Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [root@galaxy sssd]# /usr/sbin/sssd -d9 -i 2>&1 | grep krb
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_keytab has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_keytab has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_init_creds is TRUE
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_server has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_canonicalize is FALSE
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_get_map] (0x0400): Option ldap_user_krb_last_pwd_change has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_get_map] (0x0400): Option ldap_user_krb_password_expiration has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_set_ad_id_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_server has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_ccachedir has value /tmp
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_ccname_template has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_auth_timeout has value 6
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_keytab has value /etc/krb5.keytab
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_validate is TRUE
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_kpasswd has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_kpasswd has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_store_password_if_offline is FALSE
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_renewable_lifetime has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_lifetime has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_renew_interval has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_fast has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_fast_principal has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_canonicalize is FALSE
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_enterprise_principal is TRUE
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_server set to (null)
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_use_kdcinfo set to true
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_keytab has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has value ENSKEDE.LOCAL
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_write_domain_mappings] (0x0200): Mapping file for domain [ENSKEDE.LOCAL] is [/var/lib/sss/pubconf/krb5.include.d/domain_realm_ENSKEDE_LOCAL]
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_keytab has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_keytab has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_init_creds is TRUE
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_server has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_backup_server has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_canonicalize is FALSE
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_use_kdcinfo is TRUE
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_last_pwd_change has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_password_expiration has no value
- (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_set_ad_id_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.439719: Getting initial credentials for GALAXY$@ENSKEDE.LOCAL
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.444884: Looked up etypes in keytab: des-cbc-crc, des, des-cbc-crc, aes128-cts, aes256-cts, rc4-hmac
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.447026: Sending request (203 bytes) to ENSKEDE.LOCAL
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.453207: Sending initial UDP request to dgram 10.77.20.100:88
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.467578: Received answer from dgram 10.77.20.100:88
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.471742: Response was from master KDC
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.472732: Received error from KDC: -1765328359/Additional pre-authentication required
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.475648: Processing preauth types: 16, 15, 19, 2
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.476509: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.479223: Retrieving GALAXY$@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.481275: AS key obtained for encrypted timestamp: aes256-cts/9498
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.483600: Encrypted timestamp (for 1429034888.482438): plain 301AA011180F32303135303431343138303830385AA1050203075C86, encrypted 68208E60C3677BD7C460BED2785F7726A5BD44FCBC96425493F5EF7923DA652958119D1A0DE31405959C8E72E881DC6955FF32D05CBF3266
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.484415: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.486133: Produced preauth for next request: 2
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.486734: Sending request (283 bytes) to ENSKEDE.LOCAL
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.490177: Sending initial UDP request to dgram 10.77.20.100:88
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.507608: Received answer from dgram 10.77.20.100:88
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.511214: Response was from master KDC
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.513406: Processing preauth types: 19
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.514181: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.514570: Produced preauth for next request: (empty)
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.516242: AS key determined by preauth: aes256-cts/9498
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.518600: Decrypted AS reply; session key is: rc4-hmac/78A4
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.519587: FAST negotiation: unavailable
- (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.522677: Initializing FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_cTMEpU with default princ GALAXY$@ENSKEDE.LOCAL
- (Tue Apr 14 20:08:10 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034890.768968: Removing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_cTMEpU
- (Tue Apr 14 20:08:10 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034890.771593: Storing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_cTMEpU
- (Tue Apr 14 20:08:10 2015) [[sssd[ldap_child[25999]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [41] msg [FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL]
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.650248: Getting initial credentials for GALAXY$@ENSKEDE.LOCAL
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.655382: Looked up etypes in keytab: des-cbc-crc, des, des-cbc-crc, aes128-cts, aes256-cts, rc4-hmac
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.659017: Sending request (203 bytes) to ENSKEDE.LOCAL
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.664338: Sending initial UDP request to dgram 10.77.20.100:88
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.675939: Received answer from dgram 10.77.20.100:88
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.678163: Response was from master KDC
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.679396: Received error from KDC: -1765328359/Additional pre-authentication required
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.681453: Processing preauth types: 16, 15, 19, 2
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.682224: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.684743: Retrieving GALAXY$@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.686320: AS key obtained for encrypted timestamp: aes256-cts/9498
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.688124: Encrypted timestamp (for 1429034891.687127): plain 301AA011180F32303135303431343138303831315AA10502030A7C17, encrypted ABDC2B841462963920B499E0FECF6C6E13A05C984C195BC804EBBD4A6F350753202D6583F9C19F5253184556C781588BD67299AA68E96D1E
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.689276: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.690302: Produced preauth for next request: 2
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.694184: Sending request (283 bytes) to ENSKEDE.LOCAL
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.696374: Sending initial UDP request to dgram 10.77.20.100:88
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.712591: Received answer from dgram 10.77.20.100:88
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.717733: Response was from master KDC
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.724102: Processing preauth types: 19
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.725741: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.727023: Produced preauth for next request: (empty)
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.727701: AS key determined by preauth: aes256-cts/9498
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.733214: Decrypted AS reply; session key is: rc4-hmac/5C11
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.734022: FAST negotiation: unavailable
- (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.737475: Initializing FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_mrjUbd with default princ GALAXY$@ENSKEDE.LOCAL
- (Tue Apr 14 20:08:14 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034894.200378: Removing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_mrjUbd
- (Tue Apr 14 20:08:14 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034894.201366: Storing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_mrjUbd
- (Tue Apr 14 20:08:14 2015) [[sssd[ldap_child[26003]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [41] msg [FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL]
- (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbLastPwdChange is not available for [ola].
- (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbPasswordExpiration is not available for [ola].
- (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_pam_handler] (0x1000): Wait queue of user [ola] is empty, running request immediately.
- (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired.
- (Tue Apr 14 20:08:15 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_auth_send] (0x4000): Ccache_file is [KEYRING:persistent:11103] and is active and TGT is valid.
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [main] (0x0400): krb5_child started.
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [unpack_buffer] (0x1000): total buffer size: [117]
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [unpack_buffer] (0x0100): cmd [241] uid [11103] gid [11116] validate [true] enterprise principal [true] offline [false] UPN [ola@ENSKEDE.LOCAL]
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:11103] keytab: [/etc/krb5.keytab]
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment.
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment.
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true]
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [k5c_setup] (0x0100): Not using FAST.
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [main] (0x0400): Will perform online auth
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [tgt_req_child] (0x1000): Attempting to get a TGT
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [ENSKEDE.LOCAL]
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.925100: Getting initial credentials for ola\@ENSKEDE.LOCAL@ENSKEDE.LOCAL
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.930257: Sending request (213 bytes) to ENSKEDE.LOCAL
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.939730: Sending initial UDP request to dgram 10.77.20.100:88
- (Tue Apr 14 20:08:15 2015) [sssd[pam]] [client_recv] (0x0200): (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.975251: Received answer from dgram 10.77.20.100:88
- (Tue Apr 14 20:08:15 2015) [sssd[pam]] [client_destructor] (0x2000): (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): Terminated client [0xdd1360][17]
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.982243: Received error from KDC: -1765328359/Additional pre-authentication required
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.983730: Processing preauth types: 16, 15, 19, 2
- (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.987446: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALola", params ""
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.244495: AS key obtained for encrypted timestamp: aes256-cts/3237
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.247927: Encrypted timestamp (for 1429034896.245407): plain 301AA011180F32303135303431343138303831365AA105020303BE9F, encrypted C004FC346E437C7D21D75A6DB2A95F2C1A57A784B7E16CC72D0D3C634F4818A9AB3B2F39093DBA0C1309A46BBD04725F711ECF5F9080C95E
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.249985: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.251530: Produced preauth for next request: 2
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.252350: Sending request (293 bytes) to ENSKEDE.LOCAL
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.401044: Sending initial UDP request to dgram 10.77.20.100:88
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.421643: Received answer from dgram 10.77.20.100:88
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.426577: Response was from master KDC
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.429459: Processing preauth types: 19
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.430746: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALola", params ""
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.431344: Produced preauth for next request: (empty)
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.431733: AS key determined by preauth: aes256-cts/3237
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.435585: Decrypted AS reply; session key is: rc4-hmac/6C40
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.436234: FAST negotiation: unavailable
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_krb5_expire_callback_func] (0x2000): exp_time: [707474389]
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [validate_tgt] (0x2000): Found keytab entry with the realm of the credential.
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.447079: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.449213: Resolving unique ccache of type MEMORY
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.451556: Initializing MEMORY:xU5MMRt with default princ ola@ENSKEDE.LOCAL
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.452447: Removing ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from MEMORY:xU5MMRt
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.454574: Storing ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in MEMORY:xU5MMRt
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.455682: Getting credentials ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL using ccache MEMORY:xU5MMRt
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.463570: Retrieving ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:xU5MMRt with result: -1765328243/Matching credential not found
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.466724: Retrieving ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from MEMORY:xU5MMRt with result: 0/Success
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.467536: Found cached TGT for service realm: ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.469575: Requesting tickets for host/galaxy.enskede.local@ENSKEDE.LOCAL, referrals on
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.473374: Generated subkey for TGS request: rc4-hmac/2C93
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.474225: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.478737: Sending request (1394 bytes) to ENSKEDE.LOCAL
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.482141: Sending initial UDP request to dgram 10.77.20.100:88
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.500458: Received answer from dgram 10.77.20.100:88
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.507024: Response was from master KDC
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.510643: TGS reply is for ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL with session key rc4-hmac/0587
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.513534: TGS request result: 0/Success
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.514264: Received creds for desired service host/galaxy.enskede.local@ENSKEDE.LOCAL
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.516223: Removing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:xU5MMRt
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.517072: Storing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL in MEMORY:xU5MMRt
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.521415: Creating authenticator for ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL, seqnum 0, subkey (null, session key rc4-hmac/0587
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.525701: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 6, enctype rc4-hmac) with result: 0/Success
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.527902: Decrypted AP-REQ with specified server principal host/galaxy.enskede.local@ENSKEDE.LOCAL: rc4-hmac/8257
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.528546: AP-REQ ticket: ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL, session key rc4-hmac/0587
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.534307: Negotiated enctype based on authenticator: rc4-hmac
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.537123: Initializing MEMORY:rd_req2 with default princ ola@ENSKEDE.LOCAL
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.537728: Removing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:rd_req2
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.539321: Storing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL in MEMORY:rd_req2
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.540649: Destroying ccache MEMORY:xU5MMRt
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [validate_tgt] (0x0400): TGT verified using key for [host/galaxy.enskede.local@ENSKEDE.LOCAL].
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.544211: Retrieving ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:rd_req2 with result: 0/Success
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.549743: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 6, enctype rc4-hmac) with result: 0/Success
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.924664: Destroying ccache MEMORY:rd_req2
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [become_user] (0x0200): Trying to become user [11103][11116].
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_get_ccache_name_for_principal] (0x4000): Location: [KEYRING:persistent:11103]
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_get_ccache_name_for_principal] (0x2000): krb5_cc_cache_match failed: [-1765328243][Can't find client principal ola@ENSKEDE.LOCAL in cache collection]
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [create_ccache] (0x4000): Initializing ccache of type [KEYRING]
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [k5c_send_data] (0x0200): Received error code 0
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [pack_response_packet] (0x2000): response packet size: [130]
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [k5c_send_data] (0x4000): Response sent.
- (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [main] (0x0400): krb5_child completed successfully
- (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][3][36].
- (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][-1073741822][18].
- (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][-1073741823][32].
- (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): TGT times are [1429034896][1429034895][1429070896][1429639695].
- (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][6][8].
- (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_krb5_check_ccache_princ] (0x2000): Searching for [ola@ENSKEDE.LOCAL] in cache of type [KEYRING]
- (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_mod_ccname] (0x4000): Save ccname [KEYRING:persistent:11103] for user [ola].
- (Tue Apr 14 20:08:22 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbLastPwdChange is not available for [ola].
- (Tue Apr 14 20:08:22 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbPasswordExpiration is not available for [ola].
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement