[root@galaxy ~]# rm -f /var/lib/sss/mc/*
[root@galaxy ~]# rm -f /var/lib/sss/db/*
[root@galaxy ~]# /usr/sbin/sssd -i -d9 2>&1 | grep krb
(Wed Apr 15 10:36:13 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_keytab has no value
(Wed Apr 15 10:36:13 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_keytab has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_init_creds is TRUE
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_server has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_canonicalize is FALSE
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_get_map] (0x0400): Option ldap_user_krb_last_pwd_change has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_get_map] (0x0400): Option ldap_user_krb_password_expiration has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_set_ad_id_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_server has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_ccachedir has value /tmp
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_ccname_template has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_auth_timeout has value 6
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_keytab has value /etc/krb5.keytab
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_validate is TRUE
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_kpasswd has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_kpasswd has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_store_password_if_offline is FALSE
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_renewable_lifetime has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_lifetime has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_renew_interval has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_fast has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_fast_principal has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_canonicalize is FALSE
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_enterprise_principal is TRUE
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_server set to (null)
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_use_kdcinfo set to true
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_keytab has no value
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has value ENSKEDE.LOCAL
(Wed Apr 15 10:36:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_write_domain_mappings] (0x0200): Mapping file for domain [ENSKEDE.LOCAL] is [/var/lib/sss/pubconf/krb5.include.d/domain_realm_ENSKEDE_LOCAL]
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.410269: Getting initial credentials for GALAXY$@ENSKEDE.LOCAL
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.414182: Looked up etypes in keytab: des-cbc-crc, des, des-cbc-crc, aes128-cts, aes256-cts, rc4-hmac
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.415381: Sending request (203 bytes) to ENSKEDE.LOCAL
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.421400: Sending initial UDP request to dgram 10.77.20.100:88
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.433883: Received answer from dgram 10.77.20.100:88
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.436981: Response was from master KDC
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.437927: Received error from KDC: -1765328359/Additional pre-authentication required
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.440508: Processing preauth types: 16, 15, 19, 2
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.441151: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.445541: Retrieving GALAXY$@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.447294: AS key obtained for encrypted timestamp: aes256-cts/9498
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.450123: Encrypted timestamp (for 1429086975.448147): plain 301AA011180F32303135303431353038333631355AA105020306D693, encrypted 9B59C29B73B47BFE10157165C1DBE926A7F3D600AE71B125765F562FB27BD6BDD40E3FAE5423A35C017F9A638250BBCF18FFC8E88C05E446
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.450849: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.451242: Produced preauth for next request: 2
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.452959: Sending request (283 bytes) to ENSKEDE.LOCAL
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.455696: Sending initial UDP request to dgram 10.77.20.100:88
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.480598: Received answer from dgram 10.77.20.100:88
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.485492: Response was from master KDC
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.489462: Processing preauth types: 19
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.491842: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.492953: Produced preauth for next request: (empty)
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.496659: AS key determined by preauth: aes256-cts/9498
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.500241: Decrypted AS reply; session key is: rc4-hmac/064E
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.501136: FAST negotiation: unavailable
(Wed Apr 15 10:36:15 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086975.505709: Initializing FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_CmAckW with default princ GALAXY$@ENSKEDE.LOCAL
(Wed Apr 15 10:36:17 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086977.599384: Removing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_CmAckW
(Wed Apr 15 10:36:17 2015) [[sssd[ldap_child[2134]]]] [sss_child_krb5_trace_cb] (0x4000): [2134] 1429086977.601865: Storing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_CmAckW
(Wed Apr 15 10:36:17 2015) [[sssd[ldap_child[2134]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [41] msg [FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL]
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_write_domain_mappings] (0x0200): Mapping file for domain [ENSKEDE.LOCAL] is [/var/lib/sss/pubconf/krb5.include.d/domain_realm_ENSKEDE_LOCAL]
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_keytab has no value
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_keytab has no value
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_init_creds is TRUE
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_server has no value
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_backup_server has no value
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_canonicalize is FALSE
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_use_kdcinfo is TRUE
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_last_pwd_change has no value
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_password_expiration has no value
(Wed Apr 15 10:36:18 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_set_ad_id_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
(Wed Apr 15 10:36:22 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbLastPwdChange is not available for [ola].
(Wed Apr 15 10:36:22 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbPasswordExpiration is not available for [ola].
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.35224: Getting initial credentials for GALAXY$@ENSKEDE.LOCAL
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.38957: Looked up etypes in keytab: des-cbc-crc, des, des-cbc-crc, aes128-cts, aes256-cts, rc4-hmac
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.40334: Sending request (203 bytes) to ENSKEDE.LOCAL
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.44922: Sending initial UDP request to dgram 10.77.20.100:88
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.55946: Received answer from dgram 10.77.20.100:88
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.59047: Response was from master KDC
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.60202: Received error from KDC: -1765328359/Additional pre-authentication required
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.64805: Processing preauth types: 16, 15, 19, 2
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.66814: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.68929: Retrieving GALAXY$@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.69833: AS key obtained for encrypted timestamp: aes256-cts/9498
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.71671: Encrypted timestamp (for 1429086983.70687): plain 301AA011180F32303135303431353038333632335AA105020301141F, encrypted F932413B538A9AE4D2A0909173F2A772CCC6438D10D16EF5CDC471C6DC22DE9B754AEB07FC04B7D8B1433C5EBD0C33A547357AAE805A7BCE
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.72408: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.72752: Produced preauth for next request: 2
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.73489: Sending request (283 bytes) to ENSKEDE.LOCAL
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.76824: Sending initial UDP request to dgram 10.77.20.100:88
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.92234: Received answer from dgram 10.77.20.100:88
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.95892: Response was from master KDC
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.97011: Processing preauth types: 19
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.97824: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.98645: Produced preauth for next request: (empty)
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.99848: AS key determined by preauth: aes256-cts/9498
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.101219: Decrypted AS reply; session key is: rc4-hmac/470D
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.101607: FAST negotiation: unavailable
(Wed Apr 15 10:36:23 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086983.103328: Initializing FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_oAz7PL with default princ GALAXY$@ENSKEDE.LOCAL
(Wed Apr 15 10:36:25 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086985.161486: Removing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_oAz7PL
(Wed Apr 15 10:36:25 2015) [[sssd[ldap_child[2145]]]] [sss_child_krb5_trace_cb] (0x4000): [2145] 1429086985.162567: Storing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_oAz7PL
(Wed Apr 15 10:36:25 2015) [[sssd[ldap_child[2145]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [41] msg [FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL]
(Wed Apr 15 10:36:25 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbLastPwdChange is not available for [ola].
(Wed Apr 15 10:36:25 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbPasswordExpiration is not available for [ola].
(Wed Apr 15 10:36:26 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_pam_handler] (0x1000): Wait queue of user [ola] is empty, running request immediately.
(Wed Apr 15 10:36:26 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_auth_send] (0x0100): pam_dp_send_req returned 0
(Wed Apr 15 10:36:26 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_auth_send] (0x4000): Ccache_file is [not set] and is not active and TGT is not valid.
(Wed Apr 15 10:36:26 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_auth_prepare_ccache_name] (0x4000): Recreating  ccache file.
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [main] (0x0400): krb5_child started.
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [unpack_buffer] (0x1000): total buffer size: [122]
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [unpack_buffer] (0x0100): cmd [241] uid [11103] gid [11116] validate [true] enterprise principal [true] offline [false] UPN [ola@ENSKEDE.LOCAL]
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_11103_XXXXXX] keytab: [/etc/krb5.keytab]
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment.
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment.
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true]
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [k5c_setup] (0x0100): Not using FAST.
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [main] (0x0400): Will perform online auth
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [tgt_req_child] (0x1000): Attempting to get a TGT
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [ENSKEDE.LOCAL]
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.291492: Getting initial credentials for ola\@ENSKEDE.LOCAL@ENSKEDE.LOCAL
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.294416: Sending request (213 bytes) to ENSKEDE.LOCAL
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.298318: Sending initial UDP request to dgram 10.77.20.100:88
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.309986: Received answer from dgram 10.77.20.100:88
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.313206: Response was from master KDC
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.314194: Received error from KDC: -1765328359/Additional pre-authentication required
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.317415: Processing preauth types: 16, 15, 19, 2
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.318021: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALola", params ""
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.501192: AS key obtained for encrypted timestamp: aes256-cts/3237
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.504201: Encrypted timestamp (for 1429086986.501966): plain 301AA011180F32303135303431353038333632365AA105020307A8CE, encrypted 3043C5E862A6E31BA04829B1116682D59BB6268D4DD68F79142DDBAC21851A89F0F572A282DC97D2F411448CF6401F2D37FDAB63FF146E6B
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.504985: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.506068: Produced preauth for next request: 2
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.508460: Sending request (293 bytes) to ENSKEDE.LOCAL
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.511383: Sending initial UDP request to dgram 10.77.20.100:88
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.529113: Received answer from dgram 10.77.20.100:88
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.532162: Response was from master KDC
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.533065: Processing preauth types: 19
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.534881: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALola", params ""
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.536040: Produced preauth for next request: (empty)
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.536941: AS key determined by preauth: aes256-cts/3237
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.539817: Decrypted AS reply; session key is: rc4-hmac/4B29
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.540469: FAST negotiation: unavailable
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_krb5_expire_callback_func] (0x2000): exp_time: [707422299]
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [validate_tgt] (0x2000): Found keytab entry with the realm of the credential.
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.548250: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.549019: Resolving unique ccache of type MEMORY
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.550565: Initializing MEMORY:5kKBDgx with default princ ola@ENSKEDE.LOCAL
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.551078: Removing ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from MEMORY:5kKBDgx
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.552163: Storing ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in MEMORY:5kKBDgx
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.553189: Getting credentials ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL using ccache MEMORY:5kKBDgx
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.555212: Retrieving ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:5kKBDgx with result: -1765328243/Matching credential not found
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.557013: Retrieving ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from MEMORY:5kKBDgx with result: 0/Success
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.558177: Found cached TGT for service realm: ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.558738: Requesting tickets for host/galaxy.enskede.local@ENSKEDE.LOCAL, referrals on
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.560076: Generated subkey for TGS request: rc4-hmac/ABD9
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.560889: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.563091: Sending request (1394 bytes) to ENSKEDE.LOCAL
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.565988: Sending initial UDP request to dgram 10.77.20.100:88
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.582647: Received answer from dgram 10.77.20.100:88
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.586422: Response was from master KDC
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.588574: TGS reply is for ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL with session key rc4-hmac/2085
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.589262: TGS request result: 0/Success
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.590854: Received creds for desired service host/galaxy.enskede.local@ENSKEDE.LOCAL
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.591279: Removing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:5kKBDgx
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.592613: Storing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL in MEMORY:5kKBDgx
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.594674: Creating authenticator for ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL, seqnum 0, subkey (null, session key rc4-hmac/2085
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.597562: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 6, enctype rc4-hmac) with result: 0/Success
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.600140: Decrypted AP-REQ with specified server principal host/galaxy.enskede.local@ENSKEDE.LOCAL: rc4-hmac/8257
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.600962: AP-REQ ticket: ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL, session key rc4-hmac/2085
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.605942: Negotiated enctype based on authenticator: rc4-hmac
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.606674: Initializing MEMORY:rd_req2 with default princ ola@ENSKEDE.LOCAL
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.607148: Removing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:rd_req2
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.609676: Storing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL in MEMORY:rd_req2
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.611486: Destroying ccache MEMORY:5kKBDgx
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [validate_tgt] (0x0400): TGT verified using key for [host/galaxy.enskede.local@ENSKEDE.LOCAL].
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.613895: Retrieving ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:rd_req2 with result: 0/Success
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.618673: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 6, enctype rc4-hmac) with result: 0/Success
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_child_krb5_trace_cb] (0x4000): [2146] 1429086986.933760: Destroying ccache MEMORY:rd_req2
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [become_user] (0x0200): Trying to become user [11103][11116].
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_get_ccache_name_for_principal] (0x4000): Location: [FILE:/tmp/krb5cc_11103_XXXXXX]
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [sss_get_ccache_name_for_principal] (0x2000): krb5_cc_cache_match failed: [-1765328243][Can't find client principal ola@ENSKEDE.LOCAL in cache collection]
(Wed Apr 15 10:36:26 2015) [[sssd[krb5_child[2146]]]] [create_ccache] (0x4000): Initializing ccache of type [FILE]
(Wed Apr 15 10:36:28 2015) [[sssd[krb5_child[2146]]]] [k5c_send_data] (0x0200): Received error code 0
(Wed Apr 15 10:36:28 2015) [[sssd[krb5_child[2146]]]] [pack_response_packet] (0x2000): response packet size: [135]
(Wed Apr 15 10:36:28 2015) [[sssd[krb5_child[2146]]]] [k5c_send_data] (0x4000): Response sent.
(Wed Apr 15 10:36:28 2015) [[sssd[krb5_child[2146]]]] [main] (0x0400): krb5_child completed successfully
(Wed Apr 15 10:36:28 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][3][41].
(Wed Apr 15 10:36:28 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][-1073741822][18].
(Wed Apr 15 10:36:28 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][-1073741823][32].
(Wed Apr 15 10:36:28 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): TGT times are [1429086986][1429086986][1429122986][1429691786].
(Wed Apr 15 10:36:28 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][6][8].
(Wed Apr 15 10:36:28 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_krb5_check_ccache_princ] (0x2000): Searching for [ola@ENSKEDE.LOCAL] in cache of type [FILE]
(Wed Apr 15 10:36:28 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_mod_ccname] (0x4000): Save ccname [FILE:/tmp/krb5cc_11103_6EqnbU] for user [ola].
(Wed Apr 15 10:36:33 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbLastPwdChange is not available for [ola].
(Wed Apr 15 10:36:33 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbPasswordExpiration is not available for [ola].