API tools faq
paste
Advertisement
nachogomez

krb5_child.log

nachogomez
Jul 14th, 2019
499
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 31.76 KB | None | 0 0
raw download clone embed print report
  1. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [main] (0x0400): krb5_child started.
  2. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [unpack_buffer] (0x1000): total buffer size: [160]
  3. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [unpack_buffer] (0x0100): cmd [249] uid [756200025] gid [756200025] validate [true] enterprise principal [false] offline [false] UPN [my.user@IPA.MYDOMAIN.LOCAL]
  4. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:756200025] old_ccname: [KEYRING:persistent:756200025] keytab: [/etc/krb5.keytab]
  5. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [k5c_setup_fast] (0x0100): Fast principal is set to [host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL]
  6. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [find_principal_in_keytab] (0x4000): Trying to find principal host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL in keytab.
  7. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [match_principal] (0x1000): Principal matched to the sample (host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL).
  8. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [check_fast_ccache] (0x0200): FAST TGT is still valid.
  9. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [become_user] (0x0200): Trying to become user [756200025][756200025].
  10. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [main] (0x2000): Running as [756200025][756200025].
  11. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [k5c_setup] (0x2000): Running as [756200025][756200025].
  12. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested.
  13. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [set_lifetime_options] (0x0100): No specific lifetime requested.
  14. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [set_canonicalize_option] (0x0100): Canonicalization is set to [true]
  15. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [main] (0x0400): Will perform pre-auth
  16. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [tgt_req_child] (0x1000): Attempting to get a TGT
  17. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [IPA.MYDOMAIN.LOCAL]
  18. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489385: Getting initial credentials for my.user@IPA.MYDOMAIN.LOCAL
  19.  
  20. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489386: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL
  21.  
  22. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489387: Retrieving host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krb5_ccache_conf_data/fast_avail/krbtgt\/IPA.MYDOMAIN.LOCAL\@IPA.MYDOMAIN.LOCAL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL with result: -1765328243/Matching credential not found
  23.  
  24. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489389: Sending unauthenticated request
  25.  
  26. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489390: Sending request (196 bytes) to IPA.MYDOMAIN.LOCAL
  27.  
  28. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489391: Initiating TCP connection to stream 192.168.201.209:88
  29.  
  30. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489392: Sending TCP request to stream 192.168.201.209:88
  31.  
  32. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489393: Received answer (283 bytes) from stream 192.168.201.209:88
  33.  
  34. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489394: Terminating TCP connection to stream 192.168.201.209:88
  35.  
  36. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489395: Response was from master KDC
  37.  
  38. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489396: Received error from KDC: -1765328359/Additional pre-authentication required
  39.  
  40. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489397: Upgrading to FAST due to presence of PA_FX_FAST in reply
  41.  
  42. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489398: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL
  43.  
  44. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489399: Retrieving host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krb5_ccache_conf_data/fast_avail/krbtgt\/IPA.MYDOMAIN.LOCAL\@IPA.MYDOMAIN.LOCAL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL with result: -1765328243/Matching credential not found
  45.  
  46. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489400: Getting credentials host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krbtgt/IPA.MYDOMAIN.LOCAL@IPA.MYDOMAIN.LOCAL using ccache MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL
  47.  
  48. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489401: Retrieving host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krbtgt/IPA.MYDOMAIN.LOCAL@IPA.MYDOMAIN.LOCAL from MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL with result: 0/Success
  49.  
  50. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489402: Armor ccache sesion key: aes256-cts/D1CF
  51.  
  52. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489404: Creating authenticator for host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krbtgt/IPA.MYDOMAIN.LOCAL@IPA.MYDOMAIN.LOCAL, seqnum 0, subkey aes256-cts/CD48, session key aes256-cts/D1CF
  53.  
  54. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489406: FAST armor key: aes256-cts/D3BC
  55.  
  56. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489408: Sending unauthenticated request
  57.  
  58. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489409: Encoding request body and padata into FAST request
  59.  
  60. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489410: Sending request (1135 bytes) to IPA.MYDOMAIN.LOCAL
  61.  
  62. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489411: Initiating TCP connection to stream 192.168.201.209:88
  63.  
  64. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489412: Sending TCP request to stream 192.168.201.209:88
  65.  
  66. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489413: Received answer (665 bytes) from stream 192.168.201.209:88
  67.  
  68. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489414: Terminating TCP connection to stream 192.168.201.209:88
  69.  
  70. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489415: Response was from master KDC
  71.  
  72. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489416: Received error from KDC: -1765328359/Additional pre-authentication required
  73.  
  74. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489417: Decoding FAST response
  75.  
  76. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489420: Preauthenticating using KDC method data
  77.  
  78. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489421: Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD (15), PA-PK-AS-REQ_OLD (14), PA-FX-FAST (136), PA-PKINIT-KX (147), PA-OTP-CHALLENGE (141), PA-FX-COOKIE (133), PA-FX-ERROR (137)
  79.  
  80. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_child_krb5_trace_cb] (0x4000): [12181] 1563096650.489422: Received cookie: MIT
  81.  
  82. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [sss_krb5_responder] (0x4000): Got question [otp].
  83. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [answer_otp] (0x4000): [0] Vendor [(null)].
  84. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [answer_otp] (0x4000): [0] Token-ID [(null)].
  85. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [answer_otp] (0x4000): [0] Challenge [(null)].
  86. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [answer_otp] (0x4000): [0] Flags [1].
  87. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [answer_otp] (0x2000): Exit answer_otp during pre-auth.
  88. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [get_and_save_tgt] (0x0400): krb5_get_init_creds_password returned [11] during pre-auth.
  89. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [k5c_send_data] (0x0200): Received error code 0
  90. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [pack_response_packet] (0x2000): response packet size: [15]
  91. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [k5c_send_data] (0x4000): Response sent.
  92. (Sun Jul 14 04:30:50 2019) [[sssd[krb5_child[12181]]]] [main] (0x0400): krb5_child completed successfully
  93. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [main] (0x0400): krb5_child started.
  94. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [unpack_buffer] (0x1000): total buffer size: [192]
  95. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [unpack_buffer] (0x0100): cmd [241] uid [756200025] gid [756200025] validate [true] enterprise principal [false] offline [false] UPN [my.user@IPA.MYDOMAIN.LOCAL]
  96. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:756200025] old_ccname: [KEYRING:persistent:756200025] keytab: [/etc/krb5.keytab]
  97. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [switch_creds] (0x0200): Switch user to [756200025][756200025].
  98. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired.
  99. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [switch_creds] (0x0200): Switch user to [0][0].
  100. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [KEYRING:persistent:756200025] and is active and TGT is valid.
  101. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [k5c_setup_fast] (0x0100): Fast principal is set to [host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL]
  102. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [find_principal_in_keytab] (0x4000): Trying to find principal host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL in keytab.
  103. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [match_principal] (0x1000): Principal matched to the sample (host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL).
  104. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [check_fast_ccache] (0x0200): FAST TGT is still valid.
  105. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [become_user] (0x0200): Trying to become user [756200025][756200025].
  106. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [main] (0x2000): Running as [756200025][756200025].
  107. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [k5c_setup] (0x2000): Running as [756200025][756200025].
  108. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested.
  109. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [set_lifetime_options] (0x0100): No specific lifetime requested.
  110. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [set_canonicalize_option] (0x0100): Canonicalization is set to [true]
  111. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [main] (0x0400): Will perform online auth
  112. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [tgt_req_child] (0x1000): Attempting to get a TGT
  113. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [IPA.MYDOMAIN.LOCAL]
  114. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116326: Getting initial credentials for my.user@IPA.MYDOMAIN.LOCAL
  115.  
  116. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116327: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL
  117.  
  118. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116328: Retrieving host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krb5_ccache_conf_data/fast_avail/krbtgt\/IPA.MYDOMAIN.LOCAL\@IPA.MYDOMAIN.LOCAL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL with result: -1765328243/Matching credential not found
  119.  
  120. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116330: Sending unauthenticated request
  121.  
  122. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116331: Sending request (196 bytes) to IPA.MYDOMAIN.LOCAL
  123.  
  124. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116332: Initiating TCP connection to stream 192.168.201.209:88
  125.  
  126. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116333: Sending TCP request to stream 192.168.201.209:88
  127.  
  128. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116334: Received answer (283 bytes) from stream 192.168.201.209:88
  129.  
  130. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116335: Terminating TCP connection to stream 192.168.201.209:88
  131.  
  132. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116336: Response was from master KDC
  133.  
  134. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116337: Received error from KDC: -1765328359/Additional pre-authentication required
  135.  
  136. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116338: Upgrading to FAST due to presence of PA_FX_FAST in reply
  137.  
  138. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116339: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL
  139.  
  140. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116340: Retrieving host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krb5_ccache_conf_data/fast_avail/krbtgt\/IPA.MYDOMAIN.LOCAL\@IPA.MYDOMAIN.LOCAL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL with result: -1765328243/Matching credential not found
  141.  
  142. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116341: Getting credentials host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krbtgt/IPA.MYDOMAIN.LOCAL@IPA.MYDOMAIN.LOCAL using ccache MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL
  143.  
  144. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116342: Retrieving host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krbtgt/IPA.MYDOMAIN.LOCAL@IPA.MYDOMAIN.LOCAL from MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL with result: 0/Success
  145.  
  146. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116343: Armor ccache sesion key: aes256-cts/D1CF
  147.  
  148. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116345: Creating authenticator for host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krbtgt/IPA.MYDOMAIN.LOCAL@IPA.MYDOMAIN.LOCAL, seqnum 0, subkey aes256-cts/D461, session key aes256-cts/D1CF
  149.  
  150. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116347: FAST armor key: aes256-cts/FA3D
  151.  
  152. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116349: Sending unauthenticated request
  153.  
  154. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116350: Encoding request body and padata into FAST request
  155.  
  156. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116351: Sending request (1135 bytes) to IPA.MYDOMAIN.LOCAL
  157.  
  158. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116352: Initiating TCP connection to stream 192.168.201.209:88
  159.  
  160. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116353: Sending TCP request to stream 192.168.201.209:88
  161.  
  162. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116354: Received answer (665 bytes) from stream 192.168.201.209:88
  163.  
  164. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116355: Terminating TCP connection to stream 192.168.201.209:88
  165.  
  166. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116356: Response was from master KDC
  167.  
  168. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116357: Received error from KDC: -1765328359/Additional pre-authentication required
  169.  
  170. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116358: Decoding FAST response
  171.  
  172. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116361: Preauthenticating using KDC method data
  173.  
  174. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116362: Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD (15), PA-PK-AS-REQ_OLD (14), PA-FX-FAST (136), PA-PKINIT-KX (147), PA-OTP-CHALLENGE (141), PA-FX-COOKIE (133), PA-FX-ERROR (137)
  175.  
  176. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116363: Received cookie: MIT
  177.  
  178. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_krb5_responder] (0x4000): Got question [otp].
  179. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116364: Preauth module otp (141) (real) returned: 0/Success
  180.  
  181. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116365: Produced preauth for next request: PA-FX-COOKIE (133), PA-OTP-REQUEST (142)
  182.  
  183. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116366: Encoding request body and padata into FAST request
  184.  
  185. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116367: Sending request (1284 bytes) to IPA.MYDOMAIN.LOCAL
  186.  
  187. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116368: Initiating TCP connection to stream 192.168.201.209:88
  188.  
  189. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116369: Sending TCP request to stream 192.168.201.209:88
  190.  
  191. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116370: Received answer (665 bytes) from stream 192.168.201.209:88
  192.  
  193. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116371: Terminating TCP connection to stream 192.168.201.209:88
  194.  
  195. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116372: Response was from master KDC
  196.  
  197. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116373: Received error from KDC: -1765328360/Preauthentication failed
  198.  
  199. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116374: Decoding FAST response
  200.  
  201. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116377: Preauthenticating using KDC method data
  202.  
  203. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116378: Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD (15), PA-PK-AS-REQ_OLD (14), PA-FX-FAST (136), PA-PKINIT-KX (147), PA-OTP-CHALLENGE (141), PA-FX-COOKIE (133), PA-FX-ERROR (137)
  204.  
  205. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_child_krb5_trace_cb] (0x4000): [12182] 1563096657.116379: Received cookie: MIT
  206.  
  207. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [sss_krb5_responder] (0x4000): Got question [otp].
  208. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [get_and_save_tgt] (0x0020): 1695: [-1765328360][Preauthentication failed]
  209. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [map_krb5_error] (0x0020): 1808: [-1765328360][Preauthentication failed]
  210. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [k5c_send_data] (0x0200): Received error code 1432158221
  211. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [pack_response_packet] (0x2000): response packet size: [20]
  212. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [k5c_send_data] (0x4000): Response sent.
  213. (Sun Jul 14 04:30:57 2019) [[sssd[krb5_child[12182]]]] [main] (0x0400): krb5_child completed successfully
  214. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [main] (0x0400): krb5_child started.
  215. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [unpack_buffer] (0x1000): total buffer size: [160]
  216. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [unpack_buffer] (0x0100): cmd [249] uid [756200025] gid [756200025] validate [true] enterprise principal [false] offline [false] UPN [my.user@IPA.MYDOMAIN.LOCAL]
  217. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:756200025] old_ccname: [KEYRING:persistent:756200025] keytab: [/etc/krb5.keytab]
  218. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [k5c_setup_fast] (0x0100): Fast principal is set to [host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL]
  219. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [find_principal_in_keytab] (0x4000): Trying to find principal host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL in keytab.
  220. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [match_principal] (0x1000): Principal matched to the sample (host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL).
  221. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [check_fast_ccache] (0x0200): FAST TGT is still valid.
  222. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [become_user] (0x0200): Trying to become user [756200025][756200025].
  223. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [main] (0x2000): Running as [756200025][756200025].
  224. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [k5c_setup] (0x2000): Running as [756200025][756200025].
  225. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested.
  226. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [set_lifetime_options] (0x0100): No specific lifetime requested.
  227. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [set_canonicalize_option] (0x0100): Canonicalization is set to [true]
  228. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [main] (0x0400): Will perform pre-auth
  229. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [tgt_req_child] (0x1000): Attempting to get a TGT
  230. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [IPA.MYDOMAIN.LOCAL]
  231. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923545: Getting initial credentials for my.user@IPA.MYDOMAIN.LOCAL
  232.  
  233. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923546: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL
  234.  
  235. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923547: Retrieving host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krb5_ccache_conf_data/fast_avail/krbtgt\/IPA.MYDOMAIN.LOCAL\@IPA.MYDOMAIN.LOCAL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL with result: -1765328243/Matching credential not found
  236.  
  237. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923549: Sending unauthenticated request
  238.  
  239. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923550: Sending request (196 bytes) to IPA.MYDOMAIN.LOCAL
  240.  
  241. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923551: Initiating TCP connection to stream 192.168.201.209:88
  242.  
  243. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923552: Sending TCP request to stream 192.168.201.209:88
  244.  
  245. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923553: Received answer (283 bytes) from stream 192.168.201.209:88
  246.  
  247. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923554: Terminating TCP connection to stream 192.168.201.209:88
  248.  
  249. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923555: Response was from master KDC
  250.  
  251. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923556: Received error from KDC: -1765328359/Additional pre-authentication required
  252.  
  253. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923557: Upgrading to FAST due to presence of PA_FX_FAST in reply
  254.  
  255. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923558: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL
  256.  
  257. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923559: Retrieving host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krb5_ccache_conf_data/fast_avail/krbtgt\/IPA.MYDOMAIN.LOCAL\@IPA.MYDOMAIN.LOCAL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL with result: -1765328243/Matching credential not found
  258.  
  259. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923560: Getting credentials host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krbtgt/IPA.MYDOMAIN.LOCAL@IPA.MYDOMAIN.LOCAL using ccache MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL
  260.  
  261. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923561: Retrieving host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krbtgt/IPA.MYDOMAIN.LOCAL@IPA.MYDOMAIN.LOCAL from MEMORY:/var/lib/sss/db/fast_ccache_IPA.MYDOMAIN.LOCAL with result: 0/Success
  262.  
  263. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923562: Armor ccache sesion key: aes256-cts/D1CF
  264.  
  265. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923564: Creating authenticator for host/server.pro.mydomain.local@IPA.MYDOMAIN.LOCAL -> krbtgt/IPA.MYDOMAIN.LOCAL@IPA.MYDOMAIN.LOCAL, seqnum 0, subkey aes256-cts/CC6C, session key aes256-cts/D1CF
  266.  
  267. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923566: FAST armor key: aes256-cts/50FB
  268.  
  269. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923568: Sending unauthenticated request
  270.  
  271. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923569: Encoding request body and padata into FAST request
  272.  
  273. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923570: Sending request (1135 bytes) to IPA.MYDOMAIN.LOCAL
  274.  
  275. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923571: Initiating TCP connection to stream 192.168.201.209:88
  276.  
  277. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923572: Sending TCP request to stream 192.168.201.209:88
  278.  
  279. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923573: Received answer (665 bytes) from stream 192.168.201.209:88
  280.  
  281. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923574: Terminating TCP connection to stream 192.168.201.209:88
  282.  
  283. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923575: Response was from master KDC
  284.  
  285. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923576: Received error from KDC: -1765328359/Additional pre-authentication required
  286.  
  287. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923577: Decoding FAST response
  288.  
  289. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923580: Preauthenticating using KDC method data
  290.  
  291. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923581: Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD (15), PA-PK-AS-REQ_OLD (14), PA-FX-FAST (136), PA-PKINIT-KX (147), PA-OTP-CHALLENGE (141), PA-FX-COOKIE (133), PA-FX-ERROR (137)
  292.  
  293. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_child_krb5_trace_cb] (0x4000): [12183] 1563096658.923582: Received cookie: MIT
  294.  
  295. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [sss_krb5_responder] (0x4000): Got question [otp].
  296. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [answer_otp] (0x4000): [0] Vendor [(null)].
  297. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [answer_otp] (0x4000): [0] Token-ID [(null)].
  298. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [answer_otp] (0x4000): [0] Challenge [(null)].
  299. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [answer_otp] (0x4000): [0] Flags [1].
  300. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [answer_otp] (0x2000): Exit answer_otp during pre-auth.
  301. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [get_and_save_tgt] (0x0400): krb5_get_init_creds_password returned [11] during pre-auth.
  302. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [k5c_send_data] (0x0200): Received error code 0
  303. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [pack_response_packet] (0x2000): response packet size: [15]
  304. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [k5c_send_data] (0x4000): Response sent.
  305. (Sun Jul 14 04:30:58 2019) [[sssd[krb5_child[12183]]]] [main] (0x0400): krb5_child completed successfully
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!