04 13:19:02): [krb5_child[4908]] [k5c_precreate_ccache] (0x4000): > [RID#5] Recreating ccache > (2023-01-04 13:19:02): [krb5_child[4908]] [k5c_setup_fast] (0x0100): [RID#5] > Fast principal is set to [host/[email protected]] > (2023-01-04 13:19:02): [krb5_child[4908]] [find_principal_in_keytab] > (0x4000): [RID#5] Trying to find principal > host/[email protected] in keytab. > (2023-01-04 13:19:02): [krb5_child[4908]] [match_principal] (0x1000): [RID#5] > Principal matched to the sample > (host/[email protected]). > (2023-01-04 13:19:02): [krb5_child[4908]] [check_fast_ccache] (0x0200): > [RID#5] FAST TGT is still valid. > (2023-01-04 13:19:03): [krb5_child[4908]] [privileged_krb5_setup] (0x0080): > [RID#5] Cannot open the PAC responder socket > (2023-01-04 13:19:03): [krb5_child[4908]] [become_user] (0x0200): [RID#5] > Trying to become user [700000003][700000005]. > (2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x2000): [RID#5] Running as > [700000003][700000005]. > (2023-01-04 13:19:03): [krb5_child[4908]] [set_lifetime_options] (0x0100): > [RID#5] No specific renewable lifetime requested. > (2023-01-04 13:19:03): [krb5_child[4908]] [set_lifetime_options] (0x0100): > [RID#5] No specific lifetime requested. > (2023-01-04 13:19:03): [krb5_child[4908]] [set_canonicalize_option] (0x0100): > [RID#5] Canonicalization is set to [true] > (2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x0400): [RID#5] Will > perform auth > (2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x0400): [RID#5] Will > perform online auth > (2023-01-04 13:19:03): [krb5_child[4908]] [tgt_req_child] (0x1000): [RID#5] > Attempting to get a TGT > (2023-01-04 13:19:03): [krb5_child[4908]] [get_and_save_tgt] (0x0400): > [RID#5] Attempting kinit for realm [SMB.FNR.GUB.UY] > (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849143.938451: Getting initial credentials for > [email protected] > > (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849143.938452: Error loading plugin module pkinit: > 2/unable to find plugin > [/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/pkinit.so]: No such file or > directory > > (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849143.938453: FAST armor ccache: > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY > > (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849143.938454: Retrieving > host/[email protected] -> > krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF: > from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849143.938456: Sending unauthenticated request > > (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849143.938457: Sending request (192 bytes) to > SMB.FNR.GUB.UY > > (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849143.938458: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849143.938459: No URI records found > > (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849143.938460: Sending DNS SRV query for > _kerberos._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015791: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015792: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015793: Sending DNS SRV query for > _kerberos._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015794: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015795: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015796: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015797: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015798: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015799: Initiating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015800: Sending TCP request to stream 10.12.100.1:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015801: Received answer (319 bytes) from stream > 10.12.100.1:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015802: Terminating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015803: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015804: No URI records found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015805: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015806: No SRV records found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015807: Response was not from primary KDC > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015808: Received error from KDC: > -1765328359/Additional pre-authentication required > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015809: Upgrading to FAST due to presence of > PA_FX_FAST in reply > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015810: FAST armor ccache: > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015811: Retrieving > host/[email protected] -> > krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF: > from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015812: Getting credentials > host/[email protected] -> > krbtgt/[email protected] using ccache > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015813: Retrieving > host/[email protected] -> > krb5_ccache_conf_data/start_realm@X-CACHECONF: from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015814: Retrieving > host/[email protected] -> > krbtgt/[email protected] from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015815: Retrieving > host/[email protected] -> > krbtgt/[email protected] from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015816: Retrieving > host/[email protected] -> > krbtgt/[email protected] from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 0/Success > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015817: Starting with TGT for client realm: > host/[email protected] -> > krbtgt/[email protected] > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015818: Retrieving > host/[email protected] -> > krbtgt/[email protected] from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015819: Requesting TGT > krbtgt/[email protected] using TGT > krbtgt/[email protected] > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015820: Generated subkey for TGS request: > aes256-cts/6E38 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015821: etypes requested in TGS request: > aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, > camellia128-cts, camellia256-cts > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015823: Encoding request body and padata into FAST > request > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015824: Sending request (2175 bytes) to > IDM.FNR.GUB.UY > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015825: Initiating TCP connection to stream > 10.12.100.2:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015826: Sending TCP request to stream 10.12.100.2:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015827: Received answer (2087 bytes) from stream > 10.12.100.2:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015828: Terminating TCP connection to stream > 10.12.100.2:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015829: Response was from primary KDC > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015830: Decoding FAST response > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015831: FAST reply key: aes256-cts/05ED > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015832: TGS reply is for > host/[email protected] -> > krbtgt/[email protected] with session key aes256-cts/7394 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015833: TGS request result: 0/Success > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015834: Received TGT for SMB.FNR.GUB.UY; advancing > current realm > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015835: Retrieving > host/[email protected] -> > krbtgt/[email protected] from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015836: Requesting TGT > krbtgt/[email protected] using TGT > krbtgt/[email protected] > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015837: Generated subkey for TGS request: > aes256-cts/E345 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015838: etypes requested in TGS request: > aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, > camellia128-cts, camellia256-cts > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015840: Encoding request body and padata into FAST > request > G > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015841: Sending request (2139 bytes) to > SMB.FNR.GUB.UY > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015842: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015843: No URI records found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015844: Sending DNS SRV query for > _kerberos._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015845: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015846: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015847: Sending DNS SRV query for > _kerberos._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015848: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015849: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015850: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015851: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015852: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015853: Initiating TCP connection to stream > 10.2.100.11:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015854: Sending TCP request to stream 10.2.100.11:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015855: Received answer (1979 bytes) from stream > 10.2.100.11:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015856: Terminating TCP connection to stream > 10.2.100.11:88 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015857: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015858: No URI records found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015859: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015860: No SRV records found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015861: Response was not from primary KDC > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015862: Decoding FAST response > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015863: FAST reply key: aes256-cts/FAF7 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015864: TGS reply is for > host/[email protected] -> > krbtgt/[email protected] with session key aes256-cts/5531 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015865: TGS request result: 0/Success > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015866: Storing > host/[email protected] -> > krbtgt/[email protected] in > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015867: Received TGT for service realm: > krbtgt/[email protected] > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015868: Requesting tickets for > krbtgt/[email protected], referrals on > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015869: Generated subkey for TGS request: > aes256-cts/CC16 > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015870: etypes requested in TGS request: > aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, > camellia128-cts, camellia256-cts > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015872: Encoding request body and padata into FAST > request > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015873: Sending request (2031 bytes) to > SMB.FNR.GUB.UY > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015874: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015875: No URI records found > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015876: Sending DNS SRV query for > _kerberos._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015877: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015878: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015879: Sending DNS SRV query for > _kerberos._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015880: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015881: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015882: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015883: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015884: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849144.015885: Initiating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132204: Sending TCP request to stream 10.12.100.1:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132205: Received answer (2003 bytes) from stream > 10.12.100.1:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132206: Terminating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132207: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132208: No URI records found > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132209: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132210: No SRV records found > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132211: Response was not from primary KDC > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132212: Decoding FAST response > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132213: FAST reply key: aes256-cts/CFDC > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132214: TGS reply is for > host/[email protected] -> > krbtgt/[email protected] with session key aes256-cts/0E8E > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132215: TGS request result: 0/Success > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132216: Received creds for desired service > krbtgt/[email protected] > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132217: Storing > host/[email protected] -> > krbtgt/[email protected] in > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132218: Armor ccache sesion key: aes256-cts/0E8E > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132220: Creating authenticator for > host/[email protected] -> > krbtgt/[email protected], seqnum 0, subkey aes256-cts/CB80, > session key aes256-cts/0E8E > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132222: FAST armor key: aes256-cts/6F88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132224: Sending unauthenticated request > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132225: Encoding request body and padata into FAST > request > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132226: Sending request (2090 bytes) to > SMB.FNR.GUB.UY > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132227: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132228: No URI records found > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132229: Sending DNS SRV query for > _kerberos._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132230: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132231: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132232: Sending DNS SRV query for > _kerberos._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132233: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132234: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132235: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132236: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132237: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132238: Initiating TCP connection to stream > 10.2.100.11:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132239: Sending TCP request to stream 10.2.100.11:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132240: Received answer (676 bytes) from stream > 10.2.100.11:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132241: Terminating TCP connection to stream > 10.2.100.11:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132242: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132243: No URI records found > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132244: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132245: No SRV records found > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132246: Response was not from primary KDC > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132247: Received error from KDC: > -1765328359/Additional pre-authentication required > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132248: Decoding FAST response > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132251: Preauthenticating using KDC method data > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132252: Processing preauth types: PA-PK-AS-REQ > (16), PA-PK-AS-REP_OLD (15), PA-PKINIT-KX (147), PA-ENCRYPTED-CHALLENGE > (138), PA-FX-FAST (136), 655, PA-ETYPE-INFO2 (19), PA-FX-COOKIE (133), > PA-FX-ERROR (137) > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132253: Selected etype info: etype aes256-cts, salt > "SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00" > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132254: Received cookie: > 0S\xa0\x06\x0c\x04H5L1\xa1I0G\xa0\x03\x02\x01\x12\xa2@\x04>\xa90\x81k~Js*\xdd\xe1\xda^\x8c\xe1{s\xe0O\xe7\xf7\x86 > > >\xf5\x17*\x9c\xf2L*\xa2\xaeB{\x00\xa0\xee\xdd\xde\x84\xb3\xc5\x99&S\xab\xaf\xbd|\x89\x19x_Ko?\x86\x14(*\x9f\xba > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_krb5_responder] (0x4000): > [RID#5] Got question [password]. > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132256: Preauth module encrypted_challenge (138) > (real) returned: 0/Success > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132257: Produced preauth for next request: > PA-FX-COOKIE (133), PA-ENCRYPTED-CHALLENGE (138) > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132258: Encoding request body and padata into FAST > request > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132259: Sending request (2273 bytes) to > SMB.FNR.GUB.UY > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132260: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132261: No URI records found > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132262: Sending DNS SRV query for > _kerberos._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132263: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132264: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132265: Sending DNS SRV query for > _kerberos._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132266: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132267: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132268: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132269: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132270: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132271: Initiating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132272: Sending TCP request to stream 10.12.100.1:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132273: Received answer (373 bytes) from stream > 10.12.100.1:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132274: Terminating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132275: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132276: No URI records found > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132277: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132278: No SRV records found > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132279: Response was not from primary KDC > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132280: Received error from KDC: > -1765328353/Decrypt integrity check failed > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132281: Decoding FAST response > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132283: Recovering from KDC error 31 using preauth > mech PA-ENCRYPTED-CHALLENGE (138) > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132284: Preauth tryagain input types (138): > PA-FX-COOKIE (133), PA-FX-ERROR (137) > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132285: Preauth module encrypted_challenge (138) > tryagain returned: 0/Success > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132286: Retrying AS request with primary KDC > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132287: Getting initial credentials for > [email protected] > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132288: FAST armor ccache: > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132289: Retrieving > host/[email protected] -> > krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF: > from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132291: Sending unauthenticated request > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132292: Sending request (192 bytes) to > SMB.FNR.GUB.UY (primary) > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132293: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132294: No URI records found > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132295: Sending DNS SRV query for > _kerberos-master._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132296: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): > [RID#5] [4908] 1672849145.132297: No SRV records found > > (2023-01-04 13:19:05): [krb5_child[4908]] [get_and_save_tgt] (0x0020): > [RID#5] 1725: [-1765328353][Decrypt integrity check failed] > (2023-01-04 13:19:05): [krb5_child[4908]] [map_krb5_error] (0x0020): [RID#5] > 1854: [-1765328353][Decrypt integrity check failed] > (2023-01-04 13:19:05): [krb5_child[4908]] [k5c_send_data] (0x0200): [RID#5] > Received error code 1432158227 > (2023-01-04 13:19:05): [krb5_child[4908]] [pack_response_packet] (0x2000): > [RID#5] response packet size: [4] > (2023-01-04 13:19:05): [krb5_child[4908]] [k5c_send_data] (0x4000): [RID#5] > Response sent. > (2023-01-04 13:19:05): [krb5_child[4908]] [main] (0x0400): [RID#5] krb5_child > completed successfully > (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] krb5_child > started. > (2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x1000): [RID#7] > total buffer size: [162] > (2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x0100): [RID#7] > cmd [241 (auth)] uid [700000003] gid [700000005] validate [true] enterprise > principal [false] offline [false] UPN [[email protected]] > (2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x0100): [RID#7] > ccname: [KEYRING:persistent:700000003] old_ccname: > [KEYRING:persistent:700000003] keytab: [/etc/krb5.keytab] > (2023-01-04 13:20:09): [krb5_child[4947]] [switch_creds] (0x0200): [RID#7] > Switch user to [700000003][700000005]. > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_krb5_cc_verify_ccache] > (0x2000): [RID#7] TGT not found or expired. > (2023-01-04 13:20:09): [krb5_child[4947]] [switch_creds] (0x0200): [RID#7] > Switch user to [0][0]. > (2023-01-04 13:20:09): [krb5_child[4947]] [k5c_check_old_ccache] (0x4000): > [RID#7] Ccache_file is [KEYRING:persistent:700000003] and is not active and > TGT is valid. > (2023-01-04 13:20:09): [krb5_child[4947]] [k5c_precreate_ccache] (0x4000): > [RID#7] Recreating ccache > (2023-01-04 13:20:09): [krb5_child[4947]] [k5c_setup_fast] (0x0100): [RID#7] > Fast principal is set to [host/[email protected]] > (2023-01-04 13:20:09): [krb5_child[4947]] [find_principal_in_keytab] > (0x4000): [RID#7] Trying to find principal > host/[email protected] in keytab. > (2023-01-04 13:20:09): [krb5_child[4947]] [match_principal] (0x1000): [RID#7] > Principal matched to the sample > (host/[email protected]). > (2023-01-04 13:20:09): [krb5_child[4947]] [check_fast_ccache] (0x0200): > [RID#7] FAST TGT is still valid. > (2023-01-04 13:20:09): [krb5_child[4947]] [privileged_krb5_setup] (0x0080): > [RID#7] Cannot open the PAC responder socket > (2023-01-04 13:20:09): [krb5_child[4947]] [become_user] (0x0200): [RID#7] > Trying to become user [700000003][700000005]. > (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x2000): [RID#7] Running as > [700000003][700000005]. > (2023-01-04 13:20:09): [krb5_child[4947]] [set_lifetime_options] (0x0100): > [RID#7] No specific renewable lifetime requested. > (2023-01-04 13:20:09): [krb5_child[4947]] [set_lifetime_options] (0x0100): > [RID#7] No specific lifetime requested. > (2023-01-04 13:20:09): [krb5_child[4947]] [set_canonicalize_option] (0x0100): > [RID#7] Canonicalization is set to [true] > (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] Will > perform auth > (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] Will > perform online auth > (2023-01-04 13:20:09): [krb5_child[4947]] [tgt_req_child] (0x1000): [RID#7] > Attempting to get a TGT > (2023-01-04 13:20:09): [krb5_child[4947]] [get_and_save_tgt] (0x0400): > [RID#7] Attempting kinit for realm [SMB.FNR.GUB.UY] > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814719: Getting initial credentials for > [email protected] > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814720: Error loading plugin module pkinit: > 2/unable to find plugin > [/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/pkinit.so]: No such file or > directory > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814721: FAST armor ccache: > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814722: Retrieving > host/[email protected] -> > krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF: > from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814724: Sending unauthenticated request > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814725: Sending request (192 bytes) to > SMB.FNR.GUB.UY > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814726: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814727: No URI records found > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814728: Sending DNS SRV query for > _kerberos._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814729: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814730: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814731: Sending DNS SRV query for > _kerberos._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814732: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814733: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814734: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814735: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814736: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814737: Initiating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814738: Sending TCP request to stream 10.12.100.1:88 > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814739: Received answer (319 bytes) from stream > 10.12.100.1:88 > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814740: Terminating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814741: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814742: No URI records found > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814743: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814744: No SRV records found > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814745: Response was not from primary KDC > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814746: Received error from KDC: > -1765328359/Additional pre-authentication required > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814747: Upgrading to FAST due to presence of > PA_FX_FAST in reply > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814748: FAST armor ccache: > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814749: Retrieving > host/[email protected] -> > krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF: > from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814750: Getting credentials > host/[email protected] -> > krbtgt/[email protected] using ccache > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814751: Retrieving > host/[email protected] -> > krb5_ccache_conf_data/start_realm@X-CACHECONF: from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814752: Retrieving > host/[email protected] -> > krbtgt/[email protected] from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814753: Retrieving > host/[email protected] -> > krbtgt/[email protected] from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814754: Retrieving > host/[email protected] -> > krbtgt/[email protected] from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 0/Success > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814755: Starting with TGT for client realm: > host/[email protected] -> > krbtgt/[email protected] > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814756: Retrieving > host/[email protected] -> > krbtgt/[email protected] from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814757: Requesting TGT > krbtgt/[email protected] using TGT > krbtgt/[email protected] > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814758: Generated subkey for TGS request: > aes256-cts/AD9C > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814759: etypes requested in TGS request: > aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, > camellia128-cts, camellia256-cts > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814761: Encoding request body and padata into FAST > request > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814762: Sending request (2178 bytes) to > IDM.FNR.GUB.UY > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814763: Initiating TCP connection to stream > 10.2.100.13:88 > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814764: Sending TCP request to stream 10.2.100.13:88 > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814765: Received answer (2089 bytes) from stream > 10.2.100.13:88 > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814766: Terminating TCP connection to stream > 10.2.100.13:88 > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814767: Response was from primary KDC > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814768: Decoding FAST response > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814769: FAST reply key: aes256-cts/CB51 > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814770: TGS reply is for > host/[email protected] -> > krbtgt/[email protected] with session key aes256-cts/27BE > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814771: TGS request result: 0/Success > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814772: Received TGT for SMB.FNR.GUB.UY; advancing > current realm > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814773: Retrieving > host/[email protected] -> > krbtgt/[email protected] from > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: > -1765328243/Matching credential not found > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814774: Requesting TGT > krbtgt/[email protected] using TGT > krbtgt/[email protected] > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814775: Generated subkey for TGS request: > aes256-cts/542B > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814776: etypes requested in TGS request: > aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, > camellia128-cts, camellia256-cts > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814778: Encoding request body and padata into FAST > request > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814779: Sending request (2140 bytes) to > SMB.FNR.GUB.UY > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814780: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814781: No URI records found > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814782: Sending DNS SRV query for > _kerberos._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814783: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814784: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814785: Sending DNS SRV query for > _kerberos._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814786: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814787: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814788: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814789: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814790: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849209.814791: Initiating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007134: Sending TCP request to stream 10.12.100.1:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007135: Received answer (1979 bytes) from stream > 10.12.100.1:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007136: Terminating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007137: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007138: No URI records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007139: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007140: No SRV records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007141: Response was not from primary KDC > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007142: Decoding FAST response > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007143: FAST reply key: aes256-cts/C7D2 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007144: TGS reply is for > host/[email protected] -> > krbtgt/[email protected] with session key aes256-cts/4D87 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007145: TGS request result: 0/Success > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007146: Storing > host/[email protected] -> > krbtgt/[email protected] in > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007147: Received TGT for service realm: > krbtgt/[email protected] > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007148: Requesting tickets for > krbtgt/[email protected], referrals on > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007149: Generated subkey for TGS request: > aes256-cts/8B4A > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007150: etypes requested in TGS request: > aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, > camellia128-cts, camellia256-cts > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007152: Encoding request body and padata into FAST > request > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007153: Sending request (2031 bytes) to > SMB.FNR.GUB.UY > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007154: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007155: No URI records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007156: Sending DNS SRV query for > _kerberos._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007157: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007158: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007159: Sending DNS SRV query for > _kerberos._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007160: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007161: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007162: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007163: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007164: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007165: Initiating TCP connection to stream > 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007166: Sending TCP request to stream 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007167: Received answer (2003 bytes) from stream > 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007168: Terminating TCP connection to stream > 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007169: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007170: No URI records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007171: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007172: No SRV records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007173: Response was not from primary KDC > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007174: Decoding FAST response > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007175: FAST reply key: aes256-cts/E6AF > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007176: TGS reply is for > host/[email protected] -> > krbtgt/[email protected] with session key aes256-cts/4E13 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007177: TGS request result: 0/Success > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007178: Received creds for desired service > krbtgt/[email protected] > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007179: Storing > host/[email protected] -> > krbtgt/[email protected] in > MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007180: Armor ccache sesion key: aes256-cts/4E13 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007182: Creating authenticator for > host/[email protected] -> > krbtgt/[email protected], seqnum 0, subkey aes256-cts/63B9, > session key aes256-cts/4E13 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007184: FAST armor key: aes256-cts/D363 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007186: Sending unauthenticated request > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007187: Encoding request body and padata into FAST > request > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007188: Sending request (2089 bytes) to > SMB.FNR.GUB.UY > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007189: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007190: No URI records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007191: Sending DNS SRV query for > _kerberos._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007192: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007193: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007194: Sending DNS SRV query for > _kerberos._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007195: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007196: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007197: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007198: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007199: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007200: Initiating TCP connection to stream > 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007201: Sending TCP request to stream 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007202: Received answer (676 bytes) from stream > 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007203: Terminating TCP connection to stream > 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007204: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007205: No URI records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007206: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007207: No SRV records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007208: Response was not from primary KDC > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007209: Received error from KDC: > -1765328359/Additional pre-authentication required > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007210: Decoding FAST response > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007213: Preauthenticating using KDC method data > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007214: Processing preauth types: PA-PK-AS-REQ > (16), PA-PK-AS-REP_OLD (15), PA-PKINIT-KX (147), PA-ENCRYPTED-CHALLENGE > (138), PA-FX-FAST (136), 655, PA-ETYPE-INFO2 (19), PA-FX-COOKIE (133), > PA-FX-ERROR (137) > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007215: Selected etype info: etype aes256-cts, salt > "SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00" > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007216: Received cookie: > 0S\xa0\x06\x0c\x04H5L1\xa1I0G\xa0\x03\x02\x01\x12\xa2@\x04>\xa5\xa4r\xfeV\x8f\xeb\xf7i\x92\xc0\xf0\xe6\xda&\xf9\x81m\xa9s&)\x15,\xc4\x953D\xb24\x8d\xd2\x94\xbb\xbb\xbf\x08*U\xb0K\x7f\xc2IF\xf4\x88\xd2\xd3\xfdY\x80d\xd0\xdf\xd9\xee\x9e\x0b7h' > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_krb5_responder] (0x4000): > [RID#7] Got question [password]. > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007218: Preauth module encrypted_challenge (138) > (real) returned: 0/Success > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007219: Produced preauth for next request: > PA-FX-COOKIE (133), PA-ENCRYPTED-CHALLENGE (138) > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007220: Encoding request body and padata into FAST > request > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007221: Sending request (2272 bytes) to > SMB.FNR.GUB.UY > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007222: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007223: No URI records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007224: Sending DNS SRV query for > _kerberos._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007225: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007226: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007227: Sending DNS SRV query for > _kerberos._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007228: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007229: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007230: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007231: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007232: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007233: Initiating TCP connection to stream > 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007234: Sending TCP request to stream 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007235: Received answer (1954 bytes) from stream > 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007236: Terminating TCP connection to stream > 10.2.100.11:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007237: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007238: No URI records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007239: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007240: No SRV records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007241: Response was not from primary KDC > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007242: Decoding FAST response > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007243: Processing preauth types: > PA-ENCRYPTED-CHALLENGE (138), PA-ETYPE-INFO2 (19) > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007244: Selected etype info: etype aes256-cts, salt > "SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00" > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007245: Preauth module encrypted_challenge (138) > (real) returned: 0/Success > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007246: Produced preauth for next request: (empty) > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007247: AS key determined by preauth: > aes256-cts/486D > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007248: FAST reply key: aes256-cts/E923 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007249: Decrypted AS reply; session key is: > aes256-cts/7B52 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007250: FAST negotiation: available > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_krb5_expire_callback_func] > (0x2000): [RID#7] exp_time: [10270225] > (2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x2000): [RID#7] > Keytab entry with the realm of the credential not found in keytab. Using the > last entry. > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007251: Retrieving > host/[email protected] from MEMORY:/etc/krb5.keytab > (vno 0, enctype 0) with result: 0/Success > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007252: Resolving unique ccache of type MEMORY > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007253: Initializing MEMORY:azeA6F5 with default > princ [email protected] > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007254: Storing [email protected] -> > krbtgt/[email protected] in MEMORY:azeA6F5 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007255: Getting credentials [email protected] > -> host/[email protected] using ccache MEMORY:azeA6F5 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007256: Retrieving [email protected] -> > krb5_ccache_conf_data/start_realm@X-CACHECONF: from MEMORY:azeA6F5 with > result: -1765328243/Matching credential not found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007257: Retrieving [email protected] -> > host/[email protected] from MEMORY:azeA6F5 with > result: -1765328243/Matching credential not found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007258: Retrieving [email protected] -> > krbtgt/[email protected] from MEMORY:azeA6F5 with result: > -1765328243/Matching credential not found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007259: Retrieving [email protected] -> > krbtgt/[email protected] from MEMORY:azeA6F5 with result: > 0/Success > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007260: Starting with TGT for client realm: > [email protected] -> krbtgt/[email protected] > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007261: Retrieving [email protected] -> > krbtgt/[email protected] from MEMORY:azeA6F5 with result: > -1765328243/Matching credential not found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007262: Requesting TGT > krbtgt/[email protected] using TGT > krbtgt/[email protected] > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007263: Generated subkey for TGS request: > aes256-cts/4D40 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007264: etypes requested in TGS request: > aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, > camellia128-cts, camellia256-cts > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007266: Encoding request body and padata into FAST > request > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007267: Sending request (1785 bytes) to > SMB.FNR.GUB.UY > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007268: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007269: No URI records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007270: Sending DNS SRV query for > _kerberos._udp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007271: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007272: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007273: Sending DNS SRV query for > _kerberos._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007274: SRV answer: 0 100 88 > "samba02.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007275: SRV answer: 0 100 88 > "samba01.smb.fnr.gub.uy." > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007276: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007277: Resolving hostname samba01.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007278: Resolving hostname samba02.smb.fnr.gub.uy. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007279: Initiating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007280: Sending TCP request to stream 10.12.100.1:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007281: Received answer (1747 bytes) from stream > 10.12.100.1:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007282: Terminating TCP connection to stream > 10.12.100.1:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007283: Sending DNS URI query for > _kerberos.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007284: No URI records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007285: Sending DNS SRV query for > _kerberos-master._tcp.SMB.FNR.GUB.UY. > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007286: No SRV records found > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007287: Response was not from primary KDC > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007288: Decoding FAST response > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007289: FAST reply key: aes256-cts/60C7 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007290: TGS reply is for [email protected] -> > krbtgt/[email protected] with session key aes256-cts/FF01 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007291: TGS request result: 0/Success > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007292: Storing [email protected] -> > krbtgt/[email protected] in MEMORY:azeA6F5 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007293: Received TGT for service realm: > krbtgt/[email protected] > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007294: Requesting tickets for > host/[email protected], referrals on > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007295: Generated subkey for TGS request: > aes256-cts/DE5B > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007296: etypes requested in TGS request: > aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, > camellia128-cts, camellia256-cts > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007298: Encoding request body and padata into FAST > request > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007299: Sending request (1821 bytes) to > IDM.FNR.GUB.UY > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007300: Initiating TCP connection to stream > 10.2.100.13:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007301: Sending TCP request to stream 10.2.100.13:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007302: Received answer (1837 bytes) from stream > 10.2.100.13:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007303: Terminating TCP connection to stream > 10.2.100.13:88 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007304: Response was from primary KDC > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007305: Decoding FAST response > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007306: FAST reply key: aes256-cts/B4B2 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007307: TGS reply is for [email protected] -> > host/[email protected] with session key aes256-cts/AA94 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007308: TGS request result: 0/Success > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007309: Received creds for desired service > host/[email protected] > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007310: Storing [email protected] -> > host/[email protected] in MEMORY:azeA6F5 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007311: Creating authenticator for > [email protected] -> host/[email protected], > seqnum 0, subkey (null), session key aes256-cts/AA94 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007313: Retrieving > host/[email protected] from MEMORY:/etc/krb5.keytab > (vno 3, enctype aes256-cts) with result: 0/Success > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007314: Decrypted AP-REQ with specified server > principal host/[email protected]: aes256-cts/3099 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007315: AP-REQ ticket: [email protected] -> > host/[email protected], session key aes256-cts/AA94 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007316: Negotiated enctype based on authenticator: > aes256-cts > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007317: Initializing MEMORY:rd_req2 with default > princ [email protected] > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007318: Storing [email protected] -> > host/[email protected] in MEMORY:rd_req2 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007319: Storing [email protected] -> > krbtgt/[email protected] in MEMORY:rd_req2 > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007320: Destroying ccache MEMORY:azeA6F5 > > (2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x0400): [RID#7] > TGT verified using key for [host/[email protected]]. > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007321: Retrieving [email protected] -> > host/[email protected] from MEMORY:rd_req2 with > result: 0/Success > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007322: Retrieving > host/[email protected] from MEMORY:/etc/krb5.keytab > (vno 3, enctype aes256-cts) with result: 0/Success > > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_send_pac] (0x0080): [RID#7] > failed to contact PAC responder > (2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x0040): [RID#7] > sss_send_pac failed, group membership for user with principal > [[email protected]] might not be correct. > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): > [RID#7] [4947] 1672849210.007323: Destroying ccache MEMORY:rd_req2 > > (2023-01-04 13:20:10): [krb5_child[4947]] [get_and_save_tgt] (0x2000): > [RID#7] Running as [700000003][700000005]. > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_get_ccache_name_for_principal] > (0x4000): [RID#7] Location: [KEYRING:persistent:700000003] > (2023-01-04 13:20:10): [krb5_child[4947]] [sss_get_ccache_name_for_principal] > (0x4000): [RID#7] tmp_ccname: > [KEYRING:persistent:700000003:krb_ccache_17Y700s] > (2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] > Initializing ccache of type [KEYRING] > (2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] > CC supports switch > (2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] > returning: 0 > (2023-01-04 13:20:10): [krb5_child[4947]] [safe_remove_old_ccache_file] > (0x0400): [RID#7] New and old ccache file are the same, none will be deleted. > (2023-01-04 13:20:10): [krb5_child[4947]] [k5c_send_data] (0x0200): [RID#7] > Received error code 0 > (2023-01-04 13:20:10): [krb5_child[4947]] [pack_response_packet] (0x2000): > [RID#7] response packet size: [140] > (2023-01-04 13:20:10): [krb5_child[4947]] [k5c_send_data] (0x4000): [RID#7] > Response sent. > (2023-01-04 13:20:10): [krb5_child[4947]] [main] (0x0400): [RID#7] krb5_child > completed successfully _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
