API tools faq
paste
Advertisement
Guest User

krb5_child

a guest
May 30th, 2013
309
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.18 KB | None | 0 0
raw download clone embed print report
  1. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [main] (0x0400): krb5_child started.
  2. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [unpack_buffer] (0x1000): total buffer size: [139]
  3. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [unpack_buffer] (0x0100): cmd [247] uid [10004] gid [10000] validate [true] offline [false] UPN [bryan.harris.adm@MY.GREAT.DOMAIN]
  4. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_10004_XXXXXX] keytab: [/etc/krb5.keytab]
  5. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [krb5_child_setup] (0x0400): Will perform password change
  6. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [krb5_child_setup] (0x0100): SSSD_KRB5_RENEWABLE_LIFETIME is set to [7d]
  7. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [krb5_child_setup] (0x0100): SSSD_KRB5_LIFETIME is set to [24h]
  8. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [krb5_set_canonicalize] (0x0100): SSSD_KRB5_CANONICALIZE is set to [false]
  9. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [krb5_child_setup] (0x0100): SSSD_KRB5_LIFETIME is set to [24h]
  10. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [find_principal_in_keytab] (0x4000): Trying to find principal (null)@MY.GREAT.DOMAIN in keytab.
  11. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [match_principal] (0x1000): Principal matched to the sample ((null)@MY.GREAT.DOMAIN).
  12. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.336802: Retrieving host/linux-server.my.great.domain@MY.GREAT.DOMAIN -> krbtgt/MY.GREAT.DOMAIN@MY.GREAT.DOMAIN from FILE:
  13. /var/lib/sss/db/fast_ccache_MY.GREAT.DOMAIN with result: -1765328189/Credentials cache file '/var/lib/sss/db/fast_ccache_MY.GREAT.DOMAIN' not found
  14. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [get_tgt_times] (0x0020): krb5_cc_retrieve_cred failed.
  15. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [krb5_set_canonicalize] (0x0100): SSSD_KRB5_CANONICALIZE is set to [false]
  16. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.336833: Getting initial credentials for host/linux-server.my.great.domain@MY.GREAT.DOMAIN
  17. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.336919: Looked up etypes in keytab: des-cbc-crc, des, des-cbc-crc, rc4-hmac, aes256-cts, aes128-cts
  18. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.336951: Sending request (238 bytes) to MY.GREAT.DOMAIN
  19. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.337118: Sending initial UDP request to dgram 10.0.0.211:88
  20. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.337935: Received answer from dgram 10.0.0.211:88
  21. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.337994: Response was not from master KDC
  22. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.338015: Received error from KDC: -1765328359/Additional pre-authentication required
  23. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.338043: Processing preauth types: 16, 15, 19, 2
  24. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.338059: Selected etype info: etype aes256-cts, salt "MY.GREAT.DOMAINhostlinux-server.my.great.domain", params ""
  25. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.338095: Retrieving host/linux-server.my.great.domain@MY.GREAT.DOMAIN from FILE:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success
  26. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.338115: AS key obtained for encrypted timestamp: aes256-cts/EC9E
  27. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.338158: Encrypted timestamp (for 1369932589.338129): plain 301AA011180F32303133303533303136343934395AA10502030528D1, encrypted A7950204A89DEB7FDD33A951B12A82B53696F6DFBDE79036CB25093CBBFF8DB50F8B5F030186D80C5390D29A4F9DE915E608DA2F8DE38451
  28. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.338174: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
  29. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.338184: Produced preauth for next request: 2
  30. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.338199: Sending request (318 bytes) to MY.GREAT.DOMAIN
  31. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.338253: Sending initial UDP request to dgram 10.0.0.211:88
  32. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.339186: Received answer from dgram 10.0.0.211:88
  33. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.339239: Response was not from master KDC
  34. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.339257: Received error from KDC: -1765328332/Response too big for UDP, retry with TCP
  35. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.339267: Request or response is too big for UDP; retrying with TCP
  36. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.339276: Sending request (318 bytes) to MY.GREAT.DOMAIN (tcp only)
  37. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.339318: Initiating TCP connection to stream 10.0.0.211:88
  38. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.339665: Sending TCP request to stream 10.0.0.211:88
  39. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.340333: Received answer from stream 10.0.0.211:88
  40. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.340399: Response was not from master KDC
  41. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.340426: Processing preauth types: 19
  42. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.340438: Selected etype info: etype aes256-cts, salt "MY.GREAT.DOMAINhostlinux-server.my.great.domain", params ""
  43. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.340447: Produced preauth for next request: (empty)
  44. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.340482: AS key determined by preauth: aes256-cts/EC9E
  45. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.340523: Decrypted AS reply; session key is: aes256-cts/F681
  46. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.340535: FAST negotiation: unavailable
  47. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [create_ccache_file] (0x0200): Creating ccache at [FILE:/var/lib/sss/db/fast_ccache_MY.GREAT.DOMAIN]
  48. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.340809: Initializing FILE:/var/lib/sss/db/.krb5cc_dummy_uvZlXC with default princ host/linux-server.my.great.domain@MY.GREAT.DOMAIN
  49. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.459710: Removing host/linux-server.my.great.domain@MY.GREAT.DOMAIN -> krbtgt/MY.GREAT.DOMAIN@MY.GREAT.DOMAIN from FILE:/var/lib/sss/db/.krb5cc_dummy_uvZlXC
  50. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.459746: Storing host/linux-server.my.great.domain@MY.GREAT.DOMAIN -> krbtgt/MY.GREAT.DOMAIN@MY.GREAT.DOMAIN in FILE:/var/lib/sss/db/.krb5cc_dummy_uvZlXC
  51. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [create_ccache_file] (0x1000): Created ccache file: [FILE:/var/lib/sss/db/fast_ccache_MY.GREAT.DOMAIN]
  52. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [changepw_child] (0x1000): Password change operation
  53. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [changepw_child] (0x0400): Attempting kinit for realm [MY.GREAT.DOMAIN]
  54. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.460572: Getting initial credentials for bryan.harris.adm@MY.GREAT.DOMAIN
  55. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.460608: Setting initial creds service to kadmin/changepw
  56. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.460637: Sending request (192 bytes) to MY.GREAT.DOMAIN
  57. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.460720: Sending initial UDP request to dgram 10.0.0.211:88
  58. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.461537: Received answer from dgram 10.0.0.211:88
  59. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.461594: Response was not from master KDC
  60. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.461615: Received error from KDC: -1765328359/Additional pre-authentication required
  61. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.461637: Processing preauth types: 16, 15, 19, 2
  62. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.461651: Selected etype info: etype aes256-cts, salt "MY.GREAT.DOMAINbryan.harris.adm", params ""
  63. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.469990: AS key obtained for encrypted timestamp: aes256-cts/232A
  64. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.470037: Encrypted timestamp (for 1369932624.470010): plain 301AA011180F32303133303533303136353032345AA1050203072BFA, encrypted F52AC772D62ADA51819D1B6EF756D4429004817B044017CAEA484DD8EDEDC65EFF1840796366BBCBE8EB5FBEA05E06D0027CC1E4FCD75E6F
  65. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.470053: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
  66. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.470063: Produced preauth for next request: 2
  67. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.470078: Sending request (272 bytes) to MY.GREAT.DOMAIN
  68. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.470134: Sending initial UDP request to dgram 10.0.0.211:88
  69. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.471136: Received answer from dgram 10.0.0.211:88
  70. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.471190: Response was not from master KDC
  71. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.471209: Received error from KDC: -1765328332/Response too big for UDP, retry with TCP
  72. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.471225: Request or response is too big for UDP; retrying with TCP
  73. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.471235: Sending request (272 bytes) to MY.GREAT.DOMAIN (tcp only)
  74. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.471276: Initiating TCP connection to stream 10.0.0.211:88
  75. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.471641: Sending TCP request to stream 10.0.0.211:88
  76. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.472531: Received answer from stream 10.0.0.211:88
  77. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.472609: Response was not from master KDC
  78. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.472633: Processing preauth types: 19
  79. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.472646: Selected etype info: etype aes256-cts, salt "MY.GREAT.DOMAINbryan.harris.adm", params ""
  80. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.472655: Produced preauth for next request: (empty)
  81. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.472666: AS key determined by preauth: aes256-cts/232A
  82. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.472700: Decrypted AS reply; session key is: aes256-cts/DD8D
  83. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sss_child_krb5_trace_cb] (0x4000): [20125] 1369932589.472711: FAST negotiation: unavailable
  84. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [changepw_child] (0x1000): Initial authentication for change password operation successful.
  85. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [prepare_response_message] (0x0400): Building response for result [0]
  86. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [pack_response_packet] (0x2000): response packet size: [4]
  87. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [sendresponse] (0x4000): Response sent.
  88. (Thu May 30 12:49:49 2013) [[sssd[krb5_child[20125]]]] [main] (0x0400): krb5_child completed successfully
  89. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [main] (0x0400): krb5_child started.
  90. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [unpack_buffer] (0x1000): total buffer size: [163]
  91. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [unpack_buffer] (0x0100): cmd [246] uid [10004] gid [10000] validate [true] offline [false] UPN [bryan.harris.adm@MY.GREAT.DOMAIN]
  92. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_10004_XXXXXX] keytab: [/etc/krb5.keytab]
  93. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [krb5_child_setup] (0x0400): Will perform password change
  94. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [krb5_child_setup] (0x0100): SSSD_KRB5_RENEWABLE_LIFETIME is set to [7d]
  95. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [krb5_child_setup] (0x0100): SSSD_KRB5_LIFETIME is set to [24h]
  96. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [krb5_set_canonicalize] (0x0100): SSSD_KRB5_CANONICALIZE is set to [false]
  97. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [krb5_child_setup] (0x0100): SSSD_KRB5_LIFETIME is set to [24h]
  98. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [find_principal_in_keytab] (0x4000): Trying to find principal (null)@MY.GREAT.DOMAIN in keytab.
  99. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [match_principal] (0x1000): Principal matched to the sample ((null)@MY.GREAT.DOMAIN).
  100. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.32276: Retrieving host/linux-server.my.great.domain@MY.GREAT.DOMAIN -> krbtgt/MY.GREAT.DOMAIN@MY.GREAT.DOMAIN from FILE:/var/lib/sss/db/fast_ccache_MY.GREAT.DOMAIN with result: 0/Success
  101. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [check_fast_ccache] (0x0200): FAST TGT is still valid.
  102. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [changepw_child] (0x1000): Password change operation
  103. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [changepw_child] (0x0400): Attempting kinit for realm [MY.GREAT.DOMAIN]
  104. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.32328: Getting initial credentials for bryan.harris.adm@MY.GREAT.DOMAIN
  105. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.32379: Setting initial creds service to kadmin/changepw
  106. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.32414: Sending request (192 bytes) to MY.GREAT.DOMAIN
  107. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.32592: Sending initial UDP request to dgram 10.0.0.211:88
  108. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.33443: Received answer from dgram 10.0.0.211:88
  109. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.33515: Response was not from master KDC
  110. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.33536: Received error from KDC: -1765328359/Additional pre-authentication required
  111. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.33562: Processing preauth types: 16, 15, 19, 2
  112. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.33578: Selected etype info: etype aes256-cts, salt "MY.GREAT.DOMAINbryan.harris.adm", params ""
  113. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.41918: AS key obtained for encrypted timestamp: aes256-cts/232A
  114. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.41967: Encrypted timestamp (for 1369932637.41938): plain 301AA011180F32303133303533303136353033375AA105020300A3D2, encrypted B46E87F1E1152507FFECE53E41ADBA69142C2E3EDDA51162E409C4201A1D2568972D167E41F5456E7E5EA433366D53BC2C8929EF0F26C307
  115. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.41984: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
  116. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.41994: Produced preauth for next request: 2
  117. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.42010: Sending request (272 bytes) to MY.GREAT.DOMAIN
  118. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.42065: Sending initial UDP request to dgram 10.0.0.211:88
  119. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.43037: Received answer from dgram 10.0.0.211:88
  120. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.43090: Response was not from master KDC
  121. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.43109: Received error from KDC: -1765328332/Response too big for UDP, retry with TCP
  122. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.43119: Request or response is too big for UDP; retrying with TCP
  123. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.43134: Sending request (272 bytes) to MY.GREAT.DOMAIN (tcp only)
  124. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.43176: Initiating TCP connection to stream 10.0.0.211:88
  125. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.43510: Sending TCP request to stream 10.0.0.211:88
  126. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.44303: Received answer from stream 10.0.0.211:88
  127. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.44369: Response was not from master KDC
  128. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.44396: Processing preauth types: 19
  129. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.44408: Selected etype info: etype aes256-cts, salt "MY.GREAT.DOMAINbryan.harris.adm", params ""
  130. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.44418: Produced preauth for next request: (empty)
  131. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.44429: AS key determined by preauth: aes256-cts/232A
  132. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.44483: Decrypted AS reply; session key is: aes256-cts/A31B
  133. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.44501: FAST negotiation: unavailable
  134. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.44549: Creating authenticator for bryan.harris.adm@MY.GREAT.DOMAIN -> kadmin/changepw@MY.GREAT.DOMAIN, seqnum 0, subkey aes256-cts/F7D3, session key aes256-cts/A31B
  135. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.44676: Sending initial UDP request to dgram 10.0.0.210:464
  136. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.46354: Received answer from dgram 10.0.0.210:464
  137. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sss_child_krb5_trace_cb] (0x4000): [20129] 1369932602.46430: Read AP-REP, time 1369932636.44562, subkey (null), seqnum 0
  138. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [changepw_child] (0x0020): krb5_change_password failed [4][Password change rejected].
  139. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [changepw_child] (0x0020): krb5_change_password failed [4][].
  140. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [prepare_response_message] (0x0400): Building response for result [-1765328324]
  141. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [pack_response_packet] (0x2000): response packet size: [55]
  142. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [sendresponse] (0x4000): Response sent.
  143. (Thu May 30 12:50:02 2013) [[sssd[krb5_child[20129]]]] [main] (0x0400): krb5_child completed successfully
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!