API tools faq
paste
Advertisement
OlaNys

Untitled

OlaNys
Apr 14th, 2015
320
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 31.31 KB | None | 0 0
raw download clone embed print report
  1. [root@galaxy sssd]# /usr/sbin/sssd -d9 -i 2>&1 | grep krb
  2. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_keytab has no value
  3. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
  4. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_keytab has no value
  5. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_init_creds is TRUE
  6. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_server has no value
  7. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value
  8. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
  9. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_canonicalize is FALSE
  10. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
  11. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
  12. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_get_map] (0x0400): Option ldap_user_krb_last_pwd_change has no value
  13. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_get_map] (0x0400): Option ldap_user_krb_password_expiration has no value
  14. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_set_ad_id_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
  15. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_server has no value
  16. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_server has no value
  17. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_realm has no value
  18. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_ccachedir has value /tmp
  19. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_ccname_template has no value
  20. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_auth_timeout has value 6
  21. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_keytab has value /etc/krb5.keytab
  22. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_validate is TRUE
  23. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_kpasswd has no value
  24. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_backup_kpasswd has no value
  25. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_store_password_if_offline is FALSE
  26. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_renewable_lifetime has no value
  27. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_lifetime has no value
  28. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_renew_interval has no value
  29. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_fast has no value
  30. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_fast_principal has no value
  31. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_canonicalize is FALSE
  32. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_enterprise_principal is TRUE
  33. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_get_options] (0x0400): Option krb5_use_kdcinfo is TRUE
  34. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_server set to (null)
  35. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
  36. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_get_auth_options] (0x0100): Option krb5_use_kdcinfo set to true
  37. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_keytab has no value
  38. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has value ENSKEDE.LOCAL
  39. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_write_domain_mappings] (0x0200): Mapping file for domain [ENSKEDE.LOCAL] is [/var/lib/sss/pubconf/krb5.include.d/domain_realm_ENSKEDE_LOCAL]
  40. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_keytab has no value
  41. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value
  42. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_keytab has no value
  43. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_init_creds is TRUE
  44. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_server has no value
  45. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_backup_server has no value
  46. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_realm has no value
  47. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_canonicalize is FALSE
  48. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option krb5_use_kdcinfo is TRUE
  49. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [dp_copy_options_ex] (0x0400): Option ldap_krb5_ticket_lifetime has value 86400
  50. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_last_pwd_change has no value
  51. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_copy_map] (0x0400): Option ldap_user_krb_password_expiration has no value
  52. (Tue Apr 14 20:08:07 2015) [sssd[be[ENSKEDE.LOCAL]]] [ad_set_ad_id_options] (0x0100): Option krb5_realm set to ENSKEDE.LOCAL
  53. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.439719: Getting initial credentials for GALAXY$@ENSKEDE.LOCAL
  54. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.444884: Looked up etypes in keytab: des-cbc-crc, des, des-cbc-crc, aes128-cts, aes256-cts, rc4-hmac
  55. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.447026: Sending request (203 bytes) to ENSKEDE.LOCAL
  56. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.453207: Sending initial UDP request to dgram 10.77.20.100:88
  57. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.467578: Received answer from dgram 10.77.20.100:88
  58. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.471742: Response was from master KDC
  59. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.472732: Received error from KDC: -1765328359/Additional pre-authentication required
  60. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.475648: Processing preauth types: 16, 15, 19, 2
  61. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.476509: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
  62. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.479223: Retrieving GALAXY$@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success
  63. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.481275: AS key obtained for encrypted timestamp: aes256-cts/9498
  64. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.483600: Encrypted timestamp (for 1429034888.482438): plain 301AA011180F32303135303431343138303830385AA1050203075C86, encrypted 68208E60C3677BD7C460BED2785F7726A5BD44FCBC96425493F5EF7923DA652958119D1A0DE31405959C8E72E881DC6955FF32D05CBF3266
  65. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.484415: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
  66. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.486133: Produced preauth for next request: 2
  67. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.486734: Sending request (283 bytes) to ENSKEDE.LOCAL
  68. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.490177: Sending initial UDP request to dgram 10.77.20.100:88
  69. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.507608: Received answer from dgram 10.77.20.100:88
  70. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.511214: Response was from master KDC
  71. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.513406: Processing preauth types: 19
  72. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.514181: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
  73. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.514570: Produced preauth for next request: (empty)
  74. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.516242: AS key determined by preauth: aes256-cts/9498
  75. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.518600: Decrypted AS reply; session key is: rc4-hmac/78A4
  76. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.519587: FAST negotiation: unavailable
  77. (Tue Apr 14 20:08:08 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034888.522677: Initializing FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_cTMEpU with default princ GALAXY$@ENSKEDE.LOCAL
  78. (Tue Apr 14 20:08:10 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034890.768968: Removing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_cTMEpU
  79. (Tue Apr 14 20:08:10 2015) [[sssd[ldap_child[25999]]]] [sss_child_krb5_trace_cb] (0x4000): [25999] 1429034890.771593: Storing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_cTMEpU
  80. (Tue Apr 14 20:08:10 2015) [[sssd[ldap_child[25999]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [41] msg [FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL]
  81. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.650248: Getting initial credentials for GALAXY$@ENSKEDE.LOCAL
  82. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.655382: Looked up etypes in keytab: des-cbc-crc, des, des-cbc-crc, aes128-cts, aes256-cts, rc4-hmac
  83. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.659017: Sending request (203 bytes) to ENSKEDE.LOCAL
  84. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.664338: Sending initial UDP request to dgram 10.77.20.100:88
  85. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.675939: Received answer from dgram 10.77.20.100:88
  86. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.678163: Response was from master KDC
  87. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.679396: Received error from KDC: -1765328359/Additional pre-authentication required
  88. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.681453: Processing preauth types: 16, 15, 19, 2
  89. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.682224: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
  90. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.684743: Retrieving GALAXY$@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success
  91. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.686320: AS key obtained for encrypted timestamp: aes256-cts/9498
  92. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.688124: Encrypted timestamp (for 1429034891.687127): plain 301AA011180F32303135303431343138303831315AA10502030A7C17, encrypted ABDC2B841462963920B499E0FECF6C6E13A05C984C195BC804EBBD4A6F350753202D6583F9C19F5253184556C781588BD67299AA68E96D1E
  93. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.689276: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
  94. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.690302: Produced preauth for next request: 2
  95. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.694184: Sending request (283 bytes) to ENSKEDE.LOCAL
  96. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.696374: Sending initial UDP request to dgram 10.77.20.100:88
  97. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.712591: Received answer from dgram 10.77.20.100:88
  98. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.717733: Response was from master KDC
  99. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.724102: Processing preauth types: 19
  100. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.725741: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALhostgalaxy.enskede.local", params ""
  101. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.727023: Produced preauth for next request: (empty)
  102. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.727701: AS key determined by preauth: aes256-cts/9498
  103. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.733214: Decrypted AS reply; session key is: rc4-hmac/5C11
  104. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.734022: FAST negotiation: unavailable
  105. (Tue Apr 14 20:08:11 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034891.737475: Initializing FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_mrjUbd with default princ GALAXY$@ENSKEDE.LOCAL
  106. (Tue Apr 14 20:08:14 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034894.200378: Removing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_mrjUbd
  107. (Tue Apr 14 20:08:14 2015) [[sssd[ldap_child[26003]]]] [sss_child_krb5_trace_cb] (0x4000): [26003] 1429034894.201366: Storing GALAXY$@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL_mrjUbd
  108. (Tue Apr 14 20:08:14 2015) [[sssd[ldap_child[26003]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [41] msg [FILE:/var/lib/sss/db/ccache_ENSKEDE.LOCAL]
  109. (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbLastPwdChange is not available for [ola].
  110. (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbPasswordExpiration is not available for [ola].
  111. (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_pam_handler] (0x1000): Wait queue of user [ola] is empty, running request immediately.
  112. (Tue Apr 14 20:08:14 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired.
  113. (Tue Apr 14 20:08:15 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_auth_send] (0x4000): Ccache_file is [KEYRING:persistent:11103] and is active and TGT is valid.
  114. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [main] (0x0400): krb5_child started.
  115. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [unpack_buffer] (0x1000): total buffer size: [117]
  116. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [unpack_buffer] (0x0100): cmd [241] uid [11103] gid [11116] validate [true] enterprise principal [true] offline [false] UPN [ola@ENSKEDE.LOCAL]
  117. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:11103] keytab: [/etc/krb5.keytab]
  118. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment.
  119. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment.
  120. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true]
  121. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [k5c_setup] (0x0100): Not using FAST.
  122. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [main] (0x0400): Will perform online auth
  123. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [tgt_req_child] (0x1000): Attempting to get a TGT
  124. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [ENSKEDE.LOCAL]
  125. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.925100: Getting initial credentials for ola\@ENSKEDE.LOCAL@ENSKEDE.LOCAL
  126. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.930257: Sending request (213 bytes) to ENSKEDE.LOCAL
  127. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.939730: Sending initial UDP request to dgram 10.77.20.100:88
  128. (Tue Apr 14 20:08:15 2015) [sssd[pam]] [client_recv] (0x0200): (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.975251: Received answer from dgram 10.77.20.100:88
  129. (Tue Apr 14 20:08:15 2015) [sssd[pam]] [client_destructor] (0x2000): (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): Terminated client [0xdd1360][17]
  130. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.982243: Received error from KDC: -1765328359/Additional pre-authentication required
  131. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.983730: Processing preauth types: 16, 15, 19, 2
  132. (Tue Apr 14 20:08:15 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034895.987446: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALola", params ""
  133. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.244495: AS key obtained for encrypted timestamp: aes256-cts/3237
  134. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.247927: Encrypted timestamp (for 1429034896.245407): plain 301AA011180F32303135303431343138303831365AA105020303BE9F, encrypted C004FC346E437C7D21D75A6DB2A95F2C1A57A784B7E16CC72D0D3C634F4818A9AB3B2F39093DBA0C1309A46BBD04725F711ECF5F9080C95E
  135. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.249985: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
  136. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.251530: Produced preauth for next request: 2
  137. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.252350: Sending request (293 bytes) to ENSKEDE.LOCAL
  138. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.401044: Sending initial UDP request to dgram 10.77.20.100:88
  139. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.421643: Received answer from dgram 10.77.20.100:88
  140. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.426577: Response was from master KDC
  141. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.429459: Processing preauth types: 19
  142. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.430746: Selected etype info: etype aes256-cts, salt "ENSKEDE.LOCALola", params ""
  143. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.431344: Produced preauth for next request: (empty)
  144. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.431733: AS key determined by preauth: aes256-cts/3237
  145. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.435585: Decrypted AS reply; session key is: rc4-hmac/6C40
  146. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.436234: FAST negotiation: unavailable
  147. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_krb5_expire_callback_func] (0x2000): exp_time: [707474389]
  148. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [validate_tgt] (0x2000): Found keytab entry with the realm of the credential.
  149. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.447079: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success
  150. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.449213: Resolving unique ccache of type MEMORY
  151. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.451556: Initializing MEMORY:xU5MMRt with default princ ola@ENSKEDE.LOCAL
  152. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.452447: Removing ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from MEMORY:xU5MMRt
  153. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.454574: Storing ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL in MEMORY:xU5MMRt
  154. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.455682: Getting credentials ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL using ccache MEMORY:xU5MMRt
  155. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.463570: Retrieving ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:xU5MMRt with result: -1765328243/Matching credential not found
  156. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.466724: Retrieving ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL from MEMORY:xU5MMRt with result: 0/Success
  157. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.467536: Found cached TGT for service realm: ola@ENSKEDE.LOCAL -> krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL
  158. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.469575: Requesting tickets for host/galaxy.enskede.local@ENSKEDE.LOCAL, referrals on
  159. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.473374: Generated subkey for TGS request: rc4-hmac/2C93
  160. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.474225: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac
  161. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.478737: Sending request (1394 bytes) to ENSKEDE.LOCAL
  162. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.482141: Sending initial UDP request to dgram 10.77.20.100:88
  163. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.500458: Received answer from dgram 10.77.20.100:88
  164. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.507024: Response was from master KDC
  165. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.510643: TGS reply is for ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL with session key rc4-hmac/0587
  166. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.513534: TGS request result: 0/Success
  167. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.514264: Received creds for desired service host/galaxy.enskede.local@ENSKEDE.LOCAL
  168. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.516223: Removing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:xU5MMRt
  169. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.517072: Storing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL in MEMORY:xU5MMRt
  170. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.521415: Creating authenticator for ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL, seqnum 0, subkey (null, session key rc4-hmac/0587
  171. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.525701: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 6, enctype rc4-hmac) with result: 0/Success
  172. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.527902: Decrypted AP-REQ with specified server principal host/galaxy.enskede.local@ENSKEDE.LOCAL: rc4-hmac/8257
  173. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.528546: AP-REQ ticket: ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL, session key rc4-hmac/0587
  174. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.534307: Negotiated enctype based on authenticator: rc4-hmac
  175. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.537123: Initializing MEMORY:rd_req2 with default princ ola@ENSKEDE.LOCAL
  176. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.537728: Removing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:rd_req2
  177. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.539321: Storing ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL in MEMORY:rd_req2
  178. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.540649: Destroying ccache MEMORY:xU5MMRt
  179. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [validate_tgt] (0x0400): TGT verified using key for [host/galaxy.enskede.local@ENSKEDE.LOCAL].
  180. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.544211: Retrieving ola@ENSKEDE.LOCAL -> host/galaxy.enskede.local@ENSKEDE.LOCAL from MEMORY:rd_req2 with result: 0/Success
  181. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.549743: Retrieving host/galaxy.enskede.local@ENSKEDE.LOCAL from FILE:/etc/krb5.keytab (vno 6, enctype rc4-hmac) with result: 0/Success
  182. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_child_krb5_trace_cb] (0x4000): [26011] 1429034896.924664: Destroying ccache MEMORY:rd_req2
  183. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [become_user] (0x0200): Trying to become user [11103][11116].
  184. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_get_ccache_name_for_principal] (0x4000): Location: [KEYRING:persistent:11103]
  185. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [sss_get_ccache_name_for_principal] (0x2000): krb5_cc_cache_match failed: [-1765328243][Can't find client principal ola@ENSKEDE.LOCAL in cache collection]
  186. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [create_ccache] (0x4000): Initializing ccache of type [KEYRING]
  187. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [k5c_send_data] (0x0200): Received error code 0
  188. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [pack_response_packet] (0x2000): response packet size: [130]
  189. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [k5c_send_data] (0x4000): Response sent.
  190. (Tue Apr 14 20:08:16 2015) [[sssd[krb5_child[26011]]]] [main] (0x0400): krb5_child completed successfully
  191. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][3][36].
  192. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][-1073741822][18].
  193. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][-1073741823][32].
  194. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): TGT times are [1429034896][1429034895][1429070896][1429639695].
  195. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [parse_krb5_child_response] (0x1000): child response [0][6][8].
  196. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [sss_krb5_check_ccache_princ] (0x2000): Searching for [ola@ENSKEDE.LOCAL] in cache of type [KEYRING]
  197. (Tue Apr 14 20:08:16 2015) [sssd[be[ENSKEDE.LOCAL]]] [krb5_mod_ccname] (0x4000): Save ccname [KEYRING:persistent:11103] for user [ola].
  198. (Tue Apr 14 20:08:22 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbLastPwdChange is not available for [ola].
  199. (Tue Apr 14 20:08:22 2015) [sssd[be[ENSKEDE.LOCAL]]] [sdap_attrs_add_ldap_attr] (0x2000): krbPasswordExpiration is not available for [ola].
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!