SHARE
TWEET

Untitled

OlaNys Apr 14th, 2015 252 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. [root@galaxy sssd]# /usr/sbin/sssd -d9 -i 2>&1 | grep krb
  2. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_keytab has no value
  3. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
  4. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_keytab has no value
  5. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_init_creds is TRUE
  6. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_server has no value
  7. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value
  8. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
  9. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_canonicalize is FALSE
  10. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
  11. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
  12. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_get_map] (0x0400): Option ldap_user_krb_last_pwd_change has no value
  13. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_get_map] (0x0400): Option ldap_user_krb_password_expiration has no value
  14. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_set_ad_id_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
  15. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_server has no value
  16. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value
  17. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
  18. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_ccachedir has value /tmp
  19. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_ccname_template has no value
  20. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_auth_timeout has value 6
  21. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_keytab has value /etc/krb5.keytab
  22. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_validate is TRUE
  23. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_kpasswd has no value
  24. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_kpasswd has no value
  25. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_store_password_if_offline is FALSE
  26. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_renewable_lifetime has no value
  27. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_lifetime has no value
  28. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_renew_interval has no value
  29. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_fast has no value
  30. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_fast_principal has no value
  31. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_canonicalize is FALSE
  32. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_enterprise_principal is TRUE
  33. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
  34. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_server set to (null)
  35. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
  36. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_use_kdcinfo set to true
  37. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_keytab has no value
  38. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has value ENSKEDE.LOCAL
  39. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_write_domain_mappings] (0x0200): Mapping file for domain [ENSKEDE.LOCAL] is [/var/lib/sss/pubconf/krb5.include.d/domain_realm_ENSKEDE_LOCAL]
  40. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_keytab has no value
  41. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value
  42. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_keytab has no value
  43. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_init_creds is TRUE
  44. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_server has no value
  45. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_backup_server has no value
  46. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value
  47. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_canonicalize is FALSE
  48. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_use_kdcinfo is TRUE
  49. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
  50. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_last_pwd_change has no value
  51. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_password_expiration has no value
  52. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_set_ad_id_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
  53. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.439719: Getting initial credentials for GALAXY$@ENSKEDE.LOCAL
  54. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.444884: Looked up etypes in keytab: des-cbc-crc, des, des-cbc-crc, aes128-cts, aes256-cts, rc4-hmac
  55. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.447026: Sending request (203 bytes) to ENSKEDE.LOCAL
  56. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.453207: Sending initial UDP request to dgram 10.77.20.100:88
  57. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.467578: Received answer from dgram 10.77.20.100:88
  58. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.471742: Response was from master KDC
  59. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.472732: Received error from KDC: -1765328359/Additional pre-authentication required
  60. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.475648: Processing preauth types: 16, 15, 19, 2
  61. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.476509: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
  62. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.479223: Retrieving GALAXY$@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success
  63. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.481275: AS key obtained for encrypted timestamp: aes256-cts/9498
  64. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.483600: Encrypted timestamp (for 1429034888.482438): plain 301AA011180F32303135303431343138303830385AA1050203075C86, encrypted 68208E60C3677BD7C460BED2785F7726A5BD44FCBC96425493F5EF7923DA652958119D1A0DE31405959C8E72E881DC6955FF32D05CBF3266
  65. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.484415: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
  66. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.486133: Produced preauth for next request: 2
  67. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.486734: Sending request (283 bytes) to ENSKEDE.LOCAL
  68. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.490177: Sending initial UDP request to dgram 10.77.20.100:88
  69. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.507608: Received answer from dgram 10.77.20.100:88
  70. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.511214: Response was from master KDC
  71. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.513406: Processing preauth types: 19
  72. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.514181: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
  73. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.514570: Produced preauth for next request: (empty)
  74. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.516242: AS key determined by preauth: aes256-cts/9498
  75. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.518600: Decrypted AS reply; session key is: rc4-hmac/78A4
  76. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.519587: FAST negotiation: unavailable
  77. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.522677: Initializing FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_cTMEpU with default princ GALAXY$@ENSKEDE.LOCAL
  78. (Tue Apr 14 20:08:10 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034890.768968: Removing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_cTMEpU
  79. (Tue Apr 14 20:08:10 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034890.771593: Storing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_cTMEpU
  80. (Tue Apr 14 20:08:10 2015) [[sssd[ldap_child[25999]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [41] msg [FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL]
  81. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.650248: Getting initial credentials for GALAXY$@ENSKEDE.LOCAL
  82. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.655382: Looked up etypes in keytab: des-cbc-crc, des, des-cbc-crc, aes128-cts, aes256-cts, rc4-hmac
  83. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.659017: Sending request (203 bytes) to ENSKEDE.LOCAL
  84. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.664338: Sending initial UDP request to dgram 10.77.20.100:88
  85. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.675939: Received answer from dgram 10.77.20.100:88
  86. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.678163: Response was from master KDC
  87. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.679396: Received error from KDC: -1765328359/Additional pre-authentication required
  88. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.681453: Processing preauth types: 16, 15, 19, 2
  89. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.682224: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
  90. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.684743: Retrieving GALAXY$@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success
  91. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.686320: AS key obtained for encrypted timestamp: aes256-cts/9498
  92. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.688124: Encrypted timestamp (for 1429034891.687127): plain 301AA011180F32303135303431343138303831315AA10502030A7C17, encrypted ABDC2B841462963920B499E0FECF6C6E13A05C984C195BC804EBBD4A6F350753202D6583F9C19F5253184556C781588BD67299AA68E96D1E
  93. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.689276: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
  94. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.690302: Produced preauth for next request: 2
  95. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.694184: Sending request (283 bytes) to ENSKEDE.LOCAL
  96. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.696374: Sending initial UDP request to dgram 10.77.20.100:88
  97. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.712591: Received answer from dgram 10.77.20.100:88
  98. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.717733: Response was from master KDC
  99. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.724102: Processing preauth types: 19
  100. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.725741: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
  101. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.727023: Produced preauth for next request: (empty)
  102. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.727701: AS key determined by preauth: aes256-cts/9498
  103. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.733214: Decrypted AS reply; session key is: rc4-hmac/5C11
  104. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.734022: FAST negotiation: unavailable
  105. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.737475: Initializing FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_mrjUbd with default princ GALAXY$@ENSKEDE.LOCAL
  106. (Tue Apr 14 20:08:14 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034894.200378: Removing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_mrjUbd
  107. (Tue Apr 14 20:08:14 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034894.201366: Storing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_mrjUbd
  108. (Tue Apr 14 20:08:14 2015) [[sssd[ldap_child[26003]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [41] msg [FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL]
  109. (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbLastPwdChange is not available for [ola].
  110. (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbPasswordExpiration is not available for [ola].
  111. (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_pam_handler] (0x1000): Wait queue of user [ola] is empty, running request immediately.
  112. (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired.
  113. (Tue Apr 14 20:08:15 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_auth_send] (0x4000): Ccache_file is [KEYRING:persistent:11103] and is  active and TGT is  valid.
  114. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [main] (0x0400): krb5_child started.
  115. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [unpack_buffer] (0x1000): total buffer size: [117]
  116. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [unpack_buffer] (0x0100): cmd [241] uid [11103] gid [11116] validate [true] enterprise principal [true] offline [false] UPN [ola@ENSKEDE.LOCAL]
  117. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:11103] keytab: [/etc/krb5.keytab]
  118. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment.
  119. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment.
  120. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true]
  121. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [k5c_setup] (0x0100): Not using FAST.
  122. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [main] (0x0400): Will perform online auth
  123. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [tgt_req_child] (0x1000): Attempting to get a TGT
  124. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [ENSKEDE.LOCAL]
  125. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.925100: Getting initial credentials for ola\@ENSKEDE.LOCAL@ENSKEDE.LOCAL
  126. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.930257: Sending request (213 bytes) to ENSKEDE.LOCAL
  127. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.939730: Sending initial UDP request to dgram 10.77.20.100:88
  128. (Tue Apr 14 20:08:15 2015) [sssd[pam]] [client_recv] (0x0200): (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.975251: Received answer from dgram 10.77.20.100:88
  129. (Tue Apr 14 20:08:15 2015) [sssd[pam]] [client_destructor] (0x2000): (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): Terminated client [0xdd1360][17]
  130. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.982243: Received error from KDC: -1765328359/Additional pre-authentication required
  131. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.983730: Processing preauth types: 16, 15, 19, 2
  132. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.987446: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALola", params ""
  133. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.244495: AS key obtained for encrypted timestamp: aes256-cts/3237
  134. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.247927: Encrypted timestamp (for 1429034896.245407): plain 301AA011180F32303135303431343138303831365AA105020303BE9F, encrypted C004FC346E437C7D21D75A6DB2A95F2C1A57A784B7E16CC72D0D3C634F4818A9AB3B2F39093DBA0C1309A46BBD04725F711ECF5F9080C95E
  135. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.249985: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
  136. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.251530: Produced preauth for next request: 2
  137. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.252350: Sending request (293 bytes) to ENSKEDE.LOCAL
  138. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.401044: Sending initial UDP request to dgram 10.77.20.100:88
  139. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.421643: Received answer from dgram 10.77.20.100:88
  140. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.426577: Response was from master KDC
  141. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.429459: Processing preauth types: 19
  142. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.430746: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALola", params ""
  143. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.431344: Produced preauth for next request: (empty)
  144. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.431733: AS key determined by preauth: aes256-cts/3237
  145. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.435585: Decrypted AS reply; session key is: rc4-hmac/6C40
  146. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.436234: FAST negotiation: unavailable
  147. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_krb5_expire_callback_func] (0x2000): exp_time: [707474389]
  148. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [validate_tgt] (0x2000): Found keytab entry with the realm of the credential.
  149. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.447079: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success
  150. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.449213: Resolving unique ccache of type MEMORY
  151. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.451556: Initializing MEMORY:xU5MMRt with default princ ola@ENSKEDE.LOCAL
  152. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.452447: Removing ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from MEMORY:xU5MMRt
  153. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.454574: Storing ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in MEMORY:xU5MMRt
  154. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.455682: Getting credentials ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL using ccache MEMORY:xU5MMRt
  155. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.463570: Retrieving ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:xU5MMRt with result: -1765328243/Matching credential not found
  156. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.466724: Retrieving ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from MEMORY:xU5MMRt with result: 0/Success
  157. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.467536: Found cached TGT for service realm: ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL
  158. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.469575: Requesting tickets for host/galaxy.enskede.local@ENSKEDE.LOCAL, referrals on
  159. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.473374: Generated subkey for TGS request: rc4-hmac/2C93
  160. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.474225: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac
  161. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.478737: Sending request (1394 bytes) to ENSKEDE.LOCAL
  162. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.482141: Sending initial UDP request to dgram 10.77.20.100:88
  163. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.500458: Received answer from dgram 10.77.20.100:88
  164. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.507024: Response was from master KDC
  165. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.510643: TGS reply is for ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL with session key rc4-hmac/0587
  166. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.513534: TGS request result: 0/Success
  167. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.514264: Received creds for desired service host/galaxy.enskede.local@ENSKEDE.LOCAL
  168. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.516223: Removing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:xU5MMRt
  169. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.517072: Storing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL in MEMORY:xU5MMRt
  170. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.521415: Creating authenticator for ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL, seqnum 0, subkey (null, session key rc4-hmac/0587
  171. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.525701: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 6, enctype rc4-hmac) with result: 0/Success
  172. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.527902: Decrypted AP-REQ with specified server principal host/galaxy.enskede.local@ENSKEDE.LOCAL: rc4-hmac/8257
  173. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.528546: AP-REQ ticket: ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL, session key rc4-hmac/0587
  174. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.534307: Negotiated enctype based on authenticator: rc4-hmac
  175. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.537123: Initializing MEMORY:rd_req2 with default princ ola@ENSKEDE.LOCAL
  176. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.537728: Removing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:rd_req2
  177. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.539321: Storing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL in MEMORY:rd_req2
  178. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.540649: Destroying ccache MEMORY:xU5MMRt
  179. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [validate_tgt] (0x0400): TGT verified using key for [host/galaxy.enskede.local@ENSKEDE.LOCAL].
  180. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.544211: Retrieving ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:rd_req2 with result: 0/Success
  181. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.549743: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 6, enctype rc4-hmac) with result: 0/Success
  182. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.924664: Destroying ccache MEMORY:rd_req2
  183. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [become_user] (0x0200): Trying to become user [11103][11116].
  184. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_get_ccache_name_for_principal] (0x4000): Location: [KEYRING:persistent:11103]
  185. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_get_ccache_name_for_principal] (0x2000): krb5_cc_cache_match failed: [-1765328243][Can't find client principal ola@ENSKEDE.LOCAL in cache collection]
  186. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [create_ccache] (0x4000): Initializing ccache of type [KEYRING]
  187. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [k5c_send_data] (0x0200): Received error code 0
  188. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [pack_response_packet] (0x2000): response packet size: [130]
  189. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [k5c_send_data] (0x4000): Response sent.
  190. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [main] (0x0400): krb5_child completed successfully
  191. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][3][36].
  192. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][-1073741822][18].
  193. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][-1073741823][32].
  194. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): TGT times are [1429034896][1429034895][1429070896][1429639695].
  195. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][6][8].
  196. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_krb5_check_ccache_princ] (0x2000): Searching for [ola@ENSKEDE.LOCAL] in cache of type [KEYRING]
  197. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_mod_ccname] (0x4000): Save ccname [KEYRING:persistent:11103] for user [ola].
  198. (Tue Apr 14 20:08:22 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbLastPwdChange is not available for [ola].
  199. (Tue Apr 14 20:08:22 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbPasswordExpiration is not available for [ola].
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
Top